last executing test programs:

3m21.971572935s ago: executing program 3 (id=4):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x17, 0xa, 0x0, 0x3, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x81, 0x9}]}, 0x1b}}, 0x40)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x1, 0x19, "ffff006500"})
syz_open_pts(r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000a80)={0x1, 0x0, @ioapic={0xd000, 0xa09, 0xcc21, 0x7ff, 0x0, [{0xc, 0xfd, 0x7, '\x00', 0x31}, {0x94, 0x62, 0x8, '\x00', 0xa}, {0x40, 0x1, 0x0, '\x00', 0xe}, {0x0, 0x4, 0x55, '\x00', 0x2}, {0x5, 0x6, 0xac, '\x00', 0x5}, {0xc, 0x51, 0x2, '\x00', 0xd3}, {0x3, 0x6, 0x9, '\x00', 0x2}, {0x12, 0xc, 0x0, '\x00', 0xbd}, {0x2, 0xe9, 0x3, '\x00', 0x1}, {0x6, 0x3, 0xc9, '\x00', 0xe}, {0x4, 0x7, 0x8, '\x00', 0x9}, {0x6, 0x4, 0x0, '\x00', 0x9}, {0xd, 0xd, 0x7, '\x00', 0x1}, {0x0, 0xab, 0x2, '\x00', 0xd}, {0x5, 0x7, 0x8, '\x00', 0x1}, {0x5, 0x7, 0x1, '\x00', 0x1}, {0x4, 0xff, 0x0, '\x00', 0x9}, {0x9, 0x8, 0xff}, {0x82, 0x5, 0x7, '\x00', 0xa}, {0x5, 0x4, 0x3}, {0x8, 0x1, 0x9, '\x00', 0x9}, {0x1, 0xe, 0x3, '\x00', 0x3}, {0xf9, 0x8, 0x2, '\x00', 0x4}, {0xf3, 0x6, 0x3, '\x00', 0xf}]}})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000100)={0xc0b, 0x9})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x6, 0x80000001, 0x80000004000080, 0x0, 0x5, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210})
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x5, 0x2})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)

3m21.648720368s ago: executing program 3 (id=5):
mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85)
lseek(r0, 0x2, 0x1)
getdents64(r0, 0x0, 0x4f)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x10})
sendfile(r1, r1, 0x0, 0x200000)
cachestat(r1, &(0x7f0000000000)={0x9, 0x4000000}, &(0x7f0000000040), 0x0)
fcntl$getownex(r1, 0x10, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d40000001b0001002cbd7000ffdbdf250a010100000000000000000000000000fe8000000000000000000000000000aa4e2280004e210005020020063c000000", @ANYRES32=0x0, @ANYBLOB="19aa0ef52a7bfa9441a2d9667f4bc4b9daacd14bb4b7e8f6d8ab7bcec8b47a17901e2b13598124318daa6f8ce10d6d0a4ed94bae111e55e4062fbdc32fe413f4b63c7af8592849c6540ada014a7d3e19450ceba9b9d42dacbe7fac56d82390d2a9f29a541c6a188ddf547202ba10722a28838918c0961a79d9f76cddd599414b32fefc5e88b4d2d8454b52201b28287af4ea232ea28d9b3189367a44409111147652c248ed65ba1d54f919", @ANYBLOB="0b000000000000000800000000000000000000000000000000000000010000000000000000000000060000000000000070160000000000000a0000000000000007000000000000000600000000000000ff0f0000000000002e0c000000000000ff030000bb6b6e00020101010000000002000000000000000a00100009"], 0xd4}}, 0x40000)

3m21.093338379s ago: executing program 3 (id=8):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x9, 0x8, 0x40})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901)
chdir(&(0x7f0000000100)='./file0/file0\x00')
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3)
r2 = socket$xdp(0x2c, 0x3, 0x0)
close(r2)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r4=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x1, 0xffff, 0xa, 0x1ff, 0x1})

3m20.999290128s ago: executing program 3 (id=9):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x1f, 0x10, 0x80, 0x100, &(0x7f0000000040)="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"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc044}, 0xc050)

3m20.693622405s ago: executing program 3 (id=10):
io_setup(0x20fe, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x161841, 0x1d2)
r1 = socket(0x1d, 0x2, 0x6)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x42)
fcntl$setlease(r0, 0x400, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x200, 0x6)
syz_usb_connect(0x2, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0x1b, 0xf9, 0x17, 0x10, 0xd46, 0x2011, 0xe88a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x4, 0xd0, 0x3, [{{0x9, 0x4, 0x6a, 0xa, 0x2, 0x4d, 0x78, 0x27, 0x62, [], [{{0x9, 0x5, 0xd, 0x3, 0x200, 0xa, 0x9, 0x2}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xd, 0x6, 0x6}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})

3m20.295537607s ago: executing program 32 (id=10):
io_setup(0x20fe, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x161841, 0x1d2)
r1 = socket(0x1d, 0x2, 0x6)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x42)
fcntl$setlease(r0, 0x400, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x200, 0x6)
syz_usb_connect(0x2, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x310, 0x1b, 0xf9, 0x17, 0x10, 0xd46, 0x2011, 0xe88a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x4, 0xd0, 0x3, [{{0x9, 0x4, 0x6a, 0xa, 0x2, 0x4d, 0x78, 0x27, 0x62, [], [{{0x9, 0x5, 0xd, 0x3, 0x200, 0xa, 0x9, 0x2}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xd, 0x6, 0x6}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})

2m29.454872248s ago: executing program 0 (id=240):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440011800a0001006c696d6974000000340002800c00024000000000000000000c000140000000000000000508000540000000010800054000000001080003400000000c"], 0xc8}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c80)=""/4107, 0x100b}, {&(0x7f00000000c0)=""/230, 0xe6}], 0x2}, 0x40000000) (async)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a02010bfbe0cbc6ee1e1e6308170000"], 0x3c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async)
sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r6, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, '(#[\'!&-\x13-f^'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x10800}, 0x4000040)

2m29.289194138s ago: executing program 0 (id=243):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xc4, r1, 0xf8ea5408a2195919, 0xf0bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6e, 0x3, "6225de4ec2f577443200917129155a9a99f21776a764f9071423c5f9c395c589dcecef87ecd277c1e2c6b3b156c3899bdbcc754e9709d1bfd8b51f1887570bd27e985311eb08b567a3dedd71536aa9ee513c71e0315bfcac6f00f32410f9a3204f9d288840af567dbc88"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b24b4f3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x9fe22dd400b2fba7}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xc4, r1, 0xf8ea5408a2195919, 0xf0bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x6e, 0x3, "6225de4ec2f577443200917129155a9a99f21776a764f9071423c5f9c395c589dcecef87ecd277c1e2c6b3b156c3899bdbcc754e9709d1bfd8b51f1887570bd27e985311eb08b567a3dedd71536aa9ee513c71e0315bfcac6f00f32410f9a3204f9d288840af567dbc88"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7b24b4f3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x9fe22dd400b2fba7}, 0x0) (async)

2m29.152398037s ago: executing program 0 (id=245):
r0 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
write(r0, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10)
setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r3, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000002900000005000000840202"], 0x40}, 0x40)
setsockopt$sock_int(r2, 0x1, 0x29, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xfe46)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r4)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8894)
recvfrom$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x6, 0x6, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x2, 0xc, 0x2, 0x9}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r6, 0x84, 0x2, &(0x7f0000000200)=""/4107, &(0x7f00000000c0)=0x100b)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r8, &(0x7f0000000140)='syz1\x00', 0x1ff)

2m28.867369133s ago: executing program 0 (id=246):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f00000001c0))
sendto$inet6(r2, &(0x7f00000002c0)="3a02004463f2b8697e2f7a50b5be5e347a3a4b0c8a8bf80ed841fd445749a51b09099ad65091d5be099f21afc4eff113b06121fbccb5396c7d8882035dcba7a4afba31c95dbbf39a7913dbe674890e23bfb6fb39bb2fabe2a778fb1b403da313baa5c290531b9e059be25b5d81fe6e27635a04553c321d91573db821b680a2cb3c7f82fe3995dfb7569412697a37eaa41b834ee79d59cb5b431dff7ab68f776925183bce68177472f37636e43c61b5aa56bcba8f4fec20a734bbdc790ec63509de", 0xc1, 0x20000040, &(0x7f00000003c0)={0xa, 0x4e24, 0x2, @private0, 0x2}, 0x1c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x3214040, 0x0)
chroot(&(0x7f0000000280)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440), &(0x7f0000000480)=0x4)
pivot_root(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000600)=""/4096, &(0x7f0000000100)=0x1000)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async)
socket$inet6(0xa, 0x3, 0x6) (async)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f00000001c0)) (async)
sendto$inet6(r2, &(0x7f00000002c0)="3a02004463f2b8697e2f7a50b5be5e347a3a4b0c8a8bf80ed841fd445749a51b09099ad65091d5be099f21afc4eff113b06121fbccb5396c7d8882035dcba7a4afba31c95dbbf39a7913dbe674890e23bfb6fb39bb2fabe2a778fb1b403da313baa5c290531b9e059be25b5d81fe6e27635a04553c321d91573db821b680a2cb3c7f82fe3995dfb7569412697a37eaa41b834ee79d59cb5b431dff7ab68f776925183bce68177472f37636e43c61b5aa56bcba8f4fec20a734bbdc790ec63509de", 0xc1, 0x20000040, &(0x7f00000003c0)={0xa, 0x4e24, 0x2, @private0, 0x2}, 0x1c) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) (async)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x3214040, 0x0) (async)
chroot(&(0x7f0000000280)='./file0\x00') (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000440), &(0x7f0000000480)=0x4) (async)
pivot_root(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000600)=""/4096, &(0x7f0000000100)=0x1000) (async)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') (async)

2m28.67579002s ago: executing program 0 (id=248):
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x6, 0x0, 0x100, 0x4000000004, 0x540000, r2})
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e26, 0x1001ffe, @private0}, 0x1c)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020)
syz_io_uring_setup(0x6f8e, &(0x7f0000000240)={0x0, 0x1efe, 0x2, 0x3, 0x9a, 0x0, r3}, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
write(r0, 0x0, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000000)=0x10002, 0x4)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x80, 0x5a, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x10, 0x10, 0x1, {0x22, 0x50}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xe0}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
socket$inet6(0xa, 0x3, 0xff) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) (async)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x6, 0x0, 0x100, 0x4000000004, 0x540000, r2}) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e26, 0x1001ffe, @private0}, 0x1c) (async)
pipe(&(0x7f00000002c0)) (async)
read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020) (async)
syz_io_uring_setup(0x6f8e, &(0x7f0000000240)={0x0, 0x1efe, 0x2, 0x3, 0x9a, 0x0, r3}, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async)
write(r0, 0x0, 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000000)=0x10002, 0x4) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x80, 0x5a, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x10, 0x10, 0x1, {0x22, 0x50}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0xe0}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) (async)

2m28.327334642s ago: executing program 0 (id=251):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r0 = gettid() (async)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x41009, 0x0, 0x0, 0x5, 'syz0\x00'}, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x8, 'syz1\x00', 0x0}) (async)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_open_procfs(r0, &(0x7f0000000040)='limits\x00')

2m28.08830717s ago: executing program 33 (id=251):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r0 = gettid() (async)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000080)={{0x41009, 0x0, 0x0, 0x5, 'syz0\x00'}, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x8, 'syz1\x00', 0x0}) (async)
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
syz_open_procfs(r0, &(0x7f0000000040)='limits\x00')

1m52.505277821s ago: executing program 2 (id=441):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sigaltstack(&(0x7f0000003e80)={0x0, 0x3}, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r1, r2, 0x0, 0x20fffe82)
r3 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000000)={0xfffffffc, 0x0, 0x2006, 0x0, 0x0, 0x40000000, 0x3})
sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c5800600ac1000f8d3f97e1e779bbfc300e9ff0b24"], 0x10}}], 0x1, 0x852)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2)

1m52.353662259s ago: executing program 2 (id=443):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc})
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000240)={0x10000001})
sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000130001002bbd7000f8dbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="fdff24800c002e800800920000800000"], 0x2c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880)

1m52.273252558s ago: executing program 1 (id=444):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0)
r1 = fanotify_init(0x0, 0x0)
r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
setuid(0xee00)
fanotify_mark(r1, 0x1, 0x103b, r2, 0x0)

1m52.143386629s ago: executing program 1 (id=445):
socket$netlink(0x10, 0x3, 0x10) (async)
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) (async)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x44, r2, 0x11, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x20004014)

1m52.13934178s ago: executing program 2 (id=446):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}})
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGICOUNT(r1, 0x541e, 0xff4f370c567f0000)
r2 = socket(0x11, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x8, 0x0, 0x0, 0x100000}})
r3 = socket(0x26, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})

1m51.889091452s ago: executing program 2 (id=447):
r0 = gettid()
r1 = socket(0x1e, 0x1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000000040), 0x4)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x19, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0xc})
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r8})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1})
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000380)={'veth1_virt_wifi\x00', &(0x7f0000000340)=@ethtool_cmd={0x14, 0x6, 0x3, 0x2, 0x0, 0x1, 0xd, 0x0, 0x4, 0x7, 0x6, 0x401, 0x40, 0x81, 0x81, 0x7, [0x10]}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r11)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="0b33240000000000000015000000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x0)
r13 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r13, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10)

1m51.888361476s ago: executing program 1 (id=448):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async)
lsm_get_self_attr(0x65, &(0x7f0000000340)={0x0, 0x0, 0xb0, 0x90, ""/144}, &(0x7f0000000400)=0xb0, 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ppoll(&(0x7f0000000680)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) (async)
syz_usb_connect$uac1(0x3, 0xf1, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0xf, 0x90, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x5, 0x3, 0x5}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x1, 0x23, '\t'}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0x6, "1a3fe760ae"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x2, 0x1, "a5327c"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x100, 0x5, 0x6, 0x2, 0x4, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0xdf, 0x1}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x4, 0x9, "c9", "74fb"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0xc4, 'C', "7dbe"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfb, 0x1, 0x1, 0x7}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0x2, 0x2, "1e940d9ced640cce"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x5, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0xa, 0x25, {0x7, 0x25, 0x1, 0x81, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x2, 0x55, 0x9a, "36721466"}, @as_header={0x7, 0x24, 0x1, 0xdd, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x0, 0x4, {0x7, 0x25, 0x1, 0x87, 0x44}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x5, 0x4, 0xcb, 0x40}, 0xfa, &(0x7f0000000680)={0x5, 0xf, 0xfa, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x77, 0x5, 0x729}, @generic={0xd0, 0x10, 0xa, "9d1a090df6e20ff0adab3f20cd0a8436abaab5114cc288110e6c42f27e8b7df7b32df76339b1f5d4d329031e144197d45c30a5da7c141576770f05fd610258f7e6bbccb2a4eaf886882d4f9bdeaf11df65316c03d282fea1e6a40f8b15eb3f9e472115deab861dc4d856262ef43a28040d6559db06af6b98642df8f03b66afc8f01e8e64d6afb8eb41827c93a8a7e9978a19162bd619430a9da05540a406eab27ecd88fb4c66005328e76cab6de84f7a8df51918b7e76dc604b331cd9bdd147966c7626a8ad39bca9b9b542e54"}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x3ff, 0x0, 0x5, [0xc0, 0x3f00, 0xf]}]}, 0x7, [{0xfd, &(0x7f0000000780)=@string={0xfd, 0x3, "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"}}, {0x5, &(0x7f0000000480)=@string={0x5, 0x3, "31b73f"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x1409}}, {0xa5, &(0x7f00000008c0)=@string={0xa5, 0x3, "56ae540cd809fddf69342bc10fd4ed8279fbfa508079525441537e264527f3ff94a71fdee1e37d2ea7ea7c1507400327df0168a81dea2cfaf03d96fb33f5ea5a48e2c01121f5f0208d030b883859492484a44cdb29841b1bf0f05f8f5be05fbe2bd21dc94d7eedcb5a02ac5fba926a0ecbe4c18b1a51b787ad015577de7fee02295fdfde0aa8d39dc13d1ec5df3aa332602125f84c7856deccc16d1bed4a9408778559"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x426}}, {0x9a, &(0x7f00000009c0)=@string={0x9a, 0x3, "7851039ed8f9343bbed1bac26001c73a3319e8adf9189dd26343c1217040150a62bd161166183bbb3dabb735def805c7927fbfc750027a3d3234f15af53b7a3b305b0ec9d132274501d9f24b298d0afe521d1d230629bf04486c703f2abdbc437328a7c0abc80cd2932b752db2d7a4063181d074f139ebec34610fdb3595ad74d89106860c3ba86bd0d7bb396347e70af96ba74c0cd6a0f7"}}]}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="401561"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x1, 0x32, {0x32, 0x23, "d0d5b95749cc1abb394d957affff4120d4e899964fb712975f3d72e455e28172c2e9c8b7a33c16a89a528437b4980357"}}, &(0x7f0000000440)={0x0, 0x3, 0x7, @string={0x7, 0x3, "287472b043"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)={0x0, 0xe, 0xd4, "4a6ede2611efcd9846f547db252555aef5191edaae51cc0d011e24f448c84ec247c94ba390c81f8ecae7b88d5b135b98cb2e6e96e593bac3638f5dc49b39983db420b34087c719cc98173636ad2df740d72b07cf68c56575e357030e34f2d7df0ae80a67e66a6b98ff5fbee09a4b4386d986e8e6cf3c081a4cb3316ae38484ea010ae6e954f4da0ce097559bbad70dd7e0bfc2722781699527627c807d9b4d5d3eae086eb5c9bffdd7c146d53fbcff83a482d0dd11b7ca0cd3423e410d6c4747e514133ff18c212a4064f50f126ef8392be3699c"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000280)={0x20, 0x81, 0x1, 'd'}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "a1"}, &(0x7f0000000300)={0x20, 0x83, 0x1, ','}, &(0x7f0000000340)={0x20, 0x84, 0x4, "2016af79"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "86be99"}})

1m51.698736035s ago: executing program 1 (id=450):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0)

1m51.513646623s ago: executing program 1 (id=452):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x1d0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x17a, 0xe, {{{}, {}, @broadcast}, 0x3ff, @random=0x4, 0x9, @void, @val, @void, @void, @void, @val={0x5, 0x9e, {0x3, 0xab, 0x10, "5ac9ac38b1a07d0021ab01d98a48749c293e3630a8a9246f79f5d4881d609f85b9dd259e90796e3f0f4eb27880df1c81fc4508fec54125348ebba4578af62cb100783cbda8c28d9c3e5a06c33fbac1ed0fa0e9c7aae3cb4e6662fb78934e7f67fbeea8803c23436a394d9f6bbdfc9fa121d19dd4db2383d33da45ad49e126df48064e5fbf8a952c3cb243400d51a994c9c624f88d428c1d851408f"}}, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x7e, "9b88b8a06e2ffabd6831a92a9315cd1b1509af61f627e07ae730d3a4fdc96b0023108aa2accc733c718fab2da570b65cb622ba0918c2937dcde1295861e68ab72b89d2abad2f3dd70f4f80f727bfc4a0ea34debe1c61a02be442531a792477a55f38dfe76504d8a05f7d90c8db902f555672bd766e986941e10d4a45c772"}, {0xdd, 0x2e, "3fae12756ec5542d43aef67c7ef91c6a4b4a10e45fdeb259f3627fe9b44c1814451a287935f706517bf4a59c746c"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac1f, 0xfac0e, 0xfac14]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x1d0}, 0x1, 0x0, 0x0, 0x84}, 0x0)

1m51.200721984s ago: executing program 1 (id=456):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x7})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x8000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cu\xd4\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x42, 0x10, 0x0)
unshare(0x2040400)
mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000000c0)={0x18, 0x4, 0x9})
ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1)
ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc0205649, &(0x7f0000000000))
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
lstat(&(0x7f0000004600)='./cgroup\x00', 0x0)

1m51.05693456s ago: executing program 34 (id=456):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x2})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x7})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)
bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x8000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cu\xd4\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00'/336, 0x42, 0x10, 0x0)
unshare(0x2040400)
mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r4, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f00000000c0)={0x18, 0x4, 0x9})
ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1)
ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc0205649, &(0x7f0000000000))
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
lstat(&(0x7f0000004600)='./cgroup\x00', 0x0)

1m50.908313413s ago: executing program 2 (id=458):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000007340)='net\x00')
fstat(r2, &(0x7f0000007380))
setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000000), 0x4)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffcb66, @host}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)

1m50.68888778s ago: executing program 2 (id=459):
openat(0xffffffffffffff9c, 0x0, 0x101142, 0x40)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101400)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='veth0_to_team\x00'})
r4 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4)
r5 = syz_usb_connect(0x0, 0x1d1, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100022774e3107f18000680b3010203010902bf0101200010000904cf07023bb73b0d0724060001c97205240000100d240f01000000000c00fc7f8606241aff7f1809051af18ec7060200020d0006d230d5de18d6f0d3f10f6cfcf1a5c1b3cfc885e479417877ef9961c260c3b3a9d0a9f2ba86a92efc6a122814a1c05de6ad395dfed921a7acf3954c87bbcb6a1cc88aee2f59a8e2511512bdffed6aab6b45a7c2d7300b0803b1a63c7f9385db8ecef4da90ffb126f7a05a30c9d88873ca84fdc4460db50040d3cb46a960ddbfd9915ccb1c8aba08875b0fa0fc2c44430a7dca5b1970d0bdc8c8d7431daee8c8cc387b3b6d3e0c1d031f031af8398fc9b07e00117962d5b1bb9df4967bed8afe3be2fe0553ee09d503bf3c786c3d6b021a3c248512b149d500aa09e1bf8ccb9289921fd41558aec3e3e02affe1bf43ab7cd89cf2c341857d8be8e4a0867afed0def307e5fac4570bf4cca2cedfa24b32acae1519bcbea32d5031851bcc65cc76aa30ee07be87fa287746d8d20ccdbe6f3947ec2fefad8d2b560289cf615fcb0a4a37e4870098fc4cc5570b8182fdb21452af4f4c2406f0c8d1057673cb339e87226afdde3c927454160312efe1837bc6f7bfc0ef3107294bad82b7e0388a5768557b529b0c5b9c5b695d0905820200020001109b80743db52418b7b0169d8b4599e46903394c536dc919c8f275c07755c946be7801db9ebf5c5489"], 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4], 0x36)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r8, 0x80)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="200c04000000abc763a899fa51667ec4fad787e59a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$IMADDTIMER(r10, 0x80044940, &(0x7f0000000140)=0xffffffffffffffff)
ioctl$IMDELTIMER(r10, 0x80044941, &(0x7f0000000280)=0x1)
socket$inet_sctp(0x2, 0x1, 0x84)

