last executing test programs:

6m5.945334377s ago: executing program 1 (id=823):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x6)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80)

6m4.77067377s ago: executing program 1 (id=833):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000007c0)=<r3=>0x0)
r4 = fcntl$dupfd(r0, 0x0, r1)
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2})
io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0xd336d000)
mprotect(&(0x7f0000166000/0x3000)=nil, 0x3000, 0x1000000)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@local})
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400030015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010)
fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000300))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1810dec6f29f11000000010000fe1f000000ff878c8863cbd5ffffff"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68}, 0x94)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180009ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000000000", @ANYRESDEC=r9], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000340)=0x10001, 0x0, 0x4)
syz_usb_control_io$printer(r11, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)={0x0, 0x10, 0x8, "eb2a3b809be47af0"}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x74, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2417, 0x2021}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x28, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0x24, 0x4, @local}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002)

6m1.683914464s ago: executing program 1 (id=845):
unshare(0x26020480)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc010)
r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000002980)={0x104002000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000002940)=[r2], 0x1}, 0x58)

5m58.241256817s ago: executing program 1 (id=858):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000480)=""/138)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x20000}, 0x1c)
socket$l2tp(0x2, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000002600)=[{&(0x7f0000000540)="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"}, {&(0x7f0000001600)="63462c8ac568b09ae234bbebe074f7db5c1f7ec18abe9e81b6f0a689934ab51e5ee967cd09a114009944641db5f237045dfcb23b4fa0332a563b236602d9c6182dbf73fa22b99e7936f9f70c5b8e5e415b3db5834e3f0c9c7bfc51cbbb3daab4222501e119bbc61a1f8b57f53a1ce128b1c8d85016ab9cac9dd188787cb7d045b02def42d0bf20de75c67e37aeb2471e9a35a9d859009531f45a1f0ff31df4195a08411b815d"}, {&(0x7f0000000080)="d3f14ecba6df38383a2b96924f1e0464a3bc0c3ebd63fe2df53dc4a491eb264a0901588d27ffef64cae67a76d660"}, {&(0x7f0000002640)="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"/4169}], 0xa0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000380)={@multicast2, @loopback, @remote}, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x7, 0x0})

5m55.089179931s ago: executing program 1 (id=867):
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x32, 0x1, @thr={&(0x7f0000000040)="d84918aa44f9c0bcf6e9fd9f55188851bed9957f0abe387298407dfe860106120234dcdec38d39d0b06b7e7d21de7c834688f3b6ac10ff201fbf729b866425c955deec29f7d82af869e3ba81df1792a301006dc9ba9c7e0dcfa83a41cf783495", &(0x7f0000000480)="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"}}, &(0x7f0000000100)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000180))
r1 = syz_io_uring_setup(0x49a, &(0x7f00000001c0)={0x0, 0x79af, 0x40, 0x8000, 0x240}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r1, 0x627, 0x4c1, 0x9, 0x0, 0x18)

5m54.827767391s ago: executing program 1 (id=868):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

5m38.973365873s ago: executing program 32 (id=868):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)}, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

10.157757836s ago: executing program 2 (id=2054):
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x1000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0)

9.203332568s ago: executing program 2 (id=2057):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x20000000) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x118, 0x11, 0x148, 0x0, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x240, 0x60, 0x1, 0x1}}, @common=@unspec=@cluster={{0x30}, {0x9, 0x0, 0xfffff070}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x3e, 0x2}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) (async)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x6)

