last executing test programs:

9m14.439160323s ago: executing program 1 (id=719):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080006000300010003000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)

9m14.260162944s ago: executing program 1 (id=721):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
recvmsg(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000540)=""/242, 0xf2}], 0x1}, 0x20)

9m14.036530639s ago: executing program 3 (id=724):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c2732f48dfd8cdbf9367b4fa51f60a64e9f408000300060100000b000200d700"/90, 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x10040000)

9m13.810809518s ago: executing program 3 (id=725):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000940)=""/4085, 0xff5}, {&(0x7f0000001980)=""/4085, 0xff5}, {&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f0000000400)=""/246, 0xf6}, {&(0x7f0000000580)=""/237, 0xed}], 0x5}, 0x24)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80)

9m13.756172519s ago: executing program 1 (id=726):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000300ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0)

9m13.739101477s ago: executing program 1 (id=727):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x4)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @random="e4ff00"})
sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000040)=@isdn={0x22, 0x4, 0x40, 0x0, 0xb}, 0x80, 0x0}, 0x20000800)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

9m13.643718612s ago: executing program 1 (id=728):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x200048c0)

9m13.43837751s ago: executing program 3 (id=729):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
close(r0)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1, &(0x7f0000000380)=""/8, 0x8}, 0x40002140)

9m13.438185419s ago: executing program 1 (id=730):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb921"], 0xfdef)

9m13.352406919s ago: executing program 3 (id=731):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @random="000180000020"})

9m13.130235883s ago: executing program 3 (id=732):
r0 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x400c090)

9m12.979565244s ago: executing program 3 (id=733):
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

8m57.870415299s ago: executing program 32 (id=730):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb921"], 0xfdef)

8m57.726616485s ago: executing program 33 (id=733):
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

5m13.480572943s ago: executing program 2 (id=1837):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011306000000000000014e9424000100009005090400ebdf0300020009218100030122280009058103400003040000000000000000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0)
r2 = socket(0x28, 0x5, 0x0)
getsockopt(r2, 0x28, 0x8, 0x0, &(0x7f0000000040)=0x47)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x400, 0xffffffdd, 0x6, 0x9304, 0x8, "b9dbf1861477a2bc098425bad2fe5133cec79a", 0x7, 0x28004e69})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00082a0000000100138526792c3cbd0d0c712700000000cc6e446c4e88e78881ce2a52973661d67a0c554438db"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})

5m10.266499449s ago: executing program 2 (id=1849):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6)

5m9.898918936s ago: executing program 2 (id=1851):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x1f, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2)

5m8.93890828s ago: executing program 2 (id=1852):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000014c0)=0x40000001)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000040)={0x59, 0x1a6ab, 0xf}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000001340), 0x760, 0xc382)
ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001240)=""/144, 0x90}, {&(0x7f0000002500)=""/123, 0x73}, {&(0x7f00000013c0)=""/215, 0xe3}, {&(0x7f0000002580)=""/4106, 0x1000}], 0x10000000000002c1}, 0x20012140)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000001380)="2ef32e450f35f246f467656666440f3a619800800000e4b9800000c00f3235002000000f300fbf29660f3a150800660f74003626470fc75a3b46844a38a5", 0x3e}], 0x1, 0x32, &(0x7f00000002c0), 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syslog(0x3, &(0x7f0000000240)=""/4096, 0x1000)

5m7.22077382s ago: executing program 2 (id=1856):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6)

5m7.028200981s ago: executing program 2 (id=1857):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x700, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004)

4m51.676771827s ago: executing program 34 (id=1857):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x700, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004)

2m33.565318452s ago: executing program 0 (id=2470):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2)
recvmmsg(r0, &(0x7f0000004240)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000000100)}, 0x1}, {{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/8, 0x8}], 0x5, &(0x7f0000000440)=""/96, 0x60}, 0x10000}, {{&(0x7f00000004c0)=@tipc=@name, 0x80, &(0x7f0000000900)=[{&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f0000000740)=""/207, 0xcf}, {&(0x7f0000000840)=""/132, 0x84}], 0x4, &(0x7f0000000940)=""/213, 0xd5}, 0xfffffffc}, {{&(0x7f0000000a40)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/30, 0x1e}], 0x1, &(0x7f0000000b40)=""/59, 0x3b}, 0x7}, {{&(0x7f0000000b80)=@caif=@dgm, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/132, 0x84}], 0x2, &(0x7f0000001d00)=""/16, 0x10}, 0x5}, {{&(0x7f0000001d40)=@generic, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/191, 0xbf}], 0x2, &(0x7f0000002ec0)=""/222, 0xde}, 0x8001}, {{&(0x7f0000002fc0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, &(0x7f0000004080)=""/87, 0x57}, 0x40}, {{&(0x7f0000004100)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000004200)=[{&(0x7f0000004180)=""/112, 0x70}], 0x1}, 0x8001}], 0x8, 0x100, 0x0)

2m33.447634752s ago: executing program 0 (id=2471):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="2031af3e59c762"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/197, 0xc5}], 0x1, 0x1000, 0x9b1)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000080)={0x40, 0x16, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m31.568760935s ago: executing program 0 (id=2474):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81})
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x2)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x1, 0x0, 0xc, 0xfffffffffffffffd})
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))
open(&(0x7f00000000c0)='./file0\x00', 0x801, 0x30)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg(r3, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=[{0x10, 0x84, 0x1}], 0x10}, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000632000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

2m29.737190641s ago: executing program 0 (id=2483):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="2031af3e59c762"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x24, &(0x7f0000000080)={0x40, 0x16, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m27.807368428s ago: executing program 0 (id=2486):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000078000000060a010400000000000000000500000008000b400000000050000480240001800b00010074756e6e656c000014000280080001400000000108000240000000092800018008000100667764001c0002800800024000000017080003400000000a08000140000000090900010073797a30"], 0xec}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000bb0100bbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef)

2m27.265646852s ago: executing program 0 (id=2488):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
clock_gettime(0x358305538ae10dd1, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20", @ANYRES16=r0, @ANYRESHEX=r0], 0x0)
r2 = semget$private(0x0, 0x4000000009, 0x208)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)={{0x14}, [@NFT_MSG_NEWSETELEM={0xec4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe74, 0x3, 0x0, 0x1, [{0x8d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x47, 0x1, "af2787a5fccf4e36e806600161f6445a39cd5de407fcf4d31d9abd46892dea69042e9b7f0380ba4f999416a540d03090775c1105852f629618b3ecf6bb2e5646126873"}, @NFTA_DATA_VALUE={0xd9, 0x1, "c686bb0e3c9b8aa35128f98a53e6985f2757518842b5dfa5327c86a020b38fcf71d59e8b7e27306bb3152bcc1253088e4e0cf3986d39ab78274d7735cee7ecaf450afd701de7200b65180acf64fcc46f387f6625409565577be7194b8f585f254f77ef9e96abf7e04c16f3b4913fa148947522ff29ee73423eb83c67d0a45097fc566278c94d6c7a6cd92d8ebd1ec9f179b1c786b437dd5597d73a754a9f1fb0f7ad05cefd5bb1835bc86c22384e7efc96472bd7460e8a33a3318a9ffc1980331d862316fc07595d06f107d58da84bea17e573d5ac"}, @NFTA_DATA_VALUE={0xbb, 0x1, "3a0d34d6eddee0ca3c1ee86dfe79b3e4ba47835e2e39c475b58f648adb191399b02e03906df221b93f7f6c5514bbc3b194954a14e26f9a2539012679a2adf8eb32f5831e9a9257c47ff73bae0f2ab2e11ed99965a9055843937f506cbfc18b776f7852c05949bf5872f171797835ee524a5651276524e7c99e93dbde47d78b2f4460b0fb607b0efc579f2decf475bb7f04e357b2e5830e1974bc2b7d40cd8350707281b34bdc88266faefa4bfb44a311eae3478314e822"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "e0296ab737b1438756aed2d45312faac6b66ddf7e64c1219eae8b8c160986e72a317e5101e146159f2aaeae30eaa63b5102864e0ad583f6f2bc832abbabfa323fcf9a0896f8457ef3f0b3d2ce99e19d7c81289620298a2ee8920c31b7d9b60bf81e2cc321a4371fc1b7d5c5f46ff9200e727c9a0b857d8e0f1696140ddaba9b662d92833f9bfaa9913c30fc8c8d0c710a7d10f6a74463f7a86c93783e1ecb2cdbebc7927edece0f605391e7e306fd116832af91023b8cc973e0c7ed31f70fc5ba0b8732723bb2199979bed963155f95063c37a0f0158d02194a85a737348bcd8dfd1d0f6c91fe5924d5ee593cc"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_EXPRESSIONS={0x314, 0xb, 0x0, 0x1, [{0x150, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x140, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x80, 0x3, "4c8f79bb8efdd1521a34391d1c2c7cfeb418e808ac58bccc68c9b684d459c1b142120521d2a8629b062f31f9351ab1e88326293d2c6b5899d46264069caa08257a82582f1c4d7885149f1e567901a307c465ddf32d8480a02ac100d31590d5d442f1ab911e59b51d3946c494cb5c166e26506b9fa5b8618ad374f084"}, @NFTA_MATCH_INFO={0xae, 0x3, "8e6ca635eb1c2f0d57f5bd75e27627034437b37ca1700cefc602af4f643e06de0822e984cac7941fb0d9790991a2a7a1a352dab890e1474d32394dcbab5aa9f192ba966dc386c7f672fcab0fbf084ddd3186901f5db48c5c9e6fa7dac5ae736b66a33789fab4328ac80c6515ff84899fbe0e9ce79f641e292f3bec9e08842d97558cf9bfbe29422ad5a702ea7a5b6eb5f0ba9839a688b4f35d6d16dbd715117828b0d17d1fcc733ad821"}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x110, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x100, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_INFO={0x1a, 0x3, "8efd0b16bb5dea41a9bb8535ff6b0e49643ddeb0207e"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0x8e, 0x3, "abc68b279ef0fb340236efef2db97a4f5d23a7ef4b001d34f5d22d44a5d625cdb7b81c85dff6d581157e8d11092e09c31da89368d378d2357b529c86773e87d4066dcc75d458e78e134b240fd7d43c8f5d8af4e4c101d77352b2b288151d868beed2b86f1a19de310b8ad5b14858e785ec554f2d051f18ecca778b375e288d269a0c9059498c517429c9"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x118, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x76, 0x6, 0x1, 0x0, "4e483a165851e7ee09154ffedb50ee44c35ac4b0d2b892f532d94bd7b6c0312fda0ab2192ec6715e30bcf6ed2c3b5f983019946744a47ba0514f3eea303f5bb5f13d3682bed1d36bd4083dbdc324aa236df8482065cb0d93323c1ef79993ddf1e5e722598a05710d0492da2e2e841aa7d71b"}]}, {0x598, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "c959f9441b0982dce9c0b73ac52abf7569795aa1e555ddf01a61c7f6e6ace865122eb27405571dfb3c926a5d617fb7128aba9a81d1c0d853434497f1e22162c0fd696d5d0f23085e04804888aa36401ad79aa461895dc628055bad52f50e7f15feec934786defaf900100cfda80f7d80658a235a4f32a9c5de34f5b1fad062869c5c4d12153426b8f38101f439df68254ce1a17428a708d7ed76d1a868500069098b4e9b8c02a712d79b16ca5bf5b522bc2fe557a082d339d1d58db31409"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x94, 0x1, "d7de6b9610231fd6ebd382b791942bc56a2dc1da5fa245ca5d54b4f788e025829443837ba0a1f4677ad7894190e45a22e2dfe1e741523757a9475a9f24edf9143054497fa58f0cc135d70ce8d2febca56728c3b691ee5df60c724d02914a8459dff4873050fcb3b0edc0b2b47e77b6d6056113f1bae584139503a6c5213f0f8dc12f45b503953d2b286c3fb5bf76006e"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x44, 0x1, "691864f327fbd3438879e06fac269ad7142fa09a2758863b5f3f72054aca82ba82dd25340e990fe27c1ace807dbfb6af908a8db81964ca41731bb56d8f5a3260"}, @NFTA_DATA_VALUE={0xa6, 0x1, "6f5656b8529ed5ce137db2cf87c2dcc1e3c9699a66809333afe4eac2b2730d8ea6a3d227797066817ab699816304bb6e675d57188c1b137fcae3daa596d4e30b3e83e9c3da973c411f3e002ceab185f09237d2d87425b2ff97c25e96256d8849379b60c1251c690aa4ff054260e651b000fc8cb622fbe88c007944c5d6153313a33bc7f5aedb70020ce1f37ebe35554e848eba661370149cbb0abacbca38d78bb5c5"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0x87, 0x6, 0x1, 0x0, "41673f2a32a706637e995cb6a1e6cff2eb77e9cec01fb91cd829451b0cdc190e3180c8850f541c020999240d76a9282b4606b3df92193c9d5b546d44160b594178d116a357cebbd696342a9e23d2693c553b4bc523bf80f7d618fc444e8ddfec5b0f97b420be4b547d1f1573ef99a5cba2bb7f7d935695a9744550a9de8c4c022dbea4"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1fe}, @NFTA_SET_ELEM_EXPRESSIONS={0x124, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6a}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfda4}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x401}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x87}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8001}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6bb}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "87a6"}, @NFTA_DATA_VALUE={0x14, 0x1, "7016db93bfbca9a76cb3fbd827c31b38"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x77, 0x1, "2c6143ed68c48e3964057e576866e48ef8d2dd7d7863b7fad0e83280216242f381043839bef69337d5897a8b44a8842605c282361bb89ff4d6ef5276a772cc0f92c37e90eab9c16c605a7f7a733a7db2a6476455db869f05732c62320ba78d1bd349ea52eb561102c7e574aab55900a613ab7c"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xeec}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f00000001c0)={@multicast2, @empty, 0x0, "5487423e2473063269b9b4ad402ad78cc5c8de577ae1c7e1dd6618f493c6d2bb", 0x3, 0x101, 0x3}, 0x3c)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170479a60f6", 0x21)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
write$cgroup_int(r6, &(0x7f00000000c0)=0x80000001, 0x12)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000080)=0x434)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x63ac, 0x2])
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_usb_control_io(r1, 0x0, 0x0)
getresgid(&(0x7f0000001300), 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

