last executing test programs:

3m11.450507533s ago: executing program 3 (id=1793):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f0000001fc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x35ec, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x35c0, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, {0x2208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x1174, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x7c}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}]}}}, {0x38, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x21}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1094, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1084, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x1078, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x51}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0x1078, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "8508445e378abb0996ba7f56cd1a8b7ad71862fce4d9effc673b11caf78f28eeaf004cfad84506dd68b1d24aab01ed4f1e911265bd0d58bfce2cb39c56444494b6ee22628bf4a435a212e0d10e1d028bd2a44dc7ac40996a3a1f491d85670b7e9470a91c11a6414eee9fda468e9b452efa502e3874823b840c0dbf2f5ce18e13340e9451ffc1eb98f2efd6e51e5961b18155d1394771b640f3dee53bc00edb5713ce2dab8d831961f66cf1abdb17af10539d1c8bc350001078811d3890853759b89867b93d3b2047bb38ab9f264cc13401b9a016e3e69139eba882691a4c1a5a0ad3505fd6181efecd06a1cd4c6f8e2071140c5836beefdb5de6a90e3ede9a052b6c81e0f4c14c8a3e7a274fcdc341fde6fe25d424965277dd8366cac6359450f44a8ad9655a5a6a9f06f8a0a4fffcec79dd432c8ec5919ce618d9d6af7417e7ce51242d345c7c218e3200630f7a4375e100384a4645e1fe0b9426cf5dce5baa6cc76645efdad4f7de8e90d33da10b90ffb6ab11d00fb51ea1dd53d8015390a45caeacb9210f463a0e714cc459570df58ed8e2dc7499d1e4381f90eb8db45a920145c7cb68c813961018b31e6ee9748d9f8918769dda0c1be76091a843a0b213721522c5d5b07e4265cfb3b2340a5ca45c0675568097b559cacde90a896301c60e218cf8de90bea2fc404ea49a1a10955d6d692390eab77fabb2f980fc37b6ff44ce317ab9e59a5aa3dee926dba6f5dc4c20d56b4cfa3b181f06c70c209787f7ed801154063181d66865d4fe182e4016d5210ad222d0e61acf815f99bc27fd9c62e29dd8c169de64df84b09ba45f9acc68b34afd5f7fdcfdf42d9dda26cbc7c87e255e70d5024e78b88aeaf3eae94933c3cfc34b1eded73b33f05887626690bb904bb08356d6ec1dcf7428ffd9efa3af366f136ac67ace1566c10ea2099eebc4e4b13b6ed018cf74f618f19f098f402c364e0c740c02334eb6593538867a6809fd49a52a1cdf28fbbbc1a7204489cead63a14d964710358a5024fe0f93c21d90b2f05774186b2fa749a0b20764eb15831be05bd36994d0b281e27b0fb2757124648a19f6a6a94baeec9d5ed497ac480a9c605af5cbb9f613dbc01779ac1300ad75b4d913a66d41f651cba5ed58e2cc88b18e96f43a986a6c7eebcfee4a33884ae92681e0eb41cfb320704eac094a486eb06e3ad496b1453b4b8893ee7a3e64c639ea933ebeac0a1b781b7c6a9d67c9aec7a4fa830627792cfb1f55b0297e393e7e4da828a6784877412b90fd875e520998d3783e49e872d336a94ad773f1d772005a9c47c7439c5d4766251d1d4d14ccc51cfc82b3b117da081de84f6d653aadf49d93fb4fe0fa11dc472c73da920a67bfa95a7539d2fdcad90f9aa974d52e2b5b105a6fa58d4a43fc9ce95866a1b7ac6995cccc0eea5068c7da8c3fbcbe7d16c8e2acc39c7d2be0ca3401eaf9270311ad7d01b6d1b3c5330e7e45a2744abfba20be252fa54afb5be28e724b8308b75db3ea0b5aaa5bc60cc43bd52f515aa8dba93d867584f93a67accc8f69085bc9e6b8524911cba2c17b661af14be4c0498d3de2e9f4ba310be81a34af6e956f1bb1e60f55e039fac52a213f289d02245fb62ed8f801b488fee191cf1e6edf69940f5f8820cbf98c9318f8a1c44c2584fbb4ec36ab39a8274c5157e645ee370ebd3f254b58fcc7a340908ae4414be9e51693f2238cd2840229d065f310d338b799fd7cb7e8b1da271b2d0135cf8fd96a4d9bb36f2db14b26f0cc3e010e74981884659a6e7a20e974a3b1050a3ff3f752669b5da4049de5dd5f4781b97995cffdebb364d556b8c6cfcbe23a006c87656131015a52a71d95faae80f5b69f892c43f7225b6d556d40dad54b80e19d060ea098694d0b5f23c5d90310ac7643391a66ddc4bb0411f00a55abbb4927db42df7a7f2e71d148efbb1650ae18c5ee89f72ccae6ed98d7b4aeb044e6a831ad5b82961d9065c022fb4d7bf117f5c72d8180cfad1045c4cd33991ff47ccc60be68a167b47d36e1690b0cc940b389474dce976df3ab22270b41ebed6398daebd5bf2d9cd5f729b98a16a8d1beb9ac074fdeb3b294dd37eca793fafd2e24efbaa43a5171f5174b24e08e2a239e5d58923356ee2c74e66e2bae7699bef9267689d982656f8a85c036b6416485d1ea182a285d400c1f2bb85a27b74efcb867646a08e7fa0aaae051f7d0a698c0e1a8296774471970c8f0aab4c7e1ef93c487908f5f145f5b6e5233b6ddfbfb8b1ed1e86a3a04a8c54d01fe1ad86d0e1641cbea38b6fff8987ca5a667c8ad6d353675f04a12d46ae28b2cac72871aa380495f2c5d6763d4b6e7eaa413c87dfeaa0c27741b7c316339f4d17b701acc571487b552caf67fdb28aa564ecc39512cd386a0495ccac7c46b4e6cd07ff334adcd44a6cd7a92328ee1fb318e0b1bc573f6d67dcc89596b2f494dbb077e99c3116efce0f9d4a452031269c2b62fed5c1bf8dfbff40d2883a4e681559f6cefda1abd3b97fe1dde58dbe9e0601c1965579ee610510cbb78109023afb0d018337ee5a5165ccf59751242579f124e452dabba78cc1d5b753d409e9307269739a9abcdb4eee3def8f74db1660b7b60d7661308df6003899e04f72ce4c009c1add7c66f9e3c23dc275d32570e61aba603b7be4b6d5dc38463ce86fce44ce17bfd208f7d391770765dd177369be3e67e54901d1451013e15cce793a7cbd94358fa800858d3f68c0912218bd2fba342dddb94e0a65b24342c950411e5b8ec665b5fbc43a7d78fcfc8249ea942439ac03d196fae4afe7b5c6bbc04895e59c7e8c965c0ca75b7dd7eaf7ae4db024cd9b27b297ae63e0285f1a727552421b023af878362877b1074ab20b376caeb5864b7360877fca35b71c4de4ceb76c6ce950287285b5045017eea3ce27aa6ac661bd8695a2fdc4fa45ec2631e3829c5d735d6fef6d927a8e89dbcd7ffaf8eb293aa534b78c8d3ce6b124675114fe579264c79a70e4effd10106d68d62206967b769804078ef3b4c4189554d05849e3e77391a05cdba06ba04d5c12d8c4ac890a7c49dd84ca3b9505fe141d8eaa4ebe7fe8b8e9b463580b0d9d991ce74e046ee151e0cf935f57c9476a5def74317ca501ffda25cb649a2f6e8260e6ce394fda9625e93ce240d2979dd4c801adaf9088ccd6f4632c533122e945da8bad320d83f45446bfc91e2be7482de529a2cab4715f61e552396f6d1fac6b7d7bc9ea6314dcc07717bc1d58e5b02b0be08ea7b3a3639c53437293d25c9e7013f3f707e7a57c1ff230ea3edcf471b7f4a73964eaaeffa212257031e404a4c84579708713b3b2e99eb05ec52f41f88a792c90082537533e84abf3b52e3910903116454692acf5a8669930d65ece5e25313910572b18c17683a9873f6d4e1639e58aec317c7f5dd89885f3278747f872130366acde85c98cd5cd682f7716e3e42bf39cf385651f27aeb6601593d6011dc622fd26c0d2baf1fe0bad0fc651ad199820654756ed8b2caa4a51474940f53abab713b6991e2f543d991eeb38b63914dc3ddec512fa46fb4ee9ac3e3476430d37274a267c7a319889d667c9a3a926b0ee764bbb77d43b838fb30b7769d2d1ffae46cc1b08cea3a3262d138057d65ead179e3a794bd7dd0fa034da7d7882344446dfc43faddd31eaac989ce6d6386249a2ec4577250f7c9ad9d4cd1e95d42cf3d2c7eed2d92eb5fde216f6874ce049434c84540ca6dacd9eb1f533737f63e02cee15d50ca30f9655d0e91ee5eabee64cc90f50cab1f17a7efd295c74f46783f250276e6ecdc9e2ab4887e385a215d1c44f92fe6f97f7c07eb19d59f55c5dd8085b7d089b5b17c9e6b22fab4002b3f66e769c4503cd4c5942f5f58a90c49a7a326e7888bf3b4e511cdd071601b2f99e415d837bb03f938a6921c2535a803ea44d226ad81d7392e30fe4f34d04394213dc1a2e655e956ddc22582d25bf92fb0384a052b7b86089d405b95b1795a6c85532d67c701be59ee48ce0086df617f5ab26aec53dcb0208bed162cc881ba061c80edff401c1b3923178aa65b6c8de2e56576345a709f8847151ed03342a3e423faa7faca251e7b5ef3d159e245f6cfd0b5523cb2c07a00a7720e2348905c00de40410e52dcca21f1f8886bb27fbea5c66daf402644b69a1a39ca47d5b3079992fd97bd0ae722280b3816b975d12d79a905ae0ef9b23a6eb36452ab542882e6cfe091e90b3ab3840c0308ff2f60a1e60d9379786f3701c8eb2dcfc7d24e7eedac45fbd5aaa053e9916f9a2c02ead59ab7ba154c4305a460920603699e1ca616422d040cf5e5d8292ba91c64508d0ea3a5fd9ff17553631405fca2e052cfc113004abb505aa1ea5eba67e400aa260e69c031fe9ea23093a04f32225fee3a6bc410a87548d8a50c54903fdbb1f0acc91e37f0f362a1a8e3bf53abb4f023f6a6204ef44ddbf011ede24180114f88a9e0d0031ddf14bb7bb108b69156a391e7c25cbaa22e35e3467df8d1a1755cca2018804522ad3d524cb99d409bc2123a20e244ca619b73979995ad64c7d61618bf104a69cf2916aa377a0e88e9598622e99f320eddcdf44ec420e7479f84a5e28b1ec1e99ec2ef3ad66aace9691299ee8e0b8f4ada236f841a571870daff648f2295f72dd24772bc977df21445f718655d0c32b6fbb444323c8520687d1fd809f4e28397c8e4d596aa9754c797cb161951b94e0a8d676441b12728a9345bfb8a5e1868b7273144db4e55d07087375660c555a74ed50a365aa62acc47e14e4794963e5509e3ce23cab0de3b848e8e0f813341ea5bf993dab88afec082782d874c1c25575998f9795776198a239c15c3c8e21666243185a61679d4a0518491dd82f3661c0f248e8212936708e6e8ce3edd842735013321ee5a6e86dcb5ca421d7ec803c8aa4195f6e43721dcc282980a59bca4344510c9f43bc8b3d90159433ccb18b86fe8611a80b5c9c5c75955c2cc353f8cfc012aac14cb04f85ba572d5c419ac34d2fcf91a4ab33bb571523a22d41897bb27f5c48f515adfbf892a2aff6ce992d7b6376509aef76daa3885ba2974008bdab26428b2f00f492fa358cf96fb77ba37c6e18305d79c437a125678fc2e4a084cc4adb3fddce42e37e73f0ab43a41365f0c6263214d3bff07bcd24a4bed643bad80830df0c308a2d90ae4a0f2de9d8fd7e6e8fbea082d1b9e03bc255980560d3026a215e8541a41d4d4f2079dbfe9d74cd79722d027d7a91a23d273e48017edb877c4856d67271fe7f748c199beeaa6a25e25f595c3963d2dd9886abb651325e951bcf81c8508d219625dd4d220b4398da8522425856fedd1696a57fcd5248d7572111797fdc733c29669ceb18ced4dbfd21fae68ff6085a238f767850fe4fbf1ff33986db2e348e81a3928513a9429e225f71eda3989d5ed477284b1215689c5e594045a57731754f1d8095f0b001e4dc3502618ecc779f6190c6a69848a834a82a004f38af1f35cebed55dc8b50df007996f525ba7361204b2c372319974d68160716a85489c0206f3af22254e147bf444868e2866e9ff7a1a1b0b70c3056dde17350602cb9544347371820e3df6e75e74ed359c4a26f12455c2a5efe843f7e9aaca1592bce0176610521bb79175543c25a93a83717065a6c85d6d11af22b91fe57b8cf4d4d94feb052b6f20781397c42e9b67274fc215d3cff72979a03ca9fb1d9d7cb3bfe448e22edfc347fc88baa8597a099aa902e3ca87f380c8f101483c106419dc36de7625802398503"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x1344, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x10c0, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xb}]}}}, {0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x1030, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1020, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x1004, 0x3, "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"}, @NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}]}}}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY_END={0x1b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbd, 0x1, "fe20e339ec2640a894c9d7494802b2150db65f508dc6f8237c31a22dd2d19f2686ca59b9eab6e858a3c7bcce58b12b424b3d5c408df52be62ff678dfc25c84a52e78713d36eec5912523b47fb7c00c8179c72947621a8a082b99b98bda807fec868b2d0eabc1e69b174b059e6eed2d617ba5aa41558dc4c24ca61cd70f840115669694483c3cfe89ca1e573689e03954d77ef5103a75dabe5ddaf9bdf6bab0e240f84bdddc62d809600c4db9ff1595eee9087ddda886c35daf"}, @NFTA_DATA_VALUE={0xeb, 0x1, "71b49dc6ba6b02416152f027565f3d707175b9ee625fc328693196ef7aba0b359fe73c644b5cc9851f752bfba5c690355770a406cae7b7341fbde40dcc721ea0b53eaef3dbad79eb387f17433d44533050971ff80d361dcbb7ecb00d64d268a8006278ae4660886b5f39d8434e277e709bfc4d37178016cb9681c6241162133f7d6372af3d3e9bb6743fed41421d50860f441a404f55ce064b0b4379c3c2f99975de571c561aca2f2abbd8f667038aa70224a527fada9eb7a0af881c22196ee4f124af8efb54b22685666f48869d117b62130b9d56ef370688b91c7d4a393e0e586f352d41bafe"}]}, @NFTA_SET_ELEM_USERDATA={0x8d, 0x6, 0x1, 0x0, "3f047eb8603a5423b7ae3f3a7cd1c1fa36d8a934bf1a9ceb8206d35e6cf72cb6e70f400997b35818566825b865bde49dfe096a14a374ec465c88470584498c413f75b51ec775614841da21b72141fde551fa6919f91ded47488793eac5d3e5169a6842bd9c3cf059c3d3f50ab4262eeeb5c534ec004303425064fe66505d4ce94e0e57fe24b7780506"}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0x274, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0x228, 0x12, 0x0, 0x1, [{0x178, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x168, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xa4, 0x3, "3fc9c21cab787d716d13297947d66c6fbc4cae27a9323ca0e019ffc184dce9929edde2e36e0c934c7c577d46953c2336ae9faf989e11bb1bf31aa5897e32492156453ec0352ccc398a5392809f7ec1548e9420ccb62fe7eecfd7119fbc7a9cdcebbd32ebac449ab36023adbfdd9d424aeb2955472597a4a8a42794b028ad34d840dfb97286fd3425b35ab3c7aad7ee31028529aa13bda281c9569c0d6c9ad2d4"}, @NFTA_MATCH_INFO={0x7a, 0x3, "9056af5dd7ee44afbc594ce767e9831da0a428368a4a404d634b22465f2a6e757120d9840732897227849eab2d47a93ead7c0395de287c5877218c7db88814c215a2debe2fb7a7f4d742bd216c5b6831fbc51bd49ea24b00d36f25325e2ea4bb9edf3def965a8b6fc20197a6cd4dc4ad9c229967edc7"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xe, 0x3, "4258da257af45ed0209e"}, @NFTA_MATCH_INFO={0x22, 0x3, "f640b4f9d9eea7f781f04935d4a38685b88709f271cab61b6bd1b842b4cc"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, {0x40, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x10c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xc4, 0xc, "4968ce3df7560691885aa3938a817c3237fc5c126649ad6cbf608e1a951c70bc68cb35a889afac6f7daf5fd4940835addb6f0489c86de4dfa9960c0273e321804343144071cea6cec67a856062fc51e8f0963a16a8da4d0e550904331d896db1bc9e1d18d3cade562640d1aaede32836bfd22260fd567bb781214847ac264a7d15c1fa868c68574a997b4825fd6d947ce09c250de324a5d728bf9c5cc9cff36e99527328bdb49a9dba09b23a2685dd5bdc706e64140eff507ee20b28bdb5313a"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x64, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3afc}, 0x1, 0x0, 0x0, 0x4040054}, 0x24048046)
syz_usb_connect(0x0, 0xa7b, &(0x7f0000001180)={{0x12, 0x1, 0x300, 0x69, 0x2d, 0xea, 0x70, 0xdb0, 0x3870, 0xf1f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa69, 0x4, 0x1, 0x0, 0x0, 0xc, "", [{{0x9, 0x4, 0xb2, 0x7f, 0x8, 0x68, 0x25, 0x58, 0x2, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "1efa"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x40, 0x1}, [@country_functional={0x10, 0x24, 0x7, 0x3, 0x9, [0x7, 0x7, 0x1ff, 0x2, 0x2]}, @obex={0x5, 0x24, 0x15, 0x1}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "0b1f0da22066"}, {0x5, 0x24, 0x0, 0x300}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x45, 0x4, 0xc}, {0x6, 0x24, 0x1a, 0x100, 0x39}}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x7, 0x8, 0x9, [@generic={0x52, 0x3, "4170dda84abf05801c98871c00b480225da4295392314c08650471378d44100b4775635fc1d44950822e7f85ecf8b61f3d8b4de2373b2b026e6072399a1271a75a0e8c40b04adf4b8ecfbb273df3f3c8"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xe}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0xad, 0x7, 0x7, [@generic={0xe3, 0x8, "147a40d1f3a42efe591959b93273d39ce34ccc0da5897f3bfec71e43530bb3242bfc019e519bab2d9ebc70609378e1a1b6dd754fb2b6e57d8b45e94a42f105e18faba00fa71ffe5a4096f6d956111665b786a113cddf04ee0b7596c6ace287bb50b04ec12328c44208ba971df81ee2e6dfc5888d76c4cf33a0552fa8d6dfebddf42ed38e5b74bc3843e859664ac78fa7108a549664921215173e9b1e3901dfadc4346bdebeb5558f1e3c27fc50d87611d342743cfeb618112c339cc5461fc72d1d45ec364e696bbf9c9ca86444e79227dd20776fd2e762e2f4dccee66b4e5712e2"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x9, 0xa}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0xc, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x81}, @generic={0xa1, 0x0, "17884c5772d5ca289dc3c6a5b33279da6f4e7a8df6f61c1dc45b1c5f1c95a3d00af0454145acba38dd14d3ea3f4260080f19bd13bfb5bd16a5675ba1737a4aca4954ec11b95d9f777461c699033ef089ff2b54a9d1e04b2d5e5c614b14a63039211d7c395e13656ce510a8d2f06fd613f4551a02b2310f381a17b90b08ff1ad7547817cb86fc9d3719bce148b71ec430b267e5a14d508de557a393f74a36d0"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x9, 0xf, 0x8}}, {{0x9, 0x5, 0x7, 0x6, 0x3ff, 0x3, 0xa9, 0xc}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x2, 0x7, 0x7}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x5, 0x1, 0x5, [@generic={0x95, 0x30, "2c41d76a02e6b9aa1d10dbe3ea704305d492974646bddc26acd41cbe4792fbb48434e8bb675598a647cbe7a687bde7fb5ce7d5f43f7aa5f5cdfe4fde0b8e4f6c9116a89e5351f635dcda30c59b37b854fc63be67b9e955265db40723fa06a13d84cfe1c39b93c350cb25169c4090c90557cf36b4ff2b9efd89b83fdeaa7181f0e215ff7a72e2272aff5128af737bc6ef2f4a96"}]}}]}}, {{0x9, 0x4, 0xa9, 0x6, 0xf, 0x31, 0x19, 0xfa, 0x7, [@hid_hid={0x9, 0x21, 0x0, 0x5e, 0x1, {0x22, 0xe43}}, @uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x8, 0x9, 0x2, "6b2fb5396ef144"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x1, 0xc7, 0x9, "18"}]}], [{{0x9, 0x5, 0xa, 0x8, 0x797, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x3, 0x8, 0x2}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x81, 0x6, 0x7, [@generic={0x100, 0xa, "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"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x2, 0x1, 0xff}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x0, 0x1, 0x5}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x3, 0x8, 0x5}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x3, 0x7, 0xc, [@generic={0xed, 0x16, "9075d067db5939c97932368445e2072d332774c38bbb4133633bb8039663262e4ad625e419812770095a16e3f0a7b0d02415d778fd3245e3e44a0186d4810567ff65ecbd8850cc90767d25d82c14b255dcc0e93fa8577ce2712f6b0ce2fefe0610acf475116be2ec891ce7eb5270ae3a4368605dde6c458df46c58582b8080cfb8b17ac270e4ace1079bf15603f1669d7557f2bdb6e8256d33740c2ee33cb333b6e3ac90dc2c5f884e6232c43d356fcdfa081429cdd71d2d63bbc9ede07af571c0def56c4c31acd5c955473edd98069f29681a236c293af9ff98b3904b8ebc5bededb18bb80deecd3c4ea9"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x6, 0x6, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1000}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0xc, 0x4, 0x10}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x6, 0x3, 0xfa}}, {{0x9, 0x5, 0xb, 0x4, 0x20, 0x0, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x17, 0x1, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x6, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xfa, 0x80, 0x2, [@generic={0xe1, 0x21, "47a222a96d65cf3c00513bd7454aa4d1cc93e9cf43be66a2658ffc45423573855934eb9734ecddc73e24ae44643858b5d507fab9d6afe840f8dbdc21757bb08e9937220de03d27088b348df3a3e0efc0a28b74c900cd2d5bc6fd0368b8993f4e04eb3f7b748011e7067c4341bb0eba9e2993e1a4c446974e2bbd1a1cc9bf1b57ddea945ecb8ec39be831777a0b42efadbbca1ec58e84376bc357905f476bb00d98179ce5c15fde6d78986518de865061800f7c3ce6b0bef451c12d34bfc51a7f8aeb04753cf52ced3b1a15f9b420254768650fed41139f429bb1549232b0b9"}, @generic={0x3f, 0x21, "4eff6535ef6a78af66eb00084e968898382224f047aa6fbc4143ddc54d914c9fc28e63218866073c1cf184555660501260182cb1c325a87c680e0202b7"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x1, 0x0, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x84, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x98, 0xd5}]}}]}}, {{0x9, 0x4, 0x64, 0xf8, 0xe, 0xa8, 0x19, 0x56, 0xd7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "12"}, {0x5, 0x24, 0x0, 0xdad0}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0xfff7}, {0x6, 0x24, 0x1a, 0x8001, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x95}, @dmm={0x7, 0x24, 0x14, 0x0, 0x5}, @obex={0x5, 0x24, 0x15, 0x3}, @country_functional={0xa, 0x24, 0x7, 0x1f, 0x3, [0xfff, 0x400]}]}], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x6, 0xf8, 0x7d, [@generic={0x2b, 0x2, "cd9294623dfa903fde615ba6a71142a08da32ed8b5bd012edb58d2bed64496a3c929036e0098d1ba6c"}, @generic={0xfe, 0xe, "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"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x6, 0x8, 0x5}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x8}]}}, {{0x9, 0x5, 0xa, 0x13, 0x8, 0xc5, 0x9c, 0x4}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x0, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x9b}, @generic={0x77, 0x5, "f70c085c36a1428300471240fe029be743fa35c9f6bd2d945ee157c7c22776349906fbdfdfdc886d2ce11f0f3be4604190a8fe9b04019945dc8115bf597ae01301049b8e415e519b3e8dd0ba77f628f5b2fcc5c08e161e01f88c7c654d795fc302e2a877102a75a091280062556dfd6866465418d9"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x0, 0xfd, 0xb}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x1, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x7, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6}]}}, {{0x9, 0x5, 0xc, 0x3, 0x3ff, 0x5, 0xfb, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x9, 0x3, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x4, 0xf, 0xf4}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x0, 0x6, 0x81}}, {{0x9, 0x5, 0xb, 0x4, 0x8, 0xe, 0x39, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x48}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x4, 0x2, 0x70}}]}}, {{0x9, 0x4, 0x7, 0x4, 0x7, 0x33, 0xb3, 0xe1, 0x7f, [], [{{0x9, 0x5, 0x80, 0x10, 0x10, 0x0, 0x1, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x38, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x78, 0x1}, @generic={0x67, 0x22, "48f5c5629d594be6486060dc2e94ebaa1fa2771bcbe099e40d2c5bcb8f5f920067caef9e282f57e8e4bec47f371ecf1362a58e0edba3165937b01545f6657fe3d03e7f8f36ad34c480003234aa4cebf3635e9180efb535b921a4403d43f61e7f457354572b"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x20, 0x1, 0x6, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xb, 0x0, 0x1c, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x55, 0x6000}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x4, 0x2, 0xf2, [@generic={0x7, 0x11, "3e81d855a6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x80, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x7, 0x97, 0x2}}]}}]}}]}}, &(0x7f0000001f40)={0xa, &(0x7f0000001c00)={0xa, 0x6, 0x300, 0x4, 0x81, 0x81, 0xff, 0x6}, 0x12, &(0x7f0000001c40)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x4, 0x3}]}, 0x5, [{0x3c, &(0x7f0000001c80)=@string={0x3c, 0x3, "c67a0df0ad2c5b3ff3e18dd46c5b65ee4bf1800c05317cdbf5091349192c63033a8f6af7fdacea695d0d7446f8558abce4a8610c659875b6b79d"}}, {0xff, &(0x7f0000001cc0)=@string={0xff, 0x3, "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"}}, {0x59, &(0x7f0000001dc0)=@string={0x59, 0x3, "cc670418345bc2d523b0282e6c54953f419e3dc58a8205d85e00a452e1f13aaf4085f5adb08ab6b3c0d1cc3fa9ee47371278e4be51634cce41745d1ee00077874be43394fb91f089b2c757cb5524ff6d22ab79afa03eb7"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x410}}, {0x96, &(0x7f0000001e80)=@string={0x96, 0x3, "3beec8ae0a3fb8657e0d220a87def17f37825ae7498281fc02faf21ae644bc9727a217fd5439afb00eb9d7063fe385cf74be21b93b3396dce29562f083c750b95fb24cc80cc237edaa9a82a04641a661cb5285c7f930dc9e3ea7c2b32833e900bbf21e25749ccdbccb7d8670b8d8408a84560c0772421619063bd1ae2e25a504e71a080592b1935792adb120c8be18e47e150263"}}]})

