last executing test programs:

6m58.021970982s ago: executing program 0 (id=1):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac053702000000000001090224000100006000090400800203000200092107040001220500090581032007090807"], 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
close(r4)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac02dc30200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200108"], 0x0})
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000a00)={r5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x100000e, 0x0, 0x100})
r6 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="672d6a44b036", 0x0, 0x0, 0x10000, 0x0, 0x0})
read$usbfs(r6, 0x0, 0x0)
write$tun(r6, &(0x7f0000000400)=ANY=[], 0xa2)

6m56.070788849s ago: executing program 0 (id=10):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x163881)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x2})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000f00), 0x355201, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2)
ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000100)=0xff)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5})

6m55.913308928s ago: executing program 0 (id=12):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0)
r2 = dup(r1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="f3450fbc475aa766ba4200ed66baf80cb8398a888aef66bafc0cb0f0ee000000400f22c042a7a70f49f70f00d86536400f00d335000004000f22c066ba200066ed", 0x41}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f0100000000000000000004241305052401020804241300090581062000000000090582020004000000090503"], 0x0)

6m54.461312123s ago: executing program 0 (id=15):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x80403)
ioctl$TCXONC(r0, 0x4b3a, 0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x7, 0x0, [{0x225, 0x0, 0x4}, {0xb13, 0x0, 0x2}, {0x4000027e, 0x0, 0x6}, {0xbba, 0x0, 0x8}, {0x118, 0x0, 0x9}, {0x8c5, 0x0, 0x6}, {0x92f, 0x0, 0x8}]})

6m54.423433934s ago: executing program 0 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x180)
chdir(&(0x7f0000000140)='./file0/file0\x00')
setpgid(r0, r0)
setpgid(0x0, r0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
ioprio_get$pid(0x3, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async)
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x180) (async)
chdir(&(0x7f0000000140)='./file0/file0\x00') (async)
setpgid(r0, r0) (async)
setpgid(0x0, r0) (async)
creat(&(0x7f0000000300)='./bus\x00', 0x0) (async)
ioprio_get$pid(0x3, r0) (async)

6m54.279896459s ago: executing program 0 (id=17):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x31, 0x28, "3d5fd26e523ccff6a6e058541e233d050b0aac7fad24401fe2bcabbd3bf77bba9355adec6c02caf0"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1}})

6m38.645250673s ago: executing program 32 (id=17):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x31, 0x28, "3d5fd26e523ccff6a6e058541e233d050b0aac7fad24401fe2bcabbd3bf77bba9355adec6c02caf0"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1}})

6m38.49798742s ago: executing program 3 (id=68):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x80})
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x381081, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x15)
write$binfmt_aout(r2, &(0x7f0000000280)=ANY=[], 0x28)
pselect6(0x40, &(0x7f0000000340)={0x0, 0x2, 0x1c4, 0x95bf, 0x40, 0x0, 0x5, 0x726}, &(0x7f0000000840)={0x8, 0x42, 0x6, 0xd8cb, 0x966c, 0xd3ca, 0x7, 0x3}, 0x0, 0x0, 0x0)

6m38.293024288s ago: executing program 3 (id=70):
futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
r1 = gettid()
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'team0\x00', @multicast})
rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200))
tkill(r1, 0x16)
futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x80000002) (async)
socket$packet(0x11, 0x2, 0x300) (async)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async)
gettid() (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'team0\x00', @multicast}) (async)
rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) (async)
tkill(r1, 0x16) (async)

6m37.983110565s ago: executing program 3 (id=72):
r0 = syz_usb_connect$hid(0x5, 0x99, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000405f141202000000000001090224000100002000090400010103000100092100100601220700090581030000"], 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc})
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000005c0), &(0x7f0000000600)=0x4)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb401020301090212000100000000090409"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x20, 0x6, 0x4, "e13d5880"}, 0x0, 0x0})
syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x40, 0x31, 0xa5, {0xa5, 0xc, "e3609aeda3de330fe1ed14f71200bb25b6aa8b0457c6deb1ca010e7a31fd72f26b172a3fc68ba606a867986d56f5f7986efbc39beafbfca23a5d6dff8cb0120522c0db705f82a4c90d52430e96432e65ae027efe712241c378fb9124f837d72d6a5f14e4f85c9018dfa9488d5be22deaa600d3547b51510bdeb7d112b59602c802d06849102da387f3f890be78ee1050ea76d3ff49bb80e2c84071b255f637834519a0"}}, &(0x7f0000000200)={0x0, 0x3, 0x66, @string={0x66, 0x3, "d097ec124eb0429cb78e2d2877c1e9472ae1463b2e0bdbab1aefa3183a1925f5b0bc8eb9284f72982a292d378e2694b3279e48ea5aa260848d00bd9b5663e6851b2ce5da76b8022eb6b154aaaea3ad6c0b2dd3a36a9c3826f5691c164b55ce6b904728e2"}}, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x4}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xe5}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x20, 0xd, 0x81, "c4b8892e06ceab7a50912cebd93b7f75fa124829bd7df524baeda09cd6bed692fbc49d6e593d2b599e2f194fa57513fa77159828a23d82d13615fd4db7a04096efdde8e5fd25bd50728c08041b9bac71d4955964e9309e350c051a3586d1d58213d8a535c1cfe2e22518cd14babda224159a358619e72df5d17def7fc1b1ae5b50"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x43}, &(0x7f0000000480)={0x20, 0x1, 0x60, "7ee8fc559df10de2c4020814cd6f64417f1b63ded7f4f8c0f314970f723a1b1eacc3e399a8f87f6cdf99d4d692ad23f9e7680316efa8193ec99780d41682280a3f2b2506d927922d6f13c88216c409208cc9b21371289f74150f87125b4cf77e"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x20}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0x4018aee2, &(0x7f0000000000))
syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x1, 0x2, 0xa, 'h'}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0)

6m36.200989463s ago: executing program 3 (id=73):
r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'})
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000)
recvmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000040)=@vsock, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f00000001c0)=""/191, 0xbf}], 0x2, &(0x7f00000002c0)=""/4096, 0x1000}, 0x25}, {{&(0x7f00000012c0)=@nfc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001340)=""/148, 0x94}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/42, 0x2a}, {&(0x7f0000002440)=""/7, 0x7}, {&(0x7f0000002480)=""/20, 0x14}], 0x5, &(0x7f0000002540)=""/45, 0x2d}, 0x9}], 0x2, 0x20, 0x0)
munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000)
munmap(&(0x7f00007dd000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

6m36.108454457s ago: executing program 3 (id=74):
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40c0, 0x8, 0x4}, 0x18) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async, rerun: 32)
syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) (rerun: 32)
close_range(r1, 0xffffffffffffffff, 0x400000000000000) (async)
ioctl$FIONCLEX(r0, 0x5450)
syz_usb_connect$cdc_ecm(0x5, 0x6b, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x2, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xf5ed, 0x0, 0xf0}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x350, 0x6, 0x5, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xd, 0x7, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x10, 0x1, 0xf9}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xe, 0x3, 0x4, 0x20, 0x4}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x3, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1004}}, {0xbd, &(0x7f0000000340)=@string={0xbd, 0x3, "93b772289d00e17412166808957ed8a6c96553252e0bc795bd2de61e809ba200d3caac810568653d2e28c773d53d02a84e3e397be9e6b4cbef225a0b40fdfdc33851a8ba53c2ed70879fa56fc02b526ea715f2612c49d3eee9f751605a1e5ca566bb74c9a1bc3fe1aaeee5fab409272e0fffab74044339b8f576bd6ba8038ed5569c013967077908a7cdf7799376bc92de125ec0017074bea4d3879170c9110d385c6e299d568193d6d101dc7a240fc748d5348d75127fd4c24765"}}]})

6m34.63426946s ago: executing program 3 (id=79):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 32)
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async)
splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r6, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async, rerun: 32)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 32)
close_range(r7, 0xffffffffffffffff, 0x0) (async, rerun: 32)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="100100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000001000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a00020070000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="0100000014000e00"/24], 0x110}}, 0x0) (async, rerun: 32)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r8 = socket(0x840000000002, 0x3, 0xfa) (rerun: 32)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, r9, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x14}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x45}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x44}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0x3}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40015}, 0x40000c0)

6m19.345694372s ago: executing program 33 (id=79):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 32)
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async)
splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r6, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) (async, rerun: 32)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (rerun: 32)
close_range(r7, 0xffffffffffffffff, 0x0) (async, rerun: 32)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="100100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000001000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a00020070000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="0100000014000e00"/24], 0x110}}, 0x0) (async, rerun: 32)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r8 = socket(0x840000000002, 0x3, 0xfa) (rerun: 32)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) (async)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x10c, r9, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x14}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x45}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x44}, {0x6, 0x11, 0x400}, {0x8, 0x15, 0x3}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40015}, 0x40000c0)

4m6.81409223s ago: executing program 2 (id=786):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x40, r1, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)="a905000000007464000100002400000000e5c06417e436a106993e1e4ad8311dabcd25ca", 0x24}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x44884)

4m6.732278784s ago: executing program 2 (id=787):
modify_ldt$write(0x1, &(0x7f0000000040)={0xcb3, 0x0, 0x400, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

4m6.620866233s ago: executing program 2 (id=788):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x1f, 0x800, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000004c0)={r2, 0x80, 0x2, 0xfffffffe}, 0x10)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000340))
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000123942, 0x0)
r5 = dup(r4)
r6 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x80004, 0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x2})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
brk(0x200000ffc000)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x47d, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x2, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0x1}, 0xd0, 0x6}})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
fadvise64(r4, 0x18, 0x0, 0x4)
r10 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r10, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x4}}, 0x10)
pipe2$watch_queue(&(0x7f00000000c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x80)
r13 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r13, r11, 0x39)
keyctl$KEYCTL_WATCH_KEY(0x20, r13, r12, 0xffffffffffffffff)

4m6.528541199s ago: executing program 2 (id=789):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)={0x17}) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000000002"], 0xa4}}, 0x8000)

4m6.45623649s ago: executing program 2 (id=790):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
syz_usb_connect(0x0, 0x1477, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x5a, 0xa2, 0xa1, 0xd7, 0x1bc7, 0x10d1, 0x3e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1465, 0x4, 0x9, 0x69, 0x10, 0x81, [{{0x9, 0x4, 0x1d, 0x80, 0xe, 0xff, 0xff, 0x30, 0x0, [@hid_hid={0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0x355}}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "0e84cf868bdd"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x2, 0x6}, {0x6, 0x24, 0x1a, 0x7, 0x14}, [@mbim={0xc, 0x24, 0x1b, 0x1000, 0x6, 0x5, 0x6, 0x94c, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x3, 0x78, 0x4}, @obex={0x5, 0x24, 0x15, 0xffff}, @mdlm_detail={0x8d, 0x24, 0x13, 0x6, "5063568fdb22eaf6d21f35ebe2a66a20e9557b42a3110efb4a09b672b6eb1618adc47a0e234ec173474c65b97e35b20a7f27afa43d39eff4c74af5fbef3f774009b931b4188e497fe728796231094f0b64d4b63959d6989f11b4b5487f1649cb2f869fb0e86ff77f12cd11cacae6420b5bae1702cef7f54573fd945e36235e235d70ded2e1a70fe0c6"}]}], [{{0x9, 0x5, 0x0, 0x3, 0x20, 0x1, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x94, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0xf6, 0xde, 0x1}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x1, 0x4, 0xf7, [@generic={0x70, 0x0, "3d7cbd8a788ffb786e1de79e3aba23bd157c900fc958a788ae2e7f60a458fcd38c26c8d4e4d4fc275073cdbc944f6065b9d64fac6d8eedc32ac1e5843519fc5bc324687d86c07218eb40ec26b87070d84d9aade0a35a3d83c3ccded9d64637638343e7d92b6023bd60271040138a"}, @generic={0x81, 0x23, "b22bb387288d4471e70c9e9e093840390b4955cd7d4c642a3ecb99f90c00875a14d57ee7474dda217a6205c42461e742b3b98c63f12689b9bb706fe2f16ef105def1a14abef35ee5423c01a691a8c81bbca78b65874dd5ab01f8d64bf989ccb64b995834f8e3ea451ffb293e4344aa3370b96bbab38bd99b6fc4e2dd19aa7a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xf, 0xf9, 0x2b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x59, 0x9}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x87, 0x5, 0x3, [@generic={0xbc, 0x22, "8ffa29349d4c511194463f06db8520ac0fd3f491e8caa44d6175c56c5bb1a0de4d1d423066225a4d7a15060e1743c927811165bc562df82978054f6f9ac59d42cb34ed08539536cd12e5559df9b741fb5f4da5fb086878ba8dc056f68349534cbff1017e8e3908ab84ab4dda4973bd0997c8c6dcc21391090ef3a5243a84f53b6c7944930fcdb23481b95eba92e5a2ea96c03564d779f9ed1cbef61e2aec6ef77b9268c2bc27c60b0a04f37f54295054fab278839f5a3f36a118"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xa, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x6}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x0, 0xf, 0x63, [@generic={0xdf, 0x4, "ad0daeb5a6df20dd713e1d14e460cf5dadc19a2c39ae80164efadb0a3e933df53da6b41cbce7cf792573dd5c5df05f27506a0605ae585a358f6c151012a382e88605166ce0b512686e63b133060d1f2b99c848b6f1bd4c925ed7adfd07d4e519d8dc50c3de904d4fc71bb5d765387d64fabeb67a1b6c513ebafa97c6dc3b7067e3245fa3a212f2fa1d465032006b563fc96c8a3c1e2c8a306ceb35330db6b446203b323f10c92128100aad756b2c669b77bd885814894b2f708cbf9a6987e09987621bdc94ea18333f1ff9d907a657b5c033ea0e61e2f8d03c820736d0"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x0, 0x2, 0xff}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0xff, 0xfb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x1ff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0xe, 0x3, 0x7}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0x6c, 0x9, 0x0, [@generic={0x44, 0x11, "7ebb0708529f36b57b75a803b15103114cb0e97f369458f44f07d79bbd0cde2dc71b5da0b35113c99a854c2b484148fac345cab0367d4635a9f0174d7c0dfdfe46d0"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x7, 0x2f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x242}, @generic={0x53, 0xc, "6380bdbd201973aed2a9f2c3a8564eeebdbc6356bc62d5653fac810b8e096ce95dbfd74670d47576d696e27f5ddb7bf8b4e06156f6a46f67be30b7846008e9f47a54e02a94b79458027e8bf68b1ee1abab"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0xf, 0x8, 0x2b, [@generic={0x62, 0xd, "07fe07f567189056855c75782d830523939c32b1ef668a812ec67d92136bd4cf541c5809bfa40b1e0fa3a96806f289c021c3224b0e7d2ec50e170247d0a8a577c41089feec80915d0f0d2b443c7dd63026585dc0dcd61e6a9f30830caa6ae80b"}, @generic={0x5a, 0xf, "c50026f1fbe1adbb00c52e8fdca8c87c241e7a8f4b519f3eea55a8bf0f3e5f9c59e8f9efe4e73b6b57d675f27449dfe5302320243ed5595f2013d747d246ae862cef9500a93362a4156c87c5f1aaf079b0f46f50de3c3934"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x7, 0x14, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xff, 0x4}, @generic={0xc6, 0x8, "8cccae3025d45b60e10128bfb6c56d8ff33733be3c38303c87a3d422c530c5197a31c55af498c24feb2e21d823ab608092ac93a5eb4599c5a5de9e38b1035c3d94b6f3e8d7651bb502e2e58d3ef40e2bb7f4f77cfc1c0c6bd3ccafba8bdc7ce4df7009d5e6fe81526d9a5d97afe236d142931b1df475f8d37c6bc8dff3f6ab39487ccd37e71515977de780324f6c05daef951aa01ea3e0fb35b77855d5bbc38e21f4b36668528fe56f383f2bdf2d521b51b414580e3b3dfd51027302a51d9b73b1c7a40e"}]}}]}}, {{0x9, 0x4, 0x70, 0xd, 0x10, 0x99, 0x2e, 0x6f, 0x4, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "3a93422f"}, {0x5, 0x24, 0x0, 0x7ec}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x56d3, 0x5, 0x42}, [@mdlm_detail={0x26, 0x24, 0x13, 0x1, "e4d97afec155626a94eb8a303c15ee558be0c0e9ea1c390ba69724aacb8bc1bac327"}, @acm={0x4}]}, @hid_hid={0x9, 0x21, 0x2, 0xa, 0x1, {0x22, 0x977}}], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x2}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x80, 0x7c, 0xe5}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0xf7, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x81e0}, @generic={0xa6, 0x9, "c563efd5e51f9e8aa7381c4878fb600fb63b1e0940e4dee1905f20fc110834a3da10a5231e8a7d1f327b0a6becc69a95187c417d1a57c78bc82e92a53a943dc365fbdb47273d3f297a1e0d980d275c782eee12bd57b3b37ec32b2f4fb5fa8f3bdd878ecfb87fbaa95d46c82caa9aea31f9256b5740515527a1a4085d12787f02b5e5dd8813b4da97a4f74d76b3cb5d9bda515af74ca21333dc0ac020c997b2f03500d7b4"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0xf8, 0x1, 0x6, [@generic={0x84, 0x30, "0a1fc10d6032d6e0ef883e0791f33f6b359a6dc09df5ce36fd3f67a48b2f7a9f62f1c5f483db169cb39196715202960c36f4652b124d9a86b8e6993243be34a8b042dd98568231bb983dbc0ee0bc0dcd34b322241f9c7ac86865e9a5d039a95e87beddc5179951e6c4f832fb05598987dd0d04a1b44a96ccf4edb06a3056d5289305"}]}}, {{0x9, 0x5, 0x4, 0xb, 0x40, 0x3, 0x8, 0x81, [@generic={0xa2, 0x8, "b7ec4a502d1e22e62216317315d5e4338a634c18ab775ff3be701ef60fcb1636f1876481960d3bf89e139cf4ab3d03a2588859aaa240bd46684c2fcd39e457946fb1895ba035acccff9118f3028f8269e886ffb8fa5b34aae027da12a25cdc27b31588230e3116e65e5966ca7ee252dc0adfe9e1db9c6fc90303545bedbd8116f598fc7f8989fe06a04a87edc9033bf53f2889837a84baa418c47236856d5dbd"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x1, 0x6d, 0x3, [@generic={0xd2, 0xc, "9a9b85f5a48b1f4794e49c5380e4911f33aff0426cfaa73962773c25eca89ef3f13a102320ba5d991c567318e887e18b35ec37526577cbc78864d0a0f3a183a6b80e5760140c7e190286332ec86a85e6aeae51a8d6ada912a898853e943fe9b7896edd7eb70337288f64e09922d84ac0b9bcca43ecaaa5cc3e80e017286322fb67a4ae155c77d4cf898d941de09bf18bd46ea49a75067a0e841fce6388ccaf35cc4ed87450c66db9770104707f70b14449c2691a8793169543110ab69ede674195302ab8b8e51cd0b3aab2d027e7b5a8"}, @generic={0xb7, 0x2, "3ce559160d7a9d8fd9652624a40c665de5fc13a8aea3dfc226f3b20c27344ea4eb6cf988501e12e37f7e9df8e437c423f82ec82b2d5337c7f0ffc697433f11d72e2e16df12b58d4161114847c59eb540771e851ce2f976d3a7135f30c09b82c5fe06fb435292e5694a12b24fecb75d90bfba60d6fa7d2961b3bdb00baaabd97206b3f064849d9318ec37c882ae7e8e5beadeaf47bde9a67c8f90461edff011d76089432696d02ca697eb252f067f8e308c3951630f"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x3, 0x7}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0xb6, 0x2, 0xb}}, {{0x9, 0x5, 0x4, 0x3, 0x400, 0x6, 0x4, 0x6}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x3, 0xfe, 0xe}}, {{0x9, 0x5, 0x0, 0x0, 0x210, 0x5, 0x7, 0x80}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x1, 0xf4, 0x4, [@generic={0x13, 0xd, "bdc6c8dd7a347c56b8f0d326049cf05cdd"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x7, 0x8, 0x6}}, {{0x9, 0x5, 0x17, 0x4, 0x40, 0x3, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x49de}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x2d, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6d69}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x6, 0x50, 0x8, [@generic={0x9d, 0xe, "607a8c5d0a523b03aab7ec706dc513f7254997804a288b3390e16f5f38898e6f31acf078226dfa960b32f3148477bec9b6a01dafb7000b3c7f1725b0c5137138526ac2c2d0f694a8a2209b6c821927d5571ed710243fd332962f0f5943e795672f84aa16cf74035b0288332917f4bd93e2a574461e2a41056206d1f533d4c22ef4ab73bc3bc70cb4befc9ab81f293ee3e9d1a4508142f554b54771"}, @generic={0x11, 0x1, "57f09b15e392a5f54bb22e598cf7e4"}]}}]}}, {{0x9, 0x4, 0xdb, 0x4, 0xd, 0x5c, 0xcc, 0x5f, 0x9, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "9f27c3"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7, 0x9, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x5, 0x8, 0x1, 0x9, 0x1, 0xff}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x4, 0xf}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x740, 0x9, 0x1, 0x10, 0x5}]}], [{{0x9, 0x5, 0x7, 0x10, 0x10, 0x18, 0x9, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x7, 0x51, 0xc, [@generic={0x74, 0xe, "673ffbaab1af1e85fd99ae44896e76935640c7642ce6f9bfc9d89e11c078977660a7b4ee8bb48e16847812ae2f7be9d13785dcca85e1dd00020f8f3bd0aee1b6099ff9d4c293e7082a5d856f421f9f98262e26bf75637428e8b4f149dff2f67ffbc4ddb67bb60134efcb377d965d7a398655"}, @generic={0xe6, 0x9, "96e3ef8654cd8235972ede568ad0382915d63c10a0406140cc3ed4ddc067b945e5d450b748f73e598f4dbddbc72c0750174cfc747e3caab3916fb3ae5e7e889d15309d630aa228e52b3e0117b09bb134e7c69d2ae4191ad3d4e19e338d831b2402af1442f672d24287c7546ebd5ed6aee77dd63108d287977e7f50a41b9125d3067720fb65cb836db1a6b4b2b41ca57b331fbe8222ba513d961982c2d35d58302fdd54e2b15d28bd6f4c0e43b66ec224db2745ea908c34f4895a62d1d3b9588adb198024afbd936679883d421da40db7cd8bd589cd0bf4ed88cb7812152afd7f12cde139"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x0, 0xc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xcc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xc2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x3, 0x0, 0x2, [@generic={0xfe, 0x30, "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"}]}}, {{0x9, 0x5, 0x1, 0x13, 0x3e7, 0xc, 0x3, 0xa8, [@generic={0x5c, 0x1, "bbcc6bbceda36a15f95bcca3c743f1c900c1d555491988012a131cc5c285e482fb99d919407ac8177c2ba2d33ec9e37ceb626de9d3d6ea5593b1fac73b0c76d3a45df57c318ade29b3723bf6d2927822da84103d462fa6211e03"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x8, 0x40, 0x7f}}, {{0x9, 0x5, 0x3, 0x8, 0x200, 0xf2, 0x3, 0x2, [@generic={0x7e, 0x5, "6c82a4965c9a7a139ddedc54060db13549a63745d6947565fe4b65a0bb71f02ba9432fe8157b3ea7b69d1e28e34e9dd83b294ef1e458db38585fba6592c9f8067b187266f3300ffb7acaa9448c7806a882179e20468cbeaddc741c5500b75f79497111bf3aa7f13c01df987bb09089a9ae0518db77e29f1b6893860c"}, @generic={0x22, 0x6, "808b6a7aa4111bdf3d06660a98f7f9d9e288e1d15e1eba37c4e0727fe5a8f559"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x10, 0x89, 0xbc, 0xc, [@generic={0xc5, 0x23, "fe99023439c10a4506d9ad9555c3a9ed4c9bedb72968f84f13c51619062656a5726839bb997d6533d8b85b49bcafc2a5feb7ea21d4a7cc03b58f2e2923e7ecf2644f5785d6ee08ea4cd087ec800954083b57a1cd8420cfdce85821299987bd6d97353a837a972d7431641b85bdadf5cae81b2a4e82a1e30ffe79ef6dee30305959bcf26cd05868d34f0063024503ac00d539e167b5d808982c783c3143ab0ac239bc35a463337cbf1616f71bff1dc1400010f0f19755c8b529d4a949ac96e3e763ff24"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x600, 0x9, 0x4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x3, 0x4, 0xa}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x1, 0x6, 0x9}}, {{0x9, 0x5, 0x8, 0x10, 0x7ff, 0xf1, 0x1, 0xbc, [@generic={0xc9, 0x6131b4b7119e9af, "72623069d1ea8ea19bc473281ea7af4e58a1e27212289bec3285a1751d22a9b063e18728741067b4034d629d41df9a09b9b10a83879ffbae9d0e91768897e4667bb2656678d34b48f7febecc953a270010ddd84b1a3f88392191622d08031229ade0697a3c9832c1596dab8473ac27ebe90ba39c67c46bc7845d281bb3bc340e52474bcef8ab8b2a89274b7082fb8083c77df26800984e419e82be34b57762e150c1e319a20b3739c1e5c08d132f912380923d5d5381f29e4584f17e38e3953120470f0583adf4"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x8, 0x4}]}}, {{0x9, 0x5, 0xe, 0x16, 0x10, 0x1, 0xe, 0x40}}]}}, {{0x9, 0x4, 0x88, 0x80, 0x6, 0xc2, 0xbf, 0xbe, 0x9, [@generic={0xe0, 0x22, "380cfe63195200d3d54f1e4b33a2451153d707a76ed897f52fbb100f5452fdb0ece8e10f01c07a5b194389422ff1e92c0827cebb2398379a81d01b39346b8269d3d54b940105105ad0adca775828c022ec0b513fcc03f4fc995a5f5ec7f6470f7cf0312b274b41a01e676fa0bdc084d76de3005561046b722b08e04b5b4a454fe509e46f3494e9cb8fc37172a0961e99e263a7d579921985c3915e467e7d03a5cda9d1738f2a1e4d0e1ed0e385ead4ef9036ec82012b47fc186594a6ea7c484f4d444d31e6cfaefd0b21cda026138dc9e63903124c3f57357bbaabfcb702"}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7ea5, 0x6, 0xad, "06"}, @as_header={0x7, 0x24, 0x1, 0xc, 0xa, 0x5}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x3, 0x8, 0x2}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x800, 0x2, "39908792cc9f"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0xe, 0x2, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x3ff}, @generic={0x24, 0x10, "6cb3a197a1cd9e5c238723888f8396ce9f340cf275082aaeca22a116308d01944f03"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x4, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0xe, 0x2, 0x6, [@generic={0xd1, 0x31, "9d412dd84972c97e5ef61745a6484a331d403ac235149a38276714a00a5f0efbf109fb387c276914b9f0a75050c2b052c083370f88fbb428963a298803c8059b0001d646daa95aad139f5897be870892ae95e66da2501b1d0c22322af0a4ab6806558edd971ecfe6d444094818d2a4a9a30162fd4c861790ab00044ad828c2165dc007c6242da3ad1b1925845f414083314695c3f395955704c43eee7b6443f6f6d0898afaa684f2424620c71d189ebb6d405ef772fe8315b7a21c41e7d141197ac8c11eac8dcd8788f41690f9899c"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x7, 0xfd, 0x8, [@generic={0x1f, 0x21, "be317d171b9af1ee213692b4671b17a32b0fb2c64a87bb29935b9d22c5"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x1, 0xff, 0x61, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xac, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x829b9f8fbea49868, 0x5, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x0, 0x5, 0x0, [@generic={0x26, 0x7, "6335324cca48a01d3dacb70d4af20e5367c8b461c3dcff9c2e2f87581b5699c1d45cea9c"}, @generic={0xb5, 0x1, "ab0205466ac701a66fb4dfe4ce7efcda9bea520278d4755e28166caa8e439a57314856360223659bf2df262572c4d2a4af48475dcde276b3d7fdb30e1a038e416c7b5445d66490111ae8c348a395ef7b96a475d154e1ab31780db8fd27a54fed8380f0de70f78f0773a05045806c7fef93d60b5619c27fc94161cdf0a29a2a17c36ff0b9ba3cb04875c4d97b35ddb78d3c8fffa8efaeed753dc9723320f1c58f4dacd354b952cdc0812d601573927bfe6b592a"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xfe, 0x5, 0x80, 0x30, 0x4}, 0x42, &(0x7f0000000180)={0x5, 0xf, 0x42, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "268095196632b41145d85b91e3542531"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "77f6428e85c2ffc98e001e91fafabd6a"}, @wireless={0xb, 0x10, 0x1, 0x6, 0xe0, 0x88, 0x2, 0x0, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x5, 0x334}]}, 0x1, [{0x79, &(0x7f0000000200)=@string={0x79, 0x3, "6b146981643d4a02afdd1a6fde0adadbf7a2e7a43d193e5504bbbaf6d50c26d299cec4bcceb62336b88dc4a3852e3db0f60c65c86e46a773045335947c2d16bd8bb031a4b1168336fdba6340aacb791f71f63a573f8c7f1d22ad37630bf68c598497f6de3382066b2c642485b719689a2a5129bb70d2bb"}}]})
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x280030, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
socket(0x10, 0x3, 0xff)