2m11.869967793s ago: executing program 35 (id=2488):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
clock_gettime(0x358305538ae10dd1, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20", @ANYRES16=r0, @ANYRESHEX=r0], 0x0)
r2 = semget$private(0x0, 0x4000000009, 0x208)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000000c0))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)={{0x14}, [@NFT_MSG_NEWSETELEM={0xec4, 0xc, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe74, 0x3, 0x0, 0x1, [{0x8d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x47, 0x1, "af2787a5fccf4e36e806600161f6445a39cd5de407fcf4d31d9abd46892dea69042e9b7f0380ba4f999416a540d03090775c1105852f629618b3ecf6bb2e5646126873"}, @NFTA_DATA_VALUE={0xd9, 0x1, "c686bb0e3c9b8aa35128f98a53e6985f2757518842b5dfa5327c86a020b38fcf71d59e8b7e27306bb3152bcc1253088e4e0cf3986d39ab78274d7735cee7ecaf450afd701de7200b65180acf64fcc46f387f6625409565577be7194b8f585f254f77ef9e96abf7e04c16f3b4913fa148947522ff29ee73423eb83c67d0a45097fc566278c94d6c7a6cd92d8ebd1ec9f179b1c786b437dd5597d73a754a9f1fb0f7ad05cefd5bb1835bc86c22384e7efc96472bd7460e8a33a3318a9ffc1980331d862316fc07595d06f107d58da84bea17e573d5ac"}, @NFTA_DATA_VALUE={0xbb, 0x1, "3a0d34d6eddee0ca3c1ee86dfe79b3e4ba47835e2e39c475b58f648adb191399b02e03906df221b93f7f6c5514bbc3b194954a14e26f9a2539012679a2adf8eb32f5831e9a9257c47ff73bae0f2ab2e11ed99965a9055843937f506cbfc18b776f7852c05949bf5872f171797835ee524a5651276524e7c99e93dbde47d78b2f4460b0fb607b0efc579f2decf475bb7f04e357b2e5830e1974bc2b7d40cd8350707281b34bdc88266faefa4bfb44a311eae3478314e822"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "e0296ab737b1438756aed2d45312faac6b66ddf7e64c1219eae8b8c160986e72a317e5101e146159f2aaeae30eaa63b5102864e0ad583f6f2bc832abbabfa323fcf9a0896f8457ef3f0b3d2ce99e19d7c81289620298a2ee8920c31b7d9b60bf81e2cc321a4371fc1b7d5c5f46ff9200e727c9a0b857d8e0f1696140ddaba9b662d92833f9bfaa9913c30fc8c8d0c710a7d10f6a74463f7a86c93783e1ecb2cdbebc7927edece0f605391e7e306fd116832af91023b8cc973e0c7ed31f70fc5ba0b8732723bb2199979bed963155f95063c37a0f0158d02194a85a737348bcd8dfd1d0f6c91fe5924d5ee593cc"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_EXPRESSIONS={0x314, 0xb, 0x0, 0x1, [{0x150, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x140, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x80, 0x3, "4c8f79bb8efdd1521a34391d1c2c7cfeb418e808ac58bccc68c9b684d459c1b142120521d2a8629b062f31f9351ab1e88326293d2c6b5899d46264069caa08257a82582f1c4d7885149f1e567901a307c465ddf32d8480a02ac100d31590d5d442f1ab911e59b51d3946c494cb5c166e26506b9fa5b8618ad374f084"}, @NFTA_MATCH_INFO={0xae, 0x3, "8e6ca635eb1c2f0d57f5bd75e27627034437b37ca1700cefc602af4f643e06de0822e984cac7941fb0d9790991a2a7a1a352dab890e1474d32394dcbab5aa9f192ba966dc386c7f672fcab0fbf084ddd3186901f5db48c5c9e6fa7dac5ae736b66a33789fab4328ac80c6515ff84899fbe0e9ce79f641e292f3bec9e08842d97558cf9bfbe29422ad5a702ea7a5b6eb5f0ba9839a688b4f35d6d16dbd715117828b0d17d1fcc733ad821"}]}}}, {0x30, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x110, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x100, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0xd, 0x1, 'CONNMARK\x00'}, @NFTA_TARGET_INFO={0x1a, 0x3, "8efd0b16bb5dea41a9bb8535ff6b0e49643ddeb0207e"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0x8e, 0x3, "abc68b279ef0fb340236efef2db97a4f5d23a7ef4b001d34f5d22d44a5d625cdb7b81c85dff6d581157e8d11092e09c31da89368d378d2357b529c86773e87d4066dcc75d458e78e134b240fd7d43c8f5d8af4e4c101d77352b2b288151d868beed2b86f1a19de310b8ad5b14858e785ec554f2d051f18ecca778b375e288d269a0c9059498c517429c9"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x118, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x76, 0x6, 0x1, 0x0, "4e483a165851e7ee09154ffedb50ee44c35ac4b0d2b892f532d94bd7b6c0312fda0ab2192ec6715e30bcf6ed2c3b5f983019946744a47ba0514f3eea303f5bb5f13d3682bed1d36bd4083dbdc324aa236df8482065cb0d93323c1ef79993ddf1e5e722598a05710d0492da2e2e841aa7d71b"}]}, {0x598, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x2ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "c959f9441b0982dce9c0b73ac52abf7569795aa1e555ddf01a61c7f6e6ace865122eb27405571dfb3c926a5d617fb7128aba9a81d1c0d853434497f1e22162c0fd696d5d0f23085e04804888aa36401ad79aa461895dc628055bad52f50e7f15feec934786defaf900100cfda80f7d80658a235a4f32a9c5de34f5b1fad062869c5c4d12153426b8f38101f439df68254ce1a17428a708d7ed76d1a868500069098b4e9b8c02a712d79b16ca5bf5b522bc2fe557a082d339d1d58db31409"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x94, 0x1, "d7de6b9610231fd6ebd382b791942bc56a2dc1da5fa245ca5d54b4f788e025829443837ba0a1f4677ad7894190e45a22e2dfe1e741523757a9475a9f24edf9143054497fa58f0cc135d70ce8d2febca56728c3b691ee5df60c724d02914a8459dff4873050fcb3b0edc0b2b47e77b6d6056113f1bae584139503a6c5213f0f8dc12f45b503953d2b286c3fb5bf76006e"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x44, 0x1, "691864f327fbd3438879e06fac269ad7142fa09a2758863b5f3f72054aca82ba82dd25340e990fe27c1ace807dbfb6af908a8db81964ca41731bb56d8f5a3260"}, @NFTA_DATA_VALUE={0xa6, 0x1, "6f5656b8529ed5ce137db2cf87c2dcc1e3c9699a66809333afe4eac2b2730d8ea6a3d227797066817ab699816304bb6e675d57188c1b137fcae3daa596d4e30b3e83e9c3da973c411f3e002ceab185f09237d2d87425b2ff97c25e96256d8849379b60c1251c690aa4ff054260e651b000fc8cb622fbe88c007944c5d6153313a33bc7f5aedb70020ce1f37ebe35554e848eba661370149cbb0abacbca38d78bb5c5"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0x87, 0x6, 0x1, 0x0, "41673f2a32a706637e995cb6a1e6cff2eb77e9cec01fb91cd829451b0cdc190e3180c8850f541c020999240d76a9282b4606b3df92193c9d5b546d44160b594178d116a357cebbd696342a9e23d2693c553b4bc523bf80f7d618fc444e8ddfec5b0f97b420be4b547d1f1573ef99a5cba2bb7f7d935695a9744550a9de8c4c022dbea4"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1fe}, @NFTA_SET_ELEM_EXPRESSIONS={0x124, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6a}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x20, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfda4}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x401}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x87}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8001}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6bb}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "87a6"}, @NFTA_DATA_VALUE={0x14, 0x1, "7016db93bfbca9a76cb3fbd827c31b38"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_SET_ELEM_DATA={0x80, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x77, 0x1, "2c6143ed68c48e3964057e576866e48ef8d2dd7d7863b7fad0e83280216242f381043839bef69337d5897a8b44a8842605c282361bb89ff4d6ef5276a772cc0f92c37e90eab9c16c605a7f7a733a7db2a6476455db869f05732c62320ba78d1bd349ea52eb561102c7e574aab55900a613ab7c"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xeec}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f00000001c0)={@multicast2, @empty, 0x0, "5487423e2473063269b9b4ad402ad78cc5c8de577ae1c7e1dd6618f493c6d2bb", 0x3, 0x101, 0x3}, 0x3c)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170479a60f6", 0x21)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
write$cgroup_int(r6, &(0x7f00000000c0)=0x80000001, 0x12)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000080)=0x434)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x63ac, 0x2])
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
syz_usb_control_io(r1, 0x0, 0x0)
getresgid(&(0x7f0000001300), 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

6.813358722s ago: executing program 6 (id=3014):
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
ppoll(&(0x7f0000000000)=[{r0, 0x4100}], 0x1, 0x0, &(0x7f0000000140)={[0x971]}, 0x8)

6.759079018s ago: executing program 7 (id=3016):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xdddd0000, 0x4, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x4, 0xb}, {0xd000, 0x10000, 0xb, 0x3, 0x1, 0x7, 0x5, 0x6, 0x1, 0x4, 0xfa, 0x8}, {0xd000, 0x8000000, 0x4, 0x4, 0x11, 0x81, 0x20, 0x5, 0x5, 0x4, 0x92, 0x81}, {0x40000, 0xeeef0000, 0xc, 0x7, 0x1, 0xfa, 0x0, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0x0, 0xf, 0x9, 0x1, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x1, 0x1, 0xe, 0x9, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0x9, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0x1, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x3, 0x2, 0x8}, {0x100000, 0x405}, {0xeeee8000, 0xff81}, 0xe0000031, 0x0, 0xdddd6000, 0x61, 0x6, 0xbc01, 0x800f900, 0x1, [0x6257, 0x2, 0x8000000000000003, 0xc]})

6.368788784s ago: executing program 7 (id=3019):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fstat(r0, &(0x7f0000000a80))
r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x84000020}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x890)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
write$UHID_CREATE(r2, &(0x7f00000010c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001040)=""/93, 0x5d, 0x1271, 0x2, 0xe, 0xc}}, 0x120)
semtimedop(0x0, &(0x7f0000000200)=[{0x1, 0x0, 0x800}], 0x1, &(0x7f0000000240)={0x77359400})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x6, 0x101, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881cae811852806175d63892a15234fbcd7a88a0a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2053db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async)
fstat(r0, &(0x7f0000000a80)) (async)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) (async)
lseek(r1, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x84000020}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x890) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async)
fcntl$setlease(r2, 0x400, 0x0) (async)
write$UHID_CREATE(r2, &(0x7f00000010c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000001040)=""/93, 0x5d, 0x1271, 0x2, 0xe, 0xc}}, 0x120) (async)
semtimedop(0x0, &(0x7f0000000200)=[{0x1, 0x0, 0x800}], 0x1, &(0x7f0000000240)={0x77359400}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x6, 0x101, &(0x7f00000000c0)="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"}) (async)

6.251495128s ago: executing program 7 (id=3020):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000632000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.440227396s ago: executing program 5 (id=3030):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd70000000000004000000080018000dac0f005e94e0a6ca3680098a920041d4bc2a3a5735912e11e8140dba10920c4cbe635b1fdf3e"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000014)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000580)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r7, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000001540)=""/4082, 0xff2}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/156, 0x9c}, {&(0x7f0000001400)=""/102, 0x66}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/214, 0xd6}], 0x8}, 0xe9}], 0x1, 0x0, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r8, &(0x7f0000005900)=[{{&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002b00)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x86, 0x8, "89d1937ccd54"}]}}}], 0x18}}], 0x1, 0x40004)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7)
sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000600)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r6, 0x2}}, 0x18)

4.135516654s ago: executing program 5 (id=3032):
syslog(0x3, &(0x7f0000000240)=""/4096, 0x1000) (fail_nth: 6)

3.630253037s ago: executing program 6 (id=3033):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x94, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x5d, 0x6, "4b889efcb74da27b533dfbd0ea1efd45f628135156a5960afafc3c7e73a01cf5a4b64ebfcaff9ba10db0b8625e2d04e928d0d43a070206f1b93876d97c83f7c806dfe63f13edd28b4002a1d67483e7231bf28a1990e7fe1d32"}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0xf0}}, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000200)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x100000000000000)

3.507455837s ago: executing program 5 (id=3034):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, 0x0)

3.176968496s ago: executing program 5 (id=3035):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

3.105537261s ago: executing program 5 (id=3036):
rt_sigsuspend(&(0x7f0000000000)={[0x4440]}, 0x8)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0)
r1 = signalfd4(r0, &(0x7f0000000080)={[0x6]}, 0x8, 0x800)
pidfd_send_signal(r1, 0xc, &(0x7f00000000c0)={0x34, 0xfffffffe, 0x8}, 0x0)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000001c0)={0x34, &(0x7f0000000140)=[{0x24, '\x00', @st={0x4, [{0x1, @svalue=0x5}, {0x2, @svalue=0x80000001}, {0x1, @svalue=0x5}, {0x3, @uvalue=0x7}]}, 0x5}]})
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x64)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={<r2=>0x0, 0x7fff, 0x2, 0x1, 0x5, 0x9d, 0x9, 0x6, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x4, 0xfffff1c4, 0x10ca, 0x3}}, &(0x7f00000002c0)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0xd, @private1, 0x2a9e}}, 0x4, 0xb4e, 0x5, 0x9, 0x10, 0x10, 0xc}, &(0x7f00000003c0)=0x9c)
rt_sigtimedwait(&(0x7f0000000400)={[0xa]}, &(0x7f0000000440), &(0x7f00000004c0), 0x8)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000500)=""/8, &(0x7f0000000540)=0x8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8001)
ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1)
ppoll(&(0x7f0000000680)=[{r0, 0x8005}, {r1, 0x1}, {r0, 0x528}, {r1, 0x8040}, {r1, 0x42}, {r0, 0xd650}, {r1, 0x20}, {r0, 0x442}, {r0, 0x228}, {r1, 0x30a0}], 0xa, &(0x7f0000000700)={0x0, 0x989680}, &(0x7f0000000740), 0x8)
pidfd_send_signal(r1, 0x12, &(0x7f0000000780)={0x2, 0x6, 0x7}, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000bc0)={{&(0x7f0000000800)=[{0x7, 0x9, 0x2, {0xb9, 0x8}, 0xfffffffffffffff8, 0x3, 0xf8}, {0x7, 0x8, 0x40, {0x80, 0x27}, 0x7, 0xc, 0x8}, {0x6, 0x7fffffff, 0x4, {0x2, 0x7}, 0xc72, 0x1, 0x100}, {0x1, 0x100, 0xe, {0x9, 0xffffffff}, 0x100000001, 0x7, 0x3}, {0xa811, 0x9, 0x16, {0x6, 0x3}, 0x3, 0x8, 0x4}, {0x400, 0x8c, 0x9, {0x6}, 0x2, 0x5, 0x4}, {0x180000000000, 0xfffffffffffffff7, 0xc, {0x0, 0x1}, 0xc000000000000000, 0x4, 0xcec3}], 0x7, 0x40, 0x800, 0x1ff}, {&(0x7f00000009c0)=[{0x0, 0x4f77}, {0x71}, {0x3, 0xf}, {0x3, 0xadb}], 0x4, 0x10, 0x101, 0x7}, {&(0x7f0000000a00)=[0xd, 0x7], 0x2, 0x8, 0x6, 0x7fffffff}, {&(0x7f0000000a40)=[{0x2568, 0x1, 0x8, 0x6, 0xc}, {0x3ff, 0x7fff, 0x100000001, 0x6, 0x8}, {0x8, 0x80000001, 0x4, 0x80000001, 0x7}, {0x67f1, 0x8, 0xfffffffffffffff8, 0x3, 0x400}, {0x3ff, 0x2, 0x100000000, 0x3, 0x98ff}, {0x1, 0x1, 0x7, 0x69f0, 0x8000}, {0x127, 0x8000, 0x6, 0x1, 0x48}, {0x5, 0x0, 0xffffffffffffffff, 0x7, 0x1ee5a9db}], 0x8, 0x28, 0x4, 0xffffffffffffff80}, {&(0x7f0000000b80)=[0x3, 0xff, 0x2], 0x3, 0x8, 0x9, 0x6}})
syz_open_dev$sndpcmp(&(0x7f0000000c40), 0x8001, 0x2)
landlock_restrict_self(r1, 0x10)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000c80))
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000d40)=<r5=>0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8051}, 0x0)
fcntl$setlease(r1, 0x400, 0x2)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000e40)={0xa, 0x8001, 0x0, 0x1, 0x5, "56740a9ce6f5262c788d1dea28bc1e06e1768b", 0x2, 0x7})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), r1)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r6, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
sendfile(r0, r0, &(0x7f0000000fc0)=0x2, 0x4)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000001100)={&(0x7f0000001000)=[<r7=>0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0], 0x3, 0x2, 0x5, 0x3})
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000001280)={r7, 0x59, 0x8, 0x5, 0x0, [], [0x80000001, 0x7, 0x6, 0x9], [0x10001, 0x95, 0x0, 0x10000], [0x5, 0x1, 0xfffffffffffffdf3, 0x6]})

2.982686665s ago: executing program 7 (id=3037):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x10bb41)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x10}, 0x1, 0x0, 0x0, 0xd1}, 0x8014)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000002c0)={0xffff, <r2=>r1, 'id1\x00'})
r3 = landlock_create_ruleset(&(0x7f0000000340)={0x560, 0x1, 0x3, 0x0, 0x4, 0x3}, 0x30, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = openat(r2, &(0x7f0000000100)='./file2\x00', 0x200002, 0x0)
fcntl$notify(r4, 0x402, 0x80000027)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2)
ioctl$USBDEVFS_RESET(r0, 0x8008550e)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket(0x10, 0x803, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x20001000, 0x4000, 0x0, 0x0, 0x1}, 0x10)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r7 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2040000, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000280)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @empty, @local, @mcast2}}, 0x34)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x0)
sendmsg$inet6(r5, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e22, 0x3280608a, @mcast2, 0x7}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x5c39d53d76e37746)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)

2.905453316s ago: executing program 4 (id=3038):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.373404146s ago: executing program 6 (id=3039):
r0 = socket$kcm(0x10, 0x3, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x7, {0x7, 0x23, "6e9141c5c1"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000100)={0x20, 0xb, 0x12, "af1bd5b1907893e6742f3d05a7b470325b72"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x81, 0x3, "8f9369"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "ba"}, &(0x7f0000000400)={0x20, 0x83, 0x1, "e3"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "ee49"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "091584"}})
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33)
recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4082, 0xff2}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/234, 0xea}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/171, 0xab}, {&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f0000000280)=""/124, 0x7c}], 0xa}, 0x102)
socket$kcm(0x10, 0x3, 0x0) (async)
syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x11, 0x7, {0x7, 0x23, "6e9141c5c1"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3801}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000100)={0x20, 0xb, 0x12, "af1bd5b1907893e6742f3d05a7b470325b72"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000300)={0x20, 0x81, 0x3, "8f9369"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "ba"}, &(0x7f0000000400)={0x20, 0x83, 0x1, "e3"}, &(0x7f0000000440)={0x20, 0x84, 0x2, "ee49"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "091584"}}) (async)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) (async)
recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4082, 0xff2}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/234, 0xea}, {&(0x7f00000001c0)=""/170, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/171, 0xab}, {&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f0000000280)=""/124, 0x7c}], 0xa}, 0x102) (async)

2.255546598s ago: executing program 4 (id=3040):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x2})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000f7ffffffffffff0180c200000e88a8000081000002080045"], 0x3e)

2.148662868s ago: executing program 5 (id=3041):
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
ppoll(&(0x7f0000000000)=[{r0, 0x4100}], 0x1, 0x0, &(0x7f0000000140)={[0x971]}, 0x8)

2.013411032s ago: executing program 4 (id=3042):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0)
open_tree(r0, &(0x7f0000000000)='\x00', 0x81902)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x7d, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) (async)
open_tree(r0, &(0x7f0000000000)='\x00', 0x81902) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$bt_hci(r1, 0x84, 0x7d, 0x0, &(0x7f0000000000)) (async)

1.899921558s ago: executing program 4 (id=3043):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00', 0xc000})
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="2000000010008188040f46ecdb4cb9cca7490ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x40044004)

1.807757189s ago: executing program 4 (id=3044):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)

1.708400267s ago: executing program 4 (id=3045):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000632000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.644043456s ago: executing program 6 (id=3046):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

839.340091ms ago: executing program 7 (id=3047):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f787900000000040002801400df001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_setup(0x12b0, &(0x7f0000000280)={0x0, 0xf0a3, 0x98c13118d187c3f6, 0x2, 0x19f}, &(0x7f0000000300)=<r3=>0x0, &(0x7f0000000380), &(0x7f0000000440))
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000580))
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x393}, &(0x7f0000000000), &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180))
syz_io_uring_submit(r3, r4, 0x0, &(0x7f0000000480)=@IORING_OP_FTRUNCATE={0x37, 0x9, 0x0, r1, 0x6686, 0x0, 0x0, 0x0, 0x1})
socket$can_raw(0x1d, 0x3, 0x1)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
sync_file_range(r6, 0x8, 0x9, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r7, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setrlimit(0x7, &(0x7f0000000400))
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e21, 0x4, @loopback, 0x80000000}}}, &(0x7f0000000040)=0x84)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a3200000000090001"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000600)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="407389d8", @ANYRES16=0x0, @ANYBLOB="380029bd7000fddbdf255700000008000300", @ANYRES32=r13, @ANYBLOB="0c0099000500000055000000060095001b00000006009500040000000600950000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x5)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x1, 0x10, 0x8, 0x6, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x65, 0x0, 0x68, 0x2f, 0x0, @multicast2, @private=0xa010102}}}})

