last executing test programs:

7m33.04115565s ago: executing program 2 (id=156):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10)
r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@tipc=@name, &(0x7f0000000100)=0x80)
close_range(r0, r1, 0x2)
accept4$netrom(r1, &(0x7f0000000140)={{0x3, @default}, [@netrom, @remote, @default, @rose, @netrom, @bcast, @default, @rose]}, &(0x7f00000001c0)=0x48, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r2, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x25}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7ff}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x8, 0x4, 0x2, 0x0, 0x1, 0x2]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffffe, 0xfffffff7}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x8000004)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000000}, 0x1)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb0, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xda}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040800}, 0x8004)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan3\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004004}, 0x4004804)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000880)=0x4, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6tnl0\x00', <r9=>0x0, 0x4, 0x8, 0xd, 0xc, 0x40, @empty, @local, 0x8000, 0x7c80, 0x5, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a80)={'gretap0\x00', &(0x7f00000009c0)={'gre0\x00', <r10=>0x0, 0x0, 0x728, 0x2, 0x710a418a, {{0x1a, 0x4, 0x0, 0x8, 0x68, 0x67, 0x0, 0x7, 0x2f, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xb, 0x3, 0x2, [{@multicast1}, {@multicast1, 0x41}, {@loopback}, {@private=0xa010100, 0x800}]}, @generic={0x89, 0x6, "8127e67b"}, @cipso={0x86, 0x24, 0x2, [{0x0, 0x12, "6155d446fbbd6885d461a07c49d1d9cc"}, {0x6, 0x6, "71871cbf"}, {0x7, 0x6, "ec850504"}]}, @end, @noop, @ra={0x94, 0x4}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c854}, 0x8801)
sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r6, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r1)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x134, r11, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x500}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4010}, 0x80)
sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x75}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4d}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048801}, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000001240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000001200)={&(0x7f0000001000)={0x1e0, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x48, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xdcbaa49fa9c9a8b2}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0x178, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6c6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0xac, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20008400}, 0x20006050)
r12 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd)
ioctl$KVM_XEN_HVM_CONFIG(r12, 0x4038ae7a, &(0x7f00000013c0)={0x7, 0xe84, &(0x7f0000001280)="60d0b7b4d65cd4df61203d288838397c3b468ecaddbdab00d1de9e147569eb48d1c0bb40428bcc49aa6d69be8100a9912374faddeea40f3b83e5a01328db233b29fa294c526166122fb1762ca823b1b0bc99731d490267e587a3d81434ee951bfb0bef095c1239cec37c5677c6eef0f462ce1be00c676f71daee69abb6db0f2c9e743e718729721021635a196e7d50eaae0dbdb219ecad27e294b3256e3c7676c15744a2356261c175f2ebd2cb7d4104cff991", &(0x7f0000001340)="f509fc332b893686ace5db8b9309ca419cab6f41068659b8cc0f1b3ca1da1bac8a35ba6af9b1b9e593962dd0f67e9816182c7dfed3fb4fb1e13186dfe928973998b5360d1e02156aae27e900558b4e9b5aa80b7f8b97bae57b4f34dfb9374078a7fd1f9d044a832b2043a2670ed9c71a", 0xb3, 0x70})
r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001440), r5)
sendmsg$NLBL_MGMT_C_LISTALL(r5, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x88000040}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x80, r13, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x1)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000001880)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001840)={&(0x7f0000001700)={0x120, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdbb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffff10b}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000080)

7m32.921397899s ago: executing program 2 (id=157):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c)
shutdown(r0, 0x1)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x2)
write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x28)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000380)=0x3)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @tick=0xffffff00, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x0, 0x1, {0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xac6}, 0x6}}}, 0x3a)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x5}, 0x8)

7m32.776311555s ago: executing program 2 (id=158):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002400048005000300010000000500030001000000050003000000000005000300050000000800020003000000686fcc023e56691a5c11294b023e9a43bb68115d6ad41df542aa7a1594affa9b094a"], 0x48}}, 0x0)

7m32.669340518s ago: executing program 2 (id=159):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28af80e, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a80001625db338ee5eebfffd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async, rerun: 32)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x200) (async, rerun: 32)
inotify_init()
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000002240)={"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"}) (async, rerun: 32)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x7) (rerun: 32)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, r3, 0x71a70000) (async)
close_range(r6, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r7 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009058502000000001009058b1e"], 0x0) (async, rerun: 32)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0)
setsockopt$inet_mreqsrc(r8, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @broadcast, @rand_addr=0x64010101}, 0xc)
r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async)
getgroups(0x2, &(0x7f0000000200)=[0x0, <r10=>0x0])
keyctl$chown(0x4, r9, 0x0, r10) (async, rerun: 32)
syz_usb_control_io$hid(r7, &(0x7f00000003c0)={0x24, &(0x7f0000000280)={0x0, 0x23, 0x68, {0x68, 0xd, "260e73a62a0351b461dda5b9a178385ccc4ff7fded10de0903d99d1a9e2ff2dc73c27ca0ec2a7b940c89c47c4cc7d5e3fab7e8adb51dbd98c3f4e352b59e8decbc14ccc057b1322fafdf49892cba2952bbd013f4f3491781961e0de4ee23c76664238cf333dc"}}, &(0x7f00000005c0)={0x0, 0x3, 0xec, @string={0xec, 0x3, "1ddd6f0873eaef240900f441f2cde7fbb969604ab98e4a70cbc30cb9060000000000000020c0223c60507fc26d4672b0d166c6d53a8bfcaa4ae02dd6abba22aabc95bee3bc9b79c7ed2fb18333fb3af0f72010493292b9970bb8b2e58c59ea0159500adf84d3cae625f5a3d0546a951543d22e8d4e1fc0f687b67b8e5a75a354fa4c3d88adc71a4d7186dfc40a775ea6acff8138255fcecb6dfdd9e8bfdf6290f698984fd3644635fef1a9a9141e0743d0bbb5544a7282fd42c9a9faa67a57db1fb3880a38ebde8c5e1661ab17bf58e825228a9c4e8a4c3d693943cf70d71447b4accf580adeb0c54e54"}}, &(0x7f0000000340)=ANY=[@ANYBLOB="00220a000000a2a4921b44100eecb1d0"], &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x4a, 0x1, {0x22, 0x725}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000400)={0x40, 0x1c, 0x6c, "7c18022441bf9dadbb046d82859dc0f68309a6c637fba58a2cfd2b19cd36b9d92baf0dbe800799bb9088f02d027c36eb27c49b5acd590e8ad71a429690ce44a8b58faaebd20cb45eca2ff4d60e2fe7921c2bea6b37805b4c550f5106d94e079d8d7cf15a17a9efbc7f26eac2"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1}, &(0x7f00000006c0)=ANY=[@ANYBLOB="20012f0000007a22e52a6a1eb6f22e88a1d775818d9d5bb2e0da5e11ed76c88bab4710ee3089ce649e82eed8e3c71019f2547653df412313a227b9e4bab9a197722bbcaf59e0f740dbe8540b5083cfa2433c8abafe409dfadcb0b98cee9f9915599c03b21469291f49d340b957234d038f1a15cb22299d807729e778ac71868630b169b9f088dc4699b6705ff9bb781ef82e649272477a6721d6ab5754a6d397a75a570190957c4ca0b4ec72b2db05710035b9bb7c66dba43874aeedd213f664c4bbce948ccbd0eca6d78fbd"], &(0x7f0000000540)={0x20, 0x3, 0x1, 0x3b}}) (rerun: 32)

7m32.340755794s ago: executing program 2 (id=163):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x181000)
fcntl$setlease(r0, 0x400, 0xf2d35e7ce30696e1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)
r3 = socket$kcm(0x10, 0x2, 0x4)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b0007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d000106b062e585e4a85dc9b1335d1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendfile(r1, r2, 0x0, 0x8000002b)

7m32.089886953s ago: executing program 2 (id=164):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) (async)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
recvmsg$can_j1939(r3, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003bc0)=""/128, 0x80}], 0x1}, 0x10000) (async)
sendmmsg$alg(r3, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4000000) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000040)) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES8], 0x10}}, 0x20000804)
r4 = socket$key(0xf, 0x3, 0x2) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x3, 0x2000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x20, r6, 0x0, 0x0, &(0x7f00000001c0)}) (async)
sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) (async)
prctl$PR_SCHED_CORE(0x4d, 0x3, 0x0, 0x0, 0x0) (async)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x4, @mcast1, 0x7, 0x3}, 0x20)

7m31.938642327s ago: executing program 32 (id=164):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) (async)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
recvmsg$can_j1939(r3, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003bc0)=""/128, 0x80}], 0x1}, 0x10000) (async)
sendmmsg$alg(r3, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4000000) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000040)) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES8], 0x10}}, 0x20000804)
r4 = socket$key(0xf, 0x3, 0x2) (async)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x3, 0x2000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000180)={0x20, r6, 0x0, 0x0, &(0x7f00000001c0)}) (async)
sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) (async)
prctl$PR_SCHED_CORE(0x4d, 0x3, 0x0, 0x0, 0x0) (async)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r7, &(0x7f0000000080)={0xa, 0x0, 0x4, @mcast1, 0x7, 0x3}, 0x20)

4m21.649450962s ago: executing program 1 (id=1147):
r0 = socket(0x200000100000011, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40880)
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f0000000380)={0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x68c6f406, 0x4020, 0x3})
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000005200011904000000000000001c"], 0x28}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r7=>0x0})
r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r8, 0x13)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000002280)=@add_del={0x2, &(0x7f0000002240)='veth0_to_batadv\x00'})
tkill(r8, 0x12)
ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f0000000400)="ab97ef96f8ac8bc27d4f7182f80cfaa166d3213f2c36702b6836cd2b7e3569ff50a4cfefbd7ea81e6281ec8528decebf9e083a34aeb97578c3dee6488a4b497289ab714fca98726a0d223e933e6ac2a9e42750cb1cd83a951966bf591ff626fc38330e8ee7d6e6b4e44a07ce482f5abeb7f3adbf0f10182819c8896e6097bdb5e3f9235ddbca87d994260f47980d0d67976084e4525977a26a717570745d06c9667acfec74d1ea719edb1ae6024ce0c51c21d28b3d5d55")
waitid(0x1, r8, 0x0, 0x8, &(0x7f0000000340))
r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r9, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=<r10=>0xffffffffffffffff)
ioctl$VIDIOC_S_EXT_CTRLS(r9, 0xc0205648, &(0x7f0000000500)={0xab4b2a0193185e0f, 0x5, 0x5a7fe79c, r10, 0x0, &(0x7f00000004c0)={0x9d0902, 0x4, '\x00', @value=0x9}})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x7, 0x6, @multicast}, 0x14)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r11, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r9, 0x800442d2, &(0x7f0000002300)={0x2, &(0x7f00000022c0)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @random}]})
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e788d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

4m21.534122461s ago: executing program 1 (id=1148):
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000280)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (rerun: 32)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) (async)
chdir(&(0x7f00000003c0)='./bus\x00')
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper}) (async)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@my=0x0, 0x1}) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (rerun: 32)
write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xffff, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0xfffffffa, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0x1a47, 0x8, 0x3, 0x8, 0x1, 0x2, 0xac00, 0x6, 0x939, 0x5, 0x9, 0x9, 0x2, 0x4, 0xfffffff7, 0x7fff, 0xf9, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2b, 0x1, 0x23], [0x1, 0x9, 0x9, 0xfffffffe, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x7, 0x9, 0x82, 0x1008, 0x1, 0x40, 0xa3, 0x8, 0x0, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc6, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x2, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x80002, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff40, 0x8b2, 0x7, 0x0, 0x101, 0x140, 0x2, 0x9, 0xb, 0x2, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0x6, 0x4, 0x8, 0x0, 0xffffff00, 0x900, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x4, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x6, 0x1f, 0x3, 0x6, 0xfffffffa, 0x2, 0x8, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x6, 0x9, 0x770a, 0x7fe, 0x0, 0xffffff81, 0x5, 0x10001, 0x461, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1001e, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x3, 0x10001, 0x80, 0x20000008]}, 0x45c) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x99) (rerun: 32)

4m21.448047404s ago: executing program 1 (id=1149):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
listen(r0, 0x2)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000b80))
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = dup(r3)
r6 = fcntl$dupfd(r2, 0x406, r4)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000080)={0x0, r5})
setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x28, 0x3, 0xcf09}, 0x10)
execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x900)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14152313260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})

4m21.345208066s ago: executing program 1 (id=1150):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
writev(r0, &(0x7f0000000280), 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe6)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffbfff, '\x00', @p_u8=&(0x7f0000000040)}})
r7 = gettid()
process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1)
setreuid(r4, r4)
ioprio_set$uid(0x0, r4, 0x6000)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000040)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000000c0)={0x1, r8, 0x1, 0x8, 0x6, 0x7, 0x6})
close(r1)
socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012)
write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1)
sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[], 0xe0}, 0x20004065)
write$cgroup_int(r1, &(0x7f0000000280)=0x2, 0x12)
close_range(r3, r2, 0x2)

4m20.839059679s ago: executing program 1 (id=1155):
r0 = epoll_create1(0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x80002, 0xa)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xe000001a})
read$FUSE(r1, &(0x7f0000003640)={0x2020}, 0x2020)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x18340, 0x0)
epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0)
read$dsp(r2, &(0x7f0000000000)=""/110, 0x6e)

4m20.61763858s ago: executing program 1 (id=1156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000500)={0x2, 0x14, 0x9, 0x5, 0x4, 0x6, 0xfc, 0x1, 0xf7, 0x9, 0x1, 0x5, 0x9, 0x2}, 0xe)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)

4m20.491389434s ago: executing program 33 (id=1156):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000500)={0x2, 0x14, 0x9, 0x5, 0x4, 0x6, 0xfc, 0x1, 0xf7, 0x9, 0x1, 0x5, 0x9, 0x2}, 0xe)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x14, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)

3m53.618918753s ago: executing program 4 (id=1289):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000180)='./file1\x00', 0x800, 0x70)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
unlink(&(0x7f0000000040)='./file1\x00')

3m53.424524509s ago: executing program 4 (id=1293):
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
r4 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0)
ftruncate(r4, 0x51a9497)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x2000)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6(0xa, 0x3, 0x7) (async)
memfd_secret(0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) (async)
ftruncate(r4, 0x51a9497) (async)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x2000) (async)

3m53.239774555s ago: executing program 4 (id=1295):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740))
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
pread64(r1, &(0x7f00000000c0)=""/47, 0x2f, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0xb, 0x0, &(0x7f0000000040))
ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000700))
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x44048)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086d044fc1ffffed00000109022400010000000009040000010300030009210000000122050009058103"], 0x0)
syz_usb_connect$cdc_ecm(0x3, 0xae, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x1, 0x1, 0x9, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x8, 0x24, 0x6, 0x0, 0x0, "bd4dda"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xd9, 0x6, 0x1, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x6, 0x45, 0xff, 0x9, 0xfc}, @mdlm={0x15, 0x24, 0x12, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x5, 0x4, [0x0, 0x1, 0x4, 0x7f, 0xb37, 0x9]}, @mdlm={0x15, 0x24, 0x12, 0x400}, @country_functional={0xe, 0x24, 0x7, 0x5, 0x0, [0x40, 0x1, 0xa, 0x0]}, @country_functional={0x8, 0x24, 0x7, 0xf7, 0x8, [0x40]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x49e34b65c627ddcc, 0x2, 0x4, 0x25}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xcb, 0x4, 0xf7}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x8, 0xe, 0x5, 0x8, 0x6}, 0x103, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x5, [{0x7b, &(0x7f0000000280)=@string={0x7b, 0x3, "f78d6d4c9b9ca2819531983ee06dbf45959a128e5c51456226e425842ae47b140a221c94cebc373e1cb738c023a5f478bbdc8f699d0f52943610821cdd6034554c5d9de005c19754e0804f6680a87a2f2a31da4e4e4e7e33c23719ea788899123a8e01b84a671128cc1278fc011edbdf84afdfaa5bd2b86ac6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80c}}, {0x9f, &(0x7f0000000340)=@string={0x9f, 0x3, "f36fbc450c7e912206a9d8a17307eb004331b446a76272a7740177f57832e958e62dfc42d96b036a892e5848db9c12d5903fbcf1b0f3369b4c7dd2ce584fc46765cd83be4ec50b705ae56e7cced460267e99e5655b670e19d9d42ccd6428559fcfe0cadc079dee809e0edb3557b3d0fa967fc5a3c783cb11db858ef027591164c644f83ab5778cb448c367dce617664712c34e1d9f6fe3a60305725787"}}, {0xdc, &(0x7f0000000400)=@string={0xdc, 0x3, "7e59c7344389e3a2445c866b9dc88a1c5088539cd12872b230e7afa351998ea73989bcee05ea8885b308aa41438c053598624a6012476979620bc6746e9258381f9d83ac64b4eddb0555df5c5cf6e2738806b32ea2e479a8ef7e0e816ef44d0f8f03c54bde50c169fce5d712d544a129bb695907157ec3e8ddf0db615b6f4f053952e9b5430de8b098e1bef2356a3fb51da3d4b53e3389ac2c8c0801c90c75d051c562c59c6d16132a17878c2052969e70eef9b5a13f8525bb488d9dd68d936233754cd3395d34b72febeb66ef133f406198a2781307d4f7c19b"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x4ff}}]})
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="023f"])
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000006c0)=@urb_type_interrupt={0x1, {0xa, 0x1}, 0x3, 0x25, &(0x7f00000005c0)="e3f7b43fe375962104d83a15667005112aab96178ddf29a7b72d94e39ef2b429bff8a6d802cae49d9b4581a9308e9968ef0f78fcf02bb31ab2a4bdecefc5896d21aa5b9dea0c03a0a3c5144768bbb1f5bf484274f3db06397d9be9a96e96263e180822b6afa9bdcd38fc8a02a0bb9682c2d26fbfaa7fd151dde9b54cb14051648cb13ce8ab24de2d3a18401629340da1c8d555aae613c253e47d6c8ad8a7e85ec62f50789d", 0xa5, 0x6, 0x1, 0x0, 0xff, 0x0, &(0x7f0000000680)="03a5e39d352c409d37ff7cf57d5da2f880ab1560665cacc4d03e971824bdb8ffb37c91bea51104f876e19b4e374f64c4b2a1eb20ab0da345917a9c"})

3m52.420823263s ago: executing program 0 (id=1302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3d4, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb939}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xead}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x10001, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x842}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x23}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x747}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x96a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x383}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x213}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x3d4}, 0x1, 0x0, 0x0, 0xc00}, 0x840)
sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xa024, 0x7b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x58}}, 0x2000001)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2a}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x8810)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000b40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000780)={0x36c, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x44}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0xc, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x4b}]}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "b03b59846512"}]}, @NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xee}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "2fcc2bc019d9"}]}, @NL80211_ATTR_NAN_FUNC={0x2f8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SRF={0x110, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "6bb675c0f730"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x91}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "d1dc51edca18"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "9a6136c33bd7"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1a8, 0xe, 0x0, 0x1, [{0x70, 0x0, "cb665fb04f2344f955c775a06e0d4035fe46f14526db187f40f32182d498e8e4ba2ed018f7f661ee66b9539300c143ca42749b381a136d9d7d2173ef2e97ccc3dc056bc8e06b0fe9f885ceba5f0cdb0bcd4dae8db72f4df54d2391377d300ce984b32ca0f5fb7ac7e22a7545"}, {0x49, 0x0, "8ea8db588afd93fb380cda39e4267bb8d4ee1c397ee26f9e31fcdae24534eea41e0cfe79935f51e7ee83632777bd3df5e4581fe76cc3a3d7c38e7d29ccc2993714700a3fa5"}, {0xe5, 0x0, "51f258cab9cb3d6d3d314da0dc4859374de342c91145260555faeed84aa05a901f957a75634c2ef7e8e94d2b9e9e076101f4f9cd43398f43810c205447323414c29e303f40acecb81288b57165a88e993e59db197ac4959ff87c1a4c9d90d6e9d1e80d12c922af54be2cb00761d41aa77499e30eeb0068be5995fcc07ae49f4e04f03a3439d22c0d580d00abe43bb96ccdf486bbc7846fe82ffc473aef731e895d2687027b89636f21152d315a546e27cb7778a3e4d733b1c70db2e34db7893271189d7ff19293b73709469527c9df0bfc8e227b2372aa11c2ce7e20d351ac8ad7"}]}]}]}, 0x36c}, 0x1, 0x0, 0x0, 0x400400d4}, 0x10)
recvmsg(r0, &(0x7f0000000f80)={&(0x7f0000000b80)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/69, 0x45}, {&(0x7f0000000c80)=""/42, 0x2a}, {&(0x7f0000000cc0)=""/84, 0x54}, {&(0x7f0000000d40)=""/15, 0xf}, {&(0x7f0000000d80)=""/155, 0x9b}], 0x5, &(0x7f0000000ec0)=""/143, 0x8f}, 0x10001)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000fc0), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r3)
r4 = syz_clone(0x88100, &(0x7f0000001040)="c0bf843039569628383e8616f82fb2a0f0123cdcd62181b4b282e3b3c2e4bf2200c56e6257b4c5d3cb6a47fc10c2ee2b6a1bf4bb7dc66e8fd03c836ab7b018300bf3872de420375240408fb7e9bff76a67bd01c17aa995fc2ead724e75f1fb645f5d5d13a84ca8bd6ea04a070a1d33335b68c1662dccd14b77e412483dcf39935ae55728dd73f22ede6718591f67e9e3df4860623d20ca6a34ac14ebec6978fde5f7ad0e1ee61d34d75838dd318a768793f5ea6e624f6c20091c4ccebc6d57ec8061b96cdd5cbb9416a7e440e204e9ab894c8d2eefa314d7c7", 0xd9, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="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")
r5 = fcntl$getown(r3, 0x9)
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000024c0)='syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000002500)={0x10001000, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240), {0x39}, &(0x7f0000002280)=""/207, 0xcf, &(0x7f0000002380)=""/213, &(0x7f0000002480)=[r4, r5], 0x2, {r6}}, 0x58)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000025c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x4c, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x4c085)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f00000027c0)={&(0x7f0000002700), 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x14, r1, 0xb00, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10004045}, 0x4008801)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002840)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x60, r1, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x83, 0x2}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6fd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1209}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x80)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002980)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000002a80)=0xe8)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r9, &(0x7f0000002ac0)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000002b00)={{0x1, 0x1, 0x18, <r10=>r3, {0x2}}, './file0\x00'})
ioctl$PPPIOCGMRU(r10, 0x80047453, &(0x7f0000002b40))
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002bc0)={0xac, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0xc091)
pselect6(0x40, &(0x7f0000002d00)={0x415d, 0x80000000, 0xb, 0x2, 0x2, 0x1, 0x4, 0x4}, &(0x7f0000002d40)={0x5, 0x5, 0x1, 0x3, 0x4f, 0x5, 0x100000001, 0x6}, &(0x7f0000002d80)={0x6, 0x7, 0x0, 0x1, 0x10001, 0x6, 0x1, 0x4}, &(0x7f0000002dc0)={0x0, 0x3938700}, &(0x7f0000002e40)={&(0x7f0000002e00)={[0x6]}, 0x8})
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002ec0), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x30, r11, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x2, 0x6, 0x20000000, 0xf16}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x1)
ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000002fc0))
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x24, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000800)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040014)