4m4.921281626s ago: executing program 2 (id=795):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="4d01000000020000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed182143db4ee0891176789824", 0x35, 0x81, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x8a, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20004d90"], 0x9e)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1a100, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r4, &(0x7f0000000640)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x3, &(0x7f0000000540)=""/241, 0xf1}, 0x7}], 0x1, 0x2001, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

3m49.813266384s ago: executing program 34 (id=795):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="4d01000000020000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed182143db4ee0891176789824", 0x35, 0x81, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x8a, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
r2 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff0200000000000000000000000000014f194e20004d90"], 0x9e)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140))
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1a100, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r4, &(0x7f0000000640)=[{{&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x3, &(0x7f0000000540)=""/241, 0xf1}, 0x7}], 0x1, 0x2001, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

3m9.367647998s ago: executing program 5 (id=1070):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80, {0xdddd0000, 0x8000000, 0x50c4b6b379661c47}}, "21457695ea5748e95ab36bd30f17176b07cbf8bb530708649cd944c677b1d28930d0d72dfbe28d9cbdacbe839ae0ecbb0fd0c85733ea87570cdc0f4991bf58a70a9a87145af6bfbeb98bbd70816b7dd89c5b1d5fc26cb2f89507baddca5991993c1f451611d9038ec10ab9c6d32fea77746ca24f43eb3ccc366618cac88d36c56671bf0058cba2166f99e58db51ee37041cfd20591685ab327cb4a2e076b102a147bd204bed3279d8b8bca519b72b1115d5eebe62142f5498155e4d28a1767f983a6eb06d93a584a43fb0266d1750a2dc893fd4c68b72b68ea164a55376e0be7fa8bc9a4930fe61168293a43b3bb927e8f6e78a749931b5de8ad5b67c36ece2da7636a52ea33bd5bd6118b32b8000652331f8c253d53f2e89c1dba6186f517286fe647a3ae264592999cc6888f7fe40922769ee336f7dd97ad3683c2a32a6e1e02feb99f5cf4c9d6757bc64ce2b7e5454881a2bd1697398e0151e91768494b335035e1287f84258f747e9efe10e7a7dceca11a6f7e1de108fe9c5face6eca4ee483df149ca9a756ffd5b2c0574b8c3e73649f53eee1d162ce66c18409104797703f0e1e4ea9c70327e9cc7f1b4e87f093cd74f7e9cdb6b304a50ad7a3fc6ce6b7846e1ade2562a05a9e5213fec8b9e2e495ac2bdae0247e3502d56f231768b33e27b298d576c4fc23216368085535606e51f68daae0a60486c1a61a5777a585d8f6fc3e953fb1b192ef9a684d45bc27b8646444f052fe6246c41ebd93dae8cfc3ed23a77d5096b5b6f799fc266dbb590f079c53541bfe6e2f1c78387e9c3a423b1176981d74321ece51dc57a80671da8cc1e816a16f0557d7c44029546fb8d078bbe168c155f8194426c24f82f80b552fe48f1352f87e8c269b94516afe371d8adc4cf16520cb99eb5bc1ffa8cd2a7b4bf1095253351f1824c0ca5bdc5cd5fce82be5e4f35addccfb7a3dc99ac0edd16d3204fa4509c95063a3979914b4681bc2882ed61589f692d3a031680a92a3e43d71a9625991e23616cc2afe9cc235104a0095b1b885118b77d36bb0b1015e6cc03b480baf5b21f768e7c453eeb967d6b82b72326aed5a7ebd3376bfd17288bb5bb7b55e52b49449c6e12cc309b3b544621714d1e8a5d79291f6fa8bc4e47dc54903c1fa32f01715572baced73172c2b01bba1d594427d14f0c2b0b37427b4133912abfb315f3a10a99418488e84f95c40b36706c9dd44c2c8e0776ba954c4dc12617e453e008471db1fccdabee46a9243946eca05b751a825f2f42d59594ed934e4ca7060e2fa367d5387fc324faf1aab279b0f11afd2767fd12598875aa13a84f247b75e76f3cde21a0bb44e3f7412e4bb548cf29752c0a84d8378a78f2236e5e43f26c7f39a867c999b0fd6c4e188680c96460c00e8d20bc98c824a28f0b884e954749399f7dff2395764c10898de9bce5986b5666e49e12556dfa266b9fba42d236c0011906f13c80b1abc4e59404fc9d29373c554fee819052b8bc396a9ea1e42efc21d141c9567561da32da7bbecfb9c977107ec4a36ba93b542a8778a8cf8395cb63a5703d6a6ed082b19ad9d1a2551313ae300ccf033fc559e4abca1c0b5086759b84f8b86e79e1b46922498b94618fb95d4b64b79650be3486a3d6999dfe7c2e6042580c4ae2b62b9839b79eabb7cd7f492f1b89849bb3ff2a41a2bec834e3c6e16f7aa3ab00a89f8303b29e6666b191d468037e4a4698eac4984940773dea7857113795c3caeee76ee9cad1322d5a447839d85d24e9933ccf1402d89715ee97b2b190da2c62558df1025e8d46ace47df6156f34a3ff2f225bed9f60090c89e808ec6c1fd88ce7b940a828c83c30348f606b4640f552015bd502286b1f93c3c2565fb6bbb131791edb0d3e0aa7fcffb74d3a88be00128172ef18a67e725074bf292ff5521fb0e727eaa8f2fa60f3aa43a10b914375d66be8ab3d50954cf73a3e5cf3cc7be2cf70619539f2eb8d596e10d314ad1828163530fb4576d9c8b405bebacea1d6716528efa64953f154bb58c056319264385519f8a7d96c49c86a6ae272ea39b5ca09249c4fc006aef439a0819b2e9b08ab22bb3debd1c5d9b54aba92991b85b57a18f186306dbc838763dd46ee719496c4069f847b5b7d191dda3368731ca0ae96a3acb837c1beb45148070995da198ded86eacb3804aaadb1c222cbed33f390d45f44121a9d1beb1652dbb25e35f6f1f7101760ac6416860c2e9cb3c908d310d9a64f6ea9ee89a93483f383d0e47f735379551caee6958c9fef453957ca39ab53765e91fc7d0263630abbca260ece07a78daa0d938a6235cc96b3ac5ca7fdcdc326812fcd3f414d32752f7693abe24e0b34872c9b00d793d0bc5590e114de048d8af1680a76044692922b153d7e710d7facb952771ff22375ea86bc66c66ffcd309d8ca9381ab0f9fdb7d19137fba3df58f63084719dc11fe7baf3b0593e60a828dd6245f345c593b450417defed21c06394d772a07075a8203923e88477ede787b3238bd33f929d1eb5a7d988ea5254949a3d7fad97f87e9350fe9780f7dc58e95256eceeaa311146353f633f0b13ed66d4909aa63dd922900cb32c495cababbe6f7854a773549b3667214eda166f8f96de21f82abc620bf231ba63561beacd5a907471e0c73db39846d3c4ec6ffddab8299b97e9cdd0c6fecf3c3b6922da6948e47ebb5bb539f6501251417a3e8f320c5815632f6aa61e0f63885d64967937f8553633ad90b7f8fd074a2ca6ad3de160efce081b1f576960751554532d091bd66d4a4fb6a195217202d28c7f809e4d23ef18308e416f707d919da0de0fb9d0c65f1f8413905696a6d8b8250b3ac0f20b8bed26ad60e250e4003bfe57fd444812e29f3c17df95c15dac4e86f1aacb6349274d9112a7cc1933bcecd68d2446f2e6de6f297008874c08ab7aa17141829e749d3103f93c3595bcef5ed12b8a62c57c7f47a7767e665f60746b9a4582c8fc05b6a72e0c7905324e7cfe6308d50fd9ba62619e141601868c62cb0804eefab32c0743f4cc9ba259d5b4f5a6f4256d33cef94b3579a87f35e4a9f51f8ad8324b6abeef350cc415fce01b5ef1debb3c29970332b44bba0dfe4d479096a55bcba0dd5a10149cf66aa6fd509cb6d0416265575a0f85e8314588152d177631339781e6874672f5e9fe6e9cbcc8ad0c5c6cd0a536ebfc24a31486d3750ad86ef2e06d294918cf819cdd526bffd6d972eb73a991120c8496e1ca0b73955403d578c54f13b80a112b3a16e469c962baede167fc00c5d075bbd391c9d1055e14d230f39fe91762e0b741287ef6fc6bd3efd1e9ab7be6d32459cedfe9e60e5d3ebe4d4ac66a43f1e827ec268688845cf012337a50af29327a6d9f0613f7e656775d5b299473f7d20f360c8494e77afa5c0fd147d41572e4329efdace88f152834b21812d4185f93f17342cb1f42a7d63e7c3673f0bae30396a8515f5c54115a29083e3ad2f7c90b6d60bdc5f03007aae6a28029264141dc00ebdaba02fdc1158916ce1c2a9ee2f1e943b8f83457416880a90bace0765542a2282fd04e80fdfe32db8b9e6928caaa0b66dab123ea6bc26f6ed83ae8c25f7cc6503985ca69a62c8d76a0dce4996f2a17a3ee4b2a7088e9a730ee84abbc5e07b0c2c06b88e73c55e23b7c3e9beb19065ec71b440f6b7ea62c148c01c9eef89b86811de7df57bf11670ea0d3f527590d80953c1fb3fa21fcb53c02956da9098019c7bdbd8432d70b4eaadda6c377fcca552239b849d0d4bcd39b944e1072d3115207bd488d30522c6bad827fcc614686dd6ed48369c7ede643bf14ed8f4350070a7fe9a23b83be422bc1353279a75211000fad939dc94274530e1817f53559571f73623452530b0fafd5ad43552d854698ac8e349fb7e36819ae7401db13ea186b91c2feecee4c50f368db57179f659a4f663e1cc059dfefccfe17a5257c6b7ee5c564d90e6b8af277cb3a790832e26419bccae0731af65cfccee906243e98f50258e9666057980f2aead8707b32f2c0fdaab13ef835bfe9523e985cd3c2c7153af1dba227746647152f04e92b1307c82d135e7043df2e889452824a750733ed94625f4783594e35d22df151a915b32aab43de92275d9581f93012c9a78948627628c3f3995f2ef98f048f343727e5b3d893303c4f89ac260c4d873dfba3447ae0ac4ece6968252ca49109db47d345382ef696703abfd0ae545f4b85e1a2d9dc7eaf15c18b742fb9d1ae37ac8bed17689d2bf8071bdd4d570f812d7158d801c7e5864976b3a4e0182a21b1581a3ab7db9bbe5cd24194b47add29dccc020aa2fc32a0b58a70d1b3f8f80b28faacee87c8ef938b5519060671a4f7e450ca5a0ee35ff476cdde44308f63badb039507308248cb512dbda1b028a82697b8f6d075a4f91d7b0fbfe633f2b4edcd0185ae6cd27c05b30f8c8346d5a5ed59edab7a8fce1866a928d9e9fbbc0f352f66d3e4315b8182bd89c81c32f566c0b2ad0df71d73ed7bbf678963a377bd756eaea4c08fa729817cc35f08055b1e0b0659232fc36c34e67b0f83feab0334ad118c6544b0c5001cbbf2b88b54da58b726678451535f0fdcb41aa301cb2f5931f60f0dde6d3f0ea8675f926030f35565fc482f6efe79704a7485476df9a8f49200e9e29f5eef26ba09b34ea19b23d73f0f409b7a31b24b75509865ffd6e04c026c5673641ba30be0445353c35606f700131e300645973c51d7edb81415b657424b497e5f90a79fee290685c1ac4a2de7ccb6278f2f9c140bca3e0bfa02a381837dbf485c6ac50b373a4b698fd5f0e0dc82f27de12d52a7d0eeb16b1785ce90d06662208deea98ae3571c33d046f88ae83b43a56cd943a46af91dd1601b5de03f312dd000c80b1eaeaaa7ad494d05b645c242617bd5baa905239447c54f1a8a12f4316c2af7f07f8356cedeb2773f55b6f79683a92255375f543f4c06c127085a08cf8d377c0ea2de7edb683883b45f6bfb9d885640d357c29bf0aec169bff7e4aa23700512d71ca076b40ee39405f68bdffc8d270a3f8b6578732b63ce4fb4e11a5713e0b260b8e1e58b5836ae2b3f87984df94d408a5211a1cfd7738d37b52ebc9efb576ed2c32458e3baf57b253774c394118017762de954ecbb65e9c67bef3fd6e0df5abb5a70ee0bc2c074dfcd6e5f8fb9eb58ad65c0b1ab2d1d78cdfc09d73fe0f5aa1cf6333607c771892ab6853120cc3f714e9e01a12550745faab355fbd05ae5ff120ef598a6cf8198c38487e8280e45a5c12899ae6a9dd13c01e3835747f0de5e41c06c14b0279e9ae4f7d400afabfbf9005718ac30b8ca6e8664852ddb7ac4f4b3d7e4e92c4b8efc27e7baf716c6aaab597a5246083f1bb03129ce0aa06e17fd7a64c495faf8a42c77cb0e3dcd53437157cd97affab2b9e6c8a3080845313dec1a5c4768310e704e1706db589ea8673fb24d6cfc889d1365f75d2586962c567c4f32b97144300876d2adb176ec0df9c0df2d37a99051b4ae7fc7385ea633707f4e30379ca38e5689c1058b3fdb411291a630bb09540ba9a0b0e239b4c2e3c59e548daa24157e83247fce1f280736369ce66ece10ee1bdd37d07d01deaf705cd7012cc71826f70cce8d92700c135f7a82032dd93394a0d2251a56f2373084691ab0f862d507ea63c21cee7675c5391e30f622bf2d8fd7ad5d3bc55e46213d9aa583f3ae34e000ffb2e97eafc8d3384408a92ec102ba8c66ecec5728d8c7179ea5c9f824f9e3417c216686fc007c2c33d2a68f9868edb", "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"})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="b1a9009200000b062d0000d396de492e6af1000000000000", 0x18)
r4 = accept$alg(r3, 0x0, 0x0)
r5 = eventfd(0x5)
r6 = fcntl$dupfd(r4, 0x0, r5)
sendmmsg$alg(r6, &(0x7f0000001d80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44080}], 0x1, 0x8014)
write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[], 0xffa8)
recvmmsg$unix(r6, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003b80)=""/188, 0xbc}], 0x1}}], 0x1, 0x1e5dd6c35af971ca, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {r1}}, './file0\x00'})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x98, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)

3m9.053335108s ago: executing program 5 (id=1071):
ioperm(0x0, 0x35, 0x3)
prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)

3m7.449981297s ago: executing program 5 (id=1079):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
syz_usb_connect(0x3, 0x36, &(0x7f00000028c0)={{0x12, 0x1, 0x110, 0x6b, 0xa1, 0x9c, 0x40, 0x1f32, 0x938e, 0xc823, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x8, 0x180, 0xc3, [{{0x9, 0x4, 0x5c, 0x5, 0x2, 0x8, 0x6, 0x50, 0x3, [], [{{0x9, 0x5, 0xb, 0x2, 0x40, 0x4, 0x1a, 0x3}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0xfb, 0xbf, 0x4}}]}}]}}]}}, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x2, 0x10, 0x100})
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x1d0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8200, 0xf801, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0xff, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