403.640787ms ago: executing program 7 (id=3048):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

111.0619ms ago: executing program 6 (id=3049):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adbacc32})
write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000bb0100bbbbbbaaaa"], 0xfdef)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x80802, 0x0)
sendfile(r0, r0, 0x0, 0x6)
ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)={'macvlan1\x00', 0x600})
r1 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @private0, 0x8}}, 0x24)
connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2e2400, 0x0)

0s ago: executing program 6 (id=3050):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2c}}, 0x8000)
sendmsg$sock(r0, &(0x7f0000001740)={&(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)}, {&(0x7f0000000000)="30c33dcc6ef41285b05ca5b797c99d21c58f8793c51a925a1c2f84cef11834b0d8be1e06ac986409cc96bd819c7bbe325ee8cfb2686458597dbb9551595c9f490025eabe7efae12a97050880588ced2dce82a884e6a176bc85d2d69bdf563fcb203fc2f52951936711bff57aae30d267bff0488c", 0x74}], 0x2}, 0x810)

kernel console output (not intermixed with test programs):

state
[  730.768756][T14263] bridge0: port 1(bridge_slave_0) entered disabled state
[  730.771187][T14263] bridge0: entered promiscuous mode
[  730.781275][T14263] vcan0: entered promiscuous mode
[  730.783786][T14263] team0: entered promiscuous mode
[  730.783806][T14263] team_slave_0: entered promiscuous mode
[  730.784011][T14263] team_slave_1: entered promiscuous mode
[  730.789777][T14263] dummy0: entered promiscuous mode
[  730.817198][ T5677] usb 7-1: Using ep0 maxpacket: 32
[  730.817362][T14263] nlmon0: entered promiscuous mode
[  730.820031][ T5677] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  730.820056][ T5677] usb 7-1: config 0 has no interface number 0
[  730.820105][ T5677] usb 7-1: config 0 interface 184 has no altsetting 0
[  730.822560][ T5889] usb 5-1: USB disconnect, device number 17
[  730.823324][ T5677] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  730.823353][ T5677] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.823374][ T5677] usb 7-1: Product: syz
[  730.823388][ T5677] usb 7-1: Manufacturer: syz
[  730.823403][ T5677] usb 7-1: SerialNumber: syz
[  730.831634][T14263] vxcan0: entered promiscuous mode
[  730.851775][T14263] vxcan1: entered promiscuous mode
[  730.861067][T14263] veth0: entered promiscuous mode
[  730.866666][T14263] veth1: entered promiscuous mode
[  730.939325][T14263] wg0: entered promiscuous mode
[  730.942497][ T5677] usb 7-1: config 0 descriptor??
[  730.979986][T14263] wg1: entered promiscuous mode
[  731.017930][T14263] wg2: entered promiscuous mode
[  731.023548][T14263] veth0_to_bridge: entered promiscuous mode
[  731.049270][T14263] veth1_to_bridge: entered promiscuous mode
[  731.063096][T14263] veth0_to_bond: entered promiscuous mode
[  731.074184][T14263] veth1_to_bond: entered promiscuous mode
[  731.084202][T14263] veth0_to_team: entered promiscuous mode
[  731.101167][T14263] C: entered promiscuous mode
[  731.123846][T14263] veth0_to_batadv: entered promiscuous mode
[  731.136179][T14263] batadv_slave_0: entered promiscuous mode
[  731.162224][T14263] veth1_to_batadv: entered promiscuous mode
[  731.168288][T14263] batadv_slave_1: entered promiscuous mode
[  731.176369][T14263] veth0_to_hsr: entered promiscuous mode
[  731.192760][T14263] veth1_to_hsr: entered promiscuous mode
[  731.220746][T14263] hsr0: entered promiscuous mode
[  731.235979][T14263] veth1_virt_wifi: entered promiscuous mode
[  731.265793][T14263] veth0_virt_wifi: entered promiscuous mode
[  731.277879][T14263] virt_wifi0: entered promiscuous mode
[  731.289563][T14263] vlan0: entered promiscuous mode
[  731.294032][T14263] vlan1: entered promiscuous mode
[  731.338486][T14263] macvlan0: entered promiscuous mode
[  731.353305][ T5677] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  731.353327][ T5677] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  731.353339][ T5677] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  731.353555][ T5677] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32
[  731.387326][T14263] macvlan1: entered promiscuous mode
[  731.392340][T14263] ipvlan0: entered promiscuous mode
[  731.392633][T14263] ipvlan1: entered promiscuous mode
[  731.467509][T14263] macvtap0: entered promiscuous mode
[  731.475755][T14263] macsec0: entered promiscuous mode
[  731.495806][T14263] geneve0: entered promiscuous mode
[  731.506081][T14263] geneve1: entered promiscuous mode
[  731.587522][T14263] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  731.667815][T14263] netdevsim netdevsim5 netdevsim1: entered promiscuous mode
[  731.748057][T14263] netdevsim netdevsim5 netdevsim2: entered promiscuous mode
[  731.827671][T14263] netdevsim netdevsim5 netdevsim3: entered promiscuous mode
[  731.991280][T14263] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  732.130958][T14263] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  732.146368][   T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  732.159957][   T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  732.160139][   T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  732.160180][   T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  732.647928][  T825] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  732.678321][ T4924] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  732.797941][  T825] usb 8-1: Using ep0 maxpacket: 8
[  732.800241][T14286] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  732.800264][T14286] overlayfs: maximum fs stacking depth exceeded
[  732.803540][  T825] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  732.803570][  T825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.803583][  T825] usb 8-1: Product: syz
[  732.803591][  T825] usb 8-1: Manufacturer: syz
[  732.803600][  T825] usb 8-1: SerialNumber: syz
[  732.830569][ T4924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  732.830604][ T4924] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  732.834169][ T4924] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  732.834198][ T4924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.834218][ T4924] usb 5-1: Product: syz
[  732.834232][ T4924] usb 5-1: Manufacturer: syz
[  732.834246][ T4924] usb 5-1: SerialNumber: syz
[  732.887363][ T4924] usb 5-1: config 0 descriptor??
[  732.893870][T14278] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  732.894052][T14278] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  732.932617][  T825] usb 8-1: config 0 descriptor??
[  732.946004][  T825] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  733.391498][ T5702] usb 7-1: USB disconnect, device number 81
[  733.533171][ T4924] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71
[  733.578985][ T4924] usb 5-1: USB disconnect, device number 18
[  733.806381][T14277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.814224][T14277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.923790][T14305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.924876][T14305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  734.021952][  T825] gspca_sonixj: reg_r err -71
[  734.022069][  T825] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  734.041579][  T825] usb 8-1: USB disconnect, device number 19
[  734.904701][T14337] netlink: 1476 bytes leftover after parsing attributes in process `syz.7.2765'.
[  735.049102][  T825] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  735.119142][   T10] usb 7-1: new full-speed USB device number 82 using dummy_hcd
[  735.159514][ T4924] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  735.199412][  T825] usb 6-1: Using ep0 maxpacket: 32
[  735.201326][  T825] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  735.201422][  T825] usb 6-1: config 0 has no interface number 0
[  735.201473][  T825] usb 6-1: config 0 interface 184 has no altsetting 0
[  735.203806][  T825] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  735.203834][  T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.203854][  T825] usb 6-1: Product: syz
[  735.203869][  T825] usb 6-1: Manufacturer: syz
[  735.203943][  T825] usb 6-1: SerialNumber: syz
[  735.208144][  T825] usb 6-1: config 0 descriptor??
[  735.304662][   T10] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  735.304697][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.304720][   T10] usb 7-1: Product: syz
[  735.304735][   T10] usb 7-1: Manufacturer: syz
[  735.304751][   T10] usb 7-1: SerialNumber: syz
[  735.372389][ T4924] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  735.372657][ T4924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.413425][ T4924] usb 8-1: config 0 descriptor??
[  735.435304][ T4924] cp210x 8-1:0.0: cp210x converter detected
[  735.627964][ T4924] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -121
[  735.628281][ T4924] cp210x 8-1:0.0: querying part number failed
[  735.706445][  T825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  735.706478][  T825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  735.706497][  T825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  735.706797][  T825] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32
[  735.756964][ T4924] usb 8-1: cp210x converter now attached to ttyUSB0
[  735.796076][   T10] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 82 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  736.160556][  T825] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  736.314292][  T825] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  736.314328][  T825] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  736.318000][  T825] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  736.318030][  T825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.318043][  T825] usb 5-1: Product: syz
[  736.318052][  T825] usb 5-1: Manufacturer: syz
[  736.318115][  T825] usb 5-1: SerialNumber: syz
[  736.324308][  T825] usb 5-1: config 0 descriptor??
[  736.335451][T14344] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22
[  736.335556][T14344] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22
[  736.773980][  T825] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71
[  736.791496][  T825] usb 5-1: USB disconnect, device number 19
[  737.832714][ T5702] usb 6-1: USB disconnect, device number 29
[  737.960572][  T825] usb 7-1: USB disconnect, device number 82
[  737.987278][  T825] usblp0: removed
[  738.013614][   T10] usb 8-1: USB disconnect, device number 20
[  738.137385][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  738.139822][   T10] cp210x 8-1:0.0: device disconnected
[  738.441548][ T5889] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  738.475609][T14379] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  738.590918][ T5889] usb 6-1: Using ep0 maxpacket: 32
[  738.592732][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.592760][ T5889] usb 6-1: config 0 has no interfaces?
[  738.592792][ T5889] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  738.592815][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.596401][ T5889] usb 6-1: config 0 descriptor??
[  738.645494][   T10] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[  738.806724][   T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  738.806756][   T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  738.810598][   T10] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  738.810630][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.810651][   T10] usb 7-1: Product: syz
[  738.810666][   T10] usb 7-1: Manufacturer: syz
[  738.810681][   T10] usb 7-1: SerialNumber: syz
[  738.875513][   T10] usb 7-1: config 0 descriptor??
[  738.890558][ T5889] usb 6-1: USB disconnect, device number 30
[  738.895066][T14385] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  738.895198][T14385] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  739.393245][   T10] dm9601 7-1:0.0: probe with driver dm9601 failed with error -71
[  739.417876][   T10] usb 7-1: USB disconnect, device number 83
[  739.751580][ T5889] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  739.902440][ T5889] usb 8-1: Using ep0 maxpacket: 32
[  739.906788][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  739.906813][ T5889] usb 8-1: config 0 has no interfaces?
[  739.906843][ T5889] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  739.906867][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.918687][ T5889] usb 8-1: config 0 descriptor??
[  740.021775][   T10] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  740.057752][T14409] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2785'.
[  740.127077][ T5889] usb 8-1: USB disconnect, device number 21
[  740.177469][   T10] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  740.177502][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.177522][   T10] usb 5-1: Product: syz
[  740.177532][   T10] usb 5-1: Manufacturer: syz
[  740.177540][   T10] usb 5-1: SerialNumber: syz
[  740.633950][   T10] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  741.042196][ T5889] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  741.192399][ T5889] usb 8-1: Using ep0 maxpacket: 16
[  741.194947][ T5889] usb 8-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  741.194982][ T5889] usb 8-1: config 0 interface 0 has no altsetting 0
[  741.195007][ T5889] usb 8-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  741.195022][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.199153][ T5889] usb 8-1: config 0 descriptor??
[  741.322500][   T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  741.501241][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  741.501291][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  741.526913][   T10] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  741.526947][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.526968][   T10] usb 6-1: Product: syz
[  741.526982][   T10] usb 6-1: Manufacturer: syz
[  741.526994][   T10] usb 6-1: SerialNumber: syz
[  741.554922][   T10] usb 6-1: config 0 descriptor??
[  741.556125][T14432] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  741.556396][T14432] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  741.629715][ T5889] usbhid 8-1:0.0: can't add hid device: -71
[  741.629853][ T5889] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  741.635408][ T5889] usb 8-1: USB disconnect, device number 22
[  742.024829][   T10] dm9601 6-1:0.0: probe with driver dm9601 failed with error -71
[  742.050979][   T10] usb 6-1: USB disconnect, device number 31
[  742.242895][  T825] usb 7-1: new high-speed USB device number 84 using dummy_hcd
[  742.392935][  T825] usb 7-1: Using ep0 maxpacket: 8
[  742.397529][  T825] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  742.397559][  T825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  742.397583][  T825] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  742.397605][  T825] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  742.397646][  T825] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  742.397669][  T825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.452805][ T5889] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  742.605237][ T5889] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  742.608237][ T5889] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  742.608276][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  742.608299][ T5889] usb 8-1: Product: syz
[  742.608521][ T5889] usb 8-1: Manufacturer: syz
[  742.608532][ T5889] usb 8-1: SerialNumber: syz
[  742.610952][  T825] usb 7-1: GET_CAPABILITIES returned 0
[  742.610991][  T825] usbtmc 7-1:16.0: can't read capabilities
[  742.779686][   T10] usb 5-1: USB disconnect, device number 20
[  742.796208][   T10] usblp0: removed
[  742.847189][  T825] usb 7-1: USB disconnect, device number 84
[  742.933668][ T5889] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  743.142066][    C1] usblp0: nonzero write bulk status received: -71
[  743.149125][ T5889] usb 8-1: USB disconnect, device number 23
[  743.171028][ T5889] usblp0: removed
[  743.205674][T14437] openvswitch: netlink: Missing key (keys=40, expected=100)
[  743.263301][   T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  743.417487][   T10] usb 6-1: Using ep0 maxpacket: 32
[  743.419596][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  743.419624][   T10] usb 6-1: config 0 has no interfaces?
[  743.419659][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  743.419685][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.471877][   T10] usb 6-1: config 0 descriptor??
[  743.573481][ T5889] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  743.679579][   T10] usb 6-1: USB disconnect, device number 32
[  743.704581][ T5889] usb 8-1: device descriptor read/64, error -71
[  743.947270][ T5889] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  744.073860][ T5889] usb 8-1: device descriptor read/64, error -71
[  744.187568][ T5889] usb usb8-port1: attempt power cycle
[  744.525544][ T5889] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  744.525940][  T825] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  744.546570][ T5889] usb 8-1: device descriptor read/8, error -71
[  744.705749][  T825] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  744.705772][  T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.705784][  T825] usb 6-1: Product: syz
[  744.705792][  T825] usb 6-1: Manufacturer: syz
[  744.705801][  T825] usb 6-1: SerialNumber: syz
[  744.793992][ T5889] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  744.814780][ T5889] usb 8-1: device descriptor read/8, error -71
[  744.925741][ T5889] usb usb8-port1: unable to enumerate USB device
[  744.964098][ T5702] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  745.116224][ T5702] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  745.116253][ T5702] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  745.118628][ T5702] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  745.118657][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.118714][ T5702] usb 5-1: Product: syz
[  745.118725][ T5702] usb 5-1: Manufacturer: syz
[  745.118734][ T5702] usb 5-1: SerialNumber: syz
[  745.127281][ T5702] usb 5-1: config 0 descriptor??
[  745.164505][T14468] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  745.164644][T14468] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  745.202418][  T825] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  745.326266][   T10] usb 7-1: new high-speed USB device number 85 using dummy_hcd
[  745.410399][ T5702] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71
[  745.433771][ T5702] usb 5-1: USB disconnect, device number 21
[  745.475009][   T10] usb 7-1: Using ep0 maxpacket: 32
[  745.481335][   T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  745.481366][   T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  745.481389][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  745.481444][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  745.481467][   T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  745.481493][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  745.481538][   T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  745.481563][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  745.572483][   T10] usb 7-1: config 0 descriptor??
[  745.782261][   T10] usblp 7-1:0.0: usblp1: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  745.804632][ T5889] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  745.954608][ T5889] usb 8-1: Using ep0 maxpacket: 32
[  745.959226][ T5889] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  745.959256][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  745.959276][ T5889] usb 8-1: config 0 has no interface number 0
[  745.959310][ T5889] usb 8-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  745.959324][ T5889] usb 8-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  745.959340][ T5889] usb 8-1: config 0 interface 12 has no altsetting 0
[  745.961812][ T5889] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  745.961840][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.961858][ T5889] usb 8-1: Product: syz
[  745.961875][ T5889] usb 8-1: Manufacturer: syz
[  745.961884][ T5889] usb 8-1: SerialNumber: syz
[  745.992244][   T10] usb 7-1: USB disconnect, device number 85
[  746.028699][   T10] usblp1: removed
[  746.072308][ T5889] usb 8-1: config 0 descriptor??
[  746.095604][ T5889] f81534 8-1:0.12: required endpoints missing
[  746.444917][ T5889] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  746.594923][ T5889] usb 5-1: Using ep0 maxpacket: 32
[  746.596994][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  746.597023][ T5889] usb 5-1: config 0 has no interfaces?