3m52.330052801s ago: executing program 0 (id=1303):
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7fffffff}}, './file0\x00'})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1) (async, rerun: 32)
r1 = accept(r0, &(0x7f00000000c0)=@pppol2tpv3, &(0x7f0000000140)=0x80) (rerun: 32)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x10008085) (async)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000340)=0x1, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
pwrite64(r3, &(0x7f0000000380)="b983f424c0a0e008d50a483113d4a0f5fdf4fc930d484d14484935dbed78d9cbdf5e528e4e0c73210548c4bbdb1374518640bd4760ffd6b961b8c45ab3be", 0x3e, 0x79e1c5c6) (async)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000003c0)) (async, rerun: 64)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000400)={'ip_vti0\x00', 0x5}) (rerun: 64)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000440)={@empty, @loopback, 0x1, "26dc1e4eb5e5f08dcc57d6623608009079e25cfc1913c8a6e2cd7455a00d8e41", 0x7, 0x7fff, 0x4, 0x4}, 0x3c) (async)
getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000480), &(0x7f00000004c0)=0x10)
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0)
ioctl$COMEDI_LOCK(r0, 0x6405) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) (async)
setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000680), 0x4) (async)
r6 = syz_clone(0x16000, &(0x7f00000006c0)="6bbd773aebac83ea1fb09a324e87528f12066cd903d702f4d568ad9c71603df3b88bd72a010d49daa2b6b7f55cf83b8cb1f15fb4ec2326112abe9c5a48ee3045b190effc3c8784efb7d0eb8d7ac8d77c24fb9b02a47ef87a1f8f0776ff35a6a82a2a4ffc3dd16ef2c20ad18e0a2e9396e9e8e5ca987b8f01e7e231438cf9bdff900ef87932a4bbb3b30f8e6b43c75af14f008e4452ffa1fd19c4798a91ccc0a9fc3df468e02222fb0e4cbbe67a9f21a5721bb6632f35660bae2b22cef572948603e4ff967246aeca8dad798c81ccf6bb06920008fe9afa4544bb3c17ef5c0d1bcf50c444c5", 0xe5, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="f78e16a1981340bbbe225b537cc39f4e4cbcdabf5bb916574b064818ac3a077fd33cec269476afb7e72db5f3522864")
tkill(r6, 0x16) (async)
dup2(0xffffffffffffffff, r0) (async, rerun: 32)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000880)) (rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x35, 0x2, 0x70bd25, 0x25dfdbff, {0x1f}, [@typed={0x14, 0x108, 0x0, 0x0, @ipv6=@loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000008}, 0x44) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000004}, 0x2000c000)
syz_usb_connect(0x2, 0x698, &(0x7f0000000b40)={{0x12, 0x1, 0x300, 0xfc, 0xdf, 0x61, 0x40, 0xaf0, 0x6701, 0x1721, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x686, 0x2, 0xa3, 0x4, 0x40, 0xa6, [{{0x9, 0x4, 0x92, 0x6, 0xc, 0x70, 0xf2, 0x48, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x92}, [@feature_unit={0xb, 0x24, 0x6, 0x1, 0x3, 0x2, [0x2, 0x6], 0x1}, @selector_unit={0x8, 0x24, 0x5, 0x6, 0x0, "764e17"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x2, 0x7, "fb"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x205, 0x1, 0x2c, 0xb, 0xc5, 0xff}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "7265e3"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9fad, 0x13, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}]}], [{{0x9, 0x5, 0xc, 0x3, 0x10, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x5, 0x8, 0x8, [@generic={0x1c, 0x6, "d4c933d65981e5e47124c2e7bbf8482e4f392c7cc5341d9f643c"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x8, 0x8, 0x3}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x8, 0xf8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xf, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x0, 0xff, 0x7, [@generic={0xa5, 0xe, "e1b33b6b61d4d4bedae9d4dda77ab681c42ec8ec6e5e1cef39478ead421f8c3c762725ac8dff07e476a7a3e7ddfdd67366bf69231beef39a8a87e9d58607c6ece08b31ccaba8312ee3faf3e408829de0a51552a980e7bf993e3bf5f9c5ca6b6e0e30dd049b423fc6d1b2bcdad78cf55399b7137a6886ffb6b8db2863e3e90534a90078f31cea0617dd4124e2a3be991bd393152ec62c126b751457fde4fd5d0714f85b"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0xe9}]}}, {{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x7f, 0x3}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x4, 0x9, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x800}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x1, 0x8, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}, @generic={0x2c, 0xe, "fc5cdf6f0c6c07d36afeb4a32fba85ab426c220f5c964263b84908f8e7e723ee5cee04e22c9465b1dd06"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0xbc, 0x0, 0x88}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x1, 0x9, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x1}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x9, 0x78, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x81}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x3, 0x2, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x81, 0x7}]}}]}}, {{0x9, 0x4, 0x4a, 0x5, 0x10, 0xb7, 0x85, 0xdb, 0x9, [], [{{0x9, 0x5, 0x8, 0x3, 0x400, 0x0, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x1}, @generic={0xd8, 0x21, "97f44f846fdcfee382e1bfc1549fddc273556e033fbe1a25568fa55cb26cb537d25429c9ce09b9d39d82155a8a686c32bbc99660824a3e93847e394bb34dd2fa9674472e8d25d0579a13f80b787d0b3538016935db330f29de3a7144a9c49e4b6a043e11cd2b6d59d42d291bc5c68409d9ed6c56d6927c8a2223e6bae915b25152546e736a9ce273060ec9894f7d1990f64a97f49428f6b75218adf1fc4b627d8b4af7c64a75a3dc0dac4f6764a7a7991569f2380e2ce4fff7a43e79672fbbce9b90ab369e3db032c869313775ae63989cc8a26a0e1b"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x20, 0x8, 0x2, 0x1}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x2, 0x78, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa6, 0x78}, @generic={0x3e, 0x8, "81db4c11b1f2f815c2a26542eff0194a3968490673ca6cc422a1b0675d1e3eb2f770623b6ed869772162a2cd7ccce22fc637a6e4103ab8ec12601450"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x2, 0x6, 0x5}}, {{0x9, 0x5, 0x2, 0x10, 0xf3bfa2d8811d3f7a, 0x8, 0x0, 0xf}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x6, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x77}, @generic={0xed, 0xf4dc8b5d33c63db0, "62849a20ff47b7524e7b41cacc8eb157f881961ec0bbecdc5a603b232dc0a8003dbdb27dde27819084c5bedb1d74a9705e0e8be366bd120644b1c8b02679fccdb25919c8088c3f29ee03f827a0bdd8e5882ace7f2e8a47a2828c5b61a99ae534075fe78cb072f99a7cce764942acb271e1741fb9417144a6a2eb190d68d5a646f4d2186dbbec59e124f76d598f5585353be5a32b600e7cb7bdc7bcb9c4d0908c8238cb85beae975d266010f0f69417bea7d517cce5be38d8d5e6c2c6c26e07ca82a98d02ae5bf50d1f1bc642b2db2306077c36a409de098b1d35eb4c82c1e18b265c7567479a74912cf7c3"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x20, 0x4, 0x3, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x1, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0x3, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5f, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x208, 0x6, 0x5, 0xf3, [@generic={0xac, 0xc, "5253e0a0507d7ed4f9aa0c88f3871bb9b1bb8c2745acdc9d332ac49b8150fd9f15502a3a30fc61c41ba084900860e94033040179badf6a06f081f779d0be98db9be8a9727812caeb18b6ee911c3f1edc21c2e987e47a4b4df247867d8f664a3ab0bb9cf3c5a8afdf5d670759835d818880e26575cd4b7b02b0c9c90a4889090a2b8dc8238acd72ba47d7ab61f12aec8df2811d81956c68f31731bd8062df9a3865538f5261ba69d55ca5"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x2e, 0x5, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xfffe}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x6, 0xfd, 0x3}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x2, 0x7, 0x2, [@generic={0xd2, 0x7, "79b33c85c0da36941bcdcb155f93d6eda2ded6e4d4e2f5d5ae03d559416dd71f01d43c1e5d3de3d2b1e38f48f578fef7ae4eb08f4417fc0dd3fce598db86ba1770fd841878063414ec8daa4aa1b2300b834f85f62a4cc6925c33684b47a5d37c97ce248fb278250056a825d16d3fa34791d4eef0ebe1896a7d4721793e03de622193c4687f7857f5f40c91fc0bf1f1ad73897fa2fc896d11bd3317c31c2f93e66e427fc916ef32face8cf71227045f831f339cd064b8c6e299ff4984961185a57092b776e7b436ccda5cc37003b707a5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0xbfa}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x0, 0x1}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x6, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x3, 0x62, 0x1, [@generic={0x34, 0x21, "55277c9d676c4cc060b3e69dbfa5872c48e39831440e7adfb8b6117deda5de7cfdc8895969e362c6e859ae6e850ceefc08be"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}]}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x300, 0x5, 0xb, 0x2, 0xff, 0xb}, 0xe9, &(0x7f0000001240)={0x5, 0xf, 0xe9, 0x4, [@generic={0xad, 0x10, 0x4, "cfe5b16906a9ca46b0fae0320b05d3c42a0d6a327f3d7f350344ad8c68db5ba284c0e9a8c9053bb057858df7fb5bb8afca2c453f98dd0449339702cb7689312e23d26443e754a73dec111277ff0cfaddc615889b95f6b26cd65c93a7b3b6700a6e5e6f2a05b0d6c60ffe831f25c033339ca18dd0a2c0064b1046193194f18a14a8a352dda2028e4cc9840c422c3f087090032a51f6a8d923e0618722bb1de36bfffac7287a398679d766"}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x8a1, 0xf, 0x3, [0xc03f, 0x3f30, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "01e3ca675506312738f09f30ce807ac8"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2c, 0xc, 0x1, 0xd, 0xc5}]}, 0x7, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x42a}}, {0x32, &(0x7f0000001380)=@string={0x32, 0x3, "cd9422841dbf322c5f16c056c818446ee30fef7ba48809b09c950bee33eadbf364ae70e2569f2973a72fdd115e2f5c8f"}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x3b, &(0x7f0000001400)=@string={0x3b, 0x3, "753ff28c8ed30875f65934ab38e940e7df874b257070eb4774741a6f0f718e84c19d65f9f9d9a2999fb245750711d32911758f10f7ae03018c"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x4001}}, {0xa0, &(0x7f0000001480)=@string={0xa0, 0x3, "f489e31b9d7c5afd0ba3cf4ef64de94c1ca8fec85fb25e730f16483783d26788e2641299a82381efe5ef3ae1f676815307c4cc899864066667debbffb0f4316d2c87d20a9bbac0a93725047d35a39fee88a8e452cfba80a1d402f6b6d928360adebb26694a9e3ae045a7ccbf8a60e03275220214fc56d3ccc255b4d53d8e8f30a88e432dc2c2d151e720f1d20badfdf4bed9933e125344b0fdce77bdb264"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x81d}}]}) (async)
sendto$inet6(r1, &(0x7f0000001600)="d33eeddfd8f1903a6162f4557bcb3eefeb364e95bb22cb5b68e9758c35e002feb1739a986c6c7e47802920b573bab4b34d13bac21cc468dc822a07c66b04f62dc9af4ec03a24ec8e1cf18cca17140cd6c5b4088d3413bee21f649452790da75fade16adf4c796d0f0c4fdb9a69ec8301331661587e9d04fb7a6d79bb3dfa0023f1733b046602b9ad9210345c8cc2b6fd0f41029b613717ed8a0ff2d10562e23ae3bd9edbe43a", 0xa6, 0x4004002, &(0x7f00000016c0)={0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9a}, 0x1c)

3m50.957435635s ago: executing program 0 (id=1311):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000180)='./file1\x00', 0x800, 0x70)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
unlink(&(0x7f0000000040)='./file1\x00')

3m50.90598265s ago: executing program 0 (id=1312):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0cbf76510000000000000000"], 0x28}}, 0x0)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x8840, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x34d003, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_clone(0x20b02211, 0x0, 0x0, 0x0, 0x0, 0x0)
shmctl$SHM_STAT_ANY(0x0, 0x20, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)={<r5=>0x0, 0x8, 0xa, [0x5, 0x6, 0x4, 0x3, 0x5, 0x8, 0x7, 0x985, 0xe000, 0x5]}, &(0x7f00000003c0)=0x1c)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000400)={r5, 0xc, "99ac6dfcb63b7b01e9cefd2e"}, &(0x7f0000000440)=0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r6 = open(&(0x7f0000000180)='./file1\x00', 0x800, 0x70)
mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x400, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', 0x0)
unlinkat(r6, &(0x7f00000001c0)='./file0/../file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file1\x00')

3m50.796201061s ago: executing program 0 (id=1313):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
dup2(r1, r0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14)

3m50.476478661s ago: executing program 0 (id=1314):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x800003, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="2eff7f000c0000000093dfb6c575963f8864", 0x12}], 0x1)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r5, 0x40047452, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,')
write$rfkill(r0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x1}, 0x8)

3m50.265945369s ago: executing program 34 (id=1314):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x800003, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r3, 0x10c, 0x9, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="2eff7f000c0000000093dfb6c575963f8864", 0x12}], 0x1)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
ioctl$PPPIOCGL2TPSTATS(r5, 0x40047452, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,')
write$rfkill(r0, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x1}, 0x8)

3m50.175625191s ago: executing program 4 (id=1316):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x101000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1})

3m49.93413096s ago: executing program 4 (id=1318):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[], 0x0) (async)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x3b, 0x0, 0x2, 0x6}, 0x8) (async)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x3b, 0x0, 0x2, 0x6}, 0x8)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000008205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508", @ANYRES8=r0], 0x0}, 0x0)
syz_usb_connect$cdc_ecm(0x7, 0x63, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x9, 0x0, 0xf1, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "9f114ba3f29e"}, {0x5, 0x24, 0x0, 0xe167}, {0xd, 0x24, 0xf, 0x1, 0xd1, 0x1, 0x10, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0xff, 0x7, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x4, 0x5}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x81, 0x4, 0xb, 0x8, 0xd}, 0x1d, &(0x7f0000000840)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x2, 0xff00, 0x1ff, [0xff0000, 0xa0d9dfe8d4e12cef, 0xff1fb0]}]}, 0x3, [{0xb7, &(0x7f0000000880)=@string={0xb7, 0x3, "0973b5b73ed9af5305d8d12e5a577628a74917ef70eb9439e6255578ceaba3604ed29e613ceb590837285f67a7bb0d3194e20956d7ecbd293a632f98fbcabeba66d7ce15b32e1ea5b0b9ea1d6b653e533c0ce8f4c8a5aaf39ba7d0e0e635d00f63627acb519d9c1805a18460df88b6ba1c8757faf640b78fdbb7253b4b0297538522e4d5d6de13ad613fb6d9fc9fa6fc251df5a7f01b3dce596f776786120610edf8d5fef11fcba1a2fb4443b27380cda7d8f658d6"}}, {0x26, &(0x7f0000000940)=@string={0x26, 0x3, "0116e0809eac99c91fa55b53978f3e6303c1ef5e91d128d794de31e5a57aa440956184a6"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x810}}]}) (async)
r3 = syz_usb_connect$cdc_ecm(0x7, 0x63, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x9, 0x0, 0xf1, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "9f114ba3f29e"}, {0x5, 0x24, 0x0, 0xe167}, {0xd, 0x24, 0xf, 0x1, 0xd1, 0x1, 0x10, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0xff, 0x7, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x4, 0x5}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x81, 0x4, 0xb, 0x8, 0xd}, 0x1d, &(0x7f0000000840)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x80, 0x3, 0x2, 0xff00, 0x1ff, [0xff0000, 0xa0d9dfe8d4e12cef, 0xff1fb0]}]}, 0x3, [{0xb7, &(0x7f0000000880)=@string={0xb7, 0x3, "0973b5b73ed9af5305d8d12e5a577628a74917ef70eb9439e6255578ceaba3604ed29e613ceb590837285f67a7bb0d3194e20956d7ecbd293a632f98fbcabeba66d7ce15b32e1ea5b0b9ea1d6b653e533c0ce8f4c8a5aaf39ba7d0e0e635d00f63627acb519d9c1805a18460df88b6ba1c8757faf640b78fdbb7253b4b0297538522e4d5d6de13ad613fb6d9fc9fa6fc251df5a7f01b3dce596f776786120610edf8d5fef11fcba1a2fb4443b27380cda7d8f658d6"}}, {0x26, &(0x7f0000000940)=@string={0x26, 0x3, "0116e0809eac99c91fa55b53978f3e6303c1ef5e91d128d794de31e5a57aa440956184a6"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x810}}]})
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000ac0)={0x14, &(0x7f0000000a00)={0x40, 0x30, 0x5f, {0x5f, 0x23, "dfc63e97cb1729bef5b181e6cd5d84461628fd5b9496406885d4e2592e2f66422aeba8a2b3cac7b768d9a1d690d1426b7145b8a551c284a6921cbfe13df4e846dcb0551ff69b03d1aefb00d8d1baaf4479ff7d2f844b35655219151229"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000b00)={0x40, 0x6, 0x76, "01461b072aebffb0c9a5e3849e0a4118da0aa03616bb4ce9a969a60c50fe6f01c680d121ed66e07bea14e2f678c183732216fe4a85a4b3296276ededc2fdbb0c7f390d39277cb8c1ac4491b2c93a7743a45c47eb10b79f37684ed1c104472410e983e0e74b47bca184dcf413f19cb81b42c81e5ff10b"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xc0}}) (async)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000ac0)={0x14, &(0x7f0000000a00)={0x40, 0x30, 0x5f, {0x5f, 0x23, "dfc63e97cb1729bef5b181e6cd5d84461628fd5b9496406885d4e2592e2f66422aeba8a2b3cac7b768d9a1d690d1426b7145b8a551c284a6921cbfe13df4e846dcb0551ff69b03d1aefb00d8d1baaf4479ff7d2f844b35655219151229"}}, &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x1c, &(0x7f0000000b00)={0x40, 0x6, 0x76, "01461b072aebffb0c9a5e3849e0a4118da0aa03616bb4ce9a969a60c50fe6f01c680d121ed66e07bea14e2f678c183732216fe4a85a4b3296276ededc2fdbb0c7f390d39277cb8c1ac4491b2c93a7743a45c47eb10b79f37684ed1c104472410e983e0e74b47bca184dcf413f19cb81b42c81e5ff10b"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0xc0}})
fanotify_init(0x1, 0x800) (async)
fanotify_init(0x1, 0x800)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x6224c0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r7=>0x0}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={r7, 0xe}, 0xc)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r9 = socket(0x15, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x8002711, 0x0, &(0x7f0000000000))
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20)
ioperm(0xc614, 0x1, 0x7)
prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0xfffffffffffffe69)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r8, 0x6f000)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r7, 0x158951bd}, 0x8)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) (async)
r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001480)={0x0, 0x11, 0x3, "f45f0d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000640)=<r11=>0x0, &(0x7f0000000680)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000740)={'ip6_vti0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r11, 0x29, 0x5, 0x5, 0x8, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7800, 0x7800, 0x4, 0x4}})
syz_usb_control_io$lan78xx(r10, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0xc, 0x22, {0x22, 0xa, "87a110462b10cc335ee8ab0e5ea8ee1fdc496bcc5fadcce582fd90099d73aefb"}}, &(0x7f0000000380)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "106cc8be097b9c8c09d0ee5e7972abb949f48d96a5b32d4df141b569482d1b166adec33099b47553abc334f0f36c96ddf3b5690372c08f4350a3ceb71385a275a6c1439bebd3ac235cad63f4ba98e3fd06921363fe28557164b8980b420680aaef70fcd23175f3429d844e19f731fe82b79d2151d6b2d300958f6235d3ee1f74f24d55b76afbeba8669d73c3ff9d217d8a6fc5c50699fc1a89177a4aab03dded92f073a30c057fbbef0fc89b1c5682bbd4d89d67244e1a2365804e55746e42830042d0c302f1def4e265"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000480)={0x60, 0x1d, 0x82, "ed1f2f181a4fe73bb9c38eb0f40a8c1908bf24fa24af508d16fbf7b50044b442e98b7cd37cdebf292694240b7fca2441568df38467b3f2b7235fd4b659fa499c864b0e7e1b558c2b22158f7f5978ce4ef90567efed65c5f756e9df45647ed76511d9f476e931d7d7ef0ffa5764c8253af2242dc2044136629d8713fe7ba7d1f81005"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x50}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "fdbe3a5ede7f7f943f50f9a4984c67284790b6b2fb82f8b695acd02d65813bd4a9eed3c854378af8c4a5f8fe909fd6"}}) (async)
syz_usb_control_io$lan78xx(r10, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x40, 0xc, 0x22, {0x22, 0xa, "87a110462b10cc335ee8ab0e5ea8ee1fdc496bcc5fadcce582fd90099d73aefb"}}, &(0x7f0000000380)={0x0, 0x3, 0xcc, @string={0xcc, 0x3, "106cc8be097b9c8c09d0ee5e7972abb949f48d96a5b32d4df141b569482d1b166adec33099b47553abc334f0f36c96ddf3b5690372c08f4350a3ceb71385a275a6c1439bebd3ac235cad63f4ba98e3fd06921363fe28557164b8980b420680aaef70fcd23175f3429d844e19f731fe82b79d2151d6b2d300958f6235d3ee1f74f24d55b76afbeba8669d73c3ff9d217d8a6fc5c50699fc1a89177a4aab03dded92f073a30c057fbbef0fc89b1c5682bbd4d89d67244e1a2365804e55746e42830042d0c302f1def4e265"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000480)={0x60, 0x1d, 0x82, "ed1f2f181a4fe73bb9c38eb0f40a8c1908bf24fa24af508d16fbf7b50044b442e98b7cd37cdebf292694240b7fca2441568df38467b3f2b7235fd4b659fa499c864b0e7e1b558c2b22158f7f5978ce4ef90567efed65c5f756e9df45647ed76511d9f476e931d7d7ef0ffa5764c8253af2242dc2044136629d8713fe7ba7d1f81005"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xb2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x50}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000580)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000005c0)={0xc0, 0xa2, 0x2f, "fdbe3a5ede7f7f943f50f9a4984c67284790b6b2fb82f8b695acd02d65813bd4a9eed3c854378af8c4a5f8fe909fd6"}})
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

