last executing test programs:

10m39.866762452s ago: executing program 1 (id=39):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
file_getattr(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x18, 0x1000)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521)
r3 = socket(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[], 0x78)
sendfile(r4, r5, &(0x7f00000001c0), 0x8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendto$packet(r1, &(0x7f0000000440)="d21db6d0ea8f22c8593796c23fdfeeaf282e0bb59cc0b843f8080996f37d4d904aca", 0x22, 0x8814, &(0x7f00000002c0)={0x11, 0x88f7, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
syz_usb_connect$midi(0x3, 0xd1, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x3, 0x20, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x30, 0x6, [@midi_in_jack={0x6, 0x24, 0x2, 0x6, 0xc4, 0x9}], [{{0x9, 0x5, 0x5cf833423b0f89fa, 0x2, 0x8, 0x0, 0x2, 0x6, {0xf, 0x25, 0x1, 0xb, "e36fa7a5594e6dda64ba17"}}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x0, 0x2, 0x2, {0xc, 0x25, 0x1, 0x8, "bbb7944814570733"}}}, {{0x9, 0x5, 0xb, 0x4, 0x3ff, 0x5, 0x6, 0x9, {0xd, 0x25, 0x1, 0x9, "6f3e96b73a2cbbbeee"}}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x7, 0x9, 0x80, {0xc, 0x25, 0x1, 0x8, "b756dc8ca6306fdd"}}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x3d, 0x6, 0x55, {0x12, 0x25, 0x1, 0xe, "3a9b6411e376871fbd3ea6b9a21c"}}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x7, 0xa, 0x95, {0x9, 0x25, 0x1, 0x5, "22979aca06"}}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x3, 0x6, 0x6, {0x7, 0x25, 0x1, 0x3, "3d8dab"}}}, {{0x9, 0x5, 0x8, 0x0, 0x230, 0xb, 0x7, 0x6, {0x9, 0x25, 0x1, 0x5, "0962e56ef6"}}}]}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x1, 0x5, 0x7, 0x10, 0xa}, 0x2c, &(0x7f0000000140)={0x5, 0xf, 0x2c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x8, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x10000, 0xff00, 0x2, [0xc030, 0x3f00, 0xffc0cf, 0xc000, 0xff0000]}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1404}}]})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r8 = syz_open_dev$dvb_frontend(&(0x7f0000000240), 0x2acc, 0x92000)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000340)={0x14}, 0x14)
ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r8, 0x800c6f40, &(0x7f0000000280)={""/4, 0x4})
write$FUSE_INIT(r0, &(0x7f0000000480)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9900bf94, 0xae08, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10m38.045697682s ago: executing program 1 (id=44):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="f80400001e0001032abd7000fedbdf257f000001000000000000000000000000000004d402002b00fc010000000000000000000000000000030000000035000010000a"], 0x4f8}, 0x1, 0x0, 0x0, 0x40014}, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
splice(r1, 0x0, r2, 0x0, 0x7c1f, 0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={<r3=>0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f00000001c0)=0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r3, 0x8001, 0x0, 0x7fff, 0xd, 0x8}, &(0x7f0000000240)=0x14)

10m37.831234896s ago: executing program 1 (id=45):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x40010)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, &(0x7f0000000200))
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = inotify_init()
inotify_add_watch(r7, &(0x7f0000000000)='.\x00', 0x981)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'wg0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0x1, 0x400, 0x0, 0x8000, 0x401, 0x9, 0x6, 0x5}})
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x5}})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="000a0100000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10m34.105889809s ago: executing program 1 (id=61):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)="fa87c7e72022c7b864b07519029431b0f73faf3562d4199e9f31c1dd1202787cdc0dad572930535fe281583dce41f94472697f744b2aec18a02dafedcfe93533ddc8f52bf553629fad5e0e873ea442348753ce7f0b8a", 0x56}, {&(0x7f0000000340)="0a2b131fed7c3b0ace259fcc73c7401df65ac597b979f6cc76064e5a3b452de24ce402ad11a56e85c9fe9f3c2e305933c9adbcc8576d051634f516897eb95943656f8b840b1fb922463f63432934f3dab5c65c44056b72e7ff918b9ca85191d8d7e22c1be0d7d93d7856a47685f073eaf6b24c19e5e73fdedd74dda9d44152b5df29f2349596ce5a365d9fa9fada901203e43cac955d56a9f4493c207d27df2a9d69485639b494a07538110dba4426e4b42597c59909d96869e7d7", 0xbb}, {&(0x7f0000000440)="ae2917d5a4b014842a61845c01908087c19287ad5d95c4053c4acbbd1a55627bf84a05cf9d6eed56274564", 0x2b}, {&(0x7f0000000640)="3fd86240836c56786709aa10b4c27b60ae1dc382c772f8c8004beffbfbff60aee2e3c6af39836c9fc4dbdda40a19e1f2635d7af399581a0f70ddefce87466f1440e2c21a8773ac4f3b2d5c8bfa9451ed3be6e55b68033085556f00db59648336586bf01013a839293a8dce06f9698af2761f685737637ac4282fbef83a45127bc95758c0f7cd74cd77275225e4ff440dd513073746f42cb68a3c32e14c2e6903b2cff77d7a22d28977b8ef1650cbaf8ee0c82770aea9896ef6b2ffba68e7757498d5a8324de270c9a29579bb0443f50f6c84bdd789e89c28a3ff0f5a3cafff994cd1ff8ebcbe46589b216d", 0xeb}, {&(0x7f0000000740)="a92a26692895c48e5670e19cc646f85a75772f22ae06b576502dcae8deef2c85890ba3a489d85a850088295e495a45179795ff4e4e8560da757145dd589c53242fb40dc5641fec08c566e437445c185643ce0a048a29e0694250424da6e4f97c9ad2b4", 0x63}, {&(0x7f00000007c0)="2b0a051fa993351ed5723dcb3ab0688eee58946e525bf73863d753c53084ff25887ff03601f9c579a49c6445c7a92bdcd09da9cbdb79699386f151003e7b33efaa92e9157902eb9c86f09f37922516c03d010650b043161320b26dfd", 0x5c}], 0x6}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000fc0)="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", 0x17d}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
shutdown(r0, 0x1)