1m35.645027872s ago: executing program 35 (id=459):
openat(0xffffffffffffff9c, 0x0, 0x101142, 0x40)
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101400)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='veth0_to_team\x00'})
r4 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4)
r5 = syz_usb_connect(0x0, 0x1d1, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100022774e3107f18000680b3010203010902bf0101200010000904cf07023bb73b0d0724060001c97205240000100d240f01000000000c00fc7f8606241aff7f1809051af18ec7060200020d0006d230d5de18d6f0d3f10f6cfcf1a5c1b3cfc885e479417877ef9961c260c3b3a9d0a9f2ba86a92efc6a122814a1c05de6ad395dfed921a7acf3954c87bbcb6a1cc88aee2f59a8e2511512bdffed6aab6b45a7c2d7300b0803b1a63c7f9385db8ecef4da90ffb126f7a05a30c9d88873ca84fdc4460db50040d3cb46a960ddbfd9915ccb1c8aba08875b0fa0fc2c44430a7dca5b1970d0bdc8c8d7431daee8c8cc387b3b6d3e0c1d031f031af8398fc9b07e00117962d5b1bb9df4967bed8afe3be2fe0553ee09d503bf3c786c3d6b021a3c248512b149d500aa09e1bf8ccb9289921fd41558aec3e3e02affe1bf43ab7cd89cf2c341857d8be8e4a0867afed0def307e5fac4570bf4cca2cedfa24b32acae1519bcbea32d5031851bcc65cc76aa30ee07be87fa287746d8d20ccdbe6f3947ec2fefad8d2b560289cf615fcb0a4a37e4870098fc4cc5570b8182fdb21452af4f4c2406f0c8d1057673cb339e87226afdde3c927454160312efe1837bc6f7bfc0ef3107294bad82b7e0388a5768557b529b0c5b9c5b695d0905820200020001109b80743db52418b7b0169d8b4599e46903394c536dc919c8f275c07755c946be7801db9ebf5c5489"], 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4], 0x36)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r8, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r8, 0x80)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="200c04000000abc763a899fa51667ec4fad787e59a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$IMADDTIMER(r10, 0x80044940, &(0x7f0000000140)=0xffffffffffffffff)
ioctl$IMDELTIMER(r10, 0x80044941, &(0x7f0000000280)=0x1)
socket$inet_sctp(0x2, 0x1, 0x84)

36.344375872s ago: executing program 4 (id=837):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd63, @loopback, 0x6}, 0x1c)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001c40), 0x20000, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000940)={'nat\x00', 0x0, 0x0, 0x0, [0x30000000, 0x2ae1, 0xdcb, 0xa, 0xfffffffffffffffb, 0x8], 0x3, &(0x7f0000000340)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000880)={r3, @in6={{0xa, 0x4e21, 0x8, @private0, 0x8}}, 0xf, 0x8}, &(0x7f0000000140)=0x90)
socket(0x10, 0x3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES16=r4], 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000640)=0x3, 0x4)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000002c0), 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/39, 0x27}, {&(0x7f00000007c0)=""/182, 0xfffffffffffffc8d}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/219}, {&(0x7f00000004c0)=""/231}, {&(0x7f0000000000)=""/46}, {&(0x7f0000000680)=""/175}], 0x3}, 0x20)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005f8bfa4099115268345701020301090212000100000000090499", @ANYRES16, @ANYBLOB='\t'], 0x0)
ioctl$VHOST_SET_VRING_NUM(r6, 0x4008af10, &(0x7f00000001c0)={0x0, 0x1000})
r7 = socket$inet6(0x2d, 0x2, 0x0)
bind$inet6(r7, 0x0, 0x0)
r8 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x301, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x6f631b4376e74f5e, {0x2, 0x4e23, @rand_addr=0x44010100}})
sendto(r0, &(0x7f0000000b80)="b5ee553eac7caf5d956278f7feea2dbcdb8cd2d8c07dfb24481d5d2d4d4addfe032912faf707b895ea22e4d8dbcdbf03d86b894d2feb4317b7d5be", 0x3b, 0x4000080, 0x0, 0x0)