8.920931447s ago: executing program 2 (id=2060):
r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000}, {0xffffffffffffffff, 0x0, 0x1000000, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x4000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x1000, 0x4000}]})
r1 = dup(r0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) (async)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000140)={'wlan1\x00', {0x2, 0x0, @local}}) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000003600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000035c0)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x120, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0xd9, 0x7, 0x1, 0x0, "9694e3fc358ab1ad85c484010afa3914aff1a3062bbcb10c56ecfe460568b324df712311129ee79e010f7cf4c0e7e764c7ce6b210609f2fbba40e01183a50c70e0a7d8a7f43bb0a19645c0e7a1d536689843585e63ceb00de9048fd7f859322703a49b5966b882ef41402ec115c105ed76a6e37dc5b63095b6f82c08dcdb60ea650c05849706be32233c63e730cf717bd4c8a04a40b2f1f1d500babd637b8a879639d3648a86e5db490b2740ab0165df9f76647e0cd68d6b5993f014db258d3590c2e4dc1b6019c512ee2d663bfd4c660e8a7fcf37"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1a}]}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x90, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0x79, 0x6, "7e5f5a3c63cf0a95c6079202bd0ea55f340c0231d4cb814789e5d1a5a6bf7e1113491fd6bd201762e57ca3a429171a50cdad9b2cacd4cd036e350290fa533943db739965e8fdcf1468c19509e3deafc6fd7aea05d490decbcb897b90ba3e28e68a89dc6d4d2007877c685a548e92aae11e70738220"}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x200, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2f54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1774, 0x3, 0x0, 0x1, [{0x1210, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "75a5a379e1116a380d14ba5ec44d"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x117c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "e457ef519a63de8d14f43d39985abc424bcb1703c709de74e3fda53800873354e0d1d0ebab283136f3bb43e8d0bfff01e68c1f98e9ff01b5957c074eb3ddc0ff2976e2a17ef846b3bb1a710ddc3980b5fe0756f085b4e62f96be4264375f8ed9b48e0b68b3985a0d8d2e77c6b4d98976bea88816a453afcf941656ffe6ca3dcf31f4b7e2c1841c61e503297d50"}, @NFTA_DATA_VALUE={0x94, 0x1, "5653615a8c0fb68e58b668905497e434d200912100ae918a6d2c69017f65e3d4be3eba1077d59197f7f9b884a8065cb24b443303db343cc5ee869826dacc4df1b34d288db39c4bc6b10316f0696af65ccef51896f188b6143949edba057b2e582c57d1e49408c454f1aba36e25b036c2cd8486a71a55f96fae10da0c823166d1475c7afe2b82e92e1812390da960058d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x15, 0x1, "ebc77bfda840db7dd303ed546d98cbacf0"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}]}, {0xa4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xfbff}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2a}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}]}]}, {0x1bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @numgen={{0xb}, @void}}, @NFTA_SET_ELEM_KEY={0x1a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb0, 0x1, "7e67bf51cb675356e180b7188ae8444cfd872f9efaf88fb68e47dc2194d29741d7b0c1064d47780ecf5e604156f8704ae43b099274a0a59135b154386d2bd6eac8c77a2470a28a7c1e4bd57eb5315e560d5c0dfca94041f0ec9f4b9470fd16f19edca94c58a8caa9e93b9c512d64059d98500e03fe5c4dc841ea39d69753343968998080bbd4c7363f6f0b71d989b797c0d1c0b11ee817cc2bb1093a0f4ff99203041bf38583c2fc2c54c3ac"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x2e, 0x1, "e2dda171742406b271b5599b03169d54b5cfac4a9785f32ee69816d41de36d0c37bcca424be5ce2430ff"}, @NFTA_DATA_VALUE={0x11, 0x1, "5bb520d5f70ad916c9265b6f15"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x28, 0x1, "57102389741dd5ce0a26054fc018c5c807447b76b57ef347ef57e66a7dad5bfe4d378bcf"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "86f4e398d4"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbc, 0x6, 0x1, 0x0, "43e1b2a66e0e52bf52de15649c5e30dc22fc69050f7524f2d3325bdfabbed4a8e4ded0e63a3517b0633405eb403ff81143ba0ff0d7fad9664e4cbbdfc2172f22562948b3903360b2fff3538d9c3cd1c9269c3498b2ff57a225f1d88a6d972c88580fe3c90b6074fe08e2ceaec9aae32eeb32835f63bbdc39a6ffca1ce85ace14b18e042432020b511c1aa75a55c57dda862ab9667728b918896b87523dec36419be5ee1c15bc62de91eabc618df9275def352fdb7f3deb76"}]}, {0x1d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7a}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @range={{0xa}, @void}}, @NFTA_SET_ELEM_KEY_END={0x198, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x49, 0x1, "a236e5f59a5169e5ef38b238a15aa84370f4be31879b86b99cc6b8b08c1fe2b4491e53dcb68b4e83981a79ae6163d93cacb6d76ac7351e77791c8efe109fd63b4532df1ed8"}, @NFTA_DATA_VALUE={0x7e, 0x1, "bc119a6c105cabbac5fc6869bc8c465fe8bee25c71ddc2566e9605842b0474489c1f24b644834f9e0f592ec33ccbeaceadb8c8e7299dc160fff2458a3745f9920dc5a2099620b9150bfe9f71c853477e749fa486c7f4ce9a2f4c5c0f2c7523505776f3cc02ee3c977848d95e67f9563a16d4a7921af2c9bfd9c4"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x17a8, 0x3, 0x0, 0x1, [{0x1584, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x474, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "b7b48388baa671f8661e3f10e2b64acb864583776e869578fce1b7c5f8fe4b00c85f2d6af0b136b4a47a24c3b26ae0f831590dd833559750db0e8641dd4eacbb5b42d4557f8e4e1c0bf681027b9640b23f8d44b12e3116682387df349dda37df195a49cde0de5e645a9d48ab2c0356a927414258385fb6a115f707d733dc99f08683065d43521e9dfebd72cd1681a0dc4c5f6cd78c0425b60b3590556402abe4fd1e0e038293559fc48f3e7c5e0956ae5723f732dac8a2ba3b"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VALUE={0xb5, 0x1, "b3b3db3f719c3699f4980cdf8f39df1d0b714a1730033b9e7e4d3814722debcd7b57ec9ed414aa9763b8598715912e6c208803208c87cf757a267a371a36c4ae14e0167ce4cc293aa72c613fa4418bb52fece9416916bf9b2d881e6026f3fe88c1317540e773d72be812ed6c9b93cb87905ca118b773e382b9367570244f58f39946bc73e3e00613db193918ef5f1029ed94802b725292fbcb4ba3defc3516ba6ea73a46b146a124240302d50ea71b787a"}, @NFTA_DATA_VALUE={0x3f, 0x1, "bcc2f215fe39b3ae94acf6134e4a13f7782ca417a65abf65fc130fa10d12d9933a1a23d844c086b0249e3b6b8f029a74e9c59353fcd7889af3e62d"}, @NFTA_DATA_VALUE={0xb8, 0x1, "5fce91c4c8b9b0627443ed47bb36131567c83c19d41474d6f40bec3af513b22ea1cccbe97880c0632468b49d35cd01f9114b64bab54f794b3953e4f1c48b1fe028b81c5b33fa8e4c7b230b96762c4c5fb3f684838ec88ee7a547badf1e9f082f633f47153c2e51102a291554631ef05a18d19e147bb5c8da918c38a502d232121adc1e66498db72bd01acc97dfa5582ca2d0f8b9fd5f887257682015dea19055e56b51db0b0e419760748df4f2fa8c0d7dcdbbca"}, @NFTA_DATA_VALUE={0x70, 0x1, "4c82ea32ddde7ea946c4a9329e41d404ad1d52e84da5add663c8c2801be0b065a762e840aaf8642d2a207fd0be1b81255c1dffc94e258d24b354a3c770cfa43e7bb9ca087f6709e4562f910a7f64b970d8604dac5f0bd15ebb44abfd393b8511574d9ab83ff37aa342024d76"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x99, 0x6, 0x1, 0x0, "acf10bb8d31249f7f23b240459e480dd4fee4a6a6ec974efd0227a419b80872c7c5538fdc86f1ed64e1b4c5d82754146589fbc6ea850e51141678344317e2b0db9ad6a95cb736433f778fad7b4d43a581faf1bd3531c0812f0c10e9c526de505e207db388247aaf61c97c370844ab6f60bb295ba959c2ee1be1cb7e51e5bac34f5c25dc6f16b16e25875b92f9e761c6590366a07db"}, @NFTA_SET_ELEM_DATA={0x1068, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "de77de852cff6c2da46a0bba65d7ad82faa6ed7f199b896821fee75cf4f75a91e5319960a26192306c97914a9dc2b2722dbbe5ba994e865dc3b701dca11cee7fe8e0b9b31ecd7a12d7262472bac2af0ed8225b23de258ba66a8664d611b1a29e9947472b3b146204b132aae3490444f86f4d87bb7d3f2e84d9c9935897560e7f70c6371276135a98cdba0c0b9a60bab2bc97156fef98d88d924de8cf972d86c476fabf6bb1856b0ecfc9d89f96db7ea9b3e40c4c03a4ea373f77c95ce6256ea8ee9a9a9e1914fb0dae8b34b0aa9786f749715601af0628d578a20fd2606f0fa08a4a6a0dfc0ae9630cd8d3dc44e89f8dcb1d4782b72cd34439f163785127c0285a203df543c9fc9e43e72cfb21e0afa7684ac460705fdd4bac4eb1cf649775ef57fe540ad201e82e16f862af1e75133a424bd8fb48e20b8b949ac2b1c96e80cdf4521803b9639cabeae76a567f688cbe23275b737e274ce21bbc7c5304c54213c748fabc708a849677c842a9810eeadd24ab9f94c6f353567e5575ad30bf1ef03d1cd4fcae9fe7c2ad70aa2a96f2a1b4cd95e269199f25ed68449d461fb552af6ed2a5e61be0a49160a497e0c1d3528b1e5a7b9cba9fcfd57d993ec86fb955c044346b38c859dde7ffae95a0ab0271cb2a63dbe0f6b8d169b5ff7145f2111acb28c79c63ba5c70bda0eb0643cad86ae6555e84c22dab26bcb629e1e6cc05f63cdf38024c64bf080cc7809b5a95e9eb31aca4d73400f55fb634df160db93e9894c5c4f7f85632bca43c17659327d950a58dcd1bb99b096cf009393feac739e9c861af25643e3736919d32e0db3159682c7df6a3e7724b29b61c1bea1be13aea6b3601ac8872ea54f14d2676e12ab2473cbab4c81457faf3a6955f2537a1dba0d00ebd0b42f55824c0ed10a0136fe2324bab22d76e4a34fcaa79ae4c4b4685718a958748013694b1fd138db75709cfc32ad1c9f5830ba6860e18c57ba8916371ebd36585b6b11da38108287c87ccb4b2c50dcbf0e978f7ddb7b193072df7b981e192617652f350519f23c20a0ba6adc4d6623e368bfb93e9030b89ba9e70509de0e114ca364899baf5868ec878c14baeaa21ec8506f14ff7478391dc827f0391dacc4743f149fc020e41698fc0a44035e1061bc5a6fe7e0735464beac603377adbeff7db17c4846c79c9dd1683d267c6b5e6a831dd90127c6f8201ab3203f182c34dbbece6b16eea6c9e49170cfb90e153b6fa621ce750350040fef6db79a0a19e3b0ebe9b154028099ef70e44adb416e21be7b9542400e3b95aafc26a81f0b0279ec42690d2e7e0e792e405ccb4d34494b1f0fac7288376ccba90e0bc1d4be28a72cc85660e903dfed75b6ffdb77c41969772fa4baa057322d77ed5ad47eaa4efe2e1c79e885fb98a275bbd9e1f986e4f7775cb8ff2193db9e3c1092ac1f85d32a90824526ca0244aa7a2697c71c3dcbb3a5cb185d6176f378ec5563832170bf3de8d244e5fcf36f6f619318884f0cfbc3da72739aa1a65b80db2af82d2bf0b5ea8a37e80036f3ca8204d8eb49e6e1dcf3a74ba08c3ea4122a2aac4e388c9a4a6ede8f5969c991e43ef1e5b401bee222e6824efeddb11251e4cb556d14a9324a718adf2b84fa4f47118a5921eb4ca462e6c57c859a481303243dde2d67e977c7792414bf78b5a9181eb3b8bf3c4e91c2e1d41ab98dcfc9efd037cffe6069f3f7a955e786db27c75c3f331720b6e64889d3e3ae0dc600236d25dfd9210d9574c4f53a2b4efa4cec56133779245907a365012b95012d3850a323974a70423902203d7c0760223a31651469b1912f984222ffc9e8c30f8f2af3c10234afbe0e2afaf21c01362a27a99785f0b4d22ece4dd18bfcf769c453d86e78afd46284106d2611db4fa1b8afbba897a17be553096966e9cde2e7a13ec724732dbebff053c4effe304ab02a17de0c7b16a23852e3773c59273efe7e593e1a1d5cca0db43acc8ee75ab1538e9de1f6687dc76fb1180742bc2dd54f13757d93bbd026b96552ea53625476e8cde10fafa105a60b43d444c6220c31edc0908ca1482976d8ee446ac69e909275d07c6693c461a88fa76e8f2f574f77b60bee77db5c2e90cebac1003c4acfdd5f61c890cd5ca6c4140c4ef3a68370cf6d9f087882010f5e2133541a1d515384a22f9b36d9c173e405bd86724d3f4d1879e859970d1e12757365edc0f95fc82049ac036f186977f200177217846221b0bbd68159c71f735b9940d91d4bffa866dfffcffc8ad43489b65c0b05549d6e943ec34c8b49e4b8342804e8dc93f76c1309b1b38371ae99b575dc3e1f8895c9589811a11b46e8c08a2559d392b5252b6c24fb61c8ad7bb065425cb126806969de5bf534f962d19365e48ba1dde1cce415e57617300fa894bb70a0473fddfabe05031771f339ca5d43de97ee1eb3a4b165abb75274cb932ded7887d0774158ed8f7036e2ce5b5f29decd38e9a8f0aa367b0cb04b259955b5508c0b5f33e6f1b74577a784dbc4fb3ac42bfd74167cca9830482348209745b9ce8a6fd526fbe16c0d1261e97b07019162447fa17e2ba326d3f391bfb5d64025333c69ae7794ed0dc5f659df6094e842a8ff959c471cce8d60baf8c2d76d0e8897a490e44e2e6784a99408507320222ea4cbff6e3b32c094ceb67904b19fb3964963b0570bcc6dd03f1298eca74473e3497384072901a496ff82cfbb389147ada2b8f397a52ea21c953078c3c0314d5012f962b9e7486bb91b86fba0dd91145d88c8edf508c7bfbfdbc7144d3bb32d5744bbc475372e1e456e2f1af57e7e507c85a6c21f1a77dae3afd3f4f56c92186d2b91a3546f6eac0a310e0e28e936d916898fe5302c552e8f758e822ddee1697c7ec5def5a2964b78a00368b7247cda91361800423a38890c75f0e8afe968b0bc92acdecaabc58c83e1ed9ec87d4f68ba2119a30ed0c56b2adcdfd2198b0204e0e3edfd79eab254ca6d37cefa9cbd3bbc56a53e9932ca8d9dfb0fb37144e87c5ca9cb08ab019f71fc36d93f4f2a44940624524271bb6a8fe91eb7001011dfa23919af5181406b848e29db15f7f510cc75e360f59b9b9b235542c604198248049336e38200d394d718ec8500755ea465d7067f04781e84a6ffe7eed376fab24958759da1ba990033c2c98d7a97beea4ce2dd20e9d3fdcce776dd7fc0364c574edaa1df8a54c43fa34708ab35bd92e8427dbf7852d9e4d8c87a563632f79bbada3efb1531b311f9493474fb95c22d777624ed2f0d0ec3ad54507bc7756be0feda2e7fddf62ef5def9eea82d536d6b7c86ae251a8d561bf4a31bf428d06d23dc69377759f35bff8afbd6378d1b07b2e0c7556cff4d2160dc69aa3204bc9acf87e80fd8542945160d62bde61e47d4088aa23ae719902f96e30b8f0e98c2ba463be6065aa403c09d5e9153ecb076c5e651f4e565835dc9263d695a7483ba869ced53756588fd3ca85a1894004b98eb8680d09c37c7d7c02f4b2970acf4d5839570c31a92f5dd3faaef2975a660f39506be4882cc35e4bd86f6d062d5626a11ec32cd9666512802e59253e6f99d3b08c78404e18395772f83764c3887816f05fee038657712324a124081e40141e71098a0086307e90a4a8ac1a9150b8938d1755adecad0b194443ce1e2b27f96bcf3da417b5fd531fd1096d0b299b29d12cfff73e9a23fd87eecb4b7fee429f251c9a3fce2f2c75c9a2fb11e0a7164b9bae9e92c5d361b4be4ffc7ac5519adaabbe1179a292e27e8a6538d9f09d8becece214cc94734e7c5d43be52376fd6cad614ff9bee607100da2d485f8897e23cec9f1c7eb42d8d362fd387b8af7c682337e4743c899aa2aa422300735f813a3c3ccddd402dd8a673072e95fa1375059dc340fc82976f76ce577889a3ad8482cb6710564b8e762221db735191b750a4dfb5a6f22b8a8b0f75becb39e18f7a6bd0db6bd40cc173bd505964ac45a8f38bd87f6bdaa64b74ee47b8a50dec94079c2e4c8d1c2d2088df0b9a3934abe9472a27620f7cbc24dabebba9592012458c0323fccf94b291c1d2f5f96c1403a17cb34f85ab5a841f1992a92b253b57d32452a6cf9ed748e3bee08091fbc190a527f6cfa7be8615f414a55284aa89d1bfcc0d12306acdfe1b8a90c2e079c32778da206023c29adc3676c4f751be030983f6b164d0a851c62e65d611369a25f81deb10b4ec67cd29f40afc810945e14e52539cb3ede3ddf3bd8720e43f9383d69f3de31eba7c568764dc494076019dc6b2045f91c968a3bae2fd19b70a604e73b8eb4f8937c6767699e5ce57fd6ed628265e98df881f75c763e1e49e488950db6bd07e245e94d3e21685ef3bcd5c595eddb3c3d931b8c2e7d7f5a34b1ab353ff83ef6dab679df900b54c4b3e5673a8a2b1179d51c881d3a9958a40d03cd7b34650b426d6d48848d500a9fb2967f1a378c629f4ca3fe59a5d0b768bb6cdcc4a437614397017d929d8ce133d712439a7dc21f5e0895dbe133302a220bf96c879a7fde7c678e16d0ee5b419ddaf93eae7cf511304f28c23bad9775a744be51c0a82f7c596d6806ae820f65bdb9fb332ac069f3336ab638af993fc56bebbd005c0a69fed2d4871ff5d80869f06aa49786d73742a2acf01ce49eafab258a7843453d43589ce36a5c903911b54fef4e553c0d60a9b273b2954442aa3261bfe2b842686a48f82d0c3fc5cfe62058b26c249fcb05da50dbaf23bd400babcf9f76963566dd4e35086192d3b5a564ec4fac4a456018306bad4bcbee88777d86d27b1a80460f255f653f7bbad5d34a5ffff9b75b942c0bb840141a9950a48befa558e13374b6c52027336198be6d2f9be435bdab8de4b124286fe33064961ae1ed7ab59e491234b1d4399d97b380ec05dc918b7dabe33010bc348761fa0a6860ed71ca7ed884b05628a9de7a7daf20a039f712174dea7496b667558b3cbded6db6c9b74c2512e9503de6ae9a0eea8a2a8436659d68073acff5eb33ffe790a1661e6240d9fe54e948b4d929cab7f61bfa9a965873ed7cae7ed9fdff79032f7f265348e0b4cddc21a4f14a3f77d3935a0a824440cd278da414370b4a1ef198683eacbb9451f9bee40c4c73748c338dc04fd70f80629097133741aefbce81d587005cf5b13170fecd390f29b3334826d46306b9588d02abf8b357f726c83103f18444888ec5124123fdfe396158bab8f38f9c7b1e77215fe2f2b332cf90162db7545d8f7afda3ccdb8bea923f734bc96aced754a53fb95a8c09ce6c46c8311c24f9199a1cbfd2b7359d7df4b904b2049a1b075c8bf20b4b23fcfa26f3845b3517dc0d16bbb64eaf2e1ba823f9e3082df1b4800a54251e3470f1f619d7e1da390c8613f0cdf01d4683925e1ccc124b392e8c6f4d00bdcf1f9538718704d7522dad50b8fc5700a359d61be6d0ac717868dd29218663a12eb11f8c6b29f9d8a7a8ff45c782a04b27265088ab470112176b98c2d334327b993c61810c5968033bdeb34ab81a44bda5e9240691ae3f24e04715664eb221bea22aa140eb947df5ed8a989445befbb0e75ba415bf97bce6be616ca3f0691859daeca1ffad21f6a154668892f632b085446f84fb64561675457b0a070097d4eb05e42888d7b680b7eab9504d49e1d4eb4eeeb9f1494a171cab7b6c14e2c0f5b0dbde7f85b1988e19a94de44f73f89000a8c07b4b306bbfa1e17ac0fc11cac2499b0fd3467b8b646e89231fef3f3598ad4742f6452b93a18b62b63ee9279f6e79d35d573fc6d58ec61cb39a0bfe39cbe9427f6"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "ac3cfa28b2b1c519937951ad8867c234e9b7fdb20f9a6be7f2690095f94bb0218bee8ee7311ae2a2f24a66f927695411c6796c69a5024a85acc7b66fcc1d945d9d31d27b28ae9c8eecf1c56f6a27ee797379211e8601258209d0fa09d719607f20fdc7dbf12e148d2accd80ca827fb1509bc32e8dfffbd5dfa8df1e8b9cb86606768bcde8aafea027e3e1e733d4754207c35cc4a1626bd29787af4873445f412118ead5348fea30cab6dea1688a2bc724667c6fe4c5c45cb78e5edafe03815244192398b07d2f63f7211a569e470de0cd34fa17674aebae21cfc7e7844a1d3d5ed5f434632ff19221e13540f435d1dd4065baf69d6efd764da"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "34d9200444e7a3fe547db24da08d27f6e89e7344b3a406e3874c98504ef6032ba192e707b708b1408cc3080c74377536215f26366433b5d41a99556d0b99d410009a5cb60e4a40f799fb5b445af6b4fc3b37b17c410e587378494753140e9afefb65077ce4a3f0f63746962e95978213bd918cfb420b1b4961ec88f175df3ac921978f53b2f909eac7db2a9937ebf06429a088ad4979"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xd, 0x1, "5c05d2c52176f9f241"}, @NFTA_DATA_VALUE={0x8, 0x1, "98c26e44"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_NEWCHAIN={0x1ec, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4eb00960}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}, @NFTA_CHAIN_USERDATA={0xcd, 0xc, "053c5f74996a094b4b7d41fdd92829b3defe37a55cae24a58cc342bb7ac2187a93cc00dcc40aca19fa641916766b1fe6e3241a875df27de480066ebc2c3ad062110bfb46d943a03af70f74afc0e5dcf6f0b7c404c3fc0d509b9eb606ace3facc76a475ea697060d4e266392ede5484a12c5039c78fe442df178fc0890882b8816fb6dd603b92c23d633e509758b3a5b0422b0d5346d55ad9687438ac90608531aeb98f257e68c03cea021257d255d609a9e71630fb853c275c258c987d97f1e103eaf76adb5a05386e"}, @NFTA_CHAIN_USERDATA={0x8d, 0xc, "c0b4cbfac3ca3646939033671ca2e0918e248d4ca546a989059a57f1fc10d03dc2b96fafcebd7f4ba15cec5af6afa14179c9cb28c352fb4ca357f4105ee38b066fe7ddde0acd4329508f65e5fc2ea6db017e8c5e9c444c97e93f67499f020fb1cbe2c30308669db220b16dca56032e27f2575c8fbe7e51a31be43a239047d425cf1ca4cf56dadefdf1"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x33f4}, 0x1, 0x0, 0x0, 0x4040}, 0x4000081) (async)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000003640)={0x6, 0x6, 0x1}) (async)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000036c0), 0x8400, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000003680)='numgen\x00', 0x0, r2) (async)
sendmmsg(r1, &(0x7f0000003f80)=[{{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003700)="fc49e4a8e0a6118acdfa763839d85a95a0f00bcea8cdb5462ca91b875aca3320c032c378e1e1108b06853a9904ea380dd729f9a81de826ade85aedd55fe3aaf368de8a1db3565599d1f34300575dfc9eef9ee5658ee49bae64a336ce2ed4378b30", 0x61}, {&(0x7f0000003780)="6d6127909126ff9e94d5a56fa44840b74a9345e5b27d0773fe3a006b8b75fbd9622f903d3a6026297b330432ddd00dbe3672f00a2624a3c0830f9827d1929fc10e2067771ab37ed0cd69dd809544fb7e3fea4a44ae5831f5d54916c716a4cc7f4c6e2c705aca97216004c5f93e5d167f870e7fd9f9c6c111813cb89b17c129907222f59b882d5ba72c48de02ddd666c374fcfae66a77735f3a2c396947f35ab834234a6b94bb112d6fc80db315a1f927d3eef9586028d3deac7184ebf52622ba8838f233afece606896c220575973c", 0xcf}, {&(0x7f0000003880)="110b1043ac96bf9183b6a5c80bfc9214530208ee935c845f834239f25d4ad27f511864073ad6908ac51941cf2f73891c3140f50e2d3b6986c5339c01095d88dd10f64e1072a0fb812f9b1e458aba8015bb0937aec9aacaf24a5f4e167b6ac0400e9b0b7e8a77b9e018006183ac0f3dc2d18d4f73bc8dffeb593729e0436aa3d12470deb7669f823a343383c46ceed69b7908c3fffc4cda0f6ca70eeac99c9cf13d824a39c88927bab96c531f9550ca35867fd82d868eee2e4c31bf44024a1c2532dd005e95ac6f3672031778f036855cb8d533e0454ebad5080dd3b534cd9ecb3a74c8bd0da242a7228fd2a47143a1eaebb2c8d60c5a90", 0xf7}, {&(0x7f0000003980)="490ff3cfc5ba50bfba74b2f5b5adf474ca0dbbffa0b77e46a058ef17462055bd8fee4651e6c3164cd6d11e0bd3dec17f8b1e9a3ef0e3091f13da3f73aeeb1f650a4d9dd7413f635dea1196", 0x4b}, {&(0x7f0000003a00)="a786665f79eb3f9868177b88aa768b348f07c517eea7a2a7c3a4632583298e75e6b33dd8342fc116d9df8f4f7ee1d4b67f079e46e83af3d97135308641eb6136768903c4afb1ccca62b697dd56fa7427a9d97cc47cb6811c812c85ca72fa86db7af81c0ac42ccb2c2e78e3706243bc2bec963c61deccc3bb3fada47ced099e87551dc45f05116b849c4d917e2f62164db7074713f73020cfa0672e64", 0x9c}, {&(0x7f0000003ac0)="d09d1fb19f35813bca3b943f60df6ea707a061ede924f85120c3e5788ae88e974936bc0c73a065f1ba55d8ec161cde3e94afd24a30d030fc9a9de9bd13b82944808a9db0eaa77b74312fab08e8ff8ed3e191d62085456e2cea3c6a48e7b9ece532d6148b2c07260f34721249d1171ff328a11d1ea2cdd8e350a4795b281f69080eeb34cfd01480bbf6a9cb92f682078811b720a59b2306", 0x97}, {&(0x7f0000003b80)="3de6ca250e6b99cfc0d7cdba7257251a67445dc1aa72276a128a0d22388edcc1b0c7097e527ba4c2c81e067ffccc3d", 0x2f}, {&(0x7f0000003bc0)="4f753cedd13ac90e9875846cdac73af76de81c24d52c4d19e8701b8f94488f206109ecf4f7be7efd07c9a8e28ff47b05f71db19d4a803bccb402cdcb9ad864662bb0b02a0478ac0a7b3bd172794c86ce07e907286174f4808339ef2dd8a09c12fe19d6bce37bf6010fbdbc8a2398553782c28b15b097c74a3a67568cb56fd1c9036273ff4c8d5e52e5b84546aea5f768168b4236f670647b92c9e758179c054154414a878a7d20247efbcce05ff32d87fbc7cdcde89c6c2ad9a26d90619744d24a4066895dcc7a231621fb44d243809db10155e64990433f3fd913", 0xdb}], 0x8, &(0x7f0000003d40)=[{0xb8, 0x10a, 0x7, "fbb1ba820479dae5c84719add07203f861d0f7f43c38718009860aac88df0dad22a48fe289df5f7803b1d48478a143c7369b46b95689754ebcd2a3dccb94022364f501ca7915624d6a236a80c243adb9957344468b585bf192d94623fd00486a84ea4dc75d2ed825378ca4fc94b6cea707fea1f130f7304ba53315f8b0555f4ffdab6d8545180008b75d11003f5506202840277129d366e5d8d9ccb8dfdb416a87262d1c9e"}, {0x98, 0x104, 0x8, "66f30f8243e55848843249d7575e4d9f8a1b081cfd148f29e2d993bd478a93c4e4ec873538e043a4da05627dbae69dfa0a9e072e4a55588a7484e714fa7d65cb92952c737d4c689d40d537771fb1c985ad05fe27227a29d2122307d0a08a06149bb43024cdccd690fad8f0e836cb733fdcdbb275704f6558da8817713f7b58f48d69184e5b757f61"}, {0xb0, 0x104, 0x1ff36dc4, "20af84b956a263b3994e757a890f690ed7d70dbf918d7d0bcf65e5487234f40d94d6ad6c369c0e42037f4536c20f06a2aca3151309c76d0b2c2b5314e1c5dbe99ddf4d6f7a5f631298c67bdf91f4fca6a721edfcae1c90fe471faf02b835a27620f11882235a088493de0f3621fe9183c9e65148febc4976ba395ad86c5c0911ed414fac94bdcbd7e1878fb8f3a9b81013a8009ebc0eb3489950806e101f8b6f"}, {0x18, 0x0, 0x8, "2104509654"}], 0x218}}], 0x1, 0x20001000)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000004040)=[@text32={0x20, &(0x7f0000003fc0)="260f0566baf80cb8c1ce1d84ef66bafc0cb000ee66ba2000b8c7000000ef0f01dfb908040000b800380000ba000000000f30c7442400f4ffffffc74424020000c0fec7442406000000000f011c240f205c660fd4057dad0000c74424007e360000c7442402236fb553c7442406000000000f011c248fc86097e10e", 0x7b}], 0x1, 0x2, &(0x7f0000004080)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @flags={0x3, 0x14}], 0x2) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000004240)={&(0x7f00000040c0), 0xc, &(0x7f0000004200)={&(0x7f0000004100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8360805b3776ae33}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x4, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x70, 0xb, 0xa, 0x101, 0x0, 0x0, {0xe, 0x0, 0x5}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1fffe0000000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4008001}, 0x4004010) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000004280)='./binderfs/custom1\x00', 0x800, 0x0) (async)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000042c0)={<r3=>0x0, 0x12}, &(0x7f0000004300)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000004340)={r3, 0x9}, 0x8) (async)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000004380)=0x5, 0x4)
r5 = accept$alg(r1, 0x0, 0x0)
shutdown(r5, 0x0) (async)
ioctl$VT_WAITACTIVE(r5, 0x5607) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f00000043c0)=0x49) (async)
eventfd2(0x2, 0x80800)
syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000004400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x80, 0x30, 0x10, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "58ba8a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffff9, 0x41d, 0x13c}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf3, 0xf8, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x21, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x5, 0x8}}}}}]}}]}}, &(0x7f0000004540)={0xa, &(0x7f0000004480)={0xa, 0x6, 0x200, 0x4, 0x6, 0x6, 0xff, 0x7f}, 0x5, &(0x7f00000044c0)={0x5, 0xf, 0x5}, 0x1, [{0x3d, &(0x7f0000004500)=@string={0x3d, 0x3, "b1b3f59db2c6da0c2afafcc9a2708d2d0b38eab5e46a55708e86d1bc3abaa6157cafbcb80c1cb3c21222f1709d34288a7f0f7f3d59146896dc2203"}}]})
syz_open_dev$dri(&(0x7f0000004580), 0x800, 0x0)
ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) (async)
mbind(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x4000, &(0x7f00000045c0)=0x7f, 0x100000001, 0x4) (async)
r6 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$XFS_IOC_FSGETXATTRA(r6, 0x801c582d, &(0x7f0000004600)) (async)
syz_usb_connect$cdc_ncm(0x4, 0x8c, &(0x7f0000004640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x171, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x4, 0x20, 0xfa, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "e936653e"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x46d, 0x8, 0x8c}, {0x6, 0x24, 0x1a, 0x3ff, 0x30}, [@obex={0x5, 0x24, 0x15, 0xfe30}, @mdlm={0x15, 0x24, 0x12, 0x12a0}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xf7, 0x4, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xb, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xba, 0x6}}}}}}}]}}, &(0x7f00000048c0)={0xa, &(0x7f0000004700)={0xa, 0x6, 0x200, 0x40, 0xd, 0x4, 0x20, 0x2}, 0x8, &(0x7f0000004740)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0xbd, &(0x7f0000004780)=@string={0xbd, 0x3, "d365407aa33a8e1d81c229793dec817a7d9414b801ab1fe630985e6d21eb5830330becea3d053630feddbf744b7a4c860d864240847d0bee59ba1a56e3a8cfc9e9fdd365c69a3b33725a2d0f0bcb77d4844c7b52267c77a6a4bc8e085bc58be09f0422940352861359dca7afc96a298414841ce0505cef5543f4b29ee9a2784f4f33f1781144d637fda898c2390670e0ed343a0e18b7de8eff3d5a2a951c32a38b86ebc5ed257c677cfc393b2454b6abc22746d68e76ebbc726507"}}, {0x4, &(0x7f0000004840)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000004880)=@lang_id={0x4, 0x3, 0x420}}]}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000004900)={0x0, 'nr0\x00', {}, 0x4})