3m49.71191424s ago: executing program 4 (id=1319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x0)
accept(r0, 0x0, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
dup(0xffffffffffffffff)
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x28, r6, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x4, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3m34.624881687s ago: executing program 35 (id=1319):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x0)
accept(r0, 0x0, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
dup(0xffffffffffffffff)
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x28, r6, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x4, 0x0, 0x5}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3m19.765877464s ago: executing program 7 (id=1455):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)

3m19.363301359s ago: executing program 7 (id=1460):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet(0x2, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = fanotify_init(0x200, 0x0)
r4 = dup(r2)
fanotify_mark(r3, 0x8, 0x48001059, r4, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f00000001c0)=0xfff, 0x4)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r6, r7, 0x0, 0xc19)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x64000814)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000140)={0x2, 0x4e00, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="200000000000000000000000e7ac6e535945f9821e0001ffffffffffffffff005b528ce65a5d4754a117a83b48df254b8f3e84bb0d6af2d6e5e2554226f50549ec071e61ad66798613dbd410216ef4e042481d521eee28a674f116463ee2933f6a2bedeb734bd2b19b862e58102bca33e33407a7fafd2b1cbd910ecfabd49ed43b2279c02034681accffe175bdc380b243ebd03f764c5dd443382260a121d616d5d2a4e9989a7fcec530d0449fa8d03d674acd4376a99e97fd9378a4f54c8ed7df071835583bff"], 0x20}}], 0x1, 0x46000)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r8, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b000000080002000000000008000200090000000700010069620000340002800800030064000000080004"], 0x2ac}}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
setuid(0xee01)
write$UHID_INPUT(r9, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000200)={<r11=>0x0, 0x5, 0x56, 0x3}, &(0x7f0000001280)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000012c0)={r11, @in6={{0xa, 0x4e24, 0x0, @private0, 0x1}}, 0x4eb72f61, 0x3, 0x9, 0x1, 0x33, 0x0, 0x6}, 0x9c)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r10, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4078, 0xfee}, {&(0x7f0000000400)=""/143, 0x8f}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4097, 0x1001}], 0x3}, 0x8}], 0x3, 0x2, 0x0)

3m19.152286951s ago: executing program 7 (id=1462):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f0000000780)="9c801ff5d2aa6d68", 0x8}, {&(0x7f0000001180)="772516781d57ec5488386a48e8fac06873ef12f52570c0822edf034811dfeef017d1c5b6fff810a39aaf93cd48f3e044dd76541ac22192b184e28e766973e5d04fa2074ae0c43e311fde596b1d322f00f451f16ae5beb01b6d7c26e77d91d1eafd1a996c5fb75638a80f000054d364faa6da61de6908dbc0bf605e8d6cb93f8aca661800"/146, 0x92}, {&(0x7f0000000800)="e7e03754b7c83d5d98da056ed57f6adc23fb7d2dccfd819de4b360a6384bdf7b596d78f968b113fec9585b0e51870621686ccb014f62129ccd03f32ee07c9c1751f16da9c2523d4851d51abddea27532bb765f175957a5cd9fde98b9d9072a3c479ffc5cf303968c7e3e206f2e261f4676506066d622bf43e3a295aa53b2026780b93f69b425869afd11bec1c85bae81550a7e3f7ce96369ae5487abe4db8e942a83c8b81b7eb7935cf73ec5dfb9977edd82559a63a5a176dceca84bde2edd8b27702b0e7775c9820d627cb8a60982c7fba863d0daed9f83362d7c5cbbfba0abeaf103591c1aa60780", 0xe9}, {&(0x7f0000000900)="07659b2bda766122a73713834e1e7d66a08fc8bb0153096073dd118496360845e6027ad467edd9cfff6358f25aed4f924cfb0388af3a784c8dd25c933411ddfe83d0687690cac822a6fcd4c2941f78932e63a37777fb5d955728edcfa88fea2257d057aa931261102fc9cd4e0e1d66688a612ae48d6a0bd3d26261f6f30296e90894a551f97f8c12a6f77c8d9e45f3494fe4b2a884020ce66604f35a0c080007a66f87a6f6b83d41492356f4ddf49637e2f4847eb81f26444423254f7b586208e58f60e8fff87e2ecccc7ec383f9d5228f243bec65720e6c56f7db5cb4e7fd", 0xdf}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="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", 0x2ff}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000340)="e8a01c32e206a73ab8ae047c045efd589272abc70b000000c06b3b40d4178b159f32ef765947c649b7b0e3e3230401d2d284f826db17656afda637aa4e3be05280787cefade2ced44b0151c7649817220754b514efeb", 0x56}, {&(0x7f00000003c0)="9a05beedd876bd4beab60e3ce146acaa9dc57f031f6ecf6d804322c414c72ab2ecab297606295f19551cef4c6fcb78b000fec5ca40f018372c75a684ba0adb72374882f70e654a343c98bf0b2ee2c5981976761a5cd9fb4db071cb4a0eb00af1ce0fb624720c95afb03ba434d56ab5e765f503b72e3bd6d832b50e8dd07e5bc0f62539ae27b0fd6f2e9a60748b97a54b39b9333dc40fef4bd14b30fccaab3920bd08f9056f3b9224ac95f5f63a2d90526b3f1ff6b5608e6114c2234e369442c9598d51400c29c7a4834f59277c1a244442d0c95dd5235cd6943f6911764229ea47e3a0be", 0xe4}, {&(0x7f0000000ac0)="50372f458b0f86284890076b02def212a85952fffb4ef7e6f577a23e1e4a1d274cdc57de769e0b2760c77e99f1bd055ea410d84c127ebb0664330b108d3cecf90dd2bb934725b7571dca3fa344319d5a9a8d217e3789c594da623a4480fa8fc0bb45bac17b9bcafb506149479b5e256bdce28d7493dd126efb682a09810a9ffb7c4dde703e505ed92067d7c65928550692a6274c3d91a02564f2860fcb85f091c146918ff89d83da7e3231d250425401f3fc7ad14b0c03afade7579f42d955dec6b9b7d0be277c73e7cf55ae1f9320878e77902e3d8605acb409ca0a6faf803817ecd84332a44bf977a535a29385e4b8fa", 0xf1}, {&(0x7f0000000500)="fc906f04519b9ae778cab5b64dc6013e7b99a7d603b3ba9ae8d517857f5ff6ad4bdc21ab0aafc21dbd346e417b486d238f", 0x31}, {&(0x7f0000000bc0)="94faf3a69ca6ae1df90ded324fe96da880749b52b17dd3959093873194d9c872b648172e148e0fbf7d05f997abac90b5fd55748dde25841ed2177dcf78a0c15eff36e0834386d9976460055e11962c299edc981c9714715aaaad9422ae9555203720121c715692f1ca56d98abd0bc1e72e28f0da0d7cc06fa385067a10c6cb904dcd82886e5bae9574bb080a512562b7514fbb9e27bd37ec16490378f612c6b529d156051be0b58c893e8cbc85ff2d", 0xaf}], 0x5, &(0x7f0000000c80)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1edb}}], 0x48}}], 0x3, 0xc8c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

3m19.102899578s ago: executing program 7 (id=1463):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x18a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000000), 0x10000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@uuid_on}], [], 0x2c})
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0xfffffffffffffffd, {0x0, 0xff}}, 0x18)
sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r2, 0x13}, 0x18, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc894)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0)
ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x4000000, 0x92, 0x0, 0x0, 0x4}]})
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10)
getsockopt$inet6_buf(r4, 0x29, 0x2a, &(0x7f0000000480)=""/201, &(0x7f0000000100)=0xc9)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f022482395a4450ae01fcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69743dab51cbd9f034162e495c39fc890000000900010073797a30000000000900020073797a32000000001400ebb01100"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

3m18.981534159s ago: executing program 7 (id=1464):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x28, 0x0, &(0x7f0000004580))
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xc4100, 0xf9, 0x21}, 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdb", 0x2}], 0x1, 0x0, 0x0, 0x4002}], 0x1, 0x24004850)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x20008088)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0)
getdents64(r4, &(0x7f00000000c0)=""/54, 0x36)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})

3m18.777939882s ago: executing program 7 (id=1466):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@rand_addr=' \x01\x00', 0x65, r2})
setsockopt(r0, 0x84, 0x80, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000002c0)={'bond0\x00', @random="0100"})
ioctl$VT_WAITACTIVE(r3, 0x5607)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0)
fcntl$setstatus(r5, 0x403, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000040)=""/17)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}})

3m18.463411144s ago: executing program 36 (id=1466):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@rand_addr=' \x01\x00', 0x65, r2})
setsockopt(r0, 0x84, 0x80, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000002c0)={'bond0\x00', @random="0100"})
ioctl$VT_WAITACTIVE(r3, 0x5607)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0)
fcntl$setstatus(r5, 0x403, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000040)=""/17)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x100}})

1m38.913674223s ago: executing program 3 (id=2103):
r0 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x101)
write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/dev/comedi3\x00'}, {}, {0x20, '/dev/comedi3\x00'}, {0x20, '/dev/comedi3\x00'}, {}], 0xa, "3f7e186efa31023cb762f07ebf142c7be397cd4c5888324b2572c805af60e936469034387768f8ff5c5372c6b206f1159549f95d45f0618bc43afa9f77a61f4de8e24ee56508022ea00fcc03a5e9aa27f16be011da9ed372789c7871e1304941417cb7469277cb9c1dfa9704e91193c438c36658294bd9334995e4482fc744822c77718a0b27170254eefd52257256815c2873e4052c4689abc1cdab80"}, 0xd4)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
close(r1)

1m38.909259556s ago: executing program 3 (id=2104):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg1\x00', <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000580), 0x200200, 0x0)
ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r5, 0x4068aea3, &(0x7f00000005c0))
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffff726}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x36}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7e}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20008880)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003e00070b2dbd7000fcdbdf25037c000004"], 0x24}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x68, r8, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffffc}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400001c)
sendmsg$NL80211_CMD_GET_INTERFACE(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090029bd7000fbdbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000900000032000000"], 0x28}, 0x1, 0x0, 0x0, 0x64331ec46c10d6d1}, 0x1)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000340)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a67c6024"}, 0x10, 0x1, {0x0}})

1m38.766991563s ago: executing program 3 (id=2105):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
kexec_load(0x400, 0x0, 0x0, 0x1)

1m38.673676078s ago: executing program 3 (id=2106):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000180)='./file1\x00', 0x800, 0x70)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
unlink(&(0x7f0000000040)='./file1\x00')

1m38.530258215s ago: executing program 3 (id=2108):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r4, 0x0, 0x200002)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000047b28f3b7538741517ee40f00a057a0000010203010902223229700d224e86605e80304c120001"], 0x0)
syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}]}, 0x0)
eventfd(0x7)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000140)=@assoc_value={<r6=>0x0}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r6, 0x6, 0x20}, &(0x7f0000000080)=0xc)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)

1m35.417278779s ago: executing program 3 (id=2116):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sync()
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xbc, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_SYNPROXY={0x4}, @CTA_ID={0x8}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8a}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8844}, 0x40880)

1m19.525570875s ago: executing program 37 (id=2116):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sync()
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xbc, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_SYNPROXY={0x4}, @CTA_ID={0x8}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8a}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x40}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8844}, 0x40880)

10.173595443s ago: executing program 6 (id=2552):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write(r0, &(0x7f0000000080)="b6d4", 0x2)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000040), &(0x7f00000004c0)=0xfffffe50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x48b}]})
syz_usb_control_io(r2, &(0x7f0000000480)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="200d050000000506004083"], 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1f}, 0x14)

7.133210798s ago: executing program 6 (id=2565):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

5.087041122s ago: executing program 6 (id=2577):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x64000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB=' 0?>r>\r\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000240)={0x0, 0xe, 0x6c, {0x6c, 0x24, "376a62eea5615d579e7c9bd6ebf3cde01b3181976f764b6ad06b385de4d8e713b075e9b6202ac06d6a4263babdc796f8f66568d004671ef69391d8ed44d09219c5f2a5cd3e586661ce6719659b92c77a1464b528fed92020e6ff3960b30ff826f301d7919b506b683f24"}}, &(0x7f00000006c0)={0x0, 0x3, 0x90, @string={0x90, 0x3, "45c485950fce5c2a5bd6ba0c2b6668f6f22b4c2dac620f14a1b15530dfe925cd349c3a2285555f695c7265aa23fca77f7e155fdcd35756311cc0ed6913f58c3095003b0c17d4056d1bd5e74770b5947449003051fe8cb78bc1ec6b145a9cb472ade5e7e1cf919378ab272f5a8f603c0d85939e66f30cb9cda08456a400aaf76760aa56ad692846b186abe8caea8a"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000300)={0x40, 0x31, 0x1e, "3378cc50e53fddb9e1b15d27f8c8450adcf82d429a33e9bda635f1882b2a"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000780)={0x20, 0x0, 0x94, {0x92, "12fce8b77c33c6134c8043c800f3c0e5fc14c2ded70e25a7ccdb9c21b6812955e59a7e96d638f6f5126e44bfe4f73c8dc09326ec451d66544ebb72c8ee899bb192bfd819cf89c07e5945b0a25c830397a7c7254bedae3836cd58fd34c159d01578b13591af6b8043292a812ebd4afbf18cee5d61d5fe7cf90b31b88c276cafc640aa8f56c2f801138685472e20dcdea2970e"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xc0}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xb0}})
tkill(0x0, 0x12)

2.619967199s ago: executing program 9 (id=2592):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r0, 0x10000a47)
r1 = socket(0x10, 0x1, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000020010000000000000800040001000000", 0x24)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1)

2.199708165s ago: executing program 5 (id=2599):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.170715929s ago: executing program 6 (id=2600):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002880)='.\x00', 0x0, 0x4001, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)=ANY=[], 0x28)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773c", 0x2f, 0x52, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

2.076170449s ago: executing program 5 (id=2601):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x84082, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.95659699s ago: executing program 5 (id=2602):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f0000000780)="9c801ff5d2aa6d68", 0x8}, {&(0x7f0000001180)="772516781d57ec5488386a48e8fac06873ef12f52570c0822edf034811dfeef017d1c5b6fff810a39aaf93cd48f3e044dd76541ac22192b184e28e766973e5d04fa2074ae0c43e311fde596b1d322f00f451f16ae5beb01b6d7c26e77d91d1eafd1a996c5fb75638a80f000054d364faa6da61de6908dbc0bf605e8d6cb93f8aca661800"/146, 0x92}, {&(0x7f0000000800)="e7e03754b7c83d5d98da056ed57f6adc23fb7d2dccfd819de4b360a6384bdf7b596d78f968b113fec9585b0e51870621686ccb014f62129ccd03f32ee07c9c1751f16da9c2523d4851d51abddea27532bb765f175957a5cd9fde98b9d9072a3c479ffc5cf303968c7e3e206f2e261f4676506066d622bf43e3a295aa53b2026780b93f69b425869afd11bec1c85bae81550a7e3f7ce96369ae5487abe4db8e942a83c8b81b7eb7935cf73ec5dfb9977edd82559a63a5a176dceca84bde2edd8b27702b0e7775c9820d627cb8a60982c7fba863d0daed9f83362d7c5cbbfba0abeaf103591c1aa60780", 0xe9}, {&(0x7f0000000900)="07659b2bda766122a73713834e1e7d66a08fc8bb0153096073dd118496360845e6027ad467edd9cfff6358f25aed4f924cfb0388af3a784c8dd25c933411ddfe83d0687690cac822a6fcd4c2941f78932e63a37777fb5d955728edcfa88fea2257d057aa931261102fc9cd4e0e1d66688a612ae48d6a0bd3d26261f6f30296e90894a551f97f8c12a6f77c8d9e45f3494fe4b2a884020ce66604f35a0c080007a66f87a6f6b83d41492356f4ddf49637e2f4847eb81f26444423254f7b586208e58f60e8fff87e2ecccc7ec383f9d5228f243bec65720e6c56f7db5cb4e7fd", 0xdf}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7cf270978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068854cc34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a7490b4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a09224b33b3c6e357b469661531728b0e", 0x2ff}], 0x1}}], 0x2, 0xc8c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.676984999s ago: executing program 9 (id=2603):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0xe0836000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000000))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)="48b2be9acfec52eaeb010dfff04df31f9e18312ba0a0fd583dec7a74d3d35d706628f21262ec9b9b8e740e3f070f966fc9a27a822a0c7ae83afa608babd7ebfe601eac9d84c2037d078708388025179a9497a98c8137f0f26ed9650aa3ac889f742dba0ce2e9d6fb96cebcdbcdf519d460346c2abfd971ff118badd91cac3c19cb551faa1abc6731fb7560e01c826b4d7ff854cc50f3750122d15b0bb2a6748719f33b9cce076d0b4df1905b40dd6395504323819e54dfa4bcafee6ba883bbc9f15d8150c6", 0xc5, r1}, 0x68)

1.669701757s ago: executing program 9 (id=2604):
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000010000000000000001"]) (async)
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, 0x0, 0x0) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x40) (async)
add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0)

1.619835258s ago: executing program 9 (id=2605):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300004000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d7"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95)

1.289698062s ago: executing program 6 (id=2608):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x2}, 0x2b, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x2, 0x2, 0x0, 0x0, 0x10000000, 0x800000, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0xf, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0xef86]}, 0x45c)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000580)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x1180, 0x7ff, 0xfbc2, 0x2, 0x0, 0x0, 0x0, 0x100, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
open$dir(&(0x7f0000000000)='./file0\x00', 0x4a000, 0x48)

1.235378949s ago: executing program 6 (id=2610):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x64000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB=' 0?>r>\r\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x800, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000240)={0x0, 0xe, 0x6c, {0x6c, 0x24, "376a62eea5615d579e7c9bd6ebf3cde01b3181976f764b6ad06b385de4d8e713b075e9b6202ac06d6a4263babdc796f8f66568d004671ef69391d8ed44d09219c5f2a5cd3e586661ce6719659b92c77a1464b528fed92020e6ff3960b30ff826f301d7919b506b683f24"}}, &(0x7f00000006c0)={0x0, 0x3, 0x90, @string={0x90, 0x3, "45c485950fce5c2a5bd6ba0c2b6668f6f22b4c2dac620f14a1b15530dfe925cd349c3a2285555f695c7265aa23fca77f7e155fdcd35756311cc0ed6913f58c3095003b0c17d4056d1bd5e74770b5947449003051fe8cb78bc1ec6b145a9cb472ade5e7e1cf919378ab272f5a8f603c0d85939e66f30cb9cda08456a400aaf76760aa56ad692846b186abe8caea8a"}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000300)={0x40, 0x31, 0x1e, "3378cc50e53fddb9e1b15d27f8c8450adcf82d429a33e9bda635f1882b2a"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000780)={0x20, 0x0, 0x94, {0x92, "12fce8b77c33c6134c8043c800f3c0e5fc14c2ded70e25a7ccdb9c21b6812955e59a7e96d638f6f5126e44bfe4f73c8dc09326ec451d66544ebb72c8ee899bb192bfd819cf89c07e5945b0a25c830397a7c7254bedae3836cd58fd34c159d01578b13591af6b8043292a812ebd4afbf18cee5d61d5fe7cf90b31b88c276cafc640aa8f56c2f801138685472e20dcdea2970e"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xc0}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xb0}})
tkill(0x0, 0x12)