3m6.073094453s ago: executing program 5 (id=1081):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000100)={0x4, {{0x2, 0xfffe, @multicast2}}, {{0x2, 0xfffd, @empty}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
close(r0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040))
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
socket$inet_udp(0x2, 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) (async)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) (async)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000100)={0x4, {{0x2, 0xfffe, @multicast2}}, {{0x2, 0xfffd, @empty}}}, 0x108) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async)
close(r0) (async)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) (async)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async)

3m5.982120989s ago: executing program 5 (id=1082):
r0 = socket(0x1e, 0x805, 0x0)
bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x2b, r0}, 0x10)
listen(r0, 0xffff)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 32)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00009ca000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 32)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) (async, rerun: 64)
setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) (rerun: 64)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) (async)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) (async)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) (async)
clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80004001, 0xd6, 0x9c7, 0xfff, 0x100, 0xc5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x6, 0x81, 0x6, 0x2, 0x4d9, 0x8, 0x200, 0x8005, 0x4}) (async, rerun: 32)
r7 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f01ffffffff000000000006241a00000008241c030008070009057f0300020000000904010000020d00000904010102020d0000090582"], 0x0) (async, rerun: 32)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async)
syz_usb_control_io(r7, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) (async, rerun: 32)
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) (rerun: 32)
accept$packet(r0, 0x0, 0x0)

3m5.797217029s ago: executing program 5 (id=1084):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000a80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000980)="81", 0x1}], 0x1}}], 0x2, 0x4000001)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @multicast, @void, {@generic={0x3}}}}, 0x15)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x39)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r5=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r5, 0x9}, 0x8)

3m5.623610887s ago: executing program 35 (id=1084):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000a80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000980)="81", 0x1}], 0x1}}], 0x2, 0x4000001)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @multicast, @void, {@generic={0x3}}}}, 0x15)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x39)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r5=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r5, 0x9}, 0x8)

2m20.244993599s ago: executing program 1 (id=1338):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}}, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x54, r0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x40086)
r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)={0x20, 0x16, 0x1, '%'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20e702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m18.140495723s ago: executing program 1 (id=1352):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"])
syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, 0x0}, 0x0)

2m16.580030147s ago: executing program 1 (id=1353):
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x24, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0)

2m16.477248486s ago: executing program 1 (id=1354):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00') (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff}, 0x0) (async)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000070800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) (async)
r4 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) (async)
close(r0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001cc0)={0x28, r6, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x76}]}]}, 0x28}}, 0x0) (async)
ftruncate(r4, 0xffff) (async)
fcntl$addseals(r4, 0x409, 0x3)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00'])

2m16.424925166s ago: executing program 1 (id=1355):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000ffffffec00000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000)

2m16.217307184s ago: executing program 1 (id=1357):
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x7)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]})

2m16.053721023s ago: executing program 36 (id=1357):
prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x7)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0x0, 0x5c952399, 0x4, 0x3ff, 0x802, 0x1600, 0x8, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]})

9.24907679s ago: executing program 4 (id=1906):
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000))
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x3, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x0, <r1=>0x0, 0x10003})
ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000000c0)={r1, 0x8})
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x9, "75faa0705496204d3e01f94d2db61e26c76e23b7b4d6b5e2489cd23cb451dc51", 0x2, 0xc, 0x1, 0x4000, 0x2})
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{}, {}, {}, {}]})
pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="581c1d716681846d0b66ecc5c102cdf69edb176081abff6fe21aab370547d92c54306bde6c5c2a0cb30bff80f8bc21c1e32c38080849c17c7df5054a0ec0299bba270c7550d169937e3b733324181481df34f973e34541bbca97601f155fa10019c0840214b16c47153e76f636ca8bf5d27ff6c2237887316f186c5e9dc94aa902078f24d0cde9b4c2f5f8f6d52e7feb598a8e5c6f8112f7b2786d8018c27c15a490458e", 0xa4}, {&(0x7f00000002c0)="a0725a3e126d32c483d7e8f3ac714a4b06fd8122e4a7e32dbacec35ad1d12c32", 0x20}, {&(0x7f0000000300)="933460f9e299982f3e1bbc5a3a06225af7386892927d628c91d2d38d3192ed837cce45455d80b5a5b9", 0x29}, {&(0x7f0000000340)="a7096d8e9ecf691c4b1b381401418898910fc2394e26efb445f1e8cb6adde50c3f7fc9a84075af6b3213f2ba51f593348dabde638c013abc83fb94fd64246d414273f310f6d0a1fc8a02abf1f8242736a5264872dc3f74a6480e807646e5ceb650d7b9348113b38e7e99", 0x6a}, {&(0x7f00000003c0)="4daa1671fe415993c697f94a202f50d0732f786205b2df4d832454183340857da42b6a", 0x23}], 0x5, 0x3ff, 0x4, 0x3)
ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000480)={0x16})
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000004c0))
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1a})
r2 = syz_open_dev$usbfs(&(0x7f0000000540), 0x5, 0x428000)
ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000580))
close_range(r0, 0xffffffffffffffff, 0x2)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000005c0)=0xac30, 0x4)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x43d9)
r3 = socket$netlink(0x10, 0x3, 0x12)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xffffffff)
readlinkat(r0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001640), 0x3)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001700)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x28, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x7b}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c095}, 0x40081)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000001840))
r7 = accept4$x25(r0, 0x0, &(0x7f0000001880), 0x0)
ioctl$SIOCX25SCAUSEDIAG(r7, 0x89ec, &(0x7f00000018c0)={0x9, 0x6})
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001900)={0xfff, 0x2b9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r8 = getuid()
sendmsg$nl_generic(r0, &(0x7f0000019e80)={&(0x7f0000019900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000019e40)={&(0x7f0000019940)={0x4cc, 0x2f, 0x2, 0x70bd25, 0x25dfdbfd, {0x11}, [@generic="ab39b71acaedb0b4672a9ace36c924636d1ed276707c53a25fcaf32cee29dbeca36e16c8f300bb74dd521a87d38bd6bb67fa9fd9965e26580d9565e3dc657bb4a219804cdac84a4f944b17fdda4c892cf026ffd5639e3e8993110f8c6a53bcf182786afa1315bb1bcc765544deceb26048e6a7935643513468d27185524581d948f098334ad1c4658daed354817b7124576e8aab396b8de98755fe8e0a643096f65a46fb5d095e81a84164332a396107ce1ed96b040b867e68653d99a50497eb88c493d17536c86e83ad27cbe2", @nested={0x36b, 0xd0, 0x0, 0x1, [@generic="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", @generic="e0d0669ee332dc3dd5b6a9c829deebaa5dad7b7ac80712876ec5bd7ae0529caac0338292e4189d1201baba954db89516e71833a35a9be7dc9281e9e86e7c5329275626e6841d1666ffaa366fc8d54db0f3afbe96f74fe01830f38e8add47485abd1beeaf3658ec265c897b52780d4ac77f935f364a99346b9c318b47cc20", @generic="3973959a9b597ac7252c00cc060ca30089c846521a2a9b6d5c", @generic="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", @nested={0x4, 0x4e}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x71}, @generic="b1e4e0bd94b60158322a34ec93edf4e6ff78fc06d8df396f5c34c72d1d2caa6d1cc164b1093f8044f1150db97968171a35948d0c856244667be4756dfa0f9bb0be8319dac991f2d7aa72", @generic="7df4e5a437ad52b855f63a388ab94beb78b2f3f54a948249d1ea71254e58c44b1a006d7dd11b1c7466f11c3bab15f4872571e69bb04bd85869b7bc77d1c1b40118a0f5b3058da24180467a01c343ddd11ac914280756d659539724030c36331bb9593369005413dd1cfa5fdb6994125ef59adfcfb6d7cc6ec7b7"]}, @typed={0x8, 0x11c, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x12d, 0x0, 0x0, @uid=r8}, @generic="78eb9efed97c500521c24442ace3942c63bca1c320b6904cca454317082eeb6cf564b57bb8b3ffdfff39ec92a07339b3378160c8f924384d6ea68aab04236a1cb14e8dd7b624bbaaa4d1c724ba53fd7533c20da438b9546c564f2f29e7e84cdf49cfe119df", @typed={0x8, 0x140, 0x0, 0x0, @pid}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x4840}, 0x8040)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000019fc0)={&(0x7f0000019ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000019f80)={&(0x7f0000019f00)={0x50, r4, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5a}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xde8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0xc0)

9.158881315s ago: executing program 4 (id=1908):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f00000001c0), 0x95)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x48013, r1, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f00000000c0)=0xc000000, 0x4)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x30, 0xc7, 0x41, 0x40, 0x41e, 0x4053, 0xe656, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x71, 0xc1}}]}}]}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000f6c237ba69c67fe796e8a09d27ce04762f74b56d8276886a358b", @ANYRES16=r0, @ANYBLOB="010025bd7000000000008900000008000300", @ANYRES8=r2, @ANYRESDEC=r5], 0x3c}}, 0x0)

7.893134984s ago: executing program 4 (id=1912):
r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000f3"])
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f00000000c0)={0x20, 0x18, 0x2, 'Vp'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x30, 0x63, {0x63, 0xa, "2833d6d15f13935711c454e2d35827520108cba168655efc9f0e00b1375f5da71cc8278942b8a314108502e038be91344e31929736c6a8744441c1d65ba8ca2f42f353afaad045917f76dd046b855c5d6e7d57ab9d5af1e7cc24810e73a7df4b08"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x5, 0xfe, "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"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x83}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x24b, 0x7, 0x7, 0x1, 0x6, 0xedbf, 0x2, 0x400, 0x9, 0x2, 0x8, 0x8}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x2}, &(0x7f00000003c0)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x4000}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}})
r4 = getpid()
ptrace$setsig(0x4203, r4, 0x100000001, &(0x7f0000000500)={0x39, 0x9, 0x2})

5.611939722s ago: executing program 4 (id=1925):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000580)={0x20, 0x14, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0x8, 0x2, "1312"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000880)={0x40, 0x16, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000440)={0x80, 0xb, 0x4, "41de8f64"}, 0x0, 0x0})

4.901467863s ago: executing program 8 (id=1926):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xf, r1, 0x100000000002, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r2=>0x0})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x458102, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000200)={0x4, 0x5, "f83002", 0x71, 0x40})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r2})

4.732889393s ago: executing program 8 (id=1928):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce)
r3 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
r4 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xfc5, 0xb080, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xb0, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x3ff, 0xff, 0x1, {0x22, 0x68b}}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0x7f, 0x1, 0xf3}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x1, 0x9, 0x5}}]}}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x201, 0x3, 0x50, 0x6, 0x8, 0x1}, 0x28, &(0x7f00000012c0)={0x5, 0xf, 0x28, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x0, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x6, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8a, 0x1, 0x48, 0x3, 0xc7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x7, 0x1}]}, 0x6, [{0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x1c01}}, {0xa7, &(0x7f0000001340)=@string={0xa7, 0x3, "6ca5df733ec0583dcc2734d9d4d390b608b6ff34ee1db826dcb717b66b9568a0a8ef92e420d1b4508020fa9426e09a27ccc49952865e87eb7cee385c71d722c7e2391a5c10208fa1a77ae619ca586265e603a8f1c8d307ebb947446b4496827ba1f6a4aea59ce42cab2cdb085249e273d0c3a856e6fcd18b26ebf78b91dd25fd6cf73dd5b3f2e1ceccfb647ba6a5f45a041f5cbe04f56c2fc5458612e19b4e783153e3a6c5"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x452d1d3ec3f0886f}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x2001}}, {0x71, &(0x7f0000001480)=@string={0x71, 0x3, "20982048c1f739bb89c27a92cfce20c1be9bf7900edd7bb3deeb6ef30808191f562cfd44eeaf7ae10ef8c673944f38522f0c7bbf501403a04480a79bbb9998a4da5d477c4a2ddfb593b0eb97bcd1ca52352a0d37b102919d8c4b1481578f2d6e53b403612f62aaab2f3adc758223f8"}}, {0xbe, &(0x7f0000001500)=@string={0xbe, 0x3, "0dcc033ca4d2ee7a5e668cec64c2f34f0fe08b051487788684b3b9debcc07dae0aafd6861b8381ff3e2259ca6811885e5501217fc71bb0b8ed21f184382c1378ce8650a12b04409c4122737a69c200d0bb96a318d957b719a5f3ae42a444b7d21dd0cb9a0f4b735d97b3024d4f988e7df1a6adc0bd18f4df96e2e9e160ba50afb1b698cadd07a0e8f129c2f2cf5dafe2037b5c7eb8f841d90f5f816220d09c764adb4ff979a66dcc1b7a79d125221d9c71c9ee3c6f8824981fb25995"}}]})
syz_usb_disconnect(r4)
r5 = syz_clone(0x800211, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(r3, 0x100)
syz_usb_connect(0x5, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0xa3, 0xd6, 0x13, 0x20, 0x102c, 0x6151, 0x3265, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc5, 0x2, 0x0, 0x2e, 0x85, 0xfe}}]}}]}}, 0x0)
sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e34, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES64=0x0, @ANYRES16=r5, @ANYRES32=0x0], 0x38, 0x8005}, 0x20000000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x4, 0x1f, 0x10, 0x80, 0x100, &(0x7f0000000040)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc9098d977d9e16e8062fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db423318194c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"})

2.749205734s ago: executing program 8 (id=1940):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]})
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0)
ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, 0x0)

2.728876447s ago: executing program 7 (id=1941):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x22)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x297, 0x0, 0x5}]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @broadcast, @initial, {0x2, 0x8}}, 0x32, 0x1f, @random, @void, @val={0x2d, 0x1a, {0x400, 0x0, 0x0, 0x0, {0x9, 0x3, 0x0, 0x8, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x8, 0x3, 0x9}}}}]}, 0x5c}}, 0x0)

2.701734022s ago: executing program 8 (id=1942):
timer_create(0x3, &(0x7f0000000380)={0x0, 0x24, 0x2, @thr={&(0x7f0000000240)="c55fbce08d41091864a0e30a9aa038e7302e61e5f33e1e7c444264e02a5ba2d9c7a13b1f8141d695dfb0fa3ddf92d7bad549dd32bdf77346a00717da5de171e974dda9ac9f51d20d1797bb8f94ec4a16d037b17964ef00bc3c3ad660b2117d21ef04d60d77428f75b3b66e603b810662a11dfc5a1e0bfafaba748dda0c32edd69b008221a2de93f88dfd233365fce16adf", 0x0}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000340)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syncfs(r0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x26, 0x2, @thr={&(0x7f0000000040)="956ca5569db949b831822737cb2b2af23e22d8255b7ca8242e4dde57012c385ebf36cd04c45d61498f0f63dc5d2dcf058808e87bd614d2165e0b9253259b86fdae61a6c9ff6562f8275ac51f87145c67599e0b6c32eb909f03d94e16ab53024df37c54b9a876d2733c80d69f99159d4062bf0fd058471c8c634d8e555ca40cbf669d44082c3f4c8de1bbef54820068e0bf237424d6ae5e410430d4a621473934e894878971a1bb80b68d1c6f99f2c1689f57aad8a6bb1902ed2dc89a789ab607b6192ac7bed44b84dce7282ddd6faa92e4e1577ba9dff5f40c769debc7ca6a922f52193900a3b68743c7b5bd7d", &(0x7f00000003c0)="8d904f772679266f946335ebe8433ded76cf64e3d54626a6cb0d4d26b47b642df97250541ea9024bef792f6154da2689531f6e6e89627a9013551d5ac661c4f603bc993d0ee9f6d4b5b14f6cc916aadc9c6d6328087c227ab884c999422adbdcf1978815b12df9b74a0c74e005c6d66f760cc909379acc6b21734ad5a45ec7b14a2f49b5e2a34a2c44bcb5575b16032a64dfca7bd70cad59a77c0390ee8c54af0d8453f877214acf489e07ed6fd49a97c9"}}, &(0x7f00000001c0)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000300))
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0xff, 0xff})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0xb, 0x1, 0x0, 0x0, @str='workdir'}]}, 0x20}}, 0x8800)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.513176263s ago: executing program 7 (id=1943):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x6, 0xc, 0x1})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0x80002, 0x0, {[0x100000000, 0x80000000, 0x0, 0x1, 0x0, 0x8001, 0x8, 0xffffffffffffff1f]}})
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2086c0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
r4 = syz_create_resource$binfmt(&(0x7f0000000140)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff)

2.489826784s ago: executing program 8 (id=1944):
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsmount(r0, 0x0, 0x20) (async)
r1 = fsmount(r0, 0x0, 0x20)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4)

2.422915764s ago: executing program 7 (id=1945):
prctl$PR_SET_VMA(0x21, 0x0, &(0x7f000098b000/0x2000)=nil, 0x2000, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f00000000c0)=0x4, 0x4)
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01008ebd7000fed9e3ded67a6e4397c60300", @ANYRES32=r3, @ANYRESDEC], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
capset(&(0x7f0000004240)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000000, 0x0, 0x7fff})
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xfffffffffffffd75}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x39, 0x10, 0x0, 0x0})
splice(r0, &(0x7f0000000040)=0x800000000b, r0, &(0x7f00000000c0)=0xb, 0xe003, 0x9)
prctl$PR_CAPBSET_DROP(0x18, 0x1)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="87f7566a661f03000000000000008b52a5cf404f3a03fd1cfcf36a0ab4fb5e225193882b"], 0x10}], 0x1, 0x0, 0x0, 0x4080}, 0x0)
capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x2, 0x4, 0x0, 0x80002, 0xffffffff})
r6 = epoll_create1(0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x80002, 0xa)
unshare(0x400)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a})
read$FUSE(r7, &(0x7f0000003640)={0x2020}, 0x2020)
epoll_wait(r6, &(0x7f0000000080)=[{}], 0x1, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r8, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r9 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x3b51, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r9, 0xc0585604, &(0x7f0000000000)={0x1})
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
preadv(r10, &(0x7f0000000500)=[{&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000480)=""/119, 0x77}], 0x3, 0x3, 0x3a2c)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_TIOCINQ(r11, 0x541b, &(0x7f0000000180))

2.365197716s ago: executing program 8 (id=1946):
r0 = socket$inet(0x2, 0x3, 0x6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01072bbd70000000000013000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000)="9a9c94a4", 0x4, 0x20000800, &(0x7f0000001080)={0x2, 0x4e24, @multicast1}, 0x10)

2.315606777s ago: executing program 7 (id=1947):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="563f00001800599c6d0e0000ded650492d"], 0xfe33)
r3 = dup(r1)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0xffffffff)
socket$packet(0x11, 0x0, 0x300)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169282, 0x0)
connect$can_j1939(r4, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x400c01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r7, 0x4068aea3, &(0x7f00000003c0)={0xc1, 0x0, 0x4})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r9}) (async)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r9})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x107000})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'wlan1\x00'}}, 0x1e) (async)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'wlan1\x00'}}, 0x1e)
sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xaece, 0x2)
r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r13, 0x89e7, &(0x7f0000000080)={0x2007a}) (async)
ioctl$SIOCX25SCUDMATCHLEN(r13, 0x89e7, &(0x7f0000000080)={0x2007a})
write$UHID_CREATE2(r3, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x94, 0x3, 0x10001, 0x200, 0xffff, 0x1000, "200adb0c7658c82bf542c3f4ceed46ee1789be548239047abb523a5b1f9514070d4fb4ba486396596625030ead1eb5e14fdf7c4fe10ec9e35c55c6d657fe9e7abd5b789d1c50db57db8ab7a876a70a2160dc3a1e26b39185ef269e6384bf5582165e8d7076d8aaab048d40fd857713ff3db1933857139c22c652f99324684438d79a595bf6ca9817aea656ea960cbded32dd1824"}}, 0x1ac) (async)
write$UHID_CREATE2(r3, &(0x7f0000000340)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x94, 0x3, 0x10001, 0x200, 0xffff, 0x1000, "200adb0c7658c82bf542c3f4ceed46ee1789be548239047abb523a5b1f9514070d4fb4ba486396596625030ead1eb5e14fdf7c4fe10ec9e35c55c6d657fe9e7abd5b789d1c50db57db8ab7a876a70a2160dc3a1e26b39185ef269e6384bf5582165e8d7076d8aaab048d40fd857713ff3db1933857139c22c652f99324684438d79a595bf6ca9817aea656ea960cbded32dd1824"}}, 0x1ac)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0xe, 0x5, 0x3}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0xe, 0x5, 0x3}]})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.959934727s ago: executing program 6 (id=1948):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000d80)="f9ff282dd35800f0bba89ebb87e80abb89adcac937", 0x15}], 0x1}}], 0x1, 0x20000840)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007c00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000d80)="f9ff282dd35800f0bba89ebb87e80abb89adcac937", 0x15}], 0x1}}], 0x1, 0x20000840) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async)
close(0x3) (async)

1.821289407s ago: executing program 6 (id=1949):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01100000000000000000540000000800010070636900110002c6eebe836f590000017ca6303a30302031302e3000000000"], 0x30}}, 0x0)
close(r1)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045017, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x7}, &(0x7f0000000080)=0x8)
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200020038000480340001800b0001006e756d67656e00002000028008000340000000000800014000000002080002400000000008000440fffffffb0900010073797a30000000000900020073797a32"], 0x8c}}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r7, &(0x7f0000002a40)=[{{}, 0x9}], 0x1, 0x40002000, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
recvmmsg(r7, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)

