last executing test programs:

19m37.851725375s ago: executing program 3 (id=1838):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x33)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup(r1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
dup3(r0, r2, 0x0)
r3 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)}, {&(0x7f0000000640)="685114cc8fd5340cd1650946", 0xc}], 0x2, 0xffffffff, 0x4)
ioctl$TCFLSH(r0, 0x540b, 0x1)

19m37.845320873s ago: executing program 3 (id=1840):
r0 = timerfd_create(0x7, 0x800)
clock_gettime(0x0, &(0x7f0000000100))
timerfd_settime(r0, 0x3, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b303d0e8b089b0732306c090890e0879b0a0a5de70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

19m37.838084687s ago: executing program 3 (id=1847):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg(r6, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000ec0)="e9b91eff00170000f7ff3300d65c7fca0c2eeede09ae00597c2107cebe25ce9178ea6c89bbd1bcd3f899c73106faac4e4038da4977430cc0e5b79191f9a498876ab656ff606ad8eeec74185f16f258efba3a3b91d923219906b518b73e72e742edc9e40864aadc85dcdb2af19d7694ff6025611e316d4e07d81f081143fdf93013c599aec6096b276a44d0a88dadbb8c8e971817fe9658deef1c0512ae24b2b9ed716eadfc0cf593b9f7b62447798f6eff49c8c34c0430400a2346fe17af96da1712ce2f1e26c201ab", 0xc9}, {&(0x7f0000000d40)="8b120728c90b0b4a530fab46abf402095b65870c2a0ac8f0847a8e8ab1d98f34cdd3a1c838f816c52ca57b8a7efbce", 0x2f}], 0x2}}], 0x1, 0xc000)
recvmsg$unix(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1}, 0x12060)

19m35.981606652s ago: executing program 3 (id=1853):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1], 0x28}}, 0x0)

19m35.761993317s ago: executing program 3 (id=1856):
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r4 = dup(r3)
open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2)
write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8)
mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB])
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1)

19m34.573803596s ago: executing program 3 (id=1858):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x111, 0x0, 0x0, &(0x7f0000000280))
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

19m18.84615901s ago: executing program 32 (id=1858):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x111, 0x0, 0x0, &(0x7f0000000280))
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

8m10.432632443s ago: executing program 1 (id=3866):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe670102030109021200010000"], 0x0)
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x6)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}})
io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
dup2(r8, r4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
eventfd(0xc)

8m7.325195882s ago: executing program 1 (id=3888):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r1, 0x1, 0xffffffff, 0x5fb, {{}, {}, {0x14, 0x19, {0xfffffffe, 0xffff, 0x0, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0)

8m7.167392203s ago: executing program 1 (id=3891):
userfaultfd(0x80001)
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, 0x0)
unshare(0x62040200)
r1 = epoll_create(0x5a8)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x2004})
socket$tipc(0x1e, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff)
r3 = openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$rfkill(0xffffff9c, &(0x7f0000000340), 0x103402, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0)

8m6.000330094s ago: executing program 1 (id=3897):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r2, 0x0, r1, 0x0, 0x46)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c)
r3 = socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0)
r5 = dup(r4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

8m5.550819816s ago: executing program 1 (id=3902):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}}, 0x0)

8m4.967526604s ago: executing program 1 (id=3907):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

8m4.112409352s ago: executing program 33 (id=3907):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

7m45.132635085s ago: executing program 6 (id=3996):
r0 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000005c0)={0x5, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}})

7m44.918493694s ago: executing program 6 (id=3997):
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x8, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x7, 0x7}}}}}}, 0x0)

7m44.4081475s ago: executing program 6 (id=3999):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

7m44.407833466s ago: executing program 6 (id=4000):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r2, 0x0, r1, 0x0, 0x46)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c)
socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0)

7m44.378469775s ago: executing program 6 (id=4001):
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0xffffffff, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x1, 0x6fd8e84b}, 0x3, 0xed}})

7m44.087275237s ago: executing program 6 (id=4005):
setpriority(0x1, 0x0, 0xffffffffffffffff)

7m43.748658772s ago: executing program 34 (id=4005):
setpriority(0x1, 0x0, 0xffffffffffffffff)

8.987980799s ago: executing program 5 (id=6732):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r2 = dup(r1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sync()
sendfile(r2, r0, 0x0, 0x40008)

8.260715572s ago: executing program 5 (id=6734):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0)

8.144784939s ago: executing program 5 (id=6736):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x0, 0x21, 0xcb, {0xcb, 0x5, "204550d712965881d96c04e07d28339d54f00ae802a8dc2249facac0273a5fd9c71060f1599d5832498ec45579593444bf8f5e08cdabf0d0b4777004181304c2fb86720e017bb4d4ead2aec9d7b065c223bb6194549ab8ed5ab8cd066e0e442cf818def242077d9f0e9a1740a44eee4513e3669f26a3bb08f137d957a03084ae2e5406b786b221ca7f5e1390e779f6600983be7f25316f538bc5384e8677591088a4bdfbf671d2f66de78d34d047e70757eae8087bd868d2afb07cda65b1ef909dfbaa3f82a0fda5fe"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@global=@item_012={0x1, 0x1, 0x0, '.'}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x80, 0x1, {0x22, 0xabc}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0x31, 0xf1, "7089726098a78400eddb027727299b4e950b03b2a88b86d387d571a9b0af1ef9fb7969fe5c76fccae5c20761ad53355af98057640d9d799d4c21ed377b7a68239e02e09b7021cb0c5933635a428f726079faad83831849abb0ef2028923efc597c0d3e3a8dc32788700782795a3a07dfa553e1cadbbf18408f65d59b1ec686d28affe9254e34cacd31a3d14c59e8a4af17db15d25b9f3c78697300692688523fc45b71817b053a89e79e58122bc1a9f409c812b14fb91eae64b43a46240a3cbd0a844c4183e7fcbcafaffdb5c5314502b27191398b686e0ab77c684fb1b231422ae1c21804e793e4f2997fda6ef6cba4c6"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xc}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xa6, "1439e716ed159720b8a1d5330ce7717436222a4aee41ac73c21e53ce77dbebf96436f9dd52e8172b271cbaa72388071e84bea28649039d35d3a15bd78269eea3a64e30e9ebf1cd15f60c91c4c2ec1ed603c26e7d962032fde5cf83a0926784f6d17c86f088f9c6d4e48d75199c26fe015830873558844fc3cfe04a8aba2b607cfe852b599f14929ac3aa952a7dcf537d7bd09e9cbe39e3e13566cdd3cbf7a52acbb000a50a68"}, 0x0})
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000740)={0x40, 0x6, 0xdd, {0xdd, 0xb, "0805f9afdf2ec65945e309af2b4cf5cc1f7de9c5b06822115da749645a1602970d0d005cf7ac3be0fd8ff9832411775b819c468e3e24389622786a578cfe32226911ca318d9ebf1425e1d46393c8d23d61b387fb251092a06d555e1641bf68ca92164490a85c452b709fd84f3419eeb5190349f7c86120e199b418b8d69061d17bb01ba5258a31e9593ede5143df64a78829d2ee1815b05d34624beadb71432a6f40be80b615ad7b00a7caa797b0d41763c9831602fa25aff7b3e61ab05219c61eb8b35dd5c92721fb8a274ac7b25d72753ca731d3cbf83cbec6e2"}}, &(0x7f0000000840)={0x0, 0x3, 0x75, @string={0x75, 0x3, "772a46c40e7016e0fedba4ac678ab4d098d0e1126c13746be9bbf0ca8ef1f6f0d8e74b9be917ea73c212f7b863a8fc7aafb06ecc458bf48486591cf1c518628decd81ebef9bd50948593ca73ae4957ae0ad02b532a6f8827d961c6f36176fa8e87a8b8003561ad3fb4a6360cddd501cf573cb3"}}, &(0x7f00000008c0)={0x0, 0xf, 0x85, {0x5, 0xf, 0x85, 0x5, [@generic={0x3a, 0x10, 0xb, "7eba9f5257c018c0e8fdb0777118cc94d7df9ac778e6c8303ac3c922421b5e3fbc12b48afd90be1165881fe2f2e59fee2e14b0944b9065"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "aae3f4f6414cd3681895e404dbaf33e9"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "54810c53a6cc57cb4ca119e7403200a7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xa4, 0xa, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "59e295d317b54407830a5445ad52e4db"}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x80, 0x6, 0x1, "f727b984", "2f89c43f"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x10, 0x1, 0x6, 0x7f, 0xc, 0x1}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a40)={0xc0, 0x17, 0x98, "51ec9255cf694c91c27b5b51424bd91d3b1d7181e2f95a58c1d572e2976feca8c7d5dd746c1bc0591cc64070b6189350d08ccee349fbaa974d49719d20517ec15f7d1d03f0f5db733abc57d27c2055aac848f978aa36525a39c674a8ef643d3d50354ee899ad7df27e1b8be43a5732ea8a2ac8095c6cb181a12dd242b5cbd9727aefa98eb9c9d752fbd33528fad6344941b64d0b0cbcaabe"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x100, 0x41}}, &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "081c"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @random="766e45c27d08"}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @random="171e455679c2"}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "a6e3"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x18}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x12)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000005c0)={'vcan0\x00'})
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}], 0x2)
socket$qrtr(0x2a, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000440)={r6, 0x0, 0x0, 0x5, 0xa, 0x5, 0x1, 0x7fffffff, 0x1, 0x408001, 0x8000006, 0x6})
ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
socket$igmp6(0xa, 0x3, 0x2)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0xfbfe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

8.018731986s ago: executing program 2 (id=6737):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000100)=0x3ff)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r2 = accept(r1, 0x0, 0x0)
r3 = socket(0x2b, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d00)="47fcffeec2778f3684a89ca324f2ec683cf9a36e9c218d0a", 0x18}], 0x1}, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5)
syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0)

7.160967125s ago: executing program 2 (id=6741):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x9}, 0x8)

7.135969599s ago: executing program 2 (id=6742):
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/18, 0x12}, {0x0}], 0x2)

6.712758894s ago: executing program 7 (id=6743):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
io_uring_setup(0x6c27, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0)
close(r0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_route(0x10, 0x3, 0x0)

6.555833211s ago: executing program 2 (id=6744):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x6a040000)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x14, &(0x7f0000002400)={[{}, {0x6, 0x4e00, "4a9d6571c163"}, {}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
chdir(&(0x7f0000000100)='./file0/../file0/file0\x00')
syz_fuse_handle_req(r1, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x6, 0x0, {0x5, 0x0, 0x10007, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0x4000, 0x10000, 0x0, r2, 0x734, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
setrlimit(0x7, &(0x7f0000000400))
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff)

6.060630592s ago: executing program 4 (id=6746):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sync()
sendfile(r2, r0, 0x0, 0x40008)
r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4)
ftruncate(r3, 0x7000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
r4 = dup(r3)
preadv2(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0)

5.209028884s ago: executing program 7 (id=6748):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce)

5.207367639s ago: executing program 4 (id=6749):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x48c0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @remote}, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/53}]}, 0x3ff}, {{&(0x7f00000001c0)=@tipc=@id, 0x0, &(0x7f0000000940)=[{&(0x7f0000000280)=""/41}, {&(0x7f0000000400)=""/160}, {&(0x7f0000000340)=""/62}, {&(0x7f00000004c0)=""/73}, {&(0x7f0000000600)=""/201}, {&(0x7f0000000540)=""/15}, {&(0x7f0000000580)=""/1}, {&(0x7f0000000700)=""/189}, {&(0x7f00000007c0)=""/168}, {&(0x7f0000000880)=""/145}], 0x0, &(0x7f0000000a00)=""/146}, 0x4}, {{&(0x7f0000000ac0)=@isdn, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/26}, {&(0x7f0000000b80)=""/232}, {&(0x7f0000000c80)=""/88}, {&(0x7f0000000d00)=""/46}, {&(0x7f0000000d40)=""/224}, {&(0x7f0000000e40)=""/111}], 0x0, &(0x7f0000000f40)=""/168}}], 0xde0fddea64781a, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)

5.018687001s ago: executing program 7 (id=6750):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r3 = accept$alg(r2, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6002adf700303a00fe880f00000000001000000000004001ff020000000000000000340000000001020090780000000060fd906300093b00fe8000000000000000000000000000bb00000000000000000000ffffac1414aa1571d2fd64a841e792d1885274454b3ba4bbd7a5ff514343f38cb93467cd31e65439ae75ab8381651a325262a7a96161c93d8d9a998b9cd53c5cb0ee4f9f"], 0x0)
sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0)
write$binfmt_script(r3, &(0x7f0000000600), 0xfec8)
recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

4.9215627s ago: executing program 2 (id=6751):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000240))
r1 = io_uring_setup(0x2e32, 0x0)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0xc0000000, 0x0, 0x0, 0x6}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x80, 0x7ffffffe, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0xffffffff}]})
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000280)=0x14)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60)
ioctl$IMDELTIMER(r2, 0x80044941, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9f, 0xe, 0x5b, 0x40, 0x1235, 0x18, 0xf0ee, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa7, 0xdd, 0x2d}}]}}]}}, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
r8 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x2100)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f00000005c0)={0x0, 0x0})
ioctl$MON_IOCG_STATS(r8, 0x80089203, &(0x7f0000000080))
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

4.71199827s ago: executing program 5 (id=6752):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000100)=0x3ff)
sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000209, 0xa, 0x0, 0x5}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r2 = accept(r1, 0x0, 0x0)
r3 = socket(0x2b, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d00)="47fcffeec2778f3684a89ca324f2ec683cf9a36e9c218d0a", 0x18}], 0x1}, 0x10)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x5)
syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0)

4.209010438s ago: executing program 4 (id=6754):
pipe(&(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00')
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000", @ANYRES8=r0], 0x7c}}, 0x0)

4.037566769s ago: executing program 4 (id=6755):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x9}, 0x8)

4.030300148s ago: executing program 2 (id=6756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

3.866902782s ago: executing program 4 (id=6757):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000180)=0x8000000000000001)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x80010, 0xffffffffffffffff, 0x57c68000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000009800)="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", 0x2000, 0x0)
fsync(r6)
ftruncate(r3, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r7, &(0x7f0000000200)=[{0x0}], 0x1)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r8, 0x401c5504, 0x0)
shutdown(r7, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0)
semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f00000000c0)=""/170)

3.280092402s ago: executing program 7 (id=6758):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a01040000000000000000"], 0xf8}}, 0x0)