8.411640176s ago: executing program 5 (id=2062):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x66020000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r5=>0x0})
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x2, r5, 0x9}, 0xc)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000160033060000000000000080ff0100000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000003000000000000000004d232020000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000500000000000000ffffffffffffffff0000000000000000050000000000000004000000020000000000000006000000020000000a00041819000000000000000c0015005c07350001000000"], 0xfc}}, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000840))
r9 = socket$netlink(0x10, 0x3, 0x15)
writev(r9, &(0x7f0000001900)=[{&(0x7f0000000740)="8febf651907bea2d5a7bbcc15a717443711ba48a6762303f808dac47641c32ad81a986c91f3ff9292b81cc97ac0423e9d79e76feb5cc3314c3ec29a87a3b2976d186a7879af34fe67d1fdb91f14c34d5e5a10178e5f86965f9458e053d17520d0c0b3ef87cbc5e65f0032868ee619610319cf9e88403b4bd954ec4c883d3362e2cc41958cea42d2f8afb25e30368a5a61ac2f9b8", 0x94}, {&(0x7f0000001940)="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", 0x1020}, {&(0x7f0000001800)="30efeb64c4b008215afcb1e3dcdea30bd85513aa0116a1924796c80ca6711e68de4e43e8b0558fee061b2dd0f5337c85b80317ba0d0874bf65309315bba3950a256d64c262611e77db5d04209de019acb748e0dbfabdc42911c1e4b2a3450413543cf32f", 0x64}, {&(0x7f0000001880)="85292f80547f3dd6e1337ae698c020057424d752ffe7e540e2e74630813bbd761a7fa5144ee989ebab4b9f0e6593730560d5056882c084b7801ad8348a72a4a6941102ff6c8f58bd3f4984ffcda75252f264a8500007ec340c2135ee3d61ac560ab06bd150e33e3ea18cd8d2", 0x6c}], 0x4)
recvmmsg(r9, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x10, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dvmrp1\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0x8001, 0x5, 0x1, [0xfffffffffffffff8]}})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc084}, 0x8044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

7.019411339s ago: executing program 0 (id=2068):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xb0}, @call={0x85, 0x0, 0x0, 0x20}], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94)
ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000340)={0x290, "d1c6d5c128e904bf7b939eef573852131b6482717b299db4bebbb01a3ca28f93", 0x1, 0x1})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)="d742af99289218b6adb6fa8d169a3ba752f02406a5a4162ae8a49dbd781d76426e656487822008930064cf1f803c795d715014d234dbfc5c664be55f642cea8500"/76, 0x4c}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f00000007c0)=[@iv={0x88, 0x117, 0x2, 0x6e, "06dff1d653168224b999e7baac0b2c7b063e3a2bcda2778fff2817eff1037d927be03a963944dade7ff6471cfc050e5b07411d00acceeddcc35f3887aedf11af0486a2679e8a07dba49d0e32cdfb3b6c52f993a7b5ea17c9b100842dfb354e73bdecfd4862d31870f6fc4828e864"}], 0x88}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
r5 = getpid()
syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs$namespace(r5, &(0x7f0000000640)='ns/pid_for_children\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b", @ANYRESOCT], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x20, 0xd, 0x4d, {0x4d, 0x8, "43e1004baffd4f2894e4e897bb90571592c48ab98b96e16e57235ae7aa4373b11bac96e48d3411e2f62bb6aa0a93091cc1cc82c9dfa5d97b52298e5d601ba8f3fb4fbe6fe9f584f57637b7"}}, 0x0}, &(0x7f0000000740)={0x44, &(0x7f0000000540)={0x0, 0x15, 0x8, "b0f1a6166acbd4bb"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000600)={0x20, 0x81, 0x2, 'Q?'}, 0x0, &(0x7f0000000680)={0x20, 0x83, 0x1, "e3"}, &(0x7f00000004c0)={0x20, 0x84, 0x4, "d81aa7bc"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "104245"}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r7, 0x0, 0x40400)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

6.185185789s ago: executing program 5 (id=2072):
memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYBLOB="02000000040000000700000009"], 0x48)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0)
r2 = dup(r1)
fallocate(r2, 0x80, 0x5, 0x967)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0d00000003000000040000000100000000000000", @ANYRES32=r0], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
close(0x3)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1000, r4}, 0x38)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000190001002dbd70000000000080201000001100050043000008000f0003"], 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
r7 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x38b2, 0x10, 0x3, 0x89}, &(0x7f00000003c0)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file1\x00'})
io_uring_enter(r7, 0x3518, 0xaddf, 0x2, 0x0, 0x0)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.973273422s ago: executing program 5 (id=2074):
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket(0x10, 0x803, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="1c005a8010000180140005003f000900ff0fc0000500fc03"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x143, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x2f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4000094)
r13 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r14=>0x0, &(0x7f0000000280)=<r15=>0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0x4, 0x6, 0x800, 0x5}, 0x4e, [0x9, 0x6, 0x60, 0x80000001, 0x9, 0x400, 0x5, 0x81, 0x9, 0xa36, 0x223, 0x1, 0x0, 0xf, 0x7f, 0x7, 0x2, 0xffffff01, 0x101, 0x1, 0xa, 0x6cde, 0x80, 0x1, 0x5, 0x4d6a, 0x4, 0x9, 0xc, 0x0, 0xd, 0x7f, 0x4, 0xe87b, 0x5, 0x0, 0x2, 0xd, 0x401, 0x59fb, 0x200, 0x1, 0x8, 0x8, 0xb, 0xf5c, 0x0, 0x598de09a, 0x8, 0x0, 0x101, 0x7d05, 0x9, 0x9, 0xffff, 0x6, 0xffc0000, 0x6, 0x0, 0xfffffffe, 0x2, 0x8, 0x4, 0xfff], [0x80000000, 0x2, 0x10001, 0x2, 0x9, 0x9, 0x2, 0x4, 0x6, 0x0, 0x5d, 0x5, 0x1, 0x0, 0x3, 0xfffffffe, 0x2, 0x3, 0x2, 0x10000, 0x0, 0x8, 0xba85, 0x6, 0x1, 0x1, 0x40, 0xfffffffd, 0x0, 0x7, 0x1, 0x7, 0x0, 0x2, 0x7, 0x9, 0xffffffff, 0x6, 0xac27, 0x73, 0xff, 0x4, 0x7, 0x8, 0xb, 0x0, 0xfffffffc, 0x103, 0xffff, 0x81, 0x1, 0xfffffffa, 0x9, 0xfff, 0x200, 0x400, 0x6, 0x7, 0x9, 0x7800, 0x4, 0x3, 0x8000, 0x6], [0x5, 0xff, 0x4, 0xffff, 0x7, 0x1, 0x3, 0x4, 0xee, 0xa6, 0x5, 0xffffffd7, 0x9, 0x7bfa, 0x1, 0x6, 0x3, 0x4, 0x7f, 0x3, 0x401, 0xd6, 0xff, 0x1, 0x0, 0x42f7d348, 0xffff, 0x80000000, 0x8, 0x0, 0x1ff, 0x2, 0x8, 0x1, 0xfffffffd, 0x0, 0xfffffffc, 0xb, 0x41e, 0x0, 0xfffffff9, 0x0, 0x2, 0xfffffffa, 0x3, 0x5, 0x8001, 0x8, 0xae, 0x74, 0x2, 0x894, 0x5, 0xfffffff7, 0x0, 0xc, 0x8, 0xff, 0x1, 0x10, 0xaa43, 0x5, 0x142, 0xffff], [0x7b07252b, 0x6, 0x200, 0xf5, 0x9, 0x2, 0xffffffff, 0x3, 0x8, 0x3, 0x0, 0xe418, 0xf, 0xee, 0x2, 0x0, 0x800, 0x0, 0xf, 0x3, 0x0, 0xb6b, 0x6, 0x7ff, 0x3, 0x6, 0x8, 0x5, 0x5c93, 0x80000000, 0x8, 0x7fffffff, 0x4, 0x2, 0xe, 0x6, 0x7f, 0x8, 0x2, 0x40, 0x4, 0x2, 0x80000001, 0x8001, 0x400, 0x0, 0x5, 0x4, 0x5, 0x8000, 0x7, 0xb, 0x6, 0x1, 0xfffffffd, 0x1, 0x2, 0x7, 0x101, 0xfff, 0x0, 0x4, 0x400]}, 0x45c)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r13, 0x3516, 0x0, 0x0, 0x0, 0x0)

5.750958729s ago: executing program 2 (id=2077):
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000169000/0x400000)=nil)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
r1 = syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x1186}, &(0x7f0000013000), &(0x7f00000003c0))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000004c0)={0x3, 0x0, &(0x7f0000000840)=[{0x0}], 0x0, 0x1}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x6, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0}, 0x20)
read(r0, &(0x7f0000000140)=""/83, 0x53)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x95, 0x102)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}})
r5 = socket(0x40000000015, 0x5, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto(r6, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e", 0xa4, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0)
socket(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1})

5.394302839s ago: executing program 4 (id=2080):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}}}, 0x26)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f000000000000000000000000000000000114002000ffe40000000000000000ffff000000000500070000000000060002000100000008000a"], 0x5c}}, 0x0)

5.224718667s ago: executing program 4 (id=2081):
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x1000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x5813f000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0)

4.833745617s ago: executing program 5 (id=2083):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
syz_io_uring_setup(0x5c6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0xfffffffd}, 0x0, 0x0)
eventfd2(0x97d, 0x1)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}, {0x0}], 0x2})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="20150700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x0, 0xe, 0x4, "c6bee303"}, 0x0, 0x0})

4.073618134s ago: executing program 4 (id=2085):
r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x4}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000580)=<r2=>0x0)
r3 = syz_io_uring_setup(0x2de5, &(0x7f0000000140)={0x0, 0x980a, 0x2, 0x0, 0xc5}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
r6 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r6, 0xc0405627, &(0x7f0000000080))
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1})
ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f00000000c0))
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3404c895)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0)

3.413898033s ago: executing program 4 (id=2087):
socket$l2tp(0x2, 0x2, 0x73) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random}) (async)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x0, 0x0, 0xb49, 0x9, 0x401, 0x7d3d, 0x3}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) (async)
r3 = syz_open_dev$usbmon(0x0, 0x4, 0x0)
dup3(r3, 0xffffffffffffffff, 0x0) (async)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r5, 0x40045431, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r6, 0x20, 0xe7, 0x25dfdbff, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x4000000) (async)
epoll_create(0x9) (async, rerun: 64)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 64)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f00000004c0)=0x4) (async, rerun: 64)
close_range(r8, 0xffffffffffffffff, 0x0) (rerun: 64)

3.177773822s ago: executing program 3 (id=2088):
socket$netlink(0x10, 0x3, 0x4) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) (async)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) (async)
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) (async)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) (async)
move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x2) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000280)=""/169) (async, rerun: 64)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (rerun: 64)
sendmsg$IPSET_CMD_SAVE(r7, 0x0, 0x8000) (async, rerun: 32)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
r8 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0)
ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) (async, rerun: 32)
io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)

3.157293077s ago: executing program 0 (id=2089):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) (async)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) (async)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x1, 0x40, 0x3, 0x5}}) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000044000080, 0x3, 0x8, 0x0, 0x4, 0x84, 0x8001], 0x1, 0x3c4210}) (async)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x80000000}) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140))

2.713453802s ago: executing program 0 (id=2090):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38)
write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x5, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0x1, 0xd}, 0x1}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0xfe, 0x8000}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x3, 0x0, 0x0, @time, {0x0, 0x8}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x1}, @connect={{}, {0x0, 0xfd}}}], 0xc4)
write$sndseq(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(0xffffffffffffffff, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0xfc, 0x0, 0x7, 0x0, @tick, {}, {}, @addr}], 0x94)
write$sndseq(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x56})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0x10, 0x0, 0x1, 0x147, 0x20008, 0x7}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x80000001, 0x4)
syz_open_dev$sg(&(0x7f0000000280), 0x0, 0xa2242)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0xf)
pipe(&(0x7f0000000080))
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="401403"], 0x0, 0x0})

2.71029481s ago: executing program 3 (id=2091):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast1}}}, 0x26)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f000000000000000000000000000000000114002000ffe40000000000000000ffff000000000500070000000000060002000100000008000a"], 0x5c}}, 0x0)

2.679963327s ago: executing program 2 (id=2092):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b5"], 0x0)
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r2, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@caif=@dgm={0x25, 0xe, 0x72}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="080100000000000029", @ANYRESDEC=0x0], 0x108}}], 0x1, 0xc040)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000001a80)={'#! ', './file1/../file0'}, 0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0))
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x800200, 0x0, 0x1, 0x3}, 0x20)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2020)
write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, 'f\xce\x01\x00\xc7\xbb\xb5\xb7\x01\xfb\x03\x92\xa7,x\x9f\xfc4(\xa4\x7f@\xdc\x0f\xbe\x0fs\xea6\xe4\xbf\\\x12\x19pnm;\x18S\xa0x\xc0\xcf>\xad\xf6c\x0f\x0f\x03\f\x15\x1c\xb3ei\\'}], 0xa, "0002784148b29e7bcaf3e29c2593b929f38d08de9a57967d49c269445df5a02a484a4fff1f05bbd60b043247a4e72e4f0bedb7c930aa4ab1e46695c1fb6ce947a12539fd90c30a1de6c9c3f7d33fc18866cb172e469352b6ba03830dbcf172d1f7cf467bf6bea0cf4c0aa3cc"}, 0xbb)
write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x67ce, 0x4)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000140)=0x3, 0x4)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000180)=0x6, 0x4)
recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000300)={0xfffffff8, 0x1000, {}, {0xee01}, 0x2, 0x3})

2.448769027s ago: executing program 3 (id=2093):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00')
write$binfmt_format(r5, &(0x7f0000000300)='1\x00', 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
io_setup(0x20fe, &(0x7f0000000540)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000002680)=[&(0x7f0000000000)={0x0, 0x0, 0xe4, 0x0, 0x0, r2, 0x0, 0x0, 0x7, 0x0, 0x0, r2}])
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r9=>0x0})
read(r7, &(0x7f0000000240)=""/235, 0xeb)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r9], 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, r8, 0x20, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r10 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r10, &(0x7f0000000480)={0xa, 0x4e22, 0x1, @loopback, 0x5}, 0x1c)
dup2(r10, r10)