3m10.809147146s ago: executing program 3 (id=1797):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x183b41, 0x5, 0xa}, 0x18)
fcntl$notify(r0, 0x402, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
kexec_load(0x3, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, 0x0, 0x0, 0x48040)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x40008, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
r5 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0)
pipe(0x0)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000080)='#-\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x3, 0x3, 0x4, 0x400, 0xa, {}, {0x1, 0x8, 0xe, 0x1, 0xf7, 0x14, "64e09ddd"}, 0x1, 0x4, {<r6=>0xffffffffffffffff}, 0x7df9})
close$fd_v4l2_buffer(r6)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0)

3m6.35055404s ago: executing program 3 (id=1803):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0)
close(r0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="440500000020"})

3m4.41711665s ago: executing program 3 (id=1806):
r0 = syz_open_procfs(0x0, &(0x7f0000002300)='pagemap\x00')
lseek(r0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="130300005500915549ff92b31b71a54a070e396790"], 0xfe33)

3m2.259402143s ago: executing program 3 (id=1809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r3, 0x1}, 0x14}}, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4885304}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x4008014)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbfddf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000c7fc0b0080000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x4000)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r13=>0x0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_secret(0x0)
r15 = dup(r14)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(r15, r13, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x0, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0x180, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x1, 0x4, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, &(0x7f0000001000)={0x2e, 0x4c, 0x0, r15, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r12, '\x00', {0xfffd, 0x5, 0x0, 0x0}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r16, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a0009006c696d69740000001c00028092a1512087544a5f000000040c00014000000000000000040900010073797a30fdffffff1d00020073797a3200000000140000001100010000000000000000000100000a"], 0x84}}, 0x0)

2m58.306748926s ago: executing program 3 (id=1813):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129000009054f928c"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
write$cgroup_pid(r1, &(0x7f0000000000), 0x12)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, 0x0)

2m32.975429347s ago: executing program 1 (id=1857):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd", 0x80}], 0x1}}], 0x1, 0x0) (async, rerun: 32)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000040d07d408612a41f16fb0102030109021b0001000000000904"], 0x0) (rerun: 32)

2m31.39855564s ago: executing program 1 (id=1862):
r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)
openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x22, 0x5f, {0x5f, 0xf, "70b25ad3e08cb301d13df5ece1c28d625c5185e4591bc7e93ead5eac062a9ab810e869d359df68f5f9ed9298318344766fb7a2c106dc73038e4a4cfe68ef42d267a952ee77bb0ab2061f6fb0ceca45e946841b22808dccb986f8d565e6"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="0003650000006503e587149a8fa3e4099523635c07e348f2ea8232b4048c0d824f251423bb245329946f4880834e2f68a31aa40d44b21ac802f4775c7aa36059b1ebc2306fca9ce4069a7135d90608b9c4511496d904178d7f56ae4506baca3f8f21f5a0349f8186ab709f"]}, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x20, 0x18, 0xa6, "81fdc62f22235dfea9ba52ef24f92778bb1949571bdfdbf4592e5518a4bc25eac866e041cc0e149a01fae45f051a7748ed2805ed084ed18021db4506ede7745659053ce147010e872ad727f6eeeee0ceb258ca2b87997b925f4585280e2f51f01b2fb142ac75acb607c1f56eab3ef170744a0ba36c2fdb349889672f5ffff6dcd3e6d4b0b2ecb41821b0b4dacb37934bf65db0631c5a36f432ad285603a2328d88cc7e101fc6"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0xbd}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "c4544f1488da92b146802b0814abdeb9f58b8b6d76c40f3d4d1cf6715a56668a7a311933f3c5ce319f150a4d2e1231"}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_usb_control_io(r0, 0x0, 0x0)

2m22.77251225s ago: executing program 1 (id=1869):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), 0x4)
sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000900)={0xa, 0x4e24, 0x9, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xffffff97}}], 0x1, 0x20048000)

2m22.537724933s ago: executing program 1 (id=1872):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x200)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="063e0d050fa3030000e2fff000008000"], 0x10)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xa)

2m22.189493359s ago: executing program 1 (id=1874):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video(&(0x7f0000000080), 0x1, 0x102)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000000)={0x80, 0x0, 0x3})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x5c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xc98, 0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4800}, @NL80211_ATTR_IE={0x6, 0x2a, [@supported_rates]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x80)
r6 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10)
write(r6, &(0x7f0000000280)="1c0000001a009b8a14e5f40700090424020000a6ff02000300000000", 0x1e5)
pwrite64(r0, &(0x7f0000000300)="484ac29f20f9fdf93847736d539bb273f1fb780cea6d6fe36aef9e6a34f8032a308dd4ec50f36edecb817c95407fcf5af83187f0eaddb9fb69cac8faf96306f4dc99001ff03741eddc27b60ecc0f", 0x4e, 0x5)

2m11.960585648s ago: executing program 1 (id=1894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r1, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5)
close(r0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800)
socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x9d)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x97, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902850001010000000904000012020600000b24060000b819b958fd1d05240000000d240f"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003"], 0xe8}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)

1m56.099748001s ago: executing program 32 (id=1894):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
readv(r1, &(0x7f0000001f40)=[{0x0}, {&(0x7f00000004c0)=""/36, 0x24}, {&(0x7f0000000540)=""/35, 0x23}, {0x0, 0x2400}, {0x0}], 0x5)
close(r0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800)
socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x9d)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x97, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902850001010000000904000012020600000b24060000b819b958fd1d05240000000d240f"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f080003"], 0xe8}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0)

36.420069503s ago: executing program 2 (id=2005):
r0 = epoll_create1(0x80000)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae03, 0x2c)
r3 = epoll_create1(0x0)
dup2(r1, r0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c)
sendto$inet6(r4, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x51, 0x80, 0xfe, 0x0, 0x9, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe)
recvmmsg(r4, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000023, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})

33.030821651s ago: executing program 2 (id=2008):
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x2, 0x0, 0x4, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x0, 0x12, 0x0, 0x8, "4602d3cbbf82091fdc7500000000000000040000000900"})
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x20, 0x0, 0x81, 0xfffffffb})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1})
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f0000000100))
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async)
futex(&(0x7f000000cffc)=0x2, 0x0, 0x4, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) (async)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000140)={0x0, 0x12, 0x0, 0x8, "4602d3cbbf82091fdc7500000000000000040000000900"}) (async)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x20, 0x0, 0x81, 0xfffffffb}) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f0000000100)) (async)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x0, 0x989680}, &(0x7f0000048000), 0x0) (async)

30.079808568s ago: executing program 2 (id=2012):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
getpid()
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, &(0x7f00000001c0)={0x5, 0x0, [{0x80000001, 0x5, 0x7, 0x8, 0x3ff, 0x5d35, 0x1c0}, {0x7, 0xa3, 0x0, 0x7, 0x9, 0xbfa, 0x4}, {0x6, 0x8b, 0x0, 0x100, 0x9, 0x0, 0x101}, {0xc0000001, 0xb, 0x4, 0x9, 0x9, 0x101, 0x9b0}, {0x4, 0x8, 0x0, 0xe849, 0x9, 0x9, 0xd8}]})
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x4)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@broadcast, 0x4e23, 0x1, 0xcd, 0x1}}, 0x44)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

29.421073277s ago: executing program 0 (id=2013):
r0 = socket$inet6(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x138}}, 0x40000)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x4, @mcast1, 0xfffffffe}, 0x1c)
shutdown(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
sendto$inet6(r0, &(0x7f0000000100)="ff8021bda8c9b6d91b9d8304b7b5d5af1c1bc14be5a8c9bea5c91519b12d2550b3343a973dfe6e02ba2d4fd8efa57fde8d4740f9bdf8e0c77dc573f2f18832240ec1d2e47b2623e201024df165eba456bb0835b1520cde0abb28706db1d144", 0x5f, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x101, @loopback, 0x800}, 0x1c)
close(r0)

28.227250746s ago: executing program 0 (id=2014):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00')
write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0xffffffffffffffe2)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local, r1}, 0x14)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001600010000000000fbdbdf250a0000001800ca80140006"], 0x2c}}, 0x40)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000080)={0x0, 0x1, <r3=>0xffffffffffffffff})
ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000140)={r3, 0xa64})
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x80)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async)
write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0xffffffffffffffe2) (async)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@local, r1}, 0x14) (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001600010000000000fbdbdf250a0000001800ca80140006"], 0x2c}}, 0x40) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01864c1, &(0x7f0000000080)) (async)
ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000140)={r3, 0xa64}) (async)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x80) (async)

27.975404717s ago: executing program 0 (id=2015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x24040000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5a7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40800)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100))
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r7, r6, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x26, 0x2, 0x14}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
bind$bt_sco(r5, &(0x7f0000000740)={0x1f, @none}, 0x8)
listen(r5, 0x0)
fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x2)
getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, r11, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, ["", ""]}, 0x68}}, 0x24008000)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf0, 0x2, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x6cb}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x18, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)

27.842760637s ago: executing program 0 (id=2016):
r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0)
openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x22, 0x59, {0x59, 0xf, "70b25ad3e08cb301d13df5ece1c28d625c5185e4591bc7e93ead5eac062a9ab810e869d359df68f5f9ed9298318344766fb7a2c106dc73038e4a4cfe68ef42d267a952ee77bb0ab2061f6fb0ceca45e946841b22808dcc"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="0003650000006503e587149a8fa3e4099523635c07e348f2ea8232b4048c0d824f251423bb245329946f4880834e2f68a31aa40d44b21ac802f4775c7aa36059b1ebc2306fca9ce4069a7135d90608b9c4511496d904178d7f56ae4506baca3f8f21f5a0349f8186ab709f"]}, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x20, 0x18, 0xa6, "81fdc62f22235dfea9ba52ef24f92778bb1949571bdfdbf4592e5518a4bc25eac866e041cc0e149a01fae45f051a7748ed2805ed084ed18021db4506ede7745659053ce147010e872ad727f6eeeee0ceb258ca2b87997b925f4585280e2f51f01b2fb142ac75acb607c1f56eab3ef170744a0ba36c2fdb349889672f5ffff6dcd3e6d4b0b2ecb41821b0b4dacb37934bf65db0631c5a36f432ad285603a2328d88cc7e101fc6"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0xbd}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "c4544f1488da92b146802b0814abdeb9f58b8b6d76c40f3d4d1cf6715a56668a7a311933f3c5ce319f150a4d2e1231"}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_usb_control_io(r0, 0x0, 0x0)

26.72698768s ago: executing program 0 (id=2017):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40)
ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0)
setresgid(0x0, 0x0, 0xee01)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRESHEX=r3, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000041c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
ioctl$KVM_INTERRUPT(r5, 0x4004ae86, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50)
write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xa, 0x145, 0x6, 0x2, 0x430, 0xe6, 0x0, 0x0, 0x2, 0x4}}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r8, &(0x7f0000000000), 0x8)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="38fdff00", @ANYRES16=r1, @ANYBLOB="010100000000fcdbdf252b00000008000300", @ANYRES32=r7, @ANYBLOB="050034006e000000"]}}, 0x4800)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
futex(&(0x7f0000002980)=0x2, 0x80, 0x2, &(0x7f00000029c0)={0x0, 0x989680}, 0x0, 0x1)
r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x3b, 0x547002)
mmap(&(0x7f00005bc000/0x3000)=nil, 0x3000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x2000)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x7, 0x2})
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x7ff, 0x4)

26.576487762s ago: executing program 0 (id=2018):
r0 = syz_usb_connect$hid(0x2, 0x37, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
syz_usb_disconnect(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001f"], 0xc4}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000200", 0x24) (async)
write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000200", 0x24)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000940)={0x14, &(0x7f0000000780)={0x20, 0x5, 0x51, {0x51, 0x4, "7612ea8bbfc7bcb3e8dba78865763ac1d170a168ecc91d96a49a6724551bda0a1380634f88229deb7a687bd5c11d69746a6291475480683ebca0d12e4396380e000f1a7b0db46311b556ac5ef94f39"}}, &(0x7f0000000800)={0x0, 0x3, 0x102, @string={0x102, 0x3, "278a9f5d24cdd88f4b9ed2e21b5aa9366b8da4254ddc7014268dee39d50b9d0460057ea92ac4c3682fad00bbc7d6d1e858497080a9264891ee80e610426e4c0ce9faca34725930b3e7d95c1044d07c5df997326ec8124d7b8b796c0845c255172f282f59e199d68b67bbe5fa650ff64c5f5194024fe86e56584f6f16d69ba16ab3493d54314f01c6dcca27331850bc5705bfd964f80b77f66b75f6189ab37eae5de3668a86aa22efd581d71114e4f241516ca8de4380d2c412990d1de1c9b1cfd07b8ce42c0dc45f1df956386eb0bcadee83b346b8b5d7dcda68d4ad90e8dd9b41b558dc18ddefb52cab3538a98d522bd3be795e8796e02ba4f3a1d905753b2c"}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000980)={0x40, 0x0, 0x2f, "180b9b6823924e16d4bc21e63a6afaf6951510d399c9e177c0303ac46839b715527447b40c75ae4a26328bce74f4ac"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000a80)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000ac0)={0xc0, 0xa2, 0x2f, "6d7c073ebdc6277264a73097aba836761b03b584fd134521a687cfd5cb4930b6be080079b15f2b0c7677dcff452e80"}}) (async)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000940)={0x14, &(0x7f0000000780)={0x20, 0x5, 0x51, {0x51, 0x4, "7612ea8bbfc7bcb3e8dba78865763ac1d170a168ecc91d96a49a6724551bda0a1380634f88229deb7a687bd5c11d69746a6291475480683ebca0d12e4396380e000f1a7b0db46311b556ac5ef94f39"}}, &(0x7f0000000800)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000980)={0x40, 0x0, 0x2f, "180b9b6823924e16d4bc21e63a6afaf6951510d399c9e177c0303ac46839b715527447b40c75ae4a26328bce74f4ac"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000a80)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000ac0)={0xc0, 0xa2, 0x2f, "6d7c073ebdc6277264a73097aba836761b03b584fd134521a687cfd5cb4930b6be080079b15f2b0c7677dcff452e80"}})
syz_usb_connect(0x7, 0x82, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xeb, 0xd6, 0xb8, 0xff, 0xc44, 0x22, 0x7632, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0xf9, 0x8, 0x0, 0x4, "", [{{0x9, 0x4, 0x30, 0x79, 0x4, 0x92, 0x4d, 0x70, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0xfff7, 0x11}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x8, "bf62"}]}], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x4, 0x3, 0x6, [@generic={0x1b, 0x8, "10b3b4ee8f52a2b1c63b4fbb7a4b3fb77b49c01627fafd381e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x35, 0x4}]}}, {{0x9, 0x5, 0xf, 0xc, 0x418, 0x3, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1ae5}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0xc0, 0x6, 0x5, 0x10, 0x2}, 0x5f, &(0x7f0000000240)={0x5, 0xf, 0x5f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x68, 0x10, 0x401}, @generic={0x35, 0x10, 0x2, "ea6681eea89d08f109c8b810f80a1ec39ca617d03d8f41fd0bf680c02544c9d7b194b6b803426bbf027e2089d4bb5eebcf82"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d3891b810519c6e4842e8a4e0f00fb02"}]}, 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}, {0xb, &(0x7f0000000440)=ANY=[@ANYBLOB]}, {0x2f, &(0x7f0000000480)=@string={0x2f, 0x3, "acde4b0c8696ea2921103c75b613b8d285d55c37f12d353e2c62863a56ea17cf3522ef9a8b6af8f648d93f5975"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x401}}, {0xc8, &(0x7f0000000500)=@string={0xc8, 0x3, "4e37ff8115c2e06ff59f31d8fafb07aeb9afee4856eecc28147abb679d2d3b3c527254caaf41abc8db7d68aaafab6f2fa1fc6ec7654546ac49f787a43a6a8950808f478071b6ddb32d38f681df77b547d71a144b5456e369172e932bd39d1476c7ae09b539f984a63cdce432b7a6a21ad6d525317412f67a31a767818f9ff39a7e50cd5786d2a8afd8569717aba3747b2c3673cd1638bff707bda699a6ad718ac3228d6001745b5bd428868a2668d7d01d7b6eb0c736c868df7b21c1530544f1ed96330ba63e"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0fc}}]}) (async)
syz_usb_connect(0x7, 0x82, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xeb, 0xd6, 0xb8, 0xff, 0xc44, 0x22, 0x7632, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0xf9, 0x8, 0x0, 0x4, "", [{{0x9, 0x4, 0x30, 0x79, 0x4, 0x92, 0x4d, 0x70, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0xfff7, 0x11}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x8, "bf62"}]}], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x4, 0x3, 0x6, [@generic={0x1b, 0x8, "10b3b4ee8f52a2b1c63b4fbb7a4b3fb77b49c01627fafd381e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x35, 0x4}]}}, {{0x9, 0x5, 0xf, 0xc, 0x418, 0x3, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1ae5}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0xc0, 0x6, 0x5, 0x10, 0x2}, 0x5f, &(0x7f0000000240)={0x5, 0xf, 0x5f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x68, 0x10, 0x401}, @generic={0x35, 0x10, 0x2, "ea6681eea89d08f109c8b810f80a1ec39ca617d03d8f41fd0bf680c02544c9d7b194b6b803426bbf027e2089d4bb5eebcf82"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d3891b810519c6e4842e8a4e0f00fb02"}]}, 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}, {0xb, &(0x7f0000000440)=ANY=[@ANYBLOB]}, {0x2f, &(0x7f0000000480)=@string={0x2f, 0x3, "acde4b0c8696ea2921103c75b613b8d285d55c37f12d353e2c62863a56ea17cf3522ef9a8b6af8f648d93f5975"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x401}}, {0xc8, &(0x7f0000000500)=@string={0xc8, 0x3, "4e37ff8115c2e06ff59f31d8fafb07aeb9afee4856eecc28147abb679d2d3b3c527254caaf41abc8db7d68aaafab6f2fa1fc6ec7654546ac49f787a43a6a8950808f478071b6ddb32d38f681df77b547d71a144b5456e369172e932bd39d1476c7ae09b539f984a63cdce432b7a6a21ad6d525317412f67a31a767818f9ff39a7e50cd5786d2a8afd8569717aba3747b2c3673cd1638bff707bda699a6ad718ac3228d6001745b5bd428868a2668d7d01d7b6eb0c736c868df7b21c1530544f1ed96330ba63e"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0fc}}]})
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x27ed4f847164e2a, 0xb, 0x28, {0x28, 0x23, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