1.054859876s ago: executing program 5 (id=2612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x140c, 0x300, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x810)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9b, 0x3d}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x200}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x1885)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x138, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd54}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf37}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed63}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce92}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0xc001}, 0x4080)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000045}, 0x40840)
socketpair(0x1d, 0x1, 0x3, &(0x7f00000008c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000900)={<r8=>0x0, 0x1, 0x2, 0x9, 0x6}, &(0x7f0000000940)=0x14)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000980)={r8, 0x5, 0x401, 0xca, 0x80000, 0x6}, &(0x7f00000009c0)=0x14)
r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000a40)=[@textreal={0x8, &(0x7f0000000a00)="a900006402a6c81e0f2e072e0f09dd090fc773bd0f792a660fc7b60600baf80c66b81051208966efbafc0c66ed3e2e0f78f4", 0x32}], 0x1, 0x8, &(0x7f0000000a80), 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan1\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', <r12=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f0000000ec0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2e4, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x15c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe000000}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0xf0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555c}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffff001}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000000000000000}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f00), 0x80, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x24)
r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r10)
sendmsg$NFC_CMD_DEP_LINK_UP(r10, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r14, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, 0xfffffffffffffffc, 0x40844)
r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000010c0), r10)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r10, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x50, r15, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c081}, 0x4000000)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001240)=<r16=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001280)=<r17=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r10, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, r14, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'TIPCv2\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

909.899327ms ago: executing program 5 (id=2614):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f0000000780)="9c801ff5d2aa6d68", 0x8}, {&(0x7f0000001180)="772516781d57ec5488386a48e8fac06873ef12f52570c0822edf034811dfeef017d1c5b6fff810a39aaf93cd48f3e044dd76541ac22192b184e28e766973e5d04fa2074ae0c43e311fde596b1d322f00f451f16ae5beb01b6d7c26e77d91d1eafd1a996c5fb75638a80f000054d364faa6da61de6908dbc0bf605e8d6cb93f8aca661800"/146, 0x92}, {&(0x7f0000000800)="e7e03754b7c83d5d98da056ed57f6adc23fb7d2dccfd819de4b360a6384bdf7b596d78f968b113fec9585b0e51870621686ccb014f62129ccd03f32ee07c9c1751f16da9c2523d4851d51abddea27532bb765f175957a5cd9fde98b9d9072a3c479ffc5cf303968c7e3e206f2e261f4676506066d622bf43e3a295aa53b2026780b93f69b425869afd11bec1c85bae81550a7e3f7ce96369ae5487abe4db8e942a83c8b81b7eb7935cf73ec5dfb9977edd82559a63a5a176dceca84bde2edd8b27702b0e7775c9820d627cb8a60982c7fba863d0daed9f83362d7c5cbbfba0abeaf103591c1aa60780", 0xe9}, {&(0x7f0000000900)="07659b2bda766122a73713834e1e7d66a08fc8bb0153096073dd118496360845e6027ad467edd9cfff6358f25aed4f924cfb0388af3a784c8dd25c933411ddfe83d0687690cac822a6fcd4c2941f78932e63a37777fb5d955728edcfa88fea2257d057aa931261102fc9cd4e0e1d66688a612ae48d6a0bd3d26261f6f30296e90894a551f97f8c12a6f77c8d9e45f3494fe4b2a884020ce66604f35a0c080007a66f87a6f6b83d41492356f4ddf49637e2f4847eb81f26444423254f7b586208e58f60e8fff87e2ecccc7ec383f9d5228f243bec65720e6c56f7db5cb4e7fd", 0xdf}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="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", 0x2ff}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000340)="e8a01c32e206a73ab8ae047c045efd589272abc70b000000c06b3b40d4178b159f32ef765947c649b7b0e3e3230401d2d284f826db17656afda637aa4e3be05280787cefade2ced44b0151c7649817220754b514efeb", 0x56}, {&(0x7f00000003c0)="9a05beedd876bd4beab60e3ce146acaa9dc57f031f6ecf6d804322c414c72ab2ecab297606295f19551cef4c6fcb78b000fec5ca40f018372c75a684ba0adb72374882f70e654a343c98bf0b2ee2c5981976761a5cd9fb4db071cb4a0eb00af1ce0fb624720c95afb03ba434d56ab5e765f503b72e3bd6d832b50e8dd07e5bc0f62539ae27b0fd6f2e9a60748b97a54b39b9333dc40fef4bd14b30fccaab3920bd08f9056f3b9224ac95f5f63a2d90526b3f1ff6b5608e6114c2234e369442c9598d51400c29c7a4834f59277c1a244442d0c95dd5235cd6943f6911764229ea47e3a0be", 0xe4}, {&(0x7f0000000ac0)="50372f458b0f86284890076b02def212a85952fffb4ef7e6f577a23e1e4a1d274cdc57de769e0b2760c77e99f1bd055ea410d84c127ebb0664330b108d3cecf90dd2bb934725b7571dca3fa344319d5a9a8d217e3789c594da623a4480fa8fc0bb45bac17b9bcafb506149479b5e256bdce28d7493dd126efb682a09810a9ffb7c4dde703e505ed92067d7c65928550692a6274c3d91a02564f2860fcb85f091c146918ff89d83da7e3231d250425401f3fc7ad14b0c03afade7579f42d955dec6b9b7d0be277c73e7cf55ae1f9320878e77902e3d8605acb409ca0a6faf803817ecd84332a44bf977a535a29385e4b8fa", 0xf1}, {&(0x7f0000000500)="fc906f04519b9ae778cab5b64dc6013e7b99a7d603b3ba9ae8d517857f5ff6ad4bdc", 0x22}, {&(0x7f0000000bc0)="94faf3a69ca6ae1df90ded324fe96da880749b52b17dd3959093873194d9c872b648172e148e0fbf7d05f997abac90b5fd55748dde25841ed2177dcf78a0c15eff36e0834386d9976460055e11962c299edc981c9714715aaaad9422ae9555203720121c715692f1ca56d98abd0bc1e72e28f0da0d7cc06fa385067a10c6cb904dcd82886e5bae9574bb080a512562b7514fbb9e27bd37ec16490378f6", 0x9d}], 0x5, &(0x7f0000000c80)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1edb}}], 0x48}}], 0x3, 0xc8c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

779.57926ms ago: executing program 8 (id=2616):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010003000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000040008000440000000000900010073797a30000000000800034000000002"], 0x64}}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000002340)=""/4096, 0x0) (async)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="0444ab7551ee61e574fa1a6886aa9ad007eb64ee352890858469cac4066163e31dbf2e5daeac61f870c7890d731bf5371a8cb7a2a536e9f71f9853fd8bc015a0f12fd665100276ea4128f47f6650ce7b99958a0dace851c5a974806821c12558878f92bb6d8dd04ac2f1730c0d8b436e850efeb779b1ccb561a73d01b32440223473ec1e2e4d567724b01bcec88b7e8a71d4e531de4de1fd7fef31d203ebc331e114ee78eba222f32f9cd72d4514782655a88c771dbc4d219a1836f2b1d2804788ae7456e2cc25630d93", 0xca}, {&(0x7f0000000100)="187b759bff4b641a87fb6dc6a6b087429950cd00df01c49ff0422249082f748bc02922d635d0cbf870cd775717811c3479bf153989ec6b1a86380d20b355b8efe9c3bc1bf5fba48e07bb06de841c2f631f2b3616708d0d773f78e1892c11dbe434d5fb416ef3aca599c0ea5ec9a2747467097e71c3424d80bd7902b1114303f808d8eb4088dfefb36c0dacc74161acfd21904556c7612dbe2fc5eab72643e710b8fff60e21a6ab088b9f5afc017f446998ad2a0a4e6cb616c15f185b4c1ed399", 0xc0}], 0x2, 0xc, 0x7f) (async, rerun: 64)
r2 = syz_usb_connect(0x0, 0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208", @ANYRESDEC=0x0, @ANYBLOB="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"], 0x0) (async, rerun: 64)
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
r3 = socket(0x2b, 0x80801, 0x1)
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802"], 0x0) (async, rerun: 64)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) (async, rerun: 64)
sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x24004000) (async)
socket$inet(0x2, 0x4, 0xfffffffd) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0)

709.655864ms ago: executing program 8 (id=2617):
r0 = socket(0x10, 0x803, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x4}], 0x1, 0x40001041, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/207, 0xcf}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000000)=""/38, 0x26}, {&(0x7f00000001c0)=""/69, 0x45}, {&(0x7f0000000240)=""/208, 0xd0}], 0x5, &(0x7f0000000440)=""/158, 0x9e}, 0x4}, {{&(0x7f0000000500)=@ax25={{0x3, @bcast}, [@bcast, @remote, @default, @rose, @rose, @bcast, @bcast, @default]}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f0000001780)=""/147, 0xa1}], 0x3, &(0x7f0000001840)=""/234, 0xea}, 0x8}, {{&(0x7f00000006c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/212, 0xd4}, {&(0x7f0000001a40)=""/47, 0x2f}], 0x2, &(0x7f0000001ac0)=""/195, 0xc3}, 0x7}, {{&(0x7f0000001bc0)=@nfc, 0x80, &(0x7f0000001f80)=[{&(0x7f0000004140)=""/173, 0xa0}, {&(0x7f0000001d00)=""/69, 0x45}, {&(0x7f0000001d80)=""/85, 0x55}, {&(0x7f0000001e00)=""/189, 0xbd}, {&(0x7f0000001ec0)=""/59, 0x3b}, {&(0x7f0000001f00)=""/121, 0x79}], 0x6, &(0x7f0000002000)=""/73, 0x49}, 0x11}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002080)=""/123, 0x7b}, {&(0x7f0000002100)=""/64, 0x40}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/183, 0xb7}, {&(0x7f0000003200)=""/102, 0x66}, {&(0x7f0000003280)=""/233, 0xf6}, {&(0x7f0000003380)=""/214, 0xd6}, {&(0x7f0000003480)=""/152, 0x98}], 0x8, &(0x7f0000004200)=""/202, 0xca}, 0x6f05}, {{&(0x7f0000003740)=@nl=@proc, 0x80, &(0x7f0000003b40)=[{&(0x7f00000037c0)=""/224, 0xe0}, {&(0x7f00000038c0)=""/112, 0x70}, {&(0x7f0000003940)=""/218, 0xda}, {&(0x7f00000036c0)=""/47, 0x2f}, {&(0x7f0000003a40)=""/208, 0xd0}], 0x5, &(0x7f0000003bc0)=""/135, 0x87}, 0x2}, {{&(0x7f0000003c80)=@caif, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d00)=""/166, 0xa6}, {&(0x7f0000003dc0)=""/172, 0xac}], 0x2, &(0x7f0000003ec0)=""/78, 0x4e}, 0x6}], 0x7, 0x2000, &(0x7f0000004100)={0x77359400})

643.030109ms ago: executing program 8 (id=2618):
r0 = syz_open_dev$rtc(&(0x7f0000000040), 0xe5, 0x400000)
ioctl$RTC_AIE_ON(r0, 0x7001)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap'])
syz_open_dev$rtc(&(0x7f0000000040), 0xe5, 0x400000) (async)
ioctl$RTC_AIE_ON(r0, 0x7001) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap']) (async)

545.500967ms ago: executing program 8 (id=2619):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10000001)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

430.839055ms ago: executing program 8 (id=2620):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socket(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x84082, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

317.353208ms ago: executing program 8 (id=2621):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1", 0xbd}, {&(0x7f0000000780)="9c801ff5d2aa6d68", 0x8}, {&(0x7f0000001180)="772516781d57ec5488386a48e8fac06873ef12f52570c0822edf034811dfeef017d1c5b6fff810a39aaf93cd48f3e044dd76541ac22192b184e28e766973e5d04fa2074ae0c43e311fde596b1d322f00f451f16ae5beb01b6d7c26e77d91d1eafd1a996c5fb75638a80f000054d364faa6da61de6908dbc0bf605e8d6cb93f8aca661800"/146, 0x92}, {&(0x7f0000000800)="e7e03754b7c83d5d98da056ed57f6adc23fb7d2dccfd819de4b360a6384bdf7b596d78f968b113fec9585b0e51870621686ccb014f62129ccd03f32ee07c9c1751f16da9c2523d4851d51abddea27532bb765f175957a5cd9fde98b9d9072a3c479ffc5cf303968c7e3e206f2e261f4676506066d622bf43e3a295aa53b2026780b93f69b425869afd11bec1c85bae81550a7e3f7ce96369ae5487abe4db8e942a83c8b81b7eb7935cf73ec5dfb9977edd82559a63a5a176dceca84bde2edd8b27702b0e7775c9820d627cb8a60982c7fba863d0daed9f83362d7c5cbbfba0abeaf103591c1aa60780", 0xe9}, {&(0x7f0000000900)="07659b2bda766122a73713834e1e7d66a08fc8bb0153096073dd118496360845e6027ad467edd9cfff6358f25aed4f924cfb0388af3a784c8dd25c933411ddfe83d0687690cac822a6fcd4c2941f78932e63a37777fb5d955728edcfa88fea2257d057aa931261102fc9cd4e0e1d66688a612ae48d6a0bd3d26261f6f30296e90894a551f97f8c12a6f77c8d9e45f3494fe4b2a884020ce66604f35a0c080007a66f87a6f6b83d41492356f4ddf49637e2f4847eb81f26444423254f7b586208e58f60e8fff87e2ecccc7ec383f9d5228f243bec65720e6c56f7db5cb4e7fd", 0xdf}], 0x5}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)="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", 0x2ff}], 0x1}}], 0x2, 0xc8c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

43.463597ms ago: executing program 9 (id=2622):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f00000001c0))
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000540), 0x2400, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x3, 0xb, 0x166, 0xb26e, 0x17, "54d7c5634ea58e488022326409014a6b2815af"})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6)
ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000000)="3166b6")

18.87233ms ago: executing program 9 (id=2623):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c1000ffffffa6224e000096f2d9ca1298b83b16", 0x61}], 0x1)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x51526000)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0xfffffffc, 0x0, 0xffff2aef, 0x5, 0x802, 0x8, 0x1000}})
r6 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
accept4$unix(r6, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800)
ioctl$VT_DISALLOCATE(r0, 0x5608)

0s ago: executing program 5 (id=2624):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4502002195f5758483e73ce479"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x1)
ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x1, 0x1, 0x10ac, 0x4, 0x7, 0x84, 0x4, 0xc, 0x1, 0x3, 0x7, 0x3ff, 0x1, 0x54})
newfstatat(0xffffffffffffff9c, &(0x7f0000001c80)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x900)
setresuid(0xee01, r2, r2)
r3 = accept(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000001c0)=0x80)
fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, <r4=>0x0})
r5 = getegid()
r6 = gettid()
syz_open_procfs(r6, &(0x7f0000000040)='timerslack_ns\x00')
statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000001c00)=0xe8)
read$FUSE(0xffffffffffffffff, &(0x7f0000003e00)={0x2020, 0x0, 0x0, 0x0, <r10=>0x0}, 0x2020)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)=[{&(0x7f00000000c0)={0xbc, 0x35, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x67, 0x7, 0x0, 0x0, @binary="1419759b4f885d36c86f7481c93497ec1493811be21f38571fddcf5b317ce7feb86e3b9755ea0c0264cd110f8f9cf6ae034560a63ab9f3aa771f91c60837a7a04f36cc046e009f2988f54041a8b5086d43a9a5a945bd2a551646406ec645b13dcdadf0"}, @typed={0x8, 0x60, 0x0, 0x0, @fd=r1}, @generic="1e63935efe0012997cc9630394684576c0809750dd9a34ec854ab305d77f01fa01b0aaeea08646b1e05d98a35589523263e63549f8d3fc09ecf033"]}, 0xbc}, {&(0x7f0000000580)={0x1564, 0x1d, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x94, 0xf2, 0x0, 0x1, [@generic="7591717449b1154ffd68908ec8c3b0249e76917772d5ad950717ec73d4fdf381ae96bdf025a692200b85323347f06f97299a5e10747a6e0344d94f8d027fc2f8b138e88db0ecd51601beb5514f404d68a252cfa8de4af0bb045cd3225274de88356cef0f81874d080dfb0cf13883b357106dafc96c895c95582f3ce7cd360f85036d3311dec8f795f403fb0bef3c20f5"]}, @typed={0x7, 0x108, 0x0, 0x0, @str='#{\x00'}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r1}, @typed={0xfc, 0x50, 0x0, 0x0, @binary="a5a9a5a031684d2fb48d61a89c491f493f60ebc5cf8a9d8c70d1aeb5ac0ecb7d9bad09a7f6a8c016a61e6c32ff60e3fec7d85644ff9ce5b8e88dac80b209425175ac0f8979bccb9af1aab4c62eb4ef6e05d6b7e0b630fb412cefbbb6446f651db8695837f3700bae4b16cf41d81f4edebb49566eb37bb20f0a96e418bdc24a008c12a20484aa0fa3467367783401e79066b80f0d6c6af8db8313b8f0192e6e5c042552253698da9de6595595681188114d9e53248b29e63757d8f773e3e7c7718508ff51cabf2405cdb0051c652324198588153016201772c35f2d88d73ad96400b367e6191d93ebd2985a9101aef5d11fab45c1bf94e56e"}, @generic="228061d06f845fd3ebb15b01b57a45e755dc9e4eef63ca867e936f2353a65ad916cc399d9d05471a8c32111ecd4f08bf7b3e62f994c9d432c723aa051c6c4599dcad61cb6cbf89755d664f386a47b59f8e8c047a838f8b74be7c45df4a3b0ddf944c07a82c4033e994e17675e88eb24e5b5551e08d962f8a90abf44e9804eb52d6b74bc2d2061c70f7cc26f74cadfc6c677e0ae94bd164e40aaa4aa2cc57e5c4777902da02c122", @generic="6c12db7ba03dcce5ed7c9728d2cc9ff1895a2d5388e9c01fce3dc3f9b7ac356b698a1fe8e27b1161cf957d79c0ce04fe545bb385df5dd45d01123901052d21d52814af6ed640dd2b33a892b1d6d521efbff5ebcf7089e361c02f2ccc0fc7a2e17a", @nested={0x154, 0xdf, 0x0, 0x1, [@typed={0x8e, 0x23, 0x0, 0x0, @binary="cbebc20faf2db75b607a828f7b1290c7509e33de35aab73565db15fd0629cc41947d81496ac57e37234b7b01482523408f2ea8aee48b172145901d731475e458e8983336a91ab5f7d8a37209a688e7842c28d4adf26efbcbd07505b2252a959d7ecbf7035b88843ef0a137c960809864ce509e90a107d1a30228e059d378ffb63ebddd2a1973c58d2f7e"}, @typed={0xbd, 0x9c, 0x0, 0x0, @binary="f21dfe945127c820eb055b844f45b48a98de7aeb08599b0572d6c77b6824ac777569bb40014ea3dcab2c7b9d74729a0124d0714b71bcd3e787c6ee3a151120a66cfe08a5e8e004c89c459ce15086cdc84ab0720849148a53e0f89a31ff1353b8f6f5fef9b9710e97514f903e98307c07b805fafaccf35f350faee4704b25e043d772d23ee2bc03eacba0b49fe6451bc4d4c851aead57982b7b37669d2c8e2c84131d91f5f6e71dedcb631090781d69ebeb0cf7ec1f288ebbcc"}]}, @typed={0x8, 0xfe, 0x0, 0x0, @uid=r2}, @nested={0x1148, 0x87, 0x0, 0x1, [@generic="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", @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@local}, @generic="20d2023372849ccc239b6046db677f80e6f369e65cdf691560b49471c0f07d33641784942c8fc450b758f3374acbec7b462f4d19b7eaa1b1679d7d96d18dfe122521a5c8a5952c9c858fbb0f9b4e7ca98777fd377fe58354fa1e4f789ef15afb6057f3d763b2514a1f30c39091234a964ffbe56853", @generic="2476f16d5dd44460bbba315d31ebfd2d2a4de5c0b2f0eb6e1bf5492251795c39b4c8509e1f6189718c7888873132b5c318500fbe34ee9274fda4d3dde7003a45ffa7f88744e18e614f5ee050047d8c0c181fbd4147fe50625ce4d14b876afdc1e10ad73cc1cf2d647868cbb7a8d63425660301aec5d3bc342c804c7d5df960e9aef91d629eae98451fca10e938870f7fb75c2d72156c8e0310b67b120143d36b682dda", @typed={0x15, 0x60, 0x0, 0x0, @str='/dev/usb/hiddev#\x00'}]}, @typed={0x8, 0x8d, 0x0, 0x0, @fd=r1}]}, 0x1564}], 0x2, &(0x7f0000003c80)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, r5}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r1, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, r10}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}}], 0x118, 0x4000}, 0xb54bd38950ec0d9f)

kernel console output (not intermixed with test programs):