2.261078403s ago: executing program 5 (id=2094):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @ioapic={0x0, 0x5, 0x5, 0x201, 0x0, [{0x7, 0x8, 0x4, '\x00', 0x7f}, {0xfc, 0x1, 0x6, '\x00', 0xc}, {0x3, 0x5, 0x7f, '\x00', 0x3}, {0x6, 0x6, 0x9, '\x00', 0x5}, {0x7, 0x2a, 0x0, '\x00', 0x2}, {0x9, 0x5, 0x7, '\x00', 0x8}, {0x12, 0x40, 0x2, '\x00', 0xf}, {0xf7, 0x5, 0x3}, {0xfc, 0xff, 0x53, '\x00', 0x8}, {0x4, 0x0, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xd, '\x00', 0x5}, {0x6, 0x6, 0x57, '\x00', 0x4}, {0x3, 0x9, 0x0, '\x00', 0x7}, {0x0, 0x7, 0x5, '\x00', 0xa}, {0x8, 0x1, 0x6, '\x00', 0xf9}, {0x2, 0x9, 0x7, '\x00', 0x5}, {0x5, 0x8, 0x4b, '\x00', 0x1}, {0x5, 0x2, 0x9, '\x00', 0x7f}, {0x1, 0x5, 0x4, '\x00', 0x6}, {0xf9, 0x7, 0xfe, '\x00', 0x7}, {0xad, 0x7, 0x9, '\x00', 0xd9}, {0x2, 0x8, 0x2, '\x00', 0x9}, {0x1, 0xe5, 0x0, '\x00', 0x91}, {0xe5, 0xfb, 0x40, '\x00', 0xf}]}})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002040)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x18, 0x1, {0x7, 0x20000000, 0x4, 0x2, 0xfffffffe, {0x2, 0x1, 0x49, 0x7, 0x5, 0x3}, {0x10, 0x0, 0x4, 0x7, 0xb0a, 0x900}, 0x2, 0x4, 0x5}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x4000804)

2.088030226s ago: executing program 4 (id=2095):
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x1000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff00000000080008000001"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x5813f000)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0)

1.436361906s ago: executing program 0 (id=2096):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) (async)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) (async)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a070089b4c45a10000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) (async)
r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
unshare(0x22020600) (async)
r5 = dup2(r4, r3)
write$cgroup_subtree(r5, 0x0, 0xfdef)
readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/255, 0xff}], 0x1) (async)
write$sndseq(r2, &(0x7f0000000300)=[{0x86, 0x8, 0xa9, 0xf5, @tick=0x4, {0x6, 0xc}, {0xec, 0x6}, @queue={0x2, {0x800, 0x4}}}, {0x40, 0xb7, 0x5, 0x2d, @time={0x1, 0x8}, {0x1, 0xb4}, {0x5, 0x7}, @ext={0x0, 0x0}}], 0x38)

1.377922711s ago: executing program 5 (id=2097):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
unshare(0x22020600)
r3 = syz_open_dev$loop(&(0x7f00000008c0), 0x6, 0x8d8a2)
readahead(r3, 0x20002fd1, 0xc22)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000440)=""/103, 0x67}, {&(0x7f0000000580)=""/66, 0x42}], 0x3, &(0x7f00000006c0)=""/203, 0xcb}, 0xfffffffc}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r4, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0)
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff, 0x20000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffff89)
lseek(r4, 0x0, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
r6 = syz_create_resource$binfmt(0x0)
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f00000000c0), 0x0)
r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
close(r7)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0)
read(r8, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x6, 0x0)

1.074568599s ago: executing program 0 (id=2098):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
writev(r1, &(0x7f0000001880)=[{&(0x7f00000018c0)}, {0x0}], 0x2)

982.563067ms ago: executing program 4 (id=2099):
getrlimit(0x1d, 0x0)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x48, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x2)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x4, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}})
socket$kcm(0xa, 0x922000000003, 0x11)
r6 = socket$igmp(0x2, 0x3, 0x2)
ioctl$I2C_FUNCS(r5, 0x705, &(0x7f0000000480)=0x2)
setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8880}, 0x800)

864.422399ms ago: executing program 0 (id=2100):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004a00390200000000000000000a00c600", @ANYRES32=0x0, @ANYBLOB="d561e7e5e227094058f808a7ae61c449cc16d55fb460a6e530a42b472fb1fe9ae493bbd768940b6e6a92567d3bbc1bfcf9658f9e805fd0cdea3c43aed8a7e8b70037b7282398aa1300000000000000000081b198636452b441fb94bea5dd3e9c4d4e"], 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x8, 0x27, 0x5, 0x7}]})
sendto$inet(r5, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f00000004c0)='./file0\x00', 0x8400017a)
lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x4, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x4, 0xfff, 0x4, {0x9, @sliced={0xd, [0x2, 0x9, 0x0, 0x7, 0x2, 0x3, 0xfff9, 0x3, 0x104d, 0x1, 0x4, 0x6a, 0x200, 0x8f, 0x7, 0x4, 0x4, 0x8022, 0x3, 0xd, 0x2, 0x1000, 0x50, 0x5, 0x1, 0x9, 0x1c61, 0x3, 0x9, 0x9, 0x9, 0x7, 0xbaab, 0x7, 0x21, 0x3e1f, 0x5, 0x7, 0x0, 0x9f, 0x5, 0xd, 0x4, 0x100, 0x1100, 0x4, 0x7d82, 0x7], 0x9}}, 0xfffffffd})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd"], 0x0)

709.123658ms ago: executing program 2 (id=2101):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000000)={0x0, 0x300})
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) (async)
clock_getres(0x2, &(0x7f0000000100)) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r4, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @ipv6=@tipc_packet={0x5, 0x6, "a9d097", 0xa8, 0x6, 0xcde584212921cc8c, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[@fragment={0xa, 0x0, 0x8, 0x1, 0x0, 0x14, 0x66}, @srh={0x0, 0x0, 0x4, 0x0, 0x36, 0x28, 0xc}, @srh={0x16, 0xe, 0x4, 0x7, 0x8, 0x60, 0xe, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x30}, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}]}], @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x0, 0x2, 0x400, 0x0, 0x1, 0x6, 0x5, 0x3, 0x1ff, 0x7b44, 0x4, 0x4e23, 0x4e23}, 0x2, 0x2}}}}}}, 0xde)
write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x5}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r7, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)}, {&(0x7f0000000500)="86e9a0", 0x3}, {&(0x7f00000005c0)}], 0x4}}], 0x1, 0x4000800) (async)
acct(&(0x7f00000001c0)='./file0\x00')
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

707.434423ms ago: executing program 3 (id=2102):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, 0x0)
r0 = io_uring_setup(0x3e2f, &(0x7f0000000180))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x49, 0x8, 0x2, "0200000025052e8bd9e66602010000000000000000722a0100", 0x31324d4e})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x405})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
uname(&(0x7f0000002280)=""/4096)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000140)={0x0, 0xb, 0x303, 0xfffe, 0x0, 0x0, 0x0})
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r8, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x80, 0x20203843, 0x2, [0x2], [0x80ffdc], [], [0x3ffffffffffffff, 0x0, 0x1]})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x30000}, 0x0)
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES8], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x40000000000000)

335.957373ms ago: executing program 3 (id=2103):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f000000000000000000000000000000000114002000ffe40000000000000000ffff000000000500070000000000060002000100000008000a"], 0x5c}}, 0x0)

0s ago: executing program 3 (id=2104):
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x402380, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x80000001, {0x0, 0x6, 0xdc9e, 0xfffffffffffffffc, 0x7}})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x800404, 0x20000)
ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000240)={0x0, 0x0, {0x2, 0x8000008, 0x0, 0x80000000}})
ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x400)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x10010, r3, 0xb9d90000)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2})
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
write$cgroup_type(r7, &(0x7f0000000080), 0x11ffffce1)

kernel console output (not intermixed with test programs):