35.520180954s ago: executing program 4 (id=843):
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x18000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_STATFS(r0, &(0x7f0000002080)={0x60, 0x0, r1, {{0x8001, 0x47f24d04, 0xfffffffffffffffb, 0xffffffffffffffff, 0x78e, 0x1, 0xd7, 0x4b6cd486}}}, 0x60)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000021c0)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000002200)=0xc)
mount$fuseblk(&(0x7f0000002100), &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x0, &(0x7f0000002240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xf}}, {@allow_other}, {@default_permissions}, {@blksize}, {@allow_other}, {@default_permissions}], [{@fowner_gt={'fowner>', 0xee01}}]}})
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000002380)={0x2, 0x8, 0x4, 0x100, 0x7, {0x77359400}, {0x3, 0x0, 0x3, 0x8, 0xa, 0x6, 'M@+\t'}, 0x3, 0x4, {<r6=>0xffffffffffffffff}, 0x4})
pread64(r6, &(0x7f0000002400)=""/244, 0xf4, 0xd)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002500), 0x2, 0x0)
write$FUSE_GETXATTR(r7, &(0x7f0000002540)={0x18, 0xffffffffffffffda, r1, {0x22}}, 0x18)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x18, 0x1401, 0x800, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x2000c080)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000002680)=0x2c)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002700), r0)
sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x24, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x27}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000002800)={0x10, 0x0, "e1ec3c67334de87f21ff77ba0002d917"})
r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002880), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x78, r9, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x400, 0x6, 0x9]}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000804)
r10 = openat(r0, &(0x7f00000029c0)='./file0\x00', 0x101001, 0xaa)
syz_usb_connect(0x5, 0x72a, &(0x7f0000002a00)={{0x12, 0x1, 0x300, 0x5a, 0x83, 0xad, 0x40, 0xfe9, 0xd500, 0xce36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x718, 0x3, 0x5, 0xf9, 0x40, 0x2, [{{0x9, 0x4, 0x99, 0x7, 0xa, 0xb0, 0xae, 0x48, 0x3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "3de8"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xffff, 0x8dd, 0x2}, [@obex={0x5, 0x24, 0x15, 0x3ff}, @dmm={0x7, 0x24, 0x14, 0x100, 0xfffd}, @acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0xec, 0x24, 0x13, 0xf5, "ef182e5bdd82b674ab9b2c8b54500c1da155238885be25c5c3f32d9b9c4051eaae7f12bbcf31d843e8b0a1047ab25d27fcd62f05234c893777b40ba10c6b8b8aeec95b88f1c6c808bd8395ac5dcd7e504766f6d41eb0f2becfdc0dc85b9e08b15863a18e3c0413f050a45b64a0198b8cfb4ac31f1576cef43033cb2c97c9181a97098dd52bb64b3668f1acb3343be349959deb6bc4183acef42a9ba308e2e18082de16f29ead1bb321ad96dccc9e76bdeac1d67b44265065f463266a32bf8b2b925ba8a59b0fccb3c3b021007dedcb6cc7032e3fab8421146f0770077bc8839d773bc3b6f46ab29f"}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x1}]}], [{{0x9, 0x5, 0x80, 0x12, 0x40, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xc, 0x401}]}}, {{0x9, 0x5, 0x7, 0x3, 0x0, 0x0, 0x3, 0xaa, [@generic={0xe9, 0xf, "2313177bcded02009acab30d5c5be21b851dad10a47d16e102c627ee6bf10ea52e0be7728e0eb012a6f6cb37e678acd45a78fb299765835bcd82b3234176df254e298e6596c641ae9f339d34c004667aa12e0647d51d1151789c9761b7eabbd013e119c9296775d1bc688a79a7a440c8f762906835346a9e11d9fe299e2b04efd10cea97a59dbb9b2e476dd95540120eb0a56999cd8d525208c9bf39c58264eea7f0c780394602822876ac112699f7e67faea41a120a82fcf9c314d4c199750a8e7b1ea92307a895f53d2a7c64ea8154d7d3655e127f0e6b61af652cdfc7cca2a3b9359139f37e"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x5, 0xc2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x5}, @generic={0x5b, 0xc, "468291945fed24c59bf731f1b8435e2699b0bc7d3280b90041019e9a2281b9ac2d12e1294cd2fa89384bfed641e75e41a38e9d4ca7e5f6986293a27eb51e56eb3182b26b042993ac7b0ad146e1d549fcf4940c9ad582218235"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x3, 0xe6, 0xa7}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x1, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x6}]}}, {{0x9, 0x5, 0x7, 0x16, 0x40, 0x7, 0x9, 0x2}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x1, 0x2, 0x43}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x3, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x84}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x5, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x21, 0xcd, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}]}}, {{0x9, 0x4, 0xd3, 0x3, 0x10, 0xff, 0xff, 0xff, 0x9, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'l'}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x2, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0x4, 0x8}}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x77, 0x69, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x5, 0x7, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x7, 0xd, 0x1}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x5, 0x8, 0xa, [@generic={0x5b, 0x8, "20c086095794a7e565b6b82f7bec12f1208c79fd0769846c831f0daa9bcea4f76533185e70be6702f387a29e56a58625d9f4b31533a03c86dd12ddeb87c0658afe19ff5f2b0a1fe6e51a8dba9e88b4f25f78bf74b866cb421f"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x0, 0x4, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x80, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x103, 0x0, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x85, 0x5, 0xa54}]}}, {{0x9, 0x5, 0xc, 0x2, 0x44, 0xd0, 0xbc, 0x8, [@generic={0x75, 0xc, "3b206458699f80904fc2ee0272b083b2d97a9f48dad765e246c4cf6c7bf369304f8888df8833fd92e4bfdceab83af4392a63885b0983967c2879fc0b664a29cc92bbae2882eb5bb532a25bc258092c18d2d6749cd630ec17db22de4ce4da31c1d0472901b49e4903f05314da48a9787ec8ddaf"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0x7fff}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x8, 0x7f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x4, 0x4, 0x40}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x3, 0x8, 0x7}}, {{0x9, 0x5, 0x4, 0x3, 0x8, 0x1, 0xaf, 0x62, [@generic={0x3e, 0x23, "ed4f5d3224ad2c2b63c5fc1d4da91f3de7c0cd01de008fa97071db8e30aca2d107de6fa636e9e7755acf310287cd78ef1133609012248a224c8f9a96"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x3, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0xc5, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x5, 0xd, 0x7}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x2, 0x80, 0xfa, [@generic={0xea, 0x30, "5d2e0840f678a97472c2892e0586f3b491fc26dc5e91f6e2bda678cd79baea6e732a7a92f596cae784a4b7038bffb1d3488cb4df0d2743c710d66a78c51cbe337437502bc98cd2a86aea8a6d68105e0612891be06cd9385f4ebb175dfb965fe885d4a22de6d983d73fd14d37f31a175aed72d2ef6c9211eb488832ec6d38f6bbdfe0a4b003dcd4706e83cac3e804ba3bba140e94262e5a5b4aef763947fdc76c1b555322f4798ff198c9438346b60590742b65138ed95f3286b25ec6b19eb7274c3cb930dc6cb8ce07d1f4c9b60e11893191fe67fa964d62dd88ae06180d38a459ab53568b461034"}]}}]}}, {{0x9, 0x4, 0xb1, 0xb, 0x2, 0xd2, 0xce, 0xc3, 0x7, [@generic={0xfa, 0x21, "ca71415505df8d8e0a4e495373e6c379361eacb3e9bed3158c5704f5f1a50b6224a836db65264c364bab1577eb9ec23bdddcaf95240c64ed5621583f993ec5afe8fcd97d8bf8114b45eb0cc99ce804c98ecd39935b36ecde57b410dc28d236dc12ea0930c90b5c0c7be77b23f8b3ac91a4118aeeb4db62d8cf7abda8cfa847069044dacedb3948d52ffe8cbb9f3b7d8858d0b5e3636ce795f9a61752839b51ee6a325f44a6f4e27515064ebc44ca611b1010ca1e71b0dda85394e49e943d2d3a97053c76519ffc09bceef461aa258e9fe46dc090af040bacb4dfd7a5a5e44b6603e6e598542c9e8f13de58b8aae0e47ffdd8ef376b0ac4e0"}], [{{0x9, 0x5, 0x22597f4745b6836b, 0x10, 0x0, 0x8, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xbd, 0x9, 0x4a, [@generic={0x12, 0xd, "082f3ab7e1843a7554eb3fd45fc74d3a"}]}}]}}]}}]}}, &(0x7f0000003300)={0xa, &(0x7f0000003140)={0xa, 0x6, 0x110, 0xff, 0x22, 0x4, 0x40, 0x7f}, 0x8, &(0x7f0000003180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x19, &(0x7f00000031c0)=@string={0x19, 0x3, "d4ba6f510112a3491e3fa8c3a979d2afb4d8839a42b60c"}}, {0x4, &(0x7f0000003200)=@lang_id={0x4, 0x3, 0x3409}}, {0x69, &(0x7f0000003240)=@string={0x69, 0x3, "4b9e397c05429e8d7301e51c2d4f35bd3ef7a3a149efaef58b88feb5ef2a9f0d8771ce873de8853ba85b2d5765046f4395709c641f728f7778c7db60e09f6074980c14f3af768e064d25567f17fb3ad320cd68c75da38d237b8afd0ff743bfcf8c3ea96b2b05e8"}}, {0x4, &(0x7f00000032c0)=@lang_id={0x4, 0x3, 0x82c}}]})
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000003380)={0x0, @sliced={0x1, [0x400, 0x200, 0x8, 0x2, 0x7, 0x3, 0x6, 0xb0, 0x7, 0x6, 0x0, 0x80, 0x7, 0x7, 0x5, 0x8, 0x9, 0x7, 0x40, 0x3, 0x6, 0x0, 0xe03, 0x2400, 0x8, 0x3, 0x3, 0x1, 0x9, 0x5, 0x2, 0xe, 0x8, 0x8, 0x32ce, 0x8, 0x6, 0x1, 0x6, 0x7fff, 0x5559, 0x2, 0x724f, 0x7, 0xb649, 0x4, 0xfff9, 0xfffb], 0x1}})
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000005740)={&(0x7f00000056c0)=[{0x4000, 0x2000, 0x9f, &(0x7f0000003480)="7cf53b7f9583130efd70d3e557f50a063f5d48a7f692207ad29b5b263873e80dbbd4038af7a17a8aaafd4a1a5c06cd3a2b7080a0eca88b8fc0ba9ca3c7ee0f89d8e93dacc08efb379bd62c9421a06e5856b9dcffdcbc954006a18108c98b87ae60d81879d58681423577316953d23f1f74ddd7b06e0c45c353c6225252b640c613145e1b68af0dada2150edd9606e63ea460c0a0cb2b4f69e547df0ab1932e"}, {0x5, 0x2000, 0xee, &(0x7f0000003540)="52c04672ddcd1889c7dfda3b2fe0e11ed3d144b67cd4258dd855310d59b74a75b3ff963a26977016f04a4241e1880853fb82ab07cf0f64db3f6237da8ace31ed70693294d1e1241e0b22b75adc659219997c35eb0400cb4bf99449d3e82a748b374cb8f11f93f17653b6517bd65b136109d380071637a1087783d0cae5fea044985044e32ee47ddd87de3796091f4dd852598115d94869d77949ce5cee61a550e5afbf25e0d881e8d097206046a035dc571f79fc0c9435be504b96b2651888d4946c44ff15a61900459a8937d00b9f73fd0169e7d93ad45300ee8ff13364ac585abe32eb03ee54e7f7a279bc6f15"}, {0x3, 0x9400, 0x1000, &(0x7f0000003640)="98a6cc6cac4d72a3451613e48ce1e0f89d32a6035b69560ad9f6d0b4d2cb11a403147cb1653be552ebd19a5332c908fbbc9690d3ef57645e3976eec1e5aac87cafb603aecd041fbf26b884e15ae1497039cd2dfda5cf805e059c8b642819fe4e27478063b6cfd5ddcd71fcdbbe50011f8c56221100c6fdc1f1f58f947b600b8311ec9f4252687dcd828661134d32621affcac003ddad0a2445567cb69342524662fda141c4cd6515383e495aeb92a4e3804f3b1b1c58176ce4a61ed01a868dd16225b959553c2b5071c5694ec13fc0487c79ffd4183011a1c02533351a26fc79cb3b94585adbc1fc8c7e50accf0874466a470ad5409b1476f2da15929baa1ac3fb8a1eebee75e082eac7fe1d170c9922ba4706a5852623f924874b8b15f634b237bda683db0bd863509c4a97d7251dc7e4c927900f81a494609973af610f600fe1fa3bf1938f2390ada25c35a0ef5b5baa1f44fe479fb548f510207633483309b7ababfb152e96603840cb6b4646edd092dec4558843a82a0fdbcab426340401b6c67dba8217b7470433d6189dcf5c8e2f18bcaea72ea8e0055d102f443aa3cb4d939ba227fcb92ddc9f32e149acdbcf7c4d01a20c0fc6fa5f0b2774cf76caf19c716ecf0c93accdbd607c79e47c8f60526a3bf0fb5eb3ae213baa67ef05d7118d5fa7e451f6b8f0d8562e5383f37856fbe015ddc132550acae96cb15120ed23058f28e357296cac965321b6c77802393cf796b221adc52b189c2d17a5eca00666b95cadbf856cbe825c58572a88f3351b1f97e1582f0cc6f241d0ae432f7fdbfad0cd16e5f779460e1c0889a8849c92d6140db1f458e4aa8829385f063722f301778cf14cba42fa5f08f4ad571341d13b5daf06656c39705608f59d3757eaf0e50e8f2a916e9593fba92efc7e2e2fc09846996c11e775f0bef2f5bcc2654b0b4433c789b3c6edcf988a3e6b108daadd997b914072a85abec967035afb47fb0317fdb0b772e2ed946b5be7e6c5d1965648be836f960a549dc34df4f7d9ef00a14df1ac8e59782c3635834ff89a5120d6db4e6285915b1afd46550dc295d539da539c22d9aa26478e4914445744f6046e7241ab453b6e965052b4233c3c554a645ff650ecef4dfd37f081eaef5666351d7f658d75ddd1262ce3b591727d2702bf71af77f1bc192b984442ee9fb6b875ea2305a60eb2fa6d6b2023aea333c347971cf400fc26d4dace728646506b9f59dc3b081d11186fb36782ab930aa38cc5798ee2e18a113dcf8a0ca09fccc3541ecfba0c9f9fab3502f52d6f59900cde3e11bbd4372cfb347723921a2795ab1dc1f62b88310f28690fe3dfb90072b4449761884477a76f090893fe94d349a0e8188ee1db5339fa1a0dfc6f36100d1ac9d24c1cc57906874d5258d19a6592c6367d2fba09a054bc0158319345b293323d1d6e6a77f08a824a89f69c7936576e70a4b628543f2ee87021a699718913cd0ee7a0dfe110b7d8e73c54b0cf2d07b8ccb69cce9be74c4aa3fc1f739be8daf42d77c27c2749df6b96c1ff8312091465f67dfd9f878c38231124f681b0f43fc0a4db7b7a4ce8fd381ea704bf42da761b36fc848fb3a721a9ebfff36b9f9dec3d0ca5bf9698b5dc97842d35c3da02be9297c2e19826c339b91e04c1ccdd4ee3fb422f199f88238596247b111135f80114a9711425c8852c85e0dfff4ccb7a2dcdce11c36db77a7dc96a646eebd4665885f515d2bf374adc13a9795f9cf3320aa18bd9fd9d7006e4a790ae08a59e338e3c498a6b92b5318bedfd3e104ac65628f81241c2628192541aaad0f1bbd2b1c321dd1ab6eafcb76332dc09525ea0d3319f6a73bbb4d80bb111d5048d0281574ee56364305f6351a7c22d85ffa2a5c607f6b86e038d7b2940c476da31a2c293822b14045310dfaddb3b8693085491d49ee99fd1d09ac161375f6b9f6d0ac5083836c4124ebc2591246ccf6ef9b9e27e16cb659a5b7adf9f966fa723f075568ff45272292525230d93aebeb111eb544c80e59556349010177f53e4b64803ba7d059c702d531e4596d58003909c34c0d92cc45b418d0925c5ab0060af5186931be6cd26ab4dcb8bc992ed7cd1e6197fde09e44b6ea4b4a0c25c1ae23386ff3cc0f55fc05a940a3d10b119a986db78fe2e3f6d7a5a453fcae22dbf6520d12a725c0245b9086d4a9490babd2a8db0aabb446507b83fa3fa61a3276c3b7007e732ea741ab7f85597071206cb1ed274c3138e7218b8af81f5d969d8f51485579908378d3e74e7280d2ecfe6421da76d775555c6c048836fca016a2f25c47c30818be8430f8e55f925d9f04aa7801239df94d9d5471e65f22fcddc6a0ba8231fc8e7ea36e3820269f7612cea3a6bc7968c5e308321ca35a54d6f0379296fbd3424f469b2776393f6bb1d483b9178da38f9f8f93da978eba79f0743cef327084fde0f36f562c1dfd040b0476e9700531af1247f58f273e641e5806860161bb194c11c3e71a1a62c07ca77da7b7a1ea4ff634e20bb388ed9f91c2dc2a6d695bb9811710043e8de8f800ec4f6680d9f646d9ca59f29d0577c7624c5125a25219979841114ca5b1d8afedb453db6d1e59a0cfb1a3c8bfff4b495c69decb9967a277712f6a1cbbca2234237266456d63324d01df0302fa080364aaaa082ea90130e6340281876a3dbff6d6b82649d0c2e17dbd155bd87ad834a0ad2318b021fab0e15ba36e3bf39ac4ec55581749f9791a8c6c48fefe1ee51858fe421a2f061149c69581fe15b98261d4585fa4a3effbc7812c6f892535148342db71c54a8a731e6e5fe01303002bbc6a8cc312baf9d6220c1325c25025bfd1d5ab0e047b616baf1c9718018d2cb1b980b65f314161ec72d9ce90e9d2406f7dbbd17e2f72e603167a8b9e054bc2c65e2f83fb20343aa6731f058ea9dc49e2a6b98a6d370f7c8bdf0eb01b88b6c507ca44801ee57ffd6f608b3f9621bf815cac13f9f9da25799056c9a49bb0f9c4c5988bed3d64f06631d559f7641360e4517e8630c195424bbf7054f427af276e9a8ed81de3b5b40141ec3b81e858d1f2fe37fface0faad0d87c36fe0dbbc9d73ea6d8e111e4375720f220d12849a9fb77e92d439ebf5969b31de842cefc1d2d55d67a93beb407e40d098213beaee5a1a41b96e847ef2970027cedf99dae3ca2e1a7425907a866fc29b96ac57ad8d7784e67aef675a99b3758c181e9a81c9309845d6614bcdccb8222dd517d27a1033a9d00c1e67a686c3d85dcfc519053c0158799ed96da601d89a63a6a60a0b31efd34170c81ff8381f76ab2b610ff8fe000867efaac49ed4207f81cd7e10f81117de036bd89c9694f6d1b878bcacf37d4bc9f41d18bb779191d753d05cfe96977472b2553a5ec957d259b1eb5671176851fedd497f628038162c32064a1f4e1a3c2cd651e1146f1958062ad9748ca324fe93db9e15a3f0cc57bb6738932184a47c8ccf33c9f7ffe9eced1476933c8c914659e9b2b646a02162f9dd8ed0532ff2bbdad8b212533419e97f81b6cc33cd725897da389026aac8c359e1958be4f5a36ea252cb1158a92aa86a737ce25fc5d9711249c2d0377ea4833c80087467997fd825b0aed4b355ecc2c96be47a99c08fd9c60ba4647e0c5a66cfafeeec24a23a6125ebbc7a5b22f08c4ba8d206862d1e320b9fac0d9b22a331e5a8b74e86d24913cfda3d9aa8d91a458c2e9e549612753dc997942237cdd7f6e35482475d86d5bdab37affe96dafa8794fdce6bfb03d26a3ad0d1d9357efd8278ccc0e0d52ae3b2349596d3dc998fa4a1fb30c655a804ef43e71ae1f009df06b766b6090abe52b65b3fef981f8e2635f81220dd2ee28e6942255b10f75ce0402eb27e7df74ffd85a7c86fe387ebe27d227a2273080247514659a0dff608e82b3b6bcd48b48c9f6546cfc9e5711147d65b1d518657a18327490fe0ec3fac2e9cb78c709f66fa5590efa52dfcbc3d154fc50b042564296c55258d59dabff3c43da3618d2055882aaa2b8f7a38d360935a9e9e7f88b7186c588baa015ce4e192b317e25529a413949318867f135824d618be0db741c05002e169964b795865813c63613660dea6562f0dd5a5fbd8be91a054a319ab5c89982e374a111d94a8b384eb3b93d8672ce3a5abbba8e1d17d9e743da43dd0d9c32afc1a24305b62b0ca0f366f7951be76cfd2e2afcfb77894f0b0cf3023530c87fa1cba7858ab0fa11ffd99d86f2f73c657011b975fa9ea5f2f49f20a08ef856f91ec52e137c263bff21eaf38b441c1223e7437a84ac54f0f60ee4604d049ebe98b3330e4e57de63d79033d93b0831b0c2e0fe68cd9d8dc29890ba13e2fad2c0830af7aa26b649ced901f1d43eb675566e5372de79fad1ed9dd43bf6a3dc0edc7d0c274641f90d3ac33ed4c241a647e6a770ebb46bb5a060f99fd3694c4b4ef7d84b6eceb56b6820cb802a8c6822edb40282892087afedf35385aa857dbd0315e802c3ab23a13f823256150339f4e4d86eace09f3c46c4095250f3dbd422a05756eef4557b9340474af841ce4e2c4a322e6ead647bed9248cf6462dc4c40f7433a4896a76c1f785408bd415418770e9e235a5545a66ef75fa28a4eb68345a33463081d1ed709528e7d1a816c2faee0a7911d681f9c5146bf364a409efff19f9c601726b528a4acf2e1628550c1deb083e9fe663207cf4fc0c7361156e70ef659975602541adc125cc69a7be1fac26fd198de867da95e3408f5ab2894fc6e3699cc82b90dec795b5f6f518af7ca2e24d8d3d17924e4990a22b729f0a9dba7205f181c01e9c22fb06249c4189b7243baf351e745c0ad802e3974c8d1dbcfbf64847955db5fbe33ae29362dbbc358821586bf8ababa4eb1d848b7db40fcfbc4656a9ef66681b40a95dd3484ce182e6e63d9a188765c46b1168ea9d6d81d436b314b614408111b1074eb5c969b7643592b5da62b26f10629ab626f0e0873efcd40a72107cff65780b88398f13e08f409b8716fbec3d7adf4202b75c1f4c44a3d4a135652c0ab24537c535f2ab038341bd80b9a8f4222b19f2dfcfdee558885f2a62f25b4a5ebbcb8ca60bfa1d39849de4a5bc9a810784eb881055066bb1c6ff21869f05e0d9afad09a3429e09eb3d819815a800ffd3eb9406a516e54b2d8fc69ecbd8b07e0c77bc2fce2b3eb022bb10c57e3401784ce8650f148f204d7fa9645033efd48916b76f74e073a669c10914415d2d7ec3455598f204cfe72235e9f665f9393e7d0fcb35ceb9c868b9e81a343ab0cdb89abd237546b8e7d08ee1a647c663c250f562cc7afd1e20fd363403f312034cdea648fc00804c770061c1833476f135f69d7499346acddb884114167d3a6ae5401a60b3d1b890bd38bcd122b94610f6063133f6bed3c6a23b78f43f0946f788103b63c99b79b4cb8c207fd792b5f13533137af4229f436ba3f426eff9490ca8a7afa4c5ab4176cea0e5757ddec12ad63e7c7e781a146ff20d1d3eaca5099a987587da9ec418fd17e6a7e9da577b6e272a7c525e266324cb3f4a473b6acedd6bbf239e797cb82c418c442e939a766ee3a436b9eab99acb8e36ee5d2bd06169c1c84c63acaab0044b362fa987fc8dee15591f920cfb4ef8f9d896aee8dc33f33640c0cb495be7ea3c576357929c4a2c328dc726d01e7b7b45396a3615e1f6fb7236ad004acf6e945aae1ae3200a4b59a89a94922c36f323bf42cc9749b49ce2f9d1a2326fb6b8e63b8f8810d06cc3d44a5ba835b16d2f8be90a1a4fb808e6e0397d7bf5af0827c"}, {0x4, 0x401, 0x1000, &(0x7f0000004640)="f7e353384b56a488053f7a233ed9ed8c6344c2b2323c403cb1d1597151cc1337b05e29174b60965e826c27bf75dca1cdbcc114961d271563f0fc4704a2fc6994eefb2fa2b2b97e825071b4ca76c51062303a097c2a665ddc138b61def69f612b4265ec5d8bc7840330974abbba562d9ffd1e9e8a55c4d56f06fb2a1fc10a65e02a245116d3b100235ff152cfb36039065ee44f6167577a81ca3a45d3877691a1328ec7a2e68680a7e3dbadaaf9bdf32faab82a913aa6615e6dffb5d647fcfbfe23ab47f1407715778d86bdfea3b2e3bb31ad188b68dafbdc61176d16d782e70715ee577a2450b1d919ce508cbab0816076c77ebc0977e7ca9313ee03870ac1658bb9a43d1404cf56adbb211ad5db50d413feff6b6c92c6b7e86e16c3b68485cb45e856041905e2ef90b37865ae6d561f0a3b2b3b42e0c2a5bfe57f662b63180cf173505886b2978de5f4b3839d5998b64db1022c1bde1892d682a9640ca0ba461c6f7d777cbef627678d86ad38aab7ce1651bd433a78da3267175f313d5c9d2dbfcff18955a55e7ff65f79d30b039a365e94a2efbc4b68e29506b678b1199286ba5288c3181445503cbc742c6a53f956b9f6d0b1db8eed6fe126474b55936aab13189efc4e40bcfd7af2c6f0a0f2fc3fb186a5e0700955f6cd1e80ddcd58a27359ba1806182c192e416d2322ab96018acd8c23d1a3e9f37501f541be8ea16736b30c6adf1a28e79eeefde3f3af7ef3060f6c68d63db8b96adf570444dd440e8cc93fc87307b661f55503923cbf2113e8833d69640ae64327944b36d37b816515aface027bcd04ec63d96a5da56addffe4ded482307a992684a6f0985d0abfb9099a0e94d83c0671ed150a5e73dfa2c1d8adf21afb4bcfaa8f9c0ffd87a4ce1672c3f6809a4d1d75c9e8fd7d40edf295aeed4650fb06a094f7c3e631bd0749888328e3755a83bceb8534ad02d3dc17cc3c0c3ceb22976f058db9e9a6bcccc7e3cbba6535c795f921d062ce101a2823267c9b1a3f4c124afc3f8a51187fa06d22663039d7992702cb4e81fee333e075e0057a91c7f5e92aee4698641ab983d373319942e0a572490d650aea03a7c81d111eede9da5857c86559ea3d42aefab7c17b2565ea94e533046f09d56a7f6c1003f39e1cb304e0292c20cc2196abfa62928d7dbb88eb5bbbf5cf5e5d7f183fde2dcdd2d69e99fa39be1d92b992de418136bb8f12b5c27d6ff40236b89df6121800e8e990c56e04a774f8de7145c6cc2c57105e1e33bb496ab8b5b7126ae45d16beca3587aaae9677696421df5023726eb1acd3e2cecc248f8ee442fc20175682ae53a35bb5333c1cda43bfdaeddcef70899323d3b4a71209d57e6624bd315849a958d79e98ed55391f935665e1f5d3fb0f236bb3bf89a20a4a62271781c8b953c31bb06f25ac4fa52c2bb9f98a04dd18d1852e06d3493a4e3eaa1ddb3acfe9293f12ae9460a99459372fc97faf5cee62ce52a8ddbebe5427901476493741decea2e9d5736ceb2a349fd65717b230098355af952e8e45d6830d33030e4c501c030f6b4faac5c77a831c15136a36693eb3395e8480d831187428adfbc1f49abd81e22d820c86815e041de9728b067246fad494e560c130c413fcc522024d37e7fab48af6f45ed22f8bd40d69244a12fabe71a98837f377b372db32ce8f84cb0162439071661339554b0425e4eb592ac70f9c48524833e149adf9ef5e1e5ecd7fa15937854edef076cc99718e63ac620f7ecc6d4f5828e5fadb02f880c3a6cfe869a9ec69bcbeb63a37020e5858d4891231e6fc0f35b9b9592b2a60c8bccd562c9944edc219397aa84fcbf893c4880787cce4f977e46bf692c639a9ede999c78004df697cd819d10950672a658ec8e7bf0134e313bd0c83edf58321d53a5b92b5e998d0315d146770b4d995a72db7d0239f4498be3050480087f8170f1711fe765fd227485ed93ff97dce02db3e70ef428efd07936ca16bb4627327cedcfa62824aee72b19875b169f044c8f6c8ae37aa7a8822368fdfaa9e154b325ad84c89e1187c448016d1fda171906dfc615dd64c382dc2b3372890a9494d3aee82d16b42d7f885d927a64888bea6c860a3d51ae9c6c1b745c90a286b2f724083e9480988be38f1f4fa06bf5d643f24d7e0f7192eaa168dcf3888d335b91b450a78702b1bc0858a47b478f5d6237eea4bb689bcd6a63c78c186b05b848dce321d5105e0413125cc8810d1c13fb259800fdfef6dc28f384b1d2c61bbdb43b28e41e757723b722cf54249595c291a113d1b5f3f28bb977eb6d714a65eb5af6ee770e1fd910962a1f33d1ed9f49147a7c196ae73f06144a27af5071d2d579992345c12804fbdf578c28b0047dba05438da3f711d03f5e7ea73913fde5c44773357c74318ca4aa9e5d7dd0c474a3daa3a6eac91417b4d2a7700c56857ea61ca1f9c3fe10c1b583e55afdf49c886a4b732bfb5e4f51866177cede6aa687a5c8583d8cabdebbd15ae41c8aba4ab29a44f2cdb74de0c32b7fa67c139f871ba3228970da46cbbf88b723a97e3e261de1e39def02053a3373aa808e7c28ba5b293c012ccf89a73f95e3fddc1b7907737181dff5c95c9b3055f0dae7524a106dc9c32aaea53b69fc7d76c7b9207dbe2abe2dd421ae7167079b4127e2c2afc02b277538ae9e9e8b56bc1f07530c0108f4eae71a7f2ac08e9856dfe6c29d7a9157cbacaf195bb2076040530ae1f531ee8167dbeb3f7c324fa3f40e2d88c8f979435c123861e149b13c2ed8eb82bd0a5a74f111e1cda857f234c599f4294082d4457c235c13985ce9fc7cb1f41cf6f9e9851682fdceacaa0d04eaa4545f91c80b58ce917def18cb0578763448a2e866c5bc26aa15e8a9178e586379dc088487b5f393eff7187a3b167fd5b343ef7e80be6132bd296937f02330820b944fdcf1c831b276b74cd7301cee61f332de20f78c43e713a987370cda55db02fe7238ab1c8e2568a5e8345ddc33bb3980f937f2b605430db6782db4adfbe61fdea3aca80af18550e225c9357318c4a399cc5d093f1d8d5e64dc69073958c020e7936b7806c03dc7cb3b543b1f92ab683bae44ab96a452f145af1659a9e38934d8bcb3bc4cac35a304d05ef2aa725b17dd81ad5e8e3cd5fe250916d53c3cf5a6c458f3077045cfe70059dbc73102cbf0b828fb2e221d59f79f757d809bef10c7d8a46c67cbbefeafa6428fd5af09e441317d0f9645c55e121f21e62a9b44d6f5dc81b6e54c8a0499e0915cdba3330301d659d948fc58ce3696e2e28f53ca527c23504504fe647ed3b6ec6847b2d9b4686591437879327d25a1b2aa2781a350d8c11148c67e320b4050353215c8acb0c01e882c825db6d218355d35152108b362b69398be0e5928cd7d91bef97436b20ac85ce2d3c5ecd52340e42b0369e7c3453116f41765685a8f8b33651047cf3bbefc020d73eb77411dbc9498f06b7583854f8ef954185f687da0ebeb8055275a50edf83972e60bda0ac4b241c5fa45b482f9a0316e89b5b20dacc4a7a22bf95cfdfad15afbfc5a2de9672b196a5f87e1b1b356a28d85edca0811fa2785e0dc431aa9ced55ae9339aeaef2375df78a41711cafa7689d9a2d79673006a9766ca1dc1779a8c115a3d9be56788e94f1069ccf82b17dcad8d797b2a4a2e3ecb8bd07b469919492e8915e77ba26297764c9c7e08c7f75a4fd147c4fb15ba7eaf9ff8d8987ba9780e83a5dd2028fa4dc16e2b258cc9a310e175f1a6c931b0994b95f7bbf7523413571f40165137b482e229f641465aa44eaa0578628d6f171448f2cadaf623520d805a4c7c0316c240406623d13a3034ae290111dfe705f1f2752427ae037e8681b05a5c6c1ff5cda0987b3c4638f49aa043646b5cbc308de8b5debee94e4e57aa708c161416ea15cce1fbeb194391654a60bc3921f825bc6639fd0bf01d60f8013932d7df10b82854d1686a101bd75d8a22061fd69ebb4d151f52d4bbf593785805c5afa1fd9f8ad5a6d45c70e21a6ba1fc572a259b3e43501a51db5a85202745fecbe7711ba0c8afdabb9b9754ea068115ed88c58dbe3237467f30ddb085d78da0142f5ae31dfbe419f476edb419328fc498873fbdb285d6f1f5722cfce6a2ec0d3a44283cac133fec16e774df47973912bc9d14cd3d9ffc34bcdd5ea7d89e1dc7dd839d0340193f96eb42a39c086c188bb2668ccc3949d808ec16e4f0c35db60be0d42a14453a06147dd789659617458f098229eab0b4c614ce2e470e95d76e662f398e9ca05b91529da2031b64436e0fd9e6a59f4a4f2513b037a915459ed936d8fd56de8dbdadd1ae809040ac594d1a999a557ffca3a8a9f8c2bbfe1310cf702de0299a51fc130f640656b495c5e6e1bb77bd4dc2472c009f305a6ab474679d5784138cc658adb0a2338d0ddbc3b4caec96ef8216c84d90b6feb64022bf616a488773b4b03311b0ea9642a7aafc616742ecc5cde387934be41238654ea643ea02336ca6469bd4e65ac16a5813c2507a87b66f726beadfcabd912d0df991c6c227a319b62fd51548d13ae6269e32edee0fa17eb2bebec8de8ec3da1e46807a9b318f86b5c7860b473312a2ad94d33e2cfd869e5cc5de869b0b39cfdb9aaa6f64cf20d4609f3297f00a1075a1b2e38274de91c7fdb4b5a3831d7798276d71c3c95b55eabc628a908c378271da4af3c8db48b8e55ccf7f33d1f85d840fc72d09a77606b94b4d9c3c24e63efbaf99b45433dc899d59283ab2f2ce4e54a50b3f3572f8cf8da7638e2827ecb873ebd0fed523d7797d38492d91abbb9351ed06ddfce6a2cca6a8ab6a99b5fac7198d9dade267891f262e02c6526384a58cd51f02022616e4e96558b82e67a854f452d0f0a39a1427cfaaea96b526c2b4478b7f58c11b61f8d10f3a1ac49a6554e618137ba7b44aed30d7e9671b9579aeeb6bfe2bd3011d69849caea3d8bc557c78f450d6451222704d393b9d7800b9600e895080e1797126c34a7004cb9c827f191773d3bc2b02e4ee12009b6753cd69b74e3fd0ab5ff77c950716f34c8ec6c014a19385fd762fe82123063b937da21b73343700ffa8af73cd2a97d693b0a982c21b270cbc132aa0f06aff14b00a522d4c9087071b836d6a253eb5b98c4f95d169b8e87a4f0f599d6fd7f789a2d85f96ceb989aa34ad212d580af6f6fe3f2c4cd3fd4753f79681f74ba24b54149178b5c62d9e6c1e0f48b3b9772b15d5b76adb5a219a06e4bd9dd332acac84b9ce9802bea8c7378dfa1f27b496039847585950c2224e3323aeb1517be7d787aa7b981c9509d874e6f03cbda1e10afa18052cbb5695685f9216eee337682442eebccf8de2c79b94c047468f1693d41084d2c223b8224ca1fb682fe0982e344fce882eaf8c13a83a95e4ce1b9b1de716e4388eb49056802dbebb01762f54c5dfd2db52a0df5a210d212e06b69de9aa1183c79045c90708762dfd2f4dcf92081d719eea785e5cc596718c34fe018f9c9705bb1bc8cfff74097bfa153468d9f3583da9c72ef9d62aac43aa64435ad2628715d95bd07018ad52857c65068a278929c8f79cb05c9b2a51fa6d9c3a43993f8778facf73655fe1f29ffa99e60de1b1dd08a305bf806661d079dc8d2b7a953ad5aca5870bed8fa79c5b64749c60fdc4944303ebaa3dc8ff4b1ac67b58f92651703da543b2a933b6badc6f0f63eca3a75c5e9dabb89176986a86a9fad7488f2152aa9610c3e0b2b73e2fd56e1639012a8a36468709af377b0ebc5d6000efd348f9ea34dc14c89f8e50"}, {0x8000, 0xc800, 0x12, &(0x7f0000005640)="ddf79e9c2757cb9530306620439e53efd986"}, {0x2, 0x8101, 0x2b, &(0x7f0000005680)="04ebd324d3160fd020697376ab3b7fcd3fe7036adbcf8c5c272273938667610df505b8f4ce05a719acfa35"}], 0x6})
ioctl$KVM_CHECK_EXTENSION_VM(r10, 0xae03, 0x7)
r11 = openat(r10, &(0x7f0000005780)='./file0\x00', 0x108000, 0x3)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r6, 0xf517, 0x0)
r12 = open_tree(r11, &(0x7f00000057c0)='./file0\x00', 0x80c01)
write$FUSE_DIRENTPLUS(r12, &(0x7f0000005800)={0x518, 0x0, r1, [{{0x1, 0x0, 0x2, 0x81, 0x10, 0x4, {0x6, 0x2, 0x1, 0x101, 0xe, 0x800, 0x7, 0xa, 0x7ff, 0x4000, 0xa, r2, r5, 0x4, 0x2}}, {0x0, 0x6, 0x3, 0x410a, '*{['}}, {{0x5, 0x3, 0x6, 0x7fffffff, 0x3d, 0xfffffffd, {0x4, 0x99e, 0x8, 0x100, 0xcae, 0xfff, 0x7ff, 0xf4, 0x9, 0x2000, 0x9, r2, r3, 0x10000, 0x1}}, {0x3, 0xf, 0x3, 0x40, '#,['}}, {{0x2, 0x1, 0x9f84, 0x4, 0x7, 0x4, {0x6, 0x4, 0xd, 0x8, 0x2, 0x1, 0x10000, 0x0, 0x995f, 0xa000, 0x10, r2, r3, 0xfd8, 0x2}}, {0x5, 0x8, 0x8, 0x67f0, 'group_id'}}, {{0x5, 0x0, 0x4, 0x8001, 0x1, 0xfffffff8, {0x5, 0x3, 0x1374, 0x2, 0x9, 0x8, 0x80, 0x6, 0x32, 0x6000, 0x6, r4, r3, 0xf51, 0x7}}, {0x3, 0x4, 0x7, 0x7, '])&+)\xe0\xb2'}}, {{0x6, 0x1, 0x1, 0x566, 0x8, 0x1, {0x1, 0x6, 0x0, 0x800, 0x9, 0x3, 0x7fffffff, 0x1000, 0x5, 0x1000, 0x1, r2, r3, 0x0, 0x737}}, {0x1, 0x1, 0x4, 0x8, '!}-}'}}, {{0x0, 0x1, 0x0, 0x1924, 0x46e9, 0x8, {0x4, 0x0, 0xe1e, 0x4, 0x7, 0x6, 0x0, 0x80, 0x1e271198, 0x1000, 0x506, r2, r3, 0x7236, 0x4}}, {0x4, 0x4, 0x7, 0xe6d, 'fowner>'}}, {{0x4, 0x1, 0x3, 0x30, 0xffff, 0x8, {0x1, 0xecd, 0x7, 0x5, 0x8, 0x100, 0x3ff, 0x0, 0x0, 0xa000, 0x0, r4, r5, 0x8, 0x85aa}}, {0x4, 0x5, 0x2, 0xc0000, '.%'}}, {{0x1, 0x0, 0x5, 0x200, 0x6, 0x3, {0x2, 0x8, 0x40, 0x0, 0xfffffffffffffffa, 0x8, 0xfffff000, 0x2, 0x8, 0xa000, 0x44a6, r4, r3, 0x0, 0x80000000}}, {0x4, 0xffffffffffffffff, 0xc, 0x2, '\xb7,\'O\':@!\',)z'}}]}, 0x518)
r13 = syz_open_dev$loop(&(0x7f0000005d40), 0x5, 0x80000)
ioctl$LOOP_GET_STATUS64(r13, 0x4c05, &(0x7f0000005d80))
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0)
sendmsg$NL80211_CMD_DEL_KEY(r14, &(0x7f0000006000)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f40)={0x60, r15, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "1f946d"}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7617da35829bbfd8ee50d1216"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "3552802783c38a657a52dfa889"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000044}, 0x40004)

34.917010228s ago: executing program 4 (id=844):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000d80)={0x1f, 0xb, 0x0, "2ac0749f7a19d71029970ac5e8092a6c6bd27d45d01f1af84d4f7d0b48a36eb2"})
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

34.863625709s ago: executing program 4 (id=845):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0)