10m33.922658291s ago: executing program 1 (id=62):
syz_open_dev$usbfs(0x0, 0x8, 0x1c3d00)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x400, 0x400, 0x10, 0x80, 0x0, 0x0, 0x20, 0x1, {0xc, 0x2}, {0x1, 0x2, 0x1}, {0xfff, 0x10000}, {0x1, 0x2, 0x1}, 0x1, 0x180, 0x1, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x5, 0xdb, 0x0, 0x6, 0x8, 0x100, 0x1, 0x7})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, 0x0, 0x0, 0x40800)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x4}}, 0x18)
sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="e182b6a97d86968990de07d09c7b27165a33c5e915c264dd76b62ee007e6910ea0c24870b5dd1555177f3b57a592f7c01ed0a91b8a337a65e36beb", 0x3b}, {&(0x7f0000000180)="820b7df1db6a85763e594d4201f7d5ada037da21779f39730a1da44e1f6a411cd588d1831fd319154d644bf5eb410643d31efe08e6bda8f73ce723f73e03257d5809b3b509b3234c39ab27b40ba945a0e77a3930562493e13b79b4a965b15aead57b5eb9d2b3453463495448b1798c0060e2cf447acce67dc06b4b32b3c29b0bed82e68d679f07ab057b770900abc76a148add9dfe2f79192fbeec50ce7e5fc46b6e5293e5fd62a0d20f0cbcd21e6914d63cbd97328e5bbb", 0xb8}], 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x220, 0x4}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)="d2117433247763617c8a4ee5560c2f52d47bec05ac35da1daa2f936f227352f098ab6b9c856fe43816529a21df0f91470b2640", 0x33}, {&(0x7f0000000680)="9e2ab4aae974d8c58ad6825203e90a914006304af0ba1ab365c2b57f257543b182623f575f1ca202a78818861641e1e234e72f6dc451ad6cfc5889fcc5", 0x3d}], 0x2, 0x0, 0x0, 0x4008}, {0x0, 0x0, &(0x7f0000001800), 0x4, &(0x7f0000001840), 0x0, 0x804}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a40)="db3ab9a5fd5a2ba3e6db750d08faea9f1d42aa7d85d5ae156559bdaf28ea24fcc73d6961bb2820e0e5a52284676b0d1ab01915a4651d21fa335f8cea698b1594577e75af393c3159688229bd069ed7441a83e6a06346f10126f4ba972db8e0c31cd635d09cb216447679589a7f214b60f033fd8bc79ed84ce19b080fe0621c45485d0f4c3c2e8d111886adf07ce410079aaf8a992dbececad3455744cf", 0x9d}, {&(0x7f0000001b00)="b8970de1da8a8a4e6f0c6f1ef747bf29086900aa5be72eddd03944d8df54636720e437859190b3e2937ac9b56acfe2339db7ed82cf8d2565c596945a38923c85d833a9a2f44db38246db66fa9f6fc5dd900479bd4405c887d53805911d320a9e7389676f3ae59e35ab8206562325d58ef51aad7a27e74e7d0bf7da12d384a0dfc9313a891abd90238cfef5bc73432904d96bc009e78a7a6dc230377a50e9757a398c373417b8ade50b4377a8308282250d51ccd098a684f50db5a43dac97e8497333e25c579aef7fe5edbc94c867c7313c5cba20d0022e994795276ae7", 0xdd}], 0x2, 0x0, 0x0, 0x6000000}], 0x4, 0x2000c084)

10m33.855847794s ago: executing program 1 (id=64):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000003580), 0x183140, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000035c0)=0x3)
connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x3, @any, 0x800, 0x2}, 0xe)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
ftruncate(r3, 0xa)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
setresuid(r4, r4, 0x0)
mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080))

10m18.702123159s ago: executing program 32 (id=64):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000003580), 0x183140, 0x0)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000035c0)=0x3)
connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x3, @any, 0x800, 0x2}, 0xe)
syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
ftruncate(r3, 0xa)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
setresuid(r4, r4, 0x0)
mincore(&(0x7f0000185000/0x3000)=nil, 0x3000, &(0x7f0000000240)=""/68)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080))

10m15.497126467s ago: executing program 3 (id=226):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
umount2(0x0, 0xd)

10m15.460381232s ago: executing program 3 (id=228):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="e80000000002030000000000000000000700000974000a805800028014000180080001000000000008000200ac1e01011400018008000100ffffffff08000200ac1414aa0c000280050001002100000006000340000100000600034a000300000600034000020000060003400000000008000140000000010800014000000001080001400000000160000a80080001400000000008000140000000014c00028006000340000100000c000280050001008400000006000340000300000c00028005000100880000000c000280050001008800000006000340000313000c000280050001003a000000"], 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000003800)={0xd78, 0xc, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000140)=0x7, 0x4)
sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000000100)={0xa, 0x4, 0x8, @remote, 0xa}, 0x1c)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSBRKP(r2, 0x5425, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0x9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/186, 0xba}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

10m15.01446444s ago: executing program 3 (id=232):
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80)
ioctl$I2C_RDWR(r0, 0x707, 0x0)

10m13.540644767s ago: executing program 3 (id=235):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
umount2(0x0, 0xd)

10m13.44273565s ago: executing program 3 (id=236):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
setxattr$system_posix_acl(&(0x7f0000005700)='.\x00', &(0x7f0000005740)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000500000000000400070000000000100002000000000020"], 0x24, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)
read(r1, &(0x7f0000000080)=""/133, 0x85)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)

10m13.033386293s ago: executing program 3 (id=241):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_usb_connect(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0xcf, 0xa3, 0x5d, 0x8, 0x2c7c, 0x121, 0x833f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0xff, 0xe0, 0x9, "", [{{0x9, 0x4, 0x9d, 0x6, 0x2, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x3, 0x7f}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7, 0x0, 0x2}}]}}]}}]}}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)

9m57.975592276s ago: executing program 33 (id=241):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x2, 0x779acd4f0ad4811f, 0x0, 0x2, 0x2}})
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080003000d000000", 0x24)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_usb_connect(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x300, 0xcf, 0xa3, 0x5d, 0x8, 0x2c7c, 0x121, 0x833f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0xff, 0xe0, 0x9, "", [{{0x9, 0x4, 0x9d, 0x6, 0x2, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0x7, 0x3, 0x7f}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x7, 0x0, 0x2}}]}}]}}]}}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0})
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0)