18.494589284s ago: executing program 2 (id=2019):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000+0000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

17.569376436s ago: executing program 2 (id=2020):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x800000000000000, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0)

15.476533902s ago: executing program 2 (id=2021):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x12)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890)
close(0x3)
socket$kcm(0x10, 0x2, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0xc)
listen(r1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x64}}, 0x4040091)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r5, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="68000000000000bd19a432ebf2c8cf5d1948056517b5550eb0a0ee39d005e869fe74b9842d9c09c6a2f3000000000000009fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11f3ee2f4d4d4860fc0000180000000000000017010000040000100600"/138], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d", 0x9a}, {&(0x7f00000002c0)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e", 0x2c}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000003800010327bd7000fcffffda1356bec4fd37fed29f2e2086ab3c7f58c287600e8158fd023add16c455b04711c376957dc0e178964b26d3067b94b4f4499ab50035a19292c9a988d4ef3551ed78c78bf0867380adb02040610c7e94f7d149d5d0d190d70e238f3576f16c0847cc68a38bc1587e193be79e49d03d7c9d63704da944c3bf44ee92d6e8283cd0da58fc10e3ac6a6003a21bbd6b90780714361dc415746546acb8d71ca8bc7e155199db60134a12b19e5b474f57c49ecd1b2731f126c787fb55252000976cafd3834e06f30ad441d11181b58c13bd554d06ca05a95db2"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x400c000)
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)

9.915599111s ago: executing program 33 (id=2018):
r0 = syz_usb_connect$hid(0x2, 0x37, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
syz_usb_disconnect(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000001f"], 0xc4}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000200", 0x24) (async)
write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000200", 0x24)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000940)={0x14, &(0x7f0000000780)={0x20, 0x5, 0x51, {0x51, 0x4, "7612ea8bbfc7bcb3e8dba78865763ac1d170a168ecc91d96a49a6724551bda0a1380634f88229deb7a687bd5c11d69746a6291475480683ebca0d12e4396380e000f1a7b0db46311b556ac5ef94f39"}}, &(0x7f0000000800)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000980)={0x40, 0x0, 0x2f, "180b9b6823924e16d4bc21e63a6afaf6951510d399c9e177c0303ac46839b715527447b40c75ae4a26328bce74f4ac"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000a80)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000ac0)={0xc0, 0xa2, 0x2f, "6d7c073ebdc6277264a73097aba836761b03b584fd134521a687cfd5cb4930b6be080079b15f2b0c7677dcff452e80"}}) (async)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000940)={0x14, &(0x7f0000000780)={0x20, 0x5, 0x51, {0x51, 0x4, "7612ea8bbfc7bcb3e8dba78865763ac1d170a168ecc91d96a49a6724551bda0a1380634f88229deb7a687bd5c11d69746a6291475480683ebca0d12e4396380e000f1a7b0db46311b556ac5ef94f39"}}, &(0x7f0000000800)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000980)={0x40, 0x0, 0x2f, "180b9b6823924e16d4bc21e63a6afaf6951510d399c9e177c0303ac46839b715527447b40c75ae4a26328bce74f4ac"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000a80)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000ac0)={0xc0, 0xa2, 0x2f, "6d7c073ebdc6277264a73097aba836761b03b584fd134521a687cfd5cb4930b6be080079b15f2b0c7677dcff452e80"}})
syz_usb_connect(0x7, 0x82, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xeb, 0xd6, 0xb8, 0xff, 0xc44, 0x22, 0x7632, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0xf9, 0x8, 0x0, 0x4, "", [{{0x9, 0x4, 0x30, 0x79, 0x4, 0x92, 0x4d, 0x70, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0xfff7, 0x11}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x8, "bf62"}]}], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x4, 0x3, 0x6, [@generic={0x1b, 0x8, "10b3b4ee8f52a2b1c63b4fbb7a4b3fb77b49c01627fafd381e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x35, 0x4}]}}, {{0x9, 0x5, 0xf, 0xc, 0x418, 0x3, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1ae5}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0xc0, 0x6, 0x5, 0x10, 0x2}, 0x5f, &(0x7f0000000240)={0x5, 0xf, 0x5f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x68, 0x10, 0x401}, @generic={0x35, 0x10, 0x2, "ea6681eea89d08f109c8b810f80a1ec39ca617d03d8f41fd0bf680c02544c9d7b194b6b803426bbf027e2089d4bb5eebcf82"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d3891b810519c6e4842e8a4e0f00fb02"}]}, 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}, {0xb, &(0x7f0000000440)=ANY=[@ANYBLOB]}, {0x2f, &(0x7f0000000480)=@string={0x2f, 0x3, "acde4b0c8696ea2921103c75b613b8d285d55c37f12d353e2c62863a56ea17cf3522ef9a8b6af8f648d93f5975"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x401}}, {0xc8, &(0x7f0000000500)=@string={0xc8, 0x3, "4e37ff8115c2e06ff59f31d8fafb07aeb9afee4856eecc28147abb679d2d3b3c527254caaf41abc8db7d68aaafab6f2fa1fc6ec7654546ac49f787a43a6a8950808f478071b6ddb32d38f681df77b547d71a144b5456e369172e932bd39d1476c7ae09b539f984a63cdce432b7a6a21ad6d525317412f67a31a767818f9ff39a7e50cd5786d2a8afd8569717aba3747b2c3673cd1638bff707bda699a6ad718ac3228d6001745b5bd428868a2668d7d01d7b6eb0c736c868df7b21c1530544f1ed96330ba63e"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0fc}}]}) (async)
syz_usb_connect(0x7, 0x82, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xeb, 0xd6, 0xb8, 0xff, 0xc44, 0x22, 0x7632, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0xf9, 0x8, 0x0, 0x4, "", [{{0x9, 0x4, 0x30, 0x79, 0x4, 0x92, 0x4d, 0x70, 0x7f, [@uac_control={{0xa, 0x24, 0x1, 0xfff7, 0x11}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x8, "bf62"}]}], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0x1, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x2, 0x1, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x4, 0x3, 0x6, [@generic={0x1b, 0x8, "10b3b4ee8f52a2b1c63b4fbb7a4b3fb77b49c01627fafd381e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x35, 0x4}]}}, {{0x9, 0x5, 0xf, 0xc, 0x418, 0x3, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1ae5}]}}]}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0xc0, 0x6, 0x5, 0x10, 0x2}, 0x5f, &(0x7f0000000240)={0x5, 0xf, 0x5f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x68, 0x10, 0x401}, @generic={0x35, 0x10, 0x2, "ea6681eea89d08f109c8b810f80a1ec39ca617d03d8f41fd0bf680c02544c9d7b194b6b803426bbf027e2089d4bb5eebcf82"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d3891b810519c6e4842e8a4e0f00fb02"}]}, 0xa, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}, {0xb, &(0x7f0000000440)=ANY=[@ANYBLOB]}, {0x2f, &(0x7f0000000480)=@string={0x2f, 0x3, "acde4b0c8696ea2921103c75b613b8d285d55c37f12d353e2c62863a56ea17cf3522ef9a8b6af8f648d93f5975"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x401}}, {0xc8, &(0x7f0000000500)=@string={0xc8, 0x3, "4e37ff8115c2e06ff59f31d8fafb07aeb9afee4856eecc28147abb679d2d3b3c527254caaf41abc8db7d68aaafab6f2fa1fc6ec7654546ac49f787a43a6a8950808f478071b6ddb32d38f681df77b547d71a144b5456e369172e932bd39d1476c7ae09b539f984a63cdce432b7a6a21ad6d525317412f67a31a767818f9ff39a7e50cd5786d2a8afd8569717aba3747b2c3673cd1638bff707bda699a6ad718ac3228d6001745b5bd428868a2668d7d01d7b6eb0c736c868df7b21c1530544f1ed96330ba63e"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc0fc}}]})
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x27ed4f847164e2a, 0xb, 0x28, {0x28, 0x23, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 34 (id=2021):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)
tkill(r0, 0x12)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890)
close(0x3)
socket$kcm(0x10, 0x2, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r1, 0xc)
listen(r1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x64}}, 0x4040091)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00')
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r5, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="68000000000000bd19a432ebf2c8cf5d1948056517b5550eb0a0ee39d005e869fe74b9842d9c09c6a2f3000000000000009fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11f3ee2f4d4d4860fc0000180000000000000017010000040000100600"/138], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8", 0x3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d", 0x9a}, {&(0x7f00000002c0)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e", 0x2c}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000003800010327bd7000fcffffda1356bec4fd37fed29f2e2086ab3c7f58c287600e8158fd023add16c455b04711c376957dc0e178964b26d3067b94b4f4499ab50035a19292c9a988d4ef3551ed78c78bf0867380adb02040610c7e94f7d149d5d0d190d70e238f3576f16c0847cc68a38bc1587e193be79e49d03d7c9d63704da944c3bf44ee92d6e8283cd0da58fc10e3ac6a6003a21bbd6b90780714361dc415746546acb8d71ca8bc7e155199db60134a12b19e5b474f57c49ecd1b2731f126c787fb55252000976cafd3834e06f30ad441d11181b58c13bd554d06ca05a95db2"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x400c000)
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)

kernel console output (not intermixed with test programs):