3.152888389s ago: executing program 7 (id=6759):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timer_create(0x0, 0x0, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x0, 0x3}, 0x20)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000", @ANYBLOB="eeccf8f6d36773134e699d6103481385087268e81850a20ba44f17dbaee88b9da4b72626423b144ef1c8a341fadac302237c8dd8a4e7461399eef91dea7a568282e68e36dd9b7ae8d9abfe8a41db5778c284ea820b7e49d8d1dc0fb0eda6c1f50aa9fe5ebfb5cb023d61fa890d54f4704767d1b18ea41a09dc8acc2a1fbf0c7b31318307e19fdc7e87fa78e88c7c8bee5e710e2d19bbf3a3652aef5aefab0602d49f076c9b69258c586bc58fa6be6b0d6d43535ab0626d6c4d9070fa6aa60a9d25ba0f833f4545b7ed45c3b8fa", @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"], 0xfc}}, 0x4000000)
connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)

3.06204193s ago: executing program 0 (id=6760):
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0xac, 0x30, 0x100, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x2c, 0x18, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_bpf={0x68, 0x19, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x1ff, 0x20000000, 0x2b}}]}, {0x1c, 0x6, "ff946eacfee2d520c3f6f487fb8864be623c000000000000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x844}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, 0x0, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0)
fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0)
write$tcp_mem(r4, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48)

2.240957731s ago: executing program 5 (id=6761):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gretap0\x00', 0x0})
socket$kcm(0x10, 0x3, 0x0)
unshare(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = io_uring_setup(0x1f9, &(0x7f0000002280)={0x0, 0x11ab, 0x40, 0x1, 0xa2})
io_uring_setup(0x2ad3, &(0x7f0000002300)={0x0, 0xd4a6, 0x80, 0x0, 0x39f, 0x0, r3})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e})

2.006126531s ago: executing program 7 (id=6762):
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0xfffffe71)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff)

907.936807ms ago: executing program 0 (id=6763):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x9dece93493136c35, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x10, 0x7}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x41)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c000100", @ANYRES32=r1], 0xb4}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

853.899966ms ago: executing program 0 (id=6764):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x14, &(0x7f0000000d00)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x7f, &(0x7f0000000300)=""/127, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000301010100000000000000000a0000030c0019800800020017000000300002802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4851}, 0x0)

672.575571ms ago: executing program 4 (id=6765):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004014}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x68}}, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

384.013504ms ago: executing program 0 (id=6766):
pipe(&(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00')
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000000006", @ANYRES8=r0], 0x7c}}, 0x0)

154.645958ms ago: executing program 0 (id=6767):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x9}, 0x8)

88.962683ms ago: executing program 5 (id=6768):
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
chdir(0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

0s ago: executing program 0 (id=6769):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000003c0)="a750d2c528509c8fa1904611e7862e4eabe5fa8708efa91147da8ff1ed4366f5aeeba21c19e3e363aa674b8dd7cae3e47970"}, 0x20)
shutdown(r5, 0x1)
r7 = signalfd4(r2, &(0x7f0000000340)={[0x6]}, 0x8, 0x80000)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, 0x0, &(0x7f0000000480))
recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12020)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r10, 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9)

kernel console output (not intermixed with test programs):

 USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.799587][ T7171] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1624.811496][ T7171] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1624.823400][ T7171] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1624.830928][ T7171] usb 5-1: media controller created
[ 1624.856118][ T7171] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1624.921788][T26295] ptrace attach of "./syz-executor exec"[20624] was attempted by "./syz-executor exec"[26295]
[ 1625.030562][ T7171] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1625.253105][   T43] savu 0003:1E7D:2D5A.0029: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[ 1625.317815][ T7171] usb 5-1: USB disconnect, device number 111
[ 1625.776243][ T9749] usb 6-1: USB disconnect, device number 74
[ 1626.002410][T26310] netlink: 'syz.4.5859': attribute type 27 has an invalid length.
[ 1626.460836][T26316] tipc: Started in network mode
[ 1626.472416][T26316] tipc: Node identity 66824d6355b1, cluster identity 4711
[ 1626.531530][T26316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1626.624405][T26317] syzkaller0: entered promiscuous mode
[ 1626.630315][T26317] syzkaller0: entered allmulticast mode
[ 1626.666912][T26316] tipc: Resetting bearer <eth:syzkaller0>
[ 1626.703804][T26315] tipc: Resetting bearer <eth:syzkaller0>
[ 1626.805912][T26315] tipc: Disabling bearer <eth:syzkaller0>
[ 1627.016899][T26326] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5866'.
[ 1627.269662][T18801] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1627.277705][T26337] ptrace attach of "./syz-executor exec"[20624] was attempted by "./syz-executor exec"[26337]
[ 1627.391454][   T43] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1627.429659][T18801] usb 5-1: Using ep0 maxpacket: 8
[ 1627.453155][T18801] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1627.468333][T18801] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1627.480010][T18801] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1627.492731][T18801] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1627.504275][T18801] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1627.520685][T18801] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1627.528522][T18801] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1627.541155][T18801] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1627.550030][   T43] usb 3-1: Using ep0 maxpacket: 8
[ 1627.554062][T18801] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1627.570404][T18801] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1627.574112][   T43] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1627.582812][T18801] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1627.597030][T18801] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1627.608539][T18801] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1627.609465][   T43] usb 3-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30
[ 1627.645768][   T43] usb 3-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[ 1627.646356][T18801] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1627.658950][   T43] usb 3-1: config 4 interface 0 has no altsetting 0
[ 1627.678835][   T43] usb 3-1: string descriptor 0 read error: -22
[ 1627.865091][   T43] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1627.877558][T18801] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1627.889570][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1627.899046][T18801] usb 5-1: string descriptor 0 read error: -22
[ 1627.906249][T18801] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1627.908046][   T43] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1627.924509][T18801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1627.936086][   T43] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1627.993676][T18801] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1627.993733][   T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1628.018518][   T43] usb 3-1: media controller created
[ 1628.039199][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1628.109211][   T43] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1628.125027][T26348] netlink: 'syz.7.5873': attribute type 6 has an invalid length.
[ 1628.133327][T26348] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.5873'.
[ 1628.192810][T18801] usb 5-1: USB disconnect, device number 112
[ 1628.239077][   T43] usb 3-1: USB disconnect, device number 104
[ 1628.547955][T26358] netlink: 'syz.7.5876': attribute type 27 has an invalid length.
[ 1628.573775][T26360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5878'.
[ 1628.811242][T26364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5879'.
[ 1629.936999][T26383] ptrace attach of "./syz-executor exec"[17096] was attempted by "./syz-executor exec"[26383]
[ 1630.311639][T26391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5887'.
[ 1630.469737][T26395] tipc: Started in network mode
[ 1630.474745][T26395] tipc: Node identity aa9528ab029c, cluster identity 4711
[ 1630.484053][T26395] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1630.493115][T26395] syzkaller0: entered promiscuous mode
[ 1630.499028][T26395] syzkaller0: entered allmulticast mode
[ 1630.517154][T26395] tipc: Resetting bearer <eth:syzkaller0>
[ 1630.542448][T26394] tipc: Resetting bearer <eth:syzkaller0>
[ 1630.588037][T26394] tipc: Disabling bearer <eth:syzkaller0>
[ 1630.719554][ T7171] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1631.029557][ T7171] usb 5-1: Using ep0 maxpacket: 8
[ 1631.047080][ T7171] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1631.099624][  T975] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1631.108879][ T7171] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[ 1631.208469][ T7171] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1631.259646][  T975] usb 1-1: Using ep0 maxpacket: 32
[ 1631.269273][  T975] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1631.278790][  T975] usb 1-1: config 0 has no interface number 0
[ 1631.287486][  T975] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1631.306181][  T975] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1631.318050][ T7171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1631.507420][  T975] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1631.546393][ T7171] usb 5-1: Product: syz
[ 1631.567686][ T7171] usb 5-1: Manufacturer: syz
[ 1631.574051][ T7171] usb 5-1: SerialNumber: syz
[ 1631.582497][  T975] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1631.601541][  T975] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1631.730008][  T975] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1631.740712][  T975] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1631.802815][ T7171] cdc_ncm 5-1:1.0: bind() failure
[ 1631.809831][ T7171] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 1631.827792][  T975] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[ 1631.827946][ T7171] cdc_ncm 5-1:1.1: bind() failure
[ 1631.904157][ T7171] usb 5-1: USB disconnect, device number 113
[ 1632.028382][  T975] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1632.131298][T26428] ptrace attach of "./syz-executor exec"[23861] was attempted by "./syz-executor exec"[26428]
[ 1632.206460][  T975] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1632.281338][  T975] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1632.304416][T26434] input: syz0 as /devices/virtual/input/input122
[ 1632.366771][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.415940][T26437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1632.445840][T26437] syzkaller0: entered promiscuous mode
[ 1632.467984][  T975] usb 1-1: Product: syz
[ 1632.489689][T26437] syzkaller0: entered allmulticast mode
[ 1632.550418][  T975] usb 1-1: Manufacturer: syz
[ 1632.645021][T26437] tipc: Resetting bearer <eth:syzkaller0>
[ 1632.645049][  T975] usb 1-1: SerialNumber: syz
[ 1632.668729][T26436] tipc: Resetting bearer <eth:syzkaller0>
[ 1632.683927][  T975] usb 1-1: config 0 descriptor??
[ 1632.696132][T26436] tipc: Disabling bearer <eth:syzkaller0>
[ 1632.769806][T26403] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1632.779894][T26403] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1632.788514][  T975] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1632.808123][  T975] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1632.873648][  T975] scsi host1: microtekX6
[ 1633.319850][ T7171] usb 6-1: new full-speed USB device number 75 using dummy_hcd
[ 1633.717980][ T7171] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1633.738506][ T7171] usb 6-1: config 0 has no interfaces?
[ 1634.009610][ T7171] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1634.020904][   T43] usb 1-1: USB disconnect, device number 91
[ 1634.042808][ T7171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1634.173788][ T7171] usb 6-1: Product: syz
[ 1634.177957][ T7171] usb 6-1: Manufacturer: syz
[ 1634.192981][ T7171] usb 6-1: SerialNumber: syz
[ 1634.219049][ T7171] usb 6-1: config 0 descriptor??
[ 1634.766412][T26224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1634.897356][T26224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1634.906726][T26224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1634.928436][T26224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1634.938512][T26224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1635.332309][  T203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.436148][  T203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.800820][  T203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1636.019189][ T9749] usb 6-1: USB disconnect, device number 75
[ 1636.028713][  T203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1636.088062][T26478] chnl_net:caif_netlink_parms(): no params data found
[ 1636.125172][T26492] input: syz0 as /devices/virtual/input/input123
[ 1636.447045][T26478] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1636.479704][T26478] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1636.486922][T26478] bridge_slave_0: entered allmulticast mode
[ 1636.493877][T26478] bridge_slave_0: entered promiscuous mode
[ 1636.501734][T26478] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1636.508870][T26478] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1636.516495][T26478] bridge_slave_1: entered allmulticast mode
[ 1636.523928][T26478] bridge_slave_1: entered promiscuous mode
[ 1636.602739][T26478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1636.622362][T26478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1636.654520][T26510] fuse: Bad value for 'group_id'
[ 1636.659638][T26510] fuse: Bad value for 'group_id'
[ 1636.677400][T26512] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1636.732658][T26478] team0: Port device team_slave_0 added
[ 1636.905196][  T203] erspan0 (unregistering): left allmulticast mode
[ 1636.999630][T26224] Bluetooth: hci2: command tx timeout
[ 1636.999635][ T9749] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1637.180448][  T975] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1637.210412][ T9749] usb 3-1: Using ep0 maxpacket: 8
[ 1637.228955][ T9749] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1637.238304][ T9749] usb 3-1: config 4 interface 0 has no altsetting 0
[ 1637.238320][  T203] bridge0 (unregistering): left allmulticast mode
[ 1637.312941][ T9749] usb 3-1: string descriptor 0 read error: -22
[ 1637.324561][ T9749] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1637.343326][ T9749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.357334][ T9749] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1637.390310][  T975] usb 6-1: config 0 has no interfaces?
[ 1637.404262][ T9749] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1637.424264][ T9749] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1637.438086][ T9749] usb 3-1: media controller created
[ 1637.445971][  T975] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1637.478881][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.494985][  T975] usb 6-1: Product: syz
[ 1637.499181][  T975] usb 6-1: Manufacturer: syz
[ 1637.524366][  T203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1637.537834][ T9749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1637.546253][  T975] usb 6-1: SerialNumber: syz
[ 1637.546767][  T203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1637.563702][  T975] usb 6-1: config 0 descriptor??
[ 1637.568159][T26514] usb 3-1: dvb_usb_au6610: wlen=0, aborting
[ 1637.584954][  T203] bond0 (unregistering): Released all slaves
[ 1637.618602][  T203] bond1 (unregistering): Released all slaves
[ 1637.728811][T26514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1637.737553][T26514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1637.805352][  T203] bond2 (unregistering): (slave veth7): Releasing active interface
[ 1637.814298][  T203] vlan2: entered promiscuous mode
[ 1637.839647][  T203] bond2 (unregistering): (slave vlan2): Releasing active interface
[ 1637.851557][  T203] bond2 (unregistering): Released all slaves
[ 1637.952813][  T203] bond3 (unregistering): Released all slaves
[ 1638.041866][  T203] bond4 (unregistering): (slave veth9): Releasing active interface
[ 1638.051842][  T203] bond4 (unregistering): Released all slaves
[ 1638.132967][  T203] bond5 (unregistering): (slave veth11): Releasing active interface
[ 1638.142695][  T203] bond5 (unregistering): Released all slaves
[ 1638.158623][T26478] team0: Port device team_slave_1 added
[ 1638.217844][T26478] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1638.229139][T26478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1638.297238][T26478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1638.311677][  T203] tipc: Left network mode
[ 1638.312767][T26478] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1638.323437][T26478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1638.356643][T26478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1638.422162][   T30] audit: type=1326 audit(1752276489.331:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26534 comm="syz.7.5928" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91f798e929 code=0x0
[ 1638.524557][T26478] hsr_slave_0: entered promiscuous mode
[ 1638.533388][T26478] hsr_slave_1: entered promiscuous mode
[ 1638.634318][T26543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1638.643433][T26543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1638.653870][T26543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5929'.
[ 1638.662845][T26543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5929'.
[ 1638.714880][ T9749] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1638.801260][  T203] hsr_slave_0: left promiscuous mode
[ 1638.816559][  T203] hsr_slave_1: left promiscuous mode
[ 1638.824173][  T203] batman_adv: batadv0: Interface deactivated: dummy0
[ 1638.832403][  T203] batman_adv: batadv0: Removing interface: dummy0
[ 1638.922187][  T203] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1638.931581][  T203] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1638.942000][  T203] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1639.034979][  T203] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1639.060464][T26224] Bluetooth: hci2: command tx timeout
[ 1639.223609][  T203] veth1_macvtap: left promiscuous mode
[ 1639.236603][  T203] veth0_macvtap: left promiscuous mode
[ 1639.243162][  T203] veth1_vlan: left promiscuous mode
[ 1639.248695][  T203] veth0_vlan: left promiscuous mode
[ 1639.427865][T26553] fuse: Bad value for 'group_id'
[ 1639.434794][T26553] fuse: Bad value for 'group_id'
[ 1639.913851][T23991] usb 6-1: USB disconnect, device number 76
[ 1640.094432][ T5890] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1640.134413][T26563] netlink: 'syz.5.5936': attribute type 1 has an invalid length.
[ 1640.267869][ T5890] usb 5-1: config 0 has an invalid interface number: 101 but max is 0
[ 1640.276209][ T5890] usb 5-1: config 0 has no interface number 0
[ 1640.294699][ T5890] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14
[ 1640.304836][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1640.315087][ T5890] usb 5-1: Product: syz
[ 1640.438634][ T5890] usb 5-1: Manufacturer: syz
[ 1640.443393][ T5890] usb 5-1: SerialNumber: syz
[ 1640.450563][ T5890] usb 5-1: config 0 descriptor??
[ 1640.464857][ T5890] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623
[ 1640.671015][ T5890] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[ 1640.681687][ T5890] gspca_pac7302 5-1:0.101: probe with driver gspca_pac7302 failed with error -71
[ 1640.694727][ T5890] usb 5-1: USB disconnect, device number 114
[ 1640.880076][T26563] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[ 1640.900642][T26565] vlan2: entered allmulticast mode
[ 1640.914127][T26565] veth1: entered allmulticast mode
[ 1641.142416][T26224] Bluetooth: hci2: command tx timeout
[ 1641.429393][T26478] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1641.440835][T26478] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1641.452281][T26478] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1641.464493][T26478] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1641.557135][T26478] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1641.592440][T26478] 8021q: adding VLAN 0 to HW filter on device team0
[ 1641.607076][T11314] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1641.614197][T11314] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1641.620815][T23991] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1641.645888][T11314] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1641.652989][T11314] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1641.780733][T23991] usb 6-1: Using ep0 maxpacket: 8
[ 1641.789023][T23991] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1641.804820][T23991] usb 6-1: config 0 has no interface number 0
[ 1641.812200][T23991] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1641.824536][T23991] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1641.837132][T23991] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1641.851122][T23991] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1641.905748][T23991] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1641.963835][T23991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1642.054764][T23991] usb 6-1: config 0 descriptor??
[ 1642.076000][T23991] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1642.125095][T26478] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1642.199127][T26478] veth0_vlan: entered promiscuous mode
[ 1642.208599][T26478] veth1_vlan: entered promiscuous mode
[ 1642.268363][T26478] veth0_macvtap: entered promiscuous mode
[ 1642.288971][  T975] usb 6-1: USB disconnect, device number 77
[ 1642.297997][  T975] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1642.324245][T26478] veth1_macvtap: entered promiscuous mode
[ 1642.356389][T26478] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1642.379380][T26478] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1642.403820][T26478] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1642.417061][T26478] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1642.426751][T26478] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1642.435745][T26478] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1642.492789][T26604] fuse: Bad value for 'fd'
[ 1642.503365][T26602] netlink: 'syz.2.5946': attribute type 1 has an invalid length.
[ 1642.511891][T26605] input: syz0 as /devices/virtual/input/input124
[ 1642.552058][T26602] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1642.682553][T26610] bond1: (slave veth3): Enslaving as an active interface with a down link
[ 1642.719124][T26602] vlan2: entered allmulticast mode
[ 1642.725216][T26602] veth1: entered promiscuous mode
[ 1642.733892][T26602] veth1: left promiscuous mode
[ 1642.743737][T26602] bond1: (slave vlan2): making interface the new active one
[ 1642.765749][T26602] veth1: entered promiscuous mode
[ 1642.774204][T26602] vlan2: entered promiscuous mode