: Manufacturer: syz
[  472.172550][   T10] usb 9-1: SerialNumber: syz
[  472.187868][   T10] usb 9-1: config 0 descriptor??
[  472.201166][   T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  472.346815][T13443] overlay: Unknown parameter 'fowner<00000000000000000000'
[  472.452613][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.463454][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.907515][   T10] gspca_zc3xx: reg_r err -110
[  472.912453][   T10] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110
[  474.099861][T13461] 8021q: adding VLAN 0 to HW filter on device bond0
[  474.107018][T13461] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  474.124123][T13461] bond0: (slave sit0): Error -95 calling set_mac_address
[  474.448189][ T3095] usb 7-1: new low-speed USB device number 70 using dummy_hcd
[  474.567899][   T56] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 360 seconds
[  474.581698][   T56] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 360 seconds
[  474.593137][   T56] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 360 seconds
[  474.605331][   T56] block nbd0: Possible stuck request ffff888025357540: control (read@3072,1024B). Runtime 360 seconds
[  474.618889][ T3095] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  474.640473][ T3095] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.653497][ T3095] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  474.666302][ T3095] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.690586][ T3095] usb 7-1: config 0 descriptor??
[  474.719912][ T5904] usb 9-1: USB disconnect, device number 45
[  474.809241][T13491] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  474.818414][T13491] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  475.118549][ T3095] glorious 0003:258A:0036.0042: item fetching failed at offset 0/2
[  475.136867][ T3095] glorious 0003:258A:0036.0042: probe with driver glorious failed with error -22
[  475.181696][T13504] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  475.207440][ T3476] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  475.223592][T13504] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  475.237210][ T5904] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[  475.329788][ T3095] usb 7-1: USB disconnect, device number 70
[  475.410243][ T5904] usb 9-1: Using ep0 maxpacket: 8
[  475.424053][ T5904] usb 9-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  475.447336][ T5904] usb 9-1: config 1 interface 0 has no altsetting 0
[  475.469333][ T5904] usb 9-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40
[  475.487196][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.498937][ T5904] usb 9-1: Product: syz
[  475.503150][ T5904] usb 9-1: Manufacturer: syz
[  475.511155][ T5904] usb 9-1: SerialNumber: syz
[  475.829905][ T5904] usbhid 9-1:1.0: can't add hid device: -71
[  475.835943][ T5904] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  475.867312][ T5904] usb 9-1: USB disconnect, device number 46
[  477.432345][T13537] tipc: Started in network mode
[  477.440606][T13537] tipc: Node identity 4, cluster identity 4711
[  477.447021][T13537] tipc: Node number set to 4
[  477.507284][ T5947] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  477.637321][ T5947] usb 7-1: device descriptor read/64, error -71
[  477.824652][   T30] audit: type=1326 audit(1757387177.483:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13543 comm="syz.5.2146" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfbbb8ebe9 code=0x0
[  477.907649][ T5947] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[  478.037336][ T5947] usb 7-1: device descriptor read/64, error -71
[  478.154608][ T5947] usb usb7-port1: attempt power cycle
[  478.477253][ T5904] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  478.497330][ T5947] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[  478.518010][ T5947] usb 7-1: device descriptor read/8, error -71
[  478.617416][ T5904] usb 9-1: device descriptor read/64, error -71
[  478.757265][ T5947] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[  478.778628][ T5947] usb 7-1: device descriptor read/8, error -71
[  478.857252][ T5904] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[  478.889926][ T5947] usb usb7-port1: unable to enumerate USB device
[  478.989868][ T5904] usb 9-1: device descriptor read/64, error -71
[  479.098045][ T5904] usb usb9-port1: attempt power cycle
[  479.157774][ T5947] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0
[  479.175691][ T5947] hid-generic 0000:0000:0000.0043: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  479.345917][T13554] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2150'.
[  479.437404][ T5904] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[  479.470021][ T5904] usb 9-1: device descriptor read/8, error -71
[  479.717339][ T5904] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[  479.737829][ T5904] usb 9-1: device descriptor read/8, error -71
[  479.848536][ T5904] usb usb9-port1: unable to enumerate USB device
[  480.767244][ T5947] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[  480.921340][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  480.931836][ T5947] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  480.946467][ T5947] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  480.955743][ T5947] usb 7-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  480.964445][ T5947] usb 7-1: Manufacturer: syz
[  480.974046][ T5947] usb 7-1: config 0 descriptor??
[  480.985203][ T5947] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  481.200933][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.210286][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.302087][T13583] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  481.411090][T13586] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  481.421074][T13586] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  481.767408][   T10] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[  481.897209][   T10] usb 9-1: device descriptor read/64, error -71
[  482.137259][   T10] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[  482.267264][   T10] usb 9-1: device descriptor read/64, error -71
[  482.378289][   T10] usb usb9-port1: attempt power cycle
[  482.717328][   T10] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[  482.739549][   T10] usb 9-1: device descriptor read/8, error -71
[  482.977337][   T10] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[  482.999469][   T10] usb 9-1: device descriptor read/8, error -71
[  483.107624][   T10] usb usb9-port1: unable to enumerate USB device
[  483.548678][ T5904] usb 7-1: USB disconnect, device number 75
[  483.693695][T13598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.702663][T13598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.714664][T13595] [U] 
[  484.476832][T13605] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  484.483849][T13605] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  484.887489][ T5947] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[  485.060125][ T5947] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.083634][ T5947] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  485.109222][ T5947] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  485.119018][ T5947] usb 7-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  485.134735][ T5947] usb 7-1: Manufacturer: syz
[  485.147705][ T5947] usb 7-1: config 0 descriptor??
[  485.175680][ T5947] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  485.391450][T13613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.406134][T13613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.707361][ T5904] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[  485.861249][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.872229][ T5904] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.882202][ T5904] usb 9-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  485.891375][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.902667][ T5904] usb 9-1: config 0 descriptor??
[  486.318365][ T5904] sony 0003:054C:0268.0044: item fetching failed at offset 3/5
[  486.326547][ T5904] sony 0003:054C:0268.0044: parse failed
[  486.335726][ T5904] sony 0003:054C:0268.0044: probe with driver sony failed with error -22
[  486.519397][T13631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.528707][T13631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.539451][ T5927] usb 9-1: USB disconnect, device number 55
[  487.200190][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2187'.
[  487.456294][T11805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  487.466619][T11805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  487.475003][T11805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  487.485996][T11805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  487.493960][T11805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  487.535914][T13646] wg0 speed is unknown, defaulting to 1000
[  487.647262][ T5947] usb 9-1: new full-speed USB device number 56 using dummy_hcd
[  487.680170][   T10] usb 7-1: USB disconnect, device number 76
[  487.724302][T13646] chnl_net:caif_netlink_parms(): no params data found
[  487.805060][ T5947] usb 9-1: unable to get BOS descriptor or descriptor too short
[  487.823837][ T5947] usb 9-1: not running at top speed; connect to a high speed hub
[  487.837014][ T5947] usb 9-1: config 129 has an invalid interface number: 28 but max is 0
[  487.858940][ T5947] usb 9-1: config 129 has no interface number 0
[  487.873653][ T5947] usb 9-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  487.886153][ T5947] usb 9-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64
[  487.888857][T13646] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.905949][ T5947] usb 9-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  487.920456][T13646] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.932232][ T5947] usb 9-1: config 129 interface 28 has no altsetting 0
[  487.936063][T13646] bridge_slave_0: entered allmulticast mode
[  487.948178][T13646] bridge_slave_0: entered promiscuous mode
[  487.949862][ T5947] usb 9-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57
[  487.956943][T13646] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.971205][T13646] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.978496][T13646] bridge_slave_1: entered allmulticast mode
[  487.984606][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.991682][T13646] bridge_slave_1: entered promiscuous mode
[  487.999179][ T5947] usb 9-1: Product: syz
[  488.003474][ T5947] usb 9-1: Manufacturer: syz
[  488.015654][ T5947] usb 9-1: SerialNumber: syz
[  488.035386][T13645] raw-gadget.5 gadget.8: fail, usb_ep_enable returned -22
[  488.053958][T13646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.067460][   T10] usb 7-1: new low-speed USB device number 77 using dummy_hcd
[  488.069693][T13646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.132480][T13646] team0: Port device team_slave_0 added
[  488.145771][T13646] team0: Port device team_slave_1 added
[  488.153824][T13661] ALSA: seq fatal error: cannot create timer (-19)
[  488.216964][T13664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.217407][   T10] usb 7-1: device descriptor read/64, error -71
[  488.226405][T13664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.255801][T13646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.261500][T13664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.263527][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.277735][T13664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.298545][T13646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.334225][T13646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.341642][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.369895][T13646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.380978][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2186'.
[  488.436849][T13646] hsr_slave_0: entered promiscuous mode
[  488.443878][T13646] hsr_slave_1: entered promiscuous mode
[  488.455740][T13646] debugfs: 'hsr0' already exists in 'hsr'
[  488.462108][T13646] Cannot create hsr debugfs directory
[  488.497307][   T10] usb 7-1: new low-speed USB device number 78 using dummy_hcd
[  488.559397][ T5947] etas_es58x 9-1:129.28: Starting syz syz (Serial Number syz)
[  488.578317][ T5947] etas_es58x 9-1:129.28: could not retrieve the product info string
[  488.637213][   T10] usb 7-1: device descriptor read/64, error -71
[  488.655441][ T5947] usb 9-1: USB disconnect, device number 56
[  488.671615][ T5947] etas_es58x 9-1:129.28: Disconnecting syz syz
[  488.748466][   T10] usb usb7-port1: attempt power cycle
[  488.797924][T13646] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  488.812576][T13646] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  488.848035][T13646] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  488.865781][T13646] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  488.965309][T13646] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.989935][T13646] 8021q: adding VLAN 0 to HW filter on device team0
[  489.007074][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state
[  489.014362][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  489.017272][T13678] tmpfs: Unknown parameter 'nr'
[  489.037880][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state
[  489.045044][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state
[  489.110219][   T10] usb 7-1: new low-speed USB device number 79 using dummy_hcd
[  489.139456][   T10] usb 7-1: device descriptor read/8, error -71
[  489.261054][T13686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.282579][T13686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.301986][T13686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.314475][T13686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.332221][T13646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  489.379023][   T10] usb 7-1: new low-speed USB device number 80 using dummy_hcd
[  489.409406][   T10] usb 7-1: device descriptor read/8, error -71
[  489.528551][T11804] Bluetooth: hci4: command tx timeout
[  489.536480][   T10] usb usb7-port1: unable to enumerate USB device
[  489.549664][T13646] veth0_vlan: entered promiscuous mode
[  489.566450][T13646] veth1_vlan: entered promiscuous mode
[  489.599113][T13646] veth0_macvtap: entered promiscuous mode
[  489.608964][T13646] veth1_macvtap: entered promiscuous mode
[  489.628640][T13646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  489.643935][T13646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  489.660853][ T1317] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  489.671857][ T1317] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  489.681703][ T1317] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  489.692882][ T1317] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  489.771173][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  489.789087][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.821557][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  489.829965][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.906993][T13695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.924223][T13695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.081012][T13702] tipc: Started in network mode
[  490.085977][T13702] tipc: Node identity 4, cluster identity 4711
[  490.095566][T13702] tipc: Node number set to 4
[  490.523094][T13714] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2197'.
[  490.717723][ T5962] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  490.867538][ T5962] usb 10-1: Using ep0 maxpacket: 32
[  490.874364][ T5962] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  490.884023][ T5962] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.895228][ T5962] usb 10-1: config 0 descriptor??
[  490.904474][ T5962] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  491.127476][   T10] usb 7-1: new high-speed USB device number 81 using dummy_hcd
[  491.279016][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  491.289977][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  491.304781][   T10] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  491.314137][   T10] usb 7-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  491.324024][   T10] usb 7-1: Manufacturer: syz
[  491.330781][   T10] usb 7-1: config 0 descriptor??
[  491.339920][   T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  491.482626][T13723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  491.505561][ T5962] gspca_vc032x: reg_w err -71
[  491.513996][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.520090][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.525461][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.533148][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.545049][T13718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.553659][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.555624][T13718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.559202][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.572256][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.577746][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.583035][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.597633][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.603343][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.609008][T11804] Bluetooth: hci4: command tx timeout
[  491.614990][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.620569][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.625867][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.633196][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.639468][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.644784][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.650215][ T5962] gspca_vc032x: I2c Bus Busy Wait 00
[  491.655509][ T5962] gspca_vc032x: Unknown sensor...
[  491.660819][ T5962] vc032x 10-1:0.0: probe with driver vc032x failed with error -22
[  491.672023][ T5962] usb 10-1: USB disconnect, device number 2
[  492.158250][T13744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.177867][T13744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.358974][ T3095] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  493.527456][ T3095] usb 10-1: Using ep0 maxpacket: 16
[  493.534319][ T3095] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  493.544739][ T3095] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  493.554314][ T3095] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  493.568628][ T3095] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.580874][ T3095] usb 10-1: config 0 descriptor??
[  493.644135][T13782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.655065][T13782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.687546][T11804] Bluetooth: hci4: command tx timeout
[  493.766735][   T10] usb 7-1: USB disconnect, device number 81
[  493.777824][ T2846] block nbd1: Connection timed out, retrying (0/2 alive)
[  493.787076][ T2846] block nbd1: Connection timed out, retrying (0/2 alive)
[  493.794383][ T2846] block nbd1: Connection timed out, retrying (0/2 alive)
[  493.803354][   T25] block nbd1: Dead connection, failed to find a fallback
[  493.815406][ T2846] block nbd1: Connection timed out, retrying (0/2 alive)
[  493.822554][   T25] block nbd1: shutting down sockets
[  493.829060][   T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.840588][   T25] Buffer I/O error on dev nbd1, logical block 1, async page read
[  493.849340][   T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.858589][   T25] Buffer I/O error on dev nbd1, logical block 0, async page read
[  493.866438][   T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.877215][   T25] Buffer I/O error on dev nbd1, logical block 3, async page read
[  493.885987][   T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.895225][   T25] Buffer I/O error on dev nbd1, logical block 2, async page read
[  493.905082][ T5867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.915138][ T5867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  493.923628][ T5867] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.936350][ T5867] Buffer I/O error on dev nbd1, logical block 1, async page read
[  493.944577][ T5867] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.953713][ T5867] Buffer I/O error on dev nbd1, logical block 2, async page read
[  493.961760][ T5867] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.970974][ T5867] Buffer I/O error on dev nbd1, logical block 3, async page read
[  493.979130][ T5867] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  493.989714][ T5867] Buffer I/O error on dev nbd1, logical block 0, async page read
[  493.997744][ T5867] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  494.006879][ T5867] Buffer I/O error on dev nbd1, logical block 1, async page read
[  494.019818][ T5867] ldm_validate_partition_table(): Disk read failed.
[  494.028219][ T5867] Dev nbd1: unable to read RDB block 0
[  494.035152][ T5867]  nbd1: unable to read partition table
[  494.045888][ T5867] ldm_validate_partition_table(): Disk read failed.
[  494.056264][ T5867] Dev nbd1: unable to read RDB block 0
[  494.063781][ T5867]  nbd1: unable to read partition table
[  494.168181][   T10] usb 7-1: new high-speed USB device number 82 using dummy_hcd
[  494.319102][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.330621][   T10] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  494.345799][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.372333][   T10] usb 7-1: config 0 descriptor??
[  494.564275][ T3095] usb 10-1: USB disconnect, device number 3
[  494.713558][T13804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2219'.
[  494.787804][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2215'.
[  494.800899][   T10] usbhid 7-1:0.0: can't add hid device: -71
[  494.811542][   T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  494.835076][   T10] usb 7-1: USB disconnect, device number 82
[  495.077314][ T3095] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  495.241290][ T3095] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  495.252605][ T3095] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0a1e, bcdDevice= 0.00
[  495.262150][ T3095] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.272248][ T3095] usb 10-1: config 0 descriptor??
[  495.279238][T13803] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22
[  495.351505][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2221'.
[  495.607549][ T5962] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[  495.716673][ T3095] usbhid 10-1:0.0: can't add hid device: -71
[  495.725547][ T3095] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  495.745214][ T3095] usb 10-1: USB disconnect, device number 4
[  495.757401][ T5962] usb 7-1: Using ep0 maxpacket: 32
[  495.776022][ T5962] usb 7-1: config 50 has too many interfaces: 254, using maximum allowed: 32
[  495.793542][T11804] Bluetooth: hci4: command tx timeout
[  495.800070][ T5962] usb 7-1: config 50 has an invalid descriptor of length 197, skipping remainder of the config
[  495.817373][ T5962] usb 7-1: config 50 has 0 interfaces, different from the descriptor's value: 254
[  495.826744][ T5962] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[  495.837467][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.070318][T13811] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2221'.
[  496.177268][ T3095] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  496.197419][    T9] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[  496.331084][ T3095] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  496.343071][ T3095] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  496.349024][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  496.358664][ T3095] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  496.377370][ T3095] usb 10-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  496.377725][    T9] usb 9-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  496.385715][ T3095] usb 10-1: Manufacturer: syz
[  496.395071][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.408926][    T9] usb 9-1: Product: syz
[  496.411896][ T3095] usb 10-1: config 0 descriptor??
[  496.417253][    T9] usb 9-1: Manufacturer: syz
[  496.423277][ T3095] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  496.431916][    T9] usb 9-1: SerialNumber: syz
[  496.451571][    T9] usb 9-1: config 0 descriptor??
[  496.631016][T13816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.641645][T13816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.674071][    T9] usb 9-1: USB disconnect, device number 57
[  496.766369][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.775502][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.800719][T13840] overlayfs: empty lowerdir
[  497.939745][T13848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.950138][T13848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.365795][ T5962] usb 7-1: string descriptor 0 read error: -71
[  498.374358][ T5962] usb 7-1: USB disconnect, device number 83
[  498.690286][T13859] syzkaller1: entered promiscuous mode
[  498.706844][T13859] syzkaller1: entered allmulticast mode
[  498.878280][T13863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  498.900575][T13863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.914976][ T3095] usb 10-1: USB disconnect, device number 5
[  498.947231][ T5973] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[  499.060927][   T30] audit: type=1400 audit(1757387198.713:35): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13866 comm="syz.6.2238"
[  499.075220][T13867] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2238'.
[  499.107452][ T5973] usb 9-1: device descriptor read/64, error -71
[  499.267239][ T3095] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  499.347340][ T5973] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[  499.417639][ T3095] usb 10-1: Using ep0 maxpacket: 16
[  499.424882][ T3095] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  499.436205][ T3095] usb 10-1: config 0 interface 0 has no altsetting 0
[  499.443006][ T3095] usb 10-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  499.452700][ T3095] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.463371][ T3095] usb 10-1: config 0 descriptor??
[  499.477217][ T5973] usb 9-1: device descriptor read/64, error -71
[  499.588799][ T5973] usb usb9-port1: attempt power cycle
[  499.606827][T13880] syzkaller1: entered promiscuous mode
[  499.612576][T13880] syzkaller1: entered allmulticast mode
[  499.689365][ T3095] usbhid 10-1:0.0: can't add hid device: -71
[  499.695483][ T3095] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  499.733324][ T3095] usb 10-1: USB disconnect, device number 6
[  499.928130][ T5973] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[  499.969832][ T5973] usb 9-1: device descriptor read/8, error -71
[  500.002028][T13895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.024260][T13895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.145911][T13903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.168841][T13903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.207640][ T5973] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[  500.232417][ T5973] usb 9-1: device descriptor read/8, error -71
[  500.257336][ T5904] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  500.357691][ T5973] usb usb9-port1: unable to enumerate USB device
[  500.377254][ T3095] usb 7-1: new high-speed USB device number 84 using dummy_hcd
[  500.409032][ T5904] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.419948][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.429975][ T5904] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  500.445302][ T5904] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  500.455062][ T5904] usb 10-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  500.463307][ T5904] usb 10-1: Manufacturer: syz
[  500.471446][ T5904] usb 10-1: config 0 descriptor??
[  500.482108][ T5904] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  500.539059][ T3095] usb 7-1: Using ep0 maxpacket: 16
[  500.545876][ T3095] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.556232][ T3095] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  500.567310][ T3095] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  500.576956][ T3095] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  500.589868][ T3095] usb 7-1: config 0 interface 0 has no altsetting 0