5m42.882598135s ago: executing program 5 (id=2418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, r1, 0x1, 0xffffffff, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001)

5m42.799073142s ago: executing program 5 (id=2419):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x4000003, 0xfffffd18)
r1 = inotify_init1(0x0)
r2 = inotify_add_watch(r1, &(0x7f0000000440)='.\x00', 0x12000021)
creat(&(0x7f0000000580)='./file1\x00', 0x0)
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000e366371a54300297174fe372148b4d31260dd9516f7592132b3513f4289ecd765736d96da09fc765fd84c2cbd1e3f9db009f26d80d21cfe4d2af4229739a8322bc2df6c02561847142f4cab439a566a631a7a1ee89e6482daaca915d378a4baa20abd3efcfd6368e5447c205bdb6c674e4efc45b5acdcff58f8d210c1dacb0c0eca01b037b11adffa800ff6e898de12e48d677809aae33ec82bf58c436e40d56bc2df213915714fdd29648", @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRES32], 0x15)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4)

5m42.615774803s ago: executing program 5 (id=2420):
mount(&(0x7f0000000180)=@nullb, 0x0, &(0x7f0000000040)='vfat\x00', 0x0, &(0x7f00000001c0)='discard')

5m42.546337737s ago: executing program 5 (id=2421):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000180)={0x50c}, 0x18, 0x0)
landlock_restrict_self(r1, 0x4)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mknod(&(0x7f0000000180)='./file0\x00', 0x400, 0xfffffffd)
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004)
mount(&(0x7f0000000200)=@sg0, &(0x7f0000000240)='./file0\x00', 0x0, 0x801051, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r4=>r2, {0xf, 0x9}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x6000)
mount$fuse(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000280), 0x400, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30ff0300000000000030303030303030303127303030302c757365085f69643d", @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,max_read=0x0000000000000401,default_permissions,allow_other,blksize=0x0000000000000400,blksize=0x0000000000000800,\x00'])
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="130300000007fddbdf250f"], 0x14}, 0x1, 0x0, 0x0, 0xc8c5}, 0x4852)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x31}, 0x18)
listen(r2, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000080)={0x0, 0x4, 0x1, 0x17, 0x2, [0x0, 0x0, <r10=>0x0], [0x8b9605c9, 0x5, 0x4, 0x5], [0x7, 0x1, 0x2, 0xfffffff7], [0x80000000, 0x8, 0x3, 0xa99f]})
r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
writev(r8, &(0x7f0000000440), 0x0)
syz_open_pts(r11, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r10, 0x80000})
connect$unix(r9, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

5m41.916704817s ago: executing program 5 (id=2422):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x3, 0x0, 0x400, 0x5}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500217fffffff01a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4000844)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x301, 0x8, 0x6, 0x408, 0x2f, 0xfffffff8, 0xfffffff9, 0x7f7, 0xfffffff8, 0xe2, 0x0, 0x8500, 0x5003, 0x1000007, 0x1, 0x10003, 0x1000, 0x80000000, 0x1ff, 0xb8a3d6c, 0x1010, 0x1ff, 0xd, 0x3, 0x746f, 0x8, 0x5, 0x9, 0x3, 0x0, 0x7ffc]})
ioctl$COMEDI_SETRSUBD(r2, 0x6410)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x40, 0x3, {0x7, @meta={0x53353543, 0x3034e905, 0x89ca, 0xafd0, 0x3b76a826}}})
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0)
ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000140)=0x1016e00)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c000500000000000000000008000200", @ANYRES32=r9, @ANYBLOB="000000feff000003"], 0x40}, 0x4, 0x700000000000000}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, 0x0, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000dc0)={'wpan0\x00'})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r5)
r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_async', 0x0, 0x175)
read$char_usb(r11, &(0x7f0000000b40)=""/163, 0xa3)
openat$cgroup_ro(r11, &(0x7f0000000380)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)

5m41.530708087s ago: executing program 5 (id=2424):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003a80), 0x1, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3214, 0x20200)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r3 = accept$unix(r2, 0x0, &(0x7f0000000000))
sendmmsg(r2, &(0x7f00000098c0)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x3, 0x1, 0x3, {0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}}}, 0x80, 0x0}}], 0x1, 0x20000020)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x40045506, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', 0x0})

5m26.509194866s ago: executing program 34 (id=2424):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003a80), 0x1, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3214, 0x20200)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r3 = accept$unix(r2, 0x0, &(0x7f0000000000))
sendmmsg(r2, &(0x7f00000098c0)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x3, 0x1, 0x3, {0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}}}, 0x80, 0x0}}], 0x1, 0x20000020)
syz_usb_disconnect(r1)
syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r1, 0x40045506, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', 0x0})

13.63421527s ago: executing program 0 (id=4326):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000300)={0x8080000, 0x106000})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}, {0x9000, 0x2f, &(0x7f00000002c0)=""/47}, {0xeeee0000, 0xfc, &(0x7f0000000880)=""/252}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x400000000003ff, 0x7})