[ 1642.782460][T26602] bond1: (slave vlan2): Enslaving as an active interface with an up link
[ 1642.815731][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1642.823707][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1642.933366][  T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1642.942203][  T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1643.232635][T26224] Bluetooth: hci2: command tx timeout
[ 1643.374550][T26620] binder: BINDER_SET_CONTEXT_MGR already set
[ 1643.380974][T26620] binder: 26619:26620 ioctl 4018620d 200000000280 returned -16
[ 1643.391185][T26620] binder: 26619:26620 ioctl c0306201 200000000240 returned -11
[ 1644.135765][T26642] netlink: 'syz.0.5958': attribute type 1 has an invalid length.
[ 1644.404191][T26645] vlan2: entered allmulticast mode
[ 1644.409435][T26645] veth1: entered allmulticast mode
[ 1644.950433][T26656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5961'.
[ 1645.559623][T23991] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1645.627113][T26672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5968'.
[ 1645.638896][T26672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5968'.
[ 1645.652675][   T30] audit: type=1400 audit(1752276496.571:3964): avc:  denied  { read } for  pid=26671 comm="syz.4.5968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1645.715218][T23991] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1645.740458][T23991] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1645.744842][T26677] fuse: Invalid rootmode
[ 1645.773554][T23991] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1645.832337][T23991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1645.845344][T23991] usb 1-1: config 0 descriptor??
[ 1645.853602][T23991] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1646.232799][T26689] vivid-000: disconnect
[ 1646.684980][T26679] vivid-000: reconnect
[ 1647.359615][T23991] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1647.413136][T26709] netlink: 'syz.7.5978': attribute type 6 has an invalid length.
[ 1647.426074][T26709] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.5978'.
[ 1647.522551][T23991] usb 6-1: Using ep0 maxpacket: 8
[ 1647.530777][T23991] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1647.538323][T23991] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1647.552039][T23991] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1647.571759][T23991] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1647.584648][T23991] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1647.632932][T23991] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1647.641821][T23991] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1647.928040][T23991] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1648.029442][T23991] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1648.063777][T23991] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1648.072270][T26719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1648.084209][T26719] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1648.094026][T23991] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1648.104268][T23991] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1648.144912][T23991] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1648.193556][T23991] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1648.225149][T23991] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1648.264560][T23991] usb 6-1: string descriptor 0 read error: -22
[ 1648.281561][T23991] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1648.297870][T23991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.312383][T23991] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1648.323858][ T7171] usb 1-1: USB disconnect, device number 92
[ 1648.389621][T26730] fuse: Bad value for 'rootmode'
[ 1648.462456][T26736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5985'.
[ 1648.528378][T23991] usb 6-1: USB disconnect, device number 78
[ 1648.742458][T26750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1648.749685][T26750] syzkaller0: entered promiscuous mode
[ 1648.755176][T26750] syzkaller0: entered allmulticast mode
[ 1648.761646][ T7171] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1648.766542][T26750] tipc: Resetting bearer <eth:syzkaller0>
[ 1648.777942][T26749] tipc: Resetting bearer <eth:syzkaller0>
[ 1648.790825][T26749] tipc: Disabling bearer <eth:syzkaller0>
[ 1648.864047][T26752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1648.874466][T26752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1648.919617][ T7171] usb 5-1: Using ep0 maxpacket: 32
[ 1648.926270][ T7171] usb 5-1: config 0 has an invalid interface number: 140 but max is 0
[ 1648.934677][ T7171] usb 5-1: config 0 has no interface number 0
[ 1648.943212][ T7171] usb 5-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db
[ 1648.952313][ T7171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.960337][ T7171] usb 5-1: Product: syz
[ 1648.964484][ T7171] usb 5-1: Manufacturer: syz
[ 1648.969051][ T7171] usb 5-1: SerialNumber: syz
[ 1648.975050][ T7171] usb 5-1: config 0 descriptor??
[ 1648.982372][ T7171] sierra 5-1:0.140: Sierra USB modem converter detected
[ 1649.185744][ T7171] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[ 1649.195114][ T7171] usb 5-1: USB disconnect, device number 115
[ 1649.202551][ T7171] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1649.211453][ T7171] sierra 5-1:0.140: device disconnected
[ 1649.520981][T26761] xt_bpf: check failed: parse error
[ 1649.619674][  T975] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1649.765333][T26764] input: syz0 as /devices/virtual/input/input126
[ 1649.822878][  T975] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1649.833976][  T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1649.848674][  T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1649.863163][  T975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1649.877075][  T975] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1649.886309][  T975] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1649.895214][  T975] usb 6-1: Manufacturer: syz
[ 1649.901556][  T975] usb 6-1: config 0 descriptor??
[ 1650.413954][  T975] usbhid 6-1:0.0: can't add hid device: -71
[ 1650.425891][  T975] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1650.462978][  T975] usb 6-1: USB disconnect, device number 79
[ 1651.280784][  T975] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1651.339584][T23991] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1651.487169][T26803] TCP: TCP_TX_DELAY enabled
[ 1651.507966][T23991] usb 5-1: device descriptor read/64, error -71
[ 1651.529567][  T975] usb 6-1: Using ep0 maxpacket: 32
[ 1651.580098][  T975] usb 6-1: config 0 has an invalid interface number: 146 but max is 0
[ 1651.594191][  T975] usb 6-1: config 0 has no interface number 0
[ 1651.654717][  T975] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1651.669466][  T975] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1651.681833][  T975] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1651.693367][  T975] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1651.704120][  T975] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1651.717040][  T975] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1651.727741][  T975] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1651.737926][  T975] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[ 1651.769569][T23991] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1651.781714][  T975] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1651.798682][  T975] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1651.817048][  T975] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1651.827606][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1651.835870][  T975] usb 6-1: Product: syz
[ 1651.849645][  T975] usb 6-1: Manufacturer: syz
[ 1651.867330][  T975] usb 6-1: SerialNumber: syz
[ 1651.876815][  T975] usb 6-1: config 0 descriptor??
[ 1651.883247][T26788] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1651.892593][T26788] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1651.899887][T23991] usb 5-1: device descriptor read/64, error -71
[ 1651.911054][  T975] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1651.919715][  T975] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1651.933507][  T975] scsi host1: microtekX6
[ 1652.021145][T23991] usb usb5-port1: attempt power cycle
[ 1652.152109][T26822] binder: BINDER_SET_CONTEXT_MGR already set
[ 1652.158119][T26822] binder: 26820:26822 ioctl 4018620d 200000000280 returned -16
[ 1652.167403][T26822] binder: 26820:26822 ioctl c0306201 200000000240 returned -11
[ 1652.460794][T23991] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1652.480302][T23991] usb 5-1: device descriptor read/8, error -71
[ 1652.529441][T26828] fuse: Bad value for 'fd'
[ 1652.544859][T26825] input: syz0 as /devices/virtual/input/input127
[ 1652.749553][T23991] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1652.780204][T23991] usb 5-1: device descriptor read/8, error -71
[ 1652.841975][  T975] usb 6-1: USB disconnect, device number 80
[ 1652.889770][T23991] usb usb5-port1: unable to enumerate USB device
[ 1653.959594][T18801] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 1654.119824][T18801] usb 1-1: Using ep0 maxpacket: 8
[ 1654.139555][T18801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1654.160235][T18801] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[ 1654.174477][T18801] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1654.201355][T18801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1654.209357][T18801] usb 1-1: Product: syz
[ 1654.214535][T18801] usb 1-1: Manufacturer: syz
[ 1654.219134][T18801] usb 1-1: SerialNumber: syz
[ 1654.409575][  T975] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1654.447678][T18801] cdc_ncm 1-1:1.0: bind() failure
[ 1654.456393][T18801] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[ 1654.463520][T18801] cdc_ncm 1-1:1.1: bind() failure
[ 1654.473241][T18801] usb 1-1: USB disconnect, device number 93
[ 1654.539545][ T5890] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1654.561152][  T975] usb 6-1: config 0 has an invalid interface number: 101 but max is 0
[ 1654.570321][  T975] usb 6-1: config 0 has no interface number 0
[ 1654.578593][  T975] usb 6-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14
[ 1654.588048][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1654.596172][  T975] usb 6-1: Product: syz
[ 1654.600700][  T975] usb 6-1: Manufacturer: syz
[ 1654.605341][  T975] usb 6-1: SerialNumber: syz
[ 1654.618583][  T975] usb 6-1: config 0 descriptor??
[ 1654.625379][  T975] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623
[ 1654.701916][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1654.713087][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1654.725388][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1654.741028][ T5890] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1654.753831][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1654.764514][ T5890] usb 5-1: config 0 descriptor??
[ 1654.826186][  T975] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[ 1654.833307][  T975] gspca_pac7302 6-1:0.101: probe with driver gspca_pac7302 failed with error -71
[ 1654.844038][  T975] usb 6-1: USB disconnect, device number 81
[ 1655.090381][   T36] vlan2: left promiscuous mode
[ 1655.186309][ T5890] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1655.269599][ T7171] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1655.473049][   T30] audit: type=1400 audit(1752276506.371:3965): avc:  denied  { read } for  pid=26856 comm="syz.2.6027" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1655.498359][   T30] audit: type=1400 audit(1752276506.371:3966): avc:  denied  { open } for  pid=26856 comm="syz.2.6027" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1655.525148][   T30] audit: type=1400 audit(1752276506.381:3967): avc:  denied  { ioctl } for  pid=26856 comm="syz.2.6027" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1655.558285][ T7171] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 1655.602743][ T7171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1655.628171][ T7171] usb 1-1: config 0 descriptor??
[ 1655.640749][ T7171] usb 1-1: selecting invalid altsetting 1
[ 1655.673953][ T7171] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1656.466782][T26877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6033'.
[ 1656.505073][T26879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1656.514220][T26879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1656.611272][  T975] usb 5-1: reset high-speed USB device number 120 using dummy_hcd
[ 1656.749571][  T975] usb 5-1: device descriptor read/64, error -32
[ 1656.902500][T26881] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1656.925426][T26881] bond4: (slave veth9): Enslaving as an active interface with an up link
[ 1656.939465][T26881] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1656.991810][  T975] usb 5-1: reset high-speed USB device number 120 using dummy_hcd
[ 1657.130086][  T975] usb 5-1: device descriptor read/64, error -32
[ 1657.379768][  T975] usb 5-1: reset high-speed USB device number 120 using dummy_hcd
[ 1657.410786][  T975] usb 5-1: device descriptor read/8, error -32
[ 1657.594710][T26895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1657.607029][T26895] syzkaller0: entered promiscuous mode
[ 1657.617703][T26895] syzkaller0: entered allmulticast mode
[ 1657.768714][T26896] tipc: Resetting bearer <eth:syzkaller0>
[ 1657.789031][T26894] tipc: Resetting bearer <eth:syzkaller0>
[ 1657.813428][T26894] tipc: Disabling bearer <eth:syzkaller0>
[ 1657.919995][ T5897] usb 1-1: USB disconnect, device number 94
[ 1658.159601][T23991] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1658.419905][  T975] usb 5-1: reset high-speed USB device number 120 using dummy_hcd
[ 1658.769557][T23991] usb 6-1: Using ep0 maxpacket: 32
[ 1658.775889][  T975] usb 5-1: device reset changed ep0 maxpacket size!
[ 1658.784556][T23991] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1658.842768][T18801] usb 5-1: USB disconnect, device number 120
[ 1658.914341][T23991] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1658.923606][T23991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1658.932148][T23991] usb 6-1: Product: syz
[ 1658.936952][T23991] usb 6-1: Manufacturer: syz
[ 1658.943496][T23991] usb 6-1: SerialNumber: syz
[ 1658.950641][T23991] usb 6-1: config 0 descriptor??
[ 1658.958748][T23991] usb 6-1: bad CDC descriptors
[ 1658.966574][T23991] usb 6-1: unsupported MDLM descriptors
[ 1658.989724][T18801] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1659.151041][T18801] usb 5-1: Using ep0 maxpacket: 8
[ 1659.166060][T18801] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1659.177960][T18801] usb 5-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30
[ 1659.215544][T18801] usb 5-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[ 1659.229306][T18801] usb 5-1: config 4 interface 0 has no altsetting 0
[ 1659.297968][T26925] vivid-000: disconnect
[ 1659.305432][T18801] usb 5-1: string descriptor 0 read error: -22
[ 1659.316206][T18801] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1659.326005][T18801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1659.370475][T18801] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1659.382352][T18801] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1659.395108][T18801] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1659.415220][T18801] usb 5-1: media controller created
[ 1659.448138][T18801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1659.483521][T26928] netlink: 'syz.2.6049': attribute type 3 has an invalid length.
[ 1659.586079][T18801] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1659.621851][T18801] usb 5-1: USB disconnect, device number 121
[ 1659.867892][T26919] vivid-000: reconnect
[ 1660.367882][T26944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6054'.
[ 1660.827939][T24353] usb 6-1: USB disconnect, device number 82
[ 1661.705594][T26961] kvm: kvm [26960]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20
[ 1661.830461][T26961] kvm: kvm [26960]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0
[ 1661.901292][T26961] kvm: kvm [26960]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[ 1661.965721][T26961] kvm: kvm [26960]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x20
[ 1661.990654][T26976] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1662.003757][T26976] syzkaller0: entered promiscuous mode
[ 1662.029666][T26976] syzkaller0: entered allmulticast mode
[ 1662.109595][T26976] tipc: Resetting bearer <eth:syzkaller0>
[ 1662.137961][T26975] tipc: Resetting bearer <eth:syzkaller0>
[ 1662.210845][T26975] tipc: Disabling bearer <eth:syzkaller0>
[ 1662.248064][T26971] netlink: 'syz.0.6063': attribute type 12 has an invalid length.
[ 1662.268287][T26971] netlink: 'syz.0.6063': attribute type 29 has an invalid length.
[ 1662.292019][T26971] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6063'.
[ 1662.301729][T26971] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6063'.
[ 1663.252408][T24353] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1663.469672][T24353] usb 5-1: Using ep0 maxpacket: 32
[ 1663.488852][T24353] usb 5-1: config 0 has an invalid interface number: 146 but max is 0
[ 1663.519001][T24353] usb 5-1: config 0 has no interface number 0
[ 1663.674991][T24353] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1663.742125][T24353] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1663.855254][T24353] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1663.868812][T27025] netlink: 'syz.7.6085': attribute type 1 has an invalid length.
[ 1663.924079][T27025] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1663.983836][T27029] netlink: 'syz.2.6084': attribute type 1 has an invalid length.
[ 1664.014198][T24353] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1664.097124][T24353] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1664.150846][T27029] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1664.173073][T24353] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1664.201593][T27037] bond2: (slave veth5): Enslaving as an active interface with an up link
[ 1664.204587][T24353] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1664.298298][T27029] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1664.309278][T24353] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[ 1664.582888][T27045] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6087'.
[ 1664.611132][T24353] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1664.690585][T24353] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1664.790392][ T5890] usb 6-1: new full-speed USB device number 83 using dummy_hcd
[ 1664.852664][T24353] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1664.861818][ T7171] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1664.880330][T24353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1665.017557][T24353] usb 5-1: Product: syz
[ 1665.031130][T24353] usb 5-1: Manufacturer: syz
[ 1665.041239][T24353] usb 5-1: SerialNumber: syz
[ 1665.056454][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1665.067412][T24353] usb 5-1: config 0 descriptor??
[ 1665.078733][T27005] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1665.109978][T27005] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1665.189550][ T5890] usb 6-1: config 0 has no interfaces?
[ 1665.190366][T27052] vivid-000: disconnect
[ 1665.207727][ T5890] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1665.217959][T24353] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1665.226572][ T7171] usb 1-1: Using ep0 maxpacket: 16
[ 1665.231705][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1665.239788][T24353] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1665.257216][ T7171] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1665.266309][ T5890] usb 6-1: Product: syz