34.254407602s ago: executing program 4 (id=848):
r0 = socket$phonet(0x23, 0x2, 0x1)
setsockopt$sock_linger(r0, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write(r1, 0x7c, 0xfe, &(0x7f0000000240)="b5bc89c0ef817db30ed191d962cfa3b2753c99c9e7cd02552f10211be3e387c98aa4e7efb335b2bb1441aa66ae31ff53dbe6a9c0de4ab625ff5bad633e0d5044886444e61b81d919f76c1d0352255cb26589b1e12d0ab6cb9ce2720cc28c8cc636e93eadeee2b5d17a896dfe97fcb3bc6bb6be489f5ea410a9166e4535704ab900a5ce040f7b5b4beef6dfd81b4bd9e83ca86493eac4bf855999a5879b7003c7c81bdf10e843b94486f0a49f57a6f9430d45d4c75b90db584eaf481343414523a3c8807ff7da3d9bcb1141b4582c8197d997cf32d4dcbe5eef88de53e160eb19ff8cce8359de81d461d78a10e0839d5e82a283a88ce8f7420823a0b60b53")
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000080)={[0x0, 0xf000, 0xd000, 0xd000], 0x7, 0x0, 0x10000000})
syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

33.629168279s ago: executing program 4 (id=853):
close(0xffffffffffffffff)
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x163400, 0x20)
sync()
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000009)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
close(r3)
epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$packet(0x11, 0x2, 0x300)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r6, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001040)="96", 0x1}], 0x1}}], 0x1, 0x4048841)
sendmsg$inet(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="c1", 0x1}], 0x1}, 0x4800)

18.525646787s ago: executing program 36 (id=853):
close(0xffffffffffffffff)
r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x163400, 0x20)
sync()
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000700))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000009)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6)
close(r3)
epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
socket$packet(0x11, 0x2, 0x300)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r6, &(0x7f00000014c0)=ANY=[], 0x46b)
sendmmsg$inet(r6, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001040)="96", 0x1}], 0x1}}], 0x1, 0x4048841)
sendmsg$inet(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="c1", 0x1}], 0x1}, 0x4800)

8.467320506s ago: executing program 5 (id=932):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x84, 0x1, "e0"}, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x16, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x5, @string={0x5, 0x3, "9677cc"}}}, 0x0)

6.132098086s ago: executing program 5 (id=946):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r3, 0x0, 0x0, 0x44842, &(0x7f0000000480)={0x23, 0xfb, 0x0, 0x6}, 0x10)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = open(&(0x7f00000000c0)='.\x00', 0x591002, 0x8bff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
sendmmsg$inet(r8, &(0x7f0000000540)=[{{&(0x7f0000000680)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="cdd8", 0x2}], 0x1, &(0x7f0000000380)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}}], 0x2, 0x2000c044)
sendmmsg$inet(r8, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18ff5315b5f8d30dbf7f00000000000000200007000000a706000000000000"], 0x18}}], 0x2, 0x40)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r7, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "09a4416b24399d79ec70cb103241fc81a55860e9a7749d169c5d6af55456b4c5ad34b7578e7c0ad4963081d3451e48e2fce62e"}, 0x3e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r4, 0x1421b000)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
pipe(&(0x7f0000000080))
ioctl$KVM_RUN(r9, 0xae80, 0x0)
close_range(r4, r9, 0x2)
mknodat$loop(r7, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x800000)

5.939744515s ago: executing program 5 (id=947):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r1, 0x4a9b6000)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil)
futex(0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000050005"], 0xe0}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000480001ffffffe000000000000a0000000000002000000000140001800d2a79075827af5aa534d6815c2e93f10c00026b0ee5ce9b3705911c7a78059110373a342b0291f8311c282f187a025c42003f92cc3470ec210cc6f19f89a9179023bb38b4f6f5cd7630ccf3cb31fd2626cd2c2d2039145e1e436fee4495e70e4879a9527ff13efe95bae1f6f45b20039d41e673db9d089aa59235f8662b"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000600)={0x8, 0x8, 0x3})
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000040))

5.818975792s ago: executing program 5 (id=948):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f0000000780)={0x20, 0x7, 0x1, 'F'}, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000900)=[{{0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x8)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000080)={0x0, 0x4, 0xfe, {0xfe, 0x6e577ca3f274abb8, "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"}}, &(0x7f0000000400)={0x0, 0x3, 0x96, @string={0x96, 0x3, "7bdf6113293ca0f4efd7c51cc85f573a7dc35eee652dd8f34419bef7464f410ae344bee4dedc7ffc5bb1ddb2e080f7cb39870aeee5606a76fdcbb0d7912a9031949fdb8f75570731bc5c5914d73dc2147a692d3914357961f9f495cd8c5a7d4bf78aa0780175cca91cc164e3e0d2a1a0aecece3e6e186a61e6b7759f186ca6659f481618f04a230a91773123c3de0c0ebc156a59"}}, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9, 'dEGE'}, @local=@item_012={0x1, 0x2, 0x0, "eb"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x3, 0x1, {0x22, 0x800}}}}, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0x12, 0x5d, "1172e8718d83f9f00f39ce94fc30efd847533aad8b388a0cdc6be972fa09e9cc26e176d2c8a20279ea717b33417782a50a507401ce7955cd57fd8edd442200390d3ffd3d43220939e46ceec4b5cd25d49af6e013141a8943d80dc79e2d"}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x1, 0xb1, "628904a9ec623564ecc9e9721ec2ea10d989012037b7d25d538a1a57f705605bb23b98b1e0efd4b0cdff765d8e54fea0fe26954523320bc1ebbb11d6ded0cc3fbd6a857abdc576b67278edef78bf2e612ebfe9365783fe159356cbd635bbcfa459ab51b8f42d4e2a51ad967615ee05683e8930e72357407cfc9859d4d6fc6a87e5357625311f69135efc29078df998f5d78b6665a7c4bc861ab2365b757291bdd80d2284dfea14e2ba1b10990745c843cc"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x81}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

3.805161012s ago: executing program 7 (id=952):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022020000008e"], 0x0}, 0x0)

3.261301859s ago: executing program 6 (id=955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x1c0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x17a, 0xe, {{{}, {}, @broadcast}, 0x3ff, @random=0x4, 0x9, @void, @val, @void, @void, @void, @val={0x5, 0x9e, {0x3, 0xab, 0x10, "5ac9ac38b1a07d0021ab01d98a48749c293e3630a8a9246f79f5d4881d609f85b9dd259e90796e3f0f4eb27880df1c81fc4508fec54125348ebba4578af62cb100783cbda8c28d9c3e5a06c33fbac1ed0fa0e9c7aae3cb4e6662fb78934e7f67fbeea8803c23436a394d9f6bbdfc9fa121d19dd4db2383d33da45ad49e126df48064e5fbf8a952c3cb243400d51a994c9c624f88d428c1d851408f"}}, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x7e, "9b88b8a06e2ffabd6831a92a9315cd1b1509af61f627e07ae730d3a4fdc96b0023108aa2accc733c718fab2da570b65cb622ba0918c2937dcde1295861e68ab72b89d2abad2f3dd70f4f80f727bfc4a0ea34debe1c61a02be442531a792477a55f38dfe76504d8a05f7d90c8db902f555672bd766e986941e10d4a45c772"}, {0xdd, 0x2e, "3fae12756ec5542d43aef67c7ef91c6a4b4a10e45fdeb259f3627fe9b44c1814451a287935f706517bf4a59c746c"}]}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac1f, 0xfac14]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x1c0}, 0x1, 0x0, 0x0, 0x84}, 0x0)

3.205184133s ago: executing program 6 (id=957):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x8000)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2, 0x1, 0x1, {0x80000001, 0x5, 0xc, 0xdb4}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905", @ANYRES32], 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r4 = fcntl$getown(r0, 0x9)
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000240)=r4)
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000700)={@remote, @multicast2, 0x1, "02616b084869e2d2753085220d18c4ba4d5dd839744d62ccdd83515688b20ad4", 0xdb8c, 0x101, 0xe, 0x6}, 0x3c)
syz_usb_connect$cdc_ecm(0x6, 0x93, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x1, 0x1, 0xe, 0x10, 0x18, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x8, 0x24, 0x6, 0x0, 0x0, "e675e9"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0x3, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x3, 0x7}, @ncm={0x6, 0x24, 0x1a, 0xfff2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm_detail={0x13, 0x24, 0x13, 0x50, "4b99ff134c82948b65d276922c40d5"}, @country_functional={0x8, 0x24, 0x7, 0x8, 0x3, [0x5849]}, @obex={0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x1e7, 0x3, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7c, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x9, 0x0, 0x6, 0xff, 0x3}, 0xd7, &(0x7f0000000440)={0x5, 0xf, 0xd7, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0x40, 0x4, 0x7fffffb, 0xff00, 0x1, [0xcf, 0xc000, 0x180, 0xff3f30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7a, 0x4, 0x800}, @generic={0xab, 0x10, 0x4, "cf724f9b416d54320a4476f62066ecea5154b1ebb0052c096c9c13e8db283e47944382081eb919b35398ba57d0a5feae0a4190b0f3d710aeafcdbe7d74ec4a41e3d614c61e096ea5b3b740500bd63f9249233182e18393cfd313d916aa9b06d365bce48c28c93013a45d18936872334a2e5bec2ed95f472a50e25aa60ed2f48bae3dab2ae0119c7d54340682a6d28d1b44b70c27439425461938895902ce945a6435b022291ebf95"}]}, 0x7, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x827}}, {0xf5, &(0x7f0000000540)=@string={0xf5, 0x3, "1de2844282202f31206d3b646672147403b61db3e2bbcd34520562fbbc70cec0b783689ca6df07154e42d06ef0f29c3bbf2024bbd6b08ef00e1c67ca2814bb325ff963a1a62ff7c3eac6e04b9590e10eabb4012775a37faaf102e362769b74f677c9f22e4712114e657620ee2e0569e209aa40bc2ba5454eab26bb8b10369d52f43c6351d23c80958d2aaf062393423b3291f307198a177bc01ac0d087ee5eda297eebab7988ba9bab06160693dc51ea2f6e0f855442ac680c664b1db671f0167dd6c24823f44968710afaf23ed39376d915f690b4dc6bbb241a4f374104d1becaf36492045b349b7b9f8dcef3eb8f927e0c0f"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1407}}, {0xa4, &(0x7f0000000b80)=ANY=[@ANYBLOB="a403362ecb5bd2143e1984676a5a92138186fbbd3f12355b055383e3c126c067754e8a8c4df6667a7b738b803a4174c3870069c43a4cbbc1628695d417097135eec269a26f500c36e8c2784e0def099c09db52a9abc943f5920f1fe104fa3bdd7cf3da5b497e78b67d44d88d04d7a75cae8dac23b36a890d0fa1fc5cf30c2ea8513d834cd2a1d331f30c1ad889b8648f01cc49a50434f7f65a889d4c1d9c8e5b28872f11c37dd4fd876adea6cc5c8ecab00174bd360609297f5653889019bf4d0a8bed84c4da1ee53a5483763cbb4d8d039e35a696e0d580ba8e36dd3fb8a6dc2799eb7376545e18357ab41e7e5be7ed8dfd7f6be81afb6755cff4d36e72601e9634753ce3d9df21b8", @ANYRES8=r2]}, {0xb0, &(0x7f0000000640)=@string={0xb0, 0x3, "e9fd6716018714039133d4d149e4d795cadd6b865b0c430f007865d20a974ecce9852e702a2064d10909ab6e4e7bc1f62e35d91964e10ba0eda052f44d0140d298b380814324bedcf4bc120fd5c9a3244e7e661e5c23219dc6ff69a829a7153246dd5cfd0e672a8971684fc134cd055f6c74709543bad93ed16956644de42ae7b3902e0ea1375ce4ca82910ef3c8f496bf2a97a77dd69a0aa138f31d3d2f4f1bc6bc45f6412731cb9e004d934929"}}, {0xe6, &(0x7f0000000880)=ANY=[@ANYBLOB="e603dd36465f98bd3a6f8b300cc516c1403ff2d45fa14f9168dd1267325b724a792b9366d264cd7d4d63a71c0630ec16b64b9ec37b1f9aed79436df75daae161fc29f4f0838da3bdffa99e68d59d25524b8813fee723ec0996dbc5394305e03c93ef69fa63fdaf7788aa9ec3782be9a71942e1a74a3a4979e2821013c6c2f4123731542cb6309a6f5bfde8d29f4efd76c3c304c86a049ee328d2e3e7541bcbea13739a4213abac3bcfe590fa80422cdee92a6d3462b6feefb12ed7b8aefc57deaeeac3482c1e9c7a88e626837cf1f9a8d5e67a9035f8acd148426b5ade9907536fb4495dd87885cd50cb5ba537344cca859934b7ff2c9b10719337a2e3f0b6f43c01cccca9655d67be2f8c244e6f4ac7e6947b7982c08c111899a40165b23bd5efda1eb5d378e2adcefdcab36d082a5a65374188c462dd69b781eace5410f969e10490e993792d466c5ab00a18fe8d8d69f566aa73e15e67ac44d7e5834fdb6417c664e05a3df0c049b9ca98c61156128b5c9a3b1528d087cce6030c4f104f9c78ccc6b524e4459ace0eeac1e9b9bcb7fde4146031dfc8fad79bc3e05f9224928c"]}]})

2.909117901s ago: executing program 8 (id=959):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2100, 0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0xff, 0x4, 0x0, 0x3502, 0x2, 0xa}]}]}, 0xa0}}, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x2, 0x10, 0x100})
r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={<r8=>0x0, 0x401, 0x1d, 0xffffffc0, 0x8, 0x7ff}, &(0x7f0000000080)=0x14)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000000c0)={r8, 0x7}, 0x8)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async)
recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2100, 0x0) (async)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x84}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0xff, 0x4, 0x0, 0x3502, 0x2, 0xa}]}]}, 0xa0}}, 0x0) (async)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x2, 0x10, 0x100}) (async)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x401, 0x1d, 0xffffffc0, 0x8, 0x7ff}, &(0x7f0000000080)=0x14) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000000c0)={r8, 0x7}, 0x8) (async)

2.644228107s ago: executing program 8 (id=960):
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000080)="23591363ad", 0x0, 0x5})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0)

2.251786627s ago: executing program 8 (id=961):
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
getpeername$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e)
r1 = memfd_secret(0x80000)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000180)={@hyper, 0x4})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000200)={0x2, 0x2}, 0x2)
close(r2)
pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2)
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa0, r4, 0x410, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x294, 0x39, 0x100, 0x70bd2b, 0x25dfdbfb, {0x16}, [@nested={0x18, 0xaa, 0x0, 0x1, [@nested={0x4, 0xcd}, @nested={0x4, 0xfb}, @typed={0x4, 0x107}, @nested={0x4, 0x11b}, @generic, @nested={0x4, 0xc5}]}, @generic="4c1f5cd05d569262e5fdca8eca3549d7498a40ff2d36777beeb7a65bcb69f7f3286eda6a0042e8e868fed6c579fe7a29e060b6213b9efce805556f1cbfff24d4c32398abdf0246589e6ef099b52d3f0e6ee737c6d7fcd10a01c9ca4105d66804af62fbf3bdc23cfa3391460453ed993a35", @typed={0x8, 0x64, 0x0, 0x0, @fd=r0}, @generic="2b2c42c0ad92884033c803fff50b6f2d53db62c5adc35762765ed6bcba9386e625b82d09b4cd834af07ddeee740580fdd50c4b19981e6bc78244f70d56fc47d50fe1bbb24d0fc7e8014ce35cfa03940a9a435ff2848be9f0143e931c4eba7042c6027536d63e052796a4b4d061dd8c68c172113f69575dffcc44d232039d148341438ef5691b9811fdbafcc45b7ce6bd2450ba42a1617e33d430d3b0ac820f6a6b", @generic="4aa594f38ae4ec45f1cb9373497ea1f73e339834e5427673ac353fd61e965cfd26abecc4f9c26642eaa69017fec536b423b8cf649babc0ea6c398a2000787a3627162d21f609ee4d3876a033e7c03d62873b354aa7022bb7021c514f0fe86bd7dcc318b59762c51b9aafe6be978a7ba06d7e43790e97b5e9163846a964541f4908ba8d6c2be66beec5479aeae1adad0f054c5fe708da5ed993c1b0d928132d39e6908cf4a7e4dbefadf160", @typed={0x8, 0x13f, 0x0, 0x0, @u32=0x2}, @generic="45ff4e6f4f91d989986de99e4a087db8d8d56a850e3e5600ad09d51b4a785008fbd3158250eecb4d05862b9cc6f05c194fe9881d14e9fcaad5f1fbad29b153947bb252daa8fe1e95dc79aa4cbcfd481e39791a3987d2fbe347607cbbe0e022bb3926b71453ded5cd4f21433b35eca6252cc20ba627533634b3624776ed6e90281bb1ed479a99e5820a75ac38b8", @typed={0x4, 0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @u32=0x10001}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r6, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8000}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x40}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7c}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040)
ioctl$TCSBRK(r1, 0x5409, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000980)={0x4, &(0x7f0000000940)=[{0x7, 0x5, 0x10, 0x9}, {0x33, 0x4c, 0x9, 0x5}, {0x6, 0xb, 0x88, 0x4}, {0x0, 0x81, 0x62, 0x2}]})
sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x78, r6, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa82}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x101}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000890)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_NAN(r7, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x44)
pipe(&(0x7f0000000c00)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000c40)={{@any, 0x4}, @host, 0x3, 0x2, 0x8, 0x7, 0x1000, 0x5, 0x56b})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r2)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000cc0)=0x2)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000d00)={0x0, 0x9, [@local, @remote, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @broadcast, @multicast]})
getpeername$unix(r0, &(0x7f0000000d40)=@abs, &(0x7f0000000dc0)=0x6e)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r9, &(0x7f0000000e00)={0x20000000})
ioctl$HIDIOCGCOLLECTIONINDEX(r8, 0x40184810, &(0x7f0000000e40)={0x3, 0x200, 0x101, 0x5, 0x2, 0x81})
syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), r2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0xb4, &(0x7f0000000f40)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x2, @private0, 0x101}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1800000}, @in6={0xa, 0x4e22, 0x0, @mcast1}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000001040)=0x10)

2.097122858s ago: executing program 8 (id=962):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/vlan/config\x00')
r1 = fsmount(r0, 0x0, 0x80)
read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x753) (async, rerun: 64)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001f0001000000000000000000040100800c00010004000000000000000926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8b787e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf08009600", @ANYRES32=r2, @ANYBLOB="59007a8008006400", @ANYRES32, @ANYBLOB="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da08000800000018000000000800c300", @ANYRES32, @ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x20000080}, 0x0)
read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0))
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1cb49e1f07e42be78fd6e4870000008f001f03000000000000000008f8ff00827d000000000000"], 0x1c}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) (async)
sendmsg$netlink(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00290700000000000000000c00000000000000", @ANYRESHEX], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.984662173s ago: executing program 8 (id=963):
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) (async)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0)
capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4}]}}, 0x0}, 0x0)

1.934047751s ago: executing program 5 (id=964):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e05003e20"], 0x8)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7fffffff, 0x26, 0x6})
sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0)

1.605277949s ago: executing program 6 (id=965):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000540)=[{0x1, 0x3, 0x35, 0x7}]})

1.571792263s ago: executing program 6 (id=966):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac1f, 0xfac14]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x0)

1.53299776s ago: executing program 6 (id=967):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001500010300000000000000000c"], 0x20}}, 0x4000000) (async, rerun: 32)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) (rerun: 32)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000440)={0x2, "418a814ada2b7b5ddf6df93463b735c8394113315b0708dddb36a3de0f0aa92a"}) (async)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x80, "3e6b4a2960a542c56c7d013b5d4c1fd2e677add9b1d63e7297e5323ad70da172"})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000080)) (async)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10)
r3 = socket$tipc(0x1e, 0x0, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

1.432127407s ago: executing program 6 (id=968):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f26, 0x1, 0x2, 0x403, 0x1, 0x8, 0x101, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x2, 0x4, 0x0, 0x315, 0x80001089, 0xfffffffd, 0x40, 0xfffffff1, 0x6, 0x1003, 0x40003e, 0x8, 0x4, 0x8000000, 0x10100]})
ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000400))
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dddbfb, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac02}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socketpair(0x3f, 0x1, 0xa, &(0x7f0000000000))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_devices(r5, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* r\x00\x00'], 0xa)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = epoll_create(0x7bb4)
quotactl_fd$Q_SYNC(r7, 0xffffffff80000102, 0x0, 0x0)

816.247931ms ago: executing program 7 (id=969):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e000000100000000000000000000000000000000000000000000000bffff00000a008000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fe8000000000000000000000000000000200000000000000000800000008000000000000fc020000000000000000000000000001000000003200000000000000e00000010000000000000000000000000335000003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a00000000000100000000000000000000000000000001000004d43300000000000000e00000010000000000000000000000000300000000010800000000000000000000040000fc000000000000000000000000000001000000002b00000000000000ff02000000000000000000000000000100000000010200000100"/500], 0x23c}}, 0x0) (async, rerun: 64)
pipe2(&(0x7f0000000180), 0x400) (rerun: 64)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x60800)
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000014c0))
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r2)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020c00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000ffdbdf250800000005002e0001000000050038000000000008003c000200000008003100167e000008000b008000000008002b0000040000"], 0x44}, 0x1, 0x0, 0x0, 0x60000055}, 0x800)

741.771756ms ago: executing program 7 (id=970):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="54010000100001000000000400000000fc0100000000000000000000009920bd144e922a0fb000000000000000000000000000000000000000000000000000005c37417a85edc218856261dcdb0b7abe4c048820652fb5d1440d37444ee049b651f95db0e639c41defe58fab65bce31270725ce3b00efc506163865be770f7dad9de9e11f9761749b4e76f4fdb256c9c66e2d53a5e081654d11bcf878018c3fe46dc9497d3146ff98f72675d83be0e3ac95168e677b8a7ed04cc2bf45b2cfe0c08c9bf874b45a68b6f145d46c803c1eda8f609bbb4f08e8c4f4524d121fc29ef64d96608", @ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="000000000000000000000000000000000000000032000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000cd00000000000000480002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700"/268], 0x154}}, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x4)

637.288005ms ago: executing program 8 (id=971):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x9, [{0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}]}})
syz_usb_connect(0x1, 0x2d, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB="120100001ddf8208c007121522300000000118021b0001000000010904010001faf40d00090582239f", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES8=r0], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000000)='>)/', 0x3)

628.692739ms ago: executing program 7 (id=972):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = socket$xdp(0x2c, 0x3, 0x0)
close(r2)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x4, 0x5})
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0xf7})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x55}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

522.565691ms ago: executing program 7 (id=973):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x6a69bee5580a704f}, 0x40)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)