13.370052397s ago: executing program 0 (id=4327):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001"], 0x4c}}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, 0x0)
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
syz_usb_connect(0x3, 0x272, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xa9, 0x8a, 0xb3, 0x8, 0x19d2, 0x176, 0xc6e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x260, 0x2, 0x81, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x74, 0x9, 0x0, 0xff, 0xff, 0xff, 0x5, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "aa632c1bcb2a"}, {0x5, 0x24, 0x0, 0x79b}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x144, 0x1, 0xd1}, [@country_functional={0x8, 0x24, 0x7, 0xb, 0x9, [0xff]}]}]}}, {{0x9, 0x4, 0xa6, 0xbc, 0x7, 0x41, 0x3e, 0x37, 0x40, [], [{{0x9, 0x5, 0x8, 0x3, 0x8, 0x97, 0xd, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x0, 0x3, 0x8, [@generic={0x79, 0xc, "c1e665e3c1757ce87c4b1c07675720930d1768267edd572ac928ee182b6282e4f6094e7f9e62c655e4da7a7223c24475d56932a00603b33aaa1cd2e8064e92e5c6e596a00a791e6e268f0c526c7260cace5c725666fa63a7950b5d60029e731679e59d732eed35ff4cdc0aad9a1d6510cf23f9aca4c480"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0x5, 0x7d, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x81, 0x4}, @generic={0x5c, 0x6, "587b1fddda9159452a53e9a5caf901fa8a28090b9624846fada2e47d47462314b82e2fb6faa3a3f7a86ca23a35d2ea559c33eb35c029589095828a62fe0e470d8fd981b0ad791bf0c082972bd8492f060f6a48741268c7d8e539"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0xdb, 0x9, 0x3b}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x5, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x1}, @generic={0x5c, 0xd, "23fbb447d6354fe5a1a3f2c6b8430b6f501a7bfaec886d90ed387976f24fca88cdf8786d8aeafb18179e605c419fcce159d49c6d4ae8197d610870abd25aa4cee8d1ab6e39c6cb52743bf19c80e9f23c7c2c5c1aa0be35ce48ad"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x5, 0x20, 0x1, [@generic={0x8d, 0x9, "3c96ff5540a10fedf02f2b58351ee14339941ebaf08afc30dcb5902bec85a320988d59f7445ae28641cec21cee5d9d65cc47e60b8afefb3d390d245f29da299f5507bf0cd4d109c4bf98b6e28a5f047682b05f3e9e35f3a72badbd19b5c622544defdb7535fefa0f4bd08f64b43cf8eee4a59ae8bb33e4877e5c0750795c1a5c00e71629d1f05028287823"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x72, 0x60}]}}, {{0x9, 0x5, 0x4, 0xc, 0x200, 0x5, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x101}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x4, 0x6, 0x7, 0x10, 0x2}, 0x98, &(0x7f0000000600)={0x5, 0xf, 0x98, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x65, 0xd8, 0x24, 0x6, 0xc}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x689d, 0xff0f, 0xa, [0x30]}, @ssp_cap={0x18, 0x10, 0xa, 0x7e, 0x3, 0x2, 0xff0f, 0x200, [0x90, 0xff0000, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0x8, 0x7}, @generic={0x59, 0x10, 0x3, "dcb49350bd1dc9530bd6dc03899196247d8da503fa59e6414c5715c59ced215de57adb8e82540865c26a062c4fe7e969c480642c0b11568a6d4dfcf5860edb21c6fd7aa29af6d21b05b3f356eb46d2bc31f749526d3a"}]}, 0x7, [{0xb0, &(0x7f00000006c0)=@string={0xb0, 0x3, "3d9b4e8f31182fedbb801fe737432e7f8cbadefad1f83ce1872aa78329fedd331191eba88bac374f4a214622fe04909941bbcffafc58215f384c61fd2c29c1b240de3cacfe44ba380ee8f74af437c70b72ab2f65b3d9738d37bac802ac866d418fc6a862e5d6f11e4784cf6871914101dfda200cb967456c42ce03e62eee4430cf963467024d59abe96f9a7c34fa0057875b722d2774011526faf4e2e08907553171abd1f58f8712a49beb39777a"}}, {0x9e, &(0x7f0000000780)=@string={0x9e, 0x3, "aa160761506a73e3eca858c5b879be909033c85e3468ae96df3031fdafae572105e464d7e3dffbb023c1c3521c5621d73a91edf887268341d720a5977787260eda999ab64af7e2930c30c384ab34ac8740033c58a68f28a3132bc0de5de25e60e3a61c18d59caaa78599af3e0d951873eea35babb0c493c7d0846b3d15d9e371487e3b8175df5ab7a9fbd8f4eae4915bd90bd54e69ff65c903631af9"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x44f}}, {0x79, &(0x7f0000000880)=@string={0x79, 0x3, "3ee1a5d656380153fec69824b5cbd91615dd0e3429c5666cfee15e4484927b774557ccaeb85b12a4082f8197d825f9fd06083b421bab08f58a53a203af054797b73c44ecb0ee088ce86bb38db71acfaaa83eb921c48d5c83699092e87ed7c32ac943e55aa0a32fc0e86d3af21e43cead823aa37f301692"}}, {0x42, &(0x7f0000000900)=@string={0x42, 0x3, "95e071467ec398a0aece22df415bf9d62aa8fd983de52358e7eff61d52a729edae0a135b8538e05a1757243f95ea8e2deb7467c1359fe20dc60d3dcad105cea8"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x44b}}]})
r5 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x3f)
ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000040)=0x5)
ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000d398469c5588b362b9fd8d792cf4ca79a80860e1c01ec3ceee8e9"])
fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x8, 0x1)

10.538476021s ago: executing program 2 (id=4339):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)

10.486872402s ago: executing program 2 (id=4340):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x0, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x20, 0x5, 0x2, "d310"}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0})
connect$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x33, {0x33, 0x5, "8ddb17cedddbb1a79dc426fe06a263450574ab5d18f23c6918cd211d47ab8de5424aed806680742cc11a03667532cd870c"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000480)={0x34, &(0x7f0000000100)={0x20, 0x3, 0xa7, "3910d24533ce742ac7109e9b8359f670851eb0bdfdbe6e972424c31c4485911a9ecc13ecc6ae142a457c1764537175c9acd04d8ef00d6f8e3a26bcb1ccd58f007024dd5a3a627f0c2e2e2675f5e865e6dfe070acf8155eb6e0fe748a6247e818fb0611e57c4e06a073c1afef516e2557b9d0139d56c13f8446cc982f412c6a96571cf17d7c8259402df1ce91b0e7b92d8a63b5ea1ab04781c7a0b8cc1863a5fc12b79970f02858"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x20, 0x1, 0x1, 0xfc}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x5}})
syz_usb_control_io$uac2(r0, 0x0, 0x0)

10.334192834s ago: executing program 0 (id=4341):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x113, 0x2)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000100)=0x10000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000001600)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af83, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0x4, 0x4)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}})
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000140)={r6, 0x0, 0xfffffffffffff000, 0xfffffffff0000000})
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00')
read$FUSE(r7, &(0x7f00000041c0)={0x2020}, 0x2020)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000080)=0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)