[ 1665.270646][ T5890] usb 6-1: Manufacturer: syz
[ 1665.275517][ T7171] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1665.284292][T24353] scsi host1: microtekX6
[ 1665.288544][ T5890] usb 6-1: SerialNumber: syz
[ 1665.386318][ T7171] usb 1-1: Product: syz
[ 1665.395377][ T5890] usb 6-1: config 0 descriptor??
[ 1665.400445][ T7171] usb 1-1: Manufacturer: syz
[ 1665.405047][ T7171] usb 1-1: SerialNumber: syz
[ 1665.423420][ T7171] usb 1-1: config 0 descriptor??
[ 1665.638369][T27046] vivid-000: reconnect
[ 1665.670117][T27041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6086'.
[ 1665.679041][T27041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6086'.
[ 1665.946645][T27060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1665.966010][T27060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1666.018971][T18801] usb 5-1: USB disconnect, device number 122
[ 1666.347496][   T30] audit: type=1400 audit(1752276517.261:3968): avc:  denied  { ioctl } for  pid=27069 comm="syz.4.6095" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1666.450165][T27072] GUP no longer grows the stack in syz.4.6095 (27072): 200000005000-200000008000 (200000004000)
[ 1666.465754][T27072] CPU: 0 UID: 0 PID: 27072 Comm: syz.4.6095 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) 
[ 1666.465775][T27072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1666.465782][T27072] Call Trace:
[ 1666.465786][T27072]  <TASK>
[ 1666.465791][T27072]  dump_stack_lvl+0x16c/0x1f0
[ 1666.465812][T27072]  gup_vma_lookup+0x1d2/0x220
[ 1666.465833][T27072]  fixup_user_fault+0x26f/0x540
[ 1666.465849][T27072]  ? futex_lock_pi+0x638/0x740
[ 1666.465862][T27072]  fault_in_user_writeable+0x70/0xe0
[ 1666.465877][T27072]  futex_lock_pi+0x641/0x740
[ 1666.465891][T27072]  ? __pfx_futex_lock_pi+0x10/0x10
[ 1666.465901][T27072]  ? __futex_wait+0x24c/0x2f0
[ 1666.465914][T27072]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1666.465940][T27072]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1666.465959][T27072]  do_futex+0x11a/0x350
[ 1666.465974][T27072]  ? __pfx_do_futex+0x10/0x10
[ 1666.465990][T27072]  ? rcu_is_watching+0x12/0xc0
[ 1666.466003][T27072]  ? __rseq_handle_notify_resume+0x681/0x10e0
[ 1666.466020][T27072]  __x64_sys_futex+0x1e0/0x4c0
[ 1666.466037][T27072]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1666.466052][T27072]  ? xfd_validate_state+0x61/0x180
[ 1666.466076][T27072]  do_syscall_64+0xcd/0x4c0
[ 1666.466091][T27072]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1666.466103][T27072] RIP: 0033:0x7f0b3138e929
[ 1666.466112][T27072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1666.466124][T27072] RSP: 002b:00007f0b32159038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1666.466135][T27072] RAX: ffffffffffffffda RBX: 00007f0b315b6080 RCX: 00007f0b3138e929
[ 1666.466142][T27072] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[ 1666.466149][T27072] RBP: 00007f0b31410b39 R08: 0000200000004000 R09: 0000000000000000
[ 1666.466155][T27072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1666.466162][T27072] R13: 0000000000000000 R14: 00007f0b315b6080 R15: 00007fffa33236c8
[ 1666.466176][T27072]  </TASK>
[ 1666.667147][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1667.168524][T23991] usb 6-1: USB disconnect, device number 83
[ 1667.267540][T27081] netlink: 'syz.5.6099': attribute type 1 has an invalid length.
[ 1667.326939][T27081] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1667.347220][ T5890] usb 1-1: USB disconnect, device number 95
[ 1667.512489][T17098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1667.522833][T17098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1667.588446][T17098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1667.610342][T27083] bond5: (slave veth11): Enslaving as an active interface with an up link
[ 1667.630077][T27081] bond4: (slave veth0_to_bond): Releasing backup interface
[ 1667.638563][T17098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1667.643873][T27081] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1667.660258][T17098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1667.946251][T27099] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1667.960412][T27099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1667.969146][T27099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1668.054823][T27099] vlan3: entered promiscuous mode
[ 1668.060067][T27099] bond0: entered promiscuous mode
[ 1668.065147][T27099] bond_slave_0: entered promiscuous mode
[ 1668.159550][ T5890] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1668.214470][T27099] bond_slave_1: entered promiscuous mode
[ 1668.353557][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.360085][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1668.390239][ T5890] usb 6-1: Using ep0 maxpacket: 32
[ 1668.460940][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1668.534964][ T5890] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1668.552607][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.641068][ T5890] usb 6-1: Product: syz
[ 1668.702558][ T5890] usb 6-1: Manufacturer: syz
[ 1668.967403][ T5890] usb 6-1: SerialNumber: syz
[ 1669.077185][ T5890] usb 6-1: config 0 descriptor??
[ 1669.101871][ T5890] usb 6-1: bad CDC descriptors
[ 1669.113332][ T5890] usb 6-1: unsupported MDLM descriptors
[ 1669.134358][ T3608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1669.318149][T27087] chnl_net:caif_netlink_parms(): no params data found
[ 1669.495830][ T3608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1669.644924][ T3608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1669.693196][T27087] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1669.700614][T17098] Bluetooth: hci0: command tx timeout
[ 1669.738029][T27087] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1669.748785][T27087] bridge_slave_0: entered allmulticast mode
[ 1669.757153][T27087] bridge_slave_0: entered promiscuous mode
[ 1669.798968][ T3608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1669.834911][T27087] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1669.842391][T27087] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1669.849951][T27087] bridge_slave_1: entered allmulticast mode
[ 1669.856793][T27087] bridge_slave_1: entered promiscuous mode
[ 1669.886463][T27087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1669.899305][T27087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1669.944706][T27087] team0: Port device team_slave_0 added
[ 1669.955305][T27087] team0: Port device team_slave_1 added
[ 1669.973451][T27119] netlink: 'syz.7.6107': attribute type 6 has an invalid length.
[ 1669.982009][T27119] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6107'.
[ 1670.021510][T27087] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1670.034375][T27087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1670.060322][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1670.070975][T27087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1670.085925][T27087] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1670.093040][T27087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1670.118901][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1670.125633][T27087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1670.203741][ T3608] bridge_slave_1: left allmulticast mode
[ 1670.224360][ T3608] bridge_slave_1: left promiscuous mode
[ 1670.230784][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1670.242746][ T3608] bridge_slave_0: left allmulticast mode
[ 1670.248551][ T3608] bridge_slave_0: left promiscuous mode
[ 1670.249446][T27127] netlink: 'syz.7.6111': attribute type 1 has an invalid length.
[ 1670.254766][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1670.365607][T27126] kvm: pic: non byte write
[ 1670.430850][ T3608] bridge0 (unregistering): left allmulticast mode
[ 1670.561244][ T3608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1670.571568][ T3608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1670.581432][ T3608] bond0 (unregistering): Released all slaves
[ 1670.665725][ T3608] bond1 (unregistering): (slave veth7): Releasing active interface
[ 1670.674005][ T3608] veth0_to_bond: entered promiscuous mode
[ 1670.681402][ T3608] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1670.691560][ T3608] bond1 (unregistering): Released all slaves
[ 1670.719892][T27127] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1670.766175][T27128] bond6: (slave veth17): Enslaving as an active interface with an up link
[ 1670.818959][T27130] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1670.819954][T18801] usb 6-1: USB disconnect, device number 84
[ 1670.832431][T27087] hsr_slave_0: entered promiscuous mode
[ 1670.840663][T27087] hsr_slave_1: entered promiscuous mode
[ 1670.846722][T27087] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1670.913767][T27087] Cannot create hsr debugfs directory
[ 1670.921263][ T3608] tipc: Left network mode
[ 1671.112567][ T3608] hsr_slave_0: left promiscuous mode
[ 1671.118539][ T3608] hsr_slave_1: left promiscuous mode
[ 1671.135391][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1671.147458][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1671.177250][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1671.186200][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1671.189809][T18801] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1671.216551][ T3608] dummy0: left allmulticast mode
[ 1671.223401][ T3608] veth1_macvtap: left promiscuous mode
[ 1671.228967][ T3608] veth0_macvtap: left promiscuous mode
[ 1671.235927][ T3608] veth1_vlan: left promiscuous mode
[ 1671.242536][ T3608] veth0_vlan: left promiscuous mode
[ 1671.322321][T27145] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[ 1671.471627][T18801] usb 6-1: Using ep0 maxpacket: 8
[ 1671.524370][T18801] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1671.540960][T18801] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1671.554231][T18801] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1671.566623][T18801] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1671.575169][T18801] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1671.586485][T18801] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1671.598458][T18801] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[ 1671.606056][T18801] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1671.622544][T18801] usb 6-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1671.758260][T18801] usb 6-1: string descriptor 0 read error: -22
[ 1671.764735][T18801] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1671.774778][T18801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1671.788475][T18801] adutux 6-1:168.0: interrupt endpoints not found
[ 1671.794990][T17098] Bluetooth: hci0: command tx timeout
[ 1671.884354][ T3608] team0 (unregistering): Port device team_slave_1 removed
[ 1671.919073][ T3608] team0 (unregistering): Port device team_slave_0 removed
[ 1672.016227][ T7171] usb 6-1: USB disconnect, device number 85
[ 1673.019208][ T3608] IPVS: stop unused estimator thread 0...
[ 1673.171586][T27087] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1673.202650][T27087] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1673.219677][  T975] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1673.233845][T27087] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1673.249791][T27087] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1673.400033][  T975] usb 6-1: Using ep0 maxpacket: 32
[ 1673.409695][T26901] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1673.421218][  T975] usb 6-1: config 0 has an invalid interface number: 183 but max is 0
[ 1673.429432][  T975] usb 6-1: config 0 has no interface number 0
[ 1673.435358][T27176] kvm: pic: non byte write
[ 1673.486037][T27087] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1673.496932][  T975] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8
[ 1673.520076][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1673.528107][  T975] usb 6-1: Product: syz
[ 1673.536303][  T975] usb 6-1: Manufacturer: syz
[ 1673.545271][T27087] 8021q: adding VLAN 0 to HW filter on device team0
[ 1673.559516][  T975] usb 6-1: SerialNumber: syz
[ 1673.572993][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1673.580132][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1673.588414][  T975] usb 6-1: config 0 descriptor??
[ 1673.603415][  T975] net1080 6-1:0.183: probe with driver net1080 failed with error -22
[ 1673.635298][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1673.642488][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1673.649531][T26901] usb 1-1: Using ep0 maxpacket: 32
[ 1673.656390][T26901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1673.675864][T27179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1673.687445][T27179] syzkaller0: entered promiscuous mode
[ 1673.700136][T26901] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1673.701886][T27179] syzkaller0: entered allmulticast mode
[ 1673.709177][T26901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1673.709199][T26901] usb 1-1: Product: syz
[ 1673.709212][T26901] usb 1-1: Manufacturer: syz
[ 1673.758874][T26901] usb 1-1: SerialNumber: syz
[ 1673.774355][T26901] usb 1-1: config 0 descriptor??
[ 1673.785944][T26901] usb 1-1: bad CDC descriptors
[ 1673.794419][T26901] usb 1-1: unsupported MDLM descriptors
[ 1673.813341][T27179] tipc: Resetting bearer <eth:syzkaller0>
[ 1673.833518][T27178] tipc: Resetting bearer <eth:syzkaller0>
[ 1673.859911][T17098] Bluetooth: hci0: command tx timeout
[ 1673.883872][T27178] tipc: Disabling bearer <eth:syzkaller0>
[ 1674.077671][T27087] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1674.246989][T27087] veth0_vlan: entered promiscuous mode
[ 1674.352210][T27087] veth1_vlan: entered promiscuous mode
[ 1674.520836][T27197] netlink: 'syz.5.6121': attribute type 10 has an invalid length.
[ 1674.529366][T27197] netlink: 55 bytes leftover after parsing attributes in process `syz.5.6121'.
[ 1674.658572][T27087] veth0_macvtap: entered promiscuous mode
[ 1674.815782][T27087] veth1_macvtap: entered promiscuous mode
[ 1674.987522][T27087] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1675.053210][T27087] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1675.089648][T27087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1675.106191][T27087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1675.120653][T27087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1675.169551][T27087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1675.300191][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1675.308812][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1675.376973][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1675.390385][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1675.585462][T27215] vivid-000: disconnect
[ 1675.959630][T17098] Bluetooth: hci0: command tx timeout
[ 1675.992524][T27221] loop6: detected capacity change from 0 to 524287999
[ 1676.006283][   T30] audit: type=1400 audit(1752276526.901:3969): avc:  denied  { append } for  pid=27218 comm="syz.4.6133" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1676.144200][  T975] usb 6-1: USB disconnect, device number 86
[ 1676.204174][T26901] usb 1-1: USB disconnect, device number 96
[ 1676.256895][T27226] netlink: 'syz.0.6135': attribute type 1 has an invalid length.
[ 1676.278490][T27208] vivid-000: reconnect
[ 1676.767462][T27226] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1676.842974][T27230] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1677.058971][T27249] netlink: 'syz.0.6141': attribute type 1 has an invalid length.
[ 1677.168564][T27254] vlan2: entered allmulticast mode
[ 1678.092872][T27273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6150'.
[ 1678.168201][T27274] bond1: (slave veth0_to_bond): Releasing backup interface
[ 1678.388381][T27280] ptrace attach of "./syz-executor exec"[26478] was attempted by "./syz-executor exec"[27280]
[ 1679.313374][T27284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6154'.
[ 1679.409273][T27287] netlink: 'syz.0.6155': attribute type 1 has an invalid length.
[ 1680.194442][T27302] netlink: 'syz.2.6160': attribute type 6 has an invalid length.
[ 1680.219540][T27302] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6160'.
[ 1681.233690][T27319] ptrace attach of "./syz-executor exec"[26478] was attempted by "./syz-executor exec"[27319]
[ 1682.010016][T27328] netlink: 'syz.4.6166': attribute type 7 has an invalid length.
[ 1682.018706][T27328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6166'.
[ 1682.079279][T27334] netlink: 'syz.5.6170': attribute type 2 has an invalid length.
[ 1682.090200][T27335] netlink: 'syz.4.6166': attribute type 10 has an invalid length.
[ 1682.160028][T27335] syz_tun: entered promiscuous mode
[ 1682.175632][T27335] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1682.596190][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6174'.
[ 1682.610879][T27349] vlan0: entered allmulticast mode
[ 1682.616042][T27349] macvtap0: entered allmulticast mode
[ 1682.621484][T27349] veth0_macvtap: entered allmulticast mode
[ 1683.474084][T27368] netlink: 'syz.7.6182': attribute type 6 has an invalid length.
[ 1683.569571][T27368] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6182'.
[ 1683.872821][T27380] ptrace attach of "./syz-executor exec"[27087] was attempted by "./syz-executor exec"[27380]
[ 1684.334969][T27387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1684.359393][T27387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1685.089581][T26901] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1685.279550][   T30] audit: type=1400 audit(1752276536.151:3970): avc:  denied  { write } for  pid=27394 comm="syz.5.6191" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[ 1685.279556][T26901] usb 1-1: Using ep0 maxpacket: 32
[ 1685.279602][   T30] audit: type=1400 audit(1752276536.171:3971): avc:  denied  { write } for  pid=27400 comm="syz.2.6193" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[ 1685.407758][T26901] usb 1-1: config 0 has an invalid interface number: 140 but max is 0
[ 1685.454232][T26901] usb 1-1: config 0 has no interface number 0
[ 1685.510046][T26901] usb 1-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db
[ 1685.522021][T27409] netlink: 'syz.2.6195': attribute type 1 has an invalid length.
[ 1685.530637][T26901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1685.551712][T26901] usb 1-1: Product: syz
[ 1685.561437][T26901] usb 1-1: Manufacturer: syz
[ 1685.600568][T26901] usb 1-1: SerialNumber: syz
[ 1685.647314][T26901] usb 1-1: config 0 descriptor??
[ 1685.661496][T26901] sierra 1-1:0.140: Sierra USB modem converter detected
[ 1685.683843][T27409] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1686.030133][T26901] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[ 1686.038924][T26901] usb 1-1: USB disconnect, device number 97
[ 1686.073594][T26901] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1686.215180][T26901] sierra 1-1:0.140: device disconnected
[ 1686.262562][T27412] bond3: (slave veth7): Enslaving as an active interface with a down link
[ 1687.300101][ T7171] usb 6-1: new full-speed USB device number 87 using dummy_hcd
[ 1687.476519][ T7171] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1687.487934][ T7171] usb 6-1: config 0 has no interfaces?
[ 1687.505421][ T7171] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1687.515199][ T7171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1687.633534][ T7171] usb 6-1: Product: syz
[ 1687.837055][ T7171] usb 6-1: Manufacturer: syz
[ 1687.861071][ T7171] usb 6-1: SerialNumber: syz
[ 1687.888676][ T7171] usb 6-1: config 0 descriptor??
[ 1688.016184][   T30] audit: type=1326 audit(1752276538.931:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27436 comm="syz.0.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f168e72ab19 code=0x7ffc0000
[ 1688.044519][T27441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6204'.