dc_mbim 4-1:1.0: nonzero urb status received: -71
[  566.671921][    C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  566.682498][    C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71
[  566.689418][    C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes
[  566.726123][ T1207] usb 4-1: USB disconnect, device number 89
[  566.763924][T12795] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1605'.
[  566.773252][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'.
[  566.782605][T12795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1605'.
[  566.840742][ T1207] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  567.415397][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  567.437854][ T1207] wwan wwan0: port wwan0mbim0 disconnected
[  567.476871][ T5882] ntrig 0003:1B96:0009.000D: unknown main item tag 0x0
[  567.601064][ T5882] ntrig 0003:1B96:0009.000D: unknown main item tag 0x0
[  567.638651][ T5882] ntrig 0003:1B96:0009.000D: unknown main item tag 0x0
[  567.802760][ T5882] ntrig 0003:1B96:0009.000D: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.2-1/input0
[  567.834880][ T5882] ntrig 0003:1B96:0009.000D: Firmware version: 1.1.18.2.1 (4672 5940)
[  567.977715][T12813] hub 9-0:1.0: USB hub found
[  567.984351][T12813] hub 9-0:1.0: 1 port detected
[  568.907989][ T5882] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  569.215185][ T5882] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  569.243049][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.364985][ T5882] usb 5-1: Product: syz
[  569.484671][ T5882] usb 5-1: Manufacturer: syz
[  569.540822][ T5882] usb 5-1: SerialNumber: syz
[  569.628302][ T5909] net_ratelimit: 204 callbacks suppressed
[  569.628318][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.660672][ T5902] usb 3-1: USB disconnect, device number 97
[  569.768173][ T5882] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  570.104025][ T1207] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  570.683651][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.951100][T12861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  570.987095][T12861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.130834][T12866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.139680][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.475622][ T1207] usb 5-1: Service connection timeout for: 256
[  571.482442][ T1207] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  571.540379][ T1207] ath9k_htc: Failed to initialize the device
[  571.546676][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.558665][ T1207] usb 5-1: ath9k_htc: USB layer deinitialized
[  571.711546][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.261787][ T5882] usb 5-1: USB disconnect, device number 106
[  572.381389][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1625'.
[  572.613101][ T5902] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  572.746655][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.786124][ T5902] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  572.812553][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.842697][ T5902] usb 4-1: Product: syz
[  572.856499][ T5902] usb 4-1: Manufacturer: syz
[  572.862862][T12890] sit0: entered promiscuous mode
[  572.872267][ T5902] usb 4-1: SerialNumber: syz
[  572.886387][T12890] netlink: 'syz.5.1626': attribute type 1 has an invalid length.
[  572.906422][ T5902] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  572.919232][T12890] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1626'.
[  572.942537][ T5909] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  573.247166][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'.
[  573.328193][T12901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  573.605221][ T5902] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  573.790513][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.809085][ T5902] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  573.833245][ T5902] usb 6-1: config 0 has no interface number 0
[  573.849427][ T5902] usb 6-1: config 0 interface 41 has no altsetting 0
[  573.872855][ T5902] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  573.902748][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.939485][ T5902] usb 6-1: Product: syz
[  573.950254][ T5902] usb 6-1: Manufacturer: syz
[  573.955439][ T5902] usb 6-1: SerialNumber: syz
[  573.969571][ T5902] usb 6-1: config 0 descriptor??
[  574.037328][T12908] loop2: detected capacity change from 0 to 7
[  574.061167][T12908] Dev loop2: unable to read RDB block 7
[  574.085693][T12909] netdevsim netdevsim2: Direct firmware load for /
[  574.085693][T12909]  failed with error -2
[  574.098038][T12908]  loop2: unable to read partition table
[  574.105868][T12908] loop2: partition table beyond EOD, truncated
[  574.121608][T12908] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  574.190309][T12909] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[  574.190309][T12909] 
[  574.263117][ T5909] usb 4-1: Service connection timeout for: 256
[  574.269539][ T5909] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  574.344462][ T5909] ath9k_htc: Failed to initialize the device
[  574.355033][ T5909] usb 4-1: ath9k_htc: USB layer deinitialized
[  574.583298][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.839005][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.053384][ T5902] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  575.075067][ T5902] usb 6-1: USB disconnect, device number 39
[  575.133227][T12916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.157494][T12916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  575.167117][T12912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.273227][   T10] usb 5-1: new full-speed USB device number 107 using dummy_hcd
[  575.278471][T12912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  575.307562][ T5882] usb 4-1: USB disconnect, device number 90
[  576.096889][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.105233][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.520730][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.521118][T12922] syzkaller0: entered promiscuous mode
[  577.542148][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'.
[  577.604916][T12922] syzkaller0: entered allmulticast mode
[  577.645862][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.153101][   T10] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  578.325209][   T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  578.341371][   T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  578.387324][   T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  578.422385][   T10] usb 5-1: config 220 has no interface number 2
[  578.443134][   T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  578.490118][   T10] usb 5-1: config 220 interface 0 has no altsetting 0
[  578.513046][   T10] usb 5-1: config 220 interface 76 has no altsetting 0
[  578.533158][   T10] usb 5-1: config 220 interface 1 has no altsetting 0
[  578.572831][   T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  578.596264][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.618837][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.663032][   T10] usb 5-1: Product: syz
[  578.667267][   T10] usb 5-1: Manufacturer: syz
[  578.682996][   T10] usb 5-1: SerialNumber: syz
[  578.917325][   T10] usb 5-1: selecting invalid altsetting 0
[  578.940046][   T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  578.964461][   T10] uvcvideo 5-1:220.0: No valid video chain found.
[  578.985603][   T10] usb 5-1: selecting invalid altsetting 0
[  579.003918][   T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  579.047140][   T10] usb 5-1: USB disconnect, device number 108
[  579.635764][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.673489][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.681653][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.701330][T12955] loop2: detected capacity change from 0 to 7
[  580.776033][T12963] dummy0: entered promiscuous mode
[  580.784254][T12963] dummy0: left promiscuous mode
[  581.533135][ T1207] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  581.617902][T12984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  581.722088][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.746666][ T1207] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  581.769342][ T1207] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  581.893018][ T1207] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  581.907527][ T1207] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  581.917108][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.969406][T12977] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  582.195294][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.224079][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.277560][T12987] syzkaller1: entered promiscuous mode
[  582.313080][T12987] syzkaller1: entered allmulticast mode
[  582.463604][ T1207] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  582.497144][ T1207] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input39
[  582.753311][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  582.760448][ T1207] usb 3-1: USB disconnect, device number 98
[  582.761481][    C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  583.591222][T13015] futex_wake_op: syz.4.1658 tries to shift op by -1; fix this program
[  583.872469][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  583.880736][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.013049][ T5902] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  584.173192][ T5902] usb 6-1: Using ep0 maxpacket: 32
[  584.188818][ T5902] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  584.200259][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.209460][T13024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.218917][T13024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.265975][ T5902] usb 6-1: Product: syz
[  584.279439][ T5902] usb 6-1: Manufacturer: syz
[  584.308972][ T5902] usb 6-1: SerialNumber: syz
[  584.366072][ T5902] usb 6-1: config 0 descriptor??
[  584.389812][ T5902] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  584.514434][T13027] syzkaller0: entered promiscuous mode
[  584.514495][T13027] syzkaller0: entered allmulticast mode
[  584.526301][ T5909] usb 5-1: new full-speed USB device number 109 using dummy_hcd
[  584.705634][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  584.717132][ T5909] usb 5-1: config 1 has no interface number 0
[  584.725939][ T5909] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  584.743751][ T5909] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  584.764211][ T5909] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  584.776415][ T5909] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  584.795292][ T5909] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 8016, setting to 64
[  584.801055][T13016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.840233][T13016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.854627][ T5909] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  584.901808][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.920163][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.950790][ T5909] usb 5-1: Product: syz
[  584.958014][ T5909] usb 5-1: Manufacturer: syz
[  584.963036][ T5909] usb 5-1: SerialNumber: syz
[  584.980025][T13026] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  585.139536][T13035] kAFS: unable to lookup cell 'ÿ'
[  585.152183][ T5902] gspca_ov534_9: reg_w failed -71
[  585.194595][T13026] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  585.212514][T13026] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  585.233030][ T1207] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  585.258117][T13036] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  585.383640][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.407088][ T1207] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  585.418113][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.435434][ T1207] usb 4-1: Product: syz
[  585.445473][ T1207] usb 4-1: Manufacturer: syz
[  585.455264][ T1207] usb 4-1: SerialNumber: syz
[  585.470607][T13036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.479783][ T5902] gspca_ov534_9: Unknown sensor 0000
[  585.479917][ T5902] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[  585.496753][T13036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.513534][ T5902] usb 6-1: USB disconnect, device number 40
[  585.523909][ T1207] usb 4-1: config 0 descriptor??
[  585.551096][ T1207] gspca_main: sunplus-2.14.0 probing 055f:c230
[  586.001963][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.013074][ T5909] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS
[  586.033557][ T5909] cdc_ncm 5-1:1.1: bind() failure
[  586.100181][ T5909] usb 5-1: USB disconnect, device number 109
[  586.111651][T13040] syzkaller1: entered promiscuous mode
[  586.123371][T13040] syzkaller1: entered allmulticast mode
[  586.781308][T13050] syzkaller0: entered promiscuous mode
[  586.787115][T13050] syzkaller0: entered allmulticast mode
[  587.006609][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.063472][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.116651][ T1207] gspca_sunplus: reg_r err -110
[  587.121701][ T1207] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[  587.273112][ T5902] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  587.803078][  T797] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  588.113473][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.293036][  T797] usb 5-1: Using ep0 maxpacket: 8
[  588.309182][  T797] usb 5-1: unable to get BOS descriptor or descriptor too short
[  588.321343][  T797] usb 5-1: config 10 has an invalid interface number: 183 but max is 0
[  588.337859][  T797] usb 5-1: config 10 has no interface number 0
[  588.349909][  T797] usb 5-1: config 10 interface 183 has no altsetting 0
[  588.394976][  T797] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  588.423133][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.453294][  T797] usb 5-1: Product: syz
[  588.457517][  T797] usb 5-1: Manufacturer: syz
[  588.462133][  T797] usb 5-1: SerialNumber: syz
[  588.626652][T13077] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  588.710083][T13061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.769502][T13061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.849972][  T797] usb 5-1: USB disconnect, device number 110
[  589.093832][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.106943][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.115644][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.125589][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.139573][T13089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.153369][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.583109][ T1207] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  589.733037][ T5902] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  589.753014][ T1207] usb 6-1: Using ep0 maxpacket: 8
[  589.773289][  T797] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  589.786518][ T1207] usb 6-1: unable to get BOS descriptor or descriptor too short
[  589.826253][ T1207] usb 6-1: config 11 has an invalid interface number: 242 but max is 0
[  589.853058][ T1207] usb 6-1: config 11 has no interface number 0
[  589.873173][ T1207] usb 6-1: config 11 interface 242 altsetting 225 has an endpoint descriptor with address 0x7B, changing to 0xB
[  589.887561][ T5902] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  589.913006][ T1207] usb 6-1: config 11 interface 242 altsetting 225 bulk endpoint 0xB has invalid maxpacket 8
[  589.933044][  T797] usb 5-1: Using ep0 maxpacket: 16
[  589.933060][ T1207] usb 6-1: config 11 interface 242 altsetting 225 endpoint 0x6 has invalid maxpacket 15735, setting to 1024
[  589.933090][ T1207] usb 6-1: config 11 interface 242 altsetting 225 bulk endpoint 0x6 has invalid maxpacket 1024
[  589.991122][ T1207] usb 6-1: config 11 interface 242 altsetting 225 endpoint 0xE has an invalid bInterval 0, changing to 7
[  589.992487][  T797] usb 5-1: too many configurations: 14, using maximum allowed: 8
[  590.022988][ T5902] usb 3-1: config 1 has no interface number 1
[  590.029328][ T5902] usb 3-1: too many endpoints for config 1 interface 2 altsetting 2: 189, using maximum allowed: 30
[  590.053081][ T1207] usb 6-1: config 11 interface 242 altsetting 225 endpoint 0xE has invalid wMaxPacketSize 0
[  590.083544][ T5902] usb 3-1: config 1 interface 2 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  590.117315][ T1207] usb 6-1: config 11 interface 242 has no altsetting 0
[  590.133147][ T5902] usb 3-1: config 1 interface 2 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 189
[  590.156339][ T1207] usb 6-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=38.8a
[  590.173499][  T797] usb 5-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad
[  590.173499][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.182678][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.182703][  T797] usb 5-1: Product: syz
[  590.182719][  T797] usb 5-1: Manufacturer: syz
[  590.182734][  T797] usb 5-1: SerialNumber: syz
[  590.224982][ T5902] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 192, changing to 7
[  590.225364][ T1207] usb 6-1: Product: syz
[  590.237499][  T797] usb 5-1: config 0 descriptor??
[  590.241387][ T1207] usb 6-1: Manufacturer: syz
[  590.264621][T13100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.286188][T13100] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.293927][ T5902] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  590.293961][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.308624][ T1207] usb 6-1: SerialNumber: syz
[  590.326815][ T5902] usb 3-1: Product: Г
[  590.330953][ T5902] usb 3-1: Manufacturer: �嬠陈竚趜㵱﹅鲾�ቷ䯧ﳎ縺嗜페飈㉔㌧��ṃ�⮕�೅턌㎛���Ꭸ摭ນ�᳧੗��钗⒎롋舼㔦겒ⱼᴨ刎曟牢㈉蛾
[  590.363739][T13082] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  590.388136][T13082] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  590.406397][T13100] netlink: 'syz.3.1679': attribute type 7 has an invalid length.
[  590.430803][ T5902] usb 3-1: SerialNumber: 㨑�鳇�轀�亂⣵ꈎﲬ⬱�覷䪀Ą젮ёꄮ횹섾驦�걸ꅄ飠�㫊鮼�虾릛⹄瞧�쟆伫ꖶ丩�2輻挑鮈緢悬鰜�復ꢻ��ꒂ摃葶痠ꚡ�紥棨鸺롿婴ы餔俙훹ꆑペ熟찧Ꜧ煀眪淖䢖蕽㛸�烧蒋컡ᓎ왓颓㚹앇囃衭㙶夃
[  590.579500][  T797] usb 5-1: USB disconnect, device number 111
[  590.698862][T13106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.708595][T13106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.861148][T13082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.949525][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'.
[  590.979747][T13082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.030903][T13081] net_ratelimit: 21 callbacks suppressed
[  591.030919][T13081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.060579][ T1207] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out.
[  591.078429][T13113] loop8: detected capacity change from 0 to 8
[  591.103913][ T1207] usb 6-1: USB disconnect, device number 42
[  591.181884][ T5902] usb 3-1: USB disconnect, device number 99
[  591.201137][T13113] Dev loop8: unable to read RDB block 8
[  591.218138][T13113]  loop8: unable to read partition table
[  591.249494][T13113] loop8: partition table beyond EOD, truncated
[  591.266388][T13113] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  591.273433][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  591.303207][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.243310][ T5902] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[  592.343541][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  592.407257][ T5902] usb 6-1: config 162 has an invalid interface number: 186 but max is 1
[  592.417173][ T5902] usb 6-1: config 162 has an invalid descriptor of length 244, skipping remainder of the config
[  592.431669][ T5902] usb 6-1: config 162 has 1 interface, different from the descriptor's value: 2
[  592.443793][ T5140] Bluetooth: hci5: command 0x0406 tx timeout
[  592.451763][T13100] Bluetooth: hci5: Opcode 0x0c1a failed: -110
[  592.482762][T13100] Bluetooth: hci5: Error when powering off device on rfkill (-110)
[  592.499041][ T5902] usb 6-1: config 162 has no interface number 0
[  592.530642][ T5902] usb 6-1: config 162 interface 186 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  592.608124][ T5902] usb 6-1: config 162 interface 186 has no altsetting 0
[  592.633886][ T5902] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=7b.8e
[  592.647838][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.666219][ T5902] usb 6-1: Product: syz
[  592.686444][ T5902] usb 6-1: Manufacturer: syz
[  592.699060][ T5902] usb 6-1: SerialNumber: syz
[  592.924213][T13127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.947893][T13127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  592.973401][T13136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.983284][T13135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.994012][T13136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.003536][T13135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.039625][ T5902] gspca_main: nw80x-2.14.0 probing 055f:d001
[  593.059011][ T5902] gspca_nw80x: reg_w err -71
[  593.069257][ T5902] nw80x 6-1:162.186: probe with driver nw80x failed with error -71
[  593.078424][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.082848][ T5902] usb 6-1: USB disconnect, device number 43
[  593.413251][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.863899][T13153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1691'.
[  593.897468][T13153] libceph: resolve '0..' (ret=-3): failed
[  594.125307][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1693'.
[  594.425085][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.801208][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'.
[  594.812679][T13165] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1696'.
[  594.835020][   T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  594.987081][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.145343][   T10] usb 3-1: Using ep0 maxpacket: 16
[  595.168111][   T10] usb 3-1: config 0 interface 0 altsetting 102 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.191683][   T10] usb 3-1: config 0 interface 0 altsetting 102 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.217831][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  595.232543][   T10] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  595.261567][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.333822][   T10] usb 3-1: config 0 descriptor??
[  595.486073][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.753741][   T10] asus 0003:0B05:1ABE.000E: unknown main item tag 0x1
[  595.813704][   T10] asus 0003:0B05:1ABE.000E: hidraw0: USB HID va.4b Device [HID 0b05:1abe] on usb-dummy_hcd.2-1/input0
[  595.883380][T11875] usb 5-1: new full-speed USB device number 112 using dummy_hcd
[  595.942621][T13175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  595.972467][ T5882] usb 3-1: USB disconnect, device number 100
[  595.995463][T13174] syzkaller1: entered promiscuous mode
[  596.001033][T13174] syzkaller1: entered allmulticast mode
[  596.060458][T11875] usb 5-1: unable to read config index 0 descriptor/start: -71
[  596.104777][T11875] usb 5-1: can't read configurations, error -71
[  596.224858][T13180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.253484][T13180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.378206][T13184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1702'.
[  596.389941][T13184] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1702'.
[  596.457156][T13184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.488709][T13184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.663740][ T5882] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  596.722064][T13194] syzkaller1: entered promiscuous mode
[  596.728421][T13194] syzkaller1: entered allmulticast mode
[  596.737175][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1704'.
[  596.844325][ T5882] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  596.864099][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.882790][ T5882] usb 6-1: Product: syz
[  596.891816][ T5882] usb 6-1: Manufacturer: syz
[  596.921115][ T5882] usb 6-1: SerialNumber: syz
[  596.965273][ T5882] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  596.992038][   T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  597.173121][T11875] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  597.271068][T13201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.313796][T13201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.373182][T11875] usb 5-1: Using ep0 maxpacket: 8
[  597.380772][T11875] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  597.390779][T11875] usb 5-1: config 0 has no interface number 0
[  597.399165][T11875] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  597.413159][T11875] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  597.425066][T11875] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  597.437300][T11875] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  597.449708][T11875] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  597.471609][T11875] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  597.482385][T11875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.492630][T13209] netlink: 'syz.2.1710': attribute type 1 has an invalid length.
[  597.501653][T11875] usb 5-1: Product: syz
[  597.512078][T11875] usb 5-1: Manufacturer: syz
[  597.520083][T11875] usb 5-1: SerialNumber: syz
[  597.533468][T11875] usb 5-1: config 0 descriptor??
[  597.611729][T13209] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address
[  597.650433][T13209] bond4: (slave vxcan1): Error -95 calling set_mac_address
[  597.767303][T11875] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  598.264682][   T10] usb 6-1: Service connection timeout for: 256
[  598.271279][   T10] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  598.716901][   T10] ath9k_htc: Failed to initialize the device
[  598.746104][   T10] usb 6-1: ath9k_htc: USB layer deinitialized
[  598.869371][    C1] iowarrior 5-1:0.186: iowarrior_callback - usb_submit_urb failed with result -1
[  598.881460][ T5882] usb 5-1: USB disconnect, device number 113
[  599.772559][T13230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.782079][T11875] usb 6-1: USB disconnect, device number 44
[  599.816570][T13230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.967006][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1716'.
[  599.978531][T13234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1715'.
[  600.003296][T13234] libceph: resolve '0..' (ret=-3): failed
[  600.286949][T13236] syzkaller0: entered promiscuous mode
[  600.298696][T13236] syzkaller0: entered allmulticast mode
[  600.426617][T13238] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1718'.
[  600.443505][T13238] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1718'.
[  601.021847][T13251] 
@ÿ: renamed from bond_slave_0 (while UP)
[  601.107230][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.123025][   T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  601.123416][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.191120][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.211913][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.232730][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.251735][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.263049][   T10] usb 6-1: device descriptor read/64, error -71
[  601.469298][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.483765][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.498086][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.507738][   T10] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  601.519157][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.653020][   T10] usb 6-1: device descriptor read/64, error -71
[  601.738791][T13261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.766832][T13261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.775107][ T5882] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  601.810054][   T10] usb usb6-port1: attempt power cycle