[  746.597056][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  746.597074][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.600383][ T5889] usb 5-1: config 0 descriptor??
[  746.785020][   T10] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[  746.810817][    T9] usb 5-1: USB disconnect, device number 22
[  746.938184][   T10] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  746.938221][   T10] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  746.938244][   T10] usb 7-1: Product: syz
[  746.943641][   T10] usb 7-1: config 0 descriptor??
[  746.954222][   T10] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  746.960268][   T10] usb 7-1: Detected FT232H
[  747.146745][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  747.280813][    T9] usb 6-1: USB disconnect, device number 33
[  747.329720][    T9] usblp0: removed
[  747.755537][ T5889] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  747.905523][ T5889] usb 5-1: Using ep0 maxpacket: 32
[  747.907902][ T5889] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  747.907932][ T5889] usb 5-1: config 0 has no interface number 0
[  747.907983][ T5889] usb 5-1: config 0 interface 184 has no altsetting 0
[  747.910989][ T5889] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  747.911019][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.911040][ T5889] usb 5-1: Product: syz
[  747.911055][ T5889] usb 5-1: Manufacturer: syz
[  747.911071][ T5889] usb 5-1: SerialNumber: syz
[  747.922225][ T5889] usb 5-1: config 0 descriptor??
[  748.396269][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  748.396303][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  748.396323][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  748.396721][ T5889] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  748.496032][ T5889] usb 8-1: USB disconnect, device number 28
[  748.541947][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  748.771330][T14502] netlink: 'syz.7.2821': attribute type 1 has an invalid length.
[  748.771354][T14502] netlink: 'syz.7.2821': attribute type 2 has an invalid length.
[  749.096193][ T5889] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  749.246267][ T5889] usb 8-1: Using ep0 maxpacket: 32
[  749.253698][ T5889] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  749.253731][ T5889] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  749.253754][ T5889] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  749.253821][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  749.253844][ T5889] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  749.253870][ T5889] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  749.253915][ T5889] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  749.253939][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.263265][ T5889] usb 8-1: config 0 descriptor??
[  749.298197][  T825] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  749.462758][  T825] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  749.462881][  T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.462904][  T825] usb 6-1: Product: syz
[  749.462918][  T825] usb 6-1: Manufacturer: syz
[  749.462933][  T825] usb 6-1: SerialNumber: syz
[  749.660438][ T5889] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  749.708333][   T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  749.708899][   T10] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71
[  749.732662][   T10] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  749.784595][   T10] usb 7-1: USB disconnect, device number 86
[  749.801983][ T5702] usb 8-1: USB disconnect, device number 29
[  749.874233][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  749.891313][   T10] ftdi_sio 7-1:0.0: device disconnected
[  749.978490][  T825] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  749.982989][ T5702] usblp0: removed
[  750.276809][   T10] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[  750.427236][   T10] usb 7-1: Using ep0 maxpacket: 32
[  750.430154][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  750.430184][   T10] usb 7-1: config 0 has no interfaces?
[  750.430216][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  750.430241][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.478380][   T10] usb 7-1: config 0 descriptor??
[  750.542317][ T5702] usb 5-1: USB disconnect, device number 23
[  750.967205][ T5702] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  751.117084][ T5702] usb 5-1: Using ep0 maxpacket: 32
[  751.121248][ T5702] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  751.121276][ T5702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  751.121295][ T5702] usb 5-1: config 0 has no interface number 0
[  751.121340][ T5702] usb 5-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  751.121367][ T5702] usb 5-1: config 0 interface 12 has no altsetting 0
[  751.124052][ T5702] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  751.124078][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.124097][ T5702] usb 5-1: Product: syz
[  751.124111][ T5702] usb 5-1: Manufacturer: syz
[  751.124125][ T5702] usb 5-1: SerialNumber: syz
[  751.133974][ T5702] usb 5-1: config 0 descriptor??
[  751.146358][ T5702] f81534 5-1:0.12: required endpoints missing
[  751.216506][ T5702] usb 7-1: USB disconnect, device number 87
[  751.647493][ T5702] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  751.769367][T14525] FAULT_INJECTION: forcing a failure.
[  751.769367][T14525] name failslab, interval 1, probability 0, space 0, times 0
[  751.769396][T14525] CPU: 0 UID: 0 PID: 14525 Comm: syz.6.2830 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  751.769414][T14525] Tainted: [L]=SOFTLOCKUP
[  751.769419][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  751.769426][T14525] Call Trace:
[  751.769431][T14525]  <TASK>
[  751.769437][T14525]  dump_stack_lvl+0xe8/0x150
[  751.769458][T14525]  should_fail_ex+0x467/0x600
[  751.769476][T14525]  should_failslab+0xa8/0x100
[  751.769489][T14525]  kmem_cache_alloc_node_noprof+0xac/0x660
[  751.769507][T14525]  ? __alloc_skb+0x1d7/0x7a0
[  751.769519][T14525]  ? __alloc_skb+0x1d7/0x7a0
[  751.769534][T14525]  __alloc_skb+0x1d7/0x7a0
[  751.769549][T14525]  __pfkey_xfrm_state2msg+0x42e/0x3cb0
[  751.769574][T14525]  pfkey_send_notify+0x1aa/0xde0
[  751.769586][T14525]  ? km_state_notify+0x101/0x1f0
[  751.769601][T14525]  ? km_state_notify+0x25/0x1f0
[  751.769616][T14525]  ? __pfx_pfkey_send_notify+0x10/0x10
[  751.769634][T14525]  km_state_notify+0x110/0x1f0
[  751.769652][T14525]  pfkey_add+0x204b/0x2e50
[  751.769677][T14525]  ? __pfx_pfkey_add+0x10/0x10
[  751.769699][T14525]  pfkey_sendmsg+0xceb/0x11d0
[  751.769721][T14525]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  751.769748][T14525]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  751.769766][T14525]  ? __kernel_text_address+0xd/0x30
[  751.769783][T14525]  ? unwind_get_return_address+0x4d/0x90
[  751.769797][T14525]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  751.769810][T14525]  sock_sendmsg_nosec+0x13a/0x180
[  751.769829][T14525]  ____sys_sendmsg+0x565/0x870
[  751.769849][T14525]  ? __pfx_____sys_sendmsg+0x10/0x10
[  751.769868][T14525]  ? import_iovec+0x73/0xa0
[  751.769885][T14525]  ___sys_sendmsg+0x2a5/0x360
[  751.769899][T14525]  ? __lock_acquire+0x6df/0x2e40
[  751.769913][T14525]  ? __pfx____sys_sendmsg+0x10/0x10
[  751.769947][T14525]  ? __fget_files+0x2a/0x420
[  751.769960][T14525]  ? __fget_files+0x3a8/0x420
[  751.769978][T14525]  __x64_sys_sendmsg+0x1b7/0x290
[  751.769994][T14525]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  751.770019][T14525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.770032][T14525]  do_syscall_64+0x174/0x580
[  751.770047][T14525]  ? trace_irq_disable+0x3b/0x140
[  751.770059][T14525]  ? clear_bhb_loop+0x40/0x90
[  751.770074][T14525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.770086][T14525] RIP: 0033:0x7feb33f8de59
[  751.770099][T14525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  751.770125][T14525] RSP: 002b:00007feb321e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  751.770140][T14525] RAX: ffffffffffffffda RBX: 00007feb34215fa0 RCX: 00007feb33f8de59
[  751.770149][T14525] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  751.770157][T14525] RBP: 00007feb321e6090 R08: 0000000000000000 R09: 0000000000000000
[  751.770165][T14525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  751.770173][T14525] R13: 00007feb34216038 R14: 00007feb34215fa0 R15: 00007ffc0b6e28b8
[  751.770192][T14525]  </TASK>
[  751.909584][ T5702] usb 8-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  751.909624][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.909645][ T5702] usb 8-1: Product: syz
[  751.909659][ T5702] usb 8-1: Manufacturer: syz
[  751.909673][ T5702] usb 8-1: SerialNumber: syz
[  751.923297][ T5702] usb 8-1: config 0 descriptor??
[  751.954887][ T5702] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  752.140951][ T5889] usb 6-1: USB disconnect, device number 34
[  752.325199][ T5889] usblp1: removed
[  752.449066][ T5702] gspca_sunplus: reg_w_riv err -71
[  752.449178][ T5702] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[  752.460337][ T5702] usb 8-1: USB disconnect, device number 30
[  752.938155][    T9] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[  753.148387][    T9] usb 7-1: Using ep0 maxpacket: 32
[  753.150307][    T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  753.150401][    T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  753.150424][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  753.150488][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  753.150510][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  753.150534][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  753.150561][    T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  753.150575][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.157870][    T9] usb 7-1: config 0 descriptor??
[  753.414631][    T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 88 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  753.628603][ T5677] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  753.638785][    T9] usb 7-1: USB disconnect, device number 88
[  753.667841][    T9] usblp0: removed
[  753.701194][ T5889] usb 5-1: USB disconnect, device number 24
[  753.779707][ T5677] usb 6-1: Using ep0 maxpacket: 32
[  753.783630][ T5677] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  753.783663][ T5677] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  753.783686][ T5677] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  753.783743][ T5677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  753.783768][ T5677] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  753.783795][ T5677] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  753.783842][ T5677] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  753.783867][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.873584][ T5677] usb 6-1: config 0 descriptor??
[  754.089460][ T5702] usb 8-1: new full-speed USB device number 31 using dummy_hcd
[  754.106505][ T5677] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  754.244509][ T5702] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  754.244545][ T5702] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.244565][ T5702] usb 8-1: Product: syz
[  754.244580][ T5702] usb 8-1: Manufacturer: syz
[  754.244594][ T5702] usb 8-1: SerialNumber: syz
[  754.330174][  T825] usb 6-1: USB disconnect, device number 35
[  754.350573][  T825] usblp0: removed
[  754.687763][ T5702] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  754.716089][ T5702] usb 8-1: USB disconnect, device number 31
[  754.724192][ T5702] usblp0: removed
[  755.043646][T14571] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  755.043646][T14571] Please contact the netfilter-devel mailing list or update your nftables rules.
[  755.309450][ T5889] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  755.459492][ T5889] usb 6-1: Using ep0 maxpacket: 32
[  755.462255][ T5889] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  755.462293][ T5889] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  755.462322][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0
[  755.462359][ T5889] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  755.462385][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.476827][ T5889] usb 6-1: config 0 descriptor??
[  755.497284][ T5677] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  755.579476][    T9] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[  755.679401][ T5677] usb 8-1: Using ep0 maxpacket: 32
[  755.682089][ T5677] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  755.682118][ T5677] usb 8-1: config 0 has no interface number 0
[  755.682167][ T5677] usb 8-1: config 0 interface 12 has no altsetting 0
[  755.684851][ T5677] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  755.684882][ T5677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.684905][ T5677] usb 8-1: Product: syz
[  755.684920][ T5677] usb 8-1: Manufacturer: syz
[  755.684936][ T5677] usb 8-1: SerialNumber: syz
[  755.752852][ T5677] usb 8-1: config 0 descriptor??
[  755.770178][    T9] usb 7-1: Using ep0 maxpacket: 32
[  755.773111][    T9] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  755.773141][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  755.773161][    T9] usb 7-1: config 0 has no interface number 0
[  755.773260][    T9] usb 7-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  755.773278][    T9] usb 7-1: config 0 interface 12 has no altsetting 0
[  755.776445][    T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  755.776475][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.776554][    T9] usb 7-1: Product: syz
[  755.776569][    T9] usb 7-1: Manufacturer: syz
[  755.776582][    T9] usb 7-1: SerialNumber: syz
[  755.779508][  T825] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  755.880699][    T9] usb 7-1: config 0 descriptor??
[  755.899097][    T9] f81534 7-1:0.12: required endpoints missing
[  755.929625][  T825] usb 5-1: Using ep0 maxpacket: 32
[  755.941470][  T825] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  755.941502][  T825] usb 5-1: config 0 has no interface number 0
[  755.941550][  T825] usb 5-1: config 0 interface 184 has no altsetting 0
[  755.955286][  T825] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  755.955318][  T825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.955338][  T825] usb 5-1: Product: syz
[  755.955352][  T825] usb 5-1: Manufacturer: syz
[  755.955368][  T825] usb 5-1: SerialNumber: syz
[  755.988474][  T825] usb 5-1: config 0 descriptor??
[  756.027523][ T5889] kye 0003:0458:0087.001B: hidraw0: USB HID v10.01 Device [HID 0458:0087] on usb-dummy_hcd.5-1/input0
[  756.232596][    T9] usb 6-1: USB disconnect, device number 36
[  756.422650][  T825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  756.422683][  T825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  756.422704][  T825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  756.423028][  T825] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32
[  756.877513][ T5677] f81534 8-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  756.877579][ T5677] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71
[  756.877597][ T5677] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  756.877697][ T5677] f81534 8-1:0.12: probe with driver f81534 failed with error -71
[  756.922582][ T5677] usb 8-1: USB disconnect, device number 32
[  758.355310][  T825] usb 7-1: USB disconnect, device number 89
[  758.460892][ T5677] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  758.480854][    T9] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  758.494816][   T10] usb 5-1: USB disconnect, device number 25
[  758.616277][ T5677] usb 6-1: Using ep0 maxpacket: 32
[  758.618357][ T5677] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  758.618385][ T5677] usb 6-1: config 0 has no interface number 0
[  758.618426][ T5677] usb 6-1: config 0 interface 184 has no altsetting 0
[  758.620653][ T5677] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  758.622178][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.622199][ T5677] usb 6-1: Product: syz
[  758.622213][ T5677] usb 6-1: Manufacturer: syz
[  758.622227][ T5677] usb 6-1: SerialNumber: syz
[  758.634834][ T5677] usb 6-1: config 0 descriptor??
[  758.641633][    T9] usb 8-1: Using ep0 maxpacket: 32
[  758.645372][    T9] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  758.645398][    T9] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  758.645418][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  758.645529][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  758.645552][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  758.645575][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  758.645668][    T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  758.645691][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.674460][    T9] usb 8-1: config 0 descriptor??
[  758.881285][   T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  758.903096][    T9] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  759.033879][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  759.035422][   T10] usb 5-1: config 2 has an invalid interface number: 119 but max is 0
[  759.035450][   T10] usb 5-1: config 2 has no interface number 0
[  759.035579][   T10] usb 5-1: config 2 interface 119 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1024
[  759.035607][   T10] usb 5-1: config 2 interface 119 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  759.035635][   T10] usb 5-1: config 2 interface 119 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[  759.035717][   T10] usb 5-1: config 2 interface 119 has no altsetting 0
[  759.038614][   T10] usb 5-1: New USB device found, idVendor=3285, idProduct=928e, bcdDevice=42.f0
[  759.038644][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.038729][   T10] usb 5-1: Product: syz
[  759.038746][   T10] usb 5-1: Manufacturer: syz
[  759.038762][   T10] usb 5-1: SerialNumber: syz
[  759.081730][T14602] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  759.081916][T14602] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  759.135205][    T9] usb 8-1: USB disconnect, device number 33
[  759.199550][ T5677] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  759.199573][ T5677] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  759.199584][ T5677] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  759.199861][ T5677] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61
[  759.210232][    T9] usblp0: removed
[  759.288396][T14602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.289099][T14602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.341356][   T10] usb 5-1: USB disconnect, device number 26
[  759.902348][  T825] usb 7-1: new high-speed USB device number 90 using dummy_hcd
[  760.056645][  T825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  760.056683][  T825] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  760.079054][  T825] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  760.079088][  T825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.079103][  T825] usb 7-1: Product: syz
[  760.079115][  T825] usb 7-1: Manufacturer: syz
[  760.079150][  T825] usb 7-1: SerialNumber: syz
[  760.116653][  T825] usb 7-1: config 0 descriptor??
[  760.118274][T14613] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  760.118388][T14613] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  760.241733][ T5889] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  760.393822][ T5889] usb 5-1: not running at top speed; connect to a high speed hub
[  760.395531][ T5889] usb 5-1: config 1 has an invalid interface number: 167 but max is 0
[  760.395561][ T5889] usb 5-1: config 1 has no interface number 0
[  760.395690][ T5889] usb 5-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64
[  760.395709][ T5889] usb 5-1: config 1 interface 167 has no altsetting 0
[  760.398357][ T5889] usb 5-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40
[  760.398384][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.398396][ T5889] usb 5-1: Product: syz
[  760.398446][ T5889] usb 5-1: Manufacturer: syz
[  760.398457][ T5889] usb 5-1: SerialNumber: syz
[  760.560606][  T825] dm9601 7-1:0.0: probe with driver dm9601 failed with error -71
[  760.609851][  T825] usb 7-1: USB disconnect, device number 90
[  760.691634][ T5889] em28xx 5-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167)
[  760.691661][ T5889] em28xx 5-1:1.167: Device initialization failed.