10.245772513s ago: executing program 0 (id=4342):
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0xc0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x200000, 0x8, 0xd, "3eccd80000000000ee482e78f7b3bfa44e00"})
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r4, 0x1, 0x170bd2f, 0x8003, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20000000)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB="12011001000000408c0d030140000102030109026e0003040006080b0002012030230904000000010130000a240100e6ca694b790cd68b6ded2244cb320a0009002000090401000001023000090401010101022ff20905010960004203060a2525002000000000004d3acb6000010230000904020101010230000905820900c55e8d1b5dc2d3f8de3904123c759fc15d3d1c838cc0af341945f1d502b4cb3b5fa60f21e5a85f256beedf423da79b55e32e"], 0x0)
fchdir(r7)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r8 = syz_open_procfs(r6, &(0x7f0000000040)='pagemap\x00')
close(r8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240))
r9 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82080)
ioctl$CEC_G_MODE(r9, 0x80046108, &(0x7f0000000240))
setgroups(0x1, &(0x7f00000001c0)=[0x0])
getgroups(0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, <r10=>0xffffffffffffffff])
getgroups(0x1, &(0x7f0000000180)=[r10])
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)

9.822751375s ago: executing program 0 (id=4344):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x20}, 0x1c)

9.738478558s ago: executing program 6 (id=4345):
unshare(0x20000400)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x22)
unshare(0x62040200)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x4788, 0x37}, 0x80, 0x0}, 0x4000080)
socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]})
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
ioctl$mixer_OSS_GETVERSION(r2, 0x80044d76, &(0x7f0000000100))
openat$rtc(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)={0x0, <r4=>0x0})
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000240)={0x4000018, "8a6035ceeae3ecc42317afad010000000000000400000000000055c900001c00", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", 0xffffffffffffffff, 0xffffffffffffffff, 0x18})
timer_create(0x7, &(0x7f00000001c0)={0x0, 0x9, 0x3, @tid=r4}, &(0x7f0000000280))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0)
mlock2(&(0x7f000043c000/0x3000)=nil, 0x3000, 0x1)
mlock(&(0x7f000035b000/0x400000)=nil, 0x400000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$I2C(0x0, 0x1, 0x2003)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000cbfffffffc33000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a0001009000000000000000480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000002d"], 0x154}}, 0x24000058)

8.538337732s ago: executing program 0 (id=4347):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x980914, 0xfffffffd})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="010000000000000000003900000008"], 0x40}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff5, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x8, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x10000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0xc7c, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x8, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x9, 0x8, 0x3fc, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x6, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x8922, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0xd, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x80, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0x9, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x6, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
pipe2(&(0x7f0000000580), 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r9, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40c01, 0x1d7)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04023c20"], 0x7)

7.070246848s ago: executing program 2 (id=4350):
pipe(0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
syz_usb_connect$uac2(0x1, 0xd9, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100100000040e51301004000010203010902c7000301076097080b010201ff200d090400000001012000092401ff000a11004008240b0503628ef90904010000010220000904010101010220000d24020107048008519da1e9a40d2402020a000600069a1d97eb0624020102ff1024010001030500000087050000000e09050109ff030606a1082501dd0cbc02000904020000010220000904020101010220001024010c0101010000000600000000030a2402020900060006070c2402010104040a5f32c7ac09058209000240020008250101bf7f0200"], &(0x7f0000000640)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x0, 0x0, 0xd9, 0x9, 0xff, 0x10}, 0x124, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f24010418100af0230100000f00ff7ff0000000370000003000000007100210410700ec1004d2d291072784217cb1661d151c88a57e98e2769c651cd16d2f7d4bce982154a37e5165d727fcd077df072cca89f380a2ca1ded766288f9e9124977bef8c282b77daf78a4cdd9c3fe3170ea0929faeb7b2d53678b413eeda7226449dd10a1977fed7b03e56cb1a207fa41b957401e34e980da3a0401264d4fc52cacbc76c90672bb9733824b79590478ccbfaddaf2f0008647bd48571491b3011c4d9f0cf9c9228de876d3f1db84f367aefa2173572c83dcdc253a1ddb66c8628e667cb82c54382528274832f86e1a59def66369c1af6a38a0deb9078869ff1410040ecc60d5f57f46183520b14a4fafaa748300"/289], 0x2, [{0xc8, &(0x7f0000000500)=@string={0xc8, 0x3, "23de5411ae87be3ac14c5d68b387efc0757e5a10baca06338d8edd182fecd24af32373381dc214dabea9d2413ddb2e2785b3963920587b2f6af0c757293faf900b2688fe7934dcdbb32c16b26b7c36680cb2a6191332bc782458880cdde5514edc67d6e38438e3b51610ca256d63e765777c5276fad9000ae70fd7b3dd7e0898198a075660432c3426e437e4a7a5859b31243a2811159373a6cfebc0c624703914b46c27c27eea264d3231be6044dc2ed21acdd841743dc96e88d611d9f3f04bec78a93b13cc"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x424}}]})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x55, 0x2000000, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e9"})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010020, 0x0, 0x7}]})
fcntl$addseals(r0, 0x409, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x1, 0x4000002}, 0x2}}, 0x10)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)

6.630579775s ago: executing program 6 (id=4352):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xde, 0x2}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (fail_nth: 5)

6.423712423s ago: executing program 6 (id=4353):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x109000, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f869", 0x33}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)

6.324050735s ago: executing program 6 (id=4354):
r0 = socket(0x1, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
write(r0, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f000000000000000000080008000d40ff000000", 0x24)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10g\x91\xdeeH\xe5+\xf0\x05\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000440)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1fe0}}, 0x10)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0)
ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x488, 0x0, 0xe}]})
ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000080))
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r4, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0)

4.760565767s ago: executing program 6 (id=4356):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x5e1600)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000040)=[{0x27, '\x00', @st={0x4, [{0x2, @svalue=0x8000000000000001}, {0x2, @uvalue=0xfff}, {0x1, @svalue=0xdf03}, {0x1, @uvalue=0x7c31}]}, 0x3}]})
r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x1, 0x1b, 0xfe}, {0x9, 0x5, 0xe, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4e, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000740)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB=' \rH\x00\x00\x00H'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x801, 0xfff7, 0x8, 0x1f0b, 0x1}, 0x14)