lid descriptor of length 0, skipping remainder of the config
[  352.019327][ T5702] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  352.019350][ T5702] usb 1-1: config 0 has no interface number 0
[  352.019395][ T5702] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  352.019418][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.091186][ T5702] usb 1-1: config 0 descriptor??
[  352.308155][  T823] usb 1-1: USB disconnect, device number 74
[  352.915405][ T5718] usb 2-1: device descriptor read/64, error -71
[  352.982140][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'.
[  352.992551][T10177] 9pnet_fd: Insufficient options for proto=fd
[  353.004295][T10177] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1397'.
[  353.272701][ T5695] usb 3-1: USB disconnect, device number 85
[  354.940463][ T5695] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  354.983678][T10245] fuse: fd is not a fuse device
[  355.245980][ T5695] usb 3-1: Using ep0 maxpacket: 16
[  355.248071][ T5695] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  355.248095][ T5695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  355.248122][ T5695] usb 3-1: config 0 has no interface number 0
[  355.248165][ T5695] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  355.248190][ T5695] usb 3-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  355.248217][ T5695] usb 3-1: config 0 interface 98 has no altsetting 0
[  355.253357][ T5695] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  355.253385][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.253406][ T5695] usb 3-1: Product: syz
[  355.253419][ T5695] usb 3-1: Manufacturer: syz
[  355.253433][ T5695] usb 3-1: SerialNumber: syz
[  355.265119][ T5695] usb 3-1: config 0 descriptor??
[  355.269787][T10217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  355.333150][ T5695] asix 3-1:0.98: probe with driver asix failed with error -22
[  355.830753][T10265] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1432'.
[  356.556322][ T5702] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  356.706751][ T5702] usb 2-1: Using ep0 maxpacket: 8
[  356.722780][ T5702] usb 2-1: unable to read config index 0 descriptor/start: -61
[  356.722905][ T5702] usb 2-1: can't read configurations, error -61
[  356.866644][ T5702] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  357.036613][ T5702] usb 2-1: Using ep0 maxpacket: 8
[  357.040496][ T5702] usb 2-1: unable to read config index 0 descriptor/start: -61
[  357.040530][ T5702] usb 2-1: can't read configurations, error -61
[  357.053511][ T5702] usb usb2-port1: attempt power cycle
[  357.135088][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.135102][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.135200][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.135208][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.135306][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.135314][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.174754][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.174767][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.192914][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.192927][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.193036][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.193044][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.193139][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.193146][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.193267][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.193275][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.193363][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.193372][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.193470][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.193478][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.201509][T10303] binder: BINDER_SET_CONTEXT_MGR already set
[  357.326544][T10303] binder: 10302:10303 ioctl 4018620d 200000000100 returned -16
[  357.458624][ T5702] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  357.477281][ T5702] usb 2-1: Using ep0 maxpacket: 8
[  357.539790][ T5702] usb 2-1: unable to read config index 0 descriptor/start: -61
[  357.539829][ T5702] usb 2-1: can't read configurations, error -61
[  357.690786][ T5702] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  357.707372][ T5702] usb 2-1: Using ep0 maxpacket: 8
[  357.710280][ T5702] usb 2-1: unable to read config index 0 descriptor/start: -61
[  357.710314][ T5702] usb 2-1: can't read configurations, error -61
[  357.710694][ T5702] usb usb2-port1: unable to enumerate USB device
[  358.349569][ T5718] usb 3-1: USB disconnect, device number 86
[  359.034899][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'.
[  359.502302][ T5718] usb 3-1: new full-speed USB device number 87 using dummy_hcd
[  359.713572][ T5718] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  359.713600][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.713619][ T5718] usb 3-1: config 0 has no interface number 0
[  359.713660][ T5718] usb 3-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  360.294250][ T5718] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  360.294282][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.294301][ T5718] usb 3-1: Product: syz
[  360.294314][ T5718] usb 3-1: Manufacturer: syz
[  360.294327][ T5718] usb 3-1: SerialNumber: syz
[  360.347534][ T5718] usb 3-1: config 0 descriptor??
[  360.364063][ T5718] asix 3-1:0.251: probe with driver asix failed with error -22
[  360.581846][ T5702] usb 3-1: USB disconnect, device number 87
[  360.708760][  T823] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  360.857291][  T823] usb 2-1: Using ep0 maxpacket: 16
[  360.876658][  T823] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  360.876685][  T823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.876705][  T823] usb 2-1: config 0 has no interface number 0
[  360.876748][  T823] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  360.876773][  T823] usb 2-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  360.876801][  T823] usb 2-1: config 0 interface 98 has no altsetting 0
[  360.937780][  T823] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  360.937811][  T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.937830][  T823] usb 2-1: Product: syz
[  360.937843][  T823] usb 2-1: Manufacturer: syz
[  360.937858][  T823] usb 2-1: SerialNumber: syz
[  360.997287][  T823] usb 2-1: config 0 descriptor??
[  360.998317][T10372] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  361.003472][  T823] asix 2-1:0.98: probe with driver asix failed with error -22
[  361.651135][  T823] usb 2-1: USB disconnect, device number 72
[  362.395134][  T823] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  362.440020][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1494'.
[  362.547533][  T823] usb 1-1: Using ep0 maxpacket: 32
[  362.552086][  T823] usb 1-1: config 0 has an invalid interface number: 3 but max is 0
[  362.552113][  T823] usb 1-1: config 0 has no interface number 0
[  362.552156][  T823] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.552197][  T823] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  362.552219][  T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.649746][  T823] usb 1-1: config 0 descriptor??
[  363.003823][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1496'.
[  363.151694][  T823] uclogic 0003:5543:0045.000E: interface is invalid, ignoring
[  363.507698][  T823] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  363.667551][  T823] usb 3-1: Using ep0 maxpacket: 16
[  363.670341][  T823] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  363.670549][  T823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  363.670571][  T823] usb 3-1: config 0 has no interface number 0
[  363.670616][  T823] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  363.670641][  T823] usb 3-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  363.670667][  T823] usb 3-1: config 0 interface 98 has no altsetting 0
[  363.674211][  T823] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  363.674239][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.674259][  T823] usb 3-1: Product: syz
[  363.674274][  T823] usb 3-1: Manufacturer: syz
[  363.674289][  T823] usb 3-1: SerialNumber: syz
[  363.780433][  T823] usb 3-1: config 0 descriptor??
[  363.781472][T10421] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  363.800094][  T823] asix 3-1:0.98: probe with driver asix failed with error -22
[  364.914318][T10449] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1506'.
[  364.956404][T10449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1506'.
[  365.063759][  T823] usb 1-1: USB disconnect, device number 75
[  365.457796][  T823] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  365.614008][  T823] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  365.614036][  T823] usb 1-1: config 0 has no interface number 0
[  365.614297][  T823] usb 1-1: config 0 interface 41 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 10
[  365.614329][  T823] usb 1-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  365.614352][  T823] usb 1-1: config 0 interface 41 has no altsetting 0
[  365.617199][  T823] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  365.617226][  T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.617245][  T823] usb 1-1: Product: syz
[  365.617260][  T823] usb 1-1: Manufacturer: syz
[  365.617275][  T823] usb 1-1: SerialNumber: syz
[  365.707105][  T823] usb 1-1: config 0 descriptor??
[  365.724053][  T823] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22
[  365.917067][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.917628][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  366.156241][  T823] usb 1-1: USB disconnect, device number 76
[  366.359298][   T10] usb 3-1: USB disconnect, device number 88
[  366.450048][T10468] input input23: cannot allocate more than FF_MAX_EFFECTS effects
[  366.867975][   T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  367.032705][   T10] usb 3-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 32
[  367.032739][   T10] usb 3-1: config 1 interface 0 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  367.032768][   T10] usb 3-1: config 1 interface 0 has no altsetting 0
[  367.070423][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  367.070453][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.070474][   T10] usb 3-1: Manufacturer: 理ࡖ맵楴툭᢬蟧㫀＃᮳
[  367.070491][   T10] usb 3-1: SerialNumber: 㑟�胤澡䭾걇跖℗暡∾竳䂒뽑开뗻�תּᮈ渎୎ૻ躰툔䪫�잔�ޓ托ꈰ於邀⅕�ᆮꨴ챞딘좇莟䠓蚛绵寡蹪ǻ擛曊赩炅ﭪ帒ۯ붷驪ិ龋䚠陙声䔺⾀로ឺ枪틌�ﯷ곽哷ᗟ�痟蜴鯩⇎㪙�꺺뤩쥾䦭�镸ꉄ�䠔튥�톽뎜鮸蘮뷈뎕
[  367.159226][T10472] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  367.486055][T10486] 9p: Bad value for 'rfdno'
[  367.528548][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1522'.
[  367.542813][T10486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1522'.
[  367.597436][   T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  367.621482][   T10] usb 3-1: USB disconnect, device number 89
[  368.438250][   T10] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  368.595510][   T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  368.595542][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.637785][   T10] usb 1-1: config 0 descriptor??
[  368.666238][   T10] gspca_main: sunplus-2.14.0 probing 055f:c420
[  368.708214][ T8070] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  368.852405][   T10] gspca_sunplus: reg_w_riv err -71
[  368.852608][   T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  368.869980][ T8070] usb 3-1: Using ep0 maxpacket: 16
[  368.872614][ T8070] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  368.872639][ T8070] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.872658][ T8070] usb 3-1: config 0 has no interface number 0
[  368.872701][ T8070] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  368.872726][ T8070] usb 3-1: config 0 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  368.872748][ T8070] usb 3-1: config 0 interface 98 has no altsetting 0
[  368.979444][   T10] usb 1-1: USB disconnect, device number 77
[  369.052769][ T8070] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  369.052800][ T8070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.052820][ T8070] usb 3-1: Product: syz
[  369.052834][ T8070] usb 3-1: Manufacturer: syz
[  369.052849][ T8070] usb 3-1: SerialNumber: syz
[  369.153431][ T8070] usb 3-1: config 0 descriptor??
[  369.154942][T10509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  369.189694][ T8070] asix 3-1:0.98: probe with driver asix failed with error -22
[  370.196224][T10543] netlink: 'syz.1.1548': attribute type 1 has an invalid length.
[  370.196245][T10543] netlink: 'syz.1.1548': attribute type 2 has an invalid length.
[  370.234331][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1548'.
[  371.199015][T10558] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  371.542933][  T823] usb 3-1: USB disconnect, device number 90
[  371.772606][T10576] netlink: 'syz.2.1558': attribute type 10 has an invalid length.
[  372.673997][T10593] input: syz0 as /devices/virtual/input/input24
[  373.033530][T10576] team0 (unregistering): Port device team_slave_0 removed
[  373.176510][T10576] team0 (unregistering): Port device team_slave_1 removed
[  373.886674][T10606] program syz.2.1569 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  374.206286][   T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  374.353215][   T10] usb 2-1: config 127 has an invalid interface number: 138 but max is 0
[  374.353244][   T10] usb 2-1: config 127 has no interface number 0
[  374.355880][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40
[  374.355907][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.355927][   T10] usb 2-1: Product: syz
[  374.355940][   T10] usb 2-1: Manufacturer: syz
[  374.355954][   T10] usb 2-1: SerialNumber: syz
[  374.518776][T10619] Bluetooth: hci0: Opcode 0x080f failed: -4
[  374.806733][   T10] usb 2-1: probing VID:PID(0424:012C)   
[  374.822034][   T10] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  374.917623][   T10] vub300 2-1:127.138: probe with driver vub300 failed with error -22
[  374.947440][   T10] usb 2-1: USB disconnect, device number 73
[  375.281483][ T5718] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  375.286084][ T1444] Bluetooth: hci4: Frame reassembly failed (-84)
[  376.058786][   T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  376.208754][   T10] usb 2-1: Using ep0 maxpacket: 16
[  376.211550][   T10] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  376.211578][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.211597][   T10] usb 2-1: config 0 has no interface number 0
[  376.211640][   T10] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  376.211665][   T10] usb 2-1: config 0 interface 98 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  376.211688][   T10] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  376.211713][   T10] usb 2-1: config 0 interface 98 has no altsetting 0
[  376.215333][   T10] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  376.215369][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.215389][   T10] usb 2-1: Product: syz
[  376.215403][   T10] usb 2-1: Manufacturer: syz
[  376.215417][   T10] usb 2-1: SerialNumber: syz
[  376.325151][   T10] usb 2-1: config 0 descriptor??
[  376.359678][T10643] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  376.375217][   T10] asix 2-1:0.98: probe with driver asix failed with error -22
[  376.471305][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short
[  376.472603][ T5718] usb 3-1: config 12 has an invalid interface number: 117 but max is 0
[  376.472631][ T5718] usb 3-1: config 12 has no interface number 0
[  376.472680][ T5718] usb 3-1: config 12 interface 117 altsetting 128 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  376.472706][ T5718] usb 3-1: config 12 interface 117 has no altsetting 0
[  376.473852][ T4925] Bluetooth: hci0: command 0x080f tx timeout
[  376.475310][ T5718] usb 3-1: New USB device found, idVendor=13d2, idProduct=0400, bcdDevice=3a.f3
[  376.475336][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.475356][ T5718] usb 3-1: Product: syz
[  376.475371][ T5718] usb 3-1: Manufacturer: syz
[  376.475386][ T5718] usb 3-1: SerialNumber: syz
[  376.714463][T10614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.715036][T10614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.740431][T10614] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1573'.
[  376.988352][   T10] usb 2-1: USB disconnect, device number 74
[  377.268914][   T60] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  377.420422][   T10] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  377.572522][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  377.572556][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.577386][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  377.577415][   T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  377.577435][   T10] usb 2-1: Product: syz
[  377.577450][   T10] usb 2-1: Manufacturer: syz
[  377.812481][T10663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  377.814565][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'.
[  377.814585][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'.
[  377.823119][ T5718] kaweth 3-1:12.117: couldn't find required endpoints
[  377.924550][   T10] hub 2-1:4.0: USB hub found
[  377.936190][ T5718] usb 3-1: USB disconnect, device number 91
[  378.328056][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.343573][   T10] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[  378.349058][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.487521][   T10] usb 2-1: USB disconnect, device number 75
[  378.788974][ T5702] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  378.948864][ T5702] usb 3-1: Using ep0 maxpacket: 16
[  378.951176][ T5702] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  378.951201][ T5702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.951222][ T5702] usb 3-1: config 0 has no interface number 0
[  378.951266][ T5702] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  378.951291][ T5702] usb 3-1: config 0 interface 98 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  378.951313][ T5702] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  378.951337][ T5702] usb 3-1: config 0 interface 98 has no altsetting 0
[  378.957381][ T5702] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  378.957409][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.957429][ T5702] usb 3-1: Product: syz
[  378.957443][ T5702] usb 3-1: Manufacturer: syz
[  378.957458][ T5702] usb 3-1: SerialNumber: syz
[  379.085194][ T5702] usb 3-1: config 0 descriptor??
[  379.102902][T10679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  379.130022][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  379.130133][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  379.161431][ T5702] asix 3-1:0.98: probe with driver asix failed with error -22
[  379.310176][   T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  379.458948][   T10] usb 2-1: Using ep0 maxpacket: 32
[  379.461321][   T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  379.461346][   T10] usb 2-1: config 0 has no interface number 0
[  379.461388][   T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  379.461416][   T10] usb 2-1: config 0 interface 85 has no altsetting 0
[  379.514845][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  379.514888][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.514909][   T10] usb 2-1: Product: syz
[  379.514923][   T10] usb 2-1: Manufacturer: syz
[  379.514938][   T10] usb 2-1: SerialNumber: syz
[  379.630563][   T10] usb 2-1: config 0 descriptor??
[  380.432547][   T10] appletouch 2-1:0.85: Failed to request geyser raw mode
[  380.432975][   T10] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  380.497630][   T10] usb 2-1: USB disconnect, device number 76
[  380.880803][   T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  381.029832][   T10] usb 2-1: Using ep0 maxpacket: 16
[  381.037063][   T10] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  381.037088][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.037108][   T10] usb 2-1: config 0 has no interface number 0
[  381.037163][   T10] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  381.037188][   T10] usb 2-1: config 0 interface 98 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  381.037216][   T10] usb 2-1: config 0 interface 98 has no altsetting 0
[  381.104456][   T10] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  381.104486][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.104506][   T10] usb 2-1: Product: syz
[  381.104521][   T10] usb 2-1: Manufacturer: syz
[  381.104535][   T10] usb 2-1: SerialNumber: syz
[  381.151647][   T10] usb 2-1: config 0 descriptor??
[  381.152477][T10707] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  381.172414][   T10] asix 2-1:0.98: probe with driver asix failed with error -22
[  381.620239][   T10] usb 3-1: USB disconnect, device number 92
[  382.030316][T10725] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1615'.
[  382.261319][ T5702] usb 2-1: USB disconnect, device number 77
[  382.709145][ T5702] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  383.059166][ T5702] usb 2-1: Using ep0 maxpacket: 32
[  383.061789][ T5702] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  383.061816][ T5702] usb 2-1: config 0 has no interface number 0
[  383.061858][ T5702] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  383.061887][ T5702] usb 2-1: config 0 interface 85 has no altsetting 0
[  383.092138][ T5702] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  383.092169][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.092190][ T5702] usb 2-1: Product: syz
[  383.092205][ T5702] usb 2-1: Manufacturer: syz
[  383.092219][ T5702] usb 2-1: SerialNumber: syz
[  383.171784][ T5702] usb 2-1: config 0 descriptor??
[  383.390537][ T5702] appletouch 2-1:0.85: Failed to read mode from device.
[  383.390756][ T5702] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  384.138026][ T5702] usb 2-1: USB disconnect, device number 78
[  385.119229][   T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  385.269716][   T10] usb 2-1: Using ep0 maxpacket: 16
[  385.286556][   T10] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  385.286591][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.286610][   T10] usb 2-1: config 0 has no interface number 0
[  385.286655][   T10] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  385.286681][   T10] usb 2-1: config 0 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  385.286702][   T10] usb 2-1: config 0 interface 98 has no altsetting 0
[  385.354853][   T10] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  385.354883][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.354904][   T10] usb 2-1: Product: syz
[  385.354918][   T10] usb 2-1: Manufacturer: syz
[  385.354932][   T10] usb 2-1: SerialNumber: syz
[  385.410186][   T10] usb 2-1: config 0 descriptor??
[  385.411248][T10775] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  385.442614][   T10] asix 2-1:0.98: probe with driver asix failed with error -22
[  385.469230][ T8070] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  385.619174][ T8070] usb 3-1: Using ep0 maxpacket: 16
[  385.623416][ T8070] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  385.623443][ T8070] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.623463][ T8070] usb 3-1: config 0 has no interface number 0
[  385.623507][ T8070] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  385.623532][ T8070] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  385.623557][ T8070] usb 3-1: config 0 interface 98 has no altsetting 0
[  385.692144][ T8070] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  385.692174][ T8070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.692195][ T8070] usb 3-1: Product: syz
[  385.692210][ T8070] usb 3-1: Manufacturer: syz
[  385.692224][ T8070] usb 3-1: SerialNumber: syz
[  385.781789][ T8070] usb 3-1: config 0 descriptor??
[  385.782790][T10782] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  385.782980][T10782] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  386.006213][T10782] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  386.006330][T10782] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  386.285136][   T10] usb 2-1: USB disconnect, device number 79
[  386.489506][T10799] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1651'.
[  386.684074][ T8070] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  386.684464][ T8070] asix 3-1:0.98: probe with driver asix failed with error -71
[  386.725106][ T8070] usb 3-1: USB disconnect, device number 93
[  388.179273][ T5718] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  388.469227][ T5718] usb 3-1: Using ep0 maxpacket: 16
[  388.471411][ T5718] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  388.471437][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.471456][ T5718] usb 3-1: config 0 has no interface number 0
[  388.471500][ T5718] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  388.471525][ T5718] usb 3-1: config 0 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  388.471546][ T5718] usb 3-1: config 0 interface 98 has no altsetting 0
[  388.474735][ T5718] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  388.474764][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.474783][ T5718] usb 3-1: Product: syz
[  388.474798][ T5718] usb 3-1: Manufacturer: syz
[  388.474812][ T5718] usb 3-1: SerialNumber: syz
[  388.579825][ T5718] usb 3-1: config 0 descriptor??
[  388.580892][T10821] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  388.608865][ T5718] asix 3-1:0.98: probe with driver asix failed with error -22
[  389.241801][T10850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1674'.
[  389.414260][T10853] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1675'.
[  390.272967][T10880] FAULT_INJECTION: forcing a failure.
[  390.272967][T10880] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  390.273001][T10880] CPU: 1 UID: 0 PID: 10880 Comm: syz.1.1686 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  390.273028][T10880] Tainted: [L]=SOFTLOCKUP
[  390.273034][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  390.273044][T10880] Call Trace:
[  390.273051][T10880]  <TASK>
[  390.273059][T10880]  dump_stack_lvl+0xe8/0x150
[  390.273086][T10880]  should_fail_ex+0x46b/0x600
[  390.273115][T10880]  _copy_to_user+0x31/0xb0
[  390.273137][T10880]  simple_read_from_buffer+0xe1/0x170
[  390.273161][T10880]  proc_fail_nth_read+0x1be/0x230