[  601.853121][T13268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.865147][T13268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.912279][T13268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.928500][T13268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.011477][ T5882] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  602.028877][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.063167][ T5882] usb 5-1: Product: syz
[  602.067390][ T5882] usb 5-1: Manufacturer: syz
[  602.098841][ T5882] usb 5-1: SerialNumber: syz
[  602.159612][ T5882] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  602.169252][   T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  602.192220][ T1207] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  602.204483][   T10] usb 6-1: device descriptor read/8, error -71
[  602.463089][   T10] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  602.487130][T13279] netlink: 'syz.3.1729': attribute type 1 has an invalid length.
[  602.513101][   T10] usb 6-1: device descriptor read/8, error -71
[  602.543698][T11875] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  602.623511][   T10] usb usb6-port1: unable to enumerate USB device
[  602.723512][T11875] usb 3-1: Using ep0 maxpacket: 16
[  602.737605][T11875] usb 3-1: unable to get BOS descriptor or descriptor too short
[  602.746936][T11875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  602.758499][T13281] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address
[  602.772120][T11875] usb 3-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  602.812037][T13281] bond6: (slave vxcan1): Error -95 calling set_mac_address
[  602.819660][T11875] usb 3-1: config 1 interface 0 has no altsetting 0
[  602.838949][T11875] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  602.852672][T11875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.871599][T11875] usb 3-1: Product: syz
[  602.883025][T11875] usb 3-1: Manufacturer: syz
[  602.891729][T11875] usb 3-1: SerialNumber: syz
[  602.935350][T11875] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input43
[  602.962124][T13282] syzkaller1: entered promiscuous mode
[  602.967729][T13282] syzkaller1: entered allmulticast mode
[  603.231609][T13288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.246177][T13288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.266723][T13289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.276729][T13289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.392572][ T5174] bcm5974 3-1:1.0: could not read from device
[  603.427364][ T5174] bcm5974 3-1:1.0: could not read from device
[  603.465441][ T1207] usb 5-1: Service connection timeout for: 256
[  603.472165][ T1207] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  603.478476][T11875] usb 3-1: USB disconnect, device number 101
[  603.487697][ T5174] bcm5974 3-1:1.0: could not read from device
[  603.505057][ T5174] bcm5974 3-1:1.0: could not read from device
[  603.535598][ T1207] ath9k_htc: Failed to initialize the device
[  603.566504][ T1207] usb 5-1: ath9k_htc: USB layer deinitialized
[  604.643062][T11875] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  604.746073][   T10] usb 5-1: USB disconnect, device number 114
[  604.793729][T11875] usb 3-1: Using ep0 maxpacket: 16
[  604.808061][T11875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.839682][T11875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  604.876387][T11875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  604.897196][T11875] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  604.906541][T11875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.096351][T13318] macsec1: entered promiscuous mode
[  605.105442][T13318] macsec1: entered allmulticast mode
[  605.118669][T11875] usb 3-1: config 0 descriptor??
[  605.335509][T11875] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max
[  605.366030][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  605.398136][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  605.426298][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  605.452205][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  605.627620][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  605.713344][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  605.723202][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  605.803131][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  605.820241][T13329] syzkaller1: entered promiscuous mode
[  605.828076][T13329] syzkaller1: entered allmulticast mode
[  606.043078][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  606.058791][T11875] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  606.071639][T11875] microsoft 0003:045E:07DA.000F: unsupported Resolution Multiplier 0
[  606.086590][T11875] microsoft 0003:045E:07DA.000F: implement() called with n (56) > 32! (kworker/1:6)
[  606.163984][T11875] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  606.202360][T11875] microsoft 0003:045E:07DA.000F: no inputs found
[  606.463018][T11875] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway
[  606.547562][T11875] usb 3-1: USB disconnect, device number 102
[  606.706624][T13343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.733550][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.742344][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.757389][T13343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.766388][T13345] fuse: Unknown parameter 'd'
[  607.253041][ T5910] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  607.513043][ T5910] usb 3-1: device descriptor read/64, error -71
[  607.537292][T13360] netlink: 'syz.0.1750': attribute type 3 has an invalid length.
[  607.703104][ T5902] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  607.753123][ T5910] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  607.888159][ T5902] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  607.893090][ T5910] usb 3-1: device descriptor read/64, error -71
[  607.913895][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.924888][ T5902] usb 5-1: Product: syz
[  607.929103][ T5902] usb 5-1: Manufacturer: syz
[  607.957453][ T5902] usb 5-1: SerialNumber: syz
[  608.008338][ T5902] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  608.030524][ T5910] usb usb3-port1: attempt power cycle
[  608.453081][ T5910] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  608.466193][T11875] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  608.494899][ T5910] usb 3-1: device descriptor read/8, error -71
[  608.515272][T13373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.532191][T13373] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.546002][T13375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.558685][T13375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.900538][ T5910] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  609.059390][ T5910] usb 3-1: device descriptor read/8, error -71
[  609.232523][ T5910] usb usb3-port1: unable to enumerate USB device
[  609.350019][T13379] syzkaller1: entered promiscuous mode
[  609.355692][T13379] syzkaller1: entered allmulticast mode
[  609.783057][T11875] usb 5-1: Service connection timeout for: 256
[  609.789350][T11875] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  609.861262][T11875] ath9k_htc: Failed to initialize the device
[  609.890777][T11875] usb 5-1: ath9k_htc: USB layer deinitialized
[  609.993145][ T5910] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  610.168254][ T5910] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  610.178696][ T5910] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  610.227650][ T5910] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  610.291207][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  610.354038][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  610.427848][ T1207] usb 5-1: USB disconnect, device number 115
[  610.465624][ T5910] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  610.475398][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  610.561413][ T5910] usb 3-1: Product: syz
[  610.581274][ T5910] usb 3-1: Manufacturer: syz
[  610.620032][ T5910] cdc_wdm 3-1:1.0: skipping garbage
[  610.636764][ T5910] cdc_wdm 3-1:1.0: skipping garbage
[  610.687168][ T5910] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  610.717468][ T5910] cdc_wdm 3-1:1.0: Unknown control protocol
[  611.323801][T13397] netlink: 'syz.5.1759': attribute type 4 has an invalid length.
[  611.523644][T13396] netlink: 'syz.5.1759': attribute type 4 has an invalid length.
[  611.573343][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.104137][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.133201][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.368035][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.389222][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  613.643249][ T1207] usb 3-1: USB disconnect, device number 107
[  613.796259][T13414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.873602][T13414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.205366][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.214126][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.298702][T13421] syzkaller1: entered promiscuous mode
[  614.345283][T13421] syzkaller1: entered allmulticast mode
[  614.426825][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.637989][T11875] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  614.811601][T11875] usb 3-1: device descriptor read/64, error -71
[  615.037823][T13431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.103992][T13431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  615.138160][T11875] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  615.153734][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.421387][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  615.463683][T11875] usb 3-1: device descriptor read/64, error -71
[  615.517783][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  615.591782][T11875] usb usb3-port1: attempt power cycle
[  615.649320][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.043037][T11875] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  616.078044][T11875] usb 3-1: device descriptor read/8, error -71
[  616.283603][ T5909] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  616.321413][T13442] netlink: 480 bytes leftover after parsing attributes in process `syz.4.1772'.
[  616.333094][T11875] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  616.365136][T11875] usb 3-1: device descriptor read/8, error -71
[  616.457683][ T5909] usb 6-1: Using ep0 maxpacket: 32
[  616.475275][T11875] usb usb3-port1: unable to enumerate USB device
[  616.490368][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  616.508063][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  616.553362][ T5909] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[  616.590884][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  616.651403][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.711194][ T5909] usb 6-1: Product: syz
[  616.718254][ T5909] usb 6-1: Manufacturer: syz
[  616.733436][ T5909] usb 6-1: SerialNumber: syz
[  616.751104][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  616.751123][   T30] audit: type=1326 audit(1771839475.054:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  616.781616][   T30] audit: type=1326 audit(1771839475.054:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  616.805980][ T5909] usb 6-1: config 0 descriptor??
[  616.826904][   T30] audit: type=1326 audit(1771839475.084:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  616.893035][   T30] audit: type=1326 audit(1771839475.114:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  616.917556][   T30] audit: type=1326 audit(1771839475.114:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  616.955859][   T30] audit: type=1326 audit(1771839475.114:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  617.011582][   T30] audit: type=1326 audit(1771839475.114:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  617.043364][ T5909] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  617.062007][ T5909] peak_usb 6-1:0.0: unable to read PCAN-USB Pro FD firmware info (err -71)
[  617.125983][   T30] audit: type=1326 audit(1771839475.114:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  617.149321][   T30] audit: type=1326 audit(1771839475.114:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  617.203137][   T30] audit: type=1326 audit(1771839475.114:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13443 comm="syz.3.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  617.282402][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'.
[  617.373900][ T5909] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71
[  617.390797][T13447] : entered promiscuous mode
[  617.428005][ T5909] usb 6-1: USB disconnect, device number 49
[  617.625250][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.773052][ T5909] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  617.848174][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.873561][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.877191][ T1207] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  617.955493][ T5909] usb 3-1: config 0 has no interfaces?
[  617.974905][ T5909] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  617.999083][ T5909] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  618.034178][ T5909] usb 3-1: Manufacturer: syz
[  618.051438][ T1207] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  618.061078][ T1207] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  618.076532][ T1207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  618.090982][ T1207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  618.091562][ T5909] usb 3-1: config 0 descriptor??
[  618.107549][ T1207] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  618.140903][T13465] syzkaller1: entered promiscuous mode
[  618.146492][T13465] syzkaller1: entered allmulticast mode
[  618.158988][ T1207] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  618.168386][ T1207] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  618.177066][ T1207] usb 5-1: Product: syz
[  618.181478][ T1207] usb 5-1: Manufacturer: syz
[  618.186833][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.205262][ T1207] cdc_wdm 5-1:1.0: skipping garbage
[  618.211065][ T1207] cdc_wdm 5-1:1.0: skipping garbage
[  618.217992][ T1207] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  618.225317][ T1207] cdc_wdm 5-1:1.0: Unknown control protocol
[  618.663364][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.666676][T13473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.691403][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'.
[  618.701810][T13473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.184565][ T5909] usb 3-1: USB disconnect, device number 112
[  619.468000][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.601954][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.733740][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.564521][T13508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  620.596901][T13508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.607166][T13508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.747897][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  620.826446][ T1207] usb 5-1: USB disconnect, device number 116
[  621.073640][T13512] syzkaller1: entered promiscuous mode
[  621.079229][T13512] syzkaller1: entered allmulticast mode
[  621.223346][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.678302][T13520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.687859][T13520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.816499][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.046145][T13539] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1798'.
[  623.046187][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1798'.
[  623.084420][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.223057][ T5909] usb 3-1: new full-speed USB device number 113 using dummy_hcd
[  624.120332][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.133973][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.175199][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  624.175273][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  624.175305][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  624.175333][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  624.193222][ T5909] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  624.193301][ T5909] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  624.193324][ T5909] usb 3-1: Manufacturer: syz
[  624.214588][ T5909] usb 3-1: config 0 descriptor??
[  624.273263][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  624.430291][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  624.430360][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  624.663202][ T5909] rc_core: IR keymap rc-hauppauge not found
[  624.663223][ T5909] Registered IR keymap rc-empty
[  624.663670][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.692331][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.703902][ T5909] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  624.705202][ T5909] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input49
[  624.728742][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.743329][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.769241][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.773015][T13543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  624.773471][T13543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.786290][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.803440][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.827724][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.848779][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.872035][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.895198][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.915346][ T5909] mceusb 3-1:0.0: Error: mce write urb status = -71
[  624.936579][ T5909] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  624.936600][ T5909] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  625.002410][T13535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.002831][T13535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.079377][T13547] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1800'.
[  625.162541][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  625.467970][T13555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.468285][T13555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.554171][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'.
[  626.212726][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  626.309829][T11875] usb 3-1: USB disconnect, device number 113
[  626.475248][T13563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.485010][T13563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.960016][T13565] netlink: 'syz.5.1804': attribute type 32 has an invalid length.
[  627.237102][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.314376][T13570] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  627.321740][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.163007][ T5909] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  628.268301][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  628.339363][ T5909] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  628.372223][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.489591][ T5909] usb 5-1: Product: syz
[  628.498499][ T5909] usb 5-1: Manufacturer: syz
[  628.512746][ T5909] usb 5-1: SerialNumber: syz
[  629.058602][ T5909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  629.105003][ T5909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  629.229855][T13593] vivid-007: disconnect
[  629.304671][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.687009][  T797] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  629.935544][T13587] vivid-007: reconnect
[  629.945263][  T797] usb 3-1: device descriptor read/64, error -71
[  630.090744][T13595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1814'.
[  630.213063][  T797] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  630.346032][  T797] usb 3-1: device descriptor read/64, error -71
[  630.346240][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.360858][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  630.378402][ T5909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  630.400301][ T5909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  630.504765][T13605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1817'.
[  630.520417][T13605] libceph: resolve '0..' (ret=-3): failed
[  630.557665][ T5882] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  630.566181][  T797] usb usb3-port1: attempt power cycle
[  630.618360][T13580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.636074][T13580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.762499][ T5882] usb 6-1: device descriptor read/64, error -71
[  630.864758][ T5909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  630.880011][ T5909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  630.913176][  T797] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  630.932320][ T5909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  630.943692][  T797] usb 3-1: device descriptor read/8, error -71
[  630.960334][ T5909] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  630.983330][ T5909] usb 5-1: USB disconnect, device number 117
[  631.043836][ T5882] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  631.213018][  T797] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  631.213272][ T5882] usb 6-1: device descriptor read/64, error -71
[  631.326239][  T797] usb 3-1: device descriptor read/8, error -71
[  631.393332][ T5882] usb usb6-port1: attempt power cycle
[  631.433291][  T797] usb usb3-port1: unable to enumerate USB device
[  631.755376][ T5882] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  631.797446][ T5882] usb 6-1: device descriptor read/8, error -71
[  632.053040][ T5882] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  632.090142][ T5882] usb 6-1: device descriptor read/8, error -71
[  632.264459][T13631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.276890][T13631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.513302][ T5882] usb usb6-port1: unable to enumerate USB device
[  632.530871][  T797] net_ratelimit: 1 callbacks suppressed
[  632.530892][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.775181][T13635] syzkaller0: entered promiscuous mode
[  632.796597][T13635] syzkaller0: entered allmulticast mode
[  633.074165][T13635] bond0: (slave bond_slave_1): Releasing backup interface
[  633.285311][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.294070][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.355886][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.371080][  T460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.386696][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.395954][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.421839][T13641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.430527][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.583181][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.623140][ T5902] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  633.811389][ T5902] usb 6-1: Using ep0 maxpacket: 32
[  633.828757][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0
[  633.887582][ T5902] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  633.929369][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.966059][ T5902] usb 6-1: Product: syz
[  633.978921][ T5902] usb 6-1: Manufacturer: syz
[  634.028403][ T5902] usb 6-1: SerialNumber: syz
[  634.058309][ T5902] usb 6-1: config 0 descriptor??
[  634.563724][ T5902] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  634.625216][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'.
[  634.765575][T13641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.798277][T13641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  635.093709][   T10] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  635.262746][   T10] usb 5-1: Using ep0 maxpacket: 32
[  635.263469][ T5902] usb 6-1: USB disconnect, device number 54
[  635.303836][   T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  635.335401][   T10] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  635.397338][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  635.426297][T13670] loop2: detected capacity change from 0 to 7
[  635.433380][   T10] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  635.456125][ T6031] Dev loop2: unable to read RDB block 7
[  635.468027][ T6031]  loop2: unable to read partition table
[  635.473016][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.474699][ T6031] loop2: partition table beyond EOD, truncated
[  635.493780][T13670] Dev loop2: unable to read RDB block 7
[  635.501861][T13670]  loop2: unable to read partition table
[  635.526526][T13670] loop2: partition table beyond EOD, truncated
[  635.534988][   T10] usb 5-1: config 0 descriptor??
[  635.568438][T13670] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  635.964929][   T10] corsair-cpro 0003:1B1C:0C10.0010: item fetching failed at offset 2/5
[  635.989125][   T10] corsair-cpro 0003:1B1C:0C10.0010: probe with driver corsair-cpro failed with error -22
[  636.170153][T13683] netlink: 'syz.5.1837': attribute type 4 has an invalid length.
[  636.263208][T13687] netlink: 'syz.5.1837': attribute type 4 has an invalid length.
[  636.298765][T13690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1840'.
[  636.303840][ T5902] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  636.326814][T13661] bond7: option min_links: invalid value (18446744073709551608)
[  636.350759][T13661] bond7: option min_links: allowed values 0 - 2147483647
[  636.456331][T13661] bond7 (unregistering): Released all slaves
[  636.473073][ T5902] usb 3-1: Using ep0 maxpacket: 16
[  636.491906][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  636.512655][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  636.545582][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  636.556856][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.568788][ T5909] usb 5-1: USB disconnect, device number 118
[  636.607442][ T5902] usb 3-1: config 0 descriptor??
[  636.636446][ T5902] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count
[  636.651425][ T5902] usbhid 3-1:0.0: can't add hid device: -22
[  636.658723][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -22
[  636.772511][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.785103][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.336411][T13709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1844'.
[  637.698241][T13718] kvm: pic: single mode not supported
[  637.698710][T13718] kvm: pic: single mode not supported
[  637.711765][T13718] kvm: pic: single mode not supported
[  637.718102][T13718] kvm: pic: single mode not supported
[  637.723855][T13718] kvm: pic: level sensitive irq not supported
[  637.734138][T13718] kvm: pic: level sensitive irq not supported
[  637.755179][T13718] kvm: pic: single mode not supported
[  637.766783][T13718] kvm: pic: single mode not supported
[  637.783501][ T5909] net_ratelimit: 4 callbacks suppressed
[  637.783523][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.806977][T13718] kvm: pic: level sensitive irq not supported
[  638.540588][T13738] netlink: 'syz.0.1853': attribute type 1 has an invalid length.
[  638.715704][T13738] 8021q: adding VLAN 0 to HW filter on device bond5
[  638.831042][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.890135][T13751] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3906659560 (125013105920 ns) > initial count (14756127808 ns). Using initial count to start timer.
[  639.102739][ T5909] usb 3-1: USB disconnect, device number 118
[  639.473223][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.683033][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  639.683057][   T30] audit: type=1800 audit(1771839497.974:560): pid=13764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1858" name="bus" dev="tmpfs" ino=1939 res=0 errno=0