[ 1688.065539][   T30] audit: type=1326 audit(1752276538.961:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27436 comm="syz.0.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168e78e929 code=0x7ffc0000
[ 1688.066020][T27441] vlan2: entered promiscuous mode
[ 1688.107220][T27441] batadv0: entered promiscuous mode
[ 1688.111706][   T30] audit: type=1326 audit(1752276538.961:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27436 comm="syz.0.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f168e72ab19 code=0x7ffc0000
[ 1688.164024][   T30] audit: type=1326 audit(1752276538.961:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27436 comm="syz.0.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f168e72ab19 code=0x7ffc0000
[ 1688.201795][   T30] audit: type=1326 audit(1752276538.961:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27436 comm="syz.0.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f168e72ab19 code=0x7ffc0000
[ 1688.232162][   T30] audit: type=1326 audit(1752276538.961:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27436 comm="syz.0.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168e78e929 code=0x7ffc0000
[ 1688.258102][   T30] audit: type=1326 audit(1752276538.961:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27436 comm="syz.0.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168e78e929 code=0x7ffc0000
[ 1688.292057][   T30] audit: type=1326 audit(1752276538.961:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27436 comm="syz.0.6202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f168e78e929 code=0x7ffc0000
[ 1689.634164][T24353] usb 6-1: USB disconnect, device number 87
[ 1690.355904][T27465] sctp: [Deprecated]: syz.5.6211 (pid 27465) Use of int in maxseg socket option.
[ 1690.355904][T27465] Use struct sctp_assoc_value instead
[ 1691.194229][T27492] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6220'.
[ 1691.203324][T27492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6220'.
[ 1692.221123][  T975] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1692.399673][  T975] usb 5-1: Using ep0 maxpacket: 32
[ 1692.411627][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1692.425950][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1692.437085][  T975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1692.447934][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.463649][  T975] usb 5-1: config 0 descriptor??
[ 1692.914854][  T975] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[ 1693.190856][T27516] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1693.198717][T27521] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[ 1693.205709][T27516] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1693.217510][T27516] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1693.223722][T27516] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1693.257939][ T7171] usb 5-1: USB disconnect, device number 123
[ 1693.271139][T27516] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1693.278107][T27516] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1693.358799][T27516] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1693.364887][T27516] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1693.397791][T27516] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1693.406070][T27516] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1693.802985][T27529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1693.829347][T27529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1693.959748][T27529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1693.968702][T27529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1694.229432][T27531] binder: 27530:27531 ioctl c0306201 200000000240 returned -11
[ 1695.549761][  T975] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1695.709668][  T975] usb 6-1: Using ep0 maxpacket: 32
[ 1695.725274][  T975] usb 6-1: config 0 has an invalid interface number: 140 but max is 0
[ 1695.734275][  T975] usb 6-1: config 0 has no interface number 0
[ 1695.752341][  T975] usb 6-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db
[ 1695.761649][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1695.783111][  T975] usb 6-1: Product: syz
[ 1695.796092][  T975] usb 6-1: Manufacturer: syz
[ 1695.810187][  T975] usb 6-1: SerialNumber: syz
[ 1695.939705][T26901] usb 5-1: new full-speed USB device number 124 using dummy_hcd
[ 1695.977598][  T975] usb 6-1: config 0 descriptor??
[ 1696.046737][  T975] sierra 6-1:0.140: Sierra USB modem converter detected
[ 1696.132973][T26901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1696.143607][T26901] usb 5-1: config 0 has no interfaces?
[ 1696.154794][T26901] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1696.165384][T26901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1696.181993][T26901] usb 5-1: Product: syz
[ 1696.219839][T27575] loop6: detected capacity change from 0 to 524287999
[ 1696.233917][  T975] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[ 1696.242255][T26901] usb 5-1: Manufacturer: syz
[ 1696.264740][T26901] usb 5-1: SerialNumber: syz
[ 1696.271875][  T975] usb 6-1: USB disconnect, device number 88
[ 1696.299351][T26901] usb 5-1: config 0 descriptor??
[ 1696.322266][  T975] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1696.331151][  T975] sierra 6-1:0.140: device disconnected
[ 1697.808077][   T30] kauditd_printk_skb: 29 callbacks suppressed
[ 1697.808093][   T30] audit: type=1400 audit(1752276548.721:4009): avc:  denied  { bind } for  pid=27600 comm="syz.5.6252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[ 1698.264177][T27606] kvm: user requested TSC rate below hardware speed
[ 1698.497514][T26901] usb 5-1: USB disconnect, device number 124
[ 1699.149563][T26901] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1699.207289][T27623] vlan2: entered allmulticast mode
[ 1699.303157][T26901] usb 1-1: Using ep0 maxpacket: 32
[ 1699.312881][T26901] usb 1-1: config 0 has an invalid interface number: 140 but max is 0
[ 1699.321908][T26901] usb 1-1: config 0 has no interface number 0
[ 1699.330159][T26901] usb 1-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db
[ 1699.343649][T26901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1699.357358][T26901] usb 1-1: Product: syz
[ 1699.362070][T26901] usb 1-1: Manufacturer: syz
[ 1699.366675][T26901] usb 1-1: SerialNumber: syz
[ 1699.373567][T26901] usb 1-1: config 0 descriptor??
[ 1699.380946][T26901] sierra 1-1:0.140: Sierra USB modem converter detected
[ 1699.417815][T27629] binder: 27628:27629 ioctl 4018620d 0 returned -22
[ 1699.431232][T27629] binder: 27628:27629 ioctl c0306201 200000000240 returned -11
[ 1699.592957][T26901] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[ 1699.605769][T26901] usb 1-1: USB disconnect, device number 98
[ 1699.614330][T26901] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1699.650318][T26901] sierra 1-1:0.140: device disconnected
[ 1699.730153][  T975] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1699.859543][  T975] usb 5-1: device descriptor read/64, error -71
[ 1699.968986][T27641] netlink: 'syz.2.6265': attribute type 6 has an invalid length.
[ 1699.978853][T27641] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6265'.
[ 1700.104605][  T975] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1700.239543][  T975] usb 5-1: device descriptor read/64, error -71
[ 1700.434750][  T975] usb usb5-port1: attempt power cycle
[ 1700.791180][  T975] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1700.812601][  T975] usb 5-1: device descriptor read/8, error -71
[ 1700.824608][T27660] binder: 27659:27660 ioctl 4018620d 0 returned -22
[ 1700.833999][T27660] binder: 27659:27660 ioctl c0306201 200000000240 returned -11
[ 1701.049709][  T975] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1701.108395][  T975] usb 5-1: device descriptor read/8, error -71
[ 1701.240260][  T975] usb usb5-port1: unable to enumerate USB device
[ 1702.468984][T27678] netlink: 'syz.2.6279': attribute type 5 has an invalid length.
[ 1702.481731][T27678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6279'.
[ 1702.643371][T27689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6284'.
[ 1702.719298][T27693] bond2: (slave veth0_to_bond): Releasing backup interface
[ 1702.939814][  T975] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1703.089947][  T975] usb 5-1: Using ep0 maxpacket: 32
[ 1703.104164][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1703.228839][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1703.254530][  T975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1703.290161][T27704] netlink: 'syz.2.6289': attribute type 6 has an invalid length.
[ 1703.297919][T27704] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6289'.
[ 1703.307553][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1703.324717][  T975] usb 5-1: config 0 descriptor??
[ 1703.392746][T27709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1703.406803][T27709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1703.748756][  T975] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[ 1704.138533][  T975] usb 5-1: USB disconnect, device number 3
[ 1705.333859][T27742] kvm: user requested TSC rate below hardware speed
[ 1706.196799][T27761] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1706.261777][T27758] netlink: 'syz.2.6309': attribute type 5 has an invalid length.
[ 1706.320130][T27758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6309'.
[ 1706.912106][T27770] netlink: 'syz.0.6311': attribute type 27 has an invalid length.
[ 1707.052679][T27770] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1707.060035][T27770] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1707.393909][T27770] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1707.429063][T27770] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1707.644462][T27770] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1707.659072][T27770] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1707.706841][T27770] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1707.725428][T27770] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1708.185496][T27770] vlan2: left allmulticast mode
[ 1708.332603][T27773] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1708.344774][T27773] 8021q: adding VLAN 0 to HW filter on device team0
[ 1708.360986][T27773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1708.441782][T27780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6317'.
[ 1708.762415][T27808] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6324'.
[ 1708.872329][T27809] bond6: (slave veth0_to_bond): Releasing backup interface
[ 1708.935917][   T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1709.099585][   T43] usb 5-1: Using ep0 maxpacket: 32
[ 1709.106805][   T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1709.119212][   T43] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1709.128569][   T43] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1709.137220][   T43] usb 5-1: Product: syz
[ 1709.141667][   T43] usb 5-1: Manufacturer: syz
[ 1709.146750][   T43] usb 5-1: SerialNumber: syz
[ 1709.163214][   T43] usb 5-1: config 0 descriptor??
[ 1709.170757][T27805] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1709.179074][   T43] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1709.185599][   T43] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1709.443984][   T43] usb 5-1: USB disconnect, device number 4
[ 1709.628556][T27821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6328'.
[ 1709.694798][T27814] fuse: Invalid rootmode
[ 1709.919630][   T43] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1709.984327][   T30] audit: type=1400 audit(1752276560.901:4010): avc:  denied  { map } for  pid=27828 comm="syz.2.6331" path="socket:[125842]" dev="sockfs" ino=125842 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[ 1710.081211][   T43] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[ 1710.131001][   T43] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[ 1710.155017][   T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1710.200030][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1710.210297][   T43] usb 5-1: Product: syz
[ 1710.214508][   T43] usb 5-1: Manufacturer: syz
[ 1710.219129][   T43] usb 5-1: SerialNumber: syz
[ 1710.447001][   T43] cdc_ncm 5-1:1.0: bind() failure
[ 1710.463624][   T43] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 1710.471149][   T43] cdc_ncm 5-1:1.1: bind() failure
[ 1710.483694][   T43] usb 5-1: USB disconnect, device number 5
[ 1710.676933][T27840] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.6335'.
[ 1711.737389][T27865] binder: 27863:27865 ioctl c0306201 0 returned -14
[ 1711.747856][T27864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6343'.
[ 1711.752000][T27865] binder: BINDER_SET_CONTEXT_MGR already set
[ 1711.762770][T27865] binder: 27863:27865 ioctl 4018620d 200000000280 returned -16
[ 1711.772133][T27865] binder: 27863:27865 ioctl c0306201 200000000240 returned -11
[ 1711.826831][T27864] vlan3: entered allmulticast mode
[ 1711.838229][T27864] macvtap0: entered allmulticast mode
[ 1712.063681][T27875] input: syz1 as /devices/virtual/input/input134
[ 1712.250434][T27879] fuse: Bad value for 'fd'
[ 1714.384195][T27912] fuse: Unknown parameter '0x0000000000000003'
[ 1715.989554][  T975] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1716.139656][  T975] usb 5-1: Using ep0 maxpacket: 32
[ 1716.146191][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1716.159790][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1716.230614][  T975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1716.239947][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1716.251952][  T975] usb 5-1: config 0 descriptor??
[ 1716.687544][  T975] savu 0003:1E7D:2D5A.002D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[ 1717.063443][   T43] usb 5-1: USB disconnect, device number 6
[ 1718.186782][   T30] audit: type=1400 audit(1752276569.101:4011): avc:  denied  { accept } for  pid=27977 comm="syz.5.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[ 1718.293112][T27965] fuse: Invalid rootmode
[ 1720.969510][T28030] fuse: Bad value for 'user_id'
[ 1720.976630][T28030] fuse: Bad value for 'user_id'
[ 1722.949123][   T30] audit: type=1400 audit(1752276573.861:4012): avc:  denied  { ioctl } for  pid=28064 comm="syz.4.6404" path="socket:[126632]" dev="sockfs" ino=126632 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1725.274622][T28116] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1728.310415][T28168] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1729.589671][  T975] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1729.742948][T28201] kvm: pic: non byte write
[ 1729.769552][  T975] usb 5-1: Using ep0 maxpacket: 8
[ 1729.779256][  T975] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1729.792360][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1729.798627][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1729.807749][  T975] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1729.822005][  T975] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1729.838281][  T975] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1729.852904][  T975] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1729.878074][  T975] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1729.899442][  T975] usb 5-1: string descriptor 0 read error: -22
[ 1729.909051][  T975] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1729.918574][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1729.939872][  T975] adutux 5-1:168.0: interrupt endpoints not found
[ 1730.150845][T24353] usb 5-1: USB disconnect, device number 7
[ 1730.684875][T28218] fuse: Invalid rootmode
[ 1730.697166][T28219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1730.705957][T28219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1731.642095][T24353] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1731.833199][T24353] usb 6-1: config 0 has no interfaces?
[ 1731.853501][T24353] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1731.875911][T24353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1731.885021][T24353] usb 6-1: Product: syz
[ 1731.889255][T24353] usb 6-1: Manufacturer: syz
[ 1731.896222][T24353] usb 6-1: SerialNumber: syz
[ 1731.904258][T24353] usb 6-1: config 0 descriptor??
[ 1732.093145][T28235] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1732.118361][T28235] bond1: (slave veth3): Enslaving as an active interface with an up link
[ 1732.138311][T28235] vlan2: entered allmulticast mode
[ 1732.152114][T28235] veth1: entered allmulticast mode
[ 1732.172708][T28235] veth1: entered promiscuous mode
[ 1732.180000][T28235] bond1: (slave vlan2): Enslaving as an active interface with an up link
[ 1732.238276][T28239] fuse: Bad value for 'fd'
[ 1733.719643][ T5897] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1733.879643][ T5897] usb 5-1: Using ep0 maxpacket: 8
[ 1733.886372][ T5897] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1733.896914][ T5897] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1733.910817][ T5897] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1733.921342][ T5897] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1733.935878][ T5897] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1733.946464][ T5897] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1733.962622][ T5897] usb 5-1: string descriptor 0 read error: -22
[ 1733.968936][ T5897] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1733.978067][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1733.990333][ T5897] adutux 5-1:168.0: interrupt endpoints not found
[ 1734.196818][  T975] usb 5-1: USB disconnect, device number 8
[ 1734.259823][ T5897] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1734.311389][T26901] usb 6-1: USB disconnect, device number 89
[ 1734.409816][ T5897] usb 1-1: Using ep0 maxpacket: 32
[ 1734.424967][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1734.442354][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1734.454162][ T5897] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1734.472773][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1734.494119][ T5897] usb 1-1: config 0 descriptor??
[ 1734.928551][ T5897] savu 0003:1E7D:2D5A.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[ 1735.290545][ T7171] usb 1-1: USB disconnect, device number 99
[ 1738.589707][ T7171] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1738.647153][T28342] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1738.995417][ T7171] usb 5-1: Using ep0 maxpacket: 32
[ 1739.129799][ T7171] usb 5-1: config 0 has an invalid interface number: 140 but max is 0
[ 1739.156507][ T7171] usb 5-1: config 0 has no interface number 0
[ 1739.186091][ T7171] usb 5-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db
[ 1739.321750][ T7171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1739.392324][ T7171] usb 5-1: Product: syz
[ 1739.404067][ T7171] usb 5-1: Manufacturer: syz
[ 1739.425159][ T7171] usb 5-1: SerialNumber: syz
[ 1739.451606][ T7171] usb 5-1: config 0 descriptor??
[ 1739.480370][ T7171] sierra 5-1:0.140: Sierra USB modem converter detected
[ 1739.636337][T28352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6494'.
[ 1739.680419][T28355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1739.689063][T28355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1739.745424][ T7171] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[ 1739.758667][ T7171] usb 5-1: USB disconnect, device number 9
[ 1739.767922][ T7171] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1739.784305][ T7171] sierra 5-1:0.140: device disconnected
[ 1739.807442][T28358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1739.816382][T28358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1740.269595][ T7171] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1740.329013][T28368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6499'.
[ 1740.419590][ T7171] usb 1-1: Using ep0 maxpacket: 32