[  390.273184][T10880]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  390.273205][T10880]  ? rw_verify_area+0x2ac/0x4e0
[  390.273224][T10880]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  390.273244][T10880]  vfs_read+0x212/0xa80
[  390.273274][T10880]  ? __pfx_vfs_read+0x10/0x10
[  390.273297][T10880]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  390.273321][T10880]  ? lockdep_hardirqs_on+0x7a/0x110
[  390.273343][T10880]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  390.273366][T10880]  ? mutex_lock_nested+0x152/0x1d0
[  390.273393][T10880]  ? fdget_pos+0x252/0x320
[  390.273417][T10880]  ksys_read+0x156/0x270
[  390.273441][T10880]  ? __pfx_ksys_read+0x10/0x10
[  390.273469][T10880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.273488][T10880]  do_syscall_64+0x174/0x580
[  390.273509][T10880]  ? trace_irq_disable+0x3b/0x140
[  390.273530][T10880]  ? clear_bhb_loop+0x40/0x90
[  390.273552][T10880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.273570][T10880] RIP: 0033:0x7f0025dad68e
[  390.273585][T10880] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  390.273600][T10880] RSP: 002b:00007f002403dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  390.273620][T10880] RAX: ffffffffffffffda RBX: 00007f002403e6c0 RCX: 00007f0025dad68e
[  390.273634][T10880] RDX: 000000000000000f RSI: 00007f002403e0a0 RDI: 0000000000000004
[  390.273645][T10880] RBP: 00007f002403e090 R08: 0000000000000000 R09: 0000000000000000
[  390.273656][T10880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  390.273668][T10880] R13: 00007f0026066038 R14: 00007f0026065fa0 R15: 00007ffcaffa3118
[  390.273697][T10880]  </TASK>
[  390.469530][T10886] FAULT_INJECTION: forcing a failure.
[  390.469530][T10886] name failslab, interval 1, probability 0, space 0, times 0
[  390.469565][T10886] CPU: 0 UID: 0 PID: 10886 Comm: syz.0.1689 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  390.469591][T10886] Tainted: [L]=SOFTLOCKUP
[  390.469598][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  390.469609][T10886] Call Trace:
[  390.469616][T10886]  <TASK>
[  390.469624][T10886]  dump_stack_lvl+0xe8/0x150
[  390.469652][T10886]  should_fail_ex+0x46b/0x600
[  390.469681][T10886]  ? ipmr_mfc_add+0x105/0x24e0
[  390.469705][T10886]  should_failslab+0xa8/0x100
[  390.469728][T10886]  ? ipmr_mfc_add+0x105/0x24e0
[  390.469749][T10886]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  390.469777][T10886]  ? ipmr_mfc_add+0x412/0x24e0
[  390.469798][T10886]  ? ipmr_mfc_add+0x412/0x24e0
[  390.469825][T10886]  ? ipmr_mfc_add+0x105/0x24e0
[  390.469846][T10886]  ipmr_mfc_add+0x412/0x24e0
[  390.469873][T10886]  ? ipmr_mfc_add+0x105/0x24e0
[  390.469913][T10886]  ? __pfx_ipmr_mfc_add+0x10/0x10
[  390.469944][T10886]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  390.469968][T10886]  ? lockdep_hardirqs_on+0x7a/0x110
[  390.470000][T10886]  ip_mroute_setsockopt+0xe5b/0x10d0
[  390.470032][T10886]  ? __pfx_ip_mroute_setsockopt+0x10/0x10
[  390.470053][T10886]  ? __lock_acquire+0x6b5/0x2d10
[  390.470092][T10886]  ? __lock_acquire+0x6b5/0x2d10
[  390.470119][T10886]  do_ip_setsockopt+0xf1e/0x2ea0
[  390.470150][T10886]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  390.470171][T10886]  ? aa_sk_perm+0x703/0x950
[  390.470200][T10886]  ? __fget_files+0x2a/0x420
[  390.470222][T10886]  ? __pfx_aa_sk_perm+0x10/0x10
[  390.470253][T10886]  ? aa_sock_opt_perm+0x131/0x1f0
[  390.470279][T10886]  ip_setsockopt+0x66/0x110
[  390.470297][T10886]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  390.470318][T10886]  do_sock_setsockopt+0x17c/0x1b0
[  390.470345][T10886]  __x64_sys_setsockopt+0x143/0x1b0
[  390.470370][T10886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.470390][T10886]  do_syscall_64+0x174/0x580
[  390.470412][T10886]  ? trace_irq_disable+0x3b/0x140
[  390.470435][T10886]  ? clear_bhb_loop+0x40/0x90
[  390.470458][T10886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.470477][T10886] RIP: 0033:0x7f40551fce59
[  390.470494][T10886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  390.470510][T10886] RSP: 002b:00007f4053456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  390.470530][T10886] RAX: ffffffffffffffda RBX: 00007f4055475fa0 RCX: 00007f40551fce59
[  390.470544][T10886] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000003
[  390.470555][T10886] RBP: 00007f4053456090 R08: 000000000000003c R09: 0000000000000000
[  390.470567][T10886] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  390.470579][T10886] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  390.470609][T10886]  </TASK>
[  390.642520][   T10] usb 3-1: USB disconnect, device number 94
[  390.961639][T10890] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1897
[  391.123444][T10900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1695'.
[  391.906212][   T10] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  392.049377][   T10] usb 2-1: Using ep0 maxpacket: 16
[  392.054407][   T10] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  392.054433][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  392.054451][   T10] usb 2-1: config 0 has no interface number 0
[  392.054493][   T10] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  392.054516][   T10] usb 2-1: config 0 interface 98 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  392.054537][   T10] usb 2-1: config 0 interface 98 has no altsetting 0
[  392.060382][   T10] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  392.060409][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.060428][   T10] usb 2-1: Product: syz
[  392.060442][   T10] usb 2-1: Manufacturer: syz
[  392.060456][   T10] usb 2-1: SerialNumber: syz
[  392.079561][   T10] usb 2-1: config 0 descriptor??
[  392.080534][T10909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  392.092854][   T10] asix 2-1:0.98: probe with driver asix failed with error -22
[  392.758700][   T10] usb 2-1: USB disconnect, device number 80
[  393.075427][T10951] FAULT_INJECTION: forcing a failure.
[  393.075427][T10951] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  393.075462][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.0.1717 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  393.075489][T10951] Tainted: [L]=SOFTLOCKUP
[  393.075496][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  393.075507][T10951] Call Trace:
[  393.075514][T10951]  <TASK>
[  393.075522][T10951]  dump_stack_lvl+0xe8/0x150
[  393.075550][T10951]  should_fail_ex+0x46b/0x600
[  393.075581][T10951]  _copy_to_user+0x31/0xb0
[  393.075605][T10951]  simple_read_from_buffer+0xe1/0x170
[  393.075629][T10951]  proc_fail_nth_read+0x1be/0x230
[  393.075657][T10951]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  393.075689][T10951]  ? rw_verify_area+0x2ac/0x4e0
[  393.075711][T10951]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  393.075731][T10951]  vfs_read+0x212/0xa80
[  393.075761][T10951]  ? __pfx_vfs_read+0x10/0x10
[  393.075786][T10951]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  393.075810][T10951]  ? lockdep_hardirqs_on+0x7a/0x110
[  393.075834][T10951]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  393.075857][T10951]  ? mutex_lock_nested+0x152/0x1d0
[  393.075884][T10951]  ? fdget_pos+0x252/0x320
[  393.075912][T10951]  ksys_read+0x156/0x270
[  393.075936][T10951]  ? __pfx_ksys_read+0x10/0x10
[  393.075966][T10951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.075987][T10951]  do_syscall_64+0x174/0x580
[  393.076009][T10951]  ? trace_irq_disable+0x3b/0x140
[  393.076033][T10951]  ? clear_bhb_loop+0x40/0x90
[  393.076057][T10951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.076076][T10951] RIP: 0033:0x7f40551bd68e
[  393.076094][T10951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  393.076110][T10951] RSP: 002b:00007f4053434fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  393.076131][T10951] RAX: ffffffffffffffda RBX: 00007f40534356c0 RCX: 00007f40551bd68e
[  393.076145][T10951] RDX: 000000000000000f RSI: 00007f40534350a0 RDI: 0000000000000004
[  393.076157][T10951] RBP: 00007f4053435090 R08: 0000000000000000 R09: 0000000000000000
[  393.076169][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  393.076181][T10951] R13: 00007f4055476128 R14: 00007f4055476090 R15: 00007ffdbc7adb58
[  393.076209][T10951]  </TASK>
[  394.206317][   T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  394.369417][   T10] usb 3-1: Using ep0 maxpacket: 16
[  394.372258][   T10] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  394.372283][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.372303][   T10] usb 3-1: config 0 has no interface number 0
[  394.372346][   T10] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  394.372371][   T10] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  394.372396][   T10] usb 3-1: config 0 interface 98 has no altsetting 0
[  394.472497][   T10] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  394.472529][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.472550][   T10] usb 3-1: Product: syz
[  394.472564][   T10] usb 3-1: Manufacturer: syz
[  394.472579][   T10] usb 3-1: SerialNumber: syz
[  394.528273][   T10] usb 3-1: config 0 descriptor??
[  394.534589][T10961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  394.535737][T10961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  394.796912][T10961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  394.806607][T10961] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  395.436476][   T10] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  395.436749][   T10] asix 3-1:0.98: probe with driver asix failed with error -71
[  395.472941][   T10] usb 3-1: USB disconnect, device number 95
[  396.080712][T10986] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1730'.
[  396.569559][ T5702] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  396.719453][ T5702] usb 2-1: Using ep0 maxpacket: 16
[  396.748343][ T5702] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  396.748375][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.748396][ T5702] usb 2-1: Product: syz
[  396.748410][ T5702] usb 2-1: Manufacturer: syz
[  396.748425][ T5702] usb 2-1: SerialNumber: syz
[  396.768640][ T5702] r8152-cfgselector 2-1: Unknown version 0x0000
[  396.768664][ T5702] r8152-cfgselector 2-1: config 0 descriptor??
[  397.575385][ T5702] r8152-cfgselector 2-1: Unknown version 0x0000
[  397.575867][ T5702] r8152-cfgselector 2-1: No union descriptors
[  397.609834][ T5718] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  397.650211][ T5702] r8152-cfgselector 2-1: USB disconnect, device number 81
[  397.760338][ T5718] usb 3-1: Using ep0 maxpacket: 16
[  397.762934][ T5718] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  397.762959][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  397.762979][ T5718] usb 3-1: config 0 has no interface number 0
[  397.763022][ T5718] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  397.763047][ T5718] usb 3-1: config 0 interface 98 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  397.763067][ T5718] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  397.763091][ T5718] usb 3-1: config 0 interface 98 has no altsetting 0
[  397.776259][ T5718] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  397.776286][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.776306][ T5718] usb 3-1: Product: syz
[  397.776319][ T5718] usb 3-1: Manufacturer: syz
[  397.776334][ T5718] usb 3-1: SerialNumber: syz
[  397.862479][ T5718] usb 3-1: config 0 descriptor??
[  397.863468][T10998] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  397.914748][ T5718] asix 3-1:0.98: probe with driver asix failed with error -22
[  398.104711][T11022] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  399.519168][T11055] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1 out of range (51000000..2150000000)
[  399.519212][T11055] FAULT_INJECTION: forcing a failure.
[  399.519212][T11055] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  399.519239][T11055] CPU: 1 UID: 0 PID: 11055 Comm: syz.0.1751 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  399.519265][T11055] Tainted: [L]=SOFTLOCKUP
[  399.519271][T11055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  399.519282][T11055] Call Trace:
[  399.519289][T11055]  <TASK>
[  399.519297][T11055]  dump_stack_lvl+0xe8/0x150
[  399.519325][T11055]  should_fail_ex+0x46b/0x600
[  399.519356][T11055]  _copy_to_user+0x31/0xb0
[  399.519378][T11055]  simple_read_from_buffer+0xe1/0x170
[  399.519399][T11055]  proc_fail_nth_read+0x1be/0x230
[  399.519416][T11055]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  399.519434][T11055]  ? rw_verify_area+0x2ac/0x4e0
[  399.519450][T11055]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  399.519465][T11055]  vfs_read+0x212/0xa80
[  399.519486][T11055]  ? __pfx_vfs_read+0x10/0x10
[  399.519504][T11055]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  399.519521][T11055]  ? lockdep_hardirqs_on+0x7a/0x110
[  399.519538][T11055]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  399.519563][T11055]  ? mutex_lock_nested+0x152/0x1d0
[  399.519583][T11055]  ? fdget_pos+0x252/0x320
[  399.519603][T11055]  ksys_read+0x156/0x270
[  399.519621][T11055]  ? __pfx_ksys_read+0x10/0x10
[  399.519642][T11055]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.519657][T11055]  do_syscall_64+0x174/0x580
[  399.519674][T11055]  ? trace_irq_disable+0x3b/0x140
[  399.519691][T11055]  ? clear_bhb_loop+0x40/0x90
[  399.519708][T11055]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.519722][T11055] RIP: 0033:0x7f40551bd68e
[  399.519735][T11055] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  399.519747][T11055] RSP: 002b:00007f4053455fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  399.519763][T11055] RAX: ffffffffffffffda RBX: 00007f40534566c0 RCX: 00007f40551bd68e
[  399.519774][T11055] RDX: 000000000000000f RSI: 00007f40534560a0 RDI: 0000000000000004
[  399.519782][T11055] RBP: 00007f4053456090 R08: 0000000000000000 R09: 0000000000000000
[  399.519790][T11055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.519798][T11055] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  399.519820][T11055]  </TASK>
[  399.939480][   T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  400.028149][ T5702] usb 3-1: USB disconnect, device number 96
[  400.089484][   T10] usb 2-1: Using ep0 maxpacket: 16
[  400.189878][   T10] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  400.189906][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.189926][   T10] usb 2-1: config 0 has no interface number 0
[  400.189970][   T10] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  400.189995][   T10] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  400.190029][   T10] usb 2-1: config 0 interface 98 has no altsetting 0
[  400.261238][   T10] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  400.261270][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.261290][   T10] usb 2-1: Product: syz
[  400.261304][   T10] usb 2-1: Manufacturer: syz
[  400.261319][   T10] usb 2-1: SerialNumber: syz
[  400.374180][   T10] usb 2-1: config 0 descriptor??
[  400.375235][T11054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  400.432285][T11054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  400.679545][T11054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  400.681146][T11054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  400.759711][ T5702] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  400.920091][ T5702] usb 3-1: Using ep0 maxpacket: 8
[  400.931697][ T5702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.931745][ T5702] usb 3-1: New USB device found, idVendor=0421, idProduct=033e, bcdDevice=5f.0e
[  400.931820][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.003827][ T5702] usb 3-1: config 0 descriptor??
[  401.034514][ T5702] rndis_host 3-1:0.0: rndis: master #0/ffff888037703000 slave #1/0000000000000000
[  401.326186][ T5702] usb 3-1: USB disconnect, device number 97
[  401.511265][   T10] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  401.511762][   T10] asix 2-1:0.98: probe with driver asix failed with error -71
[  401.606707][   T10] usb 2-1: USB disconnect, device number 82
[  402.771707][ T5718] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  403.057021][ T5718] usb 1-1: unable to get BOS descriptor or descriptor too short
[  403.057569][ T5718] usb 1-1: not running at top speed; connect to a high speed hub
[  403.058919][ T5718] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 503, setting to 64
[  403.058950][ T5718] usb 1-1: config 1 interface 0 has no altsetting 0
[  403.068746][ T5718] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.40
[  403.068773][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.068791][ T5718] usb 1-1: Product: syz
[  403.068804][ T5718] usb 1-1: SerialNumber: syz
[  403.117528][T11072] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  403.515946][T11072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.516429][T11072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.649521][   T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  403.749500][   T60] Bluetooth: hci2: command 0x0401 tx timeout
[  403.799509][   T10] usb 2-1: Using ep0 maxpacket: 16
[  403.806633][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  403.806658][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  403.846128][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  403.846157][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.846178][   T10] usb 2-1: Product: syz
[  403.846193][   T10] usb 2-1: Manufacturer: syz
[  403.846208][   T10] usb 2-1: SerialNumber: syz
[  403.984133][   T10] usb 2-1: 0:2 : does not exist
[  404.162998][T11105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1766'.
[  404.245659][   T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  404.300552][ T5718] usbhid 1-1:1.0: can't add hid device: -71
[  404.300656][ T5718] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  404.334985][ T5718] usb 1-1: USB disconnect, device number 78
[  404.619723][   T10] usb 2-1: USB disconnect, device number 83
[  405.132471][T11126] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1771'.
[  406.106870][T11133] FAULT_INJECTION: forcing a failure.
[  406.106870][T11133] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  406.106907][T11133] CPU: 1 UID: 0 PID: 11133 Comm: syz.0.1776 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  406.106936][T11133] Tainted: [L]=SOFTLOCKUP
[  406.106942][T11133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  406.106954][T11133] Call Trace:
[  406.106961][T11133]  <TASK>
[  406.106969][T11133]  dump_stack_lvl+0xe8/0x150
[  406.107009][T11133]  should_fail_ex+0x46b/0x600
[  406.107041][T11133]  _copy_to_iter+0x1e4/0x17d0
[  406.107069][T11133]  ? lockdep_hardirqs_on+0x7a/0x110
[  406.107097][T11133]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  406.107123][T11133]  ? __pfx__copy_to_iter+0x10/0x10
[  406.107151][T11133]  ? __local_bh_enable+0x1e1/0x2f0
[  406.107185][T11133]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  406.107214][T11133]  ? lockdep_hardirqs_on+0x7a/0x110
[  406.107243][T11133]  llc_ui_getsockopt+0x356/0x460
[  406.107275][T11133]  ? __pfx_llc_ui_getsockopt+0x10/0x10
[  406.107309][T11133]  do_sock_getsockopt+0x6ae/0x7e0
[  406.107339][T11133]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  406.107378][T11133]  ? __fget_files+0x3a6/0x420
[  406.107397][T11133]  ? __fget_files+0x2a/0x420
[  406.107423][T11133]  __x64_sys_getsockopt+0x1aa/0x250
[  406.107452][T11133]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.107473][T11133]  do_syscall_64+0x174/0x580
[  406.107495][T11133]  ? trace_irq_disable+0x3b/0x140
[  406.107518][T11133]  ? clear_bhb_loop+0x40/0x90
[  406.107542][T11133]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.107562][T11133] RIP: 0033:0x7f40551fce59
[  406.107581][T11133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.107597][T11133] RSP: 002b:00007f4053456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  406.107618][T11133] RAX: ffffffffffffffda RBX: 00007f4055475fa0 RCX: 00007f40551fce59
[  406.107630][T11133] RDX: 0000000000000007 RSI: 000000000000010c RDI: 0000000000000004
[  406.107642][T11133] RBP: 00007f4053456090 R08: 0000200000000240 R09: 0000000000000000
[  406.107654][T11133] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  406.107666][T11133] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  406.107697][T11133]  </TASK>
[  408.697117][ T9224] udevd[9224]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  410.782192][  T823] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  411.973102][T11170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1790'.
[  411.993007][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1790'.
[  413.170695][  T823] usb 3-1: device descriptor read/64, error -71
[  413.419682][  T823] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  415.568672][  T823] usb 3-1: Using ep0 maxpacket: 16
[  419.743912][  T823] usb 3-1: device descriptor read/all, error -71
[  419.746334][  T823] usb usb3-port1: attempt power cycle
[  420.269679][  T823] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  420.290434][  T823] usb 3-1: Using ep0 maxpacket: 32
[  420.292766][  T823] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  420.292790][  T823] usb 3-1: config 0 has no interface number 0
[  420.292836][  T823] usb 3-1: config 0 interface 12 has no altsetting 0
[  420.329057][  T823] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  420.329088][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.329106][  T823] usb 3-1: Product: syz
[  420.329120][  T823] usb 3-1: Manufacturer: syz
[  420.329134][  T823] usb 3-1: SerialNumber: syz
[  420.368230][  T823] usb 3-1: config 0 descriptor??
[  421.040762][  T823] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  421.040943][  T823] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  421.040993][  T823] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  421.041173][  T823] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  421.199730][  T823] usb 3-1: USB disconnect, device number 100
[  421.262747][T11210] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1806'.
[  422.121736][ T8070] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  422.168198][T11215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1809'.
[  424.429657][ T5718] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  424.595991][ T5718] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  424.596024][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.596044][ T5718] usb 1-1: Product: syz
[  424.596058][ T5718] usb 1-1: Manufacturer: syz
[  424.596073][ T5718] usb 1-1: SerialNumber: syz
[  425.150393][ T8070] usb 2-1: unable to get BOS descriptor or descriptor too short
[  425.157315][ T8070] usb 2-1: unable to read config index 0 descriptor/start: -71
[  425.157351][ T8070] usb 2-1: can't read configurations, error -71
[  425.199630][ T5718] usb 1-1: config 0 descriptor??
[  425.543598][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.544143][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.545371][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.545910][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.547096][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.547648][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.548736][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.549267][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.549816][ T5718] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  425.692978][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.694078][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.111626][ T5718] usb 1-1: USB disconnect, device number 79
[  428.321929][ T8070] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  428.609981][ T8070] usb 2-1: Using ep0 maxpacket: 16
[  428.612246][ T8070] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  428.612274][ T8070] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  428.612293][ T8070] usb 2-1: config 0 has no interface number 0
[  428.612337][ T8070] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  428.612361][ T8070] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  428.612386][ T8070] usb 2-1: config 0 interface 98 has no altsetting 0
[  428.617496][ T8070] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  428.617526][ T8070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.617558][ T8070] usb 2-1: Product: syz
[  428.617572][ T8070] usb 2-1: Manufacturer: syz
[  428.617587][ T8070] usb 2-1: SerialNumber: syz
[  428.637872][ T8070] usb 2-1: config 0 descriptor??
[  428.647435][T11237] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22
[  428.647630][T11237] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22
[  429.729971][ T8070] asix 2-1:0.98: probe with driver asix failed with error -71
[  429.799746][   T10] usb 4-1: USB disconnect, device number 9
[  429.801607][ T8070] usb 2-1: USB disconnect, device number 85
[  430.485958][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  430.499617][ T8070] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  430.534561][ T5609] Bluetooth: hci4: command 0x1003 tx timeout
[  430.612517][   T60] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  430.664458][   T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  430.702754][ T8070] usb 2-1: Using ep0 maxpacket: 16
[  430.708212][ T8070] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  430.708248][ T8070] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  430.708267][ T8070] usb 2-1: config 0 has no interface number 0
[  430.708309][ T8070] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  430.708334][ T8070] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  430.708359][ T8070] usb 2-1: config 0 interface 98 has no altsetting 0
[  430.714517][ T8070] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  430.714545][ T8070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.714566][ T8070] usb 2-1: Product: syz
[  430.714580][ T8070] usb 2-1: Manufacturer: syz
[  430.714594][ T8070] usb 2-1: SerialNumber: syz
[  430.731390][   T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  430.820562][   T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  430.825312][   T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  431.032235][ T8070] usb 2-1: config 0 descriptor??
[  431.033220][T11260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  431.033406][T11260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  431.851472][T11260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  431.851670][T11260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  433.031586][ T4925] Bluetooth: hci5: command tx timeout