1.744377913s ago: executing program 6 (id=1950):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r4=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r5=>0x0, 0x2f, 0x7, 0x6, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7800, 0x10, 0x5, 0x1}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', <r6=>0x0, 0x2f, 0x4, 0x8, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x7, 0x4, 0x9}})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r9=>0x0}) (async)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4)
sendto$packet(r8, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff0060031200000088fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r12, @ANYBLOB="05003300f4"], 0x2c}}, 0x80) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0x498, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x12c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/)\'\'$%#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x20c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xca, 0x5, "00fe6aa9a04845b58b5ba0c781115a4400f4c12774afdaeacae8d72474d3f1488c7a54de8825921972eb0bc90bd076295288b3541fef4d1ef3f8cf327965a258aec8ddf159b87f72b87489ae59210be4017f727660d0476a94f960273795abd31ad09283ca46ae96d7906f974aa677cb5be98e9732138f846f74c9e8d1f925d3ff694cf3241bc73a50c788bf0e6352cd061fdfcdf4e1e4e1d0a03ac1eef6e1a7029ed3a0804cf20df88c9ac8fef40a3fb3c028de9c73cbff257aefc60d5f494c80da0abd05ae"}, @ETHTOOL_A_BITSET_MASK={0xd3, 0x5, "046877570f29446d7dc9bd9e33f731afefa794d54f4fe5b608b5639fdc7ab2883f3dadd5461b957c67d943b320537a1513623db6ad99bf8f9a1d9128b64d73e9e022152e47b0a28e8faf8919ecd1013a533e803efa83cbbf97b91be851665df8df8fd1381c9168a56bcd07137c1dd91667062fab6b52b70c003ab0c1e4cbba8078db0837b1e91742ce880550b9bd2ca3bb24c38b4080ec0b8ece4be9d2a52baa5a3f07a510b694b226c1ddb09a843a4f4ec94381e59ce2a3a881ebdc0a40d79e9b49b0d9e84ef204389c65c940bc5c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/usbmon#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '#!\xe3}}/Y\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeefc}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\#]/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x882}, 0x840) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r15 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x804e, {0x1, 0x6, "57daba", 0x443a, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback={0xbaf0}}}}}}}, 0x66)

1.677744645s ago: executing program 6 (id=1951):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf25030000000800040001000000e90549b30653c74fb4d63832303e8db70906766979c1e0bc4fca7c4607194f67dc2b10a3ddde7526b1cf552bdc7fc16debb7adf81bd57edb"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x64044000)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80004001, 0xd6, 0x9c7, 0xfff, 0x100, 0xc5e3, 0x7fff, 0x8000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x2, 0x81, 0x6, 0x2, 0x4d9, 0x8, 0x200, 0x8005, 0x4})
r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f01ffffffff000000000006241a00000008241c030008070009057f0300020000000904010000020d00000904010102020d0000090582"], 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000980)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef)
ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000001c0)=0x2001)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCFLSH(r7, 0x80045438, 0x300000000000000)
r8 = fcntl$dupfd(r4, 0x0, r4)
write$sndseq(r8, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x3, {}, {0x0, 0x4}, @result={0x1, 0x2}}, {0x33, 0x0, 0xff, 0x3, @tick=0xf27, {0x3, 0x31}, {0x8}, @addr={0x4, 0x5}}], 0x38)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x90, &(0x7f0000000300)={0x40, 0xc, 0x0, "5da3c45db002e4309956b1f19acf7f22c717febdcecc3aedcade92a3e04041acc6c376630fc3008bb34eb4d4772923d9de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x40, 0x1a, 0x2}, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x1, 0x2, 0xf0, 0x22, [{{0x9, 0x4, 0x0, 0xdb, 0x3, 0x2, 0x6, 0x0, 0xd, {{0x6, 0x24, 0x6, 0x0, 0x0, "dd"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x8, 0x1, 0x40}, [@obex={0x5, 0x24, 0x15, 0xc788}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xc}, @obex={0x5, 0x24, 0x15, 0xbc44}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x76, [0x9, 0xb0, 0xf613, 0x2, 0x200]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x8, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x7bf, 0xc, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x8e, 0x5}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7f, 0xdb, 0x0, 0x0, 0xb}, 0x27, &(0x7f00000000c0)=ANY=[@ANYBLOB="054f270005071002030002001001fe0b03100b0710020e900600"/39], 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x83e}}]})
r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r9)
syz_usb_connect(0x4, 0x24, &(0x7f0000000540)=ANY=[], 0x0)

1.265027333s ago: executing program 7 (id=1952):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c)
r1 = socket$kcm(0xa, 0x2, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b00"], 0x10b8}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x3, 0x1cb, 0x12d62, 0x12d58}}, 0x44)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf251900000008000300", @ANYRES32=r6, @ANYBLOB="050024"], 0x34}, 0x1, 0x0, 0x0, 0x2004c051}, 0x14)

1.205514484s ago: executing program 7 (id=1953):
r0 = fsopen(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0xc00, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
open_tree(r1, &(0x7f0000000640)='\x00', 0x89901)
socketpair(0x2b, 0x3, 0x40, &(0x7f0000000040))
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0})

822.888626ms ago: executing program 4 (id=1954):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c1b00002301040001007000ffdbdf25160000000883a225"], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
futex(&(0x7f0000000500), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x25000000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4)
r4 = socket(0x22, 0x2, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
accept4$inet(r5, 0x0, 0x0, 0xc0000)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000", @ANYBLOB="b661e68c2e3a0ac694b294595dde64095a55f3bcc6663aa07512697b4e4e7bafbf3ca8e59fbe2903c3fae36a79966b19f7826d535f1133cf09760a30cb54c52dd15bf38bfd4603f210cbfcc4c82639c5b5b947f517df749060423da79faf7ce6552b9b", @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022dbd7000fddbdf250000000005001383cf68520b01000000030000000000000000ff02000000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc800}, 0x20004090)

715.942624ms ago: executing program 6 (id=1955):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0xa, 0x7)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @multicast1}, &(0x7f0000000080)=0xc)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, 0x0, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x71, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201)
close_range(r5, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty, r2}, 0x13)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@remote}, 0x14)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0x80)

706.610338ms ago: executing program 4 (id=1956):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
syz_usb_connect(0x0, 0x50, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x80, 0x3e, 0xff, 0x20, 0x4dd, 0x8005, 0x3bfa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x0, 0x5, 0xd0, 0x5, [{{0x9, 0x4, 0xb6, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x7, 0x1a2, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x9}]}]}}]}}]}}, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/vmcoreinfo', 0x8000, 0x14)
read$FUSE(r5, &(0x7f0000000e40)={0x2020}, 0x2020)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0a000600505050505050000014005500d0c75af033b28f1c0f000000000000af"], 0x3c}, 0x1, 0x0, 0x0, 0x44804}, 0x20040000)
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x68, r1, 0x801, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0x65}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "c278d3bfb8d81740088e0f"}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ab6d13ad8f1865cd373b3d982a"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20005040}, 0x40000)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)='G', 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r8, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000900)=0x15)
writev(r10, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2)
poll(&(0x7f00000001c0)=[{r10, 0x50c0}], 0x1, 0x9)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0)

0s ago: executing program 6 (id=1957):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141100, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000100)={0x3, 0x0, [{0x6, 0xfffffffc, 0x2, 0x2, 0x1, 0xd, 0xd175}, {0x80000007, 0x81, 0x1, 0xf07, 0x1, 0x401, 0x2}, {0xc0000001, 0x6, 0x0, 0x20e4b, 0x0, 0x4, 0x7}]})
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3c, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
mkdir(0x0, 0x13b)
mkdir(&(0x7f0000000040)='./bus\x00', 0x34)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4000)
setresuid(r3, r3, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x3880, &(0x7f00000001c0)={[{@default_permissions}]})
r4 = timerfd_create(0x7, 0x80800)
timerfd_settime(r4, 0x0, &(0x7f0000001a80)={{0x0, 0x3938700}}, &(0x7f0000001ac0))
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000010010000010000002400000000000000a4f89408bf78f0fabd797049ab1faa78b189961b23f41b7379753838ed1a0e5eec9a5b6d04425646af305a2c08cb687dbef3231bca78b17f97bb1560104f65cdbc73f1fd5c5a024862706e42a3b33378"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r7 = socket$kcm(0x21, 0x2, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'virt_wifi0\x00', &(0x7f0000000280)=@ethtool_rxnfc={0x2e, 0x11, 0x10000, {0xa, @esp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x23}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffc0, 0x82}, {0x0, @remote, 0x8, 0xffff, [0x7, 0x6]}, @tcp_ip4_spec={@dev={0xac, 0x14, 0x14, 0xc}, @remote, 0x4e24, 0x4e1f, 0xd}, {0x0, @broadcast, 0x0, 0x1, [0x3, 0x7]}, 0x2, 0x2}}})
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0)
chdir(0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20001, 0x0)
sysinfo(0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xce)
ioctl$SIOCAX25GETINFO(r8, 0x89ed, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0)

kernel console output (not intermixed with test programs):