[  760.691669][ T5889] em28xx 5-1:1.167: Device must be connected to a high-speed USB 2.0 port.
[  760.724084][ T5889] usb 5-1: USB disconnect, device number 27
[  761.240855][   T10] usb 6-1: USB disconnect, device number 37
[  761.508298][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2866'.
[  761.762607][   T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  761.913455][   T10] usb 6-1: Using ep0 maxpacket: 32
[  761.922531][   T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  761.922560][   T10] usb 6-1: config 0 has no interface number 0
[  761.922612][   T10] usb 6-1: config 0 interface 184 has no altsetting 0
[  761.951963][   T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  761.951998][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.952020][   T10] usb 6-1: Product: syz
[  761.952036][   T10] usb 6-1: Manufacturer: syz
[  761.952069][   T10] usb 6-1: SerialNumber: syz
[  761.976916][   T10] usb 6-1: config 0 descriptor??
[  762.252697][  T825] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  762.399461][   T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  762.399484][   T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  762.399496][   T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  762.399769][   T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61
[  762.403250][  T825] usb 8-1: Using ep0 maxpacket: 32
[  762.451152][  T825] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  762.451186][  T825] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  762.451216][  T825] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  762.451231][  T825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.497563][  T825] usb 8-1: config 0 descriptor??
[  762.513022][  T825] hub 8-1:0.0: USB hub found
[  762.721328][  T825] hub 8-1:0.0: 9 ports detected
[  762.721692][  T825] hub 8-1:0.0: insufficient power available to use all downstream ports
[  762.903604][ T5702] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[  763.053059][ T5702] usb 7-1: Using ep0 maxpacket: 32
[  763.058302][ T5702] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  763.058332][ T5702] usb 7-1: config 0 has no interface number 0
[  763.058625][ T5702] usb 7-1: config 0 interface 184 has no altsetting 0
[  763.081968][ T5702] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  763.081991][ T5702] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.082004][ T5702] usb 7-1: Product: syz
[  763.082013][ T5702] usb 7-1: Manufacturer: syz
[  763.086915][ T5702] usb 7-1: SerialNumber: syz
[  763.140209][ T5702] usb 7-1: config 0 descriptor??
[  763.177029][  T825] usb 8-1: USB disconnect, device number 34
[  763.523367][    T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  763.566168][ T5702] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  763.566191][ T5702] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  763.566202][ T5702] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  763.566569][ T5702] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61
[  763.684783][    T9] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  763.684818][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.684838][    T9] usb 5-1: Product: syz
[  763.684850][    T9] usb 5-1: Manufacturer: syz
[  763.684859][    T9] usb 5-1: SerialNumber: syz
[  763.959663][    T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  763.976093][    T9] usb 5-1: USB disconnect, device number 28
[  764.014901][    T9] usblp0: removed
[  764.441750][ T5702] usb 6-1: USB disconnect, device number 38
[  765.016818][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2882'.
[  765.050548][ T5597] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  765.050586][ T5597] Bluetooth: hci2: Malformed LE Event: 0x0d
[  765.475129][ T5702] usb 8-1: new full-speed USB device number 35 using dummy_hcd
[  765.604558][ T5702] usb 8-1: device descriptor read/64, error -71
[  765.727374][ T5677] usb 7-1: USB disconnect, device number 91
[  765.848755][ T5702] usb 8-1: new full-speed USB device number 36 using dummy_hcd
[  765.974739][ T5702] usb 8-1: device descriptor read/64, error -71
[  765.994618][   T32] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  766.085157][ T5702] usb usb8-port1: attempt power cycle
[  766.144671][   T32] usb 5-1: Using ep0 maxpacket: 32
[  766.150698][   T32] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  766.150728][   T32] usb 5-1: config 0 has no interface number 0
[  766.150782][   T32] usb 5-1: config 0 interface 184 has no altsetting 0
[  766.153413][   T32] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  766.153443][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.153465][   T32] usb 5-1: Product: syz
[  766.153480][   T32] usb 5-1: Manufacturer: syz
[  766.153495][   T32] usb 5-1: SerialNumber: syz
[  766.222607][   T32] usb 5-1: config 0 descriptor??
[  766.484969][ T5702] usb 8-1: new full-speed USB device number 37 using dummy_hcd
[  766.506445][ T5702] usb 8-1: device descriptor read/8, error -71
[  766.651117][   T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  766.651152][   T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  766.651173][   T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  766.651513][   T32] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  766.755089][ T5702] usb 8-1: new full-speed USB device number 38 using dummy_hcd
[  766.776104][ T5702] usb 8-1: device descriptor read/8, error -71
[  766.885536][ T5702] usb usb8-port1: unable to enumerate USB device
[  767.746145][   T32] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  767.921156][   T32] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  767.921189][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.921212][   T32] usb 6-1: Product: syz
[  767.921228][   T32] usb 6-1: Manufacturer: syz
[  767.921244][   T32] usb 6-1: SerialNumber: syz
[  767.928286][   T32] usb 6-1: config 0 descriptor??
[  767.937595][   T32] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  768.350571][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.352331][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.354673][T14707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.370364][T14707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.603456][T14707] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  768.762162][ T5698] usb 5-1: USB disconnect, device number 29
[  768.823069][T14712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2894'.
[  768.963916][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'.
[  768.992256][ T5597] Bluetooth: hci4: Unknown advertising packet type: 0x7f
[  768.992283][ T5597] Bluetooth: hci4: Malformed LE Event: 0x0d
[  769.136134][    T9] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  769.171616][   T32] gspca_stk1135: reg_w 0x5 err -110
[  769.172650][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  769.172657][   T32] gspca_stk1135: Sensor write failed
[  769.172676][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  769.172682][   T32] gspca_stk1135: Sensor write failed
[  769.172701][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  769.172707][   T32] gspca_stk1135: Sensor read failed
[  769.172725][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  769.172730][   T32] gspca_stk1135: Sensor read failed
[  769.172735][   T32] gspca_stk1135: Detected sensor type unknown (0x0)
[  769.172777][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  769.172783][   T32] gspca_stk1135: Sensor read failed
[  769.172800][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  769.172806][   T32] gspca_stk1135: Sensor read failed
[  769.172830][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  769.172836][   T32] gspca_stk1135: Sensor write failed
[  769.172854][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  769.172859][   T32] gspca_stk1135: Sensor write failed
[  769.172913][   T32] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110
[  769.196340][ T5702] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[  769.315909][ T5698] usb 6-1: USB disconnect, device number 39
[  769.348533][ T5702] usb 7-1: Using ep0 maxpacket: 32
[  769.359301][ T5702] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  769.359337][ T5702] usb 7-1: config 0 has no interface number 0
[  769.359397][ T5702] usb 7-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  769.359421][ T5702] usb 7-1: config 0 interface 12 has no altsetting 0
[  769.376261][    T9] usb 8-1: Using ep0 maxpacket: 32
[  769.378693][    T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  769.378723][    T9] usb 8-1: config 0 has no interface number 0
[  769.378785][    T9] usb 8-1: config 0 interface 184 has no altsetting 0
[  769.380100][ T5702] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  769.380127][ T5702] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.380145][ T5702] usb 7-1: Product: syz
[  769.380159][ T5702] usb 7-1: Manufacturer: syz
[  769.380174][ T5702] usb 7-1: SerialNumber: syz
[  769.391455][ T5702] usb 7-1: config 0 descriptor??
[  769.396834][ T5702] f81534 7-1:0.12: required endpoints missing
[  769.409964][    T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  769.409986][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.409998][    T9] usb 8-1: Product: syz
[  769.410007][    T9] usb 8-1: Manufacturer: syz
[  769.410015][    T9] usb 8-1: SerialNumber: syz
[  769.513301][    T9] usb 8-1: config 0 descriptor??
[  769.688205][T14723] syzkaller1: entered promiscuous mode
[  769.688232][T14723] syzkaller1: entered allmulticast mode
[  769.692678][T14723] FAULT_INJECTION: forcing a failure.
[  769.692678][T14723] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  769.692714][T14723] CPU: 1 UID: 0 PID: 14723 Comm: syz.4.2897 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  769.692742][T14723] Tainted: [L]=SOFTLOCKUP
[  769.692775][T14723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  769.692788][T14723] Call Trace:
[  769.692798][T14723]  <TASK>
[  769.692807][T14723]  dump_stack_lvl+0xe8/0x150
[  769.692837][T14723]  should_fail_ex+0x467/0x600
[  769.692863][T14723]  _copy_from_iter+0x1d3/0x1660
[  769.692890][T14723]  ? __lock_acquire+0x6df/0x2e40
[  769.692914][T14723]  ? __pfx__copy_from_iter+0x10/0x10
[  769.692941][T14723]  ? do_raw_spin_lock+0x12b/0x2f0
[  769.692980][T14723]  tun_get_user+0x259/0x4380
[  769.693007][T14723]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  769.693041][T14723]  ? reacquire_held_locks+0x117/0x1a0
[  769.693063][T14723]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  769.693090][T14723]  ? __pfx_tun_get_user+0x10/0x10
[  769.693116][T14723]  ? rt_spin_unlock+0x157/0x200
[  769.693142][T14723]  ? rt_spin_unlock+0x163/0x200
[  769.693166][T14723]  ? save_netdev_trace_buffer+0x4ae/0x5e0
[  769.693198][T14723]  ? ref_tracker_alloc+0x353/0x4c0
[  769.693218][T14723]  ? tun_get+0x157/0x2f0
[  769.693240][T14723]  ? tun_chr_write_iter+0x63/0x210
[  769.693263][T14723]  ? vfs_write+0x61e/0xbb0
[  769.693287][T14723]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  769.693325][T14723]  ? tun_get+0x1c/0x2f0
[  769.693355][T14723]  ? tun_get+0x1c/0x2f0
[  769.693380][T14723]  ? tun_get+0x1c/0x2f0
[  769.693413][T14723]  tun_chr_write_iter+0x119/0x210
[  769.693442][T14723]  vfs_write+0x61e/0xbb0
[  769.693476][T14723]  ? __pfx_vfs_write+0x10/0x10
[  769.693509][T14723]  ? __fget_files+0x2a/0x420
[  769.693538][T14723]  ksys_write+0x156/0x270
[  769.693562][T14723]  ? __pfx_ksys_write+0x10/0x10
[  769.693593][T14723]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.693617][T14723]  do_syscall_64+0x174/0x580
[  769.693642][T14723]  ? trace_irq_disable+0x3b/0x140
[  769.693662][T14723]  ? clear_bhb_loop+0x40/0x90
[  769.693685][T14723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  769.693705][T14723] RIP: 0033:0x7f259bcede59
[  769.693723][T14723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  769.693740][T14723] RSP: 002b:00007f2599f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  769.693771][T14723] RAX: ffffffffffffffda RBX: 00007f259bf75fa0 RCX: 00007f259bcede59
[  769.693787][T14723] RDX: 00000000000000be RSI: 0000200000000080 RDI: 0000000000000003
[  769.693801][T14723] RBP: 00007f2599f46090 R08: 0000000000000000 R09: 0000000000000000
[  769.693814][T14723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  769.693825][T14723] R13: 00007f259bf76038 R14: 00007f259bf75fa0 R15: 00007ffe9d181038
[  769.693856][T14723]  </TASK>
[  769.936581][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  769.936618][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  769.936639][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  769.936935][    T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61
[  770.395044][T14732] netlink: 'syz.4.2902': attribute type 1 has an invalid length.
[  770.485628][T14737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2904'.
[  770.626938][ T5677] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  770.783181][ T5677] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  770.783216][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.783236][ T5677] usb 6-1: Product: syz
[  770.783247][ T5677] usb 6-1: Manufacturer: syz
[  770.783255][ T5677] usb 6-1: SerialNumber: syz
[  770.787068][    T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  770.967004][    T9] usb 5-1: Using ep0 maxpacket: 32
[  770.969106][    T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  770.969138][    T9] usb 5-1: config 0 has no interface number 0
[  770.969248][    T9] usb 5-1: config 0 interface 184 has no altsetting 0
[  770.971849][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  770.971881][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.971961][    T9] usb 5-1: Product: syz
[  770.971971][    T9] usb 5-1: Manufacturer: syz
[  770.971980][    T9] usb 5-1: SerialNumber: syz
[  770.980343][    T9] usb 5-1: config 0 descriptor??
[  771.015641][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  771.018268][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  771.023905][ T5677] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  771.023963][ T5677] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  771.023983][ T5677] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  771.109242][ T5677] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  771.136920][ T5677] usb 6-1: USB disconnect, device number 40
[  771.666807][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  771.666844][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  771.668609][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  771.668656][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  771.668675][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  771.668691][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  771.669011][    T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  771.750256][    T9] usb 5-1: USB disconnect, device number 30
[  771.933999][ T5889] usb 8-1: USB disconnect, device number 39
[  771.958836][T14747] overlayfs: missing 'workdir'
[  772.008266][ T5702] usb 7-1: USB disconnect, device number 92
[  772.484203][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2913'.
[  772.910510][ T5677] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  773.054442][ T5677] usb 6-1: device descriptor read/64, error -71
[  773.289559][ T5677] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  773.419678][ T5677] usb 6-1: device descriptor read/64, error -71
[  773.529161][ T5677] usb usb6-port1: attempt power cycle
[  773.608415][ T5889] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  773.678443][    T9] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  773.758547][ T5889] usb 5-1: Using ep0 maxpacket: 32
[  773.761849][ T5889] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  773.761882][ T5889] usb 5-1: config 0 has no interface number 0
[  773.761917][ T5889] usb 5-1: config 0 interface 184 has no altsetting 0
[  773.764195][ T5889] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  773.764215][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.764227][ T5889] usb 5-1: Product: syz
[  773.764236][ T5889] usb 5-1: Manufacturer: syz
[  773.764245][ T5889] usb 5-1: SerialNumber: syz
[  773.767601][ T5889] usb 5-1: config 0 descriptor??
[  773.829946][    T9] usb 8-1: Using ep0 maxpacket: 32
[  773.833162][    T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  773.833193][    T9] usb 8-1: config 0 has no interface number 0
[  773.833242][    T9] usb 8-1: config 0 interface 184 has no altsetting 0
[  773.836759][    T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  773.836787][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.836807][    T9] usb 8-1: Product: syz
[  773.836821][    T9] usb 8-1: Manufacturer: syz
[  773.836836][    T9] usb 8-1: SerialNumber: syz
[  773.869067][    T9] usb 8-1: config 0 descriptor??
[  773.878612][ T5677] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  773.899319][ T5677] usb 6-1: device descriptor read/8, error -71
[  773.928783][ T5698] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[  774.078607][ T5698] usb 7-1: Using ep0 maxpacket: 32
[  774.084910][ T5698] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  774.084997][ T5698] usb 7-1: config 0 has no interface number 0
[  774.085063][ T5698] usb 7-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  774.085088][ T5698] usb 7-1: config 0 interface 12 has no altsetting 0
[  774.104874][ T5698] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  774.104907][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.104927][ T5698] usb 7-1: Product: syz
[  774.104995][ T5698] usb 7-1: Manufacturer: syz
[  774.105010][ T5698] usb 7-1: SerialNumber: syz
[  774.122590][ T5698] usb 7-1: config 0 descriptor??
[  774.164110][ T5677] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  774.179712][ T5677] usb 6-1: device descriptor read/8, error -71
[  774.185049][ T5698] f81534 7-1:0.12: required endpoints missing
[  774.287224][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  774.287255][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  774.287269][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  774.287567][    T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -61
[  774.289324][ T5677] usb usb6-port1: unable to enumerate USB device
[  774.450236][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  774.450270][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  774.452472][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  774.452503][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  774.452524][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  774.452544][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  774.452896][ T5889] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  774.529224][ T5889] usb 5-1: USB disconnect, device number 31
[  775.147038][T14784] FAULT_INJECTION: forcing a failure.
[  775.147038][T14784] name failslab, interval 1, probability 0, space 0, times 0
[  775.147066][T14784] CPU: 0 UID: 0 PID: 14784 Comm: syz.4.2921 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  775.147084][T14784] Tainted: [L]=SOFTLOCKUP
[  775.147089][T14784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  775.147097][T14784] Call Trace:
[  775.147102][T14784]  <TASK>
[  775.147108][T14784]  dump_stack_lvl+0xe8/0x150
[  775.147129][T14784]  should_fail_ex+0x467/0x600
[  775.147146][T14784]  should_failslab+0xa8/0x100
[  775.147158][T14784]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  775.147175][T14784]  kmem_cache_alloc_noprof+0x9e/0x680
[  775.147191][T14784]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  775.147206][T14784]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  775.147226][T14784]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  775.147273][T14784]  mmu_topup_memory_caches+0x21/0x170
[  775.147307][T14784]  kvm_mmu_load+0x9d/0x22b0
[  775.147325][T14784]  ? kvm_msr_allowed+0x9a/0x490
[  775.147354][T14784]  ? kvm_msr_allowed+0x9a/0x490
[  775.147372][T14784]  ? kvm_msr_allowed+0x9a/0x490
[  775.147388][T14784]  ? kvm_msr_allowed+0x3f4/0x490
[  775.147405][T14784]  ? kvm_msr_allowed+0x9a/0x490
[  775.147421][T14784]  ? kvm_apic_has_interrupt+0x740/0x770
[  775.147442][T14784]  vcpu_run+0x4d37/0x7730
[  775.147496][T14784]  ? __pfx_vcpu_run+0x10/0x10
[  775.147512][T14784]  ? lock_acquire+0x115/0x350
[  775.147534][T14784]  kvm_arch_vcpu_ioctl_run+0xe23/0x1920
[  775.147553][T14784]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1920
[  775.147575][T14784]  kvm_vcpu_ioctl+0xa64/0xfe0
[  775.147597][T14784]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  775.147614][T14784]  ? lockdep_hardirqs_on+0x7a/0x110
[  775.147640][T14784]  ? __fget_files+0x2a/0x420
[  775.147655][T14784]  ? __fget_files+0x2a/0x420