[  639.893178][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.917800][T13772] syzkaller1: entered promiscuous mode
[  639.952985][T13772] syzkaller1: entered allmulticast mode
[  640.910723][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  640.967430][T13791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1867'.
[  641.032808][T13791] netlink: 'syz.3.1867': attribute type 2 has an invalid length.
[  641.053185][T13791] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1867'.
[  641.133656][ T5909] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  641.302165][T13798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.380647][T13798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.423740][ T5909] usb 3-1: Using ep0 maxpacket: 32
[  641.437494][ T5909] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  641.456466][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.480784][ T5909] usb 3-1: Product: syz
[  641.747574][ T5909] usb 3-1: Manufacturer: syz
[  641.752207][ T5909] usb 3-1: SerialNumber: syz
[  641.871205][T13806] netlink: 'syz.3.1868': attribute type 6 has an invalid length.
[  641.902420][T13806] netlink: 'syz.3.1868': attribute type 7 has an invalid length.
[  641.932212][ T5909] usb 3-1: config 0 descriptor??
[  641.953823][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  641.963927][ T5909] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  641.999728][T13806] netlink: 'syz.3.1868': attribute type 8 has an invalid length.
[  642.162087][T13794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  642.655659][T13786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.674824][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.708895][T13786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.989829][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  642.998060][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.206053][T13814] netlink: 'syz.4.1870': attribute type 4 has an invalid length.
[  643.478328][T13815] netlink: 'syz.4.1870': attribute type 4 has an invalid length.
[  643.771731][ T5909] gspca_topro: Sensor cx0342
[  643.977742][   T10] usb 3-1: USB disconnect, device number 119
[  644.024429][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  644.057253][T13820] fuse: Unknown parameter 'euid<00000000000000032768'
[  645.064979][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.113053][ T5910] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  645.313089][ T5910] usb 5-1: device descriptor read/64, error -71
[  645.570539][T11931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.583870][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.593164][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.623313][ T5910] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  645.705112][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  645.796960][ T5910] usb 5-1: device descriptor read/64, error -71
[  645.917527][ T5910] usb usb5-port1: attempt power cycle
[  646.111267][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.325284][ T5910] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  646.364675][ T5910] usb 5-1: device descriptor read/8, error -71
[  646.463436][   T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  646.653019][ T5910] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  646.683116][   T10] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  646.695967][ T5910] usb 5-1: device descriptor read/8, error -71
[  646.713012][   T10] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  646.774926][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  646.797666][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  646.825362][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.863963][ T5910] usb usb5-port1: unable to enumerate USB device
[  646.881497][   T10] usb 6-1: config 0 descriptor??
[  647.179063][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  647.531511][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  647.537802][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  647.604971][   T10] usb 6-1: USB disconnect, device number 55
[  647.767482][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'.
[  647.823480][T13874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1887'.
[  648.189029][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.244509][T13887] program syz.5.1891 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  648.692519][   T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  648.752378][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  648.851763][T13899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1894'.
[  648.928892][   T10] usb 6-1: Using ep0 maxpacket: 32
[  648.936706][   T10] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  648.947331][   T10] usb 6-1: config 0 has no interface number 0
[  648.967241][T13895] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1892'.
[  648.983329][T13895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'.
[  648.992523][   T10] usb 6-1: config 0 interface 2 has no altsetting 0
[  649.004867][   T10] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  649.018024][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.040923][   T10] usb 6-1: Product: syz
[  649.051740][   T10] usb 6-1: Manufacturer: syz
[  649.061746][   T10] usb 6-1: SerialNumber: syz
[  649.086918][   T10] usb 6-1: config 0 descriptor??
[  649.130377][T13905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.165918][T13905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.240154][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  649.420673][T13905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.470026][T13905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.542339][T13886] program syz.5.1891 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  649.559685][   T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  649.705933][ T5902] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  649.734673][   T10] usb 6-1: USB disconnect, device number 56
[  649.853912][ T5902] usb 3-1: device descriptor read/64, error -71
[  649.872523][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  650.143349][ T5902] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  650.233278][   T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  650.272253][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.284786][ T5902] usb 3-1: device descriptor read/64, error -71
[  650.405424][ T5902] usb usb3-port1: attempt power cycle
[  650.409657][   T10] usb 6-1: Using ep0 maxpacket: 16
[  650.428030][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  650.439825][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  650.451637][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  650.467173][   T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  650.476699][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.493037][ T1207] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  650.511943][   T10] usb 6-1: config 0 descriptor??
[  650.876975][ T1207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  651.186252][ T5902] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  651.316686][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.342025][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.351103][ T1207] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  651.351385][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.372842][ T5902] usb 3-1: device descriptor read/8, error -71
[  651.399248][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.418088][ T1207] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  651.454382][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.487520][ T1207] usb 5-1: config 0 descriptor??
[  651.653160][ T5902] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  651.707012][ T5902] usb 3-1: device descriptor read/8, error -71
[  651.796122][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  651.823553][ T5902] usb usb3-port1: unable to enumerate USB device
[  651.911868][ T1207] hid_parser_main: 3 callbacks suppressed
[  651.911894][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  651.941516][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  651.949384][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  651.973283][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  651.980482][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  652.018947][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  652.037189][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  652.044621][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  652.051922][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  652.060257][ T1207] elecom 0003:056E:00FD.0011: unknown main item tag 0x0
[  652.104361][ T1207] elecom 0003:056E:00FD.0011: hidraw0: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.4-1/input0
[  652.122113][T13925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  652.141500][T13925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  652.198270][ T1207] usb 5-1: USB disconnect, device number 123
[  652.226332][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'.
[  652.296767][T13947] fido_id[13947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  652.342130][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  652.354924][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.355022][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  652.394020][   T10] usb 6-1: USB disconnect, device number 57
[  652.535590][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'.
[  652.618169][T13954] VFS: Mount too revealing
[  652.620133][T13951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'.
[  652.653054][T13951] netlink: 'syz.2.1908': attribute type 14 has an invalid length.
[  652.661256][T13951] netlink: 'syz.2.1908': attribute type 11 has an invalid length.
[  653.107361][T13963] syzkaller1: entered promiscuous mode
[  653.128181][T13963] syzkaller1: entered allmulticast mode
[  653.274795][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.333459][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.457708][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.324692][T13994] xt_nat: multiple ranges no longer supported
[  654.515506][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.787278][   T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  654.829870][ T1207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.990495][   T10] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  655.013044][ T1207] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  655.022938][   T10] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  655.095977][   T10] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  655.144776][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.203336][   T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  655.223595][ T1207] usb 3-1: Using ep0 maxpacket: 8
[  655.255056][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.268995][ T1207] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  655.300418][ T1207] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  655.333396][T13996] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  655.346131][ T1207] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  655.450343][ T1207] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  655.489846][ T1207] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  655.508706][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.552143][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  655.563855][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1924'.
[  655.625001][T14006] libceph: resolve '0..' (ret=-3): failed
[  655.730738][ T1207] usb 3-1: GET_CAPABILITIES returned 0
[  655.739218][ T1207] usbtmc 3-1:16.0: can't read capabilities
[  655.946535][ T1207] usb 3-1: USB disconnect, device number 124
[  656.315301][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1928'.
[  656.396776][   T10] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  656.416930][   T10] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input51
[  656.531867][T14019] bond_slave_0: entered promiscuous mode
[  656.538182][T14019] bond_slave_1: entered promiscuous mode
[  656.582641][   T10] usb 6-1: USB disconnect, device number 58
[  656.588725][    C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  656.602765][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  656.636315][T14019] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  656.799695][T14019] bond_slave_0: left promiscuous mode
[  656.805259][T14019] bond_slave_1: left promiscuous mode
[  656.822504][T14025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.931202][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.073186][ T5882] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  657.097320][T14030] random: crng reseeded on system resumption
[  657.256492][T14036] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  657.265241][T14036] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  657.310993][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.368072][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.404275][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.431094][ T5882] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  657.444947][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.468510][ T5882] usb 3-1: config 0 descriptor??
[  657.627383][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.883171][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  657.928546][ T5909] usb 3-1: USB disconnect, device number 125
[  658.687980][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.899941][T14059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  658.909441][T14059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  659.312721][T14066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1939'.
[  659.467150][T14067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1939'.
[  659.623886][ T5882] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  659.710282][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  659.729275][T11875] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  659.796110][ T5882] usb 3-1: Using ep0 maxpacket: 8
[  659.899362][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  659.911452][T11875] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  659.925409][T11875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  659.960918][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  659.972146][T11875] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  660.004586][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  660.015608][T14070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  660.025612][T11875] usb 5-1: config 0 interface 0 has no altsetting 0
[  660.043563][T14070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  660.061806][T11875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  660.096706][T11875] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  660.137152][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  660.149410][T11875] usb 5-1: config 0 interface 0 has no altsetting 0
[  660.222472][T11875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  660.231782][T11875] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  660.253230][T11875] usb 5-1: config 0 interface 0 has no altsetting 0
[  660.291709][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  660.298991][T11875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  660.311340][T11875] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  660.323414][T11875] usb 5-1: config 0 interface 0 has no altsetting 0
[  660.331827][T11875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  660.352258][T14076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1941'.
[  660.371743][T11875] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  660.383406][T11875] usb 5-1: config 0 interface 0 has no altsetting 0
[  660.390411][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.394135][T11875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  660.408560][T11875] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  660.420048][T11875] usb 5-1: config 0 interface 0 has no altsetting 0
[  660.429584][T11875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  660.498260][T11875] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  660.519475][T14076] libceph: resolve '0..' (ret=-3): failed
[  660.633224][T11875] usb 5-1: config 0 interface 0 has no altsetting 0
[  660.657452][T11875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  660.681424][T11875] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  660.720845][T11875] usb 5-1: config 0 interface 0 has no altsetting 0
[  660.743264][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.772485][T11875] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  660.786801][T11875] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  660.797862][T11875] usb 5-1: Product: syz
[  660.815976][ T5882] usb 3-1: GET_CAPABILITIES returned 0
[  660.827174][ T5882] usbtmc 3-1:16.0: can't read capabilities
[  660.869196][T11875] usb 5-1: Manufacturer: syz
[  660.889161][T11875] usb 5-1: SerialNumber: syz
[  660.903771][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  660.941862][T11875] usb 5-1: config 0 descriptor??
[  660.987640][T11875] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1
[  661.015273][ T5882] usb 3-1: USB disconnect, device number 126
[  661.163449][T11875] usb 5-1: USB disconnect, device number 124
[  661.233717][T11875] yurex 5-1:0.0: USB YUREX #1 now disconnected
[  661.293646][T14081] netlink: 'syz.5.1943': attribute type 1 has an invalid length.
[  661.545183][T14081] 8021q: adding VLAN 0 to HW filter on device bond1
[  661.678870][ T5882] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  661.790875][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  661.935237][ T5882] usb 6-1: Using ep0 maxpacket: 32
[  661.969924][ T5882] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  661.988392][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.006046][ T5882] usb 6-1: Product: syz
[  662.016642][ T5882] usb 6-1: Manufacturer: syz
[  662.023216][T14093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  662.049022][ T5882] usb 6-1: SerialNumber: syz
[  662.065538][T14093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  662.083951][ T5882] usb 6-1: config 0 descriptor??
[  662.121151][T14093] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  662.387394][ T5882] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device:
[  662.403054][ T5882] eb 2a 3b 80 9b e4 7a f0 
[  662.409432][ T5882] snd-usb-6fire 6-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  662.648836][ T5882] usb 6-1: USB disconnect, device number 59
[  662.830450][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  662.881887][T14104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  662.893325][T14104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  663.879110][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.078432][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.312128][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1953'.
[  664.755385][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.868249][T14133] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1954'.
[  664.906780][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  664.947773][T14133] libceph: resolve '0..' (ret=-3): failed
[  665.373012][ T5895] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  665.381972][   T10] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  665.410829][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.577623][ T5895] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  665.595353][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  665.643379][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  665.652657][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.670933][ T5895] usb 3-1: Product: syz
[  665.682983][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.691480][ T5895] usb 3-1: Manufacturer: syz
[  665.752502][ T5895] usb 3-1: SerialNumber: syz
[  665.782267][   T10] usb 5-1: config 0 descriptor??
[  665.822497][ T5895] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  665.841566][T14143] netlink: 'syz.5.1958': attribute type 12 has an invalid length.
[  665.876410][   T10] smsusb:smsusb_probe: board id=8, interface number 0
[  665.897081][   T10] smsusb:smsusb_probe: Device initialized with return code -19
[  665.954846][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  665.983042][ T5882] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  666.330966][T14152] tipc: Enabled bearer <udp:syz2>, priority 10
[  666.340222][T14152] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1956'.
[  666.421662][T14152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1956'.
[  666.843457][ T5902] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  666.993082][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.004159][ T5902] usb 6-1: Using ep0 maxpacket: 32
[  667.026918][ T5902] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  667.036407][ T5902] usb 6-1: config 0 has no interface number 0
[  667.062353][ T5902] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  667.071984][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.091291][ T5902] usb 6-1: Product: syz
[  667.112003][ T5902] usb 6-1: Manufacturer: syz
[  667.127041][ T5902] usb 6-1: SerialNumber: syz
[  667.148256][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  667.186334][ T5902] usb 6-1: config 0 descriptor??
[  667.204678][ T5902] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  667.246984][ T5902] usb 6-1: selecting invalid altsetting 1
[  667.270565][ T5902] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  667.310663][ T5902] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  667.342059][ T5902] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  667.370440][ T5902] usb 6-1: media controller created
[  667.383459][ T5882] usb 3-1: Service connection timeout for: 256
[  667.392138][ T5882] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  667.409920][T14162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.445980][  T797] tipc: Node number set to 746630351
[  667.468882][T14162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.492512][ T5882] ath9k_htc: Failed to initialize the device
[  667.503277][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  667.507736][ T5882] usb 3-1: ath9k_htc: USB layer deinitialized
[  667.590325][T14173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.615794][T14173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  668.024284][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.586199][T14162] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  668.643456][ T5902] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  668.650921][ T5902] zl10353_read_register: readreg error (reg=127, ret==-71)
[  668.685377][ T5902] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  668.801440][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  668.870713][ T5895] usb 3-1: USB disconnect, device number 127
[  668.877661][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  668.978840][ T5902] usb 6-1: USB disconnect, device number 60
[  669.064677][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  669.500333][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1969'.
[  669.532946][ T5895] usb 5-1: USB disconnect, device number 125
[  670.112855][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.183211][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  670.374954][T14225] netlink: 'syz.0.1976': attribute type 4 has an invalid length.
[  670.690796][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  670.709313][T14224] netlink: 'syz.0.1976': attribute type 4 has an invalid length.
[  670.777395][T14232] fuse: Unknown parameter 'nd'
[  671.163651][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  671.234889][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.295685][ T5882] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  671.414768][T14234] loop2: detected capacity change from 0 to 7
[  671.421597][T14234] Dev loop2: unable to read RDB block 7
[  671.433132][T14234]  loop2: unable to read partition table
[  671.439029][T14234] loop2: partition table beyond EOD, truncated
[  671.445745][T14234] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  671.589672][ T5882] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11
[  671.629652][ T5882] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  671.648461][ T5882] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  671.687499][ T5882] usb 5-1: Manufacturer: syz
[  671.702405][ T5882] usb 5-1: SerialNumber: syz
[  671.981137][ T5882] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  672.081543][ T5882] usb 5-1: USB disconnect, device number 126
[  672.192231][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  672.423285][   T10] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  672.474575][T14248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.493407][T14250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.505827][T14248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.540991][T14250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  672.566890][T14248] pim6reg1: entered promiscuous mode
[  672.572541][T14248] pim6reg1: entered allmulticast mode
[  672.681523][T14252] ip6gretap1: entered promiscuous mode
[  672.688504][T14252] ip6gretap1: entered allmulticast mode
[  672.762366][T14257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  672.780883][T14257] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  673.083293][ T5909] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  673.223431][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.231615][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.241943][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.251190][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  673.274948][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.286486][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  673.297094][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  673.310582][ T5909] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  673.322717][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.342568][ T5909] usb 5-1: config 0 descriptor??
[  673.963420][ T5909] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  673.984456][T14292] netlink: 'syz.2.2000': attribute type 4 has an invalid length.
[  674.076046][T14260] kernel profiling enabled (shift: 9)
[  674.263239][ T5909] net_ratelimit: 1 callbacks suppressed
[  674.263291][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  674.320125][T14296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  674.339659][T14296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  675.315771][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.921675][T14313] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2006'.
[  675.954691][ T5909] usb 5-1: USB disconnect, device number 127
[  676.010338][T14313] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2006'.
[  676.179515][T14318] binder: 14317:14318 ioctl c0306201 200000000640 returned -22
[  676.343438][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.351714][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.376106][T14321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  676.440942][T14321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  676.747864][  T797] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  676.917122][  T797] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  676.935781][  T797] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  677.025691][  T797] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  677.065192][  T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.104392][T14322] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  677.143520][ T5909] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  677.155054][  T797] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  677.283267][ T5909] usb 3-1: device descriptor read/64, error -71