er 0
[  436.526115][  T799] usb 9-1: config 0 interface 12 has no altsetting 0
[  436.548912][  T799] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  436.558109][  T799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.566218][  T799] usb 9-1: Product: syz
[  436.570522][  T799] usb 9-1: Manufacturer: syz
[  436.575207][  T799] usb 9-1: SerialNumber: syz
[  436.582848][  T799] usb 9-1: config 0 descriptor??
[  436.872440][ T5887] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[  437.012611][ T5887] usb 8-1: device descriptor read/64, error -71
[  437.032347][   T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  437.173588][ T5880] usb 7-1: reset high-speed USB device number 81 using dummy_hcd
[  437.194525][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.206509][   T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  437.215764][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.226837][   T24] usb 5-1: config 0 descriptor??
[  437.252493][ T5887] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[  437.335665][ T5880] usb 7-1: device firmware changed
[  437.348763][ T5880] usb 7-1: USB disconnect, device number 81
[  437.392743][ T5887] usb 8-1: device descriptor read/64, error -71
[  437.492420][ T5880] usb 7-1: new high-speed USB device number 82 using dummy_hcd
[  437.502615][ T5887] usb usb8-port1: attempt power cycle
[  437.637674][   T24] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor
[  437.649459][ T5880] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  437.663438][   T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0032/input/input50
[  437.685664][ T5880] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  437.695043][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.703211][ T5880] usb 7-1: Product: syz
[  437.707413][ T5880] usb 7-1: Manufacturer: syz
[  437.712105][ T5880] usb 7-1: SerialNumber: syz
[  437.764898][   T24] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  437.818349][  T799] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  437.840484][  T799] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71
[  437.849464][  T799] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  437.854127][ T5887] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[  437.859699][  T799] f81534 9-1:0.12: probe with driver f81534 failed with error -71
[  437.890773][  T799] usb 9-1: USB disconnect, device number 39
[  437.904328][ T5887] usb 8-1: device descriptor read/8, error -71
[  437.990663][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.999671][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  438.152360][ T5887] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[  438.172938][ T5887] usb 8-1: device descriptor read/8, error -71
[  438.283542][ T5887] usb usb8-port1: unable to enumerate USB device
[  438.404297][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1622'.
[  438.478079][T12434] sctp: [Deprecated]: syz.8.1623 (pid 12434) Use of struct sctp_assoc_value in delayed_ack socket option.
[  438.478079][T12434] Use struct sctp_sack_info instead
[  439.601352][ T5880] usb 7-1: USB disconnect, device number 82
[  439.697601][T12451] netlink: 'syz.8.1628': attribute type 12 has an invalid length.
[  439.705596][T12451] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1628'.
[  439.742484][ T5880] usb 7-1: new full-speed USB device number 83 using dummy_hcd
[  439.848401][  T798] usb 5-1: USB disconnect, device number 36
[  439.882430][ T5880] usb 7-1: device descriptor read/64, error -71
[  439.926163][T12460] bond0: Error: Cannot enslave bond to itself.
[  440.053658][ T5887] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[  440.132382][ T5880] usb 7-1: new full-speed USB device number 84 using dummy_hcd
[  440.182410][ T5887] usb 8-1: device descriptor read/64, error -71
[  440.232721][  T799] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  440.272467][ T5880] usb 7-1: device descriptor read/64, error -71
[  440.352385][  T798] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  440.362348][  T799] usb 9-1: device descriptor read/64, error -71
[  440.382694][ T5880] usb usb7-port1: attempt power cycle
[  440.422383][ T5887] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[  440.505668][  T798] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  440.514932][  T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.525373][  T798] usb 5-1: config 0 descriptor??
[  440.564782][ T5887] usb 8-1: device descriptor read/64, error -71
[  440.602503][  T799] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[  440.682780][ T5887] usb usb8-port1: attempt power cycle
[  440.722445][ T5880] usb 7-1: new full-speed USB device number 85 using dummy_hcd
[  440.734957][  T799] usb 9-1: device descriptor read/64, error -71
[  440.744070][ T5880] usb 7-1: device descriptor read/8, error -71
[  440.853138][  T799] usb usb9-port1: attempt power cycle
[  440.982548][ T5880] usb 7-1: new full-speed USB device number 86 using dummy_hcd
[  441.003277][ T5880] usb 7-1: device descriptor read/8, error -71
[  441.004842][T12466] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1633'.
[  441.032454][ T5887] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[  441.052941][ T5887] usb 8-1: device descriptor read/8, error -71
[  441.112934][ T5880] usb usb7-port1: unable to enumerate USB device
[  441.192357][  T799] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[  441.213019][  T799] usb 9-1: device descriptor read/8, error -71
[  441.224582][  T798] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  441.235326][  T798] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  441.297857][ T5887] usb 8-1: new high-speed USB device number 63 using dummy_hcd
[  441.323195][ T5887] usb 8-1: device descriptor read/8, error -71
[  441.402919][  T798] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  441.413053][  T798] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  441.432693][ T5887] usb usb8-port1: unable to enumerate USB device
[  441.452427][  T799] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[  441.483062][  T799] usb 9-1: device descriptor read/8, error -71
[  441.591985][  T798] asix 5-1:0.0 eth9: register 'asix' at usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet, 26:e8:ed:03:31:73
[  441.592688][  T799] usb usb9-port1: unable to enumerate USB device
[  441.608279][  T798] usb 5-1: USB disconnect, device number 37
[  441.618803][  T798] asix 5-1:0.0 eth9: unregister 'asix' usb-dummy_hcd.4-1, ASIX AX88178 USB 2.0 Ethernet
[  442.242460][ T5880] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  442.406318][ T5880] usb 5-1: Using ep0 maxpacket: 8
[  442.414772][ T5880] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  442.433177][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  442.451977][ T5880] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  442.488950][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  442.511821][T12504] siw: device registration error -23
[  442.518574][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  442.529352][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.609067][T12508] QAT: Invalid ioctl 1075883590
[  442.614663][T12508] QAT: Invalid ioctl 1075883590
[  442.619736][T12508] QAT: Invalid ioctl 1075883590
[  442.635234][T12508] QAT: Invalid ioctl 1075883590
[  442.640440][T12508] QAT: Invalid ioctl 1075883590
[  442.650280][T12508] QAT: Invalid ioctl 1075883590
[  442.656823][T12508] QAT: Invalid ioctl 1075883590
[  442.662031][T12508] QAT: Invalid ioctl 1075883590
[  442.669667][T12508] QAT: Invalid ioctl 1075883590
[  442.675698][T12508] QAT: Invalid ioctl 1075883590
[  442.690746][T12508] binder: 12507:12508 ioctl c0306201 200000000080 returned -22
[  442.782443][ T5880] usb 5-1: GET_CAPABILITIES returned 0
[  442.791464][ T5880] usbtmc 5-1:16.0: can't read capabilities
[  442.858026][T12513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.894559][T12514] syzkaller0: entered promiscuous mode
[  442.900222][T12514] syzkaller0: entered allmulticast mode
[  442.972119][  T798] usb 5-1: USB disconnect, device number 38
[  443.242584][ T5887] usb 8-1: new low-speed USB device number 64 using dummy_hcd
[  443.272361][ T5941] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[  443.376160][ T5887] usb 8-1: device descriptor read/64, error -71
[  443.426950][ T5941] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  443.436125][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.444355][ T5941] usb 7-1: Product: syz
[  443.448554][ T5941] usb 7-1: Manufacturer: syz
[  443.453207][ T5941] usb 7-1: SerialNumber: syz
[  443.463133][ T5941] usb 7-1: config 0 descriptor??
[  443.632613][ T5887] usb 8-1: new low-speed USB device number 65 using dummy_hcd
[  443.762490][ T5887] usb 8-1: device descriptor read/64, error -71
[  443.832452][   T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  443.875788][ T5887] usb usb8-port1: attempt power cycle
[  443.963728][   T24] usb 5-1: device descriptor read/64, error -71
[  444.147792][T12534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.159212][T12534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.202681][   T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  444.232522][ T5887] usb 8-1: new low-speed USB device number 66 using dummy_hcd
[  444.263216][ T5887] usb 8-1: device descriptor read/8, error -71
[  444.332375][   T24] usb 5-1: device descriptor read/64, error -71
[  444.372385][ T5880] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[  444.443471][   T24] usb usb5-port1: attempt power cycle
[  444.502472][ T5880] usb 9-1: device descriptor read/64, error -71
[  444.512430][ T5887] usb 8-1: new low-speed USB device number 67 using dummy_hcd
[  444.534412][ T5887] usb 8-1: device descriptor read/8, error -71
[  444.652846][ T5887] usb usb8-port1: unable to enumerate USB device
[  444.742452][ T5880] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[  444.782358][   T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  444.803181][   T24] usb 5-1: device descriptor read/8, error -71
[  444.872401][ T5880] usb 9-1: device descriptor read/64, error -71
[  444.893335][ T5941] usb 7-1: f81604_read: reg: 200f failed: -EPROTO
[  444.905385][ T5941] usb 7-1: USB disconnect, device number 87
[  444.913975][ T5941] usb 7-1: f81604_read: reg: 100f failed: -ENODEV
[  444.943905][ T5494] usb 7-1: f81604_read: reg: 200f failed: -ENODEV
[  444.956456][ T5941] usb 7-1: f81604_read: reg: 200f failed: -ENODEV
[  444.983170][ T5880] usb usb9-port1: attempt power cycle
[  445.042647][   T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  445.062999][   T24] usb 5-1: device descriptor read/8, error -71
[  445.137799][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  445.145122][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  445.172629][   T24] usb usb5-port1: unable to enumerate USB device
[  445.322394][ T5880] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[  445.352853][ T5880] usb 9-1: device descriptor read/8, error -71
[  445.602386][ T5880] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  445.623058][ T5880] usb 9-1: device descriptor read/8, error -71
[  445.732655][ T5880] usb usb9-port1: unable to enumerate USB device
[  446.027107][T12556] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  446.403996][   T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  446.692455][ T5880] usb 8-1: new high-speed USB device number 68 using dummy_hcd
[  446.842691][ T5880] usb 8-1: Using ep0 maxpacket: 16
[  446.850786][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.863929][ T5880] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  446.892470][ T5880] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  446.911823][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.926247][ T5880] usb 8-1: config 0 descriptor??
[  446.940363][   T30] audit: type=1326 audit(1761085079.193:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12581 comm="syz.4.1658" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb82ff8efc9 code=0x0
[  447.344991][ T5880] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max
[  447.359414][ T5880] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max
[  447.367106][ T5880] microsoft 0003:045E:07DA.0033: usage index exceeded
[  447.375209][ T5880] microsoft 0003:045E:07DA.0033: item 0 0 2 2 parsing failed
[  447.383889][ T5880] microsoft 0003:045E:07DA.0033: parse failed
[  447.390171][ T5880] microsoft 0003:045E:07DA.0033: probe with driver microsoft failed with error -22
[  447.542899][ T5880] usb 8-1: USB disconnect, device number 68
[  447.743032][T12597] netlink: 6 bytes leftover after parsing attributes in process `syz.8.1662'.
[  447.764816][T12597] input: syz1 as /devices/virtual/input/input51
[  447.850279][T12597] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  448.094278][ T5831] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  448.214659][   T43] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[  448.264217][ T5831] usb 5-1: Using ep0 maxpacket: 16
[  448.277104][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  448.288954][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.299823][ T5831] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  448.309308][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.322776][ T5831] usb 5-1: config 0 descriptor??
[  448.374985][   T43] usb 9-1: config 5 has an invalid interface number: 233 but max is 1
[  448.383413][   T43] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  448.394157][   T43] usb 9-1: config 5 has no interface number 1
[  448.400486][   T43] usb 9-1: config 5 interface 233 has no altsetting 0
[  448.410013][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1664'.
[  448.426089][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1664'.
[  448.498630][   T43] usb 9-1: string descriptor 0 read error: -71
[  448.507211][   T43] usb 9-1: New USB device found, idVendor=1e2d, idProduct=0085, bcdDevice=96.e8
[  448.517002][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.532388][ T5887] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[  448.536583][   T43] usb 9-1: can't set config #5, error -71
[  448.548022][   T43] usb 9-1: USB disconnect, device number 48
[  448.718007][ T5887] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  448.729212][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.741442][ T5887] usb 8-1: Product: syz
[  448.748391][ T5831] usbhid 5-1:0.0: can't add hid device: -71
[  448.761257][ T5887] usb 8-1: Manufacturer: syz
[  448.766837][ T5831] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  448.782497][ T5887] usb 8-1: SerialNumber: syz
[  448.798968][ T5831] usb 5-1: USB disconnect, device number 43
[  448.806643][ T5887] usb 8-1: config 0 descriptor??
[  448.821670][ T5887] ch341 8-1:0.0: ch341-uart converter detected
[  448.941322][T12620] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  448.951258][T12620] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  448.963781][T12620] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null.
[  449.282566][   T43] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[  449.401673][T12638] binder: 12633:12638 ioctl c0306201 200000000640 returned -22
[  449.472426][   T43] usb 7-1: Using ep0 maxpacket: 32
[  449.482474][   T43] usb 7-1: too many configurations: 174, using maximum allowed: 8
[  449.493545][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  449.501170][   T43] usb 7-1: can't read configurations, error -61
[  449.632483][   T43] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[  449.782354][   T43] usb 7-1: Using ep0 maxpacket: 32
[  449.788764][   T43] usb 7-1: too many configurations: 174, using maximum allowed: 8
[  449.798588][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  449.806307][   T43] usb 7-1: can't read configurations, error -61
[  449.812952][   T43] usb usb7-port1: attempt power cycle
[  449.827749][T12608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.836749][T12608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.867457][ T5887] usb 8-1: failed to send control message: -71
[  449.891633][ T5887] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  449.911118][ T5887] usb 8-1: USB disconnect, device number 69
[  449.930863][ T5887] ch341 8-1:0.0: device disconnected
[  450.162652][   T43] usb 7-1: new high-speed USB device number 90 using dummy_hcd
[  450.183205][   T43] usb 7-1: Using ep0 maxpacket: 32
[  450.201934][   T43] usb 7-1: too many configurations: 174, using maximum allowed: 8
[  450.232396][ T5887] usb 8-1: new high-speed USB device number 70 using dummy_hcd
[  450.232472][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  450.257157][   T43] usb 7-1: can't read configurations, error -61
[  450.299171][T12654] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  450.322933][T12654] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  450.357272][T12654] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  450.384709][ T5887] usb 8-1: device descriptor read/64, error -71
[  450.392359][   T43] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[  450.421616][   T43] usb 7-1: Using ep0 maxpacket: 32
[  450.428857][   T43] usb 7-1: too many configurations: 174, using maximum allowed: 8
[  450.449372][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  450.457521][   T43] usb 7-1: can't read configurations, error -61
[  450.464612][   T43] usb usb7-port1: unable to enumerate USB device
[  450.642438][ T5887] usb 8-1: new high-speed USB device number 71 using dummy_hcd
[  450.733251][  T798] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  450.792422][ T5887] usb 8-1: device descriptor read/64, error -71
[  450.872580][  T798] usb 5-1: device descriptor read/64, error -71
[  450.902723][ T5887] usb usb8-port1: attempt power cycle
[  450.932407][ T5831] usb 9-1: new full-speed USB device number 49 using dummy_hcd
[  451.083818][ T5831] usb 9-1: too many endpoints for config 0 interface 0 altsetting 7: 34, using maximum allowed: 30
[  451.095056][ T5831] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  451.106177][ T5831] usb 9-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  451.119132][  T798] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  451.126812][ T5831] usb 9-1: config 0 interface 0 has no altsetting 0
[  451.133521][ T5831] usb 9-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00
[  451.142797][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.154184][ T5831] usb 9-1: config 0 descriptor??
[  451.262382][ T5887] usb 8-1: new high-speed USB device number 72 using dummy_hcd
[  451.282632][  T798] usb 5-1: device descriptor read/64, error -71
[  451.290561][ T5887] usb 8-1: device descriptor read/8, error -71
[  451.373705][ T5831] wacom 0003:056A:0094.0034: Using device in hidraw-only mode
[  451.383205][ T5831] wacom 0003:056A:0094.0034: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.8-1/input0
[  451.395934][  T798] usb usb5-port1: attempt power cycle
[  451.552647][ T5887] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[  451.569768][ T5831] usb 9-1: USB disconnect, device number 49
[  451.578452][ T5887] usb 8-1: device descriptor read/8, error -71
[  451.692757][ T5887] usb usb8-port1: unable to enumerate USB device
[  451.752344][  T798] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  451.777451][  T798] usb 5-1: device descriptor read/8, error -71
[  452.032382][  T798] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  452.064788][  T798] usb 5-1: device descriptor read/8, error -71
[  452.172678][  T798] usb usb5-port1: unable to enumerate USB device
[  452.299905][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1688'.
[  452.453513][  T798] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[  452.602356][ T5831] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[  452.632353][  T798] usb 7-1: Using ep0 maxpacket: 32
[  452.638973][  T798] usb 7-1: config 1 interface 0 altsetting 194 endpoint 0x2 has an invalid bInterval 255, changing to 11
[  452.650273][  T798] usb 7-1: config 1 interface 0 has no altsetting 0
[  452.659975][  T798] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.40
[  452.669230][  T798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.677901][  T798] usb 7-1: Product: 怀헮诐겷輞Ი훛鄸䪓蹮諊꣒㵸䡣疤៵ꁐ敤슣됎ꌰ풖狰ᚆ俏핷酥՗獍郟ᚁ鿁䛅妌ﭭ睃⣾ȅ鲯⥘ଡ଼ﭦ⣒᪢ឪ㨘ヱ壏妩╷㱊㽞籾ذ䊧ꔍ耵속ﳸဉ蔉徠쌱⵸꺤蚚ԅჄ袶⨘､ඇ糠毢䆃宍謁좘賦Ǟ
[  452.705621][  T798] usb 7-1: Manufacturer: Ѝ
[  452.710261][  T798] usb 7-1: SerialNumber: Ў
[  452.752534][ T5831] usb 9-1: Using ep0 maxpacket: 8
[  452.759529][ T5831] usb 9-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30
[  452.770490][ T5831] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.781566][ T5831] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  452.791473][ T5831] usb 9-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  452.801219][ T5831] usb 9-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  452.814638][ T5831] usb 9-1: config 1 interface 0 has no altsetting 0
[  452.824711][ T5831] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  452.833901][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  452.841930][ T5831] usb 9-1: SerialNumber: syz
[  452.851494][T12684] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  452.858907][T12684] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  452.929230][T12679] netlink: 'syz.6.1686': attribute type 28 has an invalid length.
[  452.957878][  T798] usbhid 7-1:1.0: can't add hid device: -71
[  452.975201][  T798] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[  453.016550][  T798] usb 7-1: USB disconnect, device number 92
[  453.105204][ T5831] cdc_acm 9-1:1.0: Control and data interfaces are not separated!
[  453.123833][ T5831] cdc_acm 9-1:1.0: ttyACM0: USB ACM device
[  453.148577][ T5831] usb 9-1: USB disconnect, device number 50
[  453.452172][T12698] mkiss: ax0: crc mode is auto.
[  453.600065][T12702] can0: slcan on ttyS3.
[  453.795355][T12699] can0 (unregistered): slcan off ttyS3.
[  453.822396][ T5941] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[  453.994921][   T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  454.014450][ T5941] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  454.024489][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.045313][ T5941] usb 7-1: config 0 descriptor??
[  454.056591][ T5941] gspca_main: spca508-2.14.0 probing 8086:0110
[  454.165062][   T24] usb 5-1: Using ep0 maxpacket: 32
[  454.175474][   T24] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  454.186618][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.194845][   T43] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[  454.233080][   T24] usb 5-1: config 0 descriptor??
[  454.243128][ T5831] usb 8-1: new high-speed USB device number 74 using dummy_hcd
[  454.262796][   T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  454.293222][ T5941] gspca_spca508: reg_read err -71
[  454.302907][ T5941] gspca_spca508: reg_read err -71
[  454.316108][ T5941] gspca_spca508: reg_read err -71
[  454.331901][ T5941] gspca_spca508: reg_read err -71
[  454.339447][ T5941] gspca_spca508: reg_read err -71
[  454.352784][ T5941] gspca_spca508: reg write: error -71
[  454.364004][   T43] usb 9-1: Using ep0 maxpacket: 16
[  454.369727][ T5941] spca508 7-1:0.0: probe with driver spca508 failed with error -71
[  454.380518][   T43] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8
[  454.391987][ T5941] usb 7-1: USB disconnect, device number 93
[  454.399043][ T5831] usb 8-1: device descriptor read/64, error -71
[  454.420555][   T43] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  454.450135][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.475660][   T43] usb 9-1: Product: syz
[  454.479931][   T43] usb 9-1: Manufacturer: syz
[  454.503492][   T43] usb 9-1: SerialNumber: syz
[  454.523124][   T43] usb 9-1: config 0 descriptor??
[  454.540996][   T43] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  454.558265][   T43] usb 9-1: Detected FT232R
[  454.652480][ T5831] usb 8-1: new high-speed USB device number 75 using dummy_hcd
[  454.737181][   T43] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  454.795444][ T5831] usb 8-1: device descriptor read/64, error -71
[  454.922984][ T5831] usb usb8-port1: attempt power cycle
[  454.944769][T12737] x_tables: duplicate entry at hook 2
[  454.994925][   T43] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  455.054825][T12730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.072010][T12741] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1699'.
[  455.083016][T12730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.108242][T12741] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1699'.
[  455.168431][T12715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.193433][T12715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.216938][T12715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.239245][T12715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.270917][T12715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.293789][ T5831] usb 8-1: new high-speed USB device number 76 using dummy_hcd
[  455.302475][   T24] gspca_vc032x: reg_w err -71
[  455.307208][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.315292][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.320616][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.331517][T12715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.345702][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.360353][ T5831] usb 8-1: device descriptor read/8, error -71
[  455.383016][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.388364][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.420684][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.442558][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.447901][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.472327][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.477678][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.512593][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.517956][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.542399][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.547749][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.582335][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.591303][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.612356][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  455.617928][   T24] gspca_vc032x: Unknown sensor...
[  455.632388][ T5831] usb 8-1: new high-speed USB device number 77 using dummy_hcd
[  455.632605][   T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  455.652416][ T5913] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[  455.664815][   T24] usb 5-1: USB disconnect, device number 48
[  455.670985][ T5831] usb 8-1: device descriptor read/8, error -71
[  455.792808][ T5831] usb usb8-port1: unable to enumerate USB device
[  455.834607][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.871325][ T5913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.910051][ T5913] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  455.933218][ T5913] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  455.952440][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.980991][ T5913] usb 7-1: config 0 descriptor??
[  456.218709][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.228724][T12755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.229030][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.264990][T12755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.382860][T12756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.393457][T12756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.462454][ T5913] usbhid 7-1:0.0: can't add hid device: -71
[  456.484981][ T5913] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  456.499109][ T5913] usb 7-1: USB disconnect, device number 94
[  456.611459][   T52] Bluetooth: hci1: unexpected event for opcode 0x0c6d
[  456.913333][T12768] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1705'.
[  456.984316][   T24] usb 9-1: USB disconnect, device number 51
[  457.017650][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  457.032383][ T5913] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[  457.056051][   T24] ftdi_sio 9-1:0.0: device disconnected
[  457.100835][   T52] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  457.234639][ T5913] usb 7-1: Using ep0 maxpacket: 32
[  457.295091][ T5913] usb 7-1: config 16 has an invalid interface number: 181 but max is 0
[  457.304565][ T5913] usb 7-1: config 16 has no interface number 0
[  457.310793][ T5913] usb 7-1: config 16 interface 181 has no altsetting 0
[  457.345796][ T5913] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01e9, bcdDevice=9a.69
[  457.362821][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.370961][ T5913] usb 7-1: Product: syz
[  457.376762][ T5913] usb 7-1: Manufacturer: syz
[  457.388228][ T5913] usb 7-1: SerialNumber: syz
[  457.404481][ T5913] ftdi_sio 7-1:16.181: FTDI USB Serial Device converter detected
[  457.414813][ T5913] ftdi_sio ttyUSB0: unknown device type: 0x9a69
[  457.492393][   T24] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[  457.592356][ T5913] usb 8-1: new high-speed USB device number 78 using dummy_hcd
[  457.607347][T12764] FAT-fs (nullb0): bogus number of reserved sectors
[  457.617290][T12764] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  457.624199][ T5941] usb 5-1: new low-speed USB device number 49 using dummy_hcd
[  457.654170][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.665600][   T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.675516][   T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  457.688699][   T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  457.697823][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.713405][   T24] usb 9-1: config 0 descriptor??
[  457.744160][ T5913] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.755327][ T5913] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  457.765537][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.773702][ T5941] usb 5-1: device descriptor read/64, error -71
[  457.791081][ T5913] usb 8-1: config 0 descriptor??
[  457.949826][   T24] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  457.975402][T12786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.985362][T12786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.056928][ T5941] usb 5-1: new low-speed USB device number 50 using dummy_hcd
[  458.087984][ T5913] usbhid 8-1:0.0: can't add hid device: -71
[  458.097882][ T5913] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  458.118586][T12792] random: crng reseeded on system resumption
[  458.138681][ T5913] usb 8-1: USB disconnect, device number 78
[  458.238085][   T24] usb 9-1: USB disconnect, device number 52
[  458.252638][ T5941] usb 5-1: device descriptor read/64, error -71
[  458.380680][ T5941] usb usb5-port1: attempt power cycle
[  458.440986][ T5866] usb 7-1: USB disconnect, device number 95
[  458.460597][ T5866] ftdi_sio 7-1:16.181: device disconnected
[  458.682766][ T5913] usb 8-1: new high-speed USB device number 79 using dummy_hcd
[  458.774423][ T5941] usb 5-1: new low-speed USB device number 51 using dummy_hcd
[  458.812158][ T5941] usb 5-1: device descriptor read/8, error -71
[  458.842343][ T5913] usb 8-1: Using ep0 maxpacket: 8
[  458.849179][ T5913] usb 8-1: config 0 has an invalid interface number: 52 but max is 0
[  458.858891][ T5913] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  458.870575][ T5913] usb 8-1: config 0 has no interface number 0
[  458.872758][ T5866] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[  458.877211][ T5913] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  458.896290][ T5913] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  458.910779][ T5913] usb 8-1: config 0 interface 52 has no altsetting 0
[  458.919145][ T5913] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  458.930236][ T5913] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  458.940766][ T5913] usb 8-1: Manufacturer: syz
[  458.952998][ T5913] usb 8-1: config 0 descriptor??
[  459.012430][   T24] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[  459.022421][ T5866] usb 7-1: device descriptor read/64, error -71
[  459.062393][ T5941] usb 5-1: new low-speed USB device number 52 using dummy_hcd
[  459.093043][ T5941] usb 5-1: device descriptor read/8, error -71
[  459.162501][   T24] usb 9-1: Using ep0 maxpacket: 16
[  459.174561][   T24] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  459.179664][ T5913] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input57
[  459.184816][   T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  459.207492][   T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  459.212848][ T5941] usb usb5-port1: unable to enumerate USB device
[  459.220270][   T24] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  459.235163][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.244530][   T24] usb 9-1: Product: syz
[  459.248820][   T24] usb 9-1: Manufacturer: syz
[  459.254783][   T24] usb 9-1: SerialNumber: syz
[  459.276363][ T5866] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[  459.380091][   T43] usb 8-1: USB disconnect, device number 79
[  459.380171][    C0] synaptics_usb 8-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  459.444489][ T5866] usb 7-1: device descriptor read/64, error -71
[  459.562708][ T5866] usb usb7-port1: attempt power cycle
[  459.667813][   T24] usb 9-1: 0:2 : does not exist
[  459.912568][ T5866] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[  459.954309][ T5866] usb 7-1: device descriptor read/8, error -71
[  460.080352][   T24] usb 9-1: 1:0: cannot get min/max values for control 2 (id 1)
[  460.120616][   T24] usb 9-1: USB disconnect, device number 53
[  460.157037][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  460.196568][ T5866] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[  460.222832][ T5866] usb 7-1: device descriptor read/8, error -71
[  460.333449][ T5866] usb usb7-port1: unable to enumerate USB device
[  460.408997][T12819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.419601][T12819] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.782766][   T43] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  460.957862][   T43] usb 5-1: config 5 has an invalid interface number: 28 but max is 0
[  460.968412][   T43] usb 5-1: config 5 has no interface number 0
[  460.971229][T12838] netlink: 'syz.7.1727': attribute type 10 has an invalid length.
[  460.979331][   T43] usb 5-1: config 5 interface 28 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  460.984713][T12838] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.997889][   T43] usb 5-1: config 5 interface 28 has no altsetting 0
[  461.004111][T12838] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.018226][   T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a
[  461.028758][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.028758][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1727'.
[  461.034658][T12838] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.039787][   T43] usb 5-1: Product: syz
[  461.045911][T12838] bridge0: port 2(bridge_slave_1) entered forwarding state
[  461.046290][T12838] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.055651][   T43] usb 5-1: Manufacturer: syz
[  461.057518][T12838] bridge0: port 1(bridge_slave_0) entered forwarding state
[  461.065359][   T43] usb 5-1: SerialNumber: syz
[  461.089819][T12838] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  461.100548][T12839] bridge_slave_1: left allmulticast mode
[  461.114063][T12839] bridge_slave_1: left promiscuous mode
[  461.131143][T12839] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.141803][T12839] bridge_slave_0: left allmulticast mode
[  461.148186][T12839] bridge_slave_0: left promiscuous mode
[  461.154378][ T5866] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[  461.154689][T12839] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.187018][T12839] bond0: (slave bridge0): Releasing backup interface
[  461.301386][ T5913] usb 5-1: USB disconnect, device number 53
[  461.312612][ T5866] usb 9-1: Using ep0 maxpacket: 8
[  461.328167][ T5866] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  461.339710][ T5866] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  461.351062][ T5866] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  461.369388][ T5866] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  461.379212][ T5866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.392909][ T5866] usb 9-1: config 0 descriptor??
[  461.413275][ T5866] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  461.617223][T12845] FAULT_INJECTION: forcing a failure.
[  461.617223][T12845] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  461.632224][T12845] CPU: 0 UID: 0 PID: 12845 Comm: syz.6.1730 Not tainted syzkaller #0 PREEMPT(full) 
[  461.632255][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  461.632272][T12845] Call Trace:
[  461.632281][T12845]  <TASK>
[  461.632290][T12845]  dump_stack_lvl+0x189/0x250
[  461.632320][T12845]  ? __pfx____ratelimit+0x10/0x10
[  461.632344][T12845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  461.632368][T12845]  ? __pfx__printk+0x10/0x10
[  461.632403][T12845]  should_fail_ex+0x414/0x560
[  461.632432][T12845]  _copy_to_user+0x31/0xb0
[  461.632453][T12845]  hci_get_conn_list+0x584/0x740