[ 1740.452977][ T7171] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[ 1740.776375][ T7171] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1740.853671][ T7171] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1740.864413][ T7171] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1740.949919][ T7171] usb 1-1: Product: syz
[ 1740.954266][ T7171] usb 1-1: Manufacturer: syz
[ 1740.959143][ T7171] usb 1-1: SerialNumber: syz
[ 1740.970625][ T7171] appletouch 1-1:1.0: Could not find int-in endpoint
[ 1740.977785][ T7171] appletouch 1-1:1.0: probe with driver appletouch failed with error -5
[ 1740.990090][ T7171] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[ 1741.185287][  T975] usb 1-1: USB disconnect, device number 100
[ 1741.220534][T28380] netlink: 'syz.4.6503': attribute type 6 has an invalid length.
[ 1741.289786][T28380] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6503'.
[ 1741.803710][T28391] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1742.110580][T28379] fuse: Invalid rootmode
[ 1742.839596][  T975] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1743.022311][   T30] audit: type=1400 audit(1752276593.921:4013): avc:  denied  { read } for  pid=28404 comm="syz.4.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[ 1743.185209][  T975] usb 6-1: Using ep0 maxpacket: 32
[ 1743.257646][  T975] usb 6-1: config 0 has an invalid interface number: 140 but max is 0
[ 1743.267334][  T975] usb 6-1: config 0 has no interface number 0
[ 1743.352980][  T975] usb 6-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db
[ 1743.382870][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1743.409082][  T975] usb 6-1: Product: syz
[ 1743.426607][  T975] usb 6-1: Manufacturer: syz
[ 1743.453618][  T975] usb 6-1: SerialNumber: syz
[ 1743.477101][  T975] usb 6-1: config 0 descriptor??
[ 1743.592337][  T975] sierra 6-1:0.140: Sierra USB modem converter detected
[ 1743.818493][  T975] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[ 1743.839030][  T975] usb 6-1: USB disconnect, device number 90
[ 1743.989662][T24353] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1744.156528][  T975] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1744.169798][T24353] usb 1-1: Using ep0 maxpacket: 32
[ 1744.177410][  T975] sierra 6-1:0.140: device disconnected
[ 1744.409553][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1744.796646][T24353] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1744.815939][T24353] usb 1-1: config 0 has no interface number 0
[ 1744.876148][T24353] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1744.909597][T24353] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1744.932675][ T5897] usb 5-1: Using ep0 maxpacket: 32
[ 1744.947727][ T5897] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1744.969115][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1744.982978][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1744.992951][ T5897] usb 5-1: Product: syz
[ 1745.007382][ T5897] usb 5-1: Manufacturer: syz
[ 1745.014654][ T5897] usb 5-1: SerialNumber: syz
[ 1745.026394][ T5897] appletouch 5-1:1.0: Could not find int-in endpoint
[ 1745.034405][ T5897] appletouch 5-1:1.0: probe with driver appletouch failed with error -5
[ 1745.042783][T24353] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1745.042814][T24353] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1745.042837][T24353] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1745.042860][T24353] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1745.042882][T24353] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1745.042902][T24353] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[ 1745.042924][T24353] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1745.042942][T24353] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1745.137938][ T5897] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[ 1745.283987][ T7171] usb 5-1: USB disconnect, device number 10
[ 1745.311060][T24353] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1745.321188][T24353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1745.329246][T24353] usb 1-1: Product: syz
[ 1745.334465][T24353] usb 1-1: Manufacturer: syz
[ 1745.339105][T24353] usb 1-1: SerialNumber: syz
[ 1745.363153][T24353] usb 1-1: config 0 descriptor??
[ 1745.371002][T28418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1745.387092][T28418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1745.485789][T24353] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1745.494652][T24353] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1745.510983][T24353] scsi host1: microtekX6
[ 1746.110832][T28459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6527'.
[ 1746.347517][T28471] vivid-000: disconnect
[ 1746.421106][ T7171] usb 1-1: USB disconnect, device number 101
[ 1746.885382][T28456] vivid-000: reconnect
[ 1747.864457][T28483] netlink: 'syz.2.6533': attribute type 1 has an invalid length.
[ 1747.916906][T28483] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1747.944679][T28487] bond4: (slave veth9): Enslaving as an active interface with an up link
[ 1748.139579][ T7171] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 1748.329542][ T7171] usb 6-1: Using ep0 maxpacket: 32
[ 1748.340156][ T7171] usb 6-1: config 0 has an invalid interface number: 183 but max is 0
[ 1748.348495][ T7171] usb 6-1: config 0 has no interface number 0
[ 1748.399151][ T7171] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8
[ 1748.419720][ T7171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1748.438187][ T7171] usb 6-1: Product: syz
[ 1748.442616][ T7171] usb 6-1: Manufacturer: syz
[ 1748.447217][ T7171] usb 6-1: SerialNumber: syz
[ 1748.454302][ T7171] usb 6-1: config 0 descriptor??
[ 1748.460849][ T7171] net1080 6-1:0.183: probe with driver net1080 failed with error -22
[ 1748.638512][T28492] fuse: Invalid rootmode
[ 1748.930933][ T5897] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1749.097708][ T5897] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[ 1749.117990][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1749.140502][ T5897] usb 5-1: config 0 descriptor??
[ 1749.159955][ T5897] usb 5-1: selecting invalid altsetting 1
[ 1749.229296][ T5897] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1749.357337][T28496] xt_NFQUEUE: number of total queues is 0
[ 1749.698757][T28504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1749.725734][T28504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1750.679028][T28475] Set syz1 is full, maxelem 65536 reached
[ 1751.079050][T28510] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1751.505332][T28517] netlink: 'syz.2.6543': attribute type 1 has an invalid length.
[ 1751.544908][T28517] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1751.568125][T28517] bond5: (slave veth0_to_bond): making interface the new active one
[ 1751.577743][T28517] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1751.808019][ T7171] usb 5-1: USB disconnect, device number 11
[ 1751.889989][   T43] usb 6-1: USB disconnect, device number 91
[ 1752.232961][T28541] netlink: 'syz.4.6549': attribute type 1 has an invalid length.
[ 1752.275458][T28541] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1752.320373][T28541] bond2: (slave veth5): Enslaving as an active interface with an up link
[ 1752.578784][T28544] binder: BINDER_SET_CONTEXT_MGR already set
[ 1752.585039][T28544] binder: 28543:28544 ioctl 4018620d 200000000280 returned -16
[ 1752.595209][T28544] binder: 28543:28544 ioctl c0306201 200000000240 returned -11
[ 1753.669661][  T975] usb 1-1: new full-speed USB device number 102 using dummy_hcd
[ 1753.936608][  T975] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1753.956140][  T975] usb 1-1: config 0 has no interfaces?
[ 1754.253585][T23991] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1754.321752][  T975] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1754.360132][  T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1754.380153][  T975] usb 1-1: Product: syz
[ 1754.385565][  T975] usb 1-1: Manufacturer: syz
[ 1754.390867][  T975] usb 1-1: SerialNumber: syz
[ 1754.400229][  T975] usb 1-1: config 0 descriptor??
[ 1754.431079][T23991] usb 6-1: Using ep0 maxpacket: 32
[ 1754.437562][T23991] usb 6-1: config 0 has an invalid interface number: 183 but max is 0
[ 1754.446221][T23991] usb 6-1: config 0 has no interface number 0
[ 1754.557128][T23991] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8
[ 1754.586913][T23991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1754.625834][T23991] usb 6-1: Product: syz
[ 1754.646695][T23991] usb 6-1: Manufacturer: syz
[ 1754.663758][T23991] usb 6-1: SerialNumber: syz
[ 1754.687441][T23991] usb 6-1: config 0 descriptor??
[ 1754.719869][T23991] net1080 6-1:0.183: probe with driver net1080 failed with error -22
[ 1755.958537][T28602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6566'.
[ 1756.211715][T26901] usb 1-1: USB disconnect, device number 102
[ 1757.435867][   T43] usb 6-1: USB disconnect, device number 92
[ 1758.471813][T24353] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[ 1758.491533][T24353] hid-generic 0000:0000:0000.002F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1758.655502][T28649] binder: BINDER_SET_CONTEXT_MGR already set
[ 1758.661667][T28649] binder: 28648:28649 ioctl 4018620d 200000000280 returned -16
[ 1758.670890][T28649] binder: 28648:28649 ioctl c0306201 200000000240 returned -11
[ 1758.911719][T28637] fuse: Invalid rootmode
[ 1758.949558][T24353] usb 6-1: new full-speed USB device number 93 using dummy_hcd
[ 1759.555285][T24353] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1759.566162][T24353] usb 6-1: config 0 has no interfaces?
[ 1759.578490][T24353] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1759.592787][T24353] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1759.606851][T24353] usb 6-1: Product: syz
[ 1759.620712][T24353] usb 6-1: Manufacturer: syz
[ 1759.626236][T24353] usb 6-1: SerialNumber: syz
[ 1759.634154][T24353] usb 6-1: config 0 descriptor??
[ 1761.366481][T24353] usb 6-1: USB disconnect, device number 93
[ 1762.259600][T28694] vlan2: entered allmulticast mode
[ 1762.827112][   T43] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0
[ 1762.861030][   T43] hid-generic 0000:0000:0000.0030: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1763.460954][T26901] usb 6-1: new full-speed USB device number 94 using dummy_hcd
[ 1763.464641][T28706] fuse: Invalid rootmode
[ 1763.640303][T26901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1763.652019][T26901] usb 6-1: config 0 has no interfaces?
[ 1763.671275][T26901] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1763.681625][T26901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.689660][T26901] usb 6-1: Product: syz
[ 1763.693836][T26901] usb 6-1: Manufacturer: syz
[ 1763.698653][T26901] usb 6-1: SerialNumber: syz
[ 1763.715835][T26901] usb 6-1: config 0 descriptor??
[ 1764.439557][ T5897] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1764.599295][ T5897] usb 5-1: device descriptor read/64, error -71
[ 1764.869735][ T5897] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1765.089670][ T5897] usb 5-1: device descriptor read/64, error -71
[ 1765.231205][ T5897] usb usb5-port1: attempt power cycle
[ 1765.660055][ T5897] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1765.691569][ T5897] usb 5-1: device descriptor read/8, error -71
[ 1765.939615][ T5897] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1765.961475][ T5897] usb 5-1: device descriptor read/8, error -71
[ 1766.083772][ T5897] usb usb5-port1: unable to enumerate USB device
[ 1766.797277][   T43] usb 6-1: USB disconnect, device number 94
[ 1767.402580][T28782] netlink: 'syz.4.6620': attribute type 1 has an invalid length.
[ 1767.462745][T28782] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1767.474417][T28782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6620'.
[ 1767.531726][T28782] bond3: (slave veth0_to_bond): making interface the new active one
[ 1767.556551][T28782] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1767.633851][T28793] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6623'.
[ 1768.039546][   T43] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1768.729560][   T43] usb 6-1: Using ep0 maxpacket: 8
[ 1768.747744][   T43] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1768.774436][   T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1768.803363][   T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1768.833840][   T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1768.861836][   T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1768.875213][   T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1768.884636][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1769.126979][   T43] usb 6-1: GET_CAPABILITIES returned 0
[ 1769.132790][   T43] usbtmc 6-1:16.0: can't read capabilities
[ 1770.230870][   T30] audit: type=1400 audit(1752276621.151:4014): avc:  denied  { create } for  pid=28799 comm="syz.5.6625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[ 1770.293875][   T30] audit: type=1400 audit(1752276621.181:4015): avc:  denied  { ioctl } for  pid=28799 comm="syz.5.6625" path="socket:[130938]" dev="sockfs" ino=130938 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[ 1771.461122][ T5897] usb 6-1: USB disconnect, device number 95
[ 1772.752730][T28874] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6648'.
[ 1773.159564][T26901] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1773.328317][T26901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1773.369555][T26901] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1773.378684][T26901] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1773.389395][T26901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1773.479026][T26901] usb 6-1: config 0 descriptor??
[ 1774.319623][T26901] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 1774.609599][T26901] usb 1-1: Using ep0 maxpacket: 32
[ 1774.618331][T26901] usb 1-1: config 0 has an invalid interface number: 146 but max is 0
[ 1774.627819][T26901] usb 1-1: config 0 has no interface number 0
[ 1774.634198][T26901] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1774.646402][T26901] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1774.659053][T26901] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1774.671073][T26901] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1774.682075][T26901] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1774.696513][T26901] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1774.706771][T26901] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1774.717003][T26901] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[ 1774.728559][T26901] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1774.739654][T26901] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1774.767481][T26901] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1774.778703][T26901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1774.788149][T26901] usb 1-1: Product: syz
[ 1774.793060][T26901] usb 1-1: Manufacturer: syz
[ 1774.797923][T26901] usb 1-1: SerialNumber: syz
[ 1774.804188][T26901] usb 1-1: config 0 descriptor??
[ 1774.811943][T28908] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1774.820341][T28908] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1774.829619][T26901] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1774.841777][T26901] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1774.861337][T26901] scsi host1: microtekX6
[ 1775.954492][  T975] usb 6-1: USB disconnect, device number 96
[ 1776.065334][   T43] usb 1-1: USB disconnect, device number 103
[ 1777.972738][T28954] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1779.071303][T28977] kvm: pic: non byte write
[ 1781.082349][T28989] fuse: Invalid rootmode
[ 1783.573356][T29051] netlink: 'syz.5.6695': attribute type 1 has an invalid length.
[ 1783.601254][T29051] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1783.612534][T29051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6695'.
[ 1783.622683][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6695'.
[ 1783.754548][T29051] bond5: (slave veth0_to_bond): Releasing backup interface
[ 1783.767371][T29051] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1786.612332][T29103] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6709'.
[ 1787.199664][ T5897] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1787.718856][ T5897] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1787.777184][ T5897] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1787.896227][ T5897] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1787.961427][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.018335][ T5897] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1788.232152][ T5897] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1789.069943][T26901] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1789.241122][T26901] usb 1-1: Using ep0 maxpacket: 8
[ 1789.256970][T26901] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1789.276185][T26901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1789.315663][T26901] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1789.371636][T26901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1789.408194][T26901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1789.444282][T26901] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1789.463792][T26901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1789.491717][T26901] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1789.509813][T26901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1789.529501][T26901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1789.566691][T26901] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1789.601697][T26901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1789.625689][T26901] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1789.653328][T26901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1789.705312][T26901] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1789.755136][T23991] usb 6-1: USB disconnect, device number 97
[ 1789.770916][T26901] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1789.910534][T26901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1789.918635][T26901] usb 1-1: Product: syz
[ 1789.923111][T26901] usb 1-1: Manufacturer: syz
[ 1789.927728][T26901] usb 1-1: SerialNumber: syz
[ 1789.943829][ T5897] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1790.109535][ T5897] usb 5-1: Using ep0 maxpacket: 32
[ 1790.120593][ T5897] usb 5-1: config 0 has an invalid interface number: 146 but max is 0
[ 1790.128901][ T5897] usb 5-1: config 0 has no interface number 0
[ 1790.169378][T26901] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1790.188976][ T5897] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1790.210700][T26901] usb 1-1: USB disconnect, device number 104
[ 1790.227768][ T5897] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1790.248285][ T5897] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1790.260882][ T5897] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1790.280879][ T5897] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1790.302686][ T5897] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1790.329513][ T5897] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1790.373016][ T5897] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[ 1790.392518][ T5897] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1790.403411][ T5897] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1790.421968][ T5897] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1790.432173][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1790.455661][ T5897] usb 5-1: Product: syz
[ 1790.479509][ T5897] usb 5-1: Manufacturer: syz
[ 1790.571142][ T5897] usb 5-1: SerialNumber: syz
[ 1790.586667][ T5897] usb 5-1: config 0 descriptor??
[ 1790.592601][T29142] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1790.600183][T29142] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1790.608364][ T5897] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1790.617542][ T5897] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1790.639526][ T5897] scsi host1: microtekX6