329.297382ms ago: executing program 5 (id=974):
socket(0x10, 0x803, 0x0) (async)
r0 = socket$unix(0x1, 0x1, 0x0) (async)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x2) (async)
connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
getsockname$unix(r1, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e)
sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES16=r1], 0x18}}], 0x1, 0x0)
accept(r1, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b0001000000000904"], 0x0) (async)
socket$xdp(0x2c, 0x3, 0x0)

0s ago: executing program 7 (id=975):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r6, 0x0, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000090000000000000000006400010000060202020202020100"], 0x2e)
nanosleep(0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendto$inet6(r7, &(0x7f0000000180)='(', 0x1, 0x4000, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000040)=0x5, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, 0x0, 0x80)

kernel console output (not intermixed with test programs):

6'.
[  176.224027][   T30] audit: type=1326 audit(1761620199.548:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8215 comm="syz.4.507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2798efc9 code=0x0
[  176.251426][ T8214] netlink: 679 bytes leftover after parsing attributes in process `syz.5.506'.
[  176.509538][ T5897] mxuport 7-1:254.0: Direct firmware load for moxa/moxa-1450.fw failed with error -2
[  176.519388][ T5897] mxuport 7-1:254.0: Falling back to sysfs fallback for: moxa/moxa-1450.fw
[  176.641640][ T5928] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  176.791618][ T5928] usb 6-1: Using ep0 maxpacket: 16
[  176.800269][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.810286][ T5928] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.823160][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0
[  176.829772][ T5928] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  176.838839][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.848870][ T5928] usb 6-1: config 0 descriptor??
[  177.157570][ T8227] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  177.187442][ T8227] netlink: 56 bytes leftover after parsing attributes in process `syz.4.510'.
[  177.248639][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  177.259692][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  177.270159][ T8227] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  177.279089][ T8227] UDF-fs: Scanning with blocksize 512 failed
[  177.283176][ T5928] gt683r_led 0003:1770:FF00.0010: unknown main item tag 0x0
[  177.294715][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  177.301639][ T5928] gt683r_led 0003:1770:FF00.0010: unknown main item tag 0x0
[  177.304763][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  177.320524][ T5928] gt683r_led 0003:1770:FF00.0010: unknown main item tag 0x0
[  177.324359][ T8227] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  177.338724][ T8227] UDF-fs: Scanning with blocksize 1024 failed
[  177.342205][ T5928] gt683r_led 0003:1770:FF00.0010: unknown main item tag 0x0
[  177.346720][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  177.355591][ T5928] gt683r_led 0003:1770:FF00.0010: unknown main item tag 0x0
[  177.362301][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  177.377946][ T5928] gt683r_led 0003:1770:FF00.0010: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.5-1/input0
[  177.429709][ T8227] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  177.450357][ T8227] UDF-fs: Scanning with blocksize 2048 failed
[  177.464031][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  177.474180][ T8227] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  177.495836][  T984] usb 6-1: USB disconnect, device number 23
[  177.515918][ T5903] gt683r_led 0003:1770:FF00.0010: failed to send set report request: -19
[  177.536023][ T8227] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  177.549997][ T8227] UDF-fs: Scanning with blocksize 4096 failed
[  177.563790][ T8227] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  177.839279][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.851536][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.884974][  T984] hid-generic 0005:16BF:5505.0011: unknown main item tag 0x0
[  177.901081][  T984] hid-generic 0005:16BF:5505.0011: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  178.601567][ T5866] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  178.771757][ T5866] usb 6-1: Using ep0 maxpacket: 16
[  178.812222][ T5866] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[  178.820590][ T5866] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  178.833739][ T5866] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  178.844412][ T5866] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[  178.855409][ T5866] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  178.867785][ T5866] usb 6-1: config 0 has no interface number 0
[  178.874298][ T5866] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  178.886337][ T5866] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  178.899257][ T5866] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  178.913122][ T5866] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  178.926432][ T5866] usb 6-1: config 0 interface 125 has no altsetting 0
[  178.933597][ T5866] usb 6-1: config 0 interface 125 has no altsetting 2
[  178.943047][ T5866] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  178.953707][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.972728][ T5866] usb 6-1: Product: syz
[  178.976908][ T5866] usb 6-1: Manufacturer: syz
[  178.982533][ T5866] usb 6-1: SerialNumber: syz
[  178.990287][ T5866] usb 6-1: config 0 descriptor??
[  179.006184][ T5866] usb 6-1: selecting invalid altsetting 2
[  179.109333][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.119876][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.137212][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.147760][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.705578][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.714605][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.105241][  T984] usb 6-1: USB disconnect, device number 24
[  180.468571][ T8270] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  180.510796][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  180.510919][ T8270] qnx6: wrong signature (magic) in superblock #1.
[  180.528769][ T8270] qnx6: unable to read the first superblock
[  180.535961][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  180.544724][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  180.552995][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  180.560827][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  180.604965][ T8271] lo speed is unknown, defaulting to 1000
[  180.679585][ T8274] netlink: 750 bytes leftover after parsing attributes in process `syz.4.524'.
[  180.695894][ T8274] ieee802154 phy1 wpan1: encryption failed: -22
[  180.828735][ T5822] bond0: (slave syz_tun): Releasing backup interface
[  181.032682][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.071916][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.112403][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.124806][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.133868][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.136913][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.277239][ T8271] chnl_net:caif_netlink_parms(): no params data found
[  181.478259][ T8271] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.486149][ T8271] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.494494][ T8271] bridge_slave_0: entered allmulticast mode
[  181.503568][ T8271] bridge_slave_0: entered promiscuous mode
[  181.515476][ T8271] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.523183][ T8271] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.530506][ T8271] bridge_slave_1: entered allmulticast mode
[  181.540024][ T8271] bridge_slave_1: entered promiscuous mode
[  181.597581][ T8271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.615001][ T8271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.668760][ T5928] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  181.694782][ T8271] team0: Port device team_slave_0 added
[  181.724428][ T8271] team0: Port device team_slave_1 added
[  181.755801][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.785701][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.804764][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.820217][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.823759][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.833946][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.883235][ T5928] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.886073][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.893578][ T5928] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  181.935983][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.963363][ T5928] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  181.971482][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  181.977650][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  182.012396][ T5928] usb 6-1: SerialNumber: syz
[  182.018593][ T8315] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20001
[  182.029442][ T8315] comedi comedi1: comedi_config --init_data is deprecated
[  182.030512][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.198852][ T8271] hsr_slave_0: entered promiscuous mode
[  182.206971][ T8271] hsr_slave_1: entered promiscuous mode
[  182.215057][ T8271] debugfs: 'hsr0' already exists in 'hsr'
[  182.220829][ T8271] Cannot create hsr debugfs directory
[  182.256035][ T5928] usb 6-1: 0:2 : does not exist
[  182.295657][ T5928] usb 6-1: USB disconnect, device number 25
[  182.542166][ T8332] mmap: syz.4.535 (8332) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  182.621754][ T5833] Bluetooth: hci4: command tx timeout
[  182.745593][ T8271] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  182.757473][ T8271] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  182.772668][ T8271] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  182.793359][ T8271] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  183.076793][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.180994][ T8271] 8021q: adding VLAN 0 to HW filter on device team0
[  183.190818][ T8356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.229481][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.236722][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.252763][ T8356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.271656][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.278561][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.289361][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.301838][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.309695][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.317074][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.317124][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.324354][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.331099][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.342312][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.362909][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.369912][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.377802][   T56] block nbd2: Possible stuck request ffff888026875080: control (read@0,1024B). Runtime 60 seconds
[  183.388655][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.395610][   T56] block nbd2: Possible stuck request ffff888026875240: control (read@1024,1024B). Runtime 60 seconds
[  183.407260][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.414321][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.421208][   T56] block nbd2: Possible stuck request ffff888026875400: control (read@2048,1024B). Runtime 60 seconds
[  183.432609][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.439507][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.446529][   T56] block nbd2: Possible stuck request ffff8880268755c0: control (read@3072,1024B). Runtime 60 seconds
[  183.458179][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.465563][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.473271][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.480152][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.487144][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.494060][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.501008][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.508448][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.515448][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.522414][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.529329][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.536403][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.543462][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.550351][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.557883][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.564906][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.571986][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.578845][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.585982][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.592956][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.599944][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.606986][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.613951][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.620857][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.627981][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.634937][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.642103][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.649092][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.656553][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.663354][ T5866] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  183.671229][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.678192][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.685403][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.692325][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.699287][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.706287][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.713273][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.720179][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.727778][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.735594][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.751621][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.759133][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.766310][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.774883][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.785036][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.792771][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.799766][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.806776][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.813809][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.816931][ T5866] usb 6-1: Using ep0 maxpacket: 16
[  183.821265][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.833987][ T5833] Bluetooth: hci3: unexpected event for opcode 0x0407
[  183.878974][ T5866] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  183.896046][ T5866] usb 6-1: config 0 has no interface number 0
[  183.925266][ T5866] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  183.945822][ T5866] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  183.957324][ T5866] usb 6-1: config 0 interface 41 has no altsetting 0
[  184.005233][ T5866] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  184.043498][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.063489][ T5866] usb 6-1: Product: syz
[  184.071706][ T5866] usb 6-1: Manufacturer: syz
[  184.082863][ T5866] usb 6-1: SerialNumber: syz
[  184.124925][ T5866] usb 6-1: config 0 descriptor??
[  184.131216][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.148444][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.159396][ T8366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  184.168241][ T8366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  184.194435][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.388878][ T8366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  184.396889][ T8366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  184.603231][ T8271] veth0_vlan: entered promiscuous mode
[  184.620000][ T8271] veth1_vlan: entered promiscuous mode
[  184.702019][ T5833] Bluetooth: hci4: command tx timeout
[  184.705252][ T8271] veth0_macvtap: entered promiscuous mode
[  184.740342][ T8271] veth1_macvtap: entered promiscuous mode
[  184.799656][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.813053][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.821992][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.833411][ T5866] Error reading MAC address
[  184.851389][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.866771][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.868062][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.924286][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.933637][ T8366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  184.940281][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.944983][ T8366] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  184.954209][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.957843][  T973] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.966096][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.977323][  T973] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.999060][  T973] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.009560][  T973] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.130553][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.139607][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.194676][  T973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.203445][  T973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.357885][ T8422] tc_dump_action: action bad kind
[  185.393310][ T5866] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  186.059924][ T8441] lo speed is unknown, defaulting to 1000
[  186.469925][ T5866] usb 6-1: USB disconnect, device number 26
[  186.782034][ T5833] Bluetooth: hci4: command tx timeout
[  186.840731][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.854463][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.881587][ T5866] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  187.032886][ T5866] usb 6-1: Using ep0 maxpacket: 16
[  187.041318][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  187.052622][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.065763][ T5866] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  187.074861][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.084863][ T5866] usb 6-1: config 0 descriptor??
[  187.300985][ T5866] lg-g15 0003:046D:C222.0012: hidraw0: USB HID v0.0e Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0
[  187.494615][ T5866] usb 6-1: USB disconnect, device number 27
[  188.042239][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.072131][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.240812][ T8480] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  188.532818][   T30] audit: type=1326 audit(1761620211.858:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8503 comm="syz.5.569" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb2dc985e67 code=0x0
[  188.861725][ T5833] Bluetooth: hci4: command tx timeout
[  189.661617][  T984] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  189.812974][  T984] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  189.824106][  T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.835150][  T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.844924][  T984] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  189.859047][  T984] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  189.868340][  T984] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  189.876477][  T984] usb 6-1: Manufacturer: syz
[  189.883300][  T984] usb 6-1: config 0 descriptor??
[  190.043561][ T8519] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  190.298978][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.314909][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.331086][  T984] appleir 0003:05AC:8243.0013: unknown main item tag 0x0
[  190.366819][  T984] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  190.585930][   T43] usb 6-1: USB disconnect, device number 28
[  191.317145][   T30] audit: type=1326 audit(1761620214.648:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.4.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2798efc9 code=0x0
[  191.378051][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.387373][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.422153][ T5911] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  191.587043][ T5911] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  191.598270][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  191.612541][ T5911] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  191.622115][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.634138][ T5911] usb 6-1: config 0 descriptor??
[  191.988708][ T8545] kvm: MWAIT instruction emulated as NOP!
[  192.083130][ T5911] creative-sb0540 0003:041E:3100.0014: hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.5-1/input0
[  192.086413][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.107003][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.117768][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.127706][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.142098][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.159427][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.265115][ T5903] usb 6-1: USB disconnect, device number 29
[  192.320644][ T8555] netlink: 'syz.4.586': attribute type 3 has an invalid length.
[  192.330622][ T8555] netlink: 766 bytes leftover after parsing attributes in process `syz.4.586'.
[  192.450098][ T8554] syz.4.586 (8554): drop_caches: 2
[  192.529174][ T8557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.587'.
[  192.543979][ T8557] random: crng reseeded on system resumption
[  192.555955][ T8557] netlink: 64 bytes leftover after parsing attributes in process `syz.4.587'.
[  192.656090][ T8557] syz.4.587 (8557) used greatest stack depth: 16664 bytes left
[  192.687101][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.695997][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.954278][   T30] audit: type=1326 audit(1761620216.288:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.5.589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb2dc985e67 code=0x0
[  194.201531][ T5903] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  194.231560][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.371556][ T5903] usb 6-1: Using ep0 maxpacket: 16
[  194.381073][ T5903] usb 6-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf
[  194.390786][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.411695][ T5903] usb 6-1: config 0 descriptor??
[  194.628758][ T8576] netlink: 9 bytes leftover after parsing attributes in process `syz.5.593'.
[  194.658788][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.675135][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.712595][ T5903] pegasus 6-1:0.0: probe with driver pegasus failed with error -71
[  194.742204][ T5903] usb 6-1: USB disconnect, device number 30
[  195.711706][   T30] audit: type=1326 audit(1761620219.038:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8596 comm="syz.5.600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb2dc985e67 code=0x0
[  195.807408][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.818888][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.495486][ T8605] netlink: 'syz.5.604': attribute type 19 has an invalid length.
[  196.674254][ T8616] overlayfs: missing 'lowerdir'
[  196.898502][   T30] audit: type=1326 audit(1761620220.228:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.6.610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb429f85e67 code=0x0
[  197.051640][  T797] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  197.211602][  T797] usb 6-1: Using ep0 maxpacket: 16
[  197.225147][  T797] usb 6-1: config 0 has an invalid interface number: 107 but max is 0
[  197.243056][  T797] usb 6-1: config 0 has no interface number 0
[  197.249211][  T797] usb 6-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255
[  197.285984][  T797] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  197.300383][  T797] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  197.324431][  T797] usb 6-1: Product: syz
[  197.328635][  T797] usb 6-1: Manufacturer: syz
[  197.344853][  T797] usb 6-1: SerialNumber: syz
[  197.355313][  T797] usb 6-1: config 0 descriptor??
[  197.360922][ T8623] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  197.425960][ T8636] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.520483][ T8636] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.597733][  T797] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected
[  197.605837][  T797] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81
[  197.617962][  T797] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1
[  197.627929][  T797] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  197.630084][ T8636] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.638830][  T797] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2
[  197.669757][  T797] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  197.689841][  T797] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4
[  197.717225][  T797] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  197.729714][  T797] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6
[  197.742137][  T797] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  197.758550][ T8636] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.762741][  T797] usb 6-1: USB disconnect, device number 31
[  197.784325][  T797] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  197.799804][  T797] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  197.813890][  T797] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  197.825669][  T797] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  197.837724][  T797] keyspan 6-1:0.107: device disconnected
[  197.914317][   T79] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.930537][   T79] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.947582][   T79] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.965803][   T79] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.089783][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.099825][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.381656][  T797] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  198.531529][  T797] usb 6-1: Using ep0 maxpacket: 16
[  198.538323][  T797] usb 6-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf
[  198.548244][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.558842][  T797] usb 6-1: config 0 descriptor??
[  198.795653][ T8653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.806863][ T8653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.399498][ T8655] netlink: 2 bytes leftover after parsing attributes in process `syz.4.621'.
[  200.192702][  T797] pegasus 6-1:0.0: can't locate MII phy, using default
[  200.216210][  T797] pegasus 6-1:0.0: eth13, D-Link DSB-650TX, 16:cf:40:bc:da:13
[  200.227534][  T797] usb 6-1: USB disconnect, device number 32
[  200.433547][ T8667] TCP: TCP_TX_DELAY enabled
[  200.440059][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.458578][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.628429][ T8673] lo speed is unknown, defaulting to 1000
[  200.890181][   T30] audit: type=1326 audit(1761620224.218:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.6.625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb429f85e67 code=0x0
[  201.011547][  T797] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  201.163347][  T797] usb 6-1: Using ep0 maxpacket: 16
[  201.183522][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.203715][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.242142][  T797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  201.297812][  T797] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  201.338515][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.394470][  T797] usb 6-1: config 0 descriptor??
[  201.424425][ T5833] Bluetooth: hci3: command 0x0406 tx timeout
[  202.020196][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.035324][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.074515][  T797] usbhid 6-1:0.0: can't add hid device: -71
[  202.080552][  T797] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  202.112949][  T797] usb 6-1: USB disconnect, device number 33
[  202.310056][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.328936][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.356410][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.5.632'.
[  202.393486][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.404352][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.417633][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.427367][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.751862][ T5903] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  202.932994][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  202.949832][ T5903] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  202.981492][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.003616][ T5903] usb 6-1: config 0 descriptor??
[  203.462825][ T5903] aquacomputer_d5next 0003:0C70:F0BD.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.5-1/input0