[  461.632491][T12845]  ? __pfx_hci_get_conn_list+0x10/0x10
[  461.632516][T12845]  ? hci_sock_ioctl+0x346/0x910
[  461.632545][T12845]  ? hci_sock_ioctl+0x583/0x910
[  461.632574][T12845]  sock_do_ioctl+0xdc/0x300
[  461.632602][T12845]  ? __pfx_sock_do_ioctl+0x10/0x10
[  461.632639][T12845]  sock_ioctl+0x576/0x790
[  461.632660][T12845]  ? __pfx_sock_ioctl+0x10/0x10
[  461.632684][T12845]  ? __fget_files+0x3a0/0x420
[  461.632715][T12845]  ? __fget_files+0x2a/0x420
[  461.632741][T12845]  ? bpf_lsm_file_ioctl+0x9/0x20
[  461.632763][T12845]  ? __pfx_sock_ioctl+0x10/0x10
[  461.632782][T12845]  __se_sys_ioctl+0xfc/0x170
[  461.632815][T12845]  do_syscall_64+0xfa/0xfa0
[  461.632838][T12845]  ? lockdep_hardirqs_on+0x9c/0x150
[  461.632862][T12845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.632882][T12845]  ? clear_bhb_loop+0x60/0xb0
[  461.632906][T12845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.632930][T12845] RIP: 0033:0x7fbc3db8efc9
[  461.632952][T12845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.632969][T12845] RSP: 002b:00007fbc3bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  461.632990][T12845] RAX: ffffffffffffffda RBX: 00007fbc3dde5fa0 RCX: 00007fbc3db8efc9
[  461.633005][T12845] RDX: 0000200000000200 RSI: 00000000800448d4 RDI: 0000000000000004
[  461.633019][T12845] RBP: 00007fbc3bdf6090 R08: 0000000000000000 R09: 0000000000000000
[  461.633032][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  461.633044][T12845] R13: 00007fbc3dde6038 R14: 00007fbc3dde5fa0 R15: 00007ffd37621a98
[  461.633077][T12845]  </TASK>
[  461.955162][T12849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  461.964516][T12849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  461.972607][ T5913] usb 8-1: new high-speed USB device number 80 using dummy_hcd
[  462.112769][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.121534][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.130593][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.141256][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.143547][ T5913] usb 8-1: Using ep0 maxpacket: 32
[  462.156724][ T5913] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46
[  462.172127][ T5913] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.183020][ T5913] usb 8-1: config 0 descriptor??
[  462.212487][ T5941] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  462.302437][   T43] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[  462.342782][T12856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.353443][T12856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.452548][   T43] usb 7-1: Using ep0 maxpacket: 16
[  462.459100][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.470107][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.479920][   T43] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  462.490126][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.500756][   T43] usb 7-1: config 0 descriptor??
[  462.581742][ T5880] usb 8-1: USB disconnect, device number 80
[  462.716785][   T43] hid_parser_main: 109 callbacks suppressed
[  462.716811][   T43] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0
[  462.756555][   T43] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0
[  462.774829][   T43] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0
[  462.783417][   T43] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0
[  462.790865][   T43] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0
[  462.800250][   T43] hid-picolcd 0003:04D8:F002.0036: unknown main item tag 0x0
[  462.862464][   T43] hid-picolcd 0003:04D8:F002.0036: No report with id 0xf3 found
[  462.870198][   T43] hid-picolcd 0003:04D8:F002.0036: No report with id 0xf4 found
[  462.912758][ T5913] usb 7-1: USB disconnect, device number 100
[  463.289485][ T5913] usb 8-1: new high-speed USB device number 81 using dummy_hcd
[  463.464991][ T5913] usb 8-1: unable to read config index 0 descriptor/start: -61
[  463.485992][ T5913] usb 8-1: can't read configurations, error -61
[  463.556815][T12875] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  463.596469][T12875] cgroup: Need name or subsystem set
[  463.632371][ T5913] usb 8-1: new high-speed USB device number 82 using dummy_hcd
[  463.696944][T12881] syz.6.1742(12881): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  463.795639][ T5913] usb 8-1: unable to read config index 0 descriptor/start: -61
[  463.803508][ T5913] usb 8-1: can't read configurations, error -61
[  463.810151][ T5913] usb usb8-port1: attempt power cycle
[  463.846182][   T43] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  464.012467][   T43] usb 5-1: Using ep0 maxpacket: 16
[  464.019869][   T43] usb 5-1: config 0 has an invalid interface number: 195 but max is 0
[  464.034539][   T43] usb 5-1: config 0 has no interface number 0
[  464.035344][ T5887] usb 9-1: USB disconnect, device number 54
[  464.044185][   T43] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09
[  464.064478][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.078123][   T43] usb 5-1: Product: syz
[  464.111663][   T43] usb 5-1: Manufacturer: syz
[  464.116954][   T43] usb 5-1: SerialNumber: syz
[  464.125242][   T43] usb 5-1: config 0 descriptor??
[  464.139800][   T43] go7007 5-1:0.195: probe with driver go7007 failed with error -12
[  464.152623][ T5913] usb 8-1: new high-speed USB device number 83 using dummy_hcd
[  464.208754][ T5913] usb 8-1: unable to read config index 0 descriptor/start: -61
[  464.222370][ T5913] usb 8-1: can't read configurations, error -61
[  464.352513][ T5913] usb 8-1: new high-speed USB device number 84 using dummy_hcd
[  464.375067][ T5913] usb 8-1: unable to read config index 0 descriptor/start: -61
[  464.382802][ T5913] usb 8-1: can't read configurations, error -61
[  464.389359][ T5913] usb usb8-port1: unable to enumerate USB device
[  464.452344][ T5887] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[  464.502385][ T5941] usb 7-1: new high-speed USB device number 101 using dummy_hcd
[  464.612316][ T5887] usb 9-1: Using ep0 maxpacket: 8
[  464.619077][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.630162][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  464.640014][ T5887] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  464.650515][ T5887] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.661029][ T5887] usb 9-1: config 0 descriptor??
[  464.666164][ T5941] usb 7-1: Using ep0 maxpacket: 16
[  464.673942][ T5941] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.687477][ T5941] usb 7-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  464.696667][ T5941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.708164][ T5941] usb 7-1: config 0 descriptor??
[  465.080254][T12894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.089316][T12894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.115076][ T5887] hid-multitouch 0003:0EEF:72C4.0037: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.8-1/input0
[  465.178390][ T5941] monterey 0003:0566:3004.0038: item fetching failed at offset 2/5
[  465.190910][ T5941] monterey 0003:0566:3004.0038: probe with driver monterey failed with error -22
[  465.304863][ T5887] usb 9-1: USB disconnect, device number 55
[  465.376711][T12898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.385576][T12898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  466.512394][ T5941] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[  466.548509][ T5887] usb 5-1: USB disconnect, device number 55
[  466.643470][ T5880] usb 8-1: new high-speed USB device number 85 using dummy_hcd
[  466.682490][ T5941] usb 9-1: Using ep0 maxpacket: 8
[  466.689213][ T5941] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  466.700201][ T5941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.711189][ T5941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.721173][ T5941] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  466.734624][ T5941] usb 9-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  466.745864][ T5941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.758025][ T5941] usb 9-1: config 0 descriptor??
[  466.822423][ T5880] usb 8-1: Using ep0 maxpacket: 16
[  466.829299][ T5880] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  466.839790][ T5880] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  466.856681][ T5880] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  466.866016][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.874148][ T5880] usb 8-1: Product: syz
[  466.878352][ T5880] usb 8-1: Manufacturer: syz
[  466.883878][ T5880] usb 8-1: SerialNumber: syz
[  466.952330][ T5887] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  467.097753][T12924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.109115][T12924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.127022][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  467.138220][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  467.150362][ T5887] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  467.161991][ T5880] usb 8-1: 0:2 : does not exist
[  467.165898][ T5887] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  467.184839][ T5880] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  467.199632][ T5941] redragon 0003:0C45:760B.0039: unknown main item tag 0x6
[  467.212133][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.232105][ T5941] redragon 0003:0C45:760B.0039: item fetching failed at offset 7/133
[  467.241818][ T5887] usb 5-1: Product: syz
[  467.247511][ T5887] usb 5-1: Manufacturer: syz
[  467.253809][ T5880] usb 8-1: USB disconnect, device number 85
[  467.266758][ T5941] redragon 0003:0C45:760B.0039: probe with driver redragon failed with error -22
[  467.278679][ T5887] usb 5-1: SerialNumber: syz
[  467.309180][ T5887] usb 5-1: config 0 descriptor??
[  467.310480][   T43] usb 7-1: USB disconnect, device number 101
[  467.327714][T12922] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  467.339533][T12922] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  467.368618][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  467.387182][ T5887] usb 5-1: ucan: probing device on interface #0
[  467.402148][   T24] usb 9-1: USB disconnect, device number 56
[  467.592390][ T5880] usb 8-1: new full-speed USB device number 86 using dummy_hcd
[  467.744719][ T5880] usb 8-1: unable to get BOS descriptor or descriptor too short
[  467.752583][   T43] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[  467.760988][ T5880] usb 8-1: not running at top speed; connect to a high speed hub
[  467.775195][ T5880] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  467.785483][ T5880] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  467.797592][ T5880] usb 8-1: string descriptor 0 read error: -22
[  467.804074][ T5880] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  467.813305][ T5880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.835691][ T5880] usb 8-1: 0:2 : does not exist
[  467.934493][   T43] usb 7-1: config 3 has an invalid interface number: 74 but max is 0
[  467.942851][   T43] usb 7-1: config 3 has no interface number 0
[  467.954605][   T43] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99
[  467.982310][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.990401][   T43] usb 7-1: Product: syz
[  468.005484][   T43] usb 7-1: Manufacturer: syz
[  468.010146][   T43] usb 7-1: SerialNumber: syz
[  468.032465][ T5887] ucan 5-1:0.0: probe with driver ucan failed with error -71
[  468.054417][ T5887] usb 5-1: USB disconnect, device number 56
[  468.233531][   T43] f81534a_ctrl 7-1:3.74: failed to set register 0x116: -5
[  468.240839][   T43] f81534a_ctrl 7-1:3.74: failed to enable ports: -5
[  468.247598][   T43] f81534a_ctrl 7-1:3.74: probe with driver f81534a_ctrl failed with error -5
[  468.260570][   T43] usb 7-1: USB disconnect, device number 102
[  468.292546][  T799] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[  468.452328][  T799] usb 9-1: Using ep0 maxpacket: 32
[  468.460263][T12932] fuse: Bad value for 'fd'
[  468.546198][  T799] usb 9-1: unable to get BOS descriptor or descriptor too short
[  468.555204][  T799] usb 9-1: no configurations
[  468.559898][  T799] usb 9-1: can't read configurations, error -22
[  468.875378][T12927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.886303][T12927] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.912772][ T5880] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  468.926760][ T5880] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5)
[  468.938081][ T5880] usb 8-1: 5:0: failed to get current value for ch 1 (-22)
[  468.961006][ T5880] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5)
[  468.972397][   T43] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  468.985957][ T5880] usb 8-1: USB disconnect, device number 86
[  469.032648][ T5887] usb 7-1: new full-speed USB device number 103 using dummy_hcd
[  469.132478][   T43] usb 5-1: Using ep0 maxpacket: 16
[  469.139378][   T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  469.151533][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  469.164784][   T43] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  469.173940][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.181950][   T43] usb 5-1: Product: syz
[  469.186184][   T43] usb 5-1: Manufacturer: syz
[  469.190797][   T43] usb 5-1: SerialNumber: syz
[  469.194461][ T5887] usb 7-1: config 150 has an invalid interface number: 204 but max is 2
[  469.198822][   T43] usb 5-1: config 0 descriptor??
[  469.211077][ T5887] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  469.220916][ T5887] usb 7-1: config 150 has no interface number 0
[  469.227533][   T43] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  469.227554][ T5887] usb 7-1: config 150 interface 204 has no altsetting 0
[  469.236870][   T43] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  469.253175][ T5887] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  469.262397][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.270494][ T5887] usb 7-1: Product: syz
[  469.274761][ T5887] usb 7-1: Manufacturer: syz
[  469.279385][ T5887] usb 7-1: SerialNumber: syz
[  469.394491][  T799] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[  469.499378][ T5887] xr_serial 7-1:150.204: skipping garbage
[  469.506127][ T5887] xr_serial 7-1:150.204: xr_serial converter detected
[  469.556171][  T799] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  469.565428][  T799] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.576815][  T799] usb 9-1: config 0 descriptor??
[  469.586262][  T799] cp210x 9-1:0.0: cp210x converter detected
[  469.699416][T12937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.708479][T12937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.712395][ T5920] usb 8-1: new high-speed USB device number 87 using dummy_hcd
[  469.720265][ T5887] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  469.733305][ T5887] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  469.751321][ T5887] usb 7-1: USB disconnect, device number 103
[  469.772112][ T5887] xr_serial 7-1:150.204: device disconnected
[  469.789994][  T799] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121
[  469.805356][  T799] cp210x 9-1:0.0: querying part number failed
[  469.829770][  T799] usb 9-1: cp210x converter now attached to ttyUSB0
[  469.837415][   T43] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  469.848302][   T43] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  469.862415][ T5920] usb 8-1: device descriptor read/64, error -71
[  469.865780][T12937] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1762'.
[  470.112394][ T5920] usb 8-1: new high-speed USB device number 88 using dummy_hcd
[  470.242427][ T5920] usb 8-1: device descriptor read/64, error -71
[  470.362633][ T5920] usb usb8-port1: attempt power cycle
[  470.461398][   T43] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[  470.672421][   T43] em28xx 5-1:0.0: couldn't setup AC97 register 2
[  470.686784][   T43] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  470.693280][  T799] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[  470.701571][   T43] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  470.710902][T12946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.720377][ T5920] usb 8-1: new high-speed USB device number 89 using dummy_hcd
[  470.721184][T12946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.732900][   T43] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  470.750537][   T43] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  470.764779][ T5920] usb 8-1: device descriptor read/8, error -71
[  470.774369][   T43] usb 5-1: USB disconnect, device number 57
[  470.886026][  T799] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.896374][  T799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  470.907359][  T799] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  470.917425][  T799] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  470.930303][  T799] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  470.939391][  T799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.952069][  T799] usb 7-1: config 0 descriptor??
[  470.961545][  T799] gspca_main: spca561-2.14.0 probing abcd:cdee
[  471.002383][ T5920] usb 8-1: new high-speed USB device number 90 using dummy_hcd
[  471.023008][ T5920] usb 8-1: device descriptor read/8, error -71
[  471.133354][ T5920] usb usb8-port1: unable to enumerate USB device
[  471.162816][  T799] spca561 7-1:0.0: probe with driver spca561 failed with error -22
[  471.171618][  T799] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  471.179558][  T799] usb 7-1: MIDIStreaming interface descriptor not found
[  471.251523][  T799] usb 7-1: USB disconnect, device number 104
[  471.642382][ T5831] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  471.805305][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.816761][ T5831] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.827061][ T5831] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  471.836616][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.851925][ T5831] usb 5-1: config 0 descriptor??
[  472.081472][ T5831] usbhid 5-1:0.0: can't add hid device: -71
[  472.088733][ T5831] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  472.143204][  T799] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[  472.143888][ T5831] usb 5-1: USB disconnect, device number 58
[  472.176800][ T5920] usb 9-1: USB disconnect, device number 58
[  472.223281][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  472.251256][ T5920] cp210x 9-1:0.0: device disconnected
[  472.332589][  T799] usb 7-1: Using ep0 maxpacket: 8
[  472.344261][  T799] usb 7-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  472.363887][  T799] usb 7-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[  472.389863][  T799] usb 7-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  472.400350][  T799] usb 7-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[  472.419609][  T799] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  472.430041][  T799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.438364][  T799] usb 7-1: Product: syz
[  472.442643][  T799] usb 7-1: Manufacturer: syz
[  472.447251][  T799] usb 7-1: SerialNumber: syz
[  472.458050][  T799] hso 7-1:6.0: Can't find BULK OUT endpoint
[  472.722440][ T5831] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  472.842418][ T5920] usb 9-1: new full-speed USB device number 59 using dummy_hcd
[  472.853838][ T5831] usb 5-1: device descriptor read/64, error -71
[  472.902396][  T799] usb 8-1: new full-speed USB device number 91 using dummy_hcd
[  472.972403][ T5920] usb 9-1: device descriptor read/64, error -71
[  473.065016][  T799] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  473.074298][  T799] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.085305][  T799] usb 8-1: config 0 descriptor??
[  473.094017][ T5831] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  473.212421][ T5920] usb 9-1: new full-speed USB device number 60 using dummy_hcd
[  473.232356][ T5831] usb 5-1: device descriptor read/64, error -71
[  473.352376][ T5920] usb 9-1: device descriptor read/64, error -71
[  473.352790][ T5831] usb usb5-port1: attempt power cycle
[  473.462521][ T5920] usb usb9-port1: attempt power cycle
[  473.702387][ T5831] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  473.734852][ T5831] usb 5-1: device descriptor read/8, error -71
[  473.802355][ T5920] usb 9-1: new full-speed USB device number 61 using dummy_hcd
[  473.823076][ T5920] usb 9-1: device descriptor read/8, error -71
[  473.972411][ T5831] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  473.993640][ T5831] usb 5-1: device descriptor read/8, error -71
[  474.062484][ T5920] usb 9-1: new full-speed USB device number 62 using dummy_hcd
[  474.093348][ T5920] usb 9-1: device descriptor read/8, error -71
[  474.102886][ T5831] usb usb5-port1: unable to enumerate USB device
[  474.203140][ T5920] usb usb9-port1: unable to enumerate USB device
[  474.868264][  T798] usb 7-1: USB disconnect, device number 105
[  475.262754][  T798] usb 7-1: new full-speed USB device number 106 using dummy_hcd
[  475.309037][  T799] pegasus 8-1:0.0: setup Pegasus II specific registers
[  475.413931][  T798] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  475.423123][  T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.434311][  T798] usb 7-1: config 0 descriptor??
[  475.863618][   T43] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  476.022393][   T43] usb 5-1: Using ep0 maxpacket: 16
[  476.030157][   T43] usb 5-1: config 0 has an invalid interface number: 48 but max is 0
[  476.040210][   T43] usb 5-1: config 0 has no interface number 0
[  476.046859][   T43] usb 5-1: config 0 interface 48 has no altsetting 0
[  476.057175][   T43] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  476.079624][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.102638][   T43] usb 5-1: Product: syz
[  476.109781][   T43] usb 5-1: Manufacturer: syz
[  476.115143][   T43] usb 5-1: SerialNumber: syz
[  476.123950][   T43] usb 5-1: config 0 descriptor??
[  476.345854][T12981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.354826][T12981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.363748][   T52] Bluetooth: hci5: Unknown advertising packet type: 0x35
[  476.363807][   T52] Bluetooth: hci5: adv larger than maximum supported
[  476.374175][   T52] Bluetooth: hci5: Malformed LE Event: 0x0d
[  476.417238][ T5941] usb 5-1: USB disconnect, device number 63
[  476.466950][  T798] pegasus 7-1:0.0: probe with driver pegasus failed with error -71
[  476.487065][  T798] usb 7-1: USB disconnect, device number 106
[  476.952960][  T799] pegasus 8-1:0.0: can't locate MII phy, using default
[  476.994017][  T799] pegasus 8-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, be:6f:67:17:02:77
[  477.009280][  T799] usb 8-1: USB disconnect, device number 91
[  477.091535][T13006] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1785'.
[  477.453359][  T798] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  477.582403][ T5831] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[  477.590270][ T5941] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[  477.616126][  T798] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  477.632293][  T798] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  477.654342][  T798] usb 5-1: config 0 has no interface number 0
[  477.660529][  T798] usb 5-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  477.676712][  T798] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  477.687058][  T798] usb 5-1: New USB device strings: Mfr=35, Product=0, SerialNumber=0
[  477.695976][  T798] usb 5-1: Manufacturer: syz
[  477.705867][  T798] usb 5-1: config 0 descriptor??
[  477.766994][ T5941] usb 9-1: Using ep0 maxpacket: 16
[  477.772279][ T5831] usb 7-1: Using ep0 maxpacket: 32
[  477.780039][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x2A, changing to 0xA
[  477.791763][ T5941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.803812][ T5941] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.814194][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  477.826195][ T5941] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  477.835370][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  477.845814][ T5941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.853968][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  477.866909][ T5941] usb 9-1: config 0 descriptor??
[  477.879726][ T5831] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  477.888939][  T798] usb 8-1: new high-speed USB device number 92 using dummy_hcd
[  477.896791][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.904958][ T5831] usb 7-1: Product: syz
[  477.910402][ T5831] usb 7-1: Manufacturer: syz
[  477.915271][ T5831] usb 7-1: SerialNumber: syz
[  477.923421][ T5831] usb 7-1: config 0 descriptor??
[  478.052400][  T798] usb 8-1: Using ep0 maxpacket: 16
[  478.060856][  T798] usb 8-1: config 4 has an invalid interface number: 140 but max is 0
[  478.069261][  T798] usb 8-1: config 4 has no interface number 0
[  478.075449][  T798] usb 8-1: config 4 interface 140 has no altsetting 0
[  478.086965][  T798] usb 8-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b
[  478.098701][ T5941] corsair 0003:1B1C:1B02.003A: unknown main item tag 0x0
[  478.105854][  T798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.114453][ T5941] corsair 0003:1B1C:1B02.003A: unknown main item tag 0x0
[  478.121525][ T5941] corsair 0003:1B1C:1B02.003A: unknown main item tag 0x0
[  478.129360][  T798] usb 8-1: Product: syz
[  478.133632][  T798] usb 8-1: Manufacturer: syz
[  478.134181][T13019] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  478.138238][  T798] usb 8-1: SerialNumber: syz
[  478.144733][T13019] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  478.148733][T13019] vhci_hcd vhci_hcd.0: Device attached
[  478.149585][ T5941] corsair 0003:1B1C:1B02.003A: unknown main item tag 0x0
[  478.169821][ T5941] corsair 0003:1B1C:1B02.003A: unknown main item tag 0x0
[  478.184449][  T798] ums-cypress 8-1:4.140: USB Mass Storage device detected
[  478.197266][ T5941] corsair 0003:1B1C:1B02.003A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0
[  478.286810][ T5941] corsair 0003:1B1C:1B02.003A: Failed to get K90 initial state (error -32).
[  478.323491][  T799] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  478.382419][  T799] usb 45-1: new full-speed USB device number 2 using vhci_hcd
[  478.395962][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.405636][ T1101] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  478.413101][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.436825][ T5941] usb 8-1: USB disconnect, device number 92
[  478.546443][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.555413][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  478.580066][T13027] vhci_hcd: connection reset by peer
[  478.582358][ T5831] usb 7-1: USB disconnect, device number 107
[  478.598598][   T12] vhci_hcd vhci_hcd.6: stop threads
[  478.603959][   T12] vhci_hcd vhci_hcd.6: release socket
[  478.611781][   T12] vhci_hcd vhci_hcd.6: disconnect device
[  478.798763][   T43] usb 9-1: USB disconnect, device number 63
[  478.982780][ T5831] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[  479.145247][ T5831] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.156234][ T5831] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  479.169208][ T5831] usb 7-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  479.178334][ T5831] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.189328][ T5831] usb 7-1: config 0 descriptor??
[  479.212363][   T24] usb 8-1: new high-speed USB device number 93 using dummy_hcd
[  479.222580][   T43] usb 9-1: new low-speed USB device number 64 using dummy_hcd
[  479.364332][   T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  479.374655][   T24] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  479.387538][   T43] usb 9-1: Invalid ep0 maxpacket: 64
[  479.396266][   T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  479.405433][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.413527][   T24] usb 8-1: Product: syz
[  479.417724][   T24] usb 8-1: Manufacturer: syz
[  479.422719][   T24] usb 8-1: SerialNumber: syz
[  479.522535][   T43] usb 9-1: new low-speed USB device number 65 using dummy_hcd
[  479.627264][ T5831] input: HID 28bd:0935 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0935.003B/input/input58
[  479.645283][T13049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.662192][T13049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.674045][   T43] usb 9-1: Invalid ep0 maxpacket: 64
[  479.680766][ T5831] uclogic 0003:28BD:0935.003B: input,hidraw0: USB HID vff.fd Mouse [HID 28bd:0935] on usb-dummy_hcd.6-1/input0
[  479.685139][   T24] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22
[  479.705282][   T43] usb usb9-port1: attempt power cycle
[  479.765562][   T24] usb 8-1: USB disconnect, device number 93
[  479.823643][T13052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.841336][T13052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.965707][T13057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.976395][T13057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.062346][   T43] usb 9-1: new low-speed USB device number 66 using dummy_hcd
[  480.084643][   T43] usb 9-1: Invalid ep0 maxpacket: 64
[  480.181778][ T5831] usb 5-1: USB disconnect, device number 64
[  480.212519][   T43] usb 9-1: new low-speed USB device number 67 using dummy_hcd
[  480.234842][   T24] usb 8-1: new full-speed USB device number 94 using dummy_hcd
[  480.245049][   T43] usb 9-1: Invalid ep0 maxpacket: 64
[  480.251314][   T43] usb usb9-port1: unable to enumerate USB device
[  480.405808][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  480.415764][   T24] usb 8-1: unable to read config index 0 descriptor/start: -71
[  480.423561][   T24] usb 8-1: can't read configurations, error -71
[  480.586379][T13066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.595462][T13066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.603438][ T5831] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  480.607590][T13066] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1801'.
[  480.764045][ T5831] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  480.773524][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.786622][ T5831] usb 5-1: config 0 descriptor??
[  480.969786][T13069] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003
[  481.272844][T13074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.285771][T13074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.303238][T13074] pimreg3: entered allmulticast mode
[  481.321707][T13074] 9pnet_fd: Insufficient options for proto=fd
[  481.482357][   T24] usb 8-1: new high-speed USB device number 95 using dummy_hcd
[  481.634494][   T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  481.645531][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.656610][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.666473][   T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  481.679615][   T24] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  481.688841][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.702603][   T24] usb 8-1: config 0 descriptor??
[  482.073778][T13076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.089742][T13076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.115096][   T24] holtek_kbd 0003:04D9:A055.003C: bogus close delimiter
[  482.118213][T13076] kvm: kvm [13075]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  482.133283][   T24] holtek_kbd 0003:04D9:A055.003C: item 0 4 2 10 parsing failed
[  482.141736][   T24] holtek_kbd 0003:04D9:A055.003C: probe with driver holtek_kbd failed with error -22
[  482.141751][T13076] kvm: kvm [13075]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  482.173718][T13084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1805'.
[  482.315640][T13072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.337175][T13072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.384013][ T5941] usb 8-1: USB disconnect, device number 95
[  482.892612][ T5941] usb 9-1: new high-speed USB device number 68 using dummy_hcd
[  482.961822][T13097] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  483.018618][ T5831] pegasus 5-1:0.0: setup Pegasus II specific registers
[  483.043102][ T5941] usb 9-1: device descriptor read/64, error -71
[  483.304876][ T5941] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[  483.452471][ T5941] usb 9-1: device descriptor read/64, error -71
[  483.512870][  T799] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  483.582828][ T5941] usb usb9-port1: attempt power cycle
[  483.926152][ T5941] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[  483.965289][ T5941] usb 9-1: device descriptor read/8, error -71
[  484.143770][T13118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.160264][T13118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.177088][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.189501][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.207467][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.221067][T13118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.222360][ T5941] usb 9-1: new high-speed USB device number 71 using dummy_hcd
[  484.230237][T13118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.253631][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.263074][ T5941] usb 9-1: device descriptor read/8, error -71
[  484.270501][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.281214][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.372653][ T5941] usb usb9-port1: unable to enumerate USB device
[  484.382574][   T24] usb 8-1: new full-speed USB device number 96 using dummy_hcd
[  484.426836][T13121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.437297][T13121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.534139][   T24] usb 8-1: config 99 has too many interfaces: 89, using maximum allowed: 32
[  484.543035][   T24] usb 8-1: config 99 has 1 interface, different from the descriptor's value: 89
[  484.552133][   T24] usb 8-1: config 99 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  484.563869][   T24] usb 8-1: config 99 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  484.577355][   T24] usb 8-1: config 99 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  484.590473][   T24] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  484.599612][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.611219][T13117] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  484.640430][ T5831] pegasus 5-1:0.0: can't locate MII phy, using default
[  484.663421][ T5831] pegasus 5-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, 66:35:0f:b6:28:ce
[  484.677813][ T5831] usb 5-1: USB disconnect, device number 65
[  484.825462][   T24] usbhid 8-1:99.0: can't add hid device: -71
[  484.831701][   T24] usbhid 8-1:99.0: probe with driver usbhid failed with error -71
[  484.842718][   T24] usb 8-1: USB disconnect, device number 96
[  485.023640][T13123] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1817'.
[  485.086376][T13127] delete_channel: no stack
[  485.091088][T13127] delete_channel: no stack
[  485.236001][T13132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.246963][T13132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.315329][T13137] overlay: ./file0 is not a directory
[  485.335743][T13141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.345816][T13141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  485.437860][T13144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1822'.
[  485.662351][  T799] usb 8-1: new full-speed USB device number 97 using dummy_hcd
[  485.802474][ T5941] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  485.825407][  T799] usb 8-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.836234][  T799] usb 8-1: config 0 interface 0 has no altsetting 0
[  485.843923][  T799] usb 8-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  485.853880][  T799] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.872961][  T799] usb 8-1: config 0 descriptor??
[  485.969336][ T5941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  485.975337][T13163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.982114][ T5941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  485.995130][T13163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.002598][ T5941] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  486.015424][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  486.023931][ T5941] usb 5-1: SerialNumber: syz
[  486.062457][ T5831] usb 9-1: new full-speed USB device number 72 using dummy_hcd
[  486.214874][ T5831] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  486.224127][ T5831] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.235739][ T5831] usb 9-1: config 0 descriptor??
[  486.238206][T13150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'.
[  486.264598][T13150] kvm: user requested TSC rate below hardware speed
[  486.274266][T13150] ptrace attach of "./syz-executor exec"[11483] was attempted by "��ԓ�7�E\x09Ż    ������P�                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      *
     @�      
\x09� 
r� \x09   