[  500.601621][ T3095] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  500.610881][ T3095] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.619148][ T3095] usb 7-1: Product: syz
[  500.623328][ T3095] usb 7-1: Manufacturer: syz
[  500.627956][ T3095] usb 7-1: SerialNumber: syz
[  500.634374][ T3095] usb 7-1: config 0 descriptor??
[  500.684495][T13896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.696100][T13896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.739117][T13905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.750379][T13905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.824230][T13910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.834830][T13910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.842827][ T3095] usb 7-1: Can not set alternate setting to 1, error: -71
[  500.860278][ T3095] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71
[  500.878615][ T3095] usb 7-1: USB disconnect, device number 84
[  501.453284][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  501.461067][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  501.501348][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.517989][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.545621][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.554611][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.566630][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.579112][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.589780][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.599516][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.610156][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.633630][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.007521][ T5962] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[  502.157383][ T5962] usb 9-1: Using ep0 maxpacket: 8
[  502.168357][ T5962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  502.195263][ T5962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  502.206127][ T5962] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  502.215943][ T5962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  502.229853][ T5962] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  502.239960][ T5962] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  502.249194][ T5962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.264453][ T5962] usb 9-1: config 0 descriptor??
[  502.270478][T13923] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  502.690980][   T10] usb 9-1: USB disconnect, device number 62
[  502.693208][T11804] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  503.014015][ T5973] usb 10-1: USB disconnect, device number 7
[  503.046778][ T5962] usb 7-1: new high-speed USB device number 85 using dummy_hcd
[  503.052207][T13936] support for cryptoloop has been removed.  Use dm-crypt instead.
[  503.252042][ T5962] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  503.295385][ T5962] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  503.422788][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.620290][ T5962] usb 7-1: config 0 descriptor??
[  503.632461][ T5962] pwc: Askey VC010 type 2 USB webcam detected.
[  504.032031][ T5962] pwc: recv_control_msg error -32 req 02 val 2b00
[  504.039299][ T5962] pwc: recv_control_msg error -32 req 02 val 2700
[  504.046270][ T5962] pwc: recv_control_msg error -32 req 02 val 2c00
[  504.055980][ T5962] pwc: recv_control_msg error -32 req 04 val 1000
[  504.063404][ T5962] pwc: recv_control_msg error -32 req 04 val 1300
[  504.073116][ T5962] pwc: recv_control_msg error -32 req 04 val 1400
[  504.080408][ T5962] pwc: recv_control_msg error -32 req 02 val 2000
[  504.127455][   T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  504.279939][   T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.290435][ T5962] pwc: recv_control_msg error -32 req 04 val 1500
[  504.297565][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  504.308374][   T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  504.323068][ T5962] pwc: recv_control_msg error -32 req 02 val 2500
[  504.332880][ T5962] pwc: recv_control_msg error -32 req 02 val 2400
[  504.340157][   T10] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  504.342090][T13933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.355937][ T5962] pwc: recv_control_msg error -32 req 02 val 2600
[  504.363412][T13933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.365078][   T10] usb 10-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  504.381297][ T5962] pwc: recv_control_msg error -32 req 02 val 2900
[  504.387821][   T10] usb 10-1: Manufacturer: syz
[  504.394178][ T5962] pwc: recv_control_msg error -32 req 02 val 2800
[  504.401621][   T10] usb 10-1: config 0 descriptor??
[  504.415003][   T10] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  504.538932][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.548164][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.618940][ T5962] pwc: Registered as video103.
[  504.625104][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.637525][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.648305][ T5962] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input64
[  504.663095][   T56] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 390 seconds
[  504.673909][   T56] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 390 seconds
[  504.685307][   T56] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 390 seconds
[  504.696413][   T56] block nbd0: Possible stuck request ffff888025357540: control (read@3072,1024B). Runtime 390 seconds
[  504.817682][ T5962] usb 7-1: USB disconnect, device number 85
[  505.194835][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.205783][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.226463][T13998] erofs (device nbd5): cannot find valid erofs superblock
[  506.684873][T14053] 9pnet: Could not find request transport: �fd
[  506.766527][   T30] audit: type=1800 audit(1757387206.423:36): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2277" name="/" dev="9p" ino=2 res=0 errno=0
[  506.927677][ T3095] usb 10-1: USB disconnect, device number 8
[  507.020954][T14066] netlink: 'syz.9.2280': attribute type 2 has an invalid length.
[  507.030417][T14066] netlink: 'syz.9.2280': attribute type 8 has an invalid length.
[  507.038692][T14066] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2280'.
[  507.208849][T13968] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  507.368001][ T3095] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  507.537312][ T3095] usb 10-1: Using ep0 maxpacket: 32
[  507.544877][ T3095] usb 10-1: config 0 has an invalid interface number: 12 but max is 0
[  507.555522][ T3095] usb 10-1: config 0 has no interface number 0
[  507.557368][   T10] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[  507.565212][ T3095] usb 10-1: config 0 interface 12 has no altsetting 0
[  507.582436][ T3095] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  507.591657][ T3095] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.599979][ T3095] usb 10-1: Product: syz
[  507.605346][ T3095] usb 10-1: Manufacturer: syz
[  507.610146][ T3095] usb 10-1: SerialNumber: syz
[  507.616480][ T3095] usb 10-1: config 0 descriptor??
[  507.717403][   T10] usb 7-1: Using ep0 maxpacket: 8
[  507.734163][   T10] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  507.765228][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.787024][   T10] usb 7-1: Product: syz
[  507.793264][   T10] usb 7-1: Manufacturer: syz
[  507.806119][   T10] usb 7-1: SerialNumber: syz
[  507.824104][   T10] usb 7-1: config 0 descriptor??
[  507.852894][ T3095] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  507.865362][ T3095] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71
[  507.874263][ T3095] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  507.882111][ T3095] f81534 10-1:0.12: probe with driver f81534 failed with error -71
[  507.901570][ T3095] usb 10-1: USB disconnect, device number 9
[  508.077475][   T10] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  508.096756][   T10] gspca_sunplus: reg_w_riv err -71
[  508.104097][   T10] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  508.125698][   T10] usb 7-1: USB disconnect, device number 86
[  508.537424][ T5962] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[  508.582327][T14093] QAT: failed to copy from user.
[  508.699712][ T5962] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.714676][ T5962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  508.724779][ T5962] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  508.739275][T14098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.751231][ T5962] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  508.759786][T14098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.773622][ T5962] usb 9-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  508.777065][T14098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.805043][T14098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.820104][ T5962] usb 9-1: Manufacturer: syz
[  508.853247][ T5962] usb 9-1: config 0 descriptor??
[  508.871755][ T5962] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  508.960226][   T30] audit: type=1800 audit(1757387208.623:37): pid=14108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2294" name="/" dev="9p" ino=2 res=0 errno=0
[  509.085801][T14087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.112751][T14087] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.287468][ T3095] usb 10-1: new full-speed USB device number 10 using dummy_hcd
[  509.439059][ T3095] usb 10-1: config 0 has an invalid interface number: 182 but max is 0
[  509.457586][ T3095] usb 10-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config
[  509.468461][ T3095] usb 10-1: config 0 has no interface number 0
[  509.474684][ T3095] usb 10-1: too many endpoints for config 0 interface 182 altsetting 96: 185, using maximum allowed: 30
[  509.492626][ T3095] usb 10-1: config 0 interface 182 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 185
[  509.512528][ T3095] usb 10-1: config 0 interface 182 has no altsetting 0
[  509.522068][ T3095] usb 10-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  509.538888][ T3095] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.551004][ T3095] usb 10-1: Product: syz
[  509.555292][ T3095] usb 10-1: Manufacturer: syz
[  509.560902][ T3095] usb 10-1: SerialNumber: syz
[  509.572646][ T3095] usb 10-1: config 0 descriptor??
[  509.810982][ T3095] imon 10-1:0.182: unable to register, err -19
[  509.832232][ T3095] usb 10-1: USB disconnect, device number 10
[  510.734487][T14146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.743541][T14146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.755671][T14146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.769945][T14146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.253282][ T3095] usb 9-1: USB disconnect, device number 63
[  511.357242][ T5962] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[  511.364901][   T30] audit: type=1800 audit(1757387211.023:38): pid=14151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2310" name="/" dev="9p" ino=2 res=0 errno=0
[  511.493484][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.537888][ T5962] usb 7-1: Using ep0 maxpacket: 16
[  511.545752][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.553330][ T5962] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  511.580613][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  511.601334][ T5962] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  511.621841][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.640689][ T5962] usb 7-1: Product: syz
[  511.645035][ T5962] usb 7-1: Manufacturer: syz
[  511.652645][ T5962] usb 7-1: SerialNumber: syz
[  511.671937][ T5962] usb 7-1: config 0 descriptor??
[  511.698849][ T5962] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  511.732968][ T5962] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  511.857645][ T5973] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[  512.057285][ T5973] usb 9-1: Using ep0 maxpacket: 8
[  512.071200][ T5973] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e
[  512.087188][ T5973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.105712][ T5973] usb 9-1: Product: syz
[  512.120104][ T5973] usb 9-1: Manufacturer: syz
[  512.129687][ T5973] usb 9-1: SerialNumber: syz
[  512.157069][ T5973] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  512.166043][ T5973] usb 9-1: setting power ON
[  512.187137][ T5973] dvb-usb: bulk message failed: -22 (2/0)
[  512.213317][ T5973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  512.236814][ T5973] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2 w/o firmware)
[  512.271780][ T5973] usb 9-1: media controller created
[  512.302691][ T5962] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  512.313417][ T5962] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  512.377890][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  512.443738][ T5973] usb 9-1: selecting invalid altsetting 1
[  512.467171][ T5973] cxusb: set interface failed
[  512.471892][ T5973] dvb-usb: bulk message failed: -22 (1/0)
[  512.487174][ T5973] dvb-usb: bulk message failed: -22 (3/0)
[  512.492927][ T5973] usb 9-1: bluebird_gpio_write failed.
[  512.517219][ T5973] dvb-usb: bulk message failed: -22 (3/0)
[  512.524181][ T5973] usb 9-1: bluebird_gpio_write failed.
[  512.547194][ T5973] dvb-usb: bulk message failed: -22 (3/0)
[  512.553042][ T5973] usb 9-1: bluebird_gpio_write failed.
[  512.561802][ T5973] dvb-usb: bulk message failed: -22 (3/0)
[  512.567704][ T5973] usb 9-1: bluebird_gpio_write failed.
[  512.587280][ T5973] dvb-usb: bulk message failed: -22 (3/0)
[  512.593043][ T5973] usb 9-1: bluebird_gpio_write failed.
[  512.598618][ T5973] dvb-usb: bulk message failed: -22 (5/0)
[  512.604352][ T5973] zl10353_read_register: readreg error (reg=127, ret==-121)
[  512.642156][ T5973] DVB: Unable to find symbol mt352_attach()
[  512.650299][ T5973] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2 w/o firmware'
[  512.727279][ T5973] rc_core: IR keymap rc-dvico-portable not found
[  512.733900][ T5973] Registered IR keymap rc-empty
[  512.740673][ T5973] rc rc0: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0
[  512.754023][ T5973] input: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input65
[  512.770231][ T5973] dvb-usb: schedule remote query interval to 100 msecs.
[  512.777265][ T5973] usb 9-1: setting power OFF
[  512.781914][ T5973] dvb-usb: bulk message failed: -22 (2/0)
[  512.787735][ T5973] dvb-usb: bulk message failed: -22 (3/0)
[  512.793475][ T5973] usb 9-1: bluebird_gpio_write failed.
[  512.798989][ T5973] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware successfully initialized and connected.
[  512.816229][ T5973] usb 9-1: USB disconnect, device number 64
[  512.906707][ T5973] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmwa successfully deinitialized and disconnected.
[  513.164977][T14190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.174540][T14190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.220093][ T5973] usb 9-1: new high-speed USB device number 65 using dummy_hcd
[  513.315547][T14190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2320'.
[  513.331089][T14190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.342351][T14190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.363174][ T5962] em28xx 7-1:0.0: AC97 vendor ID = 0x00fc7833
[  513.412361][ T5973] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  513.423717][ T5973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  513.435424][ T5973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  513.446871][ T5973] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  513.464308][ T5973] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  513.474414][ T5973] usb 9-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  513.482763][ T5973] usb 9-1: Manufacturer: syz
[  513.493244][ T5973] usb 9-1: config 0 descriptor??
[  513.572965][ T5962] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  513.581404][ T5962] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  513.591531][ T5962] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  513.598482][ T5962] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  513.607897][ T5962] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  513.615044][ T5962] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  513.625513][ T5962] usb 7-1: USB disconnect, device number 87
[  513.647281][   T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  513.799057][   T10] usb 10-1: Using ep0 maxpacket: 16
[  513.805878][   T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  513.817621][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  513.835175][   T10] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  513.844731][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.854267][   T10] usb 10-1: Product: syz
[  513.858630][   T10] usb 10-1: Manufacturer: syz
[  513.863312][   T10] usb 10-1: SerialNumber: syz
[  513.870545][   T10] usb 10-1: config 0 descriptor??
[  513.879071][   T10] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  513.888436][   T10] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  513.913083][ T5973] keytouch 0003:0926:3333.0045: fixing up Keytouch IEC report descriptor
[  513.926717][ T5973] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0045/input/input66
[  514.020597][T14199] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2323'.
[  514.025680][ T5973] keytouch 0003:0926:3333.0045: input,hidraw0: USB HID v0.00 Keyboard [syz] on usb-dummy_hcd.8-1/input0
[  514.053945][T14199] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2323'.
[  514.186626][ T5913] usb 9-1: USB disconnect, device number 65
[  514.226011][T14203] fido_id[14203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  514.279569][   T10] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  514.301258][   T10] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[  514.331135][   T10] em28xx 10-1:0.0: AC97 chip type couldn't be determined
[  514.356822][   T10] em28xx 10-1:0.0: No AC97 audio processor
[  515.073516][T14241] vivid-003: =================  START STATUS  =================
[  515.084068][T14241] vivid-003: Radio HW Seek Mode: Bounded
[  515.092809][T14241] vivid-003: Radio Programmable HW Seek: false
[  515.099975][T14241] vivid-003: RDS Rx I/O Mode: Block I/O
[  515.105586][T14241] vivid-003: Generate RBDS Instead of RDS: false
[  515.113215][T14241] vivid-003: RDS Reception: true
[  515.118816][T14241] vivid-003: RDS Program Type: 0 inactive
[  515.124772][T14241] vivid-003: RDS PS Name:  inactive
[  515.130430][T14241] vivid-003: RDS Radio Text:  inactive
[  515.136294][T14241] vivid-003: RDS Traffic Announcement: false inactive
[  515.143388][T14241] vivid-003: RDS Traffic Program: false inactive
[  515.149832][T14241] vivid-003: RDS Music: false inactive
[  515.155414][T14241] vivid-003: ==================  END STATUS  ==================
[  515.557276][ T5973] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[  515.717392][ T5973] usb 7-1: Using ep0 maxpacket: 16
[  515.724293][ T5973] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  515.742263][ T5973] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  515.756130][ T5973] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  515.765517][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.773832][ T5973] usb 7-1: Product: syz
[  515.782137][ T5973] usb 7-1: Manufacturer: syz
[  515.787612][ T5973] usb 7-1: SerialNumber: syz
[  515.791655][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.809172][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.947242][ T5913] usb 9-1: new high-speed USB device number 66 using dummy_hcd
[  516.005949][ T5973] usb 7-1: 0:2 : does not exist
[  516.015116][ T5973] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  516.036068][ T5973] usb 7-1: USB disconnect, device number 88
[  516.066155][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  516.106906][ T5913] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  516.118419][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  516.130202][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  516.140104][ T5913] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  516.154323][ T5913] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  516.163535][ T5913] usb 9-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  516.172280][ T5913] usb 9-1: Manufacturer: syz
[  516.180483][ T5913] usb 9-1: config 0 descriptor??
[  516.425731][ T5962] usb 10-1: USB disconnect, device number 11
[  516.448944][ T5962] em28xx 10-1:0.0: Disconnecting em28xx
[  516.475216][ T5962] em28xx 10-1:0.0: Freeing device
[  516.575325][T14270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  516.597063][ T5913] keytouch 0003:0926:3333.0046: fixing up Keytouch IEC report descriptor
[  516.625437][ T5913] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0046/input/input67
[  516.736743][ T5913] keytouch 0003:0926:3333.0046: input,hidraw0: USB HID v0.00 Keyboard [syz] on usb-dummy_hcd.8-1/input0
[  516.799500][ T5973] usb 9-1: USB disconnect, device number 66
[  516.837473][ T3095] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[  516.933742][T14281] fido_id[14281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  517.048164][ T3095] usb 7-1: Using ep0 maxpacket: 32
[  517.056765][ T3095] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[  517.067892][ T3095] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  517.076649][ T3095] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  517.096805][ T3095] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  517.110432][ T3095] usb 7-1: config 1 has no interface number 0
[  517.116801][ T3095] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  517.132791][ T3095] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.178861][ T3095] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  517.363083][ T3095] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values
[  517.372971][ T3095] snd_usb_pod 7-1:1.1: invalid control EP
[  517.383294][ T3095] snd_usb_pod 7-1:1.1: cannot start listening: -22
[  517.384953][ T5962] kernel write not supported for file /534/clear_refs (pid: 5962 comm: kworker/0:6)
[  517.392546][ T3095] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  517.409040][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2347'.
[  517.409339][ T3095] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22
[  517.418403][ T5913] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  517.445013][T14293] tipc: New replicast peer: 255.255.255.255
[  517.453047][T14293] tipc: Enabled bearer <udp:syz2>, priority 10
[  517.581295][T14273] Bluetooth: MGMT ver 1.23
[  517.589401][ T5913] usb 10-1: Using ep0 maxpacket: 32
[  517.589997][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2341'.
[  517.603094][ T5913] usb 10-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  517.615573][ T3095] usb 7-1: USB disconnect, device number 89
[  517.621700][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.621727][ T5913] usb 10-1: Product: syz
[  517.621741][ T5913] usb 10-1: Manufacturer: syz
[  517.621756][ T5913] usb 10-1: SerialNumber: syz
[  517.629907][ T5913] usb 10-1: config 0 descriptor??
[  517.668646][ T5913] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  517.863522][T14308] netlink: 'syz.8.2348': attribute type 2 has an invalid length.
[  517.877763][ T5913] gspca_topro: reg_w err -71
[  517.908668][ T5913] gspca_topro: Sensor soi763a
[  517.918987][ T5913] usb 10-1: USB disconnect, device number 12
[  518.207416][ T3095] usb 9-1: new full-speed USB device number 67 using dummy_hcd
[  518.348579][ T3095] usb 9-1: device descriptor read/64, error -71
[  518.437281][   T24] usb 7-1: new high-speed USB device number 90 using dummy_hcd
[  518.587631][   T24] usb 7-1: Using ep0 maxpacket: 8
[  518.592830][ T3095] usb 9-1: new full-speed USB device number 68 using dummy_hcd
[  518.603483][   T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  518.613599][   T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  518.623780][   T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  518.634543][   T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  518.648160][   T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  518.657893][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.736810][T14321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  518.745907][ T3095] usb 9-1: device descriptor read/64, error -71
[  518.755773][T14321] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2353'.
[  518.857754][ T3095] usb usb9-port1: attempt power cycle
[  518.872453][   T24] usb 7-1: GET_CAPABILITIES returned 0
[  518.878128][   T24] usbtmc 7-1:16.0: can't read capabilities
[  519.207369][ T3095] usb 9-1: new full-speed USB device number 69 using dummy_hcd
[  519.230509][ T3095] usb 9-1: device descriptor read/8, error -71
[  519.487274][ T3095] usb 9-1: new full-speed USB device number 70 using dummy_hcd
[  519.507913][ T3095] usb 9-1: device descriptor read/8, error -71
[  519.635300][ T3095] usb usb9-port1: unable to enumerate USB device
[  520.008297][   T24] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  520.154071][ T5913] usb 7-1: USB disconnect, device number 90
[  520.179211][   T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.193379][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.208005][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.255001][   T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  520.272243][   T24] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  520.284666][   T24] usb 10-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  520.293924][   T24] usb 10-1: Manufacturer: syz
[  520.305721][   T24] usb 10-1: config 0 descriptor??
[  520.648486][T14337] ntfs3(nullb0): Primary boot signature is not NTFS.
[  520.658067][T14337] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  520.678804][T14337] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2357'.
[  520.701385][T14337] netlink: 'syz.6.2357': attribute type 12 has an invalid length.
[  520.733369][T14339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.734479][   T24] keytouch 0003:0926:3333.0047: fixing up Keytouch IEC report descriptor
[  520.744040][T14339] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.789648][   T24] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0047/input/input68
[  520.842665][T14344] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2359'.
[  520.987769][   T24] keytouch 0003:0926:3333.0047: input,hidraw0: USB HID v0.00 Keyboard [syz] on usb-dummy_hcd.9-1/input0
[  521.055000][T14356] netlink: 'syz.6.2362': attribute type 21 has an invalid length.
[  521.065434][   T24] usb 10-1: USB disconnect, device number 13
[  521.073681][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2362'.
[  521.158658][T14355] netlink: 352 bytes leftover after parsing attributes in process `syz.8.2363'.
[  521.202228][T14355] netlink: 352 bytes leftover after parsing attributes in process `syz.8.2363'.
[  521.273403][T14358] fido_id[14358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  521.547367][ T5913] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[  521.712250][ T5913] usb 9-1: Using ep0 maxpacket: 8
[  521.731711][ T5913] usb 9-1: config 0 has an invalid interface number: 31 but max is 0
[  521.750615][ T5913] usb 9-1: config 0 has no interface number 0
[  521.769810][ T5913] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  521.779414][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.797553][ T5913] usb 9-1: Product: syz
[  521.807569][ T5913] usb 9-1: Manufacturer: syz
[  521.816969][ T5913] usb 9-1: SerialNumber: syz
[  521.840337][ T5913] usb 9-1: config 0 descriptor??
[  522.056097][ T5913] usb 9-1: Found UVC 0.04 device syz (046d:08c3)
[  522.065550][ T5913] uvcvideo 9-1:0.31: Entity type for entity Output 6 was not initialized!
[  522.259831][ T5962] usb 9-1: USB disconnect, device number 71
[  522.801571][T14385] loop8: detected capacity change from 0 to 8
[  522.809671][T14385]  loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12
[  522.817389][T14385] loop8: p1 start 4102158137 is beyond EOD, truncated
[  522.824183][T14385] loop8: p2 start 1654152234 is beyond EOD, truncated