[  203.619334][   T30] audit: type=1326 audit(1761620226.948:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8721 comm="syz.4.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fcd27985e67 code=0x0
[  203.662420][ T5903] usb 6-1: USB disconnect, device number 34
[  204.522207][ T5903] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  204.689129][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.691589][ T5903] usb 6-1: Using ep0 maxpacket: 16
[  204.707995][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.713479][ T5903] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.723972][ T8733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.736073][ T5903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  204.736240][ T8733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.762640][ T5903] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  204.784729][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.801893][ T5903] usb 6-1: Product: syz
[  204.812129][ T5903] usb 6-1: Manufacturer: syz
[  204.816747][ T5903] usb 6-1: SerialNumber: syz
[  204.863330][ T8733] netlink: 'syz.4.640': attribute type 83 has an invalid length.
[  205.013334][ T8742] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  205.047856][ T5903] usb 6-1: 0:2 : does not exist
[  205.066805][ T5903] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  205.111144][ T5903] usb 6-1: USB disconnect, device number 35
[  205.157711][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.941540][ T5866] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  206.093188][ T5866] usb 6-1: config index 0 descriptor too short (expected 133, got 72)
[  206.103619][ T5866] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  206.112877][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.120869][ T5866] usb 6-1: Product: syz
[  206.125154][ T5866] usb 6-1: Manufacturer: syz
[  206.129745][ T5866] usb 6-1: SerialNumber: syz
[  206.139779][ T5866] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  206.164703][ T5928] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  206.572446][ T5911] usb 6-1: USB disconnect, device number 36
[  207.227774][   T30] audit: type=1326 audit(1761620230.558:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.5.646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb2dc985e67 code=0x0
[  207.261741][ T5928] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  207.270109][ T5928] ath9k_htc: Failed to initialize the device
[  207.297639][ T5911] usb 6-1: ath9k_htc: USB layer deinitialized
[  208.216331][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.651'.
[  208.263381][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.652'.
[  208.389161][ T8772] netlink: 'syz.6.653': attribute type 1 has an invalid length.
[  208.397395][ T8772] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.653'.
[  208.409713][ T8772] netlink: 332 bytes leftover after parsing attributes in process `syz.6.653'.
[  208.554483][ T8778] pimreg: entered allmulticast mode
[  208.640210][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.657'.
[  208.641633][   T43] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  208.788349][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.797250][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.799004][ T8785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.820604][   T43] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  208.821335][ T8785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.831580][   T43] usb 6-1: config 0 has no interface number 0
[  208.846337][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.857911][   T43] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  208.874366][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.882482][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.890475][   T43] usb 6-1: Product: syz
[  208.898420][   T43] usb 6-1: Manufacturer: syz
[  208.903390][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.911508][   T43] usb 6-1: SerialNumber: syz
[  208.926858][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.927479][   T43] usb 6-1: config 0 descriptor??
[  209.479751][ T8794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.490223][ T8794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.506204][   T43] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[  209.517678][   T43] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[  209.526854][   T43] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[  209.535143][   T43] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[  209.546094][   T43] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  209.600833][ T5840] Bluetooth: hci3: SCO packet for unknown connection handle 201
[  209.712770][ T8796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.729635][ T8796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.742151][ T5928] usb 6-1: USB disconnect, device number 37
[  209.753163][ T5928] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  209.763542][ T5928] keyspan 6-1:0.133: device disconnected
[  210.258237][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.284125][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.581757][ T5866] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  210.750546][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.761845][ T5866] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  210.770899][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.783646][ T5866] usb 6-1: config 0 descriptor??
[  210.922898][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.932084][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.986002][ T8812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.995367][ T8812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.004072][ T5866] usbhid 6-1:0.0: can't add hid device: -71
[  211.005912][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'.
[  211.010061][ T5866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  211.035353][ T5866] usb 6-1: USB disconnect, device number 38
[  211.650951][ T8821] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.672'.
[  211.660578][ T5866] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  211.734726][ T8823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.746949][ T8823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.811953][ T5866] usb 6-1: Using ep0 maxpacket: 32
[  211.818632][ T5866] usb 6-1: too many configurations: 50, using maximum allowed: 8
[  211.827841][ T5866] usb 6-1: unable to read config index 0 descriptor/start: -61
[  211.835443][ T5866] usb 6-1: can't read configurations, error -61
[  211.971847][ T5866] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  212.124098][ T5866] usb 6-1: Using ep0 maxpacket: 32
[  212.129726][ T5866] usb 6-1: too many configurations: 50, using maximum allowed: 8
[  212.139704][ T5866] usb 6-1: unable to read config index 0 descriptor/start: -61
[  212.148999][ T5866] usb 6-1: can't read configurations, error -61
[  212.156843][ T5866] usb usb6-port1: attempt power cycle
[  212.351445][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.360761][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.502066][ T5866] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  212.522367][ T5866] usb 6-1: Using ep0 maxpacket: 32
[  212.528014][ T5866] usb 6-1: too many configurations: 50, using maximum allowed: 8
[  212.538104][ T5866] usb 6-1: unable to read config index 0 descriptor/start: -61
[  212.545869][ T5866] usb 6-1: can't read configurations, error -61
[  212.682050][ T5866] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  212.702563][ T5866] usb 6-1: Using ep0 maxpacket: 32
[  212.708417][ T5866] usb 6-1: too many configurations: 50, using maximum allowed: 8
[  212.717688][ T5866] usb 6-1: unable to read config index 0 descriptor/start: -61
[  212.725334][ T5866] usb 6-1: can't read configurations, error -61
[  212.731989][ T5866] usb usb6-port1: unable to enumerate USB device
[  212.903659][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.913228][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.423241][   T56] block nbd2: Possible stuck request ffff888026875080: control (read@0,1024B). Runtime 90 seconds
[  213.434420][   T56] block nbd2: Possible stuck request ffff888026875240: control (read@1024,1024B). Runtime 90 seconds
[  213.462917][   T56] block nbd2: Possible stuck request ffff888026875400: control (read@2048,1024B). Runtime 90 seconds
[  213.483172][   T56] block nbd2: Possible stuck request ffff8880268755c0: control (read@3072,1024B). Runtime 90 seconds
[  213.783710][   T43] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  213.824791][ T8838] dvmrp0: entered allmulticast mode
[  213.968831][   T43] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  213.977950][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.986419][   T43] usb 6-1: Product: syz
[  213.990597][   T43] usb 6-1: Manufacturer: syz
[  213.995252][   T43] usb 6-1: SerialNumber: syz
[  214.405561][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  214.417876][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  214.684131][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.693590][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.065520][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  215.078596][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  215.088620][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  215.127973][   T43] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  215.142211][   T43] usb 6-1: USB disconnect, device number 43
[  215.699724][   T30] audit: type=1326 audit(1761620239.037:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8862 comm="syz.5.689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb2dc985e67 code=0x0
[  215.754291][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.774429][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.847849][ T8866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.857809][ T8866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.138644][ T8875] CIFS mount error: No usable UNC path provided in device string!
[  216.138644][ T8875] 
[  216.169871][ T8875] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  216.192408][ T8877] CIFS mount error: No usable UNC path provided in device string!
[  216.192408][ T8877] 
[  216.232464][ T8877] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  216.754714][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.763809][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.777755][ T8891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.786856][ T8891] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.925118][   T43] usb 6-1: new low-speed USB device number 44 using dummy_hcd
[  217.072703][   T43] usb 6-1: device descriptor read/64, error -71
[  217.332561][   T43] usb 6-1: new low-speed USB device number 45 using dummy_hcd
[  217.433671][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.444534][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.462584][   T43] usb 6-1: device descriptor read/64, error -71
[  217.573152][   T43] usb usb6-port1: attempt power cycle
[  217.656304][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.666710][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.922622][   T43] usb 6-1: new low-speed USB device number 46 using dummy_hcd
[  217.943081][   T43] usb 6-1: device descriptor read/8, error -71
[  218.182606][   T43] usb 6-1: new low-speed USB device number 47 using dummy_hcd
[  218.206342][   T43] usb 6-1: device descriptor read/8, error -71
[  218.246887][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.255937][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.334421][   T43] usb usb6-port1: unable to enumerate USB device
[  218.600648][   T30] audit: type=1326 audit(1761620241.937:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8913 comm="syz.6.704" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fb429f85e67 code=0x0
[  218.995712][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  219.004570][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.002881][   T43] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  220.167216][   T43] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  220.181481][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.199949][   T43] usb 6-1: Product: syz
[  220.204879][   T43] usb 6-1: Manufacturer: syz
[  220.209561][   T43] usb 6-1: SerialNumber: syz
[  220.211655][   T30] audit: type=1326 audit(1761620243.547:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.7.715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f82eff85e67 code=0x0
[  220.650637][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  220.691816][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  220.718144][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  220.731699][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  220.742640][   T43] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  220.777504][   T43] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  220.822391][   T43] usb 6-1: USB disconnect, device number 48
[  220.843503][ T8948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.864809][ T8948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.592256][ T8968] loop6: detected capacity change from 0 to 7
[  221.604866][ T8968] Dev loop6: unable to read RDB block 7
[  221.610799][ T8968]  loop6: AHDI p3 p4
[  221.615217][ T8968] loop6: partition table partially beyond EOD, truncated
[  221.624340][ T8968] loop6: p3 start 1886353253 is beyond EOD, truncated
[  221.870624][   T30] audit: type=1326 audit(1761620245.206:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8976 comm="syz.4.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2798efc9 code=0x0
[  222.028965][ T8983] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  222.093105][ T5866] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  222.243745][ T5866] usb 6-1: Using ep0 maxpacket: 32
[  222.251056][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.264373][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.283614][ T5866] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  222.292781][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.305208][ T5866] usb 6-1: config 0 descriptor??
[  222.315581][ T5866] hub 6-1:0.0: USB hub found
[  222.515489][ T5866] hub 6-1:0.0: 2 ports detected
[  222.636036][ T9000] sctp: [Deprecated]: syz.6.734 (pid 9000) Use of int in max_burst socket option deprecated.
[  222.636036][ T9000] Use struct sctp_assoc_value instead
[  222.720546][ T5866] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  222.732502][ T5866] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  222.745465][ T5866] usbhid 6-1:0.0: can't add hid device: -71
[  222.751578][ T5866] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  222.775586][ T5866] usb 6-1: USB disconnect, device number 49
[  222.826930][   T30] audit: type=1326 audit(1761620246.166:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9007 comm="syz.6.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb429f8efc9 code=0x0
[  222.999008][ T9003] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  223.603220][  T797] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[  223.774730][  T797] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.785320][  T797] usb 6-1: config 1 interface 0 has no altsetting 0
[  223.796837][  T797] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  223.807407][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.815516][  T797] usb 6-1: Product: syz
[  223.819702][  T797] usb 6-1: Manufacturer: syz
[  223.825019][  T797] usb 6-1: SerialNumber: syz
[  224.037390][  T797] pxrc 6-1:1.0: Could not find endpoint
[  224.050814][  T797] usb 6-1: USB disconnect, device number 50
[  224.140511][ T9023] trusted_key: encrypted_key: keylen parameter is missing
[  224.156479][ T9023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.165336][ T9023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.174956][   T30] audit: type=1326 audit(1761620247.516:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.4.742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2798efc9 code=0x0
[  224.473031][ T5840] Bluetooth: hci4: unexpected event 0x33 length: 6 < 10
[  224.590408][ T9029] syzkaller1: entered promiscuous mode
[  224.600564][ T9029] syzkaller1: entered allmulticast mode
[  224.653713][   T30] audit: type=1326 audit(1761620247.986:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.7.745" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82eff8efc9 code=0x0
[  224.853616][  T984] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  224.901198][ T9038] netlink: 'syz.7.747': attribute type 40 has an invalid length.
[  224.902367][ T9036] netlink: 26 bytes leftover after parsing attributes in process `syz.7.747'.
[  225.014991][  T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.025976][  T984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.039337][  T984] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  225.048475][  T984] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  225.056519][  T984] usb 6-1: Manufacturer: syz
[  225.063489][  T984] usb 6-1: config 0 descriptor??
[  226.081531][  T984] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0016/input/input21
[  226.159338][  T984] uclogic 0003:256C:006D.0016: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  226.281082][   T30] audit: type=1107 audit(1761620249.616:27): pid=9028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  226.288680][ T9029] Can't find a SQUASHFS superblock on nullb0
[  226.393617][ T5866] usb 6-1: USB disconnect, device number 51
[  227.245872][ T5903] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  227.406082][ T5903] usb 6-1: unable to get BOS descriptor or descriptor too short
[  227.414488][ T5903] usb 6-1: not running at top speed; connect to a high speed hub
[  227.428312][ T5903] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.440676][ T5903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  227.453183][ T5903] usb 6-1: string descriptor 0 read error: -22
[  227.460135][ T5903] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  227.469734][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.497732][ T5903] usb 6-1: 0:2 : does not exist
[  227.529717][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.538388][ T9062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.539896][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.550073][ T9062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.619703][ T9062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.628704][ T9062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.695699][ T9050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.704928][ T9050] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.143406][ T5903] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  229.159000][ T5903] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  229.187597][ T5903] usb 6-1: USB disconnect, device number 52
[  229.813720][ T9077] overlayfs: failed lookup in lower (newroot/101, name='bus', err=-40): overlapping layers
[  229.879522][ T9082] netlink: 'syz.5.764': attribute type 21 has an invalid length.
[  229.887591][ T9082] netlink: 168 bytes leftover after parsing attributes in process `syz.5.764'.
[  229.958651][ T9084] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.765'.
[  230.284217][   T43] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  230.445838][   T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.456596][   T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  230.465707][   T43] usb 6-1: config 1 has no interface number 0
[  230.471850][   T43] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.482862][   T43] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  230.494462][   T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  230.503581][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.511904][   T43] usb 6-1: Product: syz
[  230.516161][   T43] usb 6-1: Manufacturer: syz
[  230.520741][   T43] usb 6-1: SerialNumber: syz
[  230.734593][ T9096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.743452][ T9096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.318830][ T9098] netlink: 'syz.4.770': attribute type 25 has an invalid length.
[  231.327104][ T9098] netlink: 'syz.4.770': attribute type 28 has an invalid length.
[  231.337448][ T9098] batadv_slave_1: entered promiscuous mode
[  231.344045][ T9098] batadv_slave_1: left promiscuous mode
[  231.541167][ T9105] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.773'.
[  231.551850][   T43] cdc_ncm 6-1:1.1: bind() failure
[  231.556956][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.566736][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.769287][ T5866] usb 6-1: USB disconnect, device number 53
[  232.128739][ T9119] syzkaller1: entered promiscuous mode
[  232.135450][ T9119] syzkaller1: entered allmulticast mode
[  232.278270][ T9123] netlink: 'syz.4.780': attribute type 46 has an invalid length.
[  232.523611][ T9134] binder: 9133:9134 ioctl c0306201 2000000003c0 returned -14
[  232.814354][ T5903] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  232.966030][ T5903] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  232.974572][ T5903] usb 6-1: config 0 has no interface number 0
[  232.980788][ T5903] usb 6-1: too many endpoints for config 0 interface 105 altsetting 108: 101, using maximum allowed: 30
[  232.993183][ T5903] usb 6-1: config 0 interface 105 altsetting 108 has 0 endpoint descriptors, different from the interface descriptor's value: 101
[  233.007541][ T5903] usb 6-1: config 0 interface 105 has no altsetting 0
[  233.019101][ T5903] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  233.031509][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.040194][ T5903] usb 6-1: Product: syz
[  233.047164][ T5903] usb 6-1: Manufacturer: syz
[  233.051841][ T5903] usb 6-1: SerialNumber: syz
[  233.061645][ T5903] usb 6-1: config 0 descriptor??
[  233.284568][ T5866] usb 6-1: USB disconnect, device number 54
[  233.359849][ T9150] x_tables: duplicate entry at hook 1
[  233.971657][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.006998][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.384613][ T5903] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  234.544955][ T5903] usb 6-1: Using ep0 maxpacket: 32
[  234.553548][ T5903] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  234.562710][ T5903] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  234.573062][ T5903] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  234.582735][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  234.593033][ T5903] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  234.603430][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  234.613716][ T5903] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  234.629443][ T5903] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  234.642802][ T5903] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  234.652133][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.675072][ T5903] usb 6-1: config 0 descriptor??
[  234.746325][ T9172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.755608][ T9172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.830998][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.841550][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.888656][ T5903] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  235.097149][ T5866] usb 6-1: USB disconnect, device number 55
[  235.111990][ T5866] usblp0: removed
[  235.232662][ T9186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.264321][ T9186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.398605][ T9199] netlink: 'syz.7.803': attribute type 29 has an invalid length.
[  235.417851][ T9199] netlink: 'syz.7.803': attribute type 29 has an invalid length.
[  235.486623][ T9201] syzkaller1: entered promiscuous mode
[  235.492171][ T9201] syzkaller1: entered allmulticast mode
[  235.665912][ T9203] comedi comedi1: s526: I/O port conflict (0x4,64)
[  236.141047][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'.
[  236.156174][ T9222] netlink: 'syz.4.808': attribute type 10 has an invalid length.
[  236.164016][ T9222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.808'.
[  236.231733][ T9222] team0: Port device geneve0 added
[  236.651045][ T9237] binder: BINDER_SET_CONTEXT_MGR already set
[  236.657386][ T9237] binder: 9236:9237 ioctl 4018620d 2000000000c0 returned -16
[  236.667656][ T9237] binder: BINDER_SET_CONTEXT_MGR already set
[  236.693186][ T9237] binder: 9236:9237 ioctl 4018620d 200000000040 returned -16
[  236.777573][ T9243] binder: BINDER_SET_CONTEXT_MGR already set
[  236.789121][ T9243] binder: 9242:9243 ioctl 4018620d 200000000100 returned -16
[  236.855035][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.863831][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.413369][ T9275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.423438][ T9275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.455247][ T5928] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  237.608608][ T5928] usb 6-1: config 13 has an invalid interface number: 218 but max is 3
[  237.616991][ T5928] usb 6-1: config 13 contains an unexpected descriptor of type 0x1, skipping
[  237.626914][ T5928] usb 6-1: config 13 has an invalid interface number: 150 but max is 3
[  237.635238][ T5928] usb 6-1: config 13 contains an unexpected descriptor of type 0x2, skipping
[  237.644019][ T5928] usb 6-1: config 13 has an invalid interface number: 158 but max is 3
[  237.652361][ T5928] usb 6-1: config 13 has an invalid interface number: 178 but max is 3
[  237.660704][ T5928] usb 6-1: config 13 has no interface number 0
[  237.667079][ T5928] usb 6-1: config 13 has no interface number 1
[  237.673235][ T5928] usb 6-1: config 13 has no interface number 2
[  237.679426][ T5928] usb 6-1: config 13 has no interface number 3
[  237.685668][ T5928] usb 6-1: config 13 interface 218 altsetting 15 endpoint 0x5 has invalid wMaxPacketSize 0
[  237.695687][ T5928] usb 6-1: config 13 interface 218 altsetting 15 bulk endpoint 0x8 has invalid maxpacket 8
[  237.706020][ T5928] usb 6-1: config 13 interface 218 altsetting 15 has a duplicate endpoint with address 0x7, skipping
[  237.717228][ T5928] usb 6-1: config 13 interface 218 altsetting 15 has an invalid descriptor for endpoint zero, skipping
[  237.731186][ T5928] usb 6-1: config 13 interface 150 altsetting 8 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  237.742510][ T5928] usb 6-1: config 13 interface 150 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  237.753588][ T5928] usb 6-1: config 13 interface 150 altsetting 8 has a duplicate endpoint with address 0xA, skipping
[  237.764435][ T5928] usb 6-1: config 13 interface 150 altsetting 8 has a duplicate endpoint with address 0x6, skipping
[  237.775242][ T5928] usb 6-1: config 13 interface 150 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  237.786219][ T5928] usb 6-1: config 13 interface 150 altsetting 8 has a duplicate endpoint with address 0x9, skipping
[  237.797033][ T5928] usb 6-1: config 13 interface 150 altsetting 8 has a duplicate endpoint with address 0xC, skipping
[  237.807834][ T5928] usb 6-1: config 13 interface 150 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  237.818805][ T5928] usb 6-1: config 13 interface 150 altsetting 8 has a duplicate endpoint with address 0x5, skipping
[  237.831579][ T5928] usb 6-1: config 13 interface 150 altsetting 8 has a duplicate endpoint with address 0xA, skipping
[  237.842448][ T5928] usb 6-1: config 13 interface 158 altsetting 7 bulk endpoint 0xE has invalid maxpacket 64
[  237.852480][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has a duplicate endpoint with address 0xC, skipping
[  237.863430][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  237.874426][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has a duplicate endpoint with address 0x4, skipping
[  237.885251][ T5928] usb 6-1: config 13 interface 158 altsetting 7 endpoint 0xF has invalid maxpacket 991, setting to 64
[  237.896244][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  237.907126][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  237.918037][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has a duplicate endpoint with address 0xB, skipping
[  237.929053][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has a duplicate endpoint with address 0x4, skipping
[  237.941000][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has a duplicate endpoint with address 0x2, skipping
[  237.954927][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  237.966082][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has a duplicate endpoint with address 0xA, skipping
[  237.988842][ T5928] usb 6-1: config 13 interface 158 altsetting 7 has a duplicate endpoint with address 0x4, skipping
[  238.008504][ T5928] usb 6-1: config 13 interface 218 has no altsetting 0
[  238.015812][ T5928] usb 6-1: config 13 interface 150 has no altsetting 0
[  238.022707][ T5928] usb 6-1: config 13 interface 158 has no altsetting 0
[  238.030159][ T5928] usb 6-1: config 13 interface 178 has no altsetting 0
[  238.040660][ T5928] usb 6-1: New USB device found, idVendor=041e, idProduct=4060, bcdDevice=96.fa
[  238.049792][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.057983][ T5928] usb 6-1: Product: syz
[  238.062147][ T5928] usb 6-1: Manufacturer: 䣘쾂⪢쟲큟骪䞩꒵ƻ崤꤯ꄠၠ옊釭非᣶䉢Ｓ㎜빽뮇乧鵉篂ⳑ⅄䇆寧᧖曤혼龍ꄎĭ䬘䁴臿િ᮰䁜Ｊ⬉⑭宏떵廙ᯠ쓈얷缕풱Ջ镖灾䉳ꚸሰ璈涡ꀝ娅䧑葛ŨꝦ㢙嚒酬牶큆ᤶ霉櫄ᴹ㭭잂쮴ꂥ箇쬆賜ͽ憸ㅤꖟ压砌ᅂ⾥﮿൑㠛ꖭ頷쵩
[  238.093800][ T5928] usb 6-1: SerialNumber: syz
[  238.107576][ T9272] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22
[  238.123099][ T9280] dvmrp1: entered allmulticast mode
[  238.131671][ T9280] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.286754][ T9283] netlink: 14 bytes leftover after parsing attributes in process `syz.4.825'.
[  238.564426][ T5928] usb 6-1: USB disconnect, device number 56
[  238.634063][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.7.827'.