[  775.147667][T14784]  ? __fget_files+0x3a8/0x420
[  775.147678][T14784]  ? __fget_files+0x2a/0x420
[  775.147692][T14784]  ? bpf_lsm_file_ioctl+0x9/0x20
[  775.147704][T14784]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  775.147722][T14784]  __se_sys_ioctl+0xff/0x170
[  775.147738][T14784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.147752][T14784]  do_syscall_64+0x174/0x580
[  775.147778][T14784]  ? trace_irq_disable+0x3b/0x140
[  775.147798][T14784]  ? clear_bhb_loop+0x40/0x90
[  775.147824][T14784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.147845][T14784] RIP: 0033:0x7f259bcede59
[  775.147864][T14784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.147881][T14784] RSP: 002b:00007f2599f25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  775.147904][T14784] RAX: ffffffffffffffda RBX: 00007f259bf76090 RCX: 00007f259bcede59
[  775.147914][T14784] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  775.147922][T14784] RBP: 00007f2599f25090 R08: 0000000000000000 R09: 0000000000000000
[  775.147929][T14784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  775.147937][T14784] R13: 00007f259bf76128 R14: 00007f259bf76090 R15: 00007ffe9d181038
[  775.147957][T14784]  </TASK>
[  775.510969][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2922'.
[  776.106122][T14795] netlink: 1232 bytes leftover after parsing attributes in process `syz.4.2926'.
[  776.275060][ T5889] usb 8-1: USB disconnect, device number 40
[  776.654138][T14799] binder: 14798:14799 ioctl c0306201 0 returned -14
[  776.670552][ T5889] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[  776.752296][ T5698] usb 7-1: USB disconnect, device number 93
[  776.801243][T14803] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2928'.
[  776.819984][ T5889] usb 8-1: Using ep0 maxpacket: 8
[  776.822442][ T5889] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7
[  776.843361][ T5889] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  776.843396][ T5889] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  776.843419][ T5889] usb 8-1: Product: syz
[  776.843434][ T5889] usb 8-1: Manufacturer: syz
[  776.843449][ T5889] usb 8-1: SerialNumber: syz
[  777.051262][T14807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2931'.
[  777.095142][ T5889] usb 8-1: Invalid connection information received from device
[  777.221104][ T5698] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[  777.299727][ T5889] usb 8-1: USB disconnect, device number 41
[  777.381320][ T5698] usb 7-1: Using ep0 maxpacket: 32
[  777.395959][ T5698] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  777.395991][ T5698] usb 7-1: config 0 has no interface number 0
[  777.396045][ T5698] usb 7-1: config 0 interface 184 has no altsetting 0
[  777.399564][ T5698] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  777.399595][ T5698] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.399617][ T5698] usb 7-1: Product: syz
[  777.399631][ T5698] usb 7-1: Manufacturer: syz
[  777.399645][ T5698] usb 7-1: SerialNumber: syz
[  777.409417][ T5698] usb 7-1: config 0 descriptor??
[  777.520640][ T5677] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  777.683056][ T5677] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  777.683084][ T5677] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  777.683098][ T5677] usb 6-1: config 1 has no interface number 0
[  777.683167][ T5677] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  777.683185][ T5677] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  777.683208][ T5677] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  777.683221][ T5677] usb 6-1: config 1 interface 1 has no altsetting 1
[  777.685687][ T5677] usb 6-1: New USB device found, idVendor=0525, idProduct=aba1, bcdDevice= 0.40
[  777.685709][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.685724][ T5677] usb 6-1: Product: syz
[  777.685771][ T5677] usb 6-1: Manufacturer: syz
[  777.685780][ T5677] usb 6-1: SerialNumber: syz
[  777.709923][T14813] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  777.716294][ T5677] usb 6-1: selecting invalid altsetting 1
[  777.720863][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  777.870484][    T9] usb 5-1: Using ep0 maxpacket: 32
[  777.883439][    T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  777.883472][    T9] usb 5-1: config 0 has no interface number 0
[  777.883597][    T9] usb 5-1: config 0 interface 184 has no altsetting 0
[  777.887692][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  777.887913][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.887927][    T9] usb 5-1: Product: syz
[  777.887935][    T9] usb 5-1: Manufacturer: syz
[  777.887944][    T9] usb 5-1: SerialNumber: syz
[  777.941002][    T9] usb 5-1: config 0 descriptor??
[  778.047378][ T5698] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  778.047484][ T5698] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  778.048648][ T5698] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  778.048676][ T5698] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  778.048695][ T5698] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  778.050280][ T5698] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  778.053765][ T5698] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  778.143301][ T5677] cdc_ncm 6-1:1.1: bind() failure
[  778.165785][ T5698] usb 7-1: USB disconnect, device number 94
[  778.242998][ T5677] usb 6-1: USB disconnect, device number 45
[  778.385958][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  778.385983][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  778.385994][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  778.386185][    T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  778.600996][   T10] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  778.809955][T14827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2940'.
[  778.870972][   T10] usb 8-1: Using ep0 maxpacket: 32
[  778.928437][   T10] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  778.928470][   T10] usb 8-1: config 0 has no interface number 0
[  778.928524][   T10] usb 8-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  778.928549][   T10] usb 8-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  778.928577][   T10] usb 8-1: config 0 interface 12 has no altsetting 0
[  778.933495][   T10] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  778.933525][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.933544][   T10] usb 8-1: Product: syz
[  778.933559][   T10] usb 8-1: Manufacturer: syz
[  778.933574][   T10] usb 8-1: SerialNumber: syz
[  778.952893][   T10] usb 8-1: config 0 descriptor??
[  779.010472][   T10] f81534 8-1:0.12: unsupported endpoint max packet size
[  779.991804][ T5677] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[  780.220725][ T5677] usb 6-1: unable to get BOS descriptor or descriptor too short
[  780.222779][ T5677] usb 6-1: not running at top speed; connect to a high speed hub
[  780.225530][ T5677] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  780.225581][ T5677] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  780.227303][ T5677] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  780.227351][ T5677] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  780.234277][ T5677] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  780.234333][ T5677] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  780.235733][ T5677] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  780.235780][ T5677] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  780.243349][ T5677] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  780.243403][ T5677] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  780.247472][ T5677] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  780.247500][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.247520][ T5677] usb 6-1: Product: syz
[  780.247535][ T5677] usb 6-1: Manufacturer: syz
[  780.247549][ T5677] usb 6-1: SerialNumber: syz
[  780.300959][ T5677] usb 6-1: selecting invalid altsetting 1
[  780.496137][T14842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.496823][T14842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.566473][T14842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.567133][T14842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.577333][T14842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.643269][T14842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.645915][    T9] usb 5-1: USB disconnect, device number 32
[  780.658997][T14842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.676613][T14842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.695227][T14842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.718769][T14842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.762704][  T825] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[  781.058997][ T5677] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  781.077314][  T825] usb 7-1: Using ep0 maxpacket: 32
[  781.078290][ T5677] usb 6-1: USB disconnect, device number 46
[  781.080987][  T825] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  781.081016][  T825] usb 7-1: config 0 has no interface number 0
[  781.081247][  T825] usb 7-1: config 0 interface 184 has no altsetting 0
[  781.121240][  T825] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  781.121278][  T825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.121299][  T825] usb 7-1: Product: syz
[  781.121316][  T825] usb 7-1: Manufacturer: syz
[  781.121331][  T825] usb 7-1: SerialNumber: syz
[  781.166930][  T825] usb 7-1: config 0 descriptor??
[  781.170605][ T8125] udevd[8125]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  781.418267][ T5677] usb 8-1: USB disconnect, device number 42
[  781.859663][  T825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  781.859701][  T825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  781.861838][  T825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  781.861869][  T825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  781.861889][  T825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  781.861908][  T825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  781.862260][  T825] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  781.951550][  T825] usb 7-1: USB disconnect, device number 95
[  782.702141][T14896] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2958'.
[  782.833056][   T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  782.985202][   T10] usb 5-1: Using ep0 maxpacket: 32
[  782.989040][   T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  782.989073][   T10] usb 5-1: config 0 has no interface number 0
[  782.989125][   T10] usb 5-1: config 0 interface 184 has no altsetting 0
[  782.998468][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  782.998498][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.998518][   T10] usb 5-1: Product: syz
[  782.998532][   T10] usb 5-1: Manufacturer: syz
[  782.998546][   T10] usb 5-1: SerialNumber: syz
[  783.081282][   T10] usb 5-1: config 0 descriptor??
[  783.185933][T14920] FAULT_INJECTION: forcing a failure.
[  783.185933][T14920] name failslab, interval 1, probability 0, space 0, times 0
[  783.185974][T14920] CPU: 1 UID: 0 PID: 14920 Comm: syz.6.2965 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  783.186005][T14920] Tainted: [L]=SOFTLOCKUP
[  783.186013][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  783.186026][T14920] Call Trace:
[  783.186036][T14920]  <TASK>
[  783.186045][T14920]  dump_stack_lvl+0xe8/0x150
[  783.186079][T14920]  should_fail_ex+0x467/0x600
[  783.186120][T14920]  should_failslab+0xa8/0x100
[  783.186145][T14920]  __kmalloc_noprof+0xfb/0x790
[  783.186176][T14920]  ? kernfs_fop_write_iter+0x158/0x540
[  783.186204][T14920]  ? kernfs_fop_write_iter+0x158/0x540
[  783.186238][T14920]  kernfs_fop_write_iter+0x158/0x540
[  783.186273][T14920]  vfs_write+0x61e/0xbb0
[  783.186309][T14920]  ? __pfx_vfs_write+0x10/0x10
[  783.186338][T14920]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  783.186367][T14920]  ? lockdep_hardirqs_on+0x7a/0x110
[  783.186399][T14920]  ? mutex_lock_nested+0x152/0x1d0
[  783.186420][T14920]  ? fdget_pos+0x252/0x320
[  783.186453][T14920]  ksys_write+0x156/0x270
[  783.186483][T14920]  ? __pfx_ksys_write+0x10/0x10
[  783.186518][T14920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.186543][T14920]  do_syscall_64+0x174/0x580
[  783.186568][T14920]  ? trace_irq_disable+0x3b/0x140
[  783.186591][T14920]  ? clear_bhb_loop+0x40/0x90
[  783.186618][T14920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.186640][T14920] RIP: 0033:0x7feb33f8de59
[  783.186661][T14920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  783.186679][T14920] RSP: 002b:00007feb321e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  783.186703][T14920] RAX: ffffffffffffffda RBX: 00007feb34215fa0 RCX: 00007feb33f8de59
[  783.186719][T14920] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000004
[  783.186733][T14920] RBP: 00007feb321e6090 R08: 0000000000000000 R09: 0000000000000000
[  783.186747][T14920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  783.186761][T14920] R13: 00007feb34216038 R14: 00007feb34215fa0 R15: 00007ffc0b6e28b8
[  783.186798][T14920]  </TASK>
[  783.557674][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  783.557710][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  783.557731][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  783.558064][   T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61
[  783.953712][ T5702] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  784.103703][ T5702] usb 6-1: Using ep0 maxpacket: 32
[  784.105646][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  784.105674][ T5702] usb 6-1: config 0 has no interfaces?
[  784.105708][ T5702] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  784.105733][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.111241][ T5702] usb 6-1: config 0 descriptor??
[  784.283869][  T825] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[  784.319268][ T5889] usb 6-1: USB disconnect, device number 47
[  784.413818][  T825] usb 7-1: device descriptor read/64, error -71
[  784.653895][  T825] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[  784.753952][   T10] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[  784.784995][  T825] usb 7-1: device descriptor read/64, error -71
[  784.895759][  T825] usb usb7-port1: attempt power cycle
[  784.914078][   T10] usb 8-1: Using ep0 maxpacket: 32
[  784.918741][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  784.918778][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  784.918818][   T10] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  784.918845][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.923041][   T10] usb 8-1: config 0 descriptor??
[  784.975507][   T10] hub 8-1:0.0: USB hub found
[  785.235237][  T825] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[  785.254954][  T825] usb 7-1: device descriptor read/8, error -71
[  785.494324][  T825] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[  785.517676][  T825] usb 7-1: device descriptor read/8, error -71
[  785.579403][ T5677] usb 5-1: USB disconnect, device number 33
[  785.628081][  T825] usb usb7-port1: unable to enumerate USB device
[  785.931394][T14962] netlink: 'syz.4.2977': attribute type 2 has an invalid length.
[  785.938863][T14962] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2977'.
[  786.076452][T14965] FAULT_INJECTION: forcing a failure.
[  786.076452][T14965] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  786.076495][T14965] CPU: 1 UID: 0 PID: 14965 Comm: syz.5.2978 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  786.076527][T14965] Tainted: [L]=SOFTLOCKUP
[  786.076536][T14965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  786.076549][T14965] Call Trace:
[  786.076558][T14965]  <TASK>
[  786.076567][T14965]  dump_stack_lvl+0xe8/0x150
[  786.076611][T14965]  should_fail_ex+0x467/0x600
[  786.076642][T14965]  _copy_to_user+0x31/0xb0
[  786.076673][T14965]  simple_read_from_buffer+0xe1/0x170
[  786.076703][T14965]  proc_fail_nth_read+0x1be/0x230
[  786.076730][T14965]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  786.076757][T14965]  ? rw_verify_area+0x250/0x4d0
[  786.076784][T14965]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  786.076807][T14965]  vfs_read+0x219/0xa90
[  786.076839][T14965]  ? __pfx_vfs_read+0x10/0x10
[  786.076866][T14965]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  786.076894][T14965]  ? lockdep_hardirqs_on+0x7a/0x110
[  786.076921][T14965]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  786.076948][T14965]  ? mutex_lock_nested+0x152/0x1d0
[  786.076968][T14965]  ? fdget_pos+0x252/0x320
[  786.077001][T14965]  ksys_read+0x156/0x270
[  786.077029][T14965]  ? __pfx_ksys_read+0x10/0x10
[  786.077062][T14965]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.077085][T14965]  do_syscall_64+0x174/0x580
[  786.077110][T14965]  ? trace_irq_disable+0x3b/0x140
[  786.077132][T14965]  ? clear_bhb_loop+0x40/0x90
[  786.077160][T14965]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.077182][T14965] RIP: 0033:0x7fd0235ae68e
[  786.077204][T14965] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  786.077223][T14965] RSP: 002b:00007fd021845fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  786.077248][T14965] RAX: ffffffffffffffda RBX: 00007fd0218466c0 RCX: 00007fd0235ae68e
[  786.077263][T14965] RDX: 000000000000000f RSI: 00007fd0218460a0 RDI: 0000000000000004
[  786.077277][T14965] RBP: 00007fd021846090 R08: 0000000000000000 R09: 0000000000000000
[  786.077291][T14965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  786.077305][T14965] R13: 00007fd023876038 R14: 00007fd023875fa0 R15: 00007ffc77147ad8
[  786.077341][T14965]  </TASK>
[  786.486825][   T10] hub 8-1:0.0: config failed, can't read hub descriptor (err -22)
[  786.495832][   T10] usbhid 8-1:0.0: can't add hid device: -71
[  786.495966][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  786.536061][   T10] usb 8-1: USB disconnect, device number 43
[  787.315628][ T5889] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  787.465300][  T825] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[  787.465798][ T5889] usb 8-1: Using ep0 maxpacket: 32
[  787.469107][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  787.469134][ T5889] usb 8-1: config 0 has no interfaces?
[  787.469166][ T5889] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  787.469191][ T5889] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.472624][ T5889] usb 8-1: config 0 descriptor??
[  787.615416][  T825] usb 7-1: Using ep0 maxpacket: 32
[  787.618191][  T825] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  787.618222][  T825] usb 7-1: config 0 has no interface number 0
[  787.618280][  T825] usb 7-1: config 0 interface 184 has no altsetting 0
[  787.620705][  T825] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  787.620734][  T825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.620755][  T825] usb 7-1: Product: syz
[  787.620770][  T825] usb 7-1: Manufacturer: syz
[  787.620785][  T825] usb 7-1: SerialNumber: syz
[  787.684048][  T825] usb 7-1: config 0 descriptor??
[  787.729050][ T5889] usb 8-1: USB disconnect, device number 44
[  787.965501][   T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  788.104346][  T825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  788.104381][  T825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  788.104401][  T825] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  788.104747][  T825] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61
[  788.146081][   T10] usb 6-1: Using ep0 maxpacket: 8
[  788.153768][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  788.153808][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  788.153833][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  788.153859][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173
[  788.153901][   T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  788.153926][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.224673][   T10] usb 6-1: config 0 descriptor??
[  788.228617][T14984] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  788.575954][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.576045][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.576131][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.576220][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.583168][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.583266][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.583346][ T5598] Bluetooth: hci6: unexpected event 0x05 length: 0 < 4