4.049275518s ago: executing program 2 (id=4357):
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f000012f9c0)={{<r0=>0x0, 0x7d, 0x8, 0x9, 0x8210, 0x8000000000000000, 0x4, 0x8, 0x6, 0x4, 0x1, 0xaf46, 0x9, 0x3, 0x3}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00001309c0)={<r1=>0x0, ""/256, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000130bc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}], 0x5a, "54b314a69f9ea1"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000131bc0)={{<r6=>0x0, 0x3b338abb, 0x9e, 0x7, 0x80, 0x1000, 0x4, 0x31b, 0x7, 0xe, 0x8, 0x2, 0x9, 0x18, 0x2}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000132bc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r7=>0x0}, {}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x6, "d4bc298dc6bec5"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000133bc0)={<r10=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000133dc0)={{<r11=>0x0, 0x6, 0xd, 0x5, 0x2, 0x0, 0x10001, 0x4, 0x7, 0x7, 0x3, 0x9, 0x559d, 0x4, 0x9}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000134dc0)={0xe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r12=>0x0}], 0x6, "0f138def53e88e"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000135dc0)={{<r13=>0x0, 0x4, 0x7, 0x3, 0x8a8, 0x8, 0x3, 0x2, 0x2, 0x3, 0x2, 0xfc, 0x100, 0xffffffffffffff81, 0x2}, 0x20, [0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000135e80)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}], 0x1, "4276135f064f27"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000136e80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0, r2}, {r3}, {r6, r8}, {r10}, {r11, r12}, {r13, r14}], 0xcb, "86c2435baf4779"})
r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0)
r17 = ioctl$KVM_CREATE_VCPU(r16, 0xaece, 0x0)
r18 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r18, 0x402, 0x4)
r19 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r19, 0x402, 0x40000029)
r20 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r20, &(0x7f0000001f80)=""/4110, 0x100e)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080))
r21 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r21, 0xc1485544, &(0x7f0000000080)=0xfffffffc)
r22 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000007c0)={0x0, &(0x7f0000000440)=[@wrmsr={0x65, 0x20, {0xc0010063, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x5b, {"c4017fe6e366bad104b8589f0000ef660f380b2500000000b9800000c00f3235000800000f30b8010000000f01c165f2d9e526450f01dfc4e3755f63d6331d6c3b0000b97d0b00000f32"}}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x7fffffff, 0x6}}, @uexit={0x0, 0x18, 0x7}, @wrmsr={0x65, 0x20, {0x606, 0x8}}, @out_dx={0x6a, 0x28, {0x8441, 0x1, 0xf4}}, @nested_load_syzos={0x136, 0xc0, {0x1, 0x7, [@wr_crn={0x67, 0x20, {0x4, 0x81}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x15, 0x2, 0x7, 0x2}}, @nested_load_syzos={0x136, 0x20, {0x1, 0x200}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_stgi={0x17e, 0x10}]}}, @wr_crn={0x67, 0x20, {0x2, 0xba4}}, @rdmsr={0x66, 0x18, {0x3b0}}, @wr_drn={0x68, 0x20, {0x1, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xa1, 0x3, 0x8, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @uexit={0x0, 0x18, 0x200}, @nested_amd_vmload={0x182, 0x18}, @wrmsr={0x65, 0x20, {0x837, 0x3}}, @set_irq_handler={0xc8, 0x20, {0xc7}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x11, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @code={0xa, 0x4d, {"fe46b736660f7f1c800fc7ad0c0000000f01f8670f07c744240037000000c74424023f910000ff1c24670f08463d8000c0fe66450ff5d1644f0fc728"}}], 0x378})
ioctl$KVM_GET_SREGS(r22, 0x8138ae83, &(0x7f0000000100))
pread64(r17, &(0x7f0000019180)=""/102337, 0x18fc1, 0x0)
r23 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x42002, 0x0)
ioctl$TIOCSETD(r23, 0x5423, &(0x7f00000000c0)=0x1b)
syz_usb_connect(0x6, 0x714, &(0x7f0000000800)={{0x12, 0x1, 0x300, 0x46, 0xcd, 0x3, 0x8, 0x5d1, 0x3011, 0xe8ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x702, 0x3, 0xcb, 0x0, 0x20, 0x3, "", [{{0x9, 0x4, 0x93, 0x0, 0xd, 0xb, 0x78, 0xda, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x1f}, [@selector_unit={0xb, 0x24, 0x5, 0x5, 0x9, "616b3499d40b"}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x8, "69a0d827d6"}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "14c3bc"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x7, 0x67, 0x6}, {0x6, 0x24, 0x1a, 0x3, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x634c, 0x5, 0x4, 0x72, 0xe, 0x41}]}], [{{0x9, 0x5, 0xd, 0x10, 0x400, 0x6e, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x9}, @generic={0x47, 0xa, "4859885e0f514d177b12e951c6c23ee1d891c535e92e8befcc0c18fcbd14e34b47afba0cf33fee9efdd00f63488ce50ef84f1c6d9b9e1958e13782c98d30a0a0b9c4b336b9"}]}}, {{0x9, 0x5, 0x0, 0x1f, 0x10, 0x4, 0x4, 0x40, [@generic={0x89, 0x1, "fe25c141c484bc8218197f1d6df3f2dc04499ffdfa7be5d0ce00f608624d9bbe5f36345db0b2e01ec2f6a07a82eff91be68859bb21031c8fd2cd9659143d5c9529cd580ac58462ad7024062ba92fb4579e147428933664ba6ea9fb82b845f0a67b070bedf32df49b327916a9547ebe843b04a52d9da032a9fa0d1014d87d348bfa9881b175d812"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0xc2, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xaa26}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x1, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xcf, 0x9}]}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x40, 0x8, 0x5b}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0x4, 0xfc, 0x4, [@generic={0xfe, 0xe, "34879e57f0de5a22af61823139358fdc6e681f7b27e8ccad9f7f415d59c284e323c821f290179ea435c7d9d2059f7f2c0d9c016411d3946ba61df2b38d3cfbfaa0f73b73c2ce5c1176144f83d91eb0dff80323fb4d1a32cc2d68f62aa021445cd4ac0e67ce822f728a364d9323ffe430f98f3d129ae8d07ab07948976e2276d69da8b10fa9031c15775145f512a171e387541d9ee1e21ec449e2e8e7aa170d85b4910f69c52260207e2cf0bb22c16a2f03cbef00d0a0e8627af1e7cee3f93fc033de33ae06d17ce2111594dde24dd9bbda6fd1bc3c2cf99c1b6b80a449d1f3f58449f9ccf963525ce55aa0d4d09e164bd604fe96fa440e69efc84c8e"}, @generic={0xb1, 0x11, "8088119dd6f034d07fbf3883315faae4d37e544799b4c0d312f48f604033adb9acc45515f40cb4b817c5d7b492e420322e017f515f8dff1b3308300c6c1e9a27255398182729360c32abaaeeec7dfb8413bfc8d8f646e25079e180fd7ab7635a30aacae5ac4b2beccb1aa43455f09396c189a3338f1a091a297c14228c8fb80a6ba5ad55dc5de96d9e9acca58af547c583d296527932c0eff1955ab7d32dd024a9ced64bb8e51461fd536b8b4338cc"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x1, 0xf2, 0xff, [@generic={0xe, 0x3, "df4fe4537b13d23302801122"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x8, 0x7}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x5, 0x40, 0x5f, [@generic={0x38, 0x0, "bc10a3706b9057d3915b894132fb3bf9642b2e88c04d3d84644adba627c754d1b84f10e9af84c2b59007d9e458e8de768ad4ec636de2"}, @generic={0x24, 