[  238.661618][ T9283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.709847][ T9283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.749130][ T9283] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  238.801955][ T9283] bond0 (unregistering): Released all slaves
[  238.825484][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.7.827'.
[  238.827217][ T9294] syzkaller1: entered promiscuous mode
[  238.840307][ T9294] syzkaller1: entered allmulticast mode
[  239.035776][ T9304] netlink: 'syz.4.829': attribute type 21 has an invalid length.
[  239.043818][ T9304] netlink: 7430 bytes leftover after parsing attributes in process `syz.4.829'.
[  239.063676][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.079650][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.108323][ T9308] syzkaller1: entered promiscuous mode
[  239.113903][ T9308] syzkaller1: entered allmulticast mode
[  239.232586][ T9310] netlink: 60 bytes leftover after parsing attributes in process `syz.5.832'.
[  239.244694][ T9310] netlink: 60 bytes leftover after parsing attributes in process `syz.5.832'.
[  239.257179][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.832'.
[  239.478941][ T9319] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.488276][ T9319] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  239.499461][ T9319] bond0: (slave gre0): Error -95 calling set_mac_address
[  239.743073][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.758548][ T9330] ALSA: seq fatal error: cannot create timer (-19)
[  239.763662][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.857860][ T9333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.867158][ T9333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.311416][ T5897] mxuport 7-1:254.0: Firmware moxa/moxa-1450.fw not found
[  240.322141][ T5897] mxuport 7-1:254.0: Using device firmware version v0.d.bf
[  240.336123][ T5897] mxuport 7-1:254.0: required endpoints missing
[  240.348054][ T5897] usb 7-1: USB disconnect, device number 4
[  240.375249][ T5928] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  240.520002][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.533743][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.543942][ T5928] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  240.557345][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0
[  240.564083][ T5928] usb 6-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[  240.573767][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.589848][ T5928] usb 6-1: config 0 descriptor??
[  240.610958][ T5928] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  240.645355][ T5897] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  240.825313][ T5897] usb 7-1: Using ep0 maxpacket: 16
[  240.834502][ T5897] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.845573][ T5897] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  240.857940][ T5897] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  240.868679][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.877935][ T5897] usb 7-1: Product: syz
[  240.882113][ T5897] usb 7-1: Manufacturer: syz
[  240.887236][ T5897] usb 7-1: SerialNumber: syz
[  241.115436][ T5897] usb 7-1: USB disconnect, device number 5
[  241.184975][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.197329][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.792662][ T9399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.795050][ T9396] kvm: pic: level sensitive irq not supported
[  241.804416][ T9399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.807211][ T9396] kvm: pic: non byte read
[  241.957171][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.6.849'.
[  242.109541][ T9406] netlink: 256 bytes leftover after parsing attributes in process `syz.6.851'.
[  242.118577][ T9406] netlink: 24 bytes leftover after parsing attributes in process `syz.6.851'.
[  242.746091][ T5866] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  242.895599][ T5866] usb 7-1: Using ep0 maxpacket: 16
[  242.902283][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.912200][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.925124][ T5866] usb 7-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  242.934226][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.944558][ T5866] usb 7-1: config 0 descriptor??
[  243.139009][ T5903] usb 6-1: USB disconnect, device number 57
[  243.387177][ T5866] waltop 0003:172F:0502.0017: unknown main item tag 0x0
[  243.394647][ T5866] waltop 0003:172F:0502.0017: unknown main item tag 0x0
[  243.402327][ T5866] waltop 0003:172F:0502.0017: unknown main item tag 0x0
[  243.411281][ T5866] waltop 0003:172F:0502.0017: unknown main item tag 0x0
[  243.418308][ T5866] waltop 0003:172F:0502.0017: unknown main item tag 0x0
[  243.431380][ T5866] waltop 0003:172F:0502.0017: hidraw0: USB HID v0.00 Device [HID 172f:0502] on usb-dummy_hcd.6-1/input0
[  243.509680][   T56] block nbd2: Possible stuck request ffff888026875080: control (read@0,1024B). Runtime 120 seconds
[  243.521531][   T56] block nbd2: Possible stuck request ffff888026875240: control (read@1024,1024B). Runtime 120 seconds
[  243.532668][   T56] block nbd2: Possible stuck request ffff888026875400: control (read@2048,1024B). Runtime 120 seconds
[  243.544130][   T56] block nbd2: Possible stuck request ffff8880268755c0: control (read@3072,1024B). Runtime 120 seconds
[  243.672291][ T5928] usb 7-1: USB disconnect, device number 6
[  244.005800][ T5928] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  244.155763][ T5928] usb 6-1: Using ep0 maxpacket: 8
[  244.162156][ T5928] usb 6-1: config 2 has an invalid interface number: 1 but max is 0
[  244.170351][ T5928] usb 6-1: config 2 has no interface number 0
[  244.176606][ T5928] usb 6-1: config 2 interface 1 has no altsetting 0
[  244.197518][ T5928] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78
[  244.215736][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.223752][ T5928] usb 6-1: Product: syz
[  244.239075][ T5928] usb 6-1: Manufacturer: syz
[  244.243692][ T5928] usb 6-1: SerialNumber: syz
[  244.471236][ T5928] snd-usb-audio 6-1:2.1: probe with driver snd-usb-audio failed with error -22
[  244.482159][ T5928] snd-usb-us122l 6-1:2.1: usb_set_interface error
[  244.491226][ T5928] snd-usb-us122l 6-1:2.1: probe with driver snd-usb-us122l failed with error -22
[  244.502914][ T5928] usb 6-1: USB disconnect, device number 58
[  244.523715][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.567008][ T5903] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  244.715779][ T5903] usb 7-1: Using ep0 maxpacket: 8
[  244.722223][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  244.733046][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  244.744538][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  244.755470][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  244.765400][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  244.781911][ T5903] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  244.791429][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.801104][ T5903] usb 7-1: Product: syz
[  244.805333][ T5903] usb 7-1: Manufacturer: syz
[  244.809990][ T5903] usb 7-1: SerialNumber: syz
[  244.817376][ T5903] usb 7-1: config 0 descriptor??
[  244.826888][ T5903] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input22
[  245.048597][ T9445] netlink: 14 bytes leftover after parsing attributes in process `syz.5.864'.
[  245.130212][ T5866] usb 7-1: USB disconnect, device number 7
[  245.190824][ T9445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.240425][ T9445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.288315][ T9445] bond0 (unregistering): Released all slaves
[  245.346281][ T5928] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  245.505937][ T5928] usb 6-1: Using ep0 maxpacket: 8
[  245.514240][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short
[  245.525475][ T5928] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=6f.2b
[  245.534629][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.542887][ T5928] usb 6-1: Product: syz
[  245.547142][ T5928] usb 6-1: Manufacturer: syz
[  245.551728][ T5928] usb 6-1: SerialNumber: syz
[  245.661253][ T9449] netlink: 180 bytes leftover after parsing attributes in process `syz.7.865'.
[  245.761644][ T9447] netlink: 14 bytes leftover after parsing attributes in process `syz.5.864'.
[  245.795665][ T5928] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  245.814659][ T5928] dvb-usb: bulk message failed: -22 (3/0)
[  245.851679][ T5928] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  245.852600][ T5928] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[  245.852658][ T5928] usb 6-1: media controller created
[  245.868370][ T5928] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  245.914771][ T5928] DVB: Unable to find symbol mt352_attach()
[  245.929249][ T5928] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[  245.944452][ T5928] dvb-usb: bulk message failed: -22 (3/0)
[  245.986017][   T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  245.986163][ T5928] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[  246.007400][ T5928] usb 6-1: USB disconnect, device number 59
[  246.032673][ T5928] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[  246.137830][   T43] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  246.147907][   T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  246.159791][   T43] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  246.171357][   T43] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  246.180547][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.188593][   T43] usb 7-1: Product: syz
[  246.192765][   T43] usb 7-1: Manufacturer: syz
[  246.197408][   T43] usb 7-1: SerialNumber: syz
[  246.204258][   T43] usb 7-1: config 0 descriptor??
[  246.209883][ T9453] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22
[  246.217593][ T9453] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22
[  246.227317][   T43] usb 7-1: ucan: probing device on interface #0
[  246.346063][ T5928] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  246.476091][ T5928] usb 6-1: device descriptor read/64, error -71
[  246.632386][ T9453] input: syz1 as /devices/virtual/input/input23
[  246.716152][ T5928] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  246.846131][ T5928] usb 6-1: device descriptor read/64, error -71
[  246.888438][   T43] ucan 7-1:0.0: probe with driver ucan failed with error -71
[  246.903480][   T43] usb 7-1: USB disconnect, device number 8
[  246.958736][ T5928] usb usb6-port1: attempt power cycle
[  247.296119][ T5928] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  247.316750][ T5928] usb 6-1: device descriptor read/8, error -71
[  247.566287][ T5928] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  247.587833][ T5928] usb 6-1: device descriptor read/8, error -71
[  247.667910][ T5866] usb 7-1: new low-speed USB device number 9 using dummy_hcd
[  247.696799][ T5928] usb usb6-port1: unable to enumerate USB device
[  247.828274][ T5866] usb 7-1: unable to get BOS descriptor or descriptor too short
[  247.838391][ T5866] usb 7-1: config 9 has an invalid interface number: 166 but max is 1
[  247.846790][ T5866] usb 7-1: config 9 has an invalid interface number: 224 but max is 1
[  247.854990][ T5866] usb 7-1: config 9 has no interface number 0
[  247.861140][ T5866] usb 7-1: config 9 has no interface number 1
[  247.868258][ T5866] usb 7-1: config 9 interface 166 has no altsetting 0
[  247.875042][ T5866] usb 7-1: config 9 interface 224 has no altsetting 0
[  247.884330][ T5866] usb 7-1: string descriptor 0 read error: -22
[  247.890648][ T5866] usb 7-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=d8.0a
[  247.899815][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.113235][  T984] usb 7-1: USB disconnect, device number 9
[  248.691266][ T9467] netlink: 'syz.6.871': attribute type 21 has an invalid length.
[  248.699344][ T9467] netlink: 144 bytes leftover after parsing attributes in process `syz.6.871'.
[  248.820136][ T9472] netlink: 'syz.6.873': attribute type 5 has an invalid length.
[  248.828659][ T9472] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.873'.
[  248.965744][ T9478] binder: 9477:9478 unknown command 0
[  248.977304][ T9478] binder: 9477:9478 ioctl c0306201 200000000080 returned -22
[  249.022436][ T9480] netlink: 'syz.7.875': attribute type 1 has an invalid length.
[  249.032137][ T9481] binder: BINDER_SET_CONTEXT_MGR already set
[  249.042576][ T9480] netlink: 224 bytes leftover after parsing attributes in process `syz.7.875'.
[  249.051766][ T9481] binder: 9477:9481 ioctl 4018620d 200000000040 returned -16
[  249.080922][ T9480] netlink: 'syz.7.875': attribute type 58 has an invalid length.
[  249.135387][ T9487] netlink: 184 bytes leftover after parsing attributes in process `syz.6.877'.
[  249.285942][ T9494] netlink: 'syz.7.880': attribute type 1 has an invalid length.
[  249.294513][ T9494] netlink: 'syz.7.880': attribute type 11 has an invalid length.
[  249.303363][ T9494] netlink: 224 bytes leftover after parsing attributes in process `syz.7.880'.
[  249.446403][  T984] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  249.596362][  T984] usb 7-1: Using ep0 maxpacket: 16
[  249.615904][  T984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.624429][ T9498] No source specified
[  249.629261][  T984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.648753][  T984] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  249.661813][  T984] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  249.671455][  T984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.682149][  T984] usb 7-1: config 0 descriptor??
[  250.076479][ T5903] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  250.202951][  T984] usbhid 7-1:0.0: can't add hid device: -71
[  250.216881][  T984] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  250.231007][ T5903] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  250.252062][  T984] usb 7-1: USB disconnect, device number 10
[  250.261250][ T5903] usb 6-1: config 0 interface 0 has no altsetting 0
[  250.276098][ T5903] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  250.286243][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  250.294729][ T5903] usb 6-1: Product: syz
[  250.299274][ T5903] usb 6-1: Manufacturer: syz
[  250.309649][ T5903] usb 6-1: SerialNumber: syz
[  250.322119][ T5903] usb 6-1: config 0 descriptor??
[  250.338028][ T5903] usb 6-1: selecting invalid altsetting 0
[  250.421428][ T9507] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  250.437471][ T9507] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  250.498445][ T9510] dvmrp0: left allmulticast mode
[  250.538981][ T5928] usb 6-1: USB disconnect, device number 64
[  250.566721][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.7.885'.
[  250.739789][ T9514] fuse: Unknown parameter ''
[  250.792452][ T9516] kvm: pic: non byte write
[  250.808079][   T30] audit: type=1326 audit(1761620274.143:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9512 comm="syz.7.886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82eff8efc9 code=0x7fc00000
[  251.916705][ T5866] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  252.066889][ T5866] usb 7-1: Using ep0 maxpacket: 16
[  252.073749][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.085407][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.086762][ T5903] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  252.095373][ T5866] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  252.112802][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.123537][ T5866] usb 7-1: config 0 descriptor??
[  252.260468][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.272216][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.282087][ T5903] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  252.291184][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.301818][ T5903] usb 6-1: config 0 descriptor??
[  252.335539][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.344643][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.555844][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.564938][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.579852][ T5866] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0
[  252.588028][ T5866] hid-picolcd 0003:04D8:F002.0018: unknown main item tag 0x0
[  252.595438][ T5866] hid-picolcd 0003:04D8:F002.0018: item fetching failed at offset 10/11
[  252.605286][ T5866] hid-picolcd 0003:04D8:F002.0018: device report parse failed
[  252.613023][ T5866] hid-picolcd 0003:04D8:F002.0018: probe with driver hid-picolcd failed with error -22
[  252.628657][ T5840] Bluetooth: hci2: command 0x0401 tx timeout
[  252.716063][ T5903] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  252.723102][ T5903] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  252.730193][ T5903] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  252.737189][ T5903] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  252.744122][ T5903] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  252.751117][ T5903] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  252.758284][ T5903] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0
[  252.767467][ T5903] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  252.804288][ T5866] usb 7-1: USB disconnect, device number 11
[  252.914251][ T5903] cp2112 0003:10C4:EA90.0019: Part Number: 0x00 Device Version: 0x00
[  253.343421][ T5903] cp2112 0003:10C4:EA90.0019: error setting SMBus config
[  253.361468][ T5903] cp2112 0003:10C4:EA90.0019: probe with driver cp2112 failed with error -71
[  253.376286][ T5903] usb 6-1: USB disconnect, device number 65
[  253.462687][ T9529] sctp: [Deprecated]: syz.6.892 (pid 9529) Use of int in max_burst socket option deprecated.
[  253.462687][ T9529] Use struct sctp_assoc_value instead
[  253.898430][  T797] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  254.047405][  T797] usb 7-1: device descriptor read/64, error -71
[  254.116949][ T5928] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  254.140220][ T9542] NILFS (nullb0): couldn't find nilfs on the device
[  254.266919][ T5928] usb 6-1: Using ep0 maxpacket: 32
[  254.273574][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.283595][ T5928] usb 6-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  254.292731][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.300885][  T797] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  254.318095][ T5928] usb 6-1: config 0 descriptor??
[  254.446986][  T797] usb 7-1: device descriptor read/64, error -71
[  254.557257][  T797] usb usb7-port1: attempt power cycle
[  254.897090][  T797] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  254.917650][  T797] usb 7-1: device descriptor read/8, error -71
[  255.157157][  T797] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  255.177727][  T797] usb 7-1: device descriptor read/8, error -71
[  255.287785][  T797] usb usb7-port1: unable to enumerate USB device
[  255.438692][ T5928] usbhid 6-1:0.0: can't add hid device: -71
[  255.448506][ T5928] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  255.459597][ T5928] usb 6-1: USB disconnect, device number 66
[  255.673221][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.817139][ T5928] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  255.967119][ T5928] usb 6-1: Using ep0 maxpacket: 8
[  255.974345][ T5928] usb 6-1: unable to get BOS descriptor or descriptor too short
[  255.983092][ T5928] usb 6-1: config 8 has an invalid interface number: 255 but max is 0
[  255.991398][ T5928] usb 6-1: config 8 has no interface number 0
[  255.997615][ T5928] usb 6-1: config 8 interface 255 has no altsetting 0
[  256.006989][ T5928] usb 6-1: string descriptor 0 read error: -22
[  256.013397][ T5928] usb 6-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice= 0.00
[  256.022510][ T5928] usb 6-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  256.236130][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.245050][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.254368][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.264606][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.273910][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.283705][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.292361][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.301410][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.310282][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.319308][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.866723][ T9555] program syz.6.900 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  256.939222][ T9557] dvmrp0: entered allmulticast mode
[  257.051473][ T9559] syzkaller1: entered promiscuous mode
[  257.057121][ T9559] syzkaller1: entered allmulticast mode
[  257.084347][   T30] audit: type=1326 audit(1761620280.412:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9558 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb429f8efc9 code=0x7fc00000
[  257.417467][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  257.694794][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  257.707906][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  257.716315][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.726704][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.738380][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.826044][ T9563] lo speed is unknown, defaulting to 1000
[  257.850659][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  257.859391][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  257.868167][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  257.876806][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  257.885877][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  257.894580][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  257.903367][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  257.943115][   T43] usb 5-1: USB disconnect, device number 13
[  258.139329][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  258.566282][ T9563] chnl_net:caif_netlink_parms(): no params data found
[  258.603240][ T5928] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.5-1, 00:00:00:00:00:00.
[  258.823760][ T5928] usb 6-1: USB disconnect, device number 67
[  259.059664][ T9563] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.077127][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.087283][ T9563] bridge_slave_0: entered allmulticast mode
[  259.099081][ T9563] bridge_slave_0: entered promiscuous mode
[  259.111681][ T9563] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.118971][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  259.128038][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.146098][ T9563] bridge_slave_1: entered allmulticast mode
[  259.166986][ T9563] bridge_slave_1: entered promiscuous mode
[  259.264396][ T9563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.282277][ T9563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.297684][ T5928] usb 6-1: new full-speed USB device number 68 using dummy_hcd
[  259.449141][ T9563] team0: Port device team_slave_0 added
[  259.489112][ T5928] usb 6-1: config 0 has an invalid interface number: 182 but max is 0
[  259.540919][ T9563] team0: Port device team_slave_1 added
[  259.553304][ T5928] usb 6-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config
[  259.587695][ T5928] usb 6-1: config 0 has no interface number 0
[  259.604089][ T5928] usb 6-1: too many endpoints for config 0 interface 182 altsetting 96: 185, using maximum allowed: 30
[  259.617596][ T5928] usb 6-1: config 0 interface 182 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 185
[  259.631956][ T5928] usb 6-1: config 0 interface 182 has no altsetting 0
[  259.643654][ T5928] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  259.653162][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.661250][ T5928] usb 6-1: Product: syz
[  259.678858][ T5928] usb 6-1: Manufacturer: syz
[  259.683567][ T5928] usb 6-1: SerialNumber: syz
[  259.693122][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.728182][ T5928] usb 6-1: config 0 descriptor??
[  259.733256][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.768262][ T9563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.784082][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.791152][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  259.818941][ T9563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.830064][ T5833] Bluetooth: hci0: command tx timeout
[  259.930852][ T9563] hsr_slave_0: entered promiscuous mode
[  259.942036][ T9563] hsr_slave_1: entered promiscuous mode
[  259.949030][ T9563] debugfs: 'hsr0' already exists in 'hsr'
[  259.955943][ T9563] Cannot create hsr debugfs directory
[  259.988405][ T9569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.998401][   T30] audit: type=1326 audit(1761620283.322:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9558 comm="syz.6.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb429f2b099 code=0x7fc00000
[  260.024153][ T9569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.041727][ T5928] imon 6-1:0.182: unable to register, err -19
[  260.061018][ T5928] usb 6-1: USB disconnect, device number 68
[  260.367430][ T9563] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  260.379492][ T9563] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  260.392968][ T9563] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  260.405338][ T9563] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  260.554995][ T9563] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.619528][ T9563] 8021q: adding VLAN 0 to HW filter on device team0
[  260.670634][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.677944][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.717330][ T9587] Bluetooth: MGMT ver 1.23
[  260.733866][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.741088][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.924285][ T9594] netlink: 6 bytes leftover after parsing attributes in process `syz.7.911'.
[  260.988058][   T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  261.063179][ T9563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.087854][   T43] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  261.150206][   T10] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  261.180789][   T10] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0
[  261.195798][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  261.206194][   T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  261.211487][ T9607] netlink: 'syz.7.913': attribute type 5 has an invalid length.
[  261.226942][ T9607] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.913'.
[  261.227226][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.246105][   T10] usb 7-1: Product: syz
[  261.250715][   T10] usb 7-1: Manufacturer: syz
[  261.255424][   T10] usb 7-1: SerialNumber: syz
[  261.260854][ T9607] netlink: 28 bytes leftover after parsing attributes in process `syz.7.913'.
[  261.264437][   T10] usb 7-1: config 0 descriptor??
[  261.270367][   T43] usb 6-1: Using ep0 maxpacket: 16
[  261.279558][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.290012][   T10] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected
[  261.296611][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.308897][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7
[  261.310879][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81
[  261.317395][   T43] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  261.338021][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1
[  261.345693][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2
[  261.384153][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.398108][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85
[  261.406460][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5
[  261.418872][   T43] usb 6-1: config 0 descriptor??
[  261.456794][   T10] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  261.474194][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83
[  261.485225][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3
[  261.495473][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4
[  261.506295][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86
[  261.516597][   T10] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6
[  261.528079][   T10] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  261.643097][ T9563] veth0_vlan: entered promiscuous mode
[  261.660180][ T9563] veth1_vlan: entered promiscuous mode
[  261.716136][ T9563] veth0_macvtap: entered promiscuous mode
[  261.731066][ T9563] veth1_macvtap: entered promiscuous mode
[  261.763851][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.785487][ T9563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.810213][   T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.819836][   T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.831671][   T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.854330][   T43] razer 0003:1532:011B.001A: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.5-1/input0
[  261.872710][   T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.904422][ T9614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.908993][ T5833] Bluetooth: hci0: command tx timeout
[  261.916973][ T9614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.009517][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.023913][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.055928][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.064428][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.408340][ T5903] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  262.548075][ T5903] usb 9-1: device descriptor read/64, error -71
[  262.798161][ T5903] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  262.938089][ T5903] usb 9-1: device descriptor read/64, error -71
[  263.050136][ T5903] usb usb9-port1: attempt power cycle
[  263.389537][ T5903] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  263.409025][ T5903] usb 9-1: device descriptor read/8, error -71