[  788.583431][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.583572][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.583650][ T5598] Bluetooth: hci6: unexpected event 0x20 length: 0 < 7
[  788.583734][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.583812][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.583887][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.583963][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584039][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584126][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584204][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584280][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584356][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584434][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584512][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584591][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584668][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584748][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584826][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.584903][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.585000][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.585081][ T5598] Bluetooth: hci6: Received unexpected HCI Event 0x00
[  788.641272][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2987'.
[  788.676498][  T825] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  788.846831][ T5597] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[  788.895500][   T10] usb 6-1: USB disconnect, device number 48
[  788.906474][  T825] usb 5-1: Using ep0 maxpacket: 32
[  788.913317][  T825] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  788.913348][  T825] usb 5-1: config 0 has no interface number 0
[  788.913397][  T825] usb 5-1: config 0 interface 184 has no altsetting 0
[  788.920374][  T825] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  788.920404][  T825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.920423][  T825] usb 5-1: Product: syz
[  788.920437][  T825] usb 5-1: Manufacturer: syz
[  788.920452][  T825] usb 5-1: SerialNumber: syz
[  788.986302][  T825] usb 5-1: config 0 descriptor??
[  789.606765][  T825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61
[  789.606803][  T825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  789.696457][   T10] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[  789.809239][  T825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  789.809349][  T825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  789.809372][  T825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  789.809392][  T825] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  789.809736][  T825] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  789.847003][  T825] usb 5-1: USB disconnect, device number 34
[  789.876579][   T10] usb 8-1: Using ep0 maxpacket: 16
[  789.879860][   T10] usb 8-1: config 0 has no interfaces?
[  789.884356][   T10] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  789.884388][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.884408][   T10] usb 8-1: Product: syz
[  789.884424][   T10] usb 8-1: Manufacturer: syz
[  789.884439][   T10] usb 8-1: SerialNumber: syz
[  789.937320][   T10] usb 8-1: config 0 descriptor??
[  790.136209][  T825] usb 7-1: USB disconnect, device number 100
[  790.146183][T15003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  790.154797][T15003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  790.181132][T15003] FAULT_INJECTION: forcing a failure.
[  790.181132][T15003] name failslab, interval 1, probability 0, space 0, times 0
[  790.181174][T15003] CPU: 1 UID: 0 PID: 15003 Comm: syz.7.2992 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  790.181205][T15003] Tainted: [L]=SOFTLOCKUP
[  790.181214][T15003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  790.181227][T15003] Call Trace:
[  790.181235][T15003]  <TASK>
[  790.181245][T15003]  dump_stack_lvl+0xe8/0x150
[  790.181279][T15003]  should_fail_ex+0x467/0x600
[  790.181309][T15003]  should_failslab+0xa8/0x100
[  790.181334][T15003]  __kvmalloc_node_noprof+0x176/0x880
[  790.181367][T15003]  ? nla_strdup+0x9d/0x140
[  790.181392][T15003]  ? nla_strdup+0xb8/0x140
[  790.181418][T15003]  ? nf_tables_newchain+0x1c9a/0x28b0
[  790.181443][T15003]  ? nf_tables_newchain+0x1c9a/0x28b0
[  790.181473][T15003]  nf_tables_newchain+0x1c9a/0x28b0
[  790.181513][T15003]  ? __pfx_nf_tables_newchain+0x10/0x10
[  790.181570][T15003]  ? lock_acquire+0x115/0x350
[  790.181593][T15003]  ? nfnl_pernet+0x23/0x240
[  790.181646][T15003]  ? __nla_parse+0x40/0x60
[  790.181677][T15003]  nfnetlink_rcv+0x1291/0x28d0
[  790.181740][T15003]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  790.181783][T15003]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  790.181813][T15003]  ? ref_tracker_free+0x668/0x820
[  790.181867][T15003]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  790.181895][T15003]  ? lockdep_hardirqs_on+0x7a/0x110
[  790.181945][T15003]  netlink_unicast+0x7f5/0x990
[  790.181982][T15003]  netlink_sendmsg+0x813/0xb40
[  790.182019][T15003]  ? __pfx_netlink_sendmsg+0x10/0x10
[  790.182049][T15003]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  790.182082][T15003]  ? __kernel_text_address+0xd/0x30
[  790.182111][T15003]  ? unwind_get_return_address+0x4d/0x90
[  790.182135][T15003]  ? __pfx_netlink_sendmsg+0x10/0x10
[  790.182160][T15003]  sock_sendmsg_nosec+0x13a/0x180
[  790.182194][T15003]  ____sys_sendmsg+0x565/0x870
[  790.182231][T15003]  ? __pfx_____sys_sendmsg+0x10/0x10
[  790.182266][T15003]  ? import_iovec+0x73/0xa0
[  790.182298][T15003]  ___sys_sendmsg+0x2a5/0x360
[  790.182322][T15003]  ? __lock_acquire+0x6df/0x2e40
[  790.182348][T15003]  ? __pfx____sys_sendmsg+0x10/0x10
[  790.182411][T15003]  ? __fget_files+0x2a/0x420
[  790.182435][T15003]  ? __fget_files+0x3a8/0x420
[  790.182471][T15003]  __x64_sys_sendmsg+0x1b7/0x290
[  790.182500][T15003]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  790.182548][T15003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  790.182572][T15003]  do_syscall_64+0x174/0x580
[  790.182607][T15003]  ? trace_irq_disable+0x3b/0x140
[  790.182629][T15003]  ? clear_bhb_loop+0x40/0x90
[  790.182657][T15003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  790.182680][T15003] RIP: 0033:0x7f307cf0de59
[  790.182701][T15003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  790.182720][T15003] RSP: 002b:00007f307b166028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  790.182744][T15003] RAX: ffffffffffffffda RBX: 00007f307d195fa0 RCX: 00007f307cf0de59
[  790.182761][T15003] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000018
[  790.182776][T15003] RBP: 00007f307b166090 R08: 0000000000000000 R09: 0000000000000000
[  790.182791][T15003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  790.182806][T15003] R13: 00007f307d196038 R14: 00007f307d195fa0 R15: 00007ffeff440dc8
[  790.182842][T15003]  </TASK>
[  790.435824][ T5889] usb 8-1: USB disconnect, device number 45
[  790.602374][T15013] netlink: 495 bytes leftover after parsing attributes in process `syz.6.2996'.
[  790.649144][  T825] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  790.797004][  T825] usb 5-1: Using ep0 maxpacket: 32
[  790.800756][  T825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  790.800783][  T825] usb 5-1: config 0 has no interfaces?
[  790.800816][  T825] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  790.800835][  T825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.805493][  T825] usb 5-1: config 0 descriptor??
[  791.017598][ T5698] usb 7-1: new high-speed USB device number 101 using dummy_hcd
[  791.054274][  T825] usb 5-1: USB disconnect, device number 35
[  791.096334][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3000'.
[  791.197887][ T5698] usb 7-1: Using ep0 maxpacket: 32
[  791.199949][ T5698] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  791.199978][ T5698] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  791.200008][ T5698] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  791.200059][ T5698] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  791.200083][ T5698] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  791.200107][ T5698] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  791.200144][ T5698] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  791.200158][ T5698] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.204176][ T5698] usb 7-1: config 0 descriptor??
[  791.217062][   T10] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  791.407456][   T10] usb 6-1: Using ep0 maxpacket: 16
[  791.411808][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  791.413424][   T10] usb 6-1: config 2 has an invalid interface number: 57 but max is 0
[  791.413463][   T10] usb 6-1: config 2 has no interface number 0
[  791.413560][   T10] usb 6-1: config 2 interface 57 has no altsetting 0
[  791.445167][   T10] usb 6-1: string descriptor 0 read error: -22
[  791.458050][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  791.458085][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.883542][T15019] Sensor B: =================  START STATUS  =================
[  791.883565][T15019] Sensor B: Test Pattern: 75% Colorbar
[  791.883588][T15019] Sensor B: Show Information: All
[  791.883607][T15019] Sensor B: Vertical Flip: false
[  791.883625][T15019] Sensor B: Horizontal Flip: false
[  791.883645][T15019] Sensor B: Brightness: 128
[  791.883666][T15019] Sensor B: Contrast: 128
[  791.883685][T15019] Sensor B: Hue: 0
[  791.883703][T15019] Sensor B: Saturation: 128
[  791.883725][T15019] Sensor B: Pixel Rate: 160000000
[  791.883744][T15019] Sensor B: Horizontal Blanking: 800
[  791.883764][T15019] Sensor B: Vertical Blanking: 3223
[  791.883782][T15019] Sensor B: ==================  END STATUS  ==================
[  791.966044][   T10] video4linux radio48: keene_cmd_main failed (-71)
[  791.966067][   T10] radio-keene 6-1:2.57: V4L2 device registered as radio48
[  791.977649][ T5889] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  792.005272][   T10] usb 6-1: USB disconnect, device number 49
[  792.111773][ T5889] usb 5-1: device descriptor read/64, error -71
[  792.357827][ T5889] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  792.489605][ T5889] usb 5-1: device descriptor read/64, error -71
[  792.578097][    T9] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[  792.599197][ T5889] usb usb5-port1: attempt power cycle
[  792.747972][    T9] usb 8-1: Using ep0 maxpacket: 32
[  792.756708][    T9] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  792.756730][    T9] usb 8-1: config 0 has no interface number 0
[  792.756758][    T9] usb 8-1: config 0 interface 184 has no altsetting 0
[  792.783289][    T9] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  792.783315][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.783369][    T9] usb 8-1: Product: syz
[  792.783379][    T9] usb 8-1: Manufacturer: syz
[  792.783388][    T9] usb 8-1: SerialNumber: syz
[  792.798241][    T9] usb 8-1: config 0 descriptor??
[  792.898127][   T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  792.937987][ T5889] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  792.958786][ T5889] usb 5-1: device descriptor read/8, error -71
[  793.058112][   T10] usb 6-1: Using ep0 maxpacket: 16
[  793.063194][T15037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  793.064876][T15037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  793.199059][ T5889] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  793.219243][ T5889] usb 5-1: device descriptor read/8, error -71
[  793.328541][ T5889] usb usb5-port1: unable to enumerate USB device
[  793.439191][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61
[  793.439227][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  793.640687][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  793.640723][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  793.640986][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  793.641008][    T9] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  793.641829][    T9] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[  793.704768][    T9] usb 8-1: USB disconnect, device number 46
[  793.800847][ T5698] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 101 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  793.826846][ T5698] usb 7-1: USB disconnect, device number 101
[  793.863754][ T5698] usblp0: removed
[  794.227326][T15049] pim6reg1: entered promiscuous mode
[  794.227345][T15049] pim6reg1: entered allmulticast mode
[  794.245211][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  794.246235][   T10] usb 6-1: unable to read config index 0 descriptor/start: -71
[  794.246259][   T10] usb 6-1: can't read configurations, error -71
[  794.587979][T15053] FAULT_INJECTION: forcing a failure.
[  794.587979][T15053] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  794.588020][T15053] CPU: 0 UID: 0 PID: 15053 Comm: syz.7.3009 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  794.588050][T15053] Tainted: [L]=SOFTLOCKUP
[  794.588058][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  794.588072][T15053] Call Trace:
[  794.588081][T15053]  <TASK>
[  794.588090][T15053]  dump_stack_lvl+0xe8/0x150
[  794.588124][T15053]  should_fail_ex+0x467/0x600
[  794.588153][T15053]  _copy_from_iter+0x1d3/0x1660
[  794.588185][T15053]  ? trace_kmem_cache_alloc+0x29/0xe0
[  794.588219][T15053]  ? __pfx__copy_from_iter+0x10/0x10
[  794.588248][T15053]  ? __alloc_skb+0x276/0x7a0
[  794.588269][T15053]  ? __alloc_skb+0x276/0x7a0
[  794.588294][T15053]  ? netlink_sendmsg+0x650/0xb40
[  794.588320][T15053]  ? skb_put+0x112/0x210
[  794.588345][T15053]  netlink_sendmsg+0x6c0/0xb40
[  794.588381][T15053]  ? __pfx_netlink_sendmsg+0x10/0x10
[  794.588418][T15053]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  794.588450][T15053]  ? __kernel_text_address+0xd/0x30
[  794.588479][T15053]  ? unwind_get_return_address+0x4d/0x90
[  794.588503][T15053]  ? __pfx_netlink_sendmsg+0x10/0x10
[  794.588526][T15053]  sock_sendmsg_nosec+0x13a/0x180
[  794.588558][T15053]  ____sys_sendmsg+0x565/0x870
[  794.588591][T15053]  ? __pfx_____sys_sendmsg+0x10/0x10
[  794.588627][T15053]  ? import_iovec+0x73/0xa0
[  794.588655][T15053]  ___sys_sendmsg+0x2a5/0x360
[  794.588678][T15053]  ? __lock_acquire+0x6df/0x2e40
[  794.588704][T15053]  ? __pfx____sys_sendmsg+0x10/0x10
[  794.588763][T15053]  ? __fget_files+0x2a/0x420
[  794.588785][T15053]  ? __fget_files+0x3a8/0x420
[  794.588819][T15053]  __x64_sys_sendmsg+0x1b7/0x290
[  794.588848][T15053]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  794.588892][T15053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.588917][T15053]  do_syscall_64+0x174/0x580
[  794.588944][T15053]  ? trace_irq_disable+0x3b/0x140
[  794.588967][T15053]  ? clear_bhb_loop+0x40/0x90
[  794.588994][T15053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.589016][T15053] RIP: 0033:0x7f307cf0de59
[  794.589037][T15053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  794.589056][T15053] RSP: 002b:00007f307b166028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  794.589080][T15053] RAX: ffffffffffffffda RBX: 00007f307d195fa0 RCX: 00007f307cf0de59
[  794.589097][T15053] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006
[  794.589111][T15053] RBP: 00007f307b166090 R08: 0000000000000000 R09: 0000000000000000
[  794.589125][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.589138][T15053] R13: 00007f307d196038 R14: 00007f307d195fa0 R15: 00007ffeff440dc8
[  794.589173][T15053]  </TASK>
[  794.972907][T15060] FAULT_INJECTION: forcing a failure.
[  794.972907][T15060] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  794.972949][T15060] CPU: 1 UID: 0 PID: 15060 Comm: syz.5.3010 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  794.972977][T15060] Tainted: [L]=SOFTLOCKUP
[  794.972985][T15060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  794.972998][T15060] Call Trace:
[  794.973006][T15060]  <TASK>
[  794.973025][T15060]  dump_stack_lvl+0xe8/0x150
[  794.973059][T15060]  should_fail_ex+0x467/0x600
[  794.973088][T15060]  _copy_to_user+0x31/0xb0
[  794.973119][T15060]  hci_get_conn_list+0x591/0x780
[  794.973152][T15060]  ? __pfx_hci_get_conn_list+0x10/0x10
[  794.973179][T15060]  ? hci_sock_ioctl+0x583/0x940
[  794.973205][T15060]  sock_do_ioctl+0x101/0x320
[  794.973237][T15060]  ? __pfx_sock_do_ioctl+0x10/0x10
[  794.973283][T15060]  sock_ioctl+0x57d/0x7f0
[  794.973314][T15060]  ? __pfx_sock_ioctl+0x10/0x10
[  794.973342][T15060]  ? __fget_files+0x2a/0x420
[  794.973365][T15060]  ? __fget_files+0x3a8/0x420
[  794.973385][T15060]  ? __fget_files+0x2a/0x420
[  794.973409][T15060]  ? bpf_lsm_file_ioctl+0x9/0x20
[  794.973429][T15060]  ? __pfx_sock_ioctl+0x10/0x10
[  794.973457][T15060]  __se_sys_ioctl+0xff/0x170
[  794.973481][T15060]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.973505][T15060]  do_syscall_64+0x174/0x580
[  794.973530][T15060]  ? trace_irq_disable+0x3b/0x140
[  794.973552][T15060]  ? clear_bhb_loop+0x40/0x90
[  794.973578][T15060]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  794.973599][T15060] RIP: 0033:0x7fd0235ede59
[  794.973620][T15060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  794.973639][T15060] RSP: 002b:00007fd021846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  794.973663][T15060] RAX: ffffffffffffffda RBX: 00007fd023875fa0 RCX: 00007fd0235ede59
[  794.973680][T15060] RDX: 0000200000000000 RSI: 00000000800448d4 RDI: 0000000000000004
[  794.973695][T15060] RBP: 00007fd021846090 R08: 0000000000000000 R09: 0000000000000000
[  794.973709][T15060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  794.973723][T15060] R13: 00007fd023876038 R14: 00007fd023875fa0 R15: 00007ffc77147ad8
[  794.973760][T15060]  </TASK>
[  795.673051][T15085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3017'.
[  795.800026][ T5677] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  795.803977][   T10] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[  795.959508][ T5677] usb 5-1: Using ep0 maxpacket: 16
[  795.959681][   T10] usb 7-1: Using ep0 maxpacket: 32
[  795.962747][ T5677] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  795.962775][ T5677] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  795.962792][ T5677] usb 5-1: config 0 has no interface number 0
[  795.965955][   T10] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  795.965981][   T10] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  795.966068][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  795.966120][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  795.966142][   T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  795.966165][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  795.966579][   T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  795.966603][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.008413][   T10] usb 7-1: config 0 descriptor??
[  796.085806][ T5677] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  796.085828][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.085840][ T5677] usb 5-1: Product: syz
[  796.085890][ T5677] usb 5-1: Manufacturer: syz
[  796.085899][ T5677] usb 5-1: SerialNumber: syz
[  796.098522][ T5677] usb 5-1: config 0 descriptor??
[  796.333268][ T5889] usb 5-1: USB disconnect, device number 40
[  796.439910][ T5677] usb 8-1: new high-speed USB device number 47 using dummy_hcd
[  796.589831][ T5677] usb 8-1: device descriptor read/64, error -71
[  796.727260][ T5597] Bluetooth: hci2: command 0x0406 tx timeout
[  796.928854][ T5677] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[  797.240649][ T5677] usb 8-1: device descriptor read/64, error -71
[  797.361036][ T5677] usb usb8-port1: attempt power cycle
[  797.505033][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3026'.
[  797.713040][ T5677] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[  797.734850][ T5677] usb 8-1: device descriptor read/8, error -71
[  797.973870][T15125] binder_alloc: 15121: binder_alloc_buf, no vma
[  797.980677][ T5677] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[  798.002645][ T5677] usb 8-1: device descriptor read/8, error -71
[  798.112634][ T5677] usb usb8-port1: unable to enumerate USB device
[  798.180630][ T5889] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  798.211752][T15127] FAULT_INJECTION: forcing a failure.
[  798.211752][T15127] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  798.211793][T15127] CPU: 1 UID: 0 PID: 15127 Comm: syz.5.3032 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  798.211824][T15127] Tainted: [L]=SOFTLOCKUP
[  798.211831][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  798.211843][T15127] Call Trace:
[  798.211853][T15127]  <TASK>