[  522.831364][T14385] loop8: p3 start 2467341889 is beyond EOD, truncated
[  522.838285][T14385] loop8: p4 start 1660119194 is beyond EOD, truncated
[  522.845066][T14385] loop8: p5 start 1211332610 is beyond EOD, truncated
[  522.852043][T14385] loop8: p6 start 1939928413 is beyond EOD, truncated
[  522.858952][T14385] loop8: p7 start 3376831492 is beyond EOD, truncated
[  522.867637][T14385] loop8: p8 start 1913500448 is beyond EOD, truncated
[  522.874985][T14385] loop8: p9 start 2978761009 is beyond EOD, truncated
[  522.881969][T14385] loop8: p10 start 3362042208 is beyond EOD, truncated
[  522.889082][T14385] loop8: p11 start 1289878438 is beyond EOD, truncated
[  522.895958][T14385] loop8: p12 start 3738969459 is beyond EOD, truncated
[  522.903381][ T5962] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[  523.058719][ T5962] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  523.070510][ T5962] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  523.083072][ T5962] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  523.092366][ T5962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.100662][ T5962] usb 10-1: Product: syz
[  523.105430][ T5962] usb 10-1: Manufacturer: syz
[  523.110285][ T5962] usb 10-1: SerialNumber: syz
[  523.227317][ T5913] usb 9-1: new high-speed USB device number 72 using dummy_hcd
[  523.377240][ T5913] usb 9-1: Using ep0 maxpacket: 16
[  523.384290][ T5913] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  523.395257][ T5913] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  523.405290][ T5913] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  523.415287][ T5913] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57608, setting to 1024
[  523.426478][ T5913] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  523.436766][ T5913] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  523.536484][   T30] audit: type=1800 audit(1757387223.183:39): pid=14382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2370" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  523.543703][ T5962] usb 10-1: 0:2 : does not exist
[  523.564176][ T5913] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  523.576908][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  523.586804][ T5913] usb 9-1: SerialNumber: syz
[  523.608999][T14387] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22
[  523.639316][ T5913] cdc_acm 9-1:1.0: Control and data interfaces are not separated!
[  523.653266][ T5962] usb 10-1: USB disconnect, device number 14
[  523.682252][ T5913] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12
[  523.845456][ T5913] usb 9-1: USB disconnect, device number 72
[  524.084944][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2374'.
[  524.098158][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2374'.
[  524.108383][T14394] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2374'.
[  524.405772][ T5913] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  524.597274][ T5913] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  524.633120][ T5913] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  524.654408][ T5913] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.667986][ T5913] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  524.698436][ T5913] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  524.717206][ T5913] usb 10-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  524.725697][ T5913] usb 10-1: Manufacturer: syz
[  524.747270][ T5913] usb 10-1: config 0 descriptor??
[  524.757611][ T5904] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[  524.927349][ T5904] usb 9-1: device descriptor read/64, error -71
[  524.966165][T14396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  524.987630][T14396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.177454][ T5904] usb 9-1: new high-speed USB device number 74 using dummy_hcd
[  525.305565][ T5913] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor
[  525.337297][ T5904] usb 9-1: device descriptor read/64, error -71
[  525.337409][ T5913] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0048/input/input69
[  525.397324][T14411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.406051][T14411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.458044][ T5904] usb usb9-port1: attempt power cycle
[  525.459925][ T5913] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [syz] on usb-dummy_hcd.9-1/input0
[  525.519842][ T5913] usb 10-1: USB disconnect, device number 15
[  525.613440][T14412] fido_id[14412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  525.827295][ T5904] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[  525.861085][ T5904] usb 9-1: device descriptor read/8, error -71
[  526.007265][ T5913] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[  526.107313][ T5904] usb 9-1: new high-speed USB device number 76 using dummy_hcd
[  526.110645][T14418] vivid-004: disconnect
[  526.124042][T14418] input: syz1 as /devices/virtual/input/input70
[  526.131797][ T5904] usb 9-1: device descriptor read/8, error -71
[  526.133955][T14417] vivid-004: reconnect
[  526.170328][ T5913] usb 7-1: Using ep0 maxpacket: 32
[  526.183950][ T5913] usb 7-1: unable to get BOS descriptor or descriptor too short
[  526.202006][ T5913] usb 7-1: config 13 has an invalid interface number: 113 but max is 0
[  526.217961][ T5913] usb 7-1: config 13 has no interface number 0
[  526.232195][ T5913] usb 7-1: config 13 interface 113 has no altsetting 0
[  526.248739][ T5913] usb 7-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00
[  526.258852][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.260007][ T5904] usb usb9-port1: unable to enumerate USB device
[  526.267065][ T5913] usb 7-1: Product: syz
[  526.278732][ T5913] usb 7-1: Manufacturer: 롟ﻄ륛ჾ㊏徝랠솂뫽Ⰴᾩⶌ↛茦壌ꤑ㼒뒂杶⒓鐨獚馇癠証癄隚뺜즅墲₂む젷⑈쯜蘳뺞犊뻢&錗蘏瘴⻎㉶茙亂켡ӂ廭♨⩇얻煖ꤔ鏍浱ﱚꮚ돳蚜㤌팎憾砳擣Ћꜫ␋쥣爸翇﫴旵中胮삨⥸懐䟎㜜駅ꌩ깯䝌ꐟ驮头발⨹鿛⼟ꉲ꺘汢掶蠏뱨蘿ᑳ㫁
[  526.315890][ T5913] usb 7-1: SerialNumber: syz
[  526.535414][ T5913] usb-storage 7-1:13.113: USB Mass Storage device detected
[  526.566829][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2388'.
[  526.606078][T14433] wg0 speed is unknown, defaulting to 1000
[  526.610731][ T5913] usb 7-1: USB disconnect, device number 91
[  526.819041][T14439] input: syz1 as /devices/virtual/input/input71
[  527.167270][ T5904] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  527.320928][ T5904] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.333432][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  527.345408][ T5904] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  527.356390][ T5904] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  527.371995][ T5904] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  527.382035][ T5904] usb 10-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  527.391240][ T5904] usb 10-1: Manufacturer: syz
[  527.398279][ T5904] usb 10-1: config 0 descriptor??
[  527.530052][T14451] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2393'.
[  527.548521][   T10] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[  527.614059][T14442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.630017][T14442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.721406][   T10] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  527.731722][   T10] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  527.739893][   T10] usb 7-1: Product: syz
[  527.744146][   T10] usb 7-1: SerialNumber: syz
[  527.755158][   T10] usb 7-1: config 0 descriptor??
[  527.846929][ T5904] keytouch 0003:0926:3333.0049: fixing up Keytouch IEC report descriptor
[  527.863121][ T5904] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0049/input/input72
[  527.942474][ T5904] keytouch 0003:0926:3333.0049: input,hidraw0: USB HID v0.00 Keyboard [syz] on usb-dummy_hcd.9-1/input0
[  527.967734][T14448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.977005][T14448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.065292][ T5904] usb 10-1: USB disconnect, device number 16
[  528.094408][T14453] fido_id[14453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[  528.469906][T14456] netlink: 5820 bytes leftover after parsing attributes in process `syz.8.2394'.
[  528.838135][   T10] usb 9-1: new high-speed USB device number 77 using dummy_hcd
[  529.007229][   T10] usb 9-1: Using ep0 maxpacket: 32
[  529.024300][   T10] usb 9-1: config 0 has an invalid interface number: 120 but max is 0
[  529.048162][   T10] usb 9-1: config 0 has no interface number 0
[  529.067185][   T30] audit: type=1400 audit(1757387228.713:40): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=14476 comm="syz.9.2399"
[  529.102079][   T10] usb 9-1: config 0 interface 120 altsetting 7 has a duplicate endpoint with address 0xA, skipping
[  529.121734][   T10] usb 9-1: config 0 interface 120 altsetting 7 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  529.135053][   T10] usb 9-1: config 0 interface 120 altsetting 7 has a duplicate endpoint with address 0xA, skipping
[  529.142860][ T3095] hid-generic A0C0:0002:0004.004A: unknown main item tag 0x7
[  529.159407][   T10] usb 9-1: config 0 interface 120 altsetting 7 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  529.159431][ T3095] hid-generic A0C0:0002:0004.004A: reserved main item tag 0xe
[  529.159459][   T10] usb 9-1: config 0 interface 120 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  529.170840][ T3095] hid-generic A0C0:0002:0004.004A: unexpected long global item
[  529.185436][   T10] usb 9-1: config 0 interface 120 altsetting 7 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  529.191136][ T3095] hid-generic A0C0:0002:0004.004A: probe with driver hid-generic failed with error -22
[  529.197986][   T10] usb 9-1: config 0 interface 120 has no altsetting 0
[  529.242742][   T10] usb 9-1: New USB device found, idVendor=19d2, idProduct=1283, bcdDevice=6f.81
[  529.252099][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.260352][   T10] usb 9-1: Product: syz
[  529.264566][   T10] usb 9-1: Manufacturer: syz
[  529.269840][   T10] usb 9-1: SerialNumber: syz
[  529.278789][   T10] usb 9-1: config 0 descriptor??
[  529.287501][T14461] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  529.300855][   T10] option 9-1:0.120: GSM modem (1-port) converter detected
[  529.424252][T14479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.436607][T14479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.457627][   T24] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[  529.480977][T14479] tap0: tun_chr_ioctl cmd 1074025676
[  529.486729][T14479] tap0: owner set to 0
[  529.629415][   T24] usb 10-1: config 9 has an invalid interface number: 88 but max is 1
[  529.642417][   T24] usb 10-1: config 9 contains an unexpected descriptor of type 0x2, skipping
[  529.655687][   T24] usb 10-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  529.671123][   T24] usb 10-1: config 9 has 1 interface, different from the descriptor's value: 2
[  529.680906][   T24] usb 10-1: config 9 has no interface number 0
[  529.692658][   T24] usb 10-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  529.703883][   T24] usb 10-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  529.719664][   T24] usb 10-1: config 9 interface 88 altsetting 9 endpoint 0x6 has invalid wMaxPacketSize 0
[  529.734166][   T24] usb 10-1: config 9 interface 88 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  529.753321][   T24] usb 10-1: config 9 interface 88 has no altsetting 0
[  529.767676][   T24] usb 10-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80
[  529.782272][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.790879][   T24] usb 10-1: Product: syz
[  529.795143][   T24] usb 10-1: Manufacturer: syz
[  529.804841][   T24] usb 10-1: SerialNumber: syz
[  530.235946][   T24] usb 10-1: USB disconnect, device number 17
[  530.385963][   T10] usb 7-1: USB disconnect, device number 92
[  530.888130][ T5904] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[  531.047390][   T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  531.057501][ T5904] usb 7-1: Using ep0 maxpacket: 16
[  531.067956][ T5904] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  531.081367][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  531.096357][ T5904] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  531.106794][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.115574][ T5904] usb 7-1: Product: syz
[  531.121702][ T5904] usb 7-1: Manufacturer: syz
[  531.133806][ T5904] usb 7-1: SerialNumber: syz
[  531.143000][ T5904] usb 7-1: config 0 descriptor??
[  531.156690][ T5904] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  531.167282][ T5904] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  531.186509][T14496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.199098][T14496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.222084][   T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  531.235216][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.246893][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.261884][   T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  531.277819][   T10] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  531.287774][   T10] usb 10-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  531.295954][   T10] usb 10-1: Manufacturer: syz
[  531.304219][   T10] usb 10-1: config 0 descriptor??
[  531.516337][T14492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.525315][T14492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.567020][ T5962] usb 9-1: USB disconnect, device number 77
[  531.585263][ T5962] option 9-1:0.120: device disconnected
[  531.737009][   T10] keytouch 0003:0926:3333.004B: fixing up Keytouch IEC report descriptor
[  531.755235][   T10] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.004B/input/input73
[  531.772608][ T5904] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  531.788828][ T5904] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  531.850708][T14505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.860037][T14505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.866498][   T10] keytouch 0003:0926:3333.004B: input,hidraw0: USB HID v0.00 Keyboard [syz] on usb-dummy_hcd.9-1/input0
[  531.894585][T14505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.977018][ T3095] usb 10-1: USB disconnect, device number 18
[  532.814006][ T5904] em28xx 7-1:0.0: AC97 vendor ID = 0x00fc7833
[  532.867174][ T3095] usb 10-1: new low-speed USB device number 19 using dummy_hcd
[  532.927191][ T5962] usb 9-1: new high-speed USB device number 78 using dummy_hcd
[  533.023734][ T5904] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  533.037283][ T3095] usb 10-1: config 1 has an invalid descriptor of length 161, skipping remainder of the config
[  533.057518][ T5904] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  533.064631][ T3095] usb 10-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  533.078398][ T5904] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  533.087797][ T5904] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  533.091261][ T5962] usb 9-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  533.097505][ T3095] usb 10-1: config 1 interface 0 has no altsetting 0
[  533.110646][ T5904] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  533.118048][ T5904] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  533.149331][ T5904] usb 7-1: USB disconnect, device number 93
[  533.227339][ T5962] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.241420][ T5962] usb 9-1: Product: syz
[  533.245640][ T5962] usb 9-1: Manufacturer: syz
[  533.250315][ T5962] usb 9-1: SerialNumber: syz
[  533.263481][ T5962] usb 9-1: config 0 descriptor??
[  533.273087][ T5962] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  533.675965][ T5962] input: sonixb as /devices/platform/dummy_hcd.8/usb9/9-1/input/input74
[  533.735137][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.799520][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.887008][ T5962] usb 9-1: USB disconnect, device number 78
[  534.031513][T14534] netlink: 'syz.6.2418': attribute type 1 has an invalid length.
[  534.041846][T14534] block nbd6: Attempted send on invalid socket
[  534.049322][T14534] blk_print_req_error: 138 callbacks suppressed
[  534.049348][T14534] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  534.068013][T14534] MINIX-fs: unable to read superblock
[  534.593677][T14540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.603045][T14540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.731120][   T56] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 420 seconds
[  534.743103][   T56] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 420 seconds
[  534.754920][   T56] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 420 seconds
[  534.766300][   T56] block nbd0: Possible stuck request ffff888025357540: control (read@3072,1024B). Runtime 420 seconds
[  535.197378][ T5962] usb 7-1: new full-speed USB device number 94 using dummy_hcd
[  535.359510][ T5962] usb 7-1: not running at top speed; connect to a high speed hub
[  535.369458][ T5962] usb 7-1: config 9 has an invalid descriptor of length 160, skipping remainder of the config
[  535.387394][ T5962] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  535.409498][ T5962] usb 7-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.9b
[  535.427221][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.445655][ T5962] usb 7-1: Product: syz
[  535.450256][ T5962] usb 7-1: Manufacturer: syz
[  535.454926][ T5962] usb 7-1: SerialNumber: syz
[  535.613211][ T3095] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  535.653875][ T3095] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.706063][ T3095] usb 10-1: can't set config #1, error -71
[  535.726838][ T3095] usb 10-1: USB disconnect, device number 19
[  535.829175][ T5962] usb 7-1: USB disconnect, device number 94
[  536.029062][ T3095] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  536.187271][ T3095] usb 10-1: Using ep0 maxpacket: 16
[  536.194212][ T3095] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  536.206007][ T3095] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  536.219215][ T3095] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  536.228588][ T3095] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.236692][ T3095] usb 10-1: Product: syz
[  536.241394][ T3095] usb 10-1: Manufacturer: syz
[  536.246104][ T3095] usb 10-1: SerialNumber: syz
[  536.253900][ T3095] usb 10-1: config 0 descriptor??
[  536.263018][ T3095] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  536.272471][ T3095] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  536.875699][ T3095] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  536.883068][ T3095] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[  537.797438][ T5962] usb 7-1: new full-speed USB device number 95 using dummy_hcd
[  537.904025][ T3095] em28xx 10-1:0.0: AC97 vendor ID = 0x00fc7833
[  537.959350][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  537.971026][ T5962] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.981151][ T5962] usb 7-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[  537.990483][ T5962] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.002492][ T5962] usb 7-1: config 0 descriptor??
[  538.107295][ T3095] em28xx 10-1:0.0: Unknown AC97 audio processor detected!
[  538.115567][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 2
[  538.124103][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 4
[  538.132139][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 6
[  538.142847][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 54
[  538.149987][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 56
[  538.160445][ T3095] usb 10-1: USB disconnect, device number 20
[  538.219760][ T5962] wacom 0003:056A:0217.004C: Unknown device_type for 'HID 056a:0217'. Ignoring.
[  538.423409][ T3095] usb 7-1: USB disconnect, device number 95
[  538.529956][T14591] Invalid ELF header magic: != ELF
[  538.709666][T14593] wg0 speed is unknown, defaulting to 1000
[  538.744887][T14597] siw: device registration error -23
[  538.907348][ T3095] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  539.064530][T14606] netlink: 'syz.5.2441': attribute type 19 has an invalid length.
[  539.077925][ T3095] usb 10-1: Using ep0 maxpacket: 32
[  539.089227][ T3095] usb 10-1: too many configurations: 17, using maximum allowed: 8
[  539.104033][ T3095] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  539.115300][ T3095] usb 10-1: config 0 has no interface number 0
[  539.128444][ T3095] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  539.136641][ T3095] usb 10-1: config 0 has no interface number 0
[  539.148802][ T3095] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  539.158373][ T3095] usb 10-1: config 0 has no interface number 0
[  539.165460][ T3095] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  539.173696][ T3095] usb 10-1: config 0 has no interface number 0
[  539.180900][ T3095] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  539.189155][ T3095] usb 10-1: config 0 has no interface number 0
[  539.196656][ T3095] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  539.218458][T13963] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  539.228801][ T3095] usb 10-1: config 0 has no interface number 0
[  539.235136][ T5904] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[  539.244232][ T3095] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  539.262007][ T3095] usb 10-1: config 0 has no interface number 0
[  539.273928][ T3095] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  539.282244][ T3095] usb 10-1: config 0 has no interface number 0
[  539.291330][ T3095] usb 10-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  539.317192][ T3095] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.325317][ T3095] usb 10-1: Product: syz
[  539.333881][ T3095] usb 10-1: Manufacturer: syz
[  539.343519][ T3095] usb 10-1: SerialNumber: syz
[  539.371416][ T3095] usb 10-1: config 0 descriptor??
[  539.390362][ T3095] etas_es58x 10-1:0.2: Starting syz syz (Serial Number syz)
[  539.407511][ T5904] usb 7-1: Using ep0 maxpacket: 16
[  539.414913][ T5904] usb 7-1: unable to get BOS descriptor or descriptor too short
[  539.428510][ T5904] usb 7-1: config 13 has an invalid interface number: 50 but max is 0
[  539.436762][ T5904] usb 7-1: config 13 has no interface number 0
[  539.450342][ T5904] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[  539.480740][ T5904] usb 7-1: config 13 interface 50 has no altsetting 0
[  539.492042][ T5904] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  539.506887][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.517867][ T5904] usb 7-1: Product: syz
[  539.522175][ T5904] usb 7-1: Manufacturer: syz
[  539.533661][ T5904] usb 7-1: SerialNumber: syz
[  539.545881][T14602] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[  539.597796][ T3095] etas_es58x 10-1:0.2: could not parse product info: ''
[  539.800197][ T5904] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  539.816908][ T5904] usb 7-1: MIDIStreaming interface descriptor not found
[  539.872368][ T5904] usb 7-1: USB disconnect, device number 96
[  540.172923][T14634] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2438'.
[  540.212339][T14636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.224062][T14636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.453402][    C1] etas_es58x 10-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D.
[  540.464949][    C1] etas_es58x 10-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: -61)
[  540.479485][ T5528] etas_es58x 10-1:0.2 can1: bit-timing not yet defined
[  540.617214][ T5904] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[  540.658571][    C1] etas_es58x 10-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  540.660417][    T9] usb 10-1: USB disconnect, device number 21
[  540.668099][    C1] etas_es58x 10-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  540.668173][    C1] etas_es58x 10-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  540.668242][    C1] etas_es58x 10-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  540.668307][    C1] etas_es58x 10-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  540.668391][    C1] etas_es58x 10-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[  540.680344][    T9] etas_es58x 10-1:0.2: Disconnecting syz syz
[  540.692194][ T5528] etas_es58x 10-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL
[  540.829818][ T5904] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  540.852391][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.865237][ T5904] usb 9-1: Product: syz
[  540.870456][ T5904] usb 9-1: Manufacturer: syz
[  540.875098][ T5904] usb 9-1: SerialNumber: syz
[  540.905042][ T5904] usb 9-1: config 0 descriptor??
[  541.242703][ T5904] usb 9-1: ignoring: probably an ADSL modem
[  541.644188][ T5904] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19!
[  541.846794][T14689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.857847][ T5904] usb 9-1: USB disconnect, device number 79
[  541.862928][T14689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.868754][T14690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.892091][T14690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.963246][T13965] Bluetooth: hci5: Frame reassembly failed (-84)
[  542.443463][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.452703][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.474169][T14699] IPv6: Can't replace route, no match found
[  542.683955][T14707] sctp: [Deprecated]: syz.9.2464 (pid 14707) Use of struct sctp_assoc_value in delayed_ack socket option.
[  542.683955][T14707] Use struct sctp_sack_info instead
[  542.770327][ T5904] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[  542.907389][ T5904] usb 9-1: device descriptor read/64, error -71
[  542.978536][   T24] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  543.157363][ T5904] usb 9-1: new high-speed USB device number 81 using dummy_hcd
[  543.166756][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 69, changing to 10
[  543.178192][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50519, setting to 1024
[  543.189603][   T24] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  543.198793][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.210457][   T24] usb 10-1: config 0 descriptor??
[  543.216302][T14709] raw-gadget.5 gadget.9: fail, usb_ep_enable returned -22
[  543.226397][   T24] usbhid 10-1:0.0: can't add hid device: -22
[  543.232963][   T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -22
[  543.287266][ T5904] usb 9-1: device descriptor read/64, error -71
[  543.408703][ T5904] usb usb9-port1: attempt power cycle
[  543.429116][ T5913] usb 10-1: USB disconnect, device number 22
[  543.767402][ T5904] usb 9-1: new high-speed USB device number 82 using dummy_hcd
[  543.787791][ T5904] usb 9-1: device descriptor read/8, error -71
[  544.007214][T11804] Bluetooth: hci5: command 0x1003 tx timeout
[  544.011698][T11805] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  544.028422][ T5904] usb 9-1: new high-speed USB device number 83 using dummy_hcd
[  544.077313][ T5904] usb 9-1: device descriptor read/8, error -71
[  544.187485][ T5904] usb usb9-port1: unable to enumerate USB device
[  544.248750][ T5913] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  544.412550][ T5913] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  544.423834][ T5913] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58165, setting to 1024
[  544.436798][ T5913] usb 10-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  544.446023][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  544.454296][ T5913] usb 10-1: Manufacturer: syz
[  544.461856][ T5913] usb 10-1: config 0 descriptor??
[  544.471140][ T5913] usb 10-1: Found UVC 0.00 device <unnamed> (18ec:3288)
[  544.478377][ T5913] usb 10-1: No valid video chain found.
[  546.221819][T14750] netlink: 'syz.6.2478': attribute type 1 has an invalid length.
[  546.230154][T14750] netlink: 4464 bytes leftover after parsing attributes in process `syz.6.2478'.
[  546.527429][   T10] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[  546.691586][   T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  546.703292][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  546.714590][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  546.725491][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  546.738967][   T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  546.748286][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.760464][   T10] usb 7-1: config 0 descriptor??