[  433.342881][ T8070] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  433.342917][ T8070] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[  433.343190][ T8070] asix 2-1:0.98: probe with driver asix failed with error -71
[  433.414925][ T8070] usb 2-1: USB disconnect, device number 86
[  435.886939][ T4925] Bluetooth: hci5: command tx timeout
[  437.909859][ T4925] Bluetooth: hci5: command tx timeout
[  439.989723][ T4925] Bluetooth: hci5: command tx timeout
[  440.421241][   T10] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  440.526915][T11313] FAULT_INJECTION: forcing a failure.
[  440.526915][T11313] name failslab, interval 1, probability 0, space 0, times 0
[  440.526971][T11313] CPU: 0 UID: 0 PID: 11313 Comm: syz.0.1832 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  440.527000][T11313] Tainted: [L]=SOFTLOCKUP
[  440.527007][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  440.527024][T11313] Call Trace:
[  440.527044][T11313]  <TASK>
[  440.527053][T11313]  dump_stack_lvl+0xe8/0x150
[  440.527082][T11313]  should_fail_ex+0x46b/0x600
[  440.527112][T11313]  should_failslab+0xa8/0x100
[  440.527135][T11313]  __kmalloc_noprof+0xfe/0x7e0
[  440.527156][T11313]  ? tomoyo_encode+0x28b/0x550
[  440.527176][T11313]  ? tomoyo_encode+0x28b/0x550
[  440.527203][T11313]  tomoyo_encode+0x28b/0x550
[  440.527229][T11313]  tomoyo_realpath_from_path+0x58d/0x5d0
[  440.527261][T11313]  ? tomoyo_path_number_perm+0x219/0x630
[  440.527288][T11313]  tomoyo_path_number_perm+0x246/0x630
[  440.527318][T11313]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  440.527346][T11313]  ? __lock_acquire+0x6b5/0x2d10
[  440.527374][T11313]  ? do_raw_spin_lock+0x12b/0x2f0
[  440.527425][T11313]  ? __fget_files+0x2a/0x420
[  440.527447][T11313]  ? __fget_files+0x2a/0x420
[  440.527464][T11313]  ? __fget_files+0x3a6/0x420
[  440.527481][T11313]  ? __fget_files+0x2a/0x420
[  440.527501][T11313]  security_file_ioctl+0xc3/0x2a0
[  440.527526][T11313]  __se_sys_ioctl+0x47/0x170
[  440.527546][T11313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.527562][T11313]  do_syscall_64+0x174/0x580
[  440.527579][T11313]  ? trace_irq_disable+0x3b/0x140
[  440.527597][T11313]  ? clear_bhb_loop+0x40/0x90
[  440.527614][T11313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.527627][T11313] RIP: 0033:0x7f40551fce59
[  440.527643][T11313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  440.527655][T11313] RSP: 002b:00007f4053456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  440.527672][T11313] RAX: ffffffffffffffda RBX: 00007f4055475fa0 RCX: 00007f40551fce59
[  440.527682][T11313] RDX: 0000200000001ec0 RSI: 0000000000004b67 RDI: 0000000000000003
[  440.527691][T11313] RBP: 00007f4053456090 R08: 0000000000000000 R09: 0000000000000000
[  440.527703][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.527711][T11313] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  440.527733][T11313]  </TASK>
[  440.527761][T11313] ERROR: Out of memory at tomoyo_realpath_from_path.
[  440.555168][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  440.555263][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  440.660157][   T10] usb 3-1: Using ep0 maxpacket: 32
[  441.654593][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  441.668446][   T10] usb 3-1: config 237 has an invalid interface number: 9 but max is 0
[  441.668474][   T10] usb 3-1: config 237 has no interface number 0
[  441.668507][   T10] usb 3-1: config 237 interface 9 has no altsetting 0
[  442.530259][   T10] usb 3-1: string descriptor 0 read error: -71
[  442.530398][   T10] usb 3-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=3e.c3
[  442.530424][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.536408][   T10] usb 3-1: can't set config #237, error -71
[  442.549888][   T10] usb 3-1: USB disconnect, device number 101
[  443.520296][T11344] netlink: 'syz.0.1846': attribute type 1 has an invalid length.
[  443.766365][ T8070] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  443.766529][   T10] usb 3-1: new full-speed USB device number 102 using dummy_hcd
[  443.931046][   T10] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  443.931078][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.931158][   T10] usb 3-1: Product: syz
[  443.931173][   T10] usb 3-1: Manufacturer: syz
[  443.931187][   T10] usb 3-1: SerialNumber: syz
[  444.051229][   T10] usb 3-1: config 0 descriptor??
[  444.092198][   T10] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  444.119592][   T32] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  444.532357][   T32] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  444.532390][   T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  444.532414][   T32] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  444.572969][   T32] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  444.573010][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.573030][   T32] usb 2-1: Product: syz
[  444.573044][   T32] usb 2-1: Manufacturer: syz
[  444.573059][   T32] usb 2-1: SerialNumber: syz
[  444.579028][   T32] usb 2-1: config 0 descriptor??
[  444.580183][T11329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  444.581879][T11329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  444.634532][   T32] usb 2-1: ucan: probing device on interface #0
[  444.716415][T11341] MTD: Couldn't look up '': -22
[  445.758979][   T10] gspca_stk1135: reg_w 0x200 err -71
[  445.765864][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  445.765880][   T10] gspca_stk1135: Sensor write failed
[  445.765912][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  445.765922][   T10] gspca_stk1135: Sensor write failed
[  445.766042][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  445.766053][   T10] gspca_stk1135: Sensor read failed
[  445.766078][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  445.766087][   T10] gspca_stk1135: Sensor read failed
[  445.766093][   T10] gspca_stk1135: Detected sensor type unknown (0x0)
[  445.766178][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  445.766188][   T10] gspca_stk1135: Sensor read failed
[  445.766211][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  445.766219][   T10] gspca_stk1135: Sensor read failed
[  445.766237][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  445.766244][   T10] gspca_stk1135: Sensor write failed
[  445.766335][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  445.766345][   T10] gspca_stk1135: Sensor write failed
[  445.766486][   T10] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  445.932663][   T10] usb 3-1: USB disconnect, device number 102
[  446.511025][   T32] usb 2-1: ucan: failed to retrieve device info
[  446.511049][   T32] usb 2-1: ucan: probe failed; try to update the device firmware
[  446.579858][   T38] kauditd_printk_skb: 38 callbacks suppressed
[  446.579984][   T38] audit: type=1326 audit(1782002611.316:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11357 comm="syz.2.1849" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc6f37ce59 code=0x0
[  446.722847][   T32] usb 2-1: USB disconnect, device number 87
[  448.384585][   T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  448.531258][   T10] usb 2-1: Using ep0 maxpacket: 16
[  448.535663][   T10] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  448.535691][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  448.535710][   T10] usb 2-1: config 0 has no interface number 0
[  448.535812][   T10] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  448.535838][   T10] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  448.535863][   T10] usb 2-1: config 0 interface 98 has no altsetting 0
[  448.610479][   T10] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  448.610510][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.610755][   T10] usb 2-1: Product: syz
[  448.610771][   T10] usb 2-1: Manufacturer: syz
[  448.610786][   T10] usb 2-1: SerialNumber: syz
[  448.706255][   T10] usb 2-1: config 0 descriptor??
[  448.707568][T11362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  448.707859][T11362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  448.919717][ T8070] usb 1-1: device descriptor read/64, error -110
[  448.955426][T11362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  448.955754][T11362] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  449.169760][ T8070] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  449.499898][ T8070] usb 1-1: device descriptor read/64, error -32
[  449.546970][   T10] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  449.547254][   T10] asix 2-1:0.98: probe with driver asix failed with error -71
[  449.584020][   T10] usb 2-1: USB disconnect, device number 88
[  449.609998][ T8070] usb usb1-port1: attempt power cycle
[  449.710055][T11262] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.710434][T11262] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.710702][T11262] bridge_slave_0: entered allmulticast mode
[  449.719408][T11262] bridge_slave_0: entered promiscuous mode
[  449.843839][T11262] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.844170][T11262] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.844456][T11262] bridge_slave_1: entered allmulticast mode
[  449.886626][T11262] bridge_slave_1: entered promiscuous mode
[  449.952464][ T8070] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  449.972030][ T8070] usb 1-1: device descriptor read/8, error -32
[  450.021261][T11262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.028234][T11262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.079909][ T8070] raw-gadget.2 gadget.0: failed to queue suspend event
[  450.080422][ T8070] raw-gadget.2 gadget.0: failed to queue reset event
[  450.144993][T11262] team0: Port device team_slave_0 added
[  450.149982][ T5702] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  450.186537][T11262] team0: Port device team_slave_1 added
[  450.204139][ T8070] raw-gadget.2 gadget.0: failed to queue resume event
[  450.261786][ T8070] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  450.265494][T11262] batman_adv: batadv0: Adding interface: batadv_slave_0
[  450.265510][T11262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.265534][T11262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  450.269210][T11262] batman_adv: batadv0: Adding interface: batadv_slave_1
[  450.269224][T11262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  450.269248][T11262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.279953][    C0] raw-gadget.2 gadget.0: ignoring, device is not running
[  450.280091][ T8070] usb 1-1: device descriptor read/8, error -32
[  450.398423][ T8070] raw-gadget.2 gadget.0: failed to queue suspend event
[  450.412358][ T8070] usb usb1-port1: unable to enumerate USB device
[  450.422281][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short
[  450.436609][ T5702] usb 2-1: config 8 has an invalid interface number: 141 but max is 0
[  450.436635][ T5702] usb 2-1: config 8 has no interface number 0
[  450.436666][ T5702] usb 2-1: config 8 interface 141 has no altsetting 0
[  450.468095][ T5702] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=f2.dd
[  450.468125][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.468145][ T5702] usb 2-1: Product: syz
[  450.468159][ T5702] usb 2-1: Manufacturer: syz
[  450.468173][ T5702] usb 2-1: SerialNumber: syz
[  450.738722][ T5702] int51x1 2-1:8.141: probe with driver int51x1 failed with error -71
[  450.789475][ T5702] usb 2-1: USB disconnect, device number 89
[  451.028486][T11262] hsr_slave_0: entered promiscuous mode
[  451.054517][T11262] hsr_slave_1: entered promiscuous mode
[  451.650096][ T8070] usb 2-1: new full-speed USB device number 90 using dummy_hcd
[  451.822492][ T8070] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.846242][ T8070] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  451.846273][ T8070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.846294][ T8070] usb 2-1: Product: syz
[  451.846309][ T8070] usb 2-1: Manufacturer: syz
[  451.846324][ T8070] usb 2-1: SerialNumber: syz
[  451.906600][ T8070] usb 2-1: config 0 descriptor??
[  451.954179][T11345] raw-gadget.2 gadget.0: failed to queue disconnect event
[  452.040688][ T8070] mvusb_mdio 2-1:0.0: probe with driver mvusb_mdio failed with error -5
[  452.140462][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.141044][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.142348][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.182480][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.184998][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.186117][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.191203][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.193520][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.201588][T11384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.202097][T11384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.294783][ T8070] usb 2-1: USB disconnect, device number 90
[  452.579717][  T824] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  453.239745][ T8070] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  453.479662][ T8070] usb 2-1: Using ep0 maxpacket: 16
[  453.481897][ T8070] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  453.481922][ T8070] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  453.481941][ T8070] usb 2-1: config 0 has no interface number 0
[  453.481984][ T8070] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  453.482009][ T8070] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  453.482032][ T8070] usb 2-1: config 0 interface 98 has no altsetting 0
[  453.485900][ T8070] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  453.485926][ T8070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.485963][ T8070] usb 2-1: Product: syz
[  453.485978][ T8070] usb 2-1: Manufacturer: syz
[  453.485993][ T8070] usb 2-1: SerialNumber: syz
[  453.523206][  T824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  453.523230][  T824] usb 3-1: config 0 has no interfaces?
[  453.525331][  T824] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  453.525356][  T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.525375][  T824] usb 3-1: Product: syz
[  453.525388][  T824] usb 3-1: Manufacturer: syz
[  453.525402][  T824] usb 3-1: SerialNumber: syz
[  453.639905][  T824] usb 3-1: config 0 descriptor??
[  453.852560][ T8070] usb 2-1: config 0 descriptor??
[  453.853552][T11396] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  453.853747][T11396] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  454.084411][T11396] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  454.084683][T11396] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  456.627397][ T8070] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  456.627675][ T8070] asix 2-1:0.98: probe with driver asix failed with error -71
[  456.663452][ T8070] usb 2-1: USB disconnect, device number 91
[  457.663358][ T5702] usb 3-1: USB disconnect, device number 103
[  461.222188][T11408] 9pnet_virtio: no channels available for device éq‰Y’3aK
[  467.147410][T11448] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  467.179872][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'.
[  470.906789][T11459] FAULT_INJECTION: forcing a failure.
[  470.906789][T11459] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  470.906828][T11459] CPU: 1 UID: 0 PID: 11459 Comm: syz.0.1889 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  470.906856][T11459] Tainted: [L]=SOFTLOCKUP
[  470.906863][T11459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  470.906874][T11459] Call Trace:
[  470.906882][T11459]  <TASK>
[  470.906891][T11459]  dump_stack_lvl+0xe8/0x150
[  470.906919][T11459]  should_fail_ex+0x46b/0x600
[  470.906951][T11459]  prepare_alloc_pages+0x22a/0x6b0
[  470.906981][T11459]  __alloc_frozen_pages_noprof+0x12f/0x380
[  470.907008][T11459]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  470.907034][T11459]  ? __pfx_policy_nodemask+0x10/0x10
[  470.907058][T11459]  ? __lock_acquire+0x6b5/0x2d10
[  470.907087][T11459]  alloc_pages_mpol+0xd1/0x380
[  470.907114][T11459]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  470.907150][T11459]  vma_alloc_folio_noprof+0xe1/0x1e0
[  470.907173][T11459]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  470.907197][T11459]  ? __pte_offset_map+0x29/0x200
[  470.907231][T11459]  do_pte_missing+0x822/0x2940
[  470.907261][T11459]  ? handle_mm_fault+0xed/0x14d0
[  470.907283][T11459]  handle_mm_fault+0xdc2/0x14d0
[  470.907306][T11459]  ? handle_mm_fault+0xed/0x14d0
[  470.907328][T11459]  ? __pfx_handle_mm_fault+0x10/0x10
[  470.907359][T11459]  ? __lock_acquire+0x6b5/0x2d10
[  470.907386][T11459]  ? lock_mm_and_find_vma+0xa7/0x340
[  470.907412][T11459]  do_user_addr_fault+0x75b/0x1340
[  470.907450][T11459]  exc_page_fault+0x6a/0xc0
[  470.907476][T11459]  asm_exc_page_fault+0x26/0x30
[  470.907494][T11459] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  470.907515][T11459] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  470.907531][T11459] RSP: 0018:ffffc9001ad874f8 EFLAGS: 00050206
[  470.907549][T11459] RAX: ffffffff84b7e401 RBX: ffff8880329e4000 RCX: 000000000000049c
[  470.907562][T11459] RDX: 0000000000000000 RSI: ffff8880329e4a00 RDI: 0000200000001000
[  470.907575][T11459] RBP: ffffc9001ad87670 R08: ffff8880329e4e9b R09: 1ffff1100653c9d3
[  470.907589][T11459] R10: dffffc0000000000 R11: ffffed100653c9d4 R12: dffffc0000000000
[  470.907602][T11459] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e9c
[  470.907621][T11459]  ? _copy_to_iter+0x3c1/0x17d0
[  470.907655][T11459]  _copy_to_iter+0x493/0x17d0
[  470.907694][T11459]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  470.907714][T11459]  ? __pfx__copy_to_iter+0x10/0x10
[  470.907738][T11459]  ? rt_spin_lock+0x1e0/0x400
[  470.907758][T11459]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  470.907787][T11459]  __skb_datagram_iter+0xf8/0x980
[  470.907815][T11459]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  470.907849][T11459]  skb_copy_datagram_iter+0xb5/0x240
[  470.907878][T11459]  netlink_recvmsg+0x2c3/0xa50
[  470.907913][T11459]  ? __pfx_netlink_recvmsg+0x10/0x10
[  470.907940][T11459]  ? __pfx_aa_sk_perm+0x10/0x10
[  470.907967][T11459]  ? __lock_acquire+0x6b5/0x2d10
[  470.907994][T11459]  ? aa_sock_msg_perm+0x122/0x200
[  470.908013][T11459]  ? __pfx_netlink_recvmsg+0x10/0x10
[  470.908039][T11459]  sock_recvmsg_nosec+0x130/0x170
[  470.908072][T11459]  ____sys_recvmsg+0x23d/0x4f0
[  470.908109][T11459]  ? __pfx_____sys_recvmsg+0x10/0x10
[  470.908155][T11459]  ? import_iovec+0x73/0xa0
[  470.908177][T11459]  ___sys_recvmsg+0x215/0x5a0
[  470.908207][T11459]  ? __pfx____sys_recvmsg+0x10/0x10
[  470.908235][T11459]  ? __fget_files+0x2a/0x420
[  470.908271][T11459]  ? __fget_files+0x3a6/0x420
[  470.908300][T11459]  do_recvmmsg+0x32b/0x7e0
[  470.908333][T11459]  ? __pfx_do_recvmmsg+0x10/0x10
[  470.908369][T11459]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  470.908401][T11459]  __x64_sys_recvmmsg+0x198/0x250
[  470.908429][T11459]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  470.908462][T11459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.908483][T11459]  do_syscall_64+0x174/0x580
[  470.908506][T11459]  ? trace_irq_disable+0x3b/0x140
[  470.908529][T11459]  ? clear_bhb_loop+0x40/0x90
[  470.908553][T11459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.908572][T11459] RIP: 0033:0x7f40551fce59
[  470.908589][T11459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.908605][T11459] RSP: 002b:00007f4053456028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  470.908625][T11459] RAX: ffffffffffffffda RBX: 00007f4055475fa0 RCX: 00007f40551fce59
[  470.908636][T11459] RDX: 0000000000000004 RSI: 00002000000054c0 RDI: 0000000000000003
[  470.908647][T11459] RBP: 00007f4053456090 R08: 0000000000000000 R09: 0000000000000000
[  470.908659][T11459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.908670][T11459] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  470.908699][T11459]  </TASK>
[  474.004055][ T5695] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  474.011581][T11479] FAULT_INJECTION: forcing a failure.
[  474.011581][T11479] name fail_iommufd, interval 1, probability 0, space 0, times 1
[  474.011615][T11479] CPU: 1 UID: 0 PID: 11479 Comm: syz.0.1898 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  474.011642][T11479] Tainted: [L]=SOFTLOCKUP
[  474.011649][T11479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  474.011660][T11479] Call Trace:
[  474.011668][T11479]  <TASK>
[  474.011676][T11479]  dump_stack_lvl+0xe8/0x150
[  474.011704][T11479]  should_fail_ex+0x46b/0x600
[  474.011734][T11479]  iommufd_get_object+0x78/0x4b0
[  474.011756][T11479]  ? __might_fault+0xaf/0x130
[  474.011776][T11479]  ? __pfx_iommufd_get_object+0x10/0x10
[  474.011795][T11479]  ? __might_fault+0xaf/0x130
[  474.011823][T11479]  iommufd_ioas_option+0xb5/0x3a0
[  474.011843][T11479]  ? iommufd_option+0xb6/0x1a0
[  474.011867][T11479]  iommufd_option+0xbe/0x1a0
[  474.011890][T11479]  iommufd_fops_ioctl+0x4b8/0x5d0
[  474.011926][T11479]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  474.011953][T11479]  ? __fget_files+0x2a/0x420
[  474.011978][T11479]  ? __fget_files+0x2a/0x420
[  474.012000][T11479]  ? bpf_lsm_file_ioctl+0x9/0x20
[  474.012023][T11479]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  474.012045][T11479]  __se_sys_ioctl+0xff/0x170
[  474.012071][T11479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.012093][T11479]  do_syscall_64+0x174/0x580
[  474.012117][T11479]  ? trace_irq_disable+0x3b/0x140
[  474.012141][T11479]  ? clear_bhb_loop+0x40/0x90
[  474.012163][T11479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.012182][T11479] RIP: 0033:0x7f40551fce59
[  474.012200][T11479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  474.012216][T11479] RSP: 002b:00007f4053456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  474.012236][T11479] RAX: ffffffffffffffda RBX: 00007f4055475fa0 RCX: 00007f40551fce59
[  474.012248][T11479] RDX: 0000200000000000 RSI: 0000000000003b87 RDI: 0000000000000003
[  474.012260][T11479] RBP: 00007f4053456090 R08: 0000000000000000 R09: 0000000000000000
[  474.012272][T11479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.012283][T11479] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  474.012312][T11479]  </TASK>
[  474.261139][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  474.261196][ T5695] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  474.263879][ T5695] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  474.263905][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  474.263925][ T5695] usb 2-1: SerialNumber: syz
[  474.366047][ T5695] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  474.775712][T11262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.453641][ T5695] usb 2-1: USB disconnect, device number 92
[  476.309713][  T823] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  479.410435][  T823] usb 3-1: Using ep0 maxpacket: 32
[  479.505266][  T823] usb 3-1: device descriptor read/all, error -71
[  479.919727][ T5695] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  480.069656][ T5695] usb 1-1: Using ep0 maxpacket: 32
[  480.095360][ T5695] usb 1-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice= 0.40
[  480.095390][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.095410][ T5695] usb 1-1: Product: syz
[  480.095423][ T5695] usb 1-1: Manufacturer: syz
[  480.095438][ T5695] usb 1-1: SerialNumber: syz
[  480.251383][T11504] binder: 11502:11504 ioctl c0306201 200000000000 returned -14
[  484.819230][  T823] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  485.367623][ T5695] usb 1-1: USB disconnect, device number 85
[  487.108393][ T9224] udevd[9224]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  487.393475][T11515] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1913'.
[  490.613957][T11531] FAULT_INJECTION: forcing a failure.
[  490.613957][T11531] name failslab, interval 1, probability 0, space 0, times 0
[  490.613994][T11531] CPU: 1 UID: 0 PID: 11531 Comm: syz.0.1920 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  490.614021][T11531] Tainted: [L]=SOFTLOCKUP
[  490.614027][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  490.614039][T11531] Call Trace:
[  490.614046][T11531]  <TASK>
[  490.614055][T11531]  dump_stack_lvl+0xe8/0x150
[  490.614084][T11531]  should_fail_ex+0x46b/0x600
[  490.614116][T11531]  should_failslab+0xa8/0x100
[  490.614141][T11531]  __kmalloc_cache_noprof+0xa0/0x6d0
[  490.614162][T11531]  ? nft_trans_rule_add+0x59/0x440
[  490.614183][T11531]  ? nft_trans_rule_add+0x59/0x440
[  490.614211][T11531]  nft_trans_rule_add+0x59/0x440
[  490.614231][T11531]  ? nft_parse_register_store+0x2f0/0x370
[  490.614261][T11531]  nf_tables_newrule+0x1b72/0x28b0
[  490.614313][T11531]  ? __pfx_nf_tables_newrule+0x10/0x10
[  490.614331][T11531]  ? nfnl_pernet+0x23/0x240
[  490.614352][T11531]  ? nfnl_pernet+0x23/0x240
[  490.614381][T11531]  ? __nla_parse+0x40/0x60
[  490.614404][T11531]  nfnetlink_rcv+0x1247/0x27b0
[  490.614464][T11531]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  490.614500][T11531]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  490.614525][T11531]  ? ref_tracker_free+0x673/0x820
[  490.614580][T11531]  ? __netlink_deliver_tap+0x866/0x8b0
[  490.614614][T11531]  ? netlink_deliver_tap+0x2e/0x1b0
[  490.614637][T11531]  ? netlink_deliver_tap+0x2e/0x1b0
[  490.614666][T11531]  netlink_unicast+0x780/0x920
[  490.614697][T11531]  netlink_sendmsg+0x813/0xb40
[  490.614729][T11531]  ? __pfx_netlink_sendmsg+0x10/0x10
[  490.614759][T11531]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  490.614786][T11531]  ? aa_sock_msg_perm+0x122/0x200
[  490.614807][T11531]  ? __pfx_netlink_sendmsg+0x10/0x10
[  490.614830][T11531]  sock_sendmsg_nosec+0x13a/0x180
[  490.614862][T11531]  ____sys_sendmsg+0x55c/0x870
[  490.614891][T11531]  ? __pfx_____sys_sendmsg+0x10/0x10
[  490.614922][T11531]  ? import_iovec+0x73/0xa0
[  490.614946][T11531]  ___sys_sendmsg+0x2a5/0x360
[  490.614969][T11531]  ? __lock_acquire+0x6b5/0x2d10
[  490.614996][T11531]  ? __pfx____sys_sendmsg+0x10/0x10
[  490.615053][T11531]  ? __fget_files+0x2a/0x420
[  490.615072][T11531]  ? __fget_files+0x3a6/0x420
[  490.615101][T11531]  __x64_sys_sendmsg+0x1b7/0x290
[  490.615128][T11531]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  490.615168][T11531]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.615189][T11531]  do_syscall_64+0x174/0x580
[  490.615211][T11531]  ? trace_irq_disable+0x3b/0x140
[  490.615235][T11531]  ? clear_bhb_loop+0x40/0x90
[  490.615258][T11531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.615278][T11531] RIP: 0033:0x7f40551fce59