[  263.648109][ T5903] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  263.669046][ T5903] usb 9-1: device descriptor read/8, error -71
[  263.733157][   T43] usb 7-1: USB disconnect, device number 16
[  263.758304][   T43] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  263.785875][   T43] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  263.799768][ T5903] usb usb9-port1: unable to enumerate USB device
[  263.811919][   T43] keyspan 7-1:0.0: device disconnected
[  263.877960][   T10] usb 6-1: USB disconnect, device number 69
[  263.980910][ T9623] kernel read not supported for file /file1 (pid: 9623 comm: syz.5.917)
[  263.989942][ T5833] Bluetooth: hci0: command tx timeout
[  264.001120][   T30] audit: type=1800 audit(1761620287.331:31): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.917" name="file1" dev="mqueue" ino=33605 res=0 errno=0
[  264.117128][ T9625] syz_tun: entered allmulticast mode
[  264.123083][   T43] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  264.125395][ T9624] syz_tun: left allmulticast mode
[  264.258336][   T43] usb 7-1: device descriptor read/64, error -71
[  264.428222][   T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  264.498178][   T43] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  264.587533][   T10] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  264.598317][   T10] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  264.606731][   T10] usb 6-1: Product: syz
[  264.611390][   T10] usb 6-1: Manufacturer: syz
[  264.616010][   T10] usb 6-1: SerialNumber: syz
[  264.622598][   T10] usb 6-1: config 0 descriptor??
[  264.628905][   T43] usb 7-1: device descriptor read/64, error -71
[  264.742424][   T43] usb usb7-port1: attempt power cycle
[  265.039345][   T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  265.049664][   T10] asix 6-1:0.0: probe with driver asix failed with error -71
[  265.060185][   T10] usb 6-1: USB disconnect, device number 70
[  265.089070][   T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  265.110725][   T43] usb 7-1: device descriptor read/8, error -71
[  265.358306][   T43] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  265.380006][   T43] usb 7-1: device descriptor read/8, error -71
[  265.488994][   T43] usb usb7-port1: unable to enumerate USB device
[  265.581699][ T9639] fuse: Unknown parameter '00000000000000000000��'
[  265.590018][  T984] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  265.739880][  T984] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.751199][  T984] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  265.760359][  T984] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.775207][  T984] usb 9-1: config 0 descriptor??
[  265.888450][  T797] usb 6-1: new full-speed USB device number 71 using dummy_hcd
[  266.042612][  T797] usb 6-1: config 5 has an invalid interface number: 1 but max is 0
[  266.051039][  T797] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  266.060107][  T797] usb 6-1: config 5 has no interface number 0
[  266.066540][  T797] usb 6-1: config 5 interface 1 has no altsetting 0
[  266.073509][ T5833] Bluetooth: hci0: command tx timeout
[  266.085258][  T797] usb 6-1: language id specifier not provided by device, defaulting to English
[  266.097580][  T797] usb 6-1: New USB device found, idVendor=16d8, idProduct=7252, bcdDevice=fa.14
[  266.107465][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.116712][  T797] usb 6-1: Product: 䤜㶉⷟ⴎ콚⎴蘒﬷ꬫ턟⟬覸σ鉃遌뻾䜆饅᭘⻓뫄散윿籷൰珥譙围귗Ț몉풇櫜饪韵翱ꅠⰕᯯ섓ፊ젨␼焪挵䮄ષ锰筳덊剅㼝郖䝀绝⫫䵢ꃹ칻鯋⩈ῐﯜ玦류ᄡ蜔﹉㶹䰟䯾壃灚籬ௌᾥ字舽卭কᣛ幸诒䅌᤹햔묥㚂㐾朲记⠗´䌷࢚ྛ⅀ꃍ챢
[  266.154388][  T797] usb 6-1: Manufacturer: Р
[  266.159279][  T797] usb 6-1: SerialNumber: 㐁
[  266.192930][  T984] steelseries 0003:1038:12B6.001B: unknown main item tag 0x1
[  266.201435][  T984] steelseries 0003:1038:12B6.001B: unknown main item tag 0x0
[  266.210100][  T984] steelseries 0003:1038:12B6.001B: report_id 36846 is invalid
[  266.217575][  T984] steelseries 0003:1038:12B6.001B: item 0 2 1 8 parsing failed
[  266.225940][  T984] steelseries 0003:1038:12B6.001B: probe with driver steelseries failed with error -22
[  266.436388][ T5892] usb 9-1: USB disconnect, device number 6
[  266.576672][  T797] usb 6-1: USB disconnect, device number 71
[  266.868485][ T9643] netlink: 76 bytes leftover after parsing attributes in process `syz.6.926'.
[  267.168513][ T5903] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  267.339122][ T5903] usb 7-1: Using ep0 maxpacket: 16
[  267.366473][ T5903] usb 7-1: config 1 has an invalid interface number: 19 but max is 0
[  267.379834][ T5903] usb 7-1: config 1 has no interface number 0
[  267.383052][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.930'.
[  267.386388][ T5903] usb 7-1: config 1 interface 19 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64
[  267.406034][ T5903] usb 7-1: config 1 interface 19 has no altsetting 0
[  267.415229][ T5903] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9
[  267.424517][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.433619][ T5903] usb 7-1: Product: syz
[  267.437825][ T5903] usb 7-1: Manufacturer: syz
[  267.442958][ T5903] usb 7-1: SerialNumber: syz
[  267.462300][ T9644] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  267.498560][ T5903] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  267.685385][   T79] usb 7-1: Failed to submit usb control message: -71
[  267.685673][  T797] usb 7-1: USB disconnect, device number 21
[  267.698556][   T79] usb 7-1: unable to send the bmi data to the device: -71
[  267.717885][   T79] usb 7-1: unable to get target info from device
[  267.724986][   T79] usb 7-1: could not get target info (-71)
[  267.731683][   T79] usb 7-1: could not probe fw (-71)
[  267.796732][   T30] audit: type=1326 audit(1761620291.121:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9676 comm="syz.7.936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82eff8efc9 code=0x0
[  267.858795][ T5892] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  267.998610][ T5903] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  268.008608][ T5892] usb 6-1: Using ep0 maxpacket: 16
[  268.015234][ T5892] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  268.024002][ T5892] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  268.034107][ T5892] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  268.046143][ T5892] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  268.055317][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.063340][ T5892] usb 6-1: Product: syz
[  268.067496][ T5892] usb 6-1: Manufacturer: syz
[  268.072488][ T5892] usb 6-1: SerialNumber: syz
[  268.160488][ T5903] usb 9-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  268.172195][ T5903] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  268.183278][ T5903] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  268.197145][ T5903] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  268.206261][ T5903] usb 9-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  268.214602][ T5903] usb 9-1: Manufacturer: syz
[  268.219265][ T5903] usb 9-1: SerialNumber: syz
[  268.276361][ T9679] dummy0: entered promiscuous mode
[  268.282941][ T9679] dummy0: entered allmulticast mode
[  268.441227][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.452222][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.461978][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.471333][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.486464][ T5903] yealink 9-1:36.0: invalid payload size 0, expected 16
[  268.494289][ T5892] usb 6-1: 0:2 : does not exist
[  268.499917][ T5903] input: Yealink usb-p1k as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:36.0/input/input24
[  268.515734][    C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71
[  268.522925][    C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71
[  268.529943][    C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71
[  268.537268][    C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71
[  268.545397][    C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71
[  268.554408][    C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71
[  268.561796][    C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71
[  268.568792][    C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71
[  268.575566][    C1] yealink 9-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[  268.597396][ T5903] usb 9-1: USB disconnect, device number 7
[  268.703337][ T9683] program syz.7.939 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  268.730123][ T9683] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  268.839221][  T984] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  268.988773][  T984] usb 7-1: Using ep0 maxpacket: 32
[  268.999185][  T984] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  269.007452][  T984] usb 7-1: config 0 has no interface number 0
[  269.013695][ T5903] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  269.023262][  T984] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  269.035622][  T984] usb 7-1: config 0 interface 85 has no altsetting 0
[  269.048507][  T984] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  269.057969][  T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.067038][  T984] usb 7-1: Product: syz
[  269.071733][  T984] usb 7-1: Manufacturer: syz
[  269.076342][  T984] usb 7-1: SerialNumber: syz
[  269.084074][  T984] usb 7-1: config 0 descriptor??
[  269.180615][ T5903] usb 9-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  269.192436][ T5903] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  269.204230][ T5903] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  269.215771][ T5903] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  269.224940][ T5903] usb 9-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  269.233288][ T5903] usb 9-1: Manufacturer: syz
[  269.237940][ T5903] usb 9-1: SerialNumber: syz
[  269.319765][ T5911] usb 6-1: USB disconnect, device number 72
[  269.449339][ T9675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.458238][ T9675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.471080][ T5903] yealink 9-1:36.0: invalid payload size 0, expected 16
[  269.482415][ T5903] input: Yealink usb-p1k as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:36.0/input/input26
[  269.501806][ T9681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.511541][ T9681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.108461][   T30] audit: type=1804 audit(1761620293.430:33): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.947" name="/newroot/161/cgroup.controllers" dev="tmpfs" ino=900 res=1 errno=0
[  270.114835][ T9705] netlink: 128 bytes leftover after parsing attributes in process `syz.5.947'.
[  270.131080][   T30] audit: type=1800 audit(1761620293.430:34): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.947" name="cgroup.controllers" dev="tmpfs" ino=900 res=0 errno=0
[  270.143001][ T9705] netlink: 'syz.5.947': attribute type 5 has an invalid length.
[  270.478894][   T10] usb 6-1: new low-speed USB device number 73 using dummy_hcd
[  270.631247][   T10] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  270.641567][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.652173][   T10] usb 6-1: config 0 descriptor??
[  270.707867][    C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71
[  270.708400][ T5892] usb 9-1: USB disconnect, device number 8
[  270.714671][    C1] yealink 9-1:36.0: urb_ctl_callback - usb_submit_urb failed -19
[  271.608601][  T984] appletouch 7-1:0.85: Failed to request geyser raw mode
[  271.617165][  T984] appletouch 7-1:0.85: probe with driver appletouch failed with error -5
[  271.648230][  T984] usb 7-1: USB disconnect, device number 22
[  271.679074][ T5903] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  271.829869][ T5903] usb 9-1: Using ep0 maxpacket: 16
[  271.836842][ T5903] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.848342][ T5903] usb 9-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  271.857460][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.868394][ T5903] usb 9-1: config 0 descriptor??
[  272.058622][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.067641][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.097364][ T9714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.106768][ T9714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.118468][ T5903] usbhid 9-1:0.0: can't add hid device: -71
[  272.124876][ T5903] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  272.130335][ T5892] usb 7-1: new low-speed USB device number 23 using dummy_hcd
[  272.137560][ T5903] usb 9-1: USB disconnect, device number 9
[  272.881601][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.8.956'.
[  273.294726][ T9749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  273.320490][ T5892] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  273.480095][ T5892] usb 7-1: Using ep0 maxpacket: 8
[  273.488087][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  273.501593][   T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  273.512699][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  273.526684][   T10] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  273.538826][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  273.551095][   T10] asix 6-1:0.0: probe with driver asix failed with error -71
[  273.559911][ T5892] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  273.573790][   T10] usb 6-1: USB disconnect, device number 73
[  273.582265][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.606415][   T56] block nbd2: Possible stuck request ffff888026875080: control (read@0,1024B). Runtime 150 seconds
[  273.610739][ T5892] usb 7-1: config 0 descriptor??
[  273.617898][   T56] block nbd2: Possible stuck request ffff888026875240: control (read@1024,1024B). Runtime 150 seconds
[  273.633613][ T9733] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  273.643593][   T56] block nbd2: Possible stuck request ffff888026875400: control (read@2048,1024B). Runtime 150 seconds
[  273.657698][   T56] block nbd2: Possible stuck request ffff8880268755c0: control (read@3072,1024B). Runtime 150 seconds
[  273.858615][ T5892] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  273.920307][ T5892] usb 7-1: USB disconnect, device number 24
[  274.146683][ T9784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.162944][ T9784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.369384][ T5892] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  274.402855][  T984] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  274.531667][ T5892] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  274.543181][ T5892] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.553335][ T5892] usb 9-1: config 0 interface 0 has no altsetting 0
[  274.562131][ T5892] usb 9-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  274.573242][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.590337][ T5892] usb 9-1: config 0 descriptor??
[  274.593183][  T984] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  274.608687][ T9795] netlink: 'syz.6.968': attribute type 11 has an invalid length.
[  274.616721][ T9795] netlink: 224 bytes leftover after parsing attributes in process `syz.6.968'.
[  274.617981][  T984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.647336][  T984] usb 6-1: config 0 descriptor??
[  274.654568][  T984] cp210x 6-1:0.0: cp210x converter detected
[  274.814966][ T5892] usbhid 9-1:0.0: can't add hid device: -71
[  274.821058][ T5892] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  274.831796][ T5892] usb 9-1: USB disconnect, device number 10
[  274.889596][ T5903] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  275.043679][ T5903] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  275.052894][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.061269][ T5903] usb 7-1: Product: syz
[  275.061299][ T5840] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1
[  275.065462][ T5903] usb 7-1: Manufacturer: syz
[  275.065481][ T5903] usb 7-1: SerialNumber: syz
[  275.073510][ T5840] Bluetooth: hci2: unexpected event for opcode 0x203e
[  275.082722][ T5903] usb 7-1: config 0 descriptor??
[  275.098818][ T5903] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  275.105795][  T984] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71
[  275.116216][  T984] cp210x 6-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  275.123982][  T984] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  275.133534][  T984] usb 6-1: cp210x converter now attached to ttyUSB0
[  275.146072][  T984] usb 6-1: USB disconnect, device number 74
[  275.158541][  T984] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  275.167305][  T984] cp210x 6-1:0.0: device disconnected
[  275.291152][ T9800] netlink: 100 bytes leftover after parsing attributes in process `syz.7.970'.
[  275.542526][ T9809] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.545537][ T5903] usb 7-1: USB disconnect, device number 25
[  275.631967][ T5892] usb 9-1: new low-speed USB device number 11 using dummy_hcd
[  275.646308][ T9809] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.726008][ T9809] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.769740][ T5892] usb 9-1: device descriptor read/64, error -71
[  275.797738][ T9809] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.932433][   T36] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.948951][   T36] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.966938][   T36] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.969570][ T5903] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  275.989205][   T36] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.019730][ T5892] usb 9-1: new low-speed USB device number 12 using dummy_hcd
[  276.042221][ T9816] ------------[ cut here ]------------
[  276.047912][ T9816] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7)
[  276.061237][ T9816] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2690 at mac80211_hwsim_sta_rc_update+0x6f5/0x860, CPU#1: syz.7.975/9816
[  276.074777][ T9816] Modules linked in:
[  276.079007][ T9816] CPU: 1 UID: 0 PID: 9816 Comm: syz.7.975 Not tainted syzkaller #0 PREEMPT(full) 
[  276.088311][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  276.098505][ T9816] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  276.105276][ T9816] Code: b1 20 00 00 48 c7 c7 00 c8 2c 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 4a b0 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 48 ed fa 90 0f 0b 90 e9 fe fe ff
[  276.125083][ T9816] RSP: 0018:ffffc9000eb3ee40 EFLAGS: 00010282
[  276.132211][ T9816] RAX: 643f91e75b51a000 RBX: 0000000000000014 RCX: 0000000000080000
[  276.140605][ T9816] RDX: ffffc9000c31a000 RSI: 000000000000c336 RDI: 000000000000c337
[  276.140981][ T9817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.148587][ T9816] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  276.148640][ T9816] R10: dffffc0000000000 R11: fffffbfff1c3a6c8 R12: 0000000000000000
[  276.148652][ T9816] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[  276.160607][ T5892] usb 9-1: device descriptor read/64, error -71
[  276.192958][ T9816] FS:  00007f82ee1f66c0(0000) GS:ffff8881259a6000(0000) knlGS:0000000000000000
[  276.201973][ T9816] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  276.208587][ T9816] CR2: 0000200000001080 CR3: 00000000777ca000 CR4: 00000000003526f0
[  276.216669][ T9816] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144
[  276.224756][ T9816] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  276.233342][ T9816] Call Trace:
[  276.236630][ T9816]  <TASK>
[  276.240155][ T9816]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[  276.246161][ T9816]  mac80211_hwsim_sta_add+0xa3/0x310
[  276.251751][ T9816]  drv_sta_state+0x8c1/0x1840
[  276.256453][ T9816]  sta_info_insert_rcu+0x1a30/0x2840
[  276.261782][ T9816]  ? sta_info_insert_rcu+0x349/0x2840
[  276.267182][ T9816]  ? __pfx_sta_info_insert_rcu+0x10/0x10
[  276.272869][ T9816]  ? rate_control_rate_init_all_links+0x186/0x1a0
[  276.279300][ T9816]  ? ieee80211_add_station+0x4f1/0x6a0
[  276.279830][ T5892] usb usb9-port1: attempt power cycle
[  276.284803][ T9816]  sta_info_insert+0x16/0xc0
[  276.294765][ T9816]  rdev_add_station+0x108/0x290
[  276.299677][ T9816]  nl80211_new_station+0x1755/0x1b70
[  276.305069][ T9816]  ? __pfx_nl80211_new_station+0x10/0x10
[  276.310788][ T9816]  ? netlink_rcv_skb+0x208/0x470
[  276.315748][ T9816]  ? nl80211_pre_doit+0x4d5/0x8e0
[  276.320824][ T9816]  genl_family_rcv_msg_doit+0x215/0x300
[  276.326460][ T9816]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  276.332589][ T9816]  ? bpf_lsm_capable+0x9/0x20
[  276.337649][ T9816]  ? security_capable+0x7e/0x2e0
[  276.343230][ T9816]  genl_rcv_msg+0x60e/0x790
[  276.347760][ T9816]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.352867][ T9816]  ? ref_tracker_free+0x63a/0x7d0
[  276.357907][ T9816]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  276.363363][ T9816]  ? __pfx_nl80211_new_station+0x10/0x10
[  276.369006][ T9816]  ? __pfx_nl80211_post_doit+0x10/0x10
[  276.374542][ T9816]  ? ____sys_sendmsg+0x505/0x830
[  276.379527][ T9816]  ? ___sys_sendmsg+0x21f/0x2a0
[  276.384386][ T9816]  ? __x64_sys_sendmsg+0x19b/0x260
[  276.389899][ T9816]  ? do_syscall_64+0xfa/0xfa0
[  276.394590][ T9816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.400723][ T9816]  netlink_rcv_skb+0x208/0x470
[  276.405496][ T9816]  ? __lock_acquire+0xab9/0xd20
[  276.410411][ T9816]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.415447][ T9816]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  276.420846][ T9816]  ? down_read+0x1ad/0x2e0
[  276.425301][ T9816]  genl_rcv+0x28/0x40
[  276.429288][ T9816]  netlink_unicast+0x82f/0x9e0
[  276.434122][ T9816]  ? __pfx_netlink_unicast+0x10/0x10
[  276.439976][ T9816]  ? netlink_sendmsg+0x642/0xb30
[  276.444933][ T9816]  ? skb_put+0x11b/0x210
[  276.449174][ T9816]  netlink_sendmsg+0x805/0xb30
[  276.454557][ T9816]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.459928][ T9816]  ? aa_sock_msg_perm+0xf1/0x1d0
[  276.464897][ T9816]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  276.470312][ T9816]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.475619][ T9816]  __sock_sendmsg+0x21c/0x270
[  276.480378][ T9816]  ____sys_sendmsg+0x505/0x830
[  276.485164][ T9816]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.490544][ T9816]  ? import_iovec+0x74/0xa0
[  276.495063][ T9816]  ___sys_sendmsg+0x21f/0x2a0
[  276.499825][ T9816]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.505051][ T9816]  ? __fget_files+0x2a/0x420
[  276.509691][ T9816]  ? __fget_files+0x3a0/0x420
[  276.514383][ T9816]  __x64_sys_sendmsg+0x19b/0x260
[  276.519338][ T9816]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  276.524871][ T9816]  ? do_syscall_64+0xbe/0xfa0
[  276.529685][ T9816]  do_syscall_64+0xfa/0xfa0
[  276.534205][ T9816]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.539410][ T9816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.546069][ T9816]  ? clear_bhb_loop+0x60/0xb0
[  276.551340][ T9816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.557267][ T9816] RIP: 0033:0x7f82eff8efc9
[  276.561806][ T9816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.581503][ T9816] RSP: 002b:00007f82ee1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.589981][ T9816] RAX: ffffffffffffffda RBX: 00007f82f01e5fa0 RCX: 00007f82eff8efc9
[  276.597975][ T9816] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[  276.606015][ T9816] RBP: 00007f82f0011f91 R08: 0000000000000000 R09: 0000000000000000
[  276.614063][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  276.622136][ T9816] R13: 00007f82f01e6038 R14: 00007f82f01e5fa0 R15: 00007ffe830263f8
[  276.630312][ T9816]  </TASK>
[  276.633349][ T9816] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  276.640624][ T9816] CPU: 1 UID: 0 PID: 9816 Comm: syz.7.975 Not tainted syzkaller #0 PREEMPT(full) 
[  276.650253][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  276.660331][ T9816] Call Trace:
[  276.663617][ T9816]  <TASK>
[  276.666548][ T9816]  dump_stack_lvl+0x99/0x250
[  276.671126][ T9816]  ? __asan_memcpy+0x40/0x70
[  276.675718][ T9816]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.680923][ T9816]  ? __pfx__printk+0x10/0x10
[  276.685518][ T9816]  vpanic+0x237/0x6d0
[  276.689486][ T9816]  ? __pfx_vpanic+0x10/0x10
[  276.693976][ T9816]  ? is_bpf_text_address+0x292/0x2b0
[  276.699268][ T9816]  ? is_bpf_text_address+0x26/0x2b0
[  276.704456][ T9816]  panic+0xb9/0xc0
[  276.708161][ T9816]  ? __pfx_panic+0x10/0x10
[  276.712576][ T9816]  __warn+0x334/0x4c0
[  276.716540][ T9816]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  276.722603][ T9816]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  276.728654][ T9816]  report_bug+0x2be/0x4f0
[  276.732969][ T9816]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  276.739023][ T9816]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  276.745095][ T9816]  ? mac80211_hwsim_sta_rc_update+0x6f7/0x860
[  276.751167][ T9816]  handle_bug+0x84/0x160
[  276.755411][ T9816]  exc_invalid_op+0x1a/0x50
[  276.759909][ T9816]  asm_exc_invalid_op+0x1a/0x20
[  276.764747][ T9816] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[  276.771413][ T9816] Code: b1 20 00 00 48 c7 c7 00 c8 2c 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 00 4a b0 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 8d 48 ed fa 90 0f 0b 90 e9 fe fe ff
[  276.791007][ T9816] RSP: 0018:ffffc9000eb3ee40 EFLAGS: 00010282
[  276.797075][ T9816] RAX: 643f91e75b51a000 RBX: 0000000000000014 RCX: 0000000000080000
[  276.805033][ T9816] RDX: ffffc9000c31a000 RSI: 000000000000c336 RDI: 000000000000c337
[  276.812998][ T9816] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  276.820956][ T9816] R10: dffffc0000000000 R11: fffffbfff1c3a6c8 R12: 0000000000000000
[  276.828911][ T9816] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[  276.836970][ T9816]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[  276.842950][ T9816]  mac80211_hwsim_sta_add+0xa3/0x310
[  276.848228][ T9816]  drv_sta_state+0x8c1/0x1840
[  276.852899][ T9816]  sta_info_insert_rcu+0x1a30/0x2840
[  276.858172][ T9816]  ? sta_info_insert_rcu+0x349/0x2840
[  276.863553][ T9816]  ? __pfx_sta_info_insert_rcu+0x10/0x10
[  276.869175][ T9816]  ? rate_control_rate_init_all_links+0x186/0x1a0
[  276.875582][ T9816]  ? ieee80211_add_station+0x4f1/0x6a0
[  276.881038][ T9816]  sta_info_insert+0x16/0xc0
[  276.885641][ T9816]  rdev_add_station+0x108/0x290
[  276.890483][ T9816]  nl80211_new_station+0x1755/0x1b70
[  276.895767][ T9816]  ? __pfx_nl80211_new_station+0x10/0x10
[  276.901386][ T9816]  ? netlink_rcv_skb+0x208/0x470
[  276.906328][ T9816]  ? nl80211_pre_doit+0x4d5/0x8e0
[  276.911348][ T9816]  genl_family_rcv_msg_doit+0x215/0x300
[  276.916888][ T9816]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  276.922951][ T9816]  ? bpf_lsm_capable+0x9/0x20
[  276.927619][ T9816]  ? security_capable+0x7e/0x2e0
[  276.932557][ T9816]  genl_rcv_msg+0x60e/0x790
[  276.937057][ T9816]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.942064][ T9816]  ? ref_tracker_free+0x63a/0x7d0
[  276.947087][ T9816]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  276.952440][ T9816]  ? __pfx_nl80211_new_station+0x10/0x10
[  276.958056][ T9816]  ? __pfx_nl80211_post_doit+0x10/0x10
[  276.963500][ T9816]  ? ____sys_sendmsg+0x505/0x830
[  276.968429][ T9816]  ? ___sys_sendmsg+0x21f/0x2a0
[  276.973268][ T9816]  ? __x64_sys_sendmsg+0x19b/0x260
[  276.978370][ T9816]  ? do_syscall_64+0xfa/0xfa0
[  276.983043][ T9816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.989107][ T9816]  netlink_rcv_skb+0x208/0x470
[  276.993863][ T9816]  ? __lock_acquire+0xab9/0xd20
[  276.998707][ T9816]  ? __pfx_genl_rcv_msg+0x10/0x10
[  277.003723][ T9816]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  277.009051][ T9816]  ? down_read+0x1ad/0x2e0
[  277.013462][ T9816]  genl_rcv+0x28/0x40
[  277.017427][ T9816]  netlink_unicast+0x82f/0x9e0
[  277.022191][ T9816]  ? __pfx_netlink_unicast+0x10/0x10
[  277.027462][ T9816]  ? netlink_sendmsg+0x642/0xb30
[  277.032394][ T9816]  ? skb_put+0x11b/0x210
[  277.036632][ T9816]  netlink_sendmsg+0x805/0xb30
[  277.041392][ T9816]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.046667][ T9816]  ? aa_sock_msg_perm+0xf1/0x1d0
[  277.051593][ T9816]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  277.056866][ T9816]  ? __pfx_netlink_sendmsg+0x10/0x10
[  277.062154][ T9816]  __sock_sendmsg+0x21c/0x270
[  277.066846][ T9816]  ____sys_sendmsg+0x505/0x830
[  277.071619][ T9816]  ? __pfx_____sys_sendmsg+0x10/0x10
[  277.076913][ T9816]  ? import_iovec+0x74/0xa0
[  277.081407][ T9816]  ___sys_sendmsg+0x21f/0x2a0
[  277.086086][ T9816]  ? __pfx____sys_sendmsg+0x10/0x10
[  277.091309][ T9816]  ? __fget_files+0x2a/0x420
[  277.095887][ T9816]  ? __fget_files+0x3a0/0x420
[  277.100563][ T9816]  __x64_sys_sendmsg+0x19b/0x260
[  277.105493][ T9816]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  277.110954][ T9816]  ? do_syscall_64+0xbe/0xfa0
[  277.115626][ T9816]  do_syscall_64+0xfa/0xfa0
[  277.120127][ T9816]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.125322][ T9816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.131371][ T9816]  ? clear_bhb_loop+0x60/0xb0
[  277.136035][ T9816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.141926][ T9816] RIP: 0033:0x7f82eff8efc9
[  277.146333][ T9816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.166035][ T9816] RSP: 002b:00007f82ee1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  277.174547][ T9816] RAX: ffffffffffffffda RBX: 00007f82f01e5fa0 RCX: 00007f82eff8efc9
[  277.182522][ T9816] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[  277.190488][ T9816] RBP: 00007f82f0011f91 R08: 0000000000000000 R09: 0000000000000000
[  277.198445][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.206400][ T9816] R13: 00007f82f01e6038 R14: 00007f82f01e5fa0 R15: 00007ffe830263f8
[  277.214386][ T9816]  </TASK>
[  277.217653][ T9816] Kernel Offset: disabled
[  277.221959][ T9816] Rebooting in 86400 seconds..