  \x0a$
   
\x0c\x0d$         \x0c$  ��������\x09$�"[13150]
[  486.346286][T13145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.355460][T13145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  486.379074][  T799] asus 0003:0B05:17E0.003D: hidraw1: USB HID v0.07 Device [HID 0b05:17e0] on usb-dummy_hcd.7-1/input0
[  486.391456][  T799] asus 0003:0B05:17E0.003D: Asus input not registered
[  486.416794][  T799] asus 0003:0B05:17E0.003D: probe with driver asus failed with error -12
[  486.417884][ T5941] usb 5-1: 0:2 : does not exist
[  486.453041][ T5941] usb 5-1: USB disconnect, device number 66
[  486.497778][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  486.959942][T13179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  486.970704][T13179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.026581][T13181] x_tables: unsorted underflow at hook 2
[  487.731810][T13188] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1838'.
[  488.465479][ T5887] usb 8-1: USB disconnect, device number 97
[  488.505306][ T5831] pegasus 9-1:0.0: setup Pegasus II specific registers
[  489.002448][ T5887] usb 8-1: new high-speed USB device number 98 using dummy_hcd
[  489.184396][ T5887] usb 8-1: config index 0 descriptor too short (expected 45, got 36)
[  489.203891][ T5887] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  489.237629][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  489.249364][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  489.270902][ T5887] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  489.287307][ T5887] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  489.297494][ T5887] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.310256][ T5887] usb 8-1: config 0 descriptor??
[  489.316515][T13205] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  489.504053][  T799] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  489.662457][  T799] usb 5-1: Using ep0 maxpacket: 8
[  489.670028][  T799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  489.679943][  T799] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  489.691194][  T799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.702910][  T799] usb 5-1: config 0 descriptor??
[  489.794988][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.802572][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.810037][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.818258][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.826140][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.835154][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.843342][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.850853][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.858330][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.865913][ T5887] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0
[  489.879568][ T5887] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  489.917629][T13215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.934025][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.951645][T13215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.965485][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.009773][T13215] dvmrp1: entered allmulticast mode
[  490.038750][  T799] creative-sb0540 0003:041E:3100.003F: item fetching failed at offset 0/1
[  490.051010][  T799] creative-sb0540 0003:041E:3100.003F: parse failed
[  490.060201][  T799] creative-sb0540 0003:041E:3100.003F: probe with driver creative-sb0540 failed with error -22
[  490.076776][   T30] audit: type=1326 audit(1761085122.328:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13204 comm="syz.7.1844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40e818efc9 code=0x0
[  490.157394][ T5831] pegasus 9-1:0.0: can't locate MII phy, using default
[  490.179057][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.202705][ T5831] pegasus 9-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, 4e:62:78:33:16:db
[  490.216787][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.220680][ T5831] usb 9-1: USB disconnect, device number 72
[  490.235169][ T5887] usb 5-1: USB disconnect, device number 67
[  490.474033][   T30] audit: type=1326 audit(1761085122.728:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13228 comm="syz.6.1851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc3db8efc9 code=0x0
[  491.072519][  T799] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  491.245639][  T799] usb 5-1: unable to get BOS descriptor or descriptor too short
[  491.262886][ T5831] usb 8-1: reset high-speed USB device number 98 using dummy_hcd
[  491.275232][  T799] usb 5-1: config 63 has an invalid interface number: 66 but max is 0
[  491.289464][  T799] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  491.319900][  T799] usb 5-1: config 63 has no interface number 0
[  491.341245][  T799] usb 5-1: config 63 interface 66 has no altsetting 0
[  491.365347][  T799] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  491.376922][  T799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.394282][  T799] usb 5-1: Product: syz
[  491.399859][T13249] netlink: 'syz.6.1857': attribute type 31 has an invalid length.
[  491.401916][  T799] usb 5-1: Manufacturer: syz
[  491.409058][T13249] netlink: 'syz.6.1857': attribute type 1 has an invalid length.
[  491.423920][  T799] usb 5-1: SerialNumber: syz
[  491.436726][T13249] bridge0: port 1(bridge_slave_0) entered learning state
[  491.513768][T13253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.523872][T13253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.647588][T13236] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1854'.
[  491.670775][  T799] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8a31)
[  491.678991][  T799] uvcvideo 5-1:63.66: No valid video chain found.
[  491.690168][  T799] usb 5-1: USB disconnect, device number 68
[  491.693491][ T5887] usb 9-1: new high-speed USB device number 73 using dummy_hcd
[  491.862380][ T5887] usb 9-1: Using ep0 maxpacket: 16
[  491.869245][ T5887] usb 9-1: config 0 has an invalid interface number: 65 but max is 0
[  491.877662][ T5887] usb 9-1: config 0 has no interface number 0
[  491.886859][ T5887] usb 9-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30
[  491.896158][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.904200][ T5887] usb 9-1: Product: syz
[  491.908452][ T5887] usb 9-1: Manufacturer: syz
[  491.913120][ T5887] usb 9-1: SerialNumber: syz
[  491.919854][ T5887] usb 9-1: config 0 descriptor??
[  491.929160][ T5887] gspca_main: STV06xx-2.14.0 probing 046d:0840
[  492.072430][ T5831] usb 8-1: device descriptor read/64, error -71
[  492.094805][T13257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.106023][T13257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.332431][ T5831] usb 8-1: reset high-speed USB device number 98 using dummy_hcd
[  492.345495][ T5831] usb 8-1: device reset changed ep0 maxpacket size!
[  492.355832][ T5941] usb 8-1: USB disconnect, device number 98
[  492.512299][ T5941] usb 8-1: new high-speed USB device number 99 using dummy_hcd
[  492.532413][ T5831] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  492.646799][T13263] input: syz1 as /devices/virtual/input/input60
[  492.672739][ T5941] usb 8-1: Using ep0 maxpacket: 16
[  492.687237][ T5941] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  492.705094][ T5941] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  492.724987][ T5831] usb 5-1: Using ep0 maxpacket: 32
[  492.730692][ T5941] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  492.740540][ T5941] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.752587][ T5831] usb 5-1: config 6 has an invalid interface number: 97 but max is 0
[  492.770268][ T5831] usb 5-1: config 6 has no interface number 0
[  492.777578][ T5941] usb 8-1: config 0 descriptor??
[  492.784289][ T5831] usb 5-1: config 6 interface 97 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64
[  492.797118][T13265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.814636][T13265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.822460][ T5831] usb 5-1: config 6 interface 97 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  492.823346][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.842948][ T5831] usb 5-1: config 6 interface 97 has no altsetting 0
[  492.845137][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.865823][ T5831] usb 5-1: New USB device found, idVendor=0763, idProduct=1011, bcdDevice=d3.83
[  492.875499][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.884385][ T5831] usb 5-1: Product: syz
[  492.888831][ T5831] usb 5-1: Manufacturer: syz
[  492.893517][ T5831] usb 5-1: SerialNumber: syz
[  493.114430][T13268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.124044][T13268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.141867][ T5831] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  493.191774][ T5831] usb 5-1: USB disconnect, device number 69
[  493.213016][ T5941] playstation 0003:054C:0DF2.0040: hidraw1: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0
[  493.257025][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.97/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  493.285154][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  493.288418][ T5941] playstation 0003:054C:0DF2.0040: Failed to retrieve feature with reportID 9: -32
[  493.331305][ T5941] playstation 0003:054C:0DF2.0040: Failed to retrieve DualSense pairing info: -32
[  493.346619][ T5941] playstation 0003:054C:0DF2.0040: Failed to get MAC address from DualSense
[  493.356485][ T5941] playstation 0003:054C:0DF2.0040: Failed to create dualsense.
[  493.376065][ T5941] playstation 0003:054C:0DF2.0040: probe with driver playstation failed with error -32
[  493.531904][T13273] afs: Unknown parameter '00000000000000000003'
[  493.542010][T13273] overlayfs: overlapping lowerdir path
[  493.758882][T13283] netlink: 'syz.4.1867': attribute type 2 has an invalid length.
[  494.002665][   T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  494.152343][   T24] usb 5-1: Using ep0 maxpacket: 32
[  494.170694][   T24] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  494.179560][   T24] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  494.180433][T13298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.194148][   T24] usb 5-1: config 0 has no interface number 0
[  494.205447][   T24] usb 5-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  494.206655][T13298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.220475][   T24] usb 5-1: config 0 interface 196 has no altsetting 0
[  494.236304][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  494.246374][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.254726][   T24] usb 5-1: Product: syz
[  494.258991][   T24] usb 5-1: Manufacturer: syz
[  494.263743][   T24] usb 5-1: SerialNumber: syz
[  494.271484][   T24] usb 5-1: config 0 descriptor??
[  494.447589][ T5887] usb 9-1: USB disconnect, device number 73
[  494.479754][T13284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.493438][T13284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.547943][   T24] ipheth 5-1:0.196: Unable to find endpoints
[  494.562050][   T24] usb 5-1: USB disconnect, device number 70
[  494.615949][T13304] tmpfs: Bad value for 'mpol'
[  494.810842][ T5941] usb 8-1: USB disconnect, device number 99
[  494.874520][ T5887] usb 9-1: new full-speed USB device number 74 using dummy_hcd
[  495.057092][ T5887] usb 9-1: unable to get BOS descriptor or descriptor too short
[  495.072150][T13317] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer.
[  495.091769][ T5887] usb 9-1: not running at top speed; connect to a high speed hub
[  495.103337][ T5887] usb 9-1: config 7 has an invalid interface number: 2 but max is 0
[  495.115140][ T5887] usb 9-1: config 7 has no interface number 0
[  495.132578][ T5887] usb 9-1: config 7 interface 2 has no altsetting 0
[  495.162643][ T5887] usb 9-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=15.2a
[  495.171913][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.188915][ T5887] usb 9-1: Product: syz
[  495.193520][T13322] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1881'.
[  495.193963][ T5887] usb 9-1: Manufacturer: syz
[  495.212883][T13322] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  495.240951][T13322] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1881'.
[  495.250485][ T5887] usb 9-1: SerialNumber: syz
[  495.262624][T13323] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  495.414822][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  495.432419][T13331] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1883'.
[  495.454563][T13331] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1883'.
[  495.500007][T13300] tipc: Started in network mode
[  495.510123][T13300] tipc: Node identity ac14142f, cluster identity 4711
[  495.526565][T13300] tipc: New replicast peer: 0.0.0.0
[  495.538259][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  495.538534][T13300] tipc: Enabled bearer <udp:syz2>, priority 10
[  495.590168][ T5887] gspca_main: sunplus-2.14.0 probing 052b:1803
[  495.598636][ T5887] gspca_sunplus: reg_r err -71
[  495.613791][ T5887] sunplus 9-1:7.2: probe with driver sunplus failed with error -71
[  495.638902][ T5887] usb 9-1: USB disconnect, device number 74
[  495.703514][   T24] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  495.802344][ T5941] usb 8-1: new full-speed USB device number 100 using dummy_hcd
[  495.862621][   T24] usb 5-1: Using ep0 maxpacket: 16
[  495.868613][   T24] usb 5-1: no configurations
[  495.877983][   T24] usb 5-1: can't read configurations, error -22
[  495.955518][ T5941] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  495.965209][ T5941] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.985561][ T5941] usb 8-1: config 0 descriptor??
[  496.012415][   T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  496.172392][   T24] usb 5-1: Using ep0 maxpacket: 16
[  496.183631][   T24] usb 5-1: no configurations
[  496.188286][   T24] usb 5-1: can't read configurations, error -22
[  496.206327][   T24] usb usb5-port1: attempt power cycle
[  496.362343][ T5920] usb 9-1: new high-speed USB device number 75 using dummy_hcd
[  496.379453][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.390240][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.512317][ T5920] usb 9-1: Using ep0 maxpacket: 8
[  496.524433][ T5920] usb 9-1: unable to get BOS descriptor or descriptor too short
[  496.533837][ T5831] tipc: Node number set to 2886997039
[  496.542160][ T5920] usb 9-1: config 9 has an invalid interface number: 33 but max is 0
[  496.553019][ T5920] usb 9-1: config 9 has no interface number 0
[  496.559162][ T5920] usb 9-1: too many endpoints for config 9 interface 33 altsetting 132: 131, using maximum allowed: 30
[  496.570468][   T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  496.578420][ T5920] usb 9-1: config 9 interface 33 altsetting 132 has 0 endpoint descriptors, different from the interface descriptor's value: 131
[  496.592108][ T5920] usb 9-1: config 9 interface 33 has no altsetting 0
[  496.603712][   T24] usb 5-1: Using ep0 maxpacket: 16
[  496.614085][   T24] usb 5-1: no configurations
[  496.618790][   T24] usb 5-1: can't read configurations, error -22
[  496.630976][ T5920] usb 9-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=c5.a8
[  496.640226][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.650804][ T5920] usb 9-1: Product: syz
[  496.655377][ T5920] usb 9-1: Manufacturer: syz
[  496.660001][ T5920] usb 9-1: SerialNumber: syz
[  496.762415][   T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  496.783315][   T24] usb 5-1: Using ep0 maxpacket: 16
[  496.790300][   T24] usb 5-1: no configurations
[  496.795878][   T24] usb 5-1: can't read configurations, error -22
[  496.804398][   T24] usb usb5-port1: unable to enumerate USB device
[  496.898007][ T5920] usb 9-1: USB disconnect, device number 75
[  497.119319][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.143129][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.152021][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.189377][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.219134][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.243722][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.267876][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.284349][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.303617][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.322786][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.352005][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.376280][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.924934][ T5887] usb 9-1: new high-speed USB device number 76 using dummy_hcd
[  498.102413][ T5887] usb 9-1: Using ep0 maxpacket: 16
[  498.114676][ T5887] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  498.142596][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  498.162343][ T5887] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  498.187938][ T5887] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  498.208294][ T5887] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  498.230204][ T5941] pegasus 8-1:0.0: setup Pegasus II specific registers
[  498.239649][ T5887] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  498.249787][ T5887] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  498.257893][ T5887] usb 9-1: Manufacturer: syz
[  498.266162][ T5887] usb 9-1: config 0 descriptor??
[  498.403914][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  498.587036][ T5887] rc_core: IR keymap rc-hauppauge not found
[  498.596620][ T5887] Registered IR keymap rc-empty
[  498.619113][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.630524][T13399] netdevsim0 speed is unknown, defaulting to 1000
[  498.653060][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.683852][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  498.718300][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input62
[  498.737405][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.762721][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.805807][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.842421][  T798] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  498.850306][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.872462][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.903218][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.924138][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.962653][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  498.982847][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  499.009234][ T5887] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  499.023024][  T798] usb 5-1: config 0 has no interfaces?
[  499.044308][  T798] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  499.057361][ T5887] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  499.068275][  T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.083002][ T5887] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  499.091586][  T798] usb 5-1: Product: syz
[  499.102155][  T798] usb 5-1: Manufacturer: syz
[  499.109385][  T798] usb 5-1: SerialNumber: syz
[  499.130841][T13382] netdevsim0 speed is unknown, defaulting to 1000
[  499.134286][  T798] usb 5-1: config 0 descriptor??
[  499.400164][T13399] ubi31: attaching mtd0
[  499.424298][ T5887] usb 5-1: USB disconnect, device number 75
[  499.691373][   T43] usb 9-1: USB disconnect, device number 76
[  499.857291][ T5941] pegasus 8-1:0.0: can't locate MII phy, using default
[  499.893066][ T5941] pegasus 8-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, ee:9c:56:24:d4:e5
[  499.915804][ T5941] usb 8-1: USB disconnect, device number 100
[  500.230415][T13443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.244447][T13443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.972376][ T5941] usb 9-1: new low-speed USB device number 77 using dummy_hcd
[  501.062540][   T24] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  501.127473][T13464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.128676][ T5941] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  501.138624][T13464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.146976][ T5941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.166064][T13464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.175268][ T5941] usb 9-1: config 0 descriptor??
[  501.176558][T13464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.234574][   T24] usb 5-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56
[  501.243821][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.258380][   T24] usb 5-1: config 0 descriptor??
[  501.273257][   T24] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053
[  501.352365][   T43] usb 8-1: new high-speed USB device number 101 using dummy_hcd
[  501.467460][   T24] gspca_zc3xx: reg_w_i err -71
[  501.472565][   T24] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  501.483576][   T24] usb 5-1: USB disconnect, device number 76
[  501.516058][   T43] usb 8-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  501.526247][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.535334][   T43] usb 8-1: Product: syz
[  501.539528][   T43] usb 8-1: Manufacturer: syz
[  501.544325][   T43] usb 8-1: SerialNumber: syz
[  501.551775][   T43] usb 8-1: config 0 descriptor??
[  501.760186][   T43] peak_usb 8-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels)
[  501.769224][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.769760][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.961031][   T43] peak_usb 8-1:0.0 can0: sending command failure: -8
[  501.967966][   T43] peak_usb 8-1:0.0 can0: sending command failure: -8
[  501.977718][   T43] peak_usb 8-1:0.0 can0: sending command failure: -8
[  502.034544][   T43] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -8
[  502.181332][   T10] usb 8-1: USB disconnect, device number 101
[  502.292593][ T5887] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  502.454886][ T5887] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  502.465206][ T5887] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  502.474323][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.505084][ T5887] gspca_main: stv0680-2.14.0 probing 041e:4007
[  502.533179][T13475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.542201][T13475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.595488][ T5941] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  502.605755][ T5941] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  502.616526][ T5941] asix 9-1:0.0: probe with driver asix failed with error -71