0x21, "ef6699328a42fc586964eea984ae4ffec7fd77e223ad5f2ed8fa68ec0ebaa9a822be"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x0, 0x3, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7f, 0x6, 0x8}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x2, 0x4, 0xc}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x80, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}]}}, {{0x9, 0x4, 0x20, 0x91, 0xe, 0xd7, 0xf3, 0x97, 0x9, [], [{{0x9, 0x5, 0x3, 0x4, 0x20, 0x0, 0x8, 0xb2, [@generic={0x12, 0x9, "b174652b27577dd240f7fb267296293c"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3b7, 0x2, 0x8, 0xe2}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x20, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x80}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x0, 0xb, 0x3, [@generic={0xd, 0x10, "d724242bdcafeb17538376"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x8, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9638}, @generic={0x47, 0x17, "74986f05c762a1ee97f2f3d1dab0eb336cbaa8e12b6cf15505e1b9fd6ff2e5da3f9b0a9d4670508c386b32e37efee7c8c5fc191ff2982c50a04e03a731b0016d6e4cad4f79"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x6, 0x7, 0x1, [@generic={0xd6, 0x8, "699fc8a239ccc98682c09c0b33ff0bbe84ade9abd4f353cb669e36397d05883da8945520732535f863492bceef727d12ee96c053126d5d514f768f6f35908215fa8a0a16721aa7359bd5764357b419eb7fc06de2f771d2ac8b916e6fc9f780114501346c7514011aa2af4b54e3788c70b1b4925fd7f1c2594a19a6e8ba0012a7e0d95099bf55a3d094d6e6626dfd4350333dc1af9922fcdf05901d25c01f0150f234068ef7b17bf784a46f9f777776355cd09a8872480d1024cc3c17150152cda919c4a1cf57b9606eb444406e75319cf527601a"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0x6, 0x5, 0x1}}, {{0x9, 0x5, 0x80, 0x4, 0x668, 0xd, 0x5, 0x1, [@generic={0x12, 0x30, "c371e17868e1716761458375ea382e18"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x2}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0xb, 0x3, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7f, 0xd1, 0x31, [@generic={0xf9, 0x23, "cbb9911480ab00075aaea946c3a8c4a667e0019ea7012948b0d9478e9487565c54aa0f482707a6f3c5891c81bbcc4711df8662d671d50793121db67c1ba715fc5081cc1d1d1e7947d9f280325f4832b51956c69a38b6f90969e4af492b24f7bcf7043c7b99df076685e1698f2c5d30a247f99539cce27df86a12774212d562a9ccc5fe592577bb6b566280920dd540043f1f121b176b5c1b9369f3d3d1a067d81c4c4bbae0c3adf3922c5572dc59f4852da6d4293e0cb945a1cd500553d7f6ba3aee1777464315ca5cfecf00d11252f5f2190f17238a11409d13e511bd66c12d7e1ae9be56e62140c633d726320a92290072b28d82f5ce"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3ff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x40, 0x3, 0x5c, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x2}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x5, 0xa, 0x6}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x9, 0xb6, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x3, 0xf9, 0x5}}]}}, {{0x9, 0x4, 0x90, 0x4, 0x1, 0x5b, 0xd6, 0x9b, 0x6, [], [{{0x9, 0x5, 0xe, 0x1e, 0x0, 0xc, 0x8, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x81, 0x5}]}}]}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x201, 0x6, 0x8, 0x2, 0x8, 0x2}, 0xf, &(0x7f0000000f80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x2, 0x3}]}, 0xa, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x422}}, {0xb3, &(0x7f0000001000)=@string={0xb3, 0x3, "2787fd5723b6964db13fb77ae93ab6a1ad6979c04924d672c96eee6cfb58132a3e8739544659e1a89908ef0380570258d47625cbae1439db1e5c5fba4d3686fd3e688da3ddad633ecccd8a1f03a52d3da64124c6664911ba87d1ba5c084b1f7e6a393f6dbf1089ff75254da4a03e6ae9c9d7799d0a11ef4606d553adc6ff3ed0b580cab841ce76f070612c20a7c4b711300f1f1acab6d21b6d10fe62958dae75e522388924f7487cf5d4a1583fcbfbaadf"}}, {0xd1, &(0x7f00000010c0)=@string={0xd1, 0x3, "f8e154dc476e16ff84cf62d31cdea69e29201b5bd2459632408adf811d0229e8cf3bb3b72366e7c64eebce9fc56534f3f440b166a0e51b403691bcfefbe17523ce2fca7b23a13546f62869ccc69b0335246eeecd78002ff59f720a642710719288e87b6ccb7d571a553284caa9d00cc85000d880af3786b18c5997a71a7901d507a8435d6b85216028378107e06d8718154a3b260bb72312ccf97bea8b3cdf7cb65c329df21e6ec451f80e656101ecffcbf2146c77b61b887a5e8fb7daa589df8c1033ac5e93c672b0099cc07ffac4"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x818}}, {0x20, &(0x7f0000001200)=@string={0x20, 0x3, "47321c348da45dfd3f7c5fc29f8e5aaaa5218e8a0fbb6c1b74dae18c4203"}}, {0xc0, &(0x7f0000001240)=@string={0xc0, 0x3, "7b2fff99579b2e3124ecbe8b222c419de021b6ab74a3587fff348ff83f66c292bd875033928fefb741da610d6974e6d9f81060b5449416c91b85935605b0b1e6b31e4baf6b50fde4398926a623619b67eb159051fe045d9a682581806e2212b64ea0c50a6c827cce4399602e4f7c93644d28ff37a103dc5bff19a1906db309c56da5bbfdd2844fbde6274191a09cd4b41237b1dce779e68f78423706cf0c0bec385891f3807842aff276c9679bea17dc582566ff618825aa26c371946003"}}, {0xe9, &(0x7f0000001300)=@string={0xe9, 0x3, "b8e6c90b20fe6b87251823afdeebc8ca857fc18b2e0efea3962ce9d55bc36a41aef1ccddc1dea4cce6dfa56636c162ca4b9f2205e2a8d45a162b650129daa98d26a55be29af215427803eae0e47ae518c871d13838421332c56075d9079c1ff16c2b3e5b9a4d762400596b866a5774998043b1a9b96d13f5cf1d67d77b66a78646d87c1d3bc06402882aa609f0b2aec92a5184f0b613316b7b826bd0b2666fe5f2241be2033992459cdc4167a8e88f2aa58c8985a6b612d413e673e27b2a9c14ced66668114ef35a53f70d982405a33678fbcd65c5e0b5570c0cc33e0afa08601aa8ae15e9c49c"}}, {0xcf, &(0x7f0000001400)=@string={0xcf, 0x3, "3be1d8ca9b57a789b3427b5e45d467676ff6ae57eac90b59327377c349140f3a5e259c884a6000420df60614ca8284a8d13e13004b8c602f13462349dfbc37a0f86e9064bc997c08bc3d9400fe83d1c3d5fa125bd9b00023f2e173c66f82a31c1db155071ddd7f006c797e257624617ea7562beeb588f0cbfd01bae3bcdf6e03bd4b0da831a60f6f9d2867873f478c87bbf7fcd296c0bf116c59fc6da0743ef6618b2213a1bbb25eaa7ec4429fc56ee2841fb14820c580b614a3d2bd8ea7c408b1d41d1b59967d9ae237c98b85"}}, {0xbb, &(0x7f0000001500)=@string={0xbb, 0x3, "38c3bd347b41c680181f3d88cc4cdb8b8b525862ed2f8396e14a5f04a8f34b435153a2c8f9b19e4e075b7b6da82a2a208b5a5f1f06487e0f451d1f48e7fe5cdba7e2371ed475cc4ca2aaadc167ccb598f6e5f8eda566584c150730fc1ed5a703e0995aceafbd29343797b4675739ba08f0f0e8c573efa7557d2a18ebc724d951ff83e435db2cfb3206fc9ce89bae1bfa6111bd62d6ab49b5530727725a172c4c640eeee6e9a0ffd700a43e9ad440697020b06d77141ed9fca4"}}, {0xee, &(0x7f00000015c0)=@string={0xee, 0x3, "c7278dbc99fe83d14d42f44d67e5aec2491ec24771b8c6a2b941b31399067668d10a1848b8fd9e4c50c0c13c468aa6535d69387ab9f2feb9f828d5971e0381cca4d0c6894798f218e7585cc9e5f089092b99c9b9066fde34afd976e73da55f48b28212d22ad58029f0e8986a74050d98a6f90c7ca527b8afc4d0ba82dee63e5b9199057e7f7a0109821055e2f961af8fe6eb064c6ec1a37a2cdf20b59020a4e3f752acc4bb5f55b7b54ca668ff3e9542db4b3a58942734749edf8c43a477a66134c3690b9996da5cb34406a3ff60f80306b11c9bda8cbe8e6e77914cd004500aa4c9524bdac8bb091ec1789d"}}]})