[  798.211861][T15127]  dump_stack_lvl+0xe8/0x150
[  798.211896][T15127]  should_fail_ex+0x467/0x600
[  798.211925][T15127]  prepare_alloc_pages+0x223/0x650
[  798.211964][T15127]  __alloc_frozen_pages_noprof+0x193/0x5b0
[  798.211992][T15127]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  798.212016][T15127]  ? __pfx_policy_nodemask+0x10/0x10
[  798.212047][T15127]  alloc_pages_mpol+0xd4/0x280
[  798.212068][T15127]  alloc_pages_noprof+0xd2/0x2f0
[  798.212088][T15127]  pte_alloc_one+0x22/0x380
[  798.212107][T15127]  __pte_alloc+0x25/0x1a0
[  798.212128][T15127]  do_pte_missing+0x1bda/0x28f0
[  798.212148][T15127]  ? rt_spin_unlock+0x163/0x200
[  798.212167][T15127]  ? __pmd_alloc+0x41b/0x5e0
[  798.212193][T15127]  handle_mm_fault+0xf95/0x28d0
[  798.212217][T15127]  ? mt_find+0x186/0x630
[  798.212242][T15127]  ? handle_mm_fault+0xeb/0x28d0
[  798.212272][T15127]  ? __pfx_handle_mm_fault+0x10/0x10
[  798.212331][T15127]  ? lock_mm_and_find_vma+0xa7/0x340
[  798.212366][T15127]  do_user_addr_fault+0x744/0x1340
[  798.212402][T15127]  exc_page_fault+0x6a/0xc0
[  798.212424][T15127]  asm_exc_page_fault+0x26/0x30
[  798.212440][T15127] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  798.212459][T15127] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 3f 34 05 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  798.212474][T15127] RSP: 0018:ffffc90007d57b88 EFLAGS: 00050206
[  798.212490][T15127] RAX: ffffffff84cc6c01 RBX: 0000000000000061 RCX: 0000000000000061
[  798.212502][T15127] RDX: 0000000000000000 RSI: ffff88805c41b000 RDI: 0000200000000240
[  798.212513][T15127] RBP: ffffc90007d57d30 R08: ffff88805c41b060 R09: 1ffff1100b88360c
[  798.212525][T15127] R10: dffffc0000000000 R11: ffffed100b88360d R12: 00002000000002a1
[  798.212537][T15127] R13: 00007ffffffff000 R14: ffff88805c41b000 R15: 0000200000000240
[  798.212556][T15127]  ? __pfx__copy_to_user+0x1/0x10
[  798.212583][T15127]  _copy_to_user+0x8a/0xb0
[  798.212606][T15127]  syslog_print_all+0x26b/0x450
[  798.212630][T15127]  ? __pfx_syslog_print_all+0x10/0x10
[  798.212666][T15127]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  798.212690][T15127]  do_syslog+0x3b4/0x7d0
[  798.212712][T15127]  ? __pfx_do_syslog+0x10/0x10
[  798.212738][T15127]  ? fput+0xa0/0xd0
[  798.212762][T15127]  ? ksys_write+0x248/0x270
[  798.212783][T15127]  ? __pfx_ksys_write+0x10/0x10
[  798.212806][T15127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.212823][T15127]  __x64_sys_syslog+0x7c/0x90
[  798.212843][T15127]  do_syscall_64+0x174/0x580
[  798.212863][T15127]  ? trace_irq_disable+0x3b/0x140
[  798.212880][T15127]  ? clear_bhb_loop+0x40/0x90
[  798.212900][T15127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  798.212916][T15127] RIP: 0033:0x7fd0235ede59
[  798.212932][T15127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  798.212946][T15127] RSP: 002b:00007fd021846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067
[  798.212962][T15127] RAX: ffffffffffffffda RBX: 00007fd023875fa0 RCX: 00007fd0235ede59
[  798.212975][T15127] RDX: 0000000000001000 RSI: 0000200000000240 RDI: 0000000000000003
[  798.212986][T15127] RBP: 00007fd021846090 R08: 0000000000000000 R09: 0000000000000000
[  798.212996][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  798.213007][T15127] R13: 00007fd023876038 R14: 00007fd023875fa0 R15: 00007ffc77147ad8
[  798.213034][T15127]  </TASK>
[  798.330851][ T5889] usb 5-1: Using ep0 maxpacket: 32
[  798.334671][ T5889] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  798.334700][ T5889] usb 5-1: config 0 has no interface number 0
[  798.334749][ T5889] usb 5-1: config 0 interface 12 has no altsetting 0
[  798.339557][ T5889] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  798.339587][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.339608][ T5889] usb 5-1: Product: syz
[  798.339624][ T5889] usb 5-1: Manufacturer: syz
[  798.339640][ T5889] usb 5-1: SerialNumber: syz
[  798.355575][ T5889] usb 5-1: config 0 descriptor??
[  798.690680][   T10] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 102 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  798.715166][   T10] usb 7-1: USB disconnect, device number 102
[  798.743499][   T10] usblp0: removed
[  798.797589][ T5889] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  798.797626][ T5889] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  798.797637][ T5889] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  798.797693][ T5889] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  798.829487][ T5889] usb 5-1: USB disconnect, device number 41
[  799.093890][T15135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3035'.
[  799.531293][  T825] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[  799.685520][  T825] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  799.685566][  T825] usb 8-1: config 0 interface 0 has no altsetting 0
[  799.687860][  T825] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  799.687898][  T825] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.687920][  T825] usb 8-1: Product: syz
[  799.687935][  T825] usb 8-1: Manufacturer: syz
[  799.687950][  T825] usb 8-1: SerialNumber: syz
[  799.694749][  T825] usb 8-1: config 0 descriptor??
[  799.730904][  T825] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  799.741635][  T825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  799.744049][  T825] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  799.744120][  T825] usb 8-1: media controller created
[  799.795593][  T825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  799.898926][  T825] DVB: Unable to find symbol tda10046_attach()
[  799.898943][  T825] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  799.898958][  T825] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  799.948833][T15145] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3039'.
[  799.954041][T15145] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3039'.
[  799.976138][T15147] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3039'.
[  800.333601][T15159] bridge0: left promiscuous mode
[  800.364247][T15159] 8021q: adding VLAN 0 to HW filter on device bond0
[  800.402320][   T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  800.486301][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3044'.
[  800.564244][   T10] usb 6-1: Using ep0 maxpacket: 32
[  800.567296][   T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  800.567326][   T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  800.567349][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  800.567404][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  800.567430][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  800.567456][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  800.567501][   T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  800.567526][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.661843][   T10] usb 6-1: config 0 descriptor??
[  800.892024][ T5889] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[  801.032517][   T32] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  801.042054][ T5889] usb 7-1: Using ep0 maxpacket: 32
[  801.074630][ T5889] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  801.074662][ T5889] usb 7-1: config 0 has no interface number 0
[  801.074755][ T5889] usb 7-1: config 0 interface 12 has no altsetting 0
[  801.079001][ T5889] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  801.079033][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  801.079117][ T5889] usb 7-1: Product: syz
[  801.079133][ T5889] usb 7-1: Manufacturer: syz
[  801.079147][ T5889] usb 7-1: SerialNumber: syz
[  801.110367][ T5889] usb 7-1: config 0 descriptor??
[  801.172408][   T32] usb 5-1: device descriptor read/64, error -71
[  801.355881][  T825] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  801.376550][  T825] usb 8-1: USB disconnect, device number 51
[  801.412280][   T32] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  801.545528][   T32] usb 5-1: device descriptor read/64, error -71
[  801.596667][ T5889] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  801.596729][ T5889] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  801.596748][ T5889] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  801.596857][ T5889] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  801.620200][ T5889] usb 7-1: USB disconnect, device number 103
[  801.652778][   T32] usb usb5-port1: attempt power cycle
[  802.002615][   T32] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  802.023637][   T32] usb 5-1: device descriptor read/8, error -71
[  802.217302][T15175] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  802.262720][   T32] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  802.283448][   T32] usb 5-1: device descriptor read/8, error -71
[  802.313562][   T39] INFO: task syz.0.2488:13349 blocked for more than 143 seconds.
[  802.313603][   T39]       Tainted: G             L      syzkaller #0
[  802.313614][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  802.313623][   T39] task:syz.0.2488      state:D stack:26952 pid:13349 tgid:13341 ppid:11378  task_flags:0x400140 flags:0x00080002
[  802.313687][   T39] Call Trace:
[  802.313697][   T39]  <TASK>
[  802.313712][   T39]  __schedule+0x1709/0x5530
[  802.313782][   T39]  ? irqentry_exit+0x218/0x8f0
[  802.313808][   T39]  ? trace_irq_disable+0x3b/0x140
[  802.313833][   T39]  ? __pfx___schedule+0x10/0x10
[  802.313876][   T39]  rt_mutex_schedule+0x76/0xf0
[  802.313898][   T39]  rt_mutex_slowlock_block+0x55c/0x680
[  802.313938][   T39]  ? rt_mutex_slowlock_block+0x33a/0x680
[  802.313959][   T39]  rt_mutex_slowlock+0x2d4/0x780
[  802.313975][   T39]  ? rt_mutex_slowlock+0x1f2/0x780
[  802.313997][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  802.314039][   T39]  ? nfsd_nl_threads_get_doit+0x1c0/0x790
[  802.314075][   T39]  ? nfsd_nl_threads_get_doit+0x1c0/0x790
[  802.314100][   T39]  mutex_lock_nested+0x168/0x1d0
[  802.314129][   T39]  nfsd_nl_threads_get_doit+0x1c0/0x790
[  802.314167][   T39]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  802.314196][   T39]  ? __nla_parse+0x40/0x60
[  802.314226][   T39]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  802.314257][   T39]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  802.314311][   T39]  genl_family_rcv_msg_doit+0x233/0x340
[  802.314341][   T39]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  802.314407][   T39]  genl_rcv_msg+0x614/0x7a0
[  802.314445][   T39]  ? __pfx_genl_rcv_msg+0x10/0x10
[  802.314468][   T39]  ? ref_tracker_free+0x668/0x820
[  802.314481][   T39]  ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10
[  802.314498][   T39]  ? ____sys_sendmsg+0x565/0x870
[  802.314516][   T39]  ? ___sys_sendmsg+0x2a5/0x360
[  802.314539][   T39]  ? __x64_sys_sendmsg+0x1b7/0x290
[  802.314563][   T39]  ? do_syscall_64+0x174/0x580
[  802.314589][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.314621][   T39]  netlink_rcv_skb+0x226/0x4a0
[  802.314645][   T39]  ? __pfx_genl_rcv_msg+0x10/0x10
[  802.314663][   T39]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  802.314688][   T39]  ? netlink_deliver_tap+0x2e/0x1b0
[  802.314713][   T39]  ? netlink_deliver_tap+0x2e/0x1b0
[  802.314744][   T39]  genl_rcv+0x28/0x40
[  802.314773][   T39]  netlink_unicast+0x7f5/0x990
[  802.314808][   T39]  netlink_sendmsg+0x813/0xb40
[  802.314833][   T39]  ? __pfx_netlink_sendmsg+0x10/0x10
[  802.314879][   T39]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  802.314920][   T39]  ? __pfx_netlink_sendmsg+0x10/0x10
[  802.314946][   T39]  sock_sendmsg_nosec+0x13a/0x180
[  802.314978][   T39]  ____sys_sendmsg+0x565/0x870
[  802.315008][   T39]  ? __pfx_____sys_sendmsg+0x10/0x10
[  802.315028][   T39]  ? import_iovec+0x73/0xa0
[  802.315047][   T39]  ___sys_sendmsg+0x2a5/0x360
[  802.315071][   T39]  ? __lock_acquire+0x6df/0x2e40
[  802.315099][   T39]  ? __pfx____sys_sendmsg+0x10/0x10
[  802.315129][   T39]  ? futex_wait+0x2a2/0x390
[  802.315184][   T39]  ? __fget_files+0x2a/0x420
[  802.315197][   T39]  ? __fget_files+0x3a8/0x420
[  802.315216][   T39]  __x64_sys_sendmsg+0x1b7/0x290
[  802.315241][   T39]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  802.315288][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.315313][   T39]  do_syscall_64+0x174/0x580
[  802.315339][   T39]  ? trace_irq_disable+0x3b/0x140
[  802.315360][   T39]  ? clear_bhb_loop+0x40/0x90
[  802.315385][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.315410][   T39] RIP: 0033:0x7f9930c1de59
[  802.315431][   T39] RSP: 002b:00007f992ee55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  802.315453][   T39] RAX: ffffffffffffffda RBX: 00007f9930ea6090 RCX: 00007f9930c1de59
[  802.315471][   T39] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000008
[  802.315485][   T39] RBP: 00007f9930cb3e6f R08: 0000000000000000 R09: 0000000000000000
[  802.315498][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  802.315511][   T39] R13: 00007f9930ea6128 R14: 00007f9930ea6090 R15: 00007ffd55dbdb38
[  802.315538][   T39]  </TASK>
[  802.315555][   T39] 
[  802.315555][   T39] Showing all locks held in the system:
[  802.315562][   T39] locks held by kworker/0:1/10: 5, on CPU#0:
[  802.315572][   T39]  #0: ffff8880216b6938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[  802.315626][   T39]  #1: ffffc900000f7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[  802.315675][   T39]  #2: ffff888022b28210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0
[  802.315726][   T39]  #3: ffff888063cb0210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  802.315758][   T39]  #4: ffff888037de61d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  802.315805][   T39] locks held by ktimers/0/16: 5, last CPU#0:
[  802.315821][   T39]  #0: ffff8880b863b8e0 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  802.315871][   T39]  #1: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  802.315909][   T39]  #2: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  802.315945][   T39]  #3: ffff8880b86284b8 (_T->lock){....}-{2:2}, at: rt_spin_lock+0x1e0/0x400
[  802.315993][   T39]  #4: ffff8880b8628458 (hrtimer_bases.lock){-...}-{2:2}, at: __hrtimer_run_queues+0x495/0xaf0
[  802.316049][   T39] locks held by kworker/1:0/32: 5, on CPU#1:
[  802.316061][   T39]  #0: ffff8880216b6938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[  802.316090][   T39]  #1: ffffc90000a6fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7fd/0x1480
[  802.316132][   T39]  #2: ffff888022b98210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0
[  802.316188][   T39]  #3: ffff888022b8e658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0
[  802.316242][   T39]  #4: ffff888020790758 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0
[  802.316283][   T39] locks held by khungtaskd/39: 1, last CPU#1:
[  802.316298][   T39]  #0: ffffffff8e3c3840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  802.316375][   T39] locks held by getty/5352: 2, on CPU#0:
[  802.316391][   T39]  #0: ffff888034dc40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  802.316454][   T39]  #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[  802.316513][   T39] locks held by syz.2.1857/11409: 2, on CPU#0:
[  802.316529][   T39]  #0: ffffffff8f833020 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  802.316582][   T39]  #1: ffffffff8e6eda98 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x136/0x16e0
[  802.316619][   T39] locks held by syz.0.2488/13349: 2, on CPU#0:
[  802.316628][   T39]  #0: ffffffff8f833020 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  802.316680][   T39]  #1: ffffffff8e6eda98 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790
[  802.316737][   T39] locks held by syz.6.3051/15177: 2, last CPU#1:
[  802.316751][   T39]  #0: ffff888050545a00 (&client->ioctl_mutex){+.+.}-{4:4}, at: snd_seq_write+0x1f7/0x830
[  802.316790][   T39]  #1: ffff88805c2098c8 (&q->owner_lock){+.+.}-{3:3}, at: snd_seq_control_queue+0xbd7/0x10f0
[  802.316827][   T39] 
[  802.316833][   T39] =============================================
[  802.316833][   T39] 
[  802.316843][   T39] NMI backtrace for cpu 1
[  802.316862][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  802.316890][   T39] Tainted: [L]=SOFTLOCKUP
[  802.316898][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  802.316909][   T39] Call Trace:
[  802.316919][   T39]  <TASK>
[  802.316927][   T39]  dump_stack_lvl+0xe8/0x150
[  802.316950][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  802.316965][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  802.316985][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  802.317010][   T39]  sys_info+0x135/0x170
[  802.317030][   T39]  watchdog+0xfd7/0x1030
[  802.317058][   T39]  ? watchdog+0x1c7/0x1030
[  802.317085][   T39]  kthread+0x388/0x470
[  802.317112][   T39]  ? __pfx_watchdog+0x10/0x10
[  802.317127][   T39]  ? __pfx_kthread+0x10/0x10
[  802.317147][   T39]  ret_from_fork+0x514/0xb70
[  802.317165][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  802.317190][   T39]  ? __switch_to+0xc89/0x1420
[  802.317220][   T39]  ? __pfx_kthread+0x10/0x10
[  802.317248][   T39]  ret_from_fork_asm+0x1a/0x30
[  802.317291][   T39]  </TASK>
[  802.317298][   T39] Sending NMI from CPU 1 to CPUs 0:
[  802.317336][    C0] NMI backtrace for cpu 0
[  802.317363][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  802.317386][    C0] Tainted: [L]=SOFTLOCKUP
[  802.317392][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  802.317402][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  802.317426][    C0] Code: 2b 75 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d4 1a 00 fb f4 <e9> cc cf 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  802.317440][    C0] RSP: 0018:ffffffff8e007ca0 EFLAGS: 00000242
[  802.317456][    C0] RAX: 00000000005b9807 RBX: ffffffff8199db90 RCX: 0000000080000001
[  802.317469][    C0] RDX: 0000000000000001 RSI: ffffffff8d987f54 RDI: ffffffff8bcbc380
[  802.317481][    C0] RBP: ffffffff8e007d78 R08: ffff8880b8633d1b R09: 1ffff110170c67a3
[  802.317494][    C0] R10: dffffc0000000000 R11: ffffed10170c67a4 R12: 0000000000000000
[  802.317506][    C0] R13: 1ffffffff1c1edf0 R14: 1ffffffff1c00f9c R15: dffffc0000000000
[  802.317519][    C0] FS:  0000000000000000(0000) GS:ffff8881259fa000(0000) knlGS:0000000000000000
[  802.317534][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  802.317546][    C0] CR2: 000000110c3224ca CR3: 00000000732d6000 CR4: 00000000003526f0
[  802.317563][    C0] Call Trace:
[  802.317570][    C0]  <TASK>
[  802.317577][    C0]  default_idle+0x9/0x20
[  802.317598][    C0]  default_idle_call+0x72/0xb0
[  802.317620][    C0]  do_idle+0x2e0/0x540
[  802.317639][    C0]  ? __pfx_do_idle+0x10/0x10
[  802.317657][    C0]  ? do_idle+0xc/0x540
[  802.317675][    C0]  cpu_startup_entry+0x43/0x60
[  802.317691][    C0]  rest_init+0x378/0x3a0
[  802.317706][    C0]  ? __pfx_rest_init+0x10/0x10
[  802.317733][    C0]  ? __pfx_kernel_init+0x10/0x10
[  802.317749][    C0]  ? __pfx_acpi_hw_get_mode+0x10/0x10
[  802.317772][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  802.317789][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  802.317808][    C0]  ? acpi_enable_subsystem+0x286/0x3c0
[  802.317891][    C0]  start_kernel+0x392/0x3e0
[  802.317938][    C0]  x86_64_start_reservations+0x24/0x30
[  802.317958][    C0]  x86_64_start_kernel+0x137/0x1b0
[  802.317978][    C0]  common_startup_64+0x13e/0x157
[  802.318003][    C0]  </TASK>
[  802.318322][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  802.318340][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  802.318367][   T39] Tainted: [L]=SOFTLOCKUP
[  802.318376][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  802.318388][   T39] Call Trace:
[  802.318406][   T39]  <TASK>
[  802.318416][   T39]  vpanic+0x5d9/0xad0
[  802.318438][   T39]  ? __pfx_vprintk_emit+0x10/0x10
[  802.318463][   T39]  ? __pfx_vpanic+0x10/0x10
[  802.318488][   T39]  panic+0xc5/0xd0
[  802.318500][   T39]  ? __pfx_panic+0x10/0x10
[  802.318514][   T39]  ? wq_watchdog_touch+0xf9/0x160
[  802.318545][   T39]  ? nmi_trigger_cpumask_backtrace+0x247/0x380
[  802.318573][   T39]  watchdog+0x1030/0x1030
[  802.318602][   T39]  ? watchdog+0x1c7/0x1030
[  802.318627][   T39]  kthread+0x388/0x470
[  802.318652][   T39]  ? __pfx_watchdog+0x10/0x10
[  802.318663][   T39]  ? __pfx_kthread+0x10/0x10
[  802.318679][   T39]  ret_from_fork+0x514/0xb70
[  802.318699][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  802.318727][   T39]  ? __switch_to+0xc89/0x1420
[  802.318754][   T39]  ? __pfx_kthread+0x10/0x10
[  802.318784][   T39]  ret_from_fork_asm+0x1a/0x30
[  802.318825][   T39]  </TASK>
[  802.319146][   T39] Kernel Offset: disabled