[  502.627854][ T5941] usb 9-1: USB disconnect, device number 77
[  502.746811][T13477] loop3: detected capacity change from 0 to 7
[  502.756898][T13477] Dev loop3: unable to read RDB block 7
[  502.763153][T13477]  loop3: unable to read partition table
[  502.769044][T13477] loop3: partition table beyond EOD, truncated
[  502.776015][T13477] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  503.138649][   T24] usb 8-1: new low-speed USB device number 102 using dummy_hcd
[  503.181345][T13484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.196453][T13484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.295612][   T24] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  503.317699][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.351823][   T24] usb 8-1: config 0 descriptor??
[  503.523742][ T5887] stv0680 5-1:4.0: STV(e): camera ping failed!!
[  503.530701][ T5887] stv0680 5-1:4.0: last error: 237,  command = 0x67
[  503.560566][   T24] asix 8-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  503.682536][   T43] usb 9-1: new full-speed USB device number 78 using dummy_hcd
[  503.732666][ T5887] usb 5-1: USB disconnect, device number 77
[  503.836206][   T43] usb 9-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0
[  503.846740][   T43] usb 9-1: config 0 interface 0 has no altsetting 0
[  503.853480][   T43] usb 9-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  503.862637][   T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.873378][   T43] usb 9-1: config 0 descriptor??
[  504.000166][T13500] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 13500 comm: syz.6.1920)
[  504.017087][   T30] audit: type=1800 audit(1761085136.268:17): pid=13500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1920" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=49637 res=0 errno=0
[  504.028814][T13500] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  504.121135][T13507] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  504.131075][T13507] overlayfs: missing 'lowerdir'
[  504.186570][T13509] netlink: 'syz.6.1922': attribute type 27 has an invalid length.
[  504.326037][   T43] input: HID 0458:5015 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5015.0041/input/input63
[  504.374186][T13513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.374775][   T43] input: HID 0458:5015 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5015.0041/input/input64
[  504.433878][T13513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.491708][   T43] input: HID 0458:5015 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5015.0041/input/input65
[  504.614424][   T43] kye 0003:0458:5015.0041: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.8-1/input0
[  504.662328][  T798] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  504.670149][   T43] usb 9-1: USB disconnect, device number 78
[  504.759136][T13517] fido_id[13517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  504.835307][  T798] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  504.846590][  T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.858961][  T798] usb 5-1: config 0 descriptor??
[  505.492501][ T5941] usb 9-1: new full-speed USB device number 79 using dummy_hcd
[  505.586374][T13481] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1916'.
[  505.655227][ T5941] usb 9-1: not running at top speed; connect to a high speed hub
[  505.665591][ T5941] usb 9-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 544, setting to 64
[  505.676550][ T5941] usb 9-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  505.689565][ T5941] usb 9-1: config 1 interface 0 has no altsetting 0
[  505.699221][ T5941] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40
[  505.708379][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.716964][ T5941] usb 9-1: Product: 衯
[  505.721191][ T5941] usb 9-1: Manufacturer: ꕬ珟쀾㵘⟌폔뚐똈㓿ᷮ⚸럜똗镫ꁨ턠傴₀铺➚쓌劙庆尸흱윢㧢尚‐ꆏ窧᧦壊敢Ϧ폈䞹歄附箂꺤鲥ⳤⲫࣛ䥒珢쏐嚨ﳦ译请ﴥ픽컡﯌筤ꖦ嫴ἄ빜⽬䗅ኆ鯡硎匱ꛣ
[  505.746875][ T5941] usb 9-1: SerialNumber:  
[  505.760435][T13525] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  505.776200][T13525] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  506.003908][ T5941] usbhid 9-1:1.0: can't add hid device: -71
[  506.010191][ T5941] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  506.024240][ T5941] usb 9-1: USB disconnect, device number 79
[  506.201768][   T24] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  506.226951][   T24] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  506.238587][   T24] asix 8-1:0.0: probe with driver asix failed with error -71
[  506.259189][   T24] usb 8-1: USB disconnect, device number 102
[  506.295276][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.306139][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.319383][T13539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.332934][T13539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.395862][T13545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.415454][T13545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.418598][T13545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.419408][T13545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.423981][T13546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.424563][T13546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.510539][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.519503][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.527463][ T5941] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[  506.577697][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  506.586068][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  506.820384][T13555] isofs_fill_super: bread failed, dev=nbd7, iso_blknum=16, block=32
[  507.118017][  T798] pegasus 5-1:0.0: setup Pegasus II specific registers
[  507.651997][T13585] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1947'.
[  507.738406][   T30] audit: type=1326 audit(1761085139.988:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.7.1947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40e818efc9 code=0x0
[  507.852907][ T5941] usb 9-1: new high-speed USB device number 81 using dummy_hcd
[  508.012616][ T5941] usb 9-1: Using ep0 maxpacket: 32
[  508.028142][ T5941] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  508.038990][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.048439][ T5941] usb 9-1: Product: syz
[  508.053059][ T5941] usb 9-1: Manufacturer: syz
[  508.057710][ T5941] usb 9-1: SerialNumber: syz
[  508.067464][ T5941] usb 9-1: config 0 descriptor??
[  508.086492][ T5941] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  508.135239][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1949'.
[  508.144485][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1949'.
[  508.153545][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1949'.
[  508.290805][T13602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.302725][T13602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.567552][  T798] pegasus 5-1:0.0: can't locate MII phy, using default
[  508.591735][  T798] pegasus 5-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, ba:e3:b4:bc:bc:f0
[  508.603466][  T798] usb 5-1: USB disconnect, device number 78
[  508.669201][T13604] netlink: 'syz.7.1952': attribute type 6 has an invalid length.
[  508.680143][T13604] netlink: 'syz.7.1952': attribute type 6 has an invalid length.
[  508.698737][T13604] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1952'.
[  509.062055][  T798] usb 8-1: new high-speed USB device number 103 using dummy_hcd
[  509.210472][T13613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.222564][T13613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.257174][  T798] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  509.281460][  T798] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.294069][  T798] usb 8-1: config 0 descriptor??
[  509.328308][T13617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.337744][T13617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.353215][T13617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.367807][T13617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.526712][   T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  509.682059][   T10] usb 5-1: Using ep0 maxpacket: 32
[  509.688865][   T10] usb 5-1: config 0 has an invalid interface number: 182 but max is 0
[  509.697314][   T10] usb 5-1: config 0 has no interface number 0
[  509.709191][   T10] usb 5-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice=3b.fa
[  509.718553][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.726835][   T10] usb 5-1: Product: syz
[  509.731457][   T10] usb 5-1: Manufacturer: syz
[  509.736248][   T10] usb 5-1: SerialNumber: syz
[  509.741038][  T798] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  509.751601][   T10] usb 5-1: config 0 descriptor??
[  509.757531][  T798] [drm:udl_init] *ERROR* Selecting channel failed
[  509.783621][  T798] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2
[  509.792058][  T798] [drm] Initialized udl on minor 2
[  509.802568][  T798] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  509.815328][  T798] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  509.827909][ T5887] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  509.839922][  T798] usb 8-1: USB disconnect, device number 103
[  509.848122][ T5887] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  509.974838][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.986008][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.006190][T13615] [U] 
[  510.009320][T13615] [U] 
[  510.012036][T13615] [U] 
[  510.014733][T13615] [U] 
[  510.018959][T13615] [U] 
[  510.021694][T13615] [U] 
[  510.024404][T13615] [U] 
[  510.027136][T13615] [U] 
[  510.030204][T13615] [U] 
[  510.032948][T13615] [U] 
[  510.035676][T13615] [U] 
[  510.038385][T13615] [U] 
[  510.041385][T13615] [U] 
[  510.044116][T13615] [U] 
[  510.046836][T13615] [U] 
[  510.049553][T13615] [U] 
[  510.053301][T13615] [U] 
[  510.056052][T13615] [U] 
[  510.058770][T13615] [U] 
[  510.061517][T13615] [U] 
[  510.065650][T13615] [U] 
[  510.068505][T13615] [U] 
[  510.071224][T13615] [U] 
[  510.073947][T13615] [U] 
[  510.077275][T13624] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1956'.
[  510.087581][T13615] [U] 
[  510.090373][T13615] [U] �9~�R*CIх���	;)��^ �.k`��툻���w	���j�}�����I�	k����d:
[  510.098469][T13615] [U] �/*����
[  510.101767][T13615] [U] �Y�q���k9�
[  510.105402][T13615] [U] ��.���:l
[  510.108773][T13615] [U] ����h���Ή��\M��M����-��h�SK4��f��Hn0�GhMĖ
[  510.115807][T13615] [U] =<�)`�b�
[  510.119385][T13615] [U] L��V�('K}����MOU��L)��5�N����ks�?��,-�F��(��I�����d�9~�C�>DЊ���U���?!g�}YT}R-e�O�xu0�p�D$�)��{�c3�ہ�79�T�j����7֖\�3]�xtP��|�����IYL�M�U��^�����xu���ac�о%��ќ�C
[  510.137609][T13615] [U] �km���v�a+Mj,бPV��3Y�"e�G���=��tW��=��U9k=ꉬӝI�
[  510.145592][T13615] [U] ���ΰhI(C-!��<	�(\jCg���ܯ��&�<���jI=����Zɇ��7�|�(�
��w<j�D��$T�|�~F=�S�V�?_g>�8���ff�^�Oo
[  510.157229][T13615] [U] <��mה����<\}�D����*���&�"n��~�����%#��+����c�߯;W���Q'���h�b�[j�6-��I3��y�*�ji6.4z���ql�iQ4£f���%��r�x���؞���l
[  510.172204][T13615] [U] d;wû�(�X#֖�S�sV�%�xt���bٖn4�0I�OM��(k��Ƒ���5��q��}z�,���v�9_ϻ��I�1Ԅ$B����aRj_�JiP���A{=��XVW��+�,����Q>��A�cڀ���9�Vu�y$�B��*qRԸ#�9��f��̿�].�E�6K���x�O6J���U�YɇL�
[  510.191831][T13615] [U] vp�0���sm��yU݊�mo�ٕPV���A����Fc'� ��ɺβ_��������f�*qeš�f�y2Ȓ��Ȕ�J�?V���Y
�-¥�~�J�Vx@<�Z-�J1�0��.T���:��S�c�o-dqb]������T^C\;?�bI$m</W�QJ����^�2�q�F}��Q
���+�@�g��IF
[  510.211191][T13615] [U] x,�3y�ujylH���+�jK>)����^Օds���5���l��[��NQ��bN[?�D�P��̽&Bc����8|LY��q
[  510.220491][T13615] [U] ���4����W�㋈���	4
[  510.225099][T13615] [U] {$!�ﳠA�-B
���jl\V�����$G��T�!����a����d�&�ʍ�����ڭ��+]�ѹ�Xᩧ"�)�3���5�9%H��Ы�q��[A���ſW�9	������V����0Az�F�e���#mJ�iJ�(����*�����Uy������!�F�*���m�JߞW�Ky_�[=�Lb�wD��F�5��4y��/T	X&:r��x�)��k�d/��湹?�ާb�Ǎ1�Mv�}#�j��{��A��������n������τPg�{��x;"��Qy�}�K+(����4C�s,_}+��]����%��N�#{��֭�lL��]A�k�yn�L%i�ؿQ;e�j��i�$7"��r�;��ص��ݣ�
[  510.262879][T13615] [U] �ʔډm�����|�[��
[  510.277069][T13615] [U] K0��{�So��PI]��,.rv?�:(�]�F��A������#6�S'�ܷ���|5��T���w
[  510.285426][T13615] [U] ��[�zP������)���]&�b���*)�}�+M�	
[  510.291764][T13615] [U] fp_.�_c.�(B�m�(��D�XׄS�� ��	7-�亃�i(��:sN͑,�Xd�;@��/�y�[F�-�=������ٿ����f	�A��@حX3���Uß>F�Qj���'w8	q�����OŽ�	��B�}��\��]q��{Ct���0��n,��2���Lj+f�>��[P%M�&���1���Dΐ��:��v��O�2sX��4E�J��%�=E���o#�BS�?{;r�؋�	sS�ܫ��zP�
�q���q����"(�E�Um/�w~r�"tu1:w�|�\�1OsXͱ䫎��3�,`0Gp&.K��v��,�����
[  510.322656][T13615] [U] �Rq
[  510.325683][T13615] [U] �]I����yU��VQ;~G�XUݶ�ËYU��*���jU@�ڍ"��5��YF��0z�>J��	0�2�@|��84wࠡ�+��Âա��/����eZ\ �.�;�2)
[  510.337659][T13615] [U] z*8q��?��!���Z��T���J@�!�����w�,|��
[  510.343817][T13615] [U] {0�緀h�"}�T\ہ�1�s�ʊ����ȿ�f=_E	�6�A�֔��'7�F0T_����:�{I�pVo$Z*>�O�f�f�E��?3�Htl?-h����GZ`�q��#�@�lB����S�}��fTYU�,lw��7-��Mo�!�ybݨp�J`��|J��	�b �f'����ʅ�ڴ@������4�ab����d��\�iS�-�$3@B�j��ov��b>�v���gA�H�|��� 9�!�ddId
[  510.368990][T13615] [U] �@�<n%��2pj��K+,� ]2�I-J���dl����i�����o�b��0�%���8�Ϥ$�q�%��
[  510.377571][T13615] [U] �5]�F�F�7�D�����;�>T�ņ%�ى�D����Q�|�9�W�s�^K
[  510.382360][  T799] ------------[ cut here ]------------
[  510.384942][T13615] [U] ��0M>���9K-t��г�%h�2�9aO�*
[  510.384983][T13615] [U] Yh���_�5e�F��j'�0�U��1fJ$
����'!�5��t���[�3�Q+JR�+
[  510.385005][T13615] [U] ��"����4�	�2���\})��ɏ���t��i~܋��
[  510.390710][  T799] faux_driver vkms: [drm] vblank wait timed out on crtc 0
[  510.396260][T13615] [U] ^SȢ�;n�K�"S �n��=�D빆��]��}{��"�;TL�er��yq^���p�5�h�[v
[  510.427257][T13615] [U] 4�"��Ke������8e�2e�o��ڂi"�H凵���7㠥�s�7l�����Y}��k�3���D��J��z�xK�Њ����k��ĂDjrw�<��9c�X���1G��odRq�tkܭ#�#����iL�tn`�,f`�����{p�;]���7Q,����$�i�a�\�i�rY<ב�E���^JJ��ݭ���G���T�'�~�9���ҡw�vGtRK���>
[  510.449531][T13615] [U] 
[  510.452253][T13615] [U] 
[  510.454955][T13615] [U] 
[  510.464659][  T799] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_wait_one_vblank+0x570/0x5b0, CPU#1: kworker/1:2/799
[  510.465738][  T196] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  510.475919][  T799] Modules linked in:
[  510.490486][  T799] CPU: 1 UID: 0 PID: 799 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[  510.500022][  T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  510.510207][  T799] Workqueue: events drm_fb_helper_damage_work
[  510.516374][  T799] RIP: 0010:drm_wait_one_vblank+0x570/0x5b0
[  510.522361][  T799] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 aa 55 e7 fc 4d 8b 2c 24 48 c7 c7 60 41 d4 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 21 c2 44 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9
[  510.544126][  T799] RSP: 0018:ffffc900032f7840 EFLAGS: 00010246
[  510.547157][T13615] [U] 
[  510.551832][  T799] RAX: e3e5a8a94ea6d900 RBX: 1ffff1100491d801 RCX: ffff888024958000
[  510.552944][T13615] [U] 
[  510.561249][  T799] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  510.563798][T13615] [U] 
[  510.571874][  T799] RBP: ffffc900032f7928 R08: ffffc900032f7567 R09: 1ffff9200065eeac
[  510.574442][T13615] [U] 
[  510.582471][  T799] R10: dffffc0000000000 R11: fffff5200065eead R12: ffff8880248e1000
[  510.593075][  T799] R13: ffffffff8be6ea00 R14: 0000000000000000 R15: ffffffff8be88b60
[  510.600199][T13615] [U] 
[  510.601158][  T799] FS:  0000000000000000(0000) GS:ffff888125de4000(0000) knlGS:0000000000000000
[  510.603790][T13615] [U] 
[  510.612730][  T799] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  510.615383][T13615] [U] 
[  510.622114][  T799] CR2: 0000200000005000 CR3: 00000000758d8000 CR4: 00000000003526f0
[  510.624640][T13615] [U] 
[  510.634347][  T799] Call Trace:
[  510.638535][  T799]  <TASK>
[  510.641754][T13615] [U] 
[  510.641797][T13615] [U] 
[  510.641840][T13615] [U] 
[  510.641878][T13615] [U] 
[  510.641986][T13615] [U] 
[  510.642028][T13615] [U] 
[  510.642072][T13615] [U] 
[  510.642114][T13615] [U] 
[  510.642246][T13615] [U] 
[  510.642288][T13615] [U] 
[  510.642332][T13615] [U] 
[  510.642373][T13615] [U] 
[  510.642469][T13615] [U] 
[  510.642509][T13615] [U] 
[  510.642547][T13615] [U] 
[  510.642589][T13615] [U] 
[  510.642627][T13615] [U] 
[  510.642691][T13615] [U] 
[  510.645376][  T799]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  510.648078][T13615] [U] 
[  510.650805][  T799]  ? __pfx_autoremove_wake_function+0x10/0x10
[  510.653425][T13615] [U] 
[  510.656246][  T799]  ? drm_vblank_get+0x150/0x270
[  510.658948][T13615] [U] 
[  510.661651][  T799]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  510.668073][T13615] [U] 
[  510.669690][  T799]  drm_fb_helper_damage_work+0xce/0x6c0
[  510.672393][T13615] [U] 
[  510.672433][T13615] [U] 
[  510.672471][T13615] [U] 
[  510.675132][  T799]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  510.679073][T13615] [U] 
[  510.680491][  T799]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.683178][T13615] [U] 
[  510.683215][T13615] [U] 
[  510.683253][T13615] [U] 
[  510.685891][  T799]  ? process_scheduled_works+0x9ef/0x17b0
[  510.690401][T13615] [U] 
[  510.691438][  T799]  ? process_scheduled_works+0x9ef/0x17b0
[  510.697059][T13615] [U] 
[  510.699705][  T799]  process_scheduled_works+0xae1/0x17b0
[  510.705788][T13615] [U] 
[  510.705831][T13615] [U] 
[  510.707720][T13615] [U] 
[  510.708603][  T799]  ? __pfx_process_scheduled_works+0x10/0x10
[  510.713442][T13615] [U] 
[  510.713481][T13615] [U] 
[  510.716186][  T799]  worker_thread+0x8a0/0xda0
[  510.722425][T13615] [U] 
[  510.781867][T13615] [U] 
[  510.786607][  T799]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  510.788944][T13615] [U] 
[  510.791620][  T799]  ? __kthread_parkme+0x7b/0x200
[  510.794318][T13615] [U] 
[  510.794359][T13615] [U] 
[  510.823673][T13615] [U] 
[  510.825024][  T799]  kthread+0x711/0x8a0
[  510.829904][T13615] [U] 
[  510.832659][  T799]  ? __pfx_worker_thread+0x10/0x10
[  510.835354][T13615] [U] 
[  510.835396][T13615] [U] 
[  510.840378][T13615] [U] 
[  510.843865][  T799]  ? __pfx_kthread+0x10/0x10
[  510.844888][T13615] [U] 
[  510.851399][  T799]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.852697][T13615] [U] 
[  510.855339][  T799]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.858042][T13615] [U] 
[  510.859868][T13615] [U] 
[  510.862678][  T799]  ? __pfx_kthread+0x10/0x10
[  510.865394][T13615] [U] 
[  510.870783][  T799]  ret_from_fork+0x4bc/0x870
[  510.873265][T13615] [U] 
[  510.878508][  T799]  ? __pfx_ret_from_fork+0x10/0x10
[  510.881165][T13615] [U] 
[  510.883822][  T799]  ? __switch_to_asm+0x39/0x70
[  510.911486][  T799]  ? __switch_to_asm+0x33/0x70
[  510.916291][  T799]  ? __pfx_kthread+0x10/0x10
[  510.921083][  T799]  ret_from_fork_asm+0x1a/0x30
[  510.923400][T13615] [U] 
[  510.925899][  T799]  </TASK>
[  510.928592][T13615] [U] 
[  510.928639][T13615] [U] 
[  510.931676][  T799] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  510.931698][  T799] CPU: 1 UID: 0 PID: 799 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[  510.931729][  T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  510.931748][  T799] Workqueue: events drm_fb_helper_damage_work
[  510.931795][  T799] Call Trace:
[  510.931806][  T799]  <TASK>
[  510.931818][  T799]  dump_stack_lvl+0x99/0x250
[  510.931853][  T799]  ? __asan_memcpy+0x40/0x70
[  510.931886][  T799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  510.931918][  T799]  ? __pfx__printk+0x10/0x10
[  510.931975][  T799]  vpanic+0x237/0x6d0
[  510.932013][  T799]  ? __pfx_vpanic+0x10/0x10
[  510.932047][  T799]  ? is_bpf_text_address+0x292/0x2b0
[  510.932071][  T799]  ? is_bpf_text_address+0x26/0x2b0
[  510.932106][  T799]  panic+0xb9/0xc0
[  510.932142][  T799]  ? __pfx_panic+0x10/0x10
[  510.932191][  T799]  ? ret_from_fork_asm+0x1a/0x30
[  510.932233][  T799]  __warn+0x334/0x4c0
[  510.932267][  T799]  ? drm_wait_one_vblank+0x570/0x5b0
[  510.932306][  T799]  ? drm_wait_one_vblank+0x570/0x5b0
[  510.932340][  T799]  report_bug+0x2be/0x4f0
[  510.932381][  T799]  ? drm_wait_one_vblank+0x570/0x5b0
[  510.932416][  T799]  ? drm_wait_one_vblank+0x570/0x5b0
[  510.932451][  T799]  ? drm_wait_one_vblank+0x572/0x5b0
[  510.932485][  T799]  handle_bug+0x84/0x160
[  510.932518][  T799]  exc_invalid_op+0x1a/0x50
[  510.932552][  T799]  asm_exc_invalid_op+0x1a/0x20
[  510.932576][  T799] RIP: 0010:drm_wait_one_vblank+0x570/0x5b0
[  510.932611][  T799] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 aa 55 e7 fc 4d 8b 2c 24 48 c7 c7 60 41 d4 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 21 c2 44 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9
[  510.932628][  T799] RSP: 0018:ffffc900032f7840 EFLAGS: 00010246
[  510.932649][  T799] RAX: e3e5a8a94ea6d900 RBX: 1ffff1100491d801 RCX: ffff888024958000
[  510.932669][  T799] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  510.932685][  T799] RBP: ffffc900032f7928 R08: ffffc900032f7567 R09: 1ffff9200065eeac
[  510.932705][  T799] R10: dffffc0000000000 R11: fffff5200065eead R12: ffff8880248e1000
[  510.932726][  T799] R13: ffffffff8be6ea00 R14: 0000000000000000 R15: ffffffff8be88b60
[  510.932772][  T799]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  510.932808][  T799]  ? __pfx_autoremove_wake_function+0x10/0x10
[  510.932849][  T799]  ? drm_vblank_get+0x150/0x270
[  510.932887][  T799]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  510.932922][  T799]  drm_fb_helper_damage_work+0xce/0x6c0
[  510.932973][  T799]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  510.933016][  T799]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.933042][  T799]  ? process_scheduled_works+0x9ef/0x17b0
[  510.933080][  T799]  ? process_scheduled_works+0x9ef/0x17b0
[  510.933123][  T799]  process_scheduled_works+0xae1/0x17b0
[  510.933200][  T799]  ? __pfx_process_scheduled_works+0x10/0x10
[  510.933263][  T799]  worker_thread+0x8a0/0xda0
[  510.933292][  T799]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  510.933348][  T799]  ? __kthread_parkme+0x7b/0x200
[  510.933396][  T799]  kthread+0x711/0x8a0
[  510.933432][  T799]  ? __pfx_worker_thread+0x10/0x10
[  510.933458][  T799]  ? __pfx_kthread+0x10/0x10
[  510.933493][  T799]  ? _raw_spin_unlock_irq+0x23/0x50
[  510.933520][  T799]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.933548][  T799]  ? __pfx_kthread+0x10/0x10
[  510.933580][  T799]  ret_from_fork+0x4bc/0x870
[  510.933635][  T799]  ? __pfx_ret_from_fork+0x10/0x10
[  510.933682][  T799]  ? __switch_to_asm+0x39/0x70
[  510.933712][  T799]  ? __switch_to_asm+0x33/0x70
[  510.933744][  T799]  ? __pfx_kthread+0x10/0x10
[  510.933777][  T799]  ret_from_fork_asm+0x1a/0x30
[  510.933831][  T799]  </TASK>
[  511.285467][  T799] Kernel Offset: disabled
[  511.289787][  T799] Rebooting in 86400 seconds..