[ 1791.008017][T29159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1791.017194][T29159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1791.119520][T26901] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1791.223946][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.230349][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.319589][T26901] usb 6-1: Using ep0 maxpacket: 8
[ 1791.330472][T26901] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1791.349274][T26901] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1791.371417][T26901] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1791.424986][T26901] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1791.502097][T26901] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1791.507965][ T7171] usb 5-1: USB disconnect, device number 16
[ 1791.564816][T26901] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1791.574013][T26901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1791.935879][T26901] usb 6-1: usb_control_msg returned -71
[ 1791.946025][T26901] usbtmc 6-1:16.0: can't read capabilities
[ 1791.982145][T26901] usb 6-1: USB disconnect, device number 98
[ 1792.621558][T29140] Set syz1 is full, maxelem 65536 reached
[ 1793.589631][ T7171] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 1793.600464][T29196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1793.610777][T29196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1793.679580][   T43] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1793.749845][ T7171] usb 1-1: Using ep0 maxpacket: 8
[ 1793.759334][ T7171] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1793.764466][T29198] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6738'.
[ 1793.767829][ T7171] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1793.776062][T29198] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6738'.
[ 1793.796629][ T7171] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1793.798299][T29198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6738'.
[ 1793.809961][ T7171] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1793.828924][ T7171] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1793.842134][ T7171] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1793.851126][ T7171] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1793.863024][   T43] usb 6-1: Using ep0 maxpacket: 8
[ 1793.868726][ T7171] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1793.881293][   T43] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1793.889711][   T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1793.900538][   T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1793.911002][   T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1793.921054][ T7171] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1793.932246][   T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1793.946348][ T7171] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1793.958251][   T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1793.967665][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1793.976509][ T7171] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1793.984153][ T7171] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1793.997551][ T7171] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1794.009427][ T7171] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1794.022076][ T7171] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1794.035677][ T7171] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1794.045281][ T7171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1794.053402][ T7171] usb 1-1: Product: syz
[ 1794.057639][ T7171] usb 1-1: Manufacturer: syz
[ 1794.062311][ T7171] usb 1-1: SerialNumber: syz
[ 1794.311517][   T43] usb 6-1: GET_CAPABILITIES returned 0
[ 1794.317156][   T43] usbtmc 6-1:16.0: can't read capabilities
[ 1794.326908][ T7171] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux1
[ 1794.338518][ T7171] usb 1-1: USB disconnect, device number 105
[ 1795.344276][T29218] fuse: Invalid rootmode
[ 1796.633080][T29241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1796.642536][T29241] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1796.653204][T29241] xt_NFQUEUE: number of total queues is 0
[ 1796.765799][T26901] usb 6-1: USB disconnect, device number 99
[ 1797.228594][T26901] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1797.423426][T29253] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6754'.
[ 1797.449524][T26901] usb 6-1: Using ep0 maxpacket: 32
[ 1797.480552][T26901] usb 6-1: config 0 has an invalid interface number: 146 but max is 0
[ 1797.489052][T26901] usb 6-1: config 0 has no interface number 0
[ 1797.503685][T26901] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1797.517214][T26901] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1797.542743][T26901] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1797.564498][T26901] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1797.628768][T26901] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1797.687018][T26901] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1797.744493][T26901] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1797.849494][T26901] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[ 1797.909523][T26901] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1797.983920][T26901] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1798.055242][T26901] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1798.102583][T26901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1798.168391][T26901] usb 6-1: Product: syz
[ 1798.195940][T26901] usb 6-1: Manufacturer: syz
[ 1798.219523][T26901] usb 6-1: SerialNumber: syz
[ 1798.241241][T26901] usb 6-1: config 0 descriptor??
[ 1798.244014][T29266] netlink: 112 bytes leftover after parsing attributes in process `syz.7.6758'.
[ 1798.289926][T29247] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1798.299183][T29247] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1798.312993][T26901] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1798.358404][T26901] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1798.399537][   T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1798.536151][T26901] scsi host1: microtekX6
[ 1798.598720][   T43] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1798.632961][   T43] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1798.649773][   T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1798.659592][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1798.691829][   T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1799.160831][   T43] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1799.416006][T26901] usb 6-1: USB disconnect, device number 100
[ 1800.633512][T29287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6763'.
[ 1800.642720][T29287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6763'.
[ 1800.831857][T26901] usb 5-1: USB disconnect, device number 17
[ 1801.330522][T29294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6766'.
[ 1801.480645][   T31] INFO: task kworker/0:5:9749 blocked for more than 143 seconds.
[ 1801.506352][   T31]       Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0
[ 1801.526221][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1801.543081][   T31] task:kworker/0:5     state:D stack:22664 pid:9749  tgid:9749  ppid:2      task_flags:0x4208060 flags:0x00004000
[ 1801.569426][   T31] Workqueue: usb_hub_wq hub_event
[ 1801.778306][   T31] Call Trace:
[ 1801.876742][   T31]  <TASK>
[ 1801.880530][   T31]  __schedule+0x116a/0x5de0
[ 1801.885196][   T31]  ? device_unregister+0x1d/0xc0
[ 1801.891804][   T31]  ? i2c_del_adapter+0x53e/0x6f0
[ 1801.946577][   T31]  ? dvb_usbv2_exit.isra.0+0x45b/0x9f0
[ 1802.027360][   T31]  ? dvb_usbv2_probe+0x1f61/0x3e50
[ 1802.047532][   T31]  ? __device_attach_driver+0x101/0x310
[ 1802.093019][   T31]  ? __pfx___schedule+0x10/0x10
[ 1802.126312][   T31]  ? find_held_lock+0x2b/0x80
[ 1802.131124][   T31]  ? schedule+0x2d7/0x3a0
[ 1802.135475][   T31]  schedule+0xe7/0x3a0
[ 1802.157598][   T31]  schedule_timeout+0x257/0x290
[ 1802.163109][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1802.172774][   T31]  ? mark_held_locks+0x49/0x80
[ 1802.178629][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1802.190005][   T31]  __wait_for_common+0x2fc/0x4e0
[ 1802.195650][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1802.201085][   T31]  ? __pfx___wait_for_common+0x10/0x10
[ 1802.240942][   T31]  ? __pfx_device_del+0x10/0x10
[ 1802.246231][   T31]  ? kobject_put+0xab/0x5a0
[ 1802.286689][   T31]  i2c_del_adapter+0x546/0x6f0
[ 1802.302458][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[ 1802.315818][   T31]  ? kfree+0x2b4/0x4d0
[ 1802.329795][   T31]  ? media_device_cleanup+0x53/0x80
[ 1802.346173][   T31]  ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0
[ 1802.358491][   T31]  dvb_usbv2_exit.isra.0+0x45b/0x9f0
[ 1802.364184][   T31]  dvb_usbv2_probe+0x1f61/0x3e50
[ 1802.370220][   T31]  ? __pfx_dvb_usbv2_probe+0x10/0x10
[ 1802.375843][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1802.383497][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1802.390748][   T31]  ? __pm_runtime_set_status+0x13c/0xa80
[ 1802.397248][   T31]  usb_probe_interface+0x303/0x9c0
[ 1802.404042][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1802.411285][   T31]  really_probe+0x23e/0xa90
[ 1802.416212][   T31]  __driver_probe_device+0x1de/0x440
[ 1802.423027][   T31]  driver_probe_device+0x4c/0x1b0
[ 1802.428365][   T31]  __device_attach_driver+0x1df/0x310
[ 1802.435179][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1802.441352][   T31]  bus_for_each_drv+0x156/0x1e0
[ 1802.446853][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1802.452603][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1802.458017][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1802.464155][   T31]  __device_attach+0x1e4/0x4b0
[ 1802.469060][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1802.474901][   T31]  ? do_raw_spin_unlock+0x172/0x230
[ 1802.480644][   T31]  bus_probe_device+0x17f/0x1c0
[ 1802.486046][   T31]  device_add+0x1148/0x1a70
[ 1802.490863][   T31]  ? __pfx_device_add+0x10/0x10
[ 1802.496084][   T31]  ? usb_cache_string+0xf2/0x150
[ 1802.504393][   T31]  usb_set_configuration+0x1187/0x1e20
[ 1802.512298][   T31]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[ 1802.518599][   T31]  usb_generic_driver_probe+0xb1/0x110
[ 1802.525049][   T31]  usb_probe_device+0xef/0x3e0
[ 1802.532021][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 1802.539223][   T31]  really_probe+0x23e/0xa90
[ 1802.544175][   T31]  __driver_probe_device+0x1de/0x440
[ 1802.551143][   T31]  ? usb_driver_applicable+0x1c7/0x220
[ 1802.557088][   T31]  driver_probe_device+0x4c/0x1b0
[ 1802.587928][   T31]  __device_attach_driver+0x1df/0x310
[ 1802.594904][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 1802.602332][   T31]  bus_for_each_drv+0x156/0x1e0
[ 1802.607341][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1802.613509][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1802.618914][   T31]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1802.625170][   T31]  __device_attach+0x1e4/0x4b0
[ 1802.630117][   T31]  ? __pfx___device_attach+0x10/0x10
[ 1802.635622][   T31]  ? do_raw_spin_unlock+0x172/0x230
[ 1802.642025][   T31]  bus_probe_device+0x17f/0x1c0
[ 1802.646971][   T31]  device_add+0x1148/0x1a70
[ 1802.652090][   T31]  ? __pfx_device_add+0x10/0x10
[ 1802.657226][   T31]  ? usb_detect_static_quirks+0x335/0x3e0
[ 1802.664902][   T31]  ? __usb_get_extra_descriptor+0x158/0x1c0
[ 1802.672697][   T31]  usb_new_device+0xd07/0x1a20
[ 1802.678478][   T31]  ? do_raw_spin_lock+0x12c/0x2b0
[ 1802.685899][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 1802.695324][   T31]  ? mark_held_locks+0x49/0x80
[ 1802.701673][   T31]  hub_event+0x2eb7/0x4fa0
[ 1802.706118][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1802.710892][   T31]  ? ioread8+0xa0/0xa0
[ 1802.716144][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1802.723484][   T31]  process_one_work+0x9cf/0x1b70
[ 1802.728793][   T31]  ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10
[ 1802.735336][   T31]  ? __pfx_process_one_work+0x10/0x10
[ 1802.743000][   T31]  ? assign_work+0x1a0/0x250
[ 1802.747635][   T31]  worker_thread+0x6c8/0xf10
[ 1802.753082][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1802.758217][   T31]  kthread+0x3c5/0x780
[ 1802.762481][   T31]  ? __pfx_kthread+0x10/0x10
[ 1802.767161][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1802.772107][   T31]  ? __pfx_kthread+0x10/0x10
[ 1802.776770][   T31]  ret_from_fork+0x5d7/0x6f0
[ 1802.781665][   T31]  ? __pfx_kthread+0x10/0x10
[ 1802.786263][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1802.791120][   T31]  </TASK>
[ 1802.794378][   T31] 
[ 1802.794378][   T31] Showing all locks held in the system:
[ 1802.802675][   T31] 3 locks held by kworker/u8:1/13:
[ 1802.807799][   T31] 1 lock held by khungtaskd/31:
[ 1802.812678][   T31]  #0: ffffffff8e5c4e80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0
[ 1802.822667][   T31] 2 locks held by getty/5596:
[ 1802.827394][   T31]  #0: ffff888032a460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1802.837210][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0
[ 1802.848270][   T31] 5 locks held by kworker/0:5/9749:
[ 1802.853748][   T31]  #0: ffff8881446a0148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70
[ 1802.864616][   T31]  #1: ffffc900030f7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70
[ 1802.875951][   T31]  #2: ffff888029a1a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0
[ 1802.884880][   T31]  #3: ffff88801dbbc198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[ 1802.894275][   T31]  #4: ffff888054805160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0
[ 1802.906646][   T31] 2 locks held by syz.2.6756/29257:
[ 1802.911933][   T31] 1 lock held by syz.4.6765/29291:
[ 1802.917093][   T31]  #0: ffffffff8e5d0340 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0
[ 1802.927235][   T31] 1 lock held by syz.0.6769/29306:
[ 1802.934781][   T31]  #0: ffff8880264e9368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0x136/0x1e0
[ 1802.946055][   T31] 
[ 1802.948386][   T31] =============================================
[ 1802.948386][   T31] 
[ 1802.977667][   T31] NMI backtrace for cpu 0
[ 1802.977686][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) 
[ 1802.977708][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1802.977718][   T31] Call Trace:
[ 1802.977724][   T31]  <TASK>
[ 1802.977732][   T31]  dump_stack_lvl+0x116/0x1f0
[ 1802.977766][   T31]  nmi_cpu_backtrace+0x27b/0x390
[ 1802.977787][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1802.977813][   T31]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[ 1802.977835][   T31]  watchdog+0xf70/0x12c0
[ 1802.977860][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1802.977876][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1802.977901][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1802.977927][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1802.977944][   T31]  kthread+0x3c5/0x780
[ 1802.977963][   T31]  ? __pfx_kthread+0x10/0x10
[ 1802.977981][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1802.978003][   T31]  ? __pfx_kthread+0x10/0x10
[ 1802.978021][   T31]  ret_from_fork+0x5d7/0x6f0
[ 1802.978046][   T31]  ? __pfx_kthread+0x10/0x10
[ 1802.978063][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1802.978094][   T31]  </TASK>
[ 1802.978101][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1803.096672][    C1] NMI backtrace for cpu 1
[ 1803.096688][    C1] CPU: 1 UID: 0 PID: 3608 Comm: kworker/u8:10 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) 
[ 1803.096706][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1803.096715][    C1] Workqueue: bat_events batadv_nc_worker
[ 1803.096736][    C1] RIP: 0010:__lock_acquire+0x3d9/0x1c90
[ 1803.096879][    C1] Code: 48 89 ef e8 b9 f3 ff ff 85 c0 74 7c 8b 95 d0 0a 00 00 85 d2 74 14 ba 06 00 00 00 4c 89 ee 48 89 ef e8 9b f3 ff ff 85 c0 74 5e <ba> 08 00 00 00 4c 89 ee 48 89 ef e8 87 f3 ff ff 85 c0 74 4a 8b 05
[ 1803.096895][    C1] RSP: 0018:ffffc9000cd879e8 EFLAGS: 00000046
[ 1803.096907][    C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff95dd4008
[ 1803.096924][    C1] RDX: 0000000000000005 RSI: 0000000000000002 RDI: ffff88803364af80
[ 1803.096932][    C1] RBP: ffff88803364a440 R08: 0000000000000000 R09: 0000000000000000
[ 1803.096940][    C1] R10: 0000000000000050 R11: 0000000000000001 R12: ffff88803364af30
[ 1803.096949][    C1] R13: ffff88803364af80 R14: 0000000000000002 R15: 0000000000000001
[ 1803.096957][    C1] FS:  0000000000000000(0000) GS:ffff888124815000(0000) knlGS:0000000000000000
[ 1803.096971][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1803.096980][    C1] CR2: 0000001b3201eff8 CR3: 000000000e382000 CR4: 00000000003526f0
[ 1803.096989][    C1] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff
[ 1803.096998][    C1] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1803.097007][    C1] Call Trace:
[ 1803.097014][    C1]  <TASK>
[ 1803.097024][    C1]  lock_acquire+0x179/0x350
[ 1803.097039][    C1]  ? batadv_nc_worker+0x159/0x1030
[ 1803.097057][    C1]  ? batadv_nc_worker+0x895/0x1030
[ 1803.097073][    C1]  batadv_nc_worker+0x16a/0x1030
[ 1803.097088][    C1]  ? batadv_nc_worker+0x159/0x1030
[ 1803.097104][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1803.097122][    C1]  ? __pfx_batadv_nc_worker+0x10/0x10
[ 1803.097140][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1803.097157][    C1]  process_one_work+0x9cf/0x1b70
[ 1803.097174][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 1803.097192][    C1]  ? __pfx_process_one_work+0x10/0x10
[ 1803.097209][    C1]  ? assign_work+0x1a0/0x250
[ 1803.097222][    C1]  worker_thread+0x6c8/0xf10
[ 1803.097238][    C1]  ? __kthread_parkme+0x19e/0x250
[ 1803.097256][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 1803.097270][    C1]  kthread+0x3c5/0x780
[ 1803.097283][    C1]  ? __pfx_kthread+0x10/0x10
[ 1803.097296][    C1]  ? rcu_is_watching+0x12/0xc0
[ 1803.097312][    C1]  ? __pfx_kthread+0x10/0x10
[ 1803.097325][    C1]  ret_from_fork+0x5d7/0x6f0
[ 1803.097344][    C1]  ? __pfx_kthread+0x10/0x10
[ 1803.097356][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1803.097376][    C1]  </TASK>
[ 1803.098338][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1803.364297][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) 
[ 1803.376086][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1803.386127][   T31] Call Trace:
[ 1803.389390][   T31]  <TASK>
[ 1803.392307][   T31]  dump_stack_lvl+0x3d/0x1f0
[ 1803.396889][   T31]  panic+0x71c/0x800
[ 1803.400776][   T31]  ? __pfx___irq_work_queue_local+0x10/0x10
[ 1803.406657][   T31]  ? __pfx_panic+0x10/0x10
[ 1803.411065][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1803.416427][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1803.422395][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1803.427752][   T31]  ? watchdog+0xdda/0x12c0
[ 1803.432152][   T31]  ? watchdog+0xdcd/0x12c0
[ 1803.436556][   T31]  watchdog+0xdeb/0x12c0
[ 1803.440789][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1803.445452][   T31]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1803.450639][   T31]  ? __kthread_parkme+0x19e/0x250
[ 1803.455653][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1803.460314][   T31]  kthread+0x3c5/0x780
[ 1803.464369][   T31]  ? __pfx_kthread+0x10/0x10
[ 1803.468944][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1803.473696][   T31]  ? __pfx_kthread+0x10/0x10
[ 1803.478274][   T31]  ret_from_fork+0x5d7/0x6f0
[ 1803.482855][   T31]  ? __pfx_kthread+0x10/0x10
[ 1803.487429][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1803.492188][   T31]  </TASK>
[ 1803.495382][   T31] Kernel Offset: disabled
[ 1803.499688][   T31] Rebooting in 86400 seconds..