[  490.615296][T11531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  490.615313][T11531] RSP: 002b:00007f4053456028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  490.615333][T11531] RAX: ffffffffffffffda RBX: 00007f4055475fa0 RCX: 00007f40551fce59
[  490.615347][T11531] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003
[  490.615360][T11531] RBP: 00007f4053456090 R08: 0000000000000000 R09: 0000000000000000
[  490.615372][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.615383][T11531] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  490.615423][T11531]  </TASK>
[  491.618289][  T823] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  491.674408][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  492.663057][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  492.665065][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  492.666558][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  492.667608][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  494.936430][T11262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.241242][ T4925] Bluetooth: hci3: command tx timeout
[  496.369140][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  496.422146][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  496.423656][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  496.428241][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  496.429365][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  498.310271][   T60] Bluetooth: hci3: command tx timeout
[  498.687612][   T60] Bluetooth: hci4: command tx timeout
[  499.416639][  T823] usb 3-1: device not accepting address 106, error -71
[  500.390151][   T60] Bluetooth: hci3: command tx timeout
[  500.709637][   T60] Bluetooth: hci4: command tx timeout
[  501.890625][  T823] usb 3-1: new low-speed USB device number 107 using dummy_hcd
[  502.748860][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  502.748962][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  503.262877][  T823] usb 3-1: No LPM exit latency info found, disabling LPM.
[  504.213372][  T823] usb 3-1: config 8 has an invalid interface number: 155 but max is 2
[  504.213402][  T823] usb 3-1: config 8 has an invalid interface number: 64 but max is 2
[  504.213433][  T823] usb 3-1: config 8 has an invalid interface number: 4 but max is 2
[  504.213451][  T823] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  504.213469][  T823] usb 3-1: config 8 has no interface number 0
[  504.213485][  T823] usb 3-1: config 8 has no interface number 1
[  504.213500][  T823] usb 3-1: config 8 has no interface number 2
[  504.214992][  T823] usb 3-1: config 8 interface 155 altsetting 2 endpoint 0xF is Bulk; changing to Interrupt
[  504.215021][  T823] usb 3-1: config 8 interface 155 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  504.215044][  T823] usb 3-1: config 8 interface 155 altsetting 2 has a duplicate endpoint with address 0xF, skipping
[  504.215078][  T823] usb 3-1: config 8 interface 155 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  504.215101][  T823] usb 3-1: config 8 interface 155 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 8
[  504.215125][  T823] usb 3-1: config 8 interface 155 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  504.215146][  T823] usb 3-1: config 8 interface 155 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 8
[  504.215172][  T823] usb 3-1: config 8 interface 155 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  504.215208][  T823] usb 3-1: config 8 interface 64 altsetting 5 endpoint 0xE has invalid maxpacket 64, setting to 8
[  504.215234][  T823] usb 3-1: config 8 interface 64 altsetting 5 endpoint 0x8 has invalid maxpacket 64, setting to 8
[  504.215274][  T823] usb 3-1: config 8 interface 4 altsetting 8 has a duplicate endpoint with address 0x6, skipping
[  504.215295][  T823] usb 3-1: config 8 interface 4 altsetting 8 has a duplicate endpoint with address 0x2, skipping
[  504.215316][  T823] usb 3-1: config 8 interface 4 altsetting 8 has a duplicate endpoint with address 0xF, skipping
[  504.215338][  T823] usb 3-1: config 8 interface 4 altsetting 8 endpoint 0x9 has invalid maxpacket 512, setting to 8
[  504.215363][  T823] usb 3-1: config 8 interface 4 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  504.215382][  T823] usb 3-1: config 8 interface 4 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  504.215404][  T823] usb 3-1: config 8 interface 4 altsetting 8 endpoint 0x5 is Bulk; changing to Interrupt
[  504.215427][  T823] usb 3-1: config 8 interface 155 has no altsetting 0
[  504.215445][  T823] usb 3-1: config 8 interface 64 has no altsetting 0
[  504.215463][  T823] usb 3-1: config 8 interface 4 has no altsetting 0
[  504.359729][   T60] Bluetooth: hci3: command tx timeout
[  504.359787][   T60] Bluetooth: hci4: command tx timeout
[  506.178969][  T823] usb 3-1: string descriptor 0 read error: -71
[  506.179111][  T823] usb 3-1: New USB device found, idVendor=15b8, idProduct=6002, bcdDevice=9f.2a
[  506.179137][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.389707][ T4925] Bluetooth: hci4: command tx timeout
[  506.839321][  T823] usb 3-1: can't set config #8, error -71
[  506.860722][  T823] usb 3-1: USB disconnect, device number 107
[  509.921522][T11262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.543676][ T8070] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  510.749715][ T8070] usb 3-1: Using ep0 maxpacket: 16
[  510.751486][ T8070] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  510.751510][ T8070] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.751530][ T8070] usb 3-1: config 0 has no interface number 0
[  510.751571][ T8070] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  510.751595][ T8070] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  510.751618][ T8070] usb 3-1: config 0 interface 98 has no altsetting 0
[  510.756690][ T8070] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  510.756718][ T8070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.756739][ T8070] usb 3-1: Product: syz
[  510.756753][ T8070] usb 3-1: Manufacturer: syz
[  510.756768][ T8070] usb 3-1: SerialNumber: syz
[  511.959638][ T5695] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  512.159651][ T5695] usb 1-1: Using ep0 maxpacket: 32
[  512.162483][ T5695] usb 1-1: unable to get BOS descriptor or descriptor too short
[  512.182543][ T5695] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  512.182574][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.182594][ T5695] usb 1-1: Product: syz
[  512.182608][ T5695] usb 1-1: Manufacturer: syz
[  512.182623][ T5695] usb 1-1: SerialNumber: syz
[  512.784562][ T8070] usb 3-1: config 0 descriptor??
[  512.902174][T11595] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  512.904574][T11595] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  516.128873][ T5695] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  516.865984][ T5695] usb 1-1: USB disconnect, device number 86
[  517.184434][T11614] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1942'.
[  517.859726][ T8070] asix 3-1:0.98: probe with driver asix failed with error -71
[  518.904186][ T8070] usb 3-1: USB disconnect, device number 108
[  529.764534][ T8070] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  533.256211][T11262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.239723][ T5718] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  535.441553][ T5718] usb 3-1: Using ep0 maxpacket: 16
[  535.444661][ T5718] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  535.444688][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  535.444707][ T5718] usb 3-1: config 0 has no interface number 0
[  535.444749][ T5718] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  535.444774][ T5718] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  535.444798][ T5718] usb 3-1: config 0 interface 98 has no altsetting 0
[  535.448002][ T5718] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  535.448029][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.448048][ T5718] usb 3-1: Product: syz
[  535.448062][ T5718] usb 3-1: Manufacturer: syz
[  535.448076][ T5718] usb 3-1: SerialNumber: syz
[  536.602931][ T5718] usb 3-1: config 0 descriptor??
[  536.659862][T11689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  536.660004][T11689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  537.984261][T11689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  537.984386][T11689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  538.229955][T11535] bridge0: port 1(bridge_slave_0) entered blocking state
[  538.230741][T11535] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.231702][T11535] bridge_slave_0: entered allmulticast mode
[  538.294177][T11535] bridge_slave_0: entered promiscuous mode
[  538.542192][T11535] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.543149][T11535] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.560675][T11535] bridge_slave_1: entered allmulticast mode
[  538.643241][T11535] bridge_slave_1: entered promiscuous mode
[  540.741678][ T5718] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  540.741966][ T5718] asix 3-1:0.98: probe with driver asix failed with error -71
[  540.769584][ T5718] usb 3-1: USB disconnect, device number 110
[  542.346434][T11713] FAULT_INJECTION: forcing a failure.
[  542.346434][T11713] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.346471][T11713] CPU: 1 UID: 0 PID: 11713 Comm: syz.2.1976 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  542.346498][T11713] Tainted: [L]=SOFTLOCKUP
[  542.346506][T11713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  542.346517][T11713] Call Trace:
[  542.346525][T11713]  <TASK>
[  542.346533][T11713]  dump_stack_lvl+0xe8/0x150
[  542.346563][T11713]  should_fail_ex+0x46b/0x600
[  542.346594][T11713]  _copy_to_user+0x31/0xb0
[  542.346628][T11713]  simple_read_from_buffer+0xe1/0x170
[  542.346657][T11713]  proc_fail_nth_read+0x1be/0x230
[  542.346680][T11713]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  542.346703][T11713]  ? rw_verify_area+0x2ac/0x4e0
[  542.346725][T11713]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  542.346746][T11713]  vfs_read+0x212/0xa80
[  542.346775][T11713]  ? __pfx_vfs_read+0x10/0x10
[  542.346800][T11713]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  542.346826][T11713]  ? lockdep_hardirqs_on+0x7a/0x110
[  542.346849][T11713]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  542.346871][T11713]  ? mutex_lock_nested+0x152/0x1d0
[  542.346899][T11713]  ? fdget_pos+0x252/0x320
[  542.346927][T11713]  ksys_read+0x156/0x270
[  542.346953][T11713]  ? __pfx_ksys_read+0x10/0x10
[  542.346973][T11713]  ? __pfx_tty_ioctl+0x10/0x10
[  542.347002][T11713]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.347023][T11713]  do_syscall_64+0x174/0x580
[  542.347046][T11713]  ? trace_irq_disable+0x3b/0x140
[  542.347070][T11713]  ? clear_bhb_loop+0x40/0x90
[  542.347093][T11713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.347111][T11713] RIP: 0033:0x7fbc6f33d68e
[  542.347129][T11713] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  542.347145][T11713] RSP: 002b:00007fbc6d5d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  542.347166][T11713] RAX: ffffffffffffffda RBX: 00007fbc6d5d66c0 RCX: 00007fbc6f33d68e
[  542.347179][T11713] RDX: 000000000000000f RSI: 00007fbc6d5d60a0 RDI: 0000000000000005
[  542.347191][T11713] RBP: 00007fbc6d5d6090 R08: 0000000000000000 R09: 0000000000000000
[  542.347204][T11713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.347215][T11713] R13: 00007fbc6f5f6038 R14: 00007fbc6f5f5fa0 R15: 00007ffed373d5d8
[  542.347245][T11713]  </TASK>
[  543.820907][T11535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  543.832853][T11530] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.839018][T11530] bridge0: port 1(bridge_slave_0) entered disabled state
[  543.839343][T11530] bridge_slave_0: entered allmulticast mode
[  543.894500][T11530] bridge_slave_0: entered promiscuous mode
[  544.022677][T11535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  544.023165][T11530] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.023468][T11530] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.023756][T11530] bridge_slave_1: entered allmulticast mode
[  544.071159][T11530] bridge_slave_1: entered promiscuous mode
[  544.129665][ T5718] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  544.329802][ T5718] usb 3-1: Using ep0 maxpacket: 16
[  544.332236][ T5718] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  544.332263][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.332283][ T5718] usb 3-1: config 0 has no interface number 0
[  544.332329][ T5718] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16
[  544.332354][ T5718] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  544.332379][ T5718] usb 3-1: config 0 interface 98 has no altsetting 0
[  544.394394][ T5718] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9
[  544.394424][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.394444][ T5718] usb 3-1: Product: syz
[  544.394458][ T5718] usb 3-1: Manufacturer: syz
[  544.394472][ T5718] usb 3-1: SerialNumber: syz
[  544.543621][ T5718] usb 3-1: config 0 descriptor??
[  544.544682][T11718] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  544.545036][T11718] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  544.762358][T11718] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  544.762941][T11718] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  547.698834][ T5718] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  547.699099][ T5718] asix 3-1:0.98: probe with driver asix failed with error -71
[  547.867268][ T5718] usb 3-1: USB disconnect, device number 111
[  548.130882][T11535] team0: Port device team_slave_0 added
[  548.167961][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.254707][T11535] team0: Port device team_slave_1 added
[  548.320064][ T5718] IPVS: starting estimator thread 0...
[  550.005639][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  552.459644][T11735] IPVS: using max 11 ests per chain, 26400 per kthread
[  554.047354][T11748] FAULT_INJECTION: forcing a failure.
[  554.047354][T11748] name failslab, interval 1, probability 0, space 0, times 0
[  554.047391][T11748] CPU: 1 UID: 0 PID: 11748 Comm: syz.0.1989 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  554.047418][T11748] Tainted: [L]=SOFTLOCKUP
[  554.047425][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  554.047436][T11748] Call Trace:
[  554.047444][T11748]  <TASK>
[  554.047451][T11748]  dump_stack_lvl+0xe8/0x150
[  554.047481][T11748]  should_fail_ex+0x46b/0x600
[  554.047515][T11748]  should_failslab+0xa8/0x100
[  554.047539][T11748]  __kmalloc_noprof+0xfe/0x7e0
[  554.047561][T11748]  ? kobject_get_path+0xc5/0x2f0
[  554.047586][T11748]  ? kobject_get_path+0xc5/0x2f0
[  554.047619][T11748]  kobject_get_path+0xc5/0x2f0
[  554.047666][T11748]  input_devices_seq_show+0x38/0x640
[  554.047695][T11748]  seq_read_iter+0x4f0/0xe20
[  554.047741][T11748]  seq_read+0x36a/0x490
[  554.047764][T11748]  ? get_pid_task+0x20/0x1f0
[  554.047800][T11748]  ? __pfx_seq_read+0x10/0x10
[  554.047835][T11748]  ? apparmor_file_permission+0x1f4/0x300
[  554.047870][T11748]  ? __pfx_seq_read+0x10/0x10
[  554.047894][T11748]  proc_reg_read+0x1f6/0x2f0
[  554.047915][T11748]  ? __pfx_proc_reg_read+0x10/0x10
[  554.047939][T11748]  vfs_read+0x212/0xa80
[  554.047971][T11748]  ? __pfx_vfs_read+0x10/0x10
[  554.048002][T11748]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  554.048027][T11748]  ? lockdep_hardirqs_on+0x7a/0x110
[  554.048052][T11748]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  554.048075][T11748]  ? mutex_lock_nested+0x152/0x1d0
[  554.048102][T11748]  ? fdget_pos+0x252/0x320
[  554.048129][T11748]  ksys_read+0x156/0x270
[  554.048153][T11748]  ? __pfx_ksys_read+0x10/0x10
[  554.048183][T11748]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.048205][T11748]  do_syscall_64+0x174/0x580
[  554.048228][T11748]  ? trace_irq_disable+0x3b/0x140
[  554.048252][T11748]  ? clear_bhb_loop+0x40/0x90
[  554.048275][T11748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.048295][T11748] RIP: 0033:0x7f40551fce59
[  554.048313][T11748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.048330][T11748] RSP: 002b:00007f4053456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  554.048350][T11748] RAX: ffffffffffffffda RBX: 00007f4055475fa0 RCX: 00007f40551fce59
[  554.048364][T11748] RDX: 0000000000002020 RSI: 00002000000028c0 RDI: 0000000000000003
[  554.048377][T11748] RBP: 00007f4053456090 R08: 0000000000000000 R09: 0000000000000000
[  554.048388][T11748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.048399][T11748] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  554.048430][T11748]  </TASK>
[  555.279721][ T4925] Bluetooth: hci5: command 0x0406 tx timeout
[  555.468074][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  555.556414][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  555.614929][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  555.630080][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  555.655738][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  555.705593][T11264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  555.763103][T11264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  555.796646][T11264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  555.878934][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  555.887318][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  556.042996][T11767] FAULT_INJECTION: forcing a failure.
[  556.042996][T11767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.043033][T11767] CPU: 1 UID: 0 PID: 11767 Comm: syz.0.1995 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  556.043059][T11767] Tainted: [L]=SOFTLOCKUP
[  556.043065][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  556.043076][T11767] Call Trace:
[  556.043084][T11767]  <TASK>
[  556.043092][T11767]  dump_stack_lvl+0xe8/0x150
[  556.043120][T11767]  should_fail_ex+0x46b/0x600
[  556.043152][T11767]  _copy_to_user+0x31/0xb0
[  556.043175][T11767]  simple_read_from_buffer+0xe1/0x170
[  556.043201][T11767]  proc_fail_nth_read+0x1be/0x230
[  556.043224][T11767]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  556.043248][T11767]  ? rw_verify_area+0x2ac/0x4e0
[  556.043270][T11767]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  556.043291][T11767]  vfs_read+0x212/0xa80
[  556.043321][T11767]  ? __pfx_vfs_read+0x10/0x10
[  556.043345][T11767]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  556.043369][T11767]  ? lockdep_hardirqs_on+0x7a/0x110
[  556.043393][T11767]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  556.043416][T11767]  ? mutex_lock_nested+0x152/0x1d0
[  556.043444][T11767]  ? fdget_pos+0x252/0x320
[  556.043472][T11767]  ksys_read+0x156/0x270
[  556.043507][T11767]  ? __pfx_ksys_read+0x10/0x10
[  556.043528][T11767]  ? __pfx_sync_file_ioctl+0x10/0x10
[  556.043558][T11767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.043579][T11767]  do_syscall_64+0x174/0x580
[  556.043602][T11767]  ? trace_irq_disable+0x3b/0x140
[  556.043626][T11767]  ? clear_bhb_loop+0x40/0x90
[  556.043648][T11767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.043671][T11767] RIP: 0033:0x7f40551bd68e
[  556.043689][T11767] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  556.043711][T11767] RSP: 002b:00007f4053455fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  556.043731][T11767] RAX: ffffffffffffffda RBX: 00007f40534566c0 RCX: 00007f40551bd68e
[  556.043745][T11767] RDX: 000000000000000f RSI: 00007f40534560a0 RDI: 0000000000000005
[  556.043757][T11767] RBP: 00007f4053456090 R08: 0000000000000000 R09: 0000000000000000
[  556.043769][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.043780][T11767] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  556.043811][T11767]  </TASK>
[  557.821257][T11773] FAULT_INJECTION: forcing a failure.
[  557.821257][T11773] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  557.821296][T11773] CPU: 1 UID: 0 PID: 11773 Comm: syz.0.1996 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  557.821324][T11773] Tainted: [L]=SOFTLOCKUP
[  557.821330][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  557.821342][T11773] Call Trace:
[  557.821350][T11773]  <TASK>
[  557.821358][T11773]  dump_stack_lvl+0xe8/0x150
[  557.821389][T11773]  should_fail_ex+0x46b/0x600
[  557.821420][T11773]  prepare_alloc_pages+0x22a/0x6b0
[  557.821447][T11773]  __alloc_frozen_pages_noprof+0x12f/0x380
[  557.821472][T11773]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  557.821518][T11773]  ? __pfx_policy_nodemask+0x10/0x10
[  557.821542][T11773]  ? __lock_acquire+0x6b5/0x2d10
[  557.821577][T11773]  alloc_pages_mpol+0xd1/0x380
[  557.821608][T11773]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  557.821636][T11773]  vma_alloc_folio_noprof+0xe1/0x1e0
[  557.821662][T11773]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  557.821686][T11773]  ? __pte_offset_map+0x29/0x200
[  557.821724][T11773]  do_pte_missing+0x822/0x2940
[  557.821754][T11773]  ? handle_mm_fault+0xed/0x14d0
[  557.821776][T11773]  handle_mm_fault+0xdc2/0x14d0
[  557.821799][T11773]  ? handle_mm_fault+0xed/0x14d0
[  557.821821][T11773]  ? __pfx_handle_mm_fault+0x10/0x10
[  557.821840][T11773]  ? follow_page_pte+0xbe2/0xe60
[  557.821867][T11773]  ? __pfx_follow_page_pte+0x10/0x10
[  557.821895][T11773]  __get_user_pages+0x16d4/0x2620
[  557.821932][T11773]  ? __gup_longterm_locked+0xc4e/0x1630
[  557.821994][T11773]  __gup_longterm_locked+0xdcf/0x1630
[  557.822031][T11773]  ? lock_acquire+0x106/0x350
[  557.822058][T11773]  ? sanity_check_pinned_pages+0x7a8/0x870
[  557.822095][T11773]  gup_fast_fallback+0x1cfd/0x2040
[  557.822151][T11773]  ? __pfx_gup_fast_fallback+0x10/0x10
[  557.822180][T11773]  ? __kmalloc_noprof+0x441/0x7e0
[  557.822198][T11773]  ? is_valid_gup_args+0x11f/0x200
[  557.822229][T11773]  ? pin_user_pages_fast+0x4d/0xb0
[  557.822259][T11773]  rds_info_getsockopt+0x20e/0x410
[  557.822285][T11773]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  557.822306][T11773]  ? __might_fault+0xaf/0x130
[  557.822328][T11773]  ? rds_getsockopt+0x2c6/0x500
[  557.822355][T11773]  ? __pfx_rds_getsockopt+0x10/0x10
[  557.822378][T11773]  do_sock_getsockopt+0x51d/0x7e0
[  557.822407][T11773]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  557.822444][T11773]  ? __fget_files+0x3a6/0x420
[  557.822462][T11773]  ? __fget_files+0x2a/0x420
[  557.822488][T11773]  __x64_sys_getsockopt+0x1aa/0x250
[  557.822518][T11773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.822538][T11773]  do_syscall_64+0x174/0x580
[  557.822561][T11773]  ? trace_irq_disable+0x3b/0x140
[  557.822584][T11773]  ? clear_bhb_loop+0x40/0x90
[  557.822606][T11773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.822623][T11773] RIP: 0033:0x7f40551fce59
[  557.822642][T11773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.822658][T11773] RSP: 002b:00007f4053456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  557.822679][T11773] RAX: ffffffffffffffda RBX: 00007f4055475fa0 RCX: 00007f40551fce59
[  557.822693][T11773] RDX: 0000000000002716 RSI: 0000200000000114 RDI: 0000000000000005
[  557.822705][T11773] RBP: 00007f4053456090 R08: 0000200000000000 R09: 0000000000000000
[  557.822718][T11773] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000002
[  557.822730][T11773] R13: 00007f4055476038 R14: 00007f4055475fa0 R15: 00007ffdbc7adb58
[  557.822760][T11773]  </TASK>
[  558.716260][ T4925] Bluetooth: hci0: command tx timeout
[  558.716566][ T4925] Bluetooth: hci6: command tx timeout
[  560.799093][   T60] Bluetooth: hci6: command tx timeout
[  560.799125][   T60] Bluetooth: hci0: command tx timeout
[  562.869721][   T60] Bluetooth: hci0: command tx timeout
[  563.199979][   T60] Bluetooth: hci6: command tx timeout
[  565.226350][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  565.226455][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  567.233232][   T60] Bluetooth: hci0: command tx timeout
[  567.233264][   T60] Bluetooth: hci6: command tx timeout
[  576.181078][   T38] audit: type=1400 audit(1782002740.896:71): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11831 comm="syz.0.2014"
[  578.379711][ T5717] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  578.562074][ T5717] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  578.562111][ T5717] usb 1-1: config 0 interface 0 has no altsetting 0
[  578.562147][ T5717] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  578.562171][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.615877][ T5717] usb 1-1: config 0 descriptor??
[  580.738515][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.739875][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.622911][T11851] fuse: Bad value for 'rootmode'
[  587.707309][ T5717] usbhid 1-1:0.0: can't add hid device: -32
[  587.707474][ T5717] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  587.762970][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2020'.
[  597.550927][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  598.699911][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  598.702780][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  598.704336][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  598.705159][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  601.109643][   T60] Bluetooth: hci3: command tx timeout
[  603.189630][   T60] Bluetooth: hci3: command tx timeout
[  605.331532][   T60] Bluetooth: hci3: command tx timeout
[  606.499407][ T4925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  606.579760][ T4925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  606.645254][ T4925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  606.657106][ T4925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  606.657914][ T4925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  607.349715][   T60] Bluetooth: hci3: command tx timeout
[  608.869643][   T60] Bluetooth: hci4: command tx timeout
[  610.949627][   T60] Bluetooth: hci4: command tx timeout
[  615.107679][   T60] Bluetooth: hci4: command tx timeout
[  616.395946][ T4925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  617.393531][ T4925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  617.402200][ T4925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  617.416470][ T4925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  617.417559][ T4925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  617.432955][   T60] Bluetooth: hci4: command tx timeout