[  677.317760][T14322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.353903][T14322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.383578][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  677.452003][T14343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.483668][T14343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.523033][ T5909] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  677.601292][T14347] netlink: 'syz.3.2017': attribute type 1 has an invalid length.
[  677.672066][T14347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.683296][T14347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.697511][ T5909] usb 3-1: device descriptor read/64, error -71
[  677.739517][T14343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.772677][T14343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.814344][ T5909] usb usb3-port1: attempt power cycle
[  678.173226][ T5909] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  678.194007][ T5909] usb 3-1: device descriptor read/8, error -71
[  678.213015][   T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  678.323821][T14358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.337828][T14358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.353492][T11929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.362840][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.372402][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.423451][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  678.430597][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  678.434040][ T5909] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  678.462970][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  678.478831][   T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  678.494829][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.495345][ T5909] usb 3-1: device descriptor read/8, error -71
[  678.511220][   T10] usb 6-1: config 0 descriptor??
[  678.527616][   T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  678.613542][ T5909] usb usb3-port1: unable to enumerate USB device
[  679.105644][   T30] audit: type=1326 audit(1771839537.414:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  679.135167][   T30] audit: type=1326 audit(1771839537.414:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  679.178387][   T30] audit: type=1326 audit(1771839537.414:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  679.220946][   T30] audit: type=1326 audit(1771839537.414:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  679.244402][   T30] audit: type=1326 audit(1771839537.414:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  679.307543][   T10] usb 5-1: USB disconnect, device number 2
[  679.397254][   T30] audit: type=1326 audit(1771839537.414:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  679.454456][   T30] audit: type=1326 audit(1771839537.414:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  679.480806][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  679.509879][   T30] audit: type=1326 audit(1771839537.414:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  679.580535][T14370] binder: BINDER_SET_CONTEXT_MGR already set
[  679.588648][T14370] binder: 14369:14370 ioctl 4018620d 200000004a80 returned -16
[  679.640507][   T30] audit: type=1326 audit(1771839537.414:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  679.715664][   T30] audit: type=1326 audit(1771839537.414:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14360 comm="syz.3.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9a99c629 code=0x7ffc0000
[  680.023056][T11875] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  680.163038][T11875] usb 5-1: device descriptor read/64, error -71
[  680.231039][T14382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  680.247047][T14382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.259381][T14382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  680.268901][T14382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.403455][T11875] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  680.514310][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.533070][T11875] usb 5-1: device descriptor read/64, error -71
[  680.643549][T11875] usb usb5-port1: attempt power cycle
[  680.939973][ T5882] usb 6-1: USB disconnect, device number 62
[  680.994390][T11875] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  681.025979][T11875] usb 5-1: device descriptor read/8, error -71
[  681.033758][T14393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.083455][T14393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.106921][T14393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.125715][T14393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.273187][T11875] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  681.389634][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  681.390006][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.407608][T11875] usb 5-1: device descriptor read/8, error -71
[  681.445085][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.467499][T14405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.490587][T14405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.526133][T11875] usb usb5-port1: unable to enumerate USB device
[  681.573113][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.507028][T11875] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  682.584627][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  682.643020][T11875] usb 3-1: device descriptor read/64, error -71
[  682.933353][T11875] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  683.163011][T11875] usb 3-1: device descriptor read/64, error -71
[  683.289487][T11875] usb usb3-port1: attempt power cycle
[  683.464605][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.473718][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.482713][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.624004][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  683.653207][T11875] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  683.675406][T11875] usb 3-1: device descriptor read/8, error -71
[  683.685275][T14448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.703897][T14448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.721997][T14448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.734337][T14448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.923188][T11875] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  683.944294][T11875] usb 3-1: device descriptor read/8, error -71
[  684.065684][T11875] usb usb3-port1: unable to enumerate USB device
[  684.297016][T14464] program syz.5.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  684.307138][T14466] program syz.5.2048 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  684.406784][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  684.416402][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  684.486820][T14475] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[  684.525361][T14475] netlink: 'syz.4.2051': attribute type 10 has an invalid length.
[  684.536108][T14475] 8021q: adding VLAN 0 to HW filter on device bond0
[  684.578125][T14475] `: Port device bond0 added
[  684.592257][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2051'.
[  684.628998][T14475] syzkaller1: entered promiscuous mode
[  684.637950][T14475] syzkaller1: entered allmulticast mode
[  684.664196][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.963019][ T5882] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  685.134147][ T5882] usb 6-1: Using ep0 maxpacket: 16
[  685.146299][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  685.170245][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  685.271885][ T5882] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  685.281272][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.306141][ T5882] usb 6-1: config 0 descriptor??
[  685.704571][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  685.718490][T14491] tipc: Started in network mode
[  685.724635][T14491] tipc: Node identity 6eb3efa924d9, cluster identity 4711
[  685.732187][T14491] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  685.745443][ T5882] hid_parser_main: 28 callbacks suppressed
[  685.745464][ T5882] apple 0003:05AC:024B.0013: unknown main item tag 0x7
[  685.762261][T14491] syzkaller0: entered promiscuous mode
[  685.767877][T14491] syzkaller0: entered allmulticast mode
[  685.773877][ T5882] apple 0003:05AC:024B.0013: unbalanced collection at end of report description
[  685.786707][ T5882] apple 0003:05AC:024B.0013: parse failed
[  685.794497][ T5882] apple 0003:05AC:024B.0013: probe with driver apple failed with error -22
[  685.806017][T14491] tipc: Resetting bearer <eth:syzkaller0>
[  685.827181][T14490] tipc: Resetting bearer <eth:syzkaller0>
[  685.850258][T14490] tipc: Disabling bearer <eth:syzkaller0>
[  685.869343][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  685.877215][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  685.923397][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  685.963902][T14478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.985874][T14478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.027292][T14479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.039032][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'.
[  686.040426][T14479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.056401][T14497] netlink: 'syz.2.2057': attribute type 18 has an invalid length.
[  686.065004][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'.
[  686.073024][   T10] usb 5-1: Using ep0 maxpacket: 16
[  686.088070][   T10] usb 5-1: config 0 has an invalid interface number: 97 but max is 0
[  686.089195][T14497] xt_CT: You must specify a L4 protocol and not use inversions on it
[  686.111747][   T10] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  686.134299][ T5882] usb 6-1: USB disconnect, device number 63
[  686.143749][   T10] usb 5-1: config 0 has no interface number 0
[  686.156558][   T10] usb 5-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30
[  686.168076][   T10] usb 5-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[  686.229789][   T10] usb 5-1: config 0 interface 97 has no altsetting 0
[  686.245793][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  686.256310][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.284227][   T10] usb 5-1: Product: syz
[  686.288678][   T10] usb 5-1: Manufacturer: syz
[  686.295022][   T10] usb 5-1: SerialNumber: syz
[  686.340318][   T10] usb 5-1: config 0 descriptor??
[  686.378472][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  686.378494][   T30] audit: type=1326 audit(1771839544.684:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14500 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb47b9c629 code=0x7ffc0000
[  686.383828][T14501] pimreg: entered allmulticast mode
[  686.393179][   T30] audit: type=1326 audit(1771839544.684:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14500 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7feb47b9c629 code=0x7ffc0000
[  686.446144][   T30] audit: type=1326 audit(1771839544.684:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14500 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb47b9c629 code=0x7ffc0000
[  686.473866][   T30] audit: type=1326 audit(1771839544.684:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14500 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb47b9c629 code=0x7ffc0000
[  686.509146][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.520192][   T30] audit: type=1326 audit(1771839544.684:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14500 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feb47b9c629 code=0x7ffc0000
[  686.548187][T14509] dvmrp0: left allmulticast mode
[  686.577943][   T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  686.584893][T14509] pimreg: left allmulticast mode
[  686.593205][   T10] gspca_stv06xx: st6422 sensor detected
[  686.623374][T11875] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  686.696483][   T30] audit: type=1326 audit(1771839545.004:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14500 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb47b9c629 code=0x7ffc0000
[  686.743702][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  686.765392][   T30] audit: type=1326 audit(1771839545.004:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14500 comm="syz.5.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb47b9c629 code=0x7ffc0000
[  686.788058][T11875] usb 3-1: device descriptor read/64, error -71
[  687.023591][T11875] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  687.043905][T14516] bridge0: entered allmulticast mode
[  687.073419][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2062'.
[  687.082785][   T10] STV06xx 5-1:0.97: probe with driver STV06xx failed with error -71
[  687.103015][   T10] usb 5-1: USB disconnect, device number 7
[  687.163810][T11875] usb 3-1: device descriptor read/64, error -71
[  687.230903][T14517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.240379][T14517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.249335][T14517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.258728][T14517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.267720][T14517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.276775][T14517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  687.293297][T14516] bridge_slave_1: left allmulticast mode
[  687.298985][T14516] bridge_slave_1: left promiscuous mode
[  687.321832][T11875] usb usb3-port1: attempt power cycle
[  687.328368][T14516] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.378855][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2062'.
[  687.505446][T14516] bridge_slave_0: left promiscuous mode
[  687.513485][T14516] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.570601][T14528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.579521][T14528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.673031][T11875] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  687.722289][T11875] usb 3-1: device descriptor read/8, error -71
[  687.829932][T14516] bridge0 (unregistering): left allmulticast mode
[  687.862164][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'.
[  687.963242][T11875] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  687.990734][T11875] usb 3-1: device descriptor read/8, error -71
[  688.103798][T11875] usb usb3-port1: unable to enumerate USB device
[  688.314295][T14542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  688.323822][T14542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.493349][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2074'.
[  689.525574][T14573] hma(sha224): entered promiscuous mode
[  689.863427][T11875] net_ratelimit: 77 callbacks suppressed
[  689.863450][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.097029][T14587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.135274][T14587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.162672][T14587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.197834][T14587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.673025][T11875] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  690.823125][T11875] usb 6-1: Using ep0 maxpacket: 16
[  690.839540][T11875] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  690.874127][T11875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.883547][T11875] usb 6-1: Product: syz
[  690.887835][T11875] usb 6-1: Manufacturer: syz
[  690.892649][T11875] usb 6-1: SerialNumber: syz
[  690.902263][T11875] usb 6-1: config 0 descriptor??
[  690.907858][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.080012][T11875] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  691.210944][T11875] usb 6-1: Detected FT-X
[  691.374342][T11875] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  691.810661][T11875] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  691.977854][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.000022][ T5909] usb 6-1: USB disconnect, device number 64
[  692.049861][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  692.104648][T14612] ip6tnl0: Caught tx_queue_len zero misconfig
[  692.104676][ T5909] ftdi_sio 6-1:0.0: device disconnected
[  692.121866][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.465788][T14622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.525780][T14622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.873094][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  692.986270][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  693.085163][   T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  693.109805][T14635] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2094'.
[  693.121696][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  693.152433][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  693.385880][   T10] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  693.399034][   T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  693.453012][   T10] usb 3-1: Manufacturer: syz
[  693.493761][   T10] usb 3-1: config 0 descriptor??
[  693.528229][   T10] igorplugusb 3-1:0.0: incorrect number of endpoints
[  693.826455][   T10] usb 3-1: USB disconnect, device number 14
[  693.837591][T11875] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  693.905205][T11875] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  694.023467][T11875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.198942][T14649] fido_id[14649]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  694.523152][T11875] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  694.543035][ T5909] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  694.748134][T14663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  694.758325][T14663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.843787][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.852601][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.888396][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  694.890619][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  694.906107][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.983421][ T5909] usb 6-1: Using ep0 maxpacket: 32
[  694.988686][T11875] usb 5-1: Using ep0 maxpacket: 16
[  695.007517][ T5909] usb 6-1: config 0 has an invalid interface number: 27 but max is 0
[  695.018249][ T5909] usb 6-1: config 0 has no interface number 0
[  695.031001][T11875] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  695.041307][ T5909] usb 6-1: too many endpoints for config 0 interface 27 altsetting 170: 224, using maximum allowed: 30
[  695.055323][T11875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.063907][T11875] usb 5-1: Product: syz
[  695.068199][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.076843][ T5909] usb 6-1: config 0 interface 27 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 224
[  695.103204][T11875] usb 5-1: Manufacturer: syz
[  695.107858][T11875] usb 5-1: SerialNumber: syz
[  695.120190][ T5909] usb 6-1: config 0 interface 27 has no altsetting 0
[  695.135114][ T5909] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  695.160483][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.190201][ T5909] usb 6-1: Product: syz
[  695.204384][ T5909] usb 6-1: Manufacturer: syz
[  695.222958][ T5909] usb 6-1: SerialNumber: syz
[  695.260472][ T5909] usb 6-1: config 0 descriptor??
[  695.366437][T11875] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  695.418595][T11875] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  695.444421][T11875] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  695.470791][T11875] usb 5-1: media controller created
[  695.480792][T14650] ------------[ cut here ]------------
[  695.486713][T14650] usb 5-1: BOGUS control dir, pipe 80000880 doesn't match bRequestType c0
[  695.495288][T14650] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.5.2097/14650
[  695.505703][T14650] Modules linked in:
[  695.509948][T14650] CPU: 1 UID: 0 PID: 14650 Comm: syz.5.2097 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  695.521155][T14650] Tainted: [L]=SOFTLOCKUP
[  695.525744][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  695.536110][T14650] RIP: 0010:usb_submit_urb+0x1114/0x18b0
[  695.541808][T14650] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9
[  695.561989][T14650] RSP: 0018:ffffc9000e80f708 EFLAGS: 00010246
[  695.568110][T14650] RAX: 0000000000000000 RBX: ffff88807d0cf100 RCX: 0000000080000880
[  695.576385][T14650] RDX: ffff88807b31e2c0 RSI: ffffffff8c7eeb40 RDI: ffffffff901eb390
[  695.584779][T14650] RBP: 1ffff11004253f54 R08: 00000000000000c0 R09: 0000000000000000
[  695.592924][T14650] R10: ffffc9000e80f800 R11: fffff52001d01f0c R12: ffff8880298c0100
[  695.601150][T14650] R13: ffff88802129faa0 R14: 0000000080000880 R15: ffff88807b31e2c0
[  695.609284][T14650] FS:  00007feb45dd56c0(0000) GS:ffff888125567000(0000) knlGS:0000000000000000
[  695.618391][T14650] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  695.625065][T14650] CR2: 000000110c3f061a CR3: 000000006980c000 CR4: 00000000003526f0
[  695.633297][T14650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  695.641329][T14650] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  695.649460][T14650] Call Trace:
[  695.652768][T14650]  <TASK>
[  695.655831][T14650]  ? __init_swait_queue_head+0xa9/0x150
[  695.661409][T14650]  usb_start_wait_urb+0x12b/0x510
[  695.666579][T14650]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  695.672155][T14650]  usb_control_msg+0x232/0x3e0
[  695.676990][T14650]  gl861_ctrl_msg+0x207/0x420
[  695.681857][T14650]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  695.687139][T14650]  ? aa_file_perm+0x50e/0x15e0
[  695.691923][T14650]  gl861_i2c_master_xfer+0x439/0x6a0
[  695.697288][T14650]  __i2c_transfer+0x79a/0x2020
[  695.702072][T14650]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  695.707933][T14650]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  695.713904][T14650]  ? i2c_transfer+0xc8/0x2d0
[  695.718631][T14650]  i2c_transfer+0x1cc/0x2d0
[  695.723275][T14650]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  695.729042][T14650]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  695.735413][T14650]  ? i2cdev_read+0xe8/0x250
[  695.740108][T14650]  i2cdev_read+0x10d/0x250
[  695.744784][T14650]  ? __pfx_i2cdev_read+0x10/0x10
[  695.749913][T14650]  vfs_read+0x20c/0xa70
[  695.754157][T14650]  ? __pfx_vfs_read+0x10/0x10
[  695.758855][T14650]  ? __fget_files+0x2a/0x420
[  695.763518][T14650]  ? __fget_files+0x2a/0x420
[  695.768274][T14650]  ? __fget_files+0x3a0/0x420
[  695.773040][T14650]  ? __fget_files+0x2a/0x420
[  695.777757][T14650]  ksys_read+0x150/0x270
[  695.782174][T14650]  ? __pfx_ksys_read+0x10/0x10
[  695.787255][T14650]  do_syscall_64+0x14d/0xf80
[  695.791887][T14650]  ? trace_irq_disable+0x3b/0x150
[  695.797175][T14650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.803294][T14650]  ? clear_bhb_loop+0x40/0x90
[  695.808022][T14650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.814050][T14650] RIP: 0033:0x7feb47b9c629
[  695.818515][T14650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.838407][T14650] RSP: 002b:00007feb45dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  695.846918][T14650] RAX: ffffffffffffffda RBX: 00007feb47e16090 RCX: 00007feb47b9c629
[  695.855075][T14650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a
[  695.863090][T14650] RBP: 00007feb47c32b39 R08: 0000000000000000 R09: 0000000000000000
[  695.871177][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  695.879239][T14650] R13: 00007feb47e16128 R14: 00007feb47e16090 R15: 00007feb47f3fa48
[  695.887306][T14650]  </TASK>
[  695.890435][T14650] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  695.897810][T14650] CPU: 1 UID: 0 PID: 14650 Comm: syz.5.2097 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  695.908774][T14650] Tainted: [L]=SOFTLOCKUP
[  695.913092][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  695.923239][T14650] Call Trace:
[  695.926541][T14650]  <TASK>
[  695.929473][T14650]  vpanic+0x56c/0xa60
[  695.933566][T14650]  ? __pfx__printk+0x10/0x10
[  695.938169][T14650]  ? __pfx_vpanic+0x10/0x10
[  695.942869][T14650]  ? is_bpf_text_address+0x292/0x2b0
[  695.948174][T14650]  ? is_bpf_text_address+0x26/0x2b0
[  695.953580][T14650]  panic+0xc5/0xd0
[  695.957393][T14650]  ? __pfx_panic+0x10/0x10
[  695.961816][T14650]  __warn+0x315/0x4f0
[  695.965808][T14650]  ? usb_submit_urb+0x1052/0x18b0
[  695.971179][T14650]  ? usb_submit_urb+0x1052/0x18b0
[  695.976270][T14650]  __report_bug+0x29a/0x540
[  695.980780][T14650]  ? usb_submit_urb+0x1052/0x18b0
[  695.985884][T14650]  ? __pfx___report_bug+0x10/0x10
[  695.990911][T14650]  ? lockdep_hardirqs_on+0x7a/0x110
[  695.996109][T14650]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  696.001926][T14650]  report_bug_entry+0x19a/0x290
[  696.006797][T14650]  ? usb_submit_urb+0x1114/0x18b0
[  696.011997][T14650]  ? usb_submit_urb+0x1119/0x18b0
[  696.017217][T14650]  handle_bug+0xca/0x200
[  696.021567][T14650]  exc_invalid_op+0x1a/0x50
[  696.026183][T14650]  asm_exc_invalid_op+0x1a/0x20
[  696.031119][T14650] RIP: 0010:usb_submit_urb+0x1114/0x18b0
[  696.036758][T14650] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9
[  696.056671][T14650] RSP: 0018:ffffc9000e80f708 EFLAGS: 00010246
[  696.062791][T14650] RAX: 0000000000000000 RBX: ffff88807d0cf100 RCX: 0000000080000880
[  696.070762][T14650] RDX: ffff88807b31e2c0 RSI: ffffffff8c7eeb40 RDI: ffffffff901eb390
[  696.078825][T14650] RBP: 1ffff11004253f54 R08: 00000000000000c0 R09: 0000000000000000
[  696.086802][T14650] R10: ffffc9000e80f800 R11: fffff52001d01f0c R12: ffff8880298c0100
[  696.094784][T14650] R13: ffff88802129faa0 R14: 0000000080000880 R15: ffff88807b31e2c0
[  696.102786][T14650]  ? usb_submit_urb+0x10a3/0x18b0
[  696.107909][T14650]  ? __init_swait_queue_head+0xa9/0x150
[  696.113570][T14650]  usb_start_wait_urb+0x12b/0x510
[  696.118786][T14650]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  696.124344][T14650]  usb_control_msg+0x232/0x3e0
[  696.129116][T14650]  gl861_ctrl_msg+0x207/0x420
[  696.133797][T14650]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  696.138996][T14650]  ? aa_file_perm+0x50e/0x15e0
[  696.143949][T14650]  gl861_i2c_master_xfer+0x439/0x6a0
[  696.149290][T14650]  __i2c_transfer+0x79a/0x2020
[  696.154063][T14650]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  696.159880][T14650]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  696.165693][T14650]  ? i2c_transfer+0xc8/0x2d0
[  696.170290][T14650]  i2c_transfer+0x1cc/0x2d0
[  696.174802][T14650]  i2c_transfer_buffer_flags+0x10d/0x1a0
[  696.180470][T14650]  ? __pfx_i2c_transfer_buffer_flags+0x10/0x10
[  696.186649][T14650]  ? i2cdev_read+0xe8/0x250
[  696.191260][T14650]  i2cdev_read+0x10d/0x250
[  696.195875][T14650]  ? __pfx_i2cdev_read+0x10/0x10
[  696.200904][T14650]  vfs_read+0x20c/0xa70
[  696.205058][T14650]  ? __pfx_vfs_read+0x10/0x10
[  696.209748][T14650]  ? __fget_files+0x2a/0x420
[  696.214359][T14650]  ? __fget_files+0x2a/0x420
[  696.218948][T14650]  ? __fget_files+0x3a0/0x420
[  696.223803][T14650]  ? __fget_files+0x2a/0x420
[  696.228408][T14650]  ksys_read+0x150/0x270
[  696.232919][T14650]  ? __pfx_ksys_read+0x10/0x10
[  696.237698][T14650]  do_syscall_64+0x14d/0xf80
[  696.242550][T14650]  ? trace_irq_disable+0x3b/0x150
[  696.247573][T14650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.253640][T14650]  ? clear_bhb_loop+0x40/0x90
[  696.258402][T14650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.264289][T14650] RIP: 0033:0x7feb47b9c629
[  696.268703][T14650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  696.288551][T14650] RSP: 002b:00007feb45dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  696.296973][T14650] RAX: ffffffffffffffda RBX: 00007feb47e16090 RCX: 00007feb47b9c629
[  696.304954][T14650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a
[  696.312926][T14650] RBP: 00007feb47c32b39 R08: 0000000000000000 R09: 0000000000000000
[  696.320981][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  696.328960][T14650] R13: 00007feb47e16128 R14: 00007feb47e16090 R15: 00007feb47f3fa48
[  696.337037][T14650]  </TASK>
[  696.340650][T14650] Kernel Offset: disabled
[  696.345022][T14650] Rebooting in 86400 seconds..