[  547.074967][ T5962] usb 10-1: USB disconnect, device number 23
[  547.158857][T14763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.168582][T14762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.172388][T14763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.192707][T14762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.194018][   T10] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0
[  547.248893][   T10] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  547.390376][   T10] usb 7-1: USB disconnect, device number 97
[  547.617237][ T5962] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  547.767658][ T5962] usb 10-1: Using ep0 maxpacket: 16
[  547.776392][ T5962] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  547.788261][ T5962] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  547.801882][ T5962] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  547.811327][ T5962] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.819669][ T5962] usb 10-1: Product: syz
[  547.824050][ T5962] usb 10-1: Manufacturer: syz
[  547.828908][ T5962] usb 10-1: SerialNumber: syz
[  547.835577][ T5962] usb 10-1: config 0 descriptor??
[  547.843473][ T5962] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  547.853888][ T5962] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  547.971518][   T30] audit: type=1800 audit(1757387247.631:41): pid=14771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2485" name="/" dev="9p" ino=2 res=0 errno=0
[  548.251329][T14786] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2489'.
[  548.397546][ T5904] usb 9-1: new high-speed USB device number 84 using dummy_hcd
[  548.451970][ T5962] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  548.459386][ T5962] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[  548.547204][ T5904] usb 9-1: Using ep0 maxpacket: 16
[  548.557747][    T9] usb 7-1: new full-speed USB device number 98 using dummy_hcd
[  548.558381][ T5904] usb 9-1: config 255 has an invalid interface descriptor of length 8, skipping
[  548.575674][ T5904] usb 9-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  548.589064][ T5904] usb 9-1: config 255 has 0 interfaces, different from the descriptor's value: 1
[  548.599041][ T5904] usb 9-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  548.608606][ T5904] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.619747][ T5904] usb 9-1: rejected 1 configuration due to insufficient available bus power
[  548.646594][ T5904] usb 9-1: no configuration chosen from 1 choice
[  548.697499][    T9] usb 7-1: device descriptor read/64, error -71
[  548.957404][    T9] usb 7-1: new full-speed USB device number 99 using dummy_hcd
[  549.097352][    T9] usb 7-1: device descriptor read/64, error -71
[  549.209686][    T9] usb usb7-port1: attempt power cycle
[  549.482249][ T5962] em28xx 10-1:0.0: AC97 vendor ID = 0x00fc7833
[  549.547565][    T9] usb 7-1: new full-speed USB device number 100 using dummy_hcd
[  549.567826][    T9] usb 7-1: device descriptor read/8, error -71
[  549.682961][ T5962] em28xx 10-1:0.0: Unknown AC97 audio processor detected!
[  549.692306][ T5962] em28xx 10-1:0.0: couldn't setup AC97 register 2
[  549.699587][ T5962] em28xx 10-1:0.0: couldn't setup AC97 register 4
[  549.706642][ T5962] em28xx 10-1:0.0: couldn't setup AC97 register 6
[  549.714736][ T5962] em28xx 10-1:0.0: couldn't setup AC97 register 54
[  549.722371][ T5962] em28xx 10-1:0.0: couldn't setup AC97 register 56
[  549.733989][ T5962] usb 10-1: USB disconnect, device number 24
[  549.807239][    T9] usb 7-1: new full-speed USB device number 101 using dummy_hcd
[  549.832592][    T9] usb 7-1: device descriptor read/8, error -71
[  549.860481][T14804] binder: 14803:14804 ioctl c4089434 200000000280 returned -22
[  549.878802][T14804] binder: 14803:14804 ioctl c4089434 200000000280 returned -22
[  549.947925][    T9] usb usb7-port1: unable to enumerate USB device
[  550.477472][ T5904] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  550.637261][ T5904] usb 10-1: Using ep0 maxpacket: 8
[  550.643942][ T5904] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[  550.652767][ T5904] usb 10-1: config 0 has no interface number 0
[  550.659123][ T5904] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  550.670161][ T5904] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  550.681924][ T5904] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  550.693126][ T5904] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  550.706382][ T5904] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  550.715939][ T5904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.726529][ T5904] usb 10-1: config 0 descriptor??
[  550.740528][ T5904] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  550.940605][T14808] Device name not specified.
[  550.940605][T14808] 
[  550.961944][ T5904] usb 10-1: USB disconnect, device number 25
[  550.968319][T14808] ldusb 10-1:0.55: Couldn't submit interrupt_in_urb -19
[  550.976978][ T5904] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[  551.025300][T14808] kvm: pic: non byte write
[  551.130714][    T9] usb 9-1: USB disconnect, device number 84
[  551.243981][T14786] syz.6.2489 (14786) used greatest stack depth: 16760 bytes left
[  551.766079][T14844] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2508'.
[  552.377273][   T24] usb 10-1: new full-speed USB device number 26 using dummy_hcd
[  552.545544][   T24] usb 10-1: config 1 interface 0 has no altsetting 0
[  552.558213][   T24] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  552.568023][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.576240][   T24] usb 10-1: Product: syz
[  552.585377][   T24] usb 10-1: Manufacturer: syz
[  552.593192][   T24] usb 10-1: SerialNumber: syz
[  553.208227][   T10] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[  553.217673][   T24] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  553.285850][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.302432][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.377506][   T10] usb 7-1: Using ep0 maxpacket: 8
[  553.384779][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  553.395791][   T10] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  553.406038][   T10] usb 7-1: config 7 has 0 interfaces, different from the descriptor's value: 1
[  553.418594][   T10] usb 7-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  553.428039][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.436027][   T10] usb 7-1: Product: syz
[  553.440410][   T10] usb 7-1: Manufacturer: syz
[  553.445014][   T10] usb 7-1: SerialNumber: syz
[  553.582840][ T5904] usb 10-1: USB disconnect, device number 26
[  553.596019][ T5904] usblp0: removed
[  553.752107][   T10] usb 7-1: USB disconnect, device number 102
[  553.967674][T14912] program syz.6.2529 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  554.561268][T14934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.594770][T14934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.699217][T14929] netlink: 'syz.6.2535': attribute type 1 has an invalid length.
[  554.714287][T14929] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2535'.
[  554.967259][   T10] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[  555.127548][   T10] usb 7-1: Using ep0 maxpacket: 16
[  555.138340][   T10] usb 7-1: too many configurations: 33, using maximum allowed: 8
[  555.158883][   T10] usb 7-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config
[  555.169749][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  555.202081][   T10] usb 7-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config
[  555.217340][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  555.233525][   T10] usb 7-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config
[  555.253703][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  555.277041][   T10] usb 7-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config
[  555.292934][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  555.312597][   T10] usb 7-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config
[  555.324717][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  555.342635][   T10] usb 7-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config
[  555.354059][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  555.363454][    T9] usb 9-1: new high-speed USB device number 85 using dummy_hcd
[  555.373474][   T10] usb 7-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config
[  555.386447][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  555.397007][   T10] usb 7-1: config 0 has an invalid descriptor of length 150, skipping remainder of the config
[  555.415771][   T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  555.445006][   T10] usb 7-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03
[  555.467347][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.482986][   T10] usb 7-1: Product: syz
[  555.489013][   T10] usb 7-1: Manufacturer: syz
[  555.494022][   T10] usb 7-1: SerialNumber: syz
[  555.529650][    T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  555.539204][   T10] usb 7-1: config 0 descriptor??
[  555.555681][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.579846][    T9] usb 9-1: config 0 descriptor??
[  555.585355][T14963] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x47425247, 8, 0, 0, 0)
[  555.605253][T14963] sg_write: process 1322 (syz.5.2548) changed security contexts after opening file descriptor, this is not allowed.
[  555.668463][T14966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.680532][T14966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.756895][   T10] usb 7-1: USB disconnect, device number 103
[  555.807321][ T3095] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  555.957251][ T3095] usb 10-1: Using ep0 maxpacket: 16
[  555.964995][ T3095] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  555.976819][ T3095] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  555.990311][ T3095] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  555.999787][ T3095] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.009510][ T3095] usb 10-1: Product: syz
[  556.013878][ T3095] usb 10-1: Manufacturer: syz
[  556.016051][T14950] fuse: Bad value for 'fd'
[  556.018649][ T3095] usb 10-1: SerialNumber: syz
[  556.025870][ T3095] usb 10-1: config 0 descriptor??
[  556.039556][    T9] ath6kl: Failed to read usb control message: -71
[  556.046959][ T3095] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  556.054264][    T9] ath6kl: Unable to read the bmi data from the device: -71
[  556.058323][ T3095] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  556.072116][    T9] ath6kl: Unable to recv target info: -71
[  556.080829][    T9] ath6kl: Failed to init ath6kl core: -71
[  556.087577][    T9] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71
[  556.106262][    T9] usb 9-1: USB disconnect, device number 85
[  556.655693][ T3095] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  556.662896][ T3095] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[  556.687507][    T9] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[  556.817362][    T9] usb 7-1: device descriptor read/64, error -71
[  557.057202][    T9] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[  557.077243][ T5962] usb 9-1: new high-speed USB device number 86 using dummy_hcd
[  557.197621][    T9] usb 7-1: device descriptor read/64, error -71
[  557.243028][ T5962] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  557.246650][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.257665][ T5962] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  557.264618][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.279753][ T5962] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  557.283917][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.303223][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.308309][ T5962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  557.319561][    T9] usb usb7-port1: attempt power cycle
[  557.325755][ T5962] usb 9-1: SerialNumber: syz
[  557.546520][ T5962] usb 9-1: 0:2 : does not exist
[  557.565304][ T5962] usb 9-1: USB disconnect, device number 86
[  557.593776][ T6329] udevd[6329]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  557.657203][    T9] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[  557.680795][    T9] usb 7-1: device descriptor read/8, error -71
[  557.685783][ T3095] em28xx 10-1:0.0: Unknown AC97 audio processor detected!
[  557.702672][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 2
[  557.712629][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 4
[  557.721315][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 6
[  557.729820][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 54
[  557.736628][ T3095] em28xx 10-1:0.0: couldn't setup AC97 register 56
[  557.756363][ T3095] usb 10-1: USB disconnect, device number 27
[  557.927234][    T9] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[  557.947828][    T9] usb 7-1: device descriptor read/8, error -71
[  558.060676][    T9] usb usb7-port1: unable to enumerate USB device
[  558.103734][T14988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.124785][T14988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  558.417192][    T9] usb 9-1: new high-speed USB device number 87 using dummy_hcd
[  558.507436][   T10] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[  558.567377][    T9] usb 9-1: Using ep0 maxpacket: 8
[  558.582083][    T9] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 77, changing to 10
[  558.604184][    T9] usb 9-1: config 1 interface 0 has no altsetting 0
[  558.614339][    T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  558.633695][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.646598][    T9] usb 9-1: Product: syz
[  558.656722][    T9] usb 9-1: Manufacturer: syz
[  558.661663][   T10] usb 7-1: device descriptor read/64, error -71
[  558.686922][    T9] usb 9-1: SerialNumber: syz
[  558.740049][T14999] 9pnet_fd: Insufficient options for proto=fd
[  558.917272][   T10] usb 7-1: new high-speed USB device number 109 using dummy_hcd
[  559.047761][   T10] usb 7-1: device descriptor read/64, error -71
[  559.133897][    T9] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input79
[  559.149312][ T5218] bcm5974 9-1:1.0: could not read from device
[  559.159503][ T5218] bcm5974 9-1:1.0: could not read from device
[  559.163092][    T9] usb 9-1: USB disconnect, device number 87
[  559.172586][   T10] usb usb7-port1: attempt power cycle
[  559.667659][   T10] usb usb7-port1: Cannot enable. Maybe the USB cable is bad?
[  559.807354][   T10] usb 7-1: new high-speed USB device number 111 using dummy_hcd
[  559.828467][   T10] usb 7-1: Using ep0 maxpacket: 16
[  559.835422][   T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  559.844210][   T10] usb 7-1: config 0 has no interface number 0
[  559.854353][   T10] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  559.864486][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.872775][   T10] usb 7-1: Product: syz
[  559.877008][   T10] usb 7-1: Manufacturer: syz
[  559.882098][   T10] usb 7-1: SerialNumber: syz
[  559.890010][   T10] usb 7-1: config 0 descriptor??
[  559.901181][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  559.992282][T15015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.001231][ T3095] usb 9-1: new full-speed USB device number 88 using dummy_hcd
[  560.009850][T15015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.173108][ T3095] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  560.184602][ T3095] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  560.196528][ T3095] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  560.207464][ T3095] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  560.222865][ T3095] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  560.232299][ T3095] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  560.241753][ T3095] usb 9-1: SerialNumber: syz
[  560.255657][T15013] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22
[  560.264463][T15013] raw-gadget.4 gadget.8: fail, usb_ep_enable returned -22
[  560.480764][ T3095] cdc_acm 9-1:1.0: Control and data interfaces are not separated!
[  560.495523][ T3095] cdc_acm 9-1:1.0: ttyACM0: USB ACM device
[  560.506144][ T3095] usb 9-1: USB disconnect, device number 88
[  560.969624][   T10] gspca_spca1528: reg_w err -71
[  560.975041][   T10] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  560.986393][   T10] usb 7-1: USB disconnect, device number 111
[  561.266331][T15031] siw: device registration error -23
[  561.297191][    T9] usb 10-1: new full-speed USB device number 28 using dummy_hcd
[  561.451839][    T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  561.462446][    T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  561.476330][    T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  561.491718][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.502383][    T9] usb 10-1: Product: syz
[  561.510037][    T9] usb 10-1: Manufacturer: syz
[  561.515276][    T9] usb 10-1: SerialNumber: syz
[  561.674902][T15037] 9pnet_fd: Insufficient options for proto=fd
[  561.731499][    T9] usb 10-1: 0:2 : does not exist
[  561.745876][    T9] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[  561.777576][   T24] usb 7-1: new high-speed USB device number 112 using dummy_hcd
[  561.792899][    T9] usb 10-1: USB disconnect, device number 28
[  561.836684][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  561.967241][   T24] usb 7-1: Using ep0 maxpacket: 16
[  561.974234][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  561.986426][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  562.001274][   T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  562.010727][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.019270][   T24] usb 7-1: Product: syz
[  562.023547][   T24] usb 7-1: Manufacturer: syz
[  562.028289][   T24] usb 7-1: SerialNumber: syz
[  562.036442][   T24] usb 7-1: config 0 descriptor??
[  562.045808][   T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  562.055240][   T24] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  562.587207][    T9] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  562.661236][   T24] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  562.669053][   T24] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  562.690041][T15063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.699757][T15063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.747252][    T9] usb 10-1: Using ep0 maxpacket: 32
[  562.754774][    T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  562.766814][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  562.780163][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  562.790123][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  562.802382][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  562.822913][    T9] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  562.832297][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.840683][    T9] usb 10-1: Product: syz
[  562.844957][    T9] usb 10-1: Manufacturer: syz
[  562.849866][    T9] usb 10-1: SerialNumber: syz
[  562.857188][    T9] usb 10-1: config 0 descriptor??
[  562.890968][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  562.901232][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  563.437437][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.454251][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.465621][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.476196][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.497816][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.504564][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.514538][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.527901][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.536623][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.536633][T15076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.538078][T15076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.546555][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.559815][T15076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.574495][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.581777][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.585113][T15076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.591051][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.602313][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.609366][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.615814][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.623928][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.630469][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.636924][    T9] iforce 10-1:0.0: usb_submit_urb failed: -71
[  563.643364][    T9] input input80: Timeout waiting for response from device.
[  563.655859][    T9] usb 10-1: USB disconnect, device number 29
[  563.686885][   T24] em28xx 7-1:0.0: AC97 vendor ID = 0x00fc7833
[  563.889153][   T24] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  563.899579][   T24] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  563.906252][   T24] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  563.913324][   T24] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  563.921275][   T24] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  563.929442][   T24] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  563.940319][   T24] usb 7-1: USB disconnect, device number 112
[  564.140917][T15080] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  564.817566][   T56] block nbd0: Possible stuck request ffff888025357000: control (read@0,1024B). Runtime 450 seconds
[  564.828545][   T56] block nbd0: Possible stuck request ffff8880253571c0: control (read@1024,1024B). Runtime 450 seconds
[  564.839726][   T56] block nbd0: Possible stuck request ffff888025357380: control (read@2048,1024B). Runtime 450 seconds
[  564.851406][   T56] block nbd0: Possible stuck request ffff888025357540: control (read@3072,1024B). Runtime 450 seconds
[  565.257211][   T24] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  565.432891][   T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.455478][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  565.468531][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  565.478928][   T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  565.493967][   T24] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  565.509078][   T24] usb 10-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
[  565.522187][   T24] usb 10-1: Manufacturer: syz
[  565.529936][   T24] usb 10-1: config 0 descriptor??
[  565.626869][T15129] can: request_module (can-proto-3) failed.
[  565.638681][ T5904] usb 7-1: new high-speed USB device number 113 using dummy_hcd
[  565.731756][T15139] No source specified
[  565.752217][T15115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.768432][T15115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.792192][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2616'.
[  565.809200][ T5904] usb 7-1: Using ep0 maxpacket: 16
[  565.818418][ T5904] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  565.835754][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  565.850915][ T5904] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  565.862187][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.874744][ T5904] usb 7-1: Product: syz
[  565.879595][ T5904] usb 7-1: Manufacturer: syz
[  565.885092][ T5904] usb 7-1: SerialNumber: syz
[  565.903700][ T5904] usb 7-1: config 0 descriptor??
[  565.919806][ T5904] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  565.929461][ T5904] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  565.986541][   T24] usbhid 10-1:0.0: can't add hid device: -71
[  566.001353][   T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  566.018016][   T24] usb 10-1: USB disconnect, device number 30
[  566.530243][ T5904] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  566.543468][ T5904] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  566.643464][T15163] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000b2: 0000 [#1] SMP KASAN PTI
[  566.643491][T15163] KASAN: null-ptr-deref in range [0x0000000000000590-0x0000000000000597]
[  566.643513][T15163] CPU: 1 UID: 0 PID: 15163 Comm: syz.9.2623 Not tainted syzkaller #0 PREEMPT(full) 
[  566.643534][T15163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  566.643547][T15163] RIP: 0010:vc_deallocate+0x303/0x3e0
[  566.643575][T15163] Code: e8 72 d7 cf fc 49 c7 07 00 00 00 00 eb 0e e8 94 d4 6b fc eb 05 e8 8d d4 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 4e d6 cf fc 4d 8b 3e 4d 85 ff 74
[  566.643592][T15163] RSP: 0018:ffffc900110df9e0 EFLAGS: 00010206
[  566.643611][T15163] RAX: ffffffff85542783 RBX: 0000000000000000 RCX: 0000000000080000
[  566.643626][T15163] RDX: ffffc9000ca4b000 RSI: 0000000000003753 RDI: 0000000000003754
[  566.643640][T15163] RBP: ffffc900110dfa90 R08: ffffffff8fe506cf R09: 1ffffffff1fca0d9
[  566.643655][T15163] R10: dffffc0000000000 R11: fffffbfff1fca0da R12: 00000000000000b2
[  566.643669][T15163] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a272c80
[  566.643684][T15163] FS:  00007f56259326c0(0000) GS:ffff8881258b3000(0000) knlGS:0000000000000000
[  566.643701][T15163] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  566.643715][T15163] CR2: 000000110c3a2ad5 CR3: 000000007de30000 CR4: 00000000003526f0
[  566.643733][T15163] Call Trace:
[  566.643740][T15163]  <TASK>
[  566.643749][T15163]  ? vt_disallocate_all+0x3b/0xe0
[  566.643770][T15163]  ? __pfx_vc_deallocate+0x10/0x10
[  566.643791][T15163]  ? is_console_locked+0x9/0x20
[  566.643816][T15163]  vt_disallocate_all+0x60/0xe0
[  566.643856][T15163]  vt_ioctl+0x1adc/0x1f20
[  566.643878][T15163]  ? __pfx_vt_ioctl+0x10/0x10
[  566.643901][T15163]  ? __fget_files+0x2a/0x420
[  566.643926][T15163]  ? tty_jobctrl_ioctl+0x369/0xb70
[  566.643945][T15163]  ? __fget_files+0x3a0/0x420
[  566.643967][T15163]  ? __fget_files+0x2a/0x420
[  566.643989][T15163]  tty_ioctl+0x926/0xde0
[  566.644012][T15163]  ? __pfx_tty_ioctl+0x10/0x10
[  566.644034][T15163]  __se_sys_ioctl+0xfc/0x170
[  566.644052][T15163]  do_syscall_64+0xfa/0xfa0
[  566.644083][T15163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.644101][T15163]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  566.644120][T15163]  ? clear_bhb_loop+0x60/0xb0
[  566.644137][T15163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.644162][T15163] RIP: 0033:0x7f5624b8ebe9
[  566.644178][T15163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  566.644193][T15163] RSP: 002b:00007f5625932038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  566.644212][T15163] RAX: ffffffffffffffda RBX: 00007f5624dc5fa0 RCX: 00007f5624b8ebe9
[  566.644225][T15163] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003
[  566.644235][T15163] RBP: 00007f5624c11e19 R08: 0000000000000000 R09: 0000000000000000
[  566.644247][T15163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  566.644256][T15163] R13: 00007f5624dc6038 R14: 00007f5624dc5fa0 R15: 00007ffc4f9c2f08
[  566.644282][T15163]  </TASK>
[  566.644295][T15163] Modules linked in:
[  566.644335][T15163] ---[ end trace 0000000000000000 ]---
[  566.646722][T15163] RIP: 0010:vc_deallocate+0x303/0x3e0
[  566.646752][T15163] Code: e8 72 d7 cf fc 49 c7 07 00 00 00 00 eb 0e e8 94 d4 6b fc eb 05 e8 8d d4 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 4e d6 cf fc 4d 8b 3e 4d 85 ff 74
[  566.646770][T15163] RSP: 0018:ffffc900110df9e0 EFLAGS: 00010206
[  566.646790][T15163] RAX: ffffffff85542783 RBX: 0000000000000000 RCX: 0000000000080000
[  566.646804][T15163] RDX: ffffc9000ca4b000 RSI: 0000000000003753 RDI: 0000000000003754
[  566.646836][T15163] RBP: ffffc900110dfa90 R08: ffffffff8fe506cf R09: 1ffffffff1fca0d9
[  566.646853][T15163] R10: dffffc0000000000 R11: fffffbfff1fca0da R12: 00000000000000b2
[  566.646867][T15163] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a272c80
[  566.646882][T15163] FS:  00007f56259326c0(0000) GS:ffff8881258b3000(0000) knlGS:0000000000000000
[  566.646898][T15163] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  566.646911][T15163] CR2: 000000110c3a2ad5 CR3: 000000007de30000 CR4: 00000000003526f0
[  566.646930][T15163] Kernel panic - not syncing: Fatal exception
[  566.647183][T15163] Kernel Offset: disabled