[  620.475239][ T4925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  620.518363][ T4925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  620.576928][ T4925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  620.595550][ T4925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  620.597546][ T4925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  622.769364][   T60] Bluetooth: hci1: command tx timeout
[  623.590930][   T60] Bluetooth: hci5: command tx timeout
[  623.715762][T11747] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[  624.876727][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  624.876836][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  625.509834][   T60] Bluetooth: hci1: command tx timeout
[  625.669721][   T60] Bluetooth: hci5: command tx timeout
[  627.589547][   T60] Bluetooth: hci1: command tx timeout
[  627.750958][   T60] Bluetooth: hci5: command tx timeout
[  629.669665][   T60] Bluetooth: hci1: command tx timeout
[  629.829614][   T60] Bluetooth: hci5: command tx timeout
[  657.690138][ T4925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  657.748103][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  657.757953][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  657.769344][ T4925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  657.778513][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  659.989692][ T4925] Bluetooth: hci0: command tx timeout
[  662.069580][ T4925] Bluetooth: hci0: command tx timeout
[  664.149695][ T4925] Bluetooth: hci0: command tx timeout
[  666.229764][ T4925] Bluetooth: hci0: command tx timeout
[  669.955073][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  670.031767][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  670.047414][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  670.058382][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  670.074662][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  672.456553][ T4925] Bluetooth: hci6: command tx timeout
[  674.469773][ T4925] Bluetooth: hci6: command tx timeout
[  676.551152][ T4925] Bluetooth: hci6: command tx timeout
[  678.819618][ T4925] Bluetooth: hci6: command tx timeout
[  681.197338][   T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  681.508506][   T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  681.524479][   T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  681.525679][   T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  681.529075][   T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  682.597608][ T5618] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  682.648216][ T5618] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  682.657299][ T5618] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  682.728816][ T5618] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  682.740297][ T5618] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  687.026121][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  687.026224][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  687.179145][T11917] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.186744][T11917] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.187104][T11917] bridge_slave_0: entered allmulticast mode
[  687.209098][T11917] bridge_slave_0: entered promiscuous mode
[  687.349780][ T5618] Bluetooth: hci8: command tx timeout
[  687.350485][ T5618] Bluetooth: hci7: command tx timeout
[  687.757540][T11917] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.757889][T11917] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.758629][T11917] bridge_slave_1: entered allmulticast mode
[  687.793981][T11917] bridge_slave_1: entered promiscuous mode
[  689.196725][T11917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.472271][T11917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  690.321671][ T4925] Bluetooth: hci7: command tx timeout
[  690.321705][ T4925] Bluetooth: hci8: command tx timeout
[  691.976136][T11930] bridge0: port 1(bridge_slave_0) entered blocking state
[  691.976512][T11930] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.976794][T11930] bridge_slave_0: entered allmulticast mode
[  692.012838][T11930] bridge_slave_0: entered promiscuous mode
[  692.390356][ T5618] Bluetooth: hci8: command tx timeout
[  692.390388][ T5618] Bluetooth: hci7: command tx timeout
[  692.510561][T11917] team0: Port device team_slave_0 added
[  692.514753][T11930] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.515087][T11930] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.515369][T11930] bridge_slave_1: entered allmulticast mode
[  692.561562][T11930] bridge_slave_1: entered promiscuous mode
[  693.015242][T11917] team0: Port device team_slave_1 added
[  694.480315][ T4925] Bluetooth: hci7: command tx timeout
[  694.480346][ T4925] Bluetooth: hci8: command tx timeout
[  710.310739][ T9411] bridge_slave_1: left allmulticast mode
[  710.310773][ T9411] bridge_slave_1: left promiscuous mode
[  710.421072][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.724249][ T9411] bridge_slave_0: left allmulticast mode
[  714.724286][ T9411] bridge_slave_0: left promiscuous mode
[  714.724558][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.197041][ T4925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  717.255563][ T4925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  717.331590][ T4925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  717.335229][ T4925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  717.336660][ T4925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  719.509690][ T4925] Bluetooth: hci1: command tx timeout
[  721.667720][ T4925] Bluetooth: hci1: command tx timeout
[  724.181765][ T4925] Bluetooth: hci1: command tx timeout
[  724.432703][ T4925] Bluetooth: hci3: command 0x0406 tx timeout
[  726.229526][ T4925] Bluetooth: hci1: command tx timeout
[  729.727966][ T4925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  729.804591][ T4925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  729.807495][ T4925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  729.832667][ T4925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  729.847091][ T4925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  731.909548][ T5618] Bluetooth: hci4: command tx timeout
[  733.989558][ T5618] Bluetooth: hci4: command tx timeout
[  736.069523][ T5618] Bluetooth: hci4: command tx timeout
[  737.764728][ T9411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  738.150144][ T5618] Bluetooth: hci4: command tx timeout
[  739.597437][ T4925] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  739.646114][ T4925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  739.660907][ T4925] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  739.737352][ T4925] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  739.738169][ T4925] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  741.509085][ T4925] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  741.600262][ T4925] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  741.605208][ T4925] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  741.616363][ T4925] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  741.660433][ T4925] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  741.701978][ T9411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  741.912505][ T4925] Bluetooth: hci5: command tx timeout
[  744.070456][ T5618] Bluetooth: hci9: command tx timeout
[  744.071161][ T5618] Bluetooth: hci5: command tx timeout
[  746.150021][   T60] Bluetooth: hci5: command tx timeout
[  746.166795][ T5618] Bluetooth: hci9: command tx timeout
[  748.229974][ T5618] Bluetooth: hci9: command tx timeout
[  748.235595][   T60] Bluetooth: hci5: command tx timeout
[  750.311522][ T5618] Bluetooth: hci9: command tx timeout
[  751.589921][   T39] INFO: task syz-executor:11535 blocked for more than 143 seconds.
[  751.589951][   T39]       Tainted: G             L      syzkaller #0
[  751.589962][   T39]       Blocked by coredump.
[  751.589968][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  751.589994][   T39] task:syz-executor    state:D stack:19744 pid:11535 tgid:11535 ppid:1      task_flags:0x40054c flags:0x00080003
[  751.590049][   T39] Call Trace:
[  751.590056][   T39]  <TASK>
[  751.590070][   T39]  __schedule+0x172b/0x5550
[  751.590098][   T39]  ? __lock_acquire+0x6b5/0x2d10
[  751.590146][   T39]  ? __pfx___schedule+0x10/0x10
[  751.590182][   T39]  rt_mutex_schedule+0x76/0xf0
[  751.590205][   T39]  rt_mutex_slowlock_block+0x505/0x670
[  751.590252][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  751.590274][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  751.590293][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  751.590323][   T39]  ? rcu_barrier+0x4c/0x580
[  751.590341][   T39]  ? rcu_barrier+0x4c/0x580
[  751.590366][   T39]  ? rcu_barrier+0x4c/0x580
[  751.590383][   T39]  mutex_lock_nested+0x168/0x1d0
[  751.590412][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  751.590434][   T39]  rcu_barrier+0x4c/0x580
[  751.590462][   T39]  netdev_run_todo+0x2ff/0x12c0
[  751.590493][   T39]  ? rtnl_is_locked+0x9/0x20
[  751.590523][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  751.590550][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  751.590580][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  751.590610][   T39]  ? netdev_state_change+0x1ca/0x220
[  751.590633][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  751.590671][   T39]  tun_chr_close+0x13f/0x1c0
[  751.590692][   T39]  __fput+0x461/0xa70
[  751.590722][   T39]  task_work_run+0x1d9/0x270
[  751.590750][   T39]  ? __pfx_task_work_run+0x10/0x10
[  751.590774][   T39]  ? do_exit+0x70a/0x22c0
[  751.590795][   T39]  ? kmem_cache_free+0x187/0x6c0
[  751.590815][   T39]  ? put_net+0x191/0x260
[  751.590849][   T39]  ? do_exit+0x70a/0x22c0
[  751.590875][   T39]  do_exit+0x70f/0x22c0
[  751.590900][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  751.590928][   T39]  ? __pfx_do_exit+0x10/0x10
[  751.590947][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  751.590966][   T39]  ? reacquire_held_locks+0x104/0x190
[  751.590994][   T39]  ? rt_spin_lock+0x1e0/0x400
[  751.591042][   T39]  do_group_exit+0x21b/0x2d0
[  751.591066][   T39]  ? rt_spin_unlock+0x160/0x200
[  751.591086][   T39]  get_signal+0x1284/0x1330
[  751.591132][   T39]  arch_do_signal_or_restart+0xbc/0x840
[  751.591188][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  751.591208][   T39]  ? kmem_cache_free+0x526/0x6c0
[  751.591248][   T39]  exit_to_user_mode_loop+0x104/0x710
[  751.591272][   T39]  ? rcu_is_watching+0x15/0xb0
[  751.591302][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.591323][   T39]  do_syscall_64+0x353/0x580
[  751.591349][   T39]  ? clear_bhb_loop+0x40/0x90
[  751.591373][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.591392][   T39] RIP: 0033:0x7fda87f4d68e
[  751.591410][   T39] RSP: 002b:00007ffe406093c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  751.591432][   T39] RAX: 000000000000008c RBX: 0000555576d88500 RCX: 00007fda87f4d68e
[  751.591446][   T39] RDX: 000000000000008c RSI: 00007fda88d34670 RDI: 0000000000000003
[  751.591459][   T39] RBP: 0000000000000001 R08: 00007ffe40609444 R09: 000000000000000c
[  751.591472][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  751.591484][   T39] R13: 0000000000000000 R14: 00007fda88d34670 R15: 0000000000000000
[  751.591514][   T39]  </TASK>
[  751.591560][   T39] 
[  751.591560][   T39] Showing all locks held in the system:
[  751.591627][   T39] 3 locks held by ksoftirqd/0/15:
[  751.591672][   T39]  #0: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  751.591833][   T39]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  751.591886][   T39]  #2: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: sched_balance_domains+0xf9/0x900
[  751.591937][   T39] 1 lock held by rcub/0/19:
[  751.591947][   T39]  #0: ffffffff8e3d0e48 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x2fb/0x4b0
[  751.592089][   T39] 4 locks held by rcuc/0/21:
[  751.592100][   T39]  #0: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  751.592150][   T39]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  751.592193][   T39]  #2: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  751.592242][   T39]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0
[  751.592288][   T39] 2 locks held by ksoftirqd/1/31:
[  751.592298][   T39]  #0: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  751.592347][   T39]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  751.592399][   T39] 1 lock held by khungtaskd/39:
[  751.592410][   T39]  #0: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  751.592457][   T39] 3 locks held by kworker/u8:4/80:
[  751.592468][   T39]  #0: ffff888032c2d138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  751.592519][   T39]  #1: ffffc9000152fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  751.592571][   T39]  #2: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  751.592642][   T39] 2 locks held by getty/5366:
[  751.592652][   T39]  #0: ffff8880331200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  751.592698][   T39]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x465/0x1490
[  751.592755][   T39] 3 locks held by kworker/1:4/5695:
[  751.592766][   T39]  #0: ffff88813fe57938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  751.592818][   T39]  #1: ffffc90005a27c40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  751.592889][   T39]  #2: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  751.592947][   T39] 3 locks held by kworker/u8:45/9400:
[  751.592958][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  751.593009][   T39]  #1: ffffc9000e2d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  751.593060][   T39]  #2: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  751.593111][   T39] 4 locks held by kworker/u8:54/9411:
[  751.593121][   T39]  #0: ffff88801be9e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  751.593174][   T39]  #1: ffffc90010c3fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  751.593227][   T39]  #2: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  751.593273][   T39]  #3: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940
[  751.593318][   T39] 1 lock held by syz-executor/11262:
[  751.593328][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  751.593374][   T39] 1 lock held by syz-executor/11535:
[  751.593385][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  751.593429][   T39] 1 lock held by syz-executor/11747:
[  751.593439][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  751.593481][   T39] 1 lock held by syz-executor/11751:
[  751.593490][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  751.593532][   T39] 1 lock held by syz.0.2018/11848:
[  751.593543][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  751.593587][   T39] 1 lock held by syz.2.2021/11855:
[  751.593598][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  751.593640][   T39] 2 locks held by syz-executor/11861:
[  751.593650][   T39]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  751.593693][   T39]  #1: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  751.593736][   T39] 1 lock held by syz-executor/11887:
[  751.593746][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  751.593789][   T39] 1 lock held by syz-executor/11889:
[  751.593800][   T39]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  751.593855][   T39] 2 locks held by syz-executor/11917:
[  751.593866][   T39]  #0: ffffffff8ef133c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  751.593918][   T39]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  751.593963][   T39] 2 locks held by syz-executor/11930:
[  751.593973][   T39]  #0: ffffffff8ef133c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  751.594026][   T39]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  751.594072][   T39] 2 locks held by syz-executor/11957:
[  751.594082][   T39]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  751.594123][   T39]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940
[  751.594168][   T39] 2 locks held by syz-executor/11966:
[  751.594179][   T39]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  751.594219][   T39]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940
[  751.594265][   T39] 1 lock held by syz-executor/12000:
[  751.594276][   T39]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  751.594328][   T39] 1 lock held by syz-executor/12010:
[  751.594338][   T39]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  751.594392][   T39] 1 lock held by syz-executor/12016:
[  751.594403][   T39]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  751.594453][   T39] 2 locks held by kworker/u8:0/12024:
[  751.594463][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  751.594518][   T39]  #1: ffffc90006a2fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  751.594571][   T39] 1 lock held by syz-executor/12025:
[  751.594582][   T39]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  751.594633][   T39] 
[  751.594681][   T39] =============================================
[  751.594681][   T39] 
[  751.594725][   T39] NMI backtrace for cpu 1
[  751.594742][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  751.594768][   T39] Tainted: [L]=SOFTLOCKUP
[  751.594775][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  751.594786][   T39] Call Trace:
[  751.594794][   T39]  <TASK>
[  751.594802][   T39]  dump_stack_lvl+0xe8/0x150
[  751.594837][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  751.594857][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  751.594880][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  751.594903][   T39]  sys_info+0x135/0x170
[  751.594930][   T39]  watchdog+0xfd3/0x1030
[  751.594960][   T39]  ? watchdog+0x1c9/0x1030
[  751.594987][   T39]  kthread+0x388/0x470
[  751.595009][   T39]  ? __pfx_watchdog+0x10/0x10
[  751.595028][   T39]  ? __pfx_kthread+0x10/0x10
[  751.595050][   T39]  ret_from_fork+0x514/0xb70
[  751.595075][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  751.595097][   T39]  ? __switch_to+0xc79/0x1410
[  751.595117][   T39]  ? __pfx_kthread+0x10/0x10
[  751.595140][   T39]  ret_from_fork_asm+0x1a/0x30
[  751.595178][   T39]  </TASK>
[  751.595185][   T39] Sending NMI from CPU 1 to CPUs 0:
[  751.595223][    C0] NMI backtrace for cpu 0
[  751.595243][    C0] CPU: 0 UID: 0 PID: 21 Comm: rcuc/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  751.595264][    C0] Tainted: [L]=SOFTLOCKUP
[  751.595269][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  751.595278][    C0] RIP: 0010:save_dst_trace_buffer+0x17e/0x5b0
[  751.595302][    C0] Code: b5 80 9a 49 c1 ed 03 49 f7 dd 49 c7 c7 90 b5 80 9a 49 c1 ef 03 49 f7 df 49 c7 c4 88 b5 80 9a 49 c1 ec 03 49 f7 dc 48 89 1c 24 <48> 8d 9b 80 b5 80 9a 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00
[  751.595316][    C0] RSP: 0018:ffffc900001a6860 EFLAGS: 00000283
[  751.595337][    C0] RAX: ffffffff89173ab0 RBX: 0000000000003180 RCX: ffff88801dee5d00
[  751.595349][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[  751.595358][    C0] RBP: ffffc900001a6a00 R08: 0000000000000000 R09: 0000000000000100
[  751.595369][    C0] R10: ffffc900001a67c0 R11: fffff52000034cfc R12: e00000000cafe31f
[  751.595380][    C0] R13: e00000000cafe31e R14: 1ffffffff3501ce0 R15: e00000000cafe31e
[  751.595391][    C0] FS:  0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000
[  751.595404][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  751.595415][    C0] CR2: 00007fff2e578e18 CR3: 00000000600d2000 CR4: 00000000003526f0
[  751.595429][    C0] Call Trace:
[  751.595434][    C0]  <TASK>
[  751.595444][    C0]  ? __pfx_save_dst_trace_buffer+0x10/0x10
[  751.595464][    C0]  ? ref_tracker_alloc+0x2c2/0x4a0
[  751.595485][    C0]  ? dst_init+0x26d/0x490
[  751.595502][    C0]  ? dst_alloc+0x12a/0x170
[  751.595520][    C0]  ? ip_route_output_key_hash_rcu+0x14d0/0x25e0
[  751.595535][    C0]  ? ip_route_output_key_hash+0x18d/0x2a0
[  751.595552][    C0]  ? ip_route_output_flow+0x2a/0x150
[  751.595572][    C0]  ? ip_route_me_harder+0x742/0xf90
[  751.595592][    C0]  ? synproxy_send_tcp+0x34c/0x670
[  751.595615][    C0]  ? synproxy_send_client_synack+0x8c1/0xe30
[  751.595636][    C0]  ? nft_synproxy_eval_v4+0x34a/0x4e0
[  751.595657][    C0]  ? nft_synproxy_do_eval+0x305/0x580
[  751.595677][    C0]  ? nft_do_chain+0x48d/0x1ae0
[  751.595690][    C0]  ? nft_do_chain_inet+0x360/0x4b0
[  751.595704][    C0]  ? nf_hook_slow+0xc5/0x220
[  751.595723][    C0]  ? NF_HOOK+0x21f/0x3c0
[  751.595739][    C0]  ? NF_HOOK+0x336/0x3c0
[  751.595755][    C0]  ? process_backlog+0x569/0xc60
[  751.595768][    C0]  ? __napi_poll+0xab/0x550
[  751.595788][    C0]  ? net_rx_action+0x696/0xe00
[  751.595802][    C0]  ? handle_softirqs+0x1de/0x6d0
[  751.595821][    C0]  ? __local_bh_enable_ip+0x170/0x2b0
[  751.595842][    C0]  ? nf_hook_slow+0xc5/0x220
[  751.595861][    C0]  ? NF_HOOK+0x21f/0x3c0
[  751.595877][    C0]  ? NF_HOOK+0x336/0x3c0
[  751.595893][    C0]  ? process_backlog+0x569/0xc60
[  751.595907][    C0]  ? trace_kmem_cache_alloc+0x29/0xe0
[  751.595932][    C0]  dst_init+0x26d/0x490
[  751.595952][    C0]  dst_alloc+0x12a/0x170
[  751.595973][    C0]  ip_route_output_key_hash_rcu+0x14d0/0x25e0
[  751.595992][    C0]  ? ip_route_output_key_hash+0xd8/0x2a0
[  751.596007][    C0]  ip_route_output_key_hash+0x18d/0x2a0
[  751.596023][    C0]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  751.596044][    C0]  ip_route_output_flow+0x2a/0x150
[  751.596064][    C0]  ? ip_route_me_harder+0x730/0xf90
[  751.596085][    C0]  ip_route_me_harder+0x742/0xf90
[  751.596111][    C0]  ? __pfx_ip_route_me_harder+0x10/0x10
[  751.596138][    C0]  ? __cookie_v4_init_sequence+0x25d/0x500
[  751.596155][    C0]  ? kmem_cache_alloc_node_noprof+0x2a7/0x710
[  751.596181][    C0]  synproxy_send_tcp+0x34c/0x670
[  751.596203][    C0]  synproxy_send_client_synack+0x8c1/0xe30
[  751.596230][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  751.596251][    C0]  ? nft_jhash_init+0x4c8/0x670
[  751.596269][    C0]  ? synproxy_pernet+0x45/0x270
[  751.596292][    C0]  nft_synproxy_eval_v4+0x34a/0x4e0
[  751.596317][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  751.596345][    C0]  ? nf_ip_checksum+0x13c/0x510
[  751.596363][    C0]  nft_synproxy_do_eval+0x305/0x580
[  751.596387][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  751.596411][    C0]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  751.596432][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  751.596452][    C0]  nft_do_chain+0x48d/0x1ae0
[  751.596470][    C0]  ? ktime_get+0x45/0x220
[  751.596489][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  751.596507][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  751.596532][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  751.596553][    C0]  nft_do_chain_inet+0x360/0x4b0
[  751.596569][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  751.596587][    C0]  ? NF_HOOK+0x9e/0x3c0
[  751.596605][    C0]  ? NF_HOOK+0x9e/0x3c0
[  751.596622][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  751.596637][    C0]  nf_hook_slow+0xc5/0x220
[  751.596659][    C0]  NF_HOOK+0x21f/0x3c0
[  751.596677][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  751.596695][    C0]  ? NF_HOOK+0x9e/0x3c0
[  751.596712][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  751.596729][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  751.596748][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  751.596770][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  751.596790][    C0]  NF_HOOK+0x336/0x3c0
[  751.596806][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  751.596826][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  751.596844][    C0]  ? NF_HOOK+0x9e/0x3c0
[  751.596861][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  751.596880][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  751.596900][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  751.596918][    C0]  ? process_backlog+0x271/0xc60
[  751.596932][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  751.596950][    C0]  process_backlog+0x569/0xc60
[  751.596966][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  751.596989][    C0]  __napi_poll+0xab/0x550
[  751.597011][    C0]  net_rx_action+0x696/0xe00
[  751.597033][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  751.597046][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  751.597067][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  751.597095][    C0]  handle_softirqs+0x1de/0x6d0
[  751.597120][    C0]  __local_bh_enable_ip+0x170/0x2b0
[  751.597142][    C0]  ? rcu_cpu_kthread+0x205/0x1470
[  751.597161][    C0]  rcu_cpu_kthread+0x9e8/0x1470
[  751.597184][    C0]  ? rcu_cpu_kthread+0x205/0x1470
[  751.597207][    C0]  ? __pfx_rcu_cpu_kthread+0x10/0x10
[  751.597232][    C0]  ? schedule+0x90/0x360
[  751.597257][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  751.597271][    C0]  smpboot_thread_fn+0x541/0xa50
[  751.597287][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  751.597305][    C0]  kthread+0x388/0x470
[  751.597326][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  751.597341][    C0]  ? __pfx_kthread+0x10/0x10
[  751.597358][    C0]  ret_from_fork+0x514/0xb70
[  751.597376][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  751.597393][    C0]  ? __switch_to+0xc79/0x1410
[  751.597409][    C0]  ? __pfx_kthread+0x10/0x10
[  751.597426][    C0]  ret_from_fork_asm+0x1a/0x30
[  751.597451][    C0]  </TASK>
[  751.598232][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  751.598251][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  751.598279][   T39] Tainted: [L]=SOFTLOCKUP
[  751.598286][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  751.598298][   T39] Call Trace:
[  751.598307][   T39]  <TASK>
[  751.598316][   T39]  vpanic+0x56c/0xa60
[  751.598345][   T39]  ? __pfx_vpanic+0x10/0x10
[  751.598381][   T39]  panic+0xc5/0xd0
[  751.598408][   T39]  ? __pfx_panic+0x10/0x10
[  751.598433][   T39]  ? __x2apic_send_IPI_mask+0x158/0x190
[  751.598469][   T39]  ? wq_watchdog_touch+0xf9/0x160
[  751.598497][   T39]  ? nmi_trigger_cpumask_backtrace+0x247/0x380
[  751.598522][   T39]  watchdog+0x102c/0x1030
[  751.598552][   T39]  ? watchdog+0x1c9/0x1030
[  751.598579][   T39]  kthread+0x388/0x470
[  751.598601][   T39]  ? __pfx_watchdog+0x10/0x10
[  751.598621][   T39]  ? __pfx_kthread+0x10/0x10
[  751.598644][   T39]  ret_from_fork+0x514/0xb70
[  751.598670][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  751.598693][   T39]  ? __switch_to+0xc79/0x1410
[  751.598715][   T39]  ? __pfx_kthread+0x10/0x10
[  751.598739][   T39]  ret_from_fork_asm+0x1a/0x30
[  751.598778][   T39]  </TASK>
[  751.599075][   T39] Kernel Offset: disabled