3.328134908s ago: executing program 2 (id=4358):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x0, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x20, 0x5, 0x2, "d310"}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0})
connect$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x33, {0x33, 0x5, "8ddb17cedddbb1a79dc426fe06a263450574ab5d18f23c6918cd211d47ab8de5424aed806680742cc11a03667532cd870c"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000000480)={0x34, &(0x7f0000000100)={0x20, 0x3, 0xa7, "3910d24533ce742ac7109e9b8359f670851eb0bdfdbe6e972424c31c4485911a9ecc13ecc6ae142a457c1764537175c9acd04d8ef00d6f8e3a26bcb1ccd58f007024dd5a3a627f0c2e2e2675f5e865e6dfe070acf8155eb6e0fe748a6247e818fb0611e57c4e06a073c1afef516e2557b9d0139d56c13f8446cc982f412c6a96571cf17d7c8259402df1ce91b0e7b92d8a63b5ea1ab04781c7a0b8cc1863a5fc12b79970f02858"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x20, 0x1, 0x1, 0xfc}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x5}})
syz_usb_control_io$uac2(r0, 0x0, 0x0)

2.567030015s ago: executing program 4 (id=4361):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000300120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)

2.536027113s ago: executing program 4 (id=4362):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x109000, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0ea796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9f869", 0x33}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)

2.47918884s ago: executing program 4 (id=4363):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300))
readv(r0, &(0x7f0000001240)=[{&(0x7f0000000040)=""/4090, 0xffa}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r4, 0xc008aec1, &(0x7f0000000080)={0x6, 0x0, [{0x4, 0xfffffff4, 0x5, 0x101, 0x3, 0x7, 0x50}, {0x6, 0x1, 0x2, 0x9, 0xfffffffc, 0x1, 0x4}, {0x2, 0x10001, 0x3, 0x7, 0x6, 0x800, 0x9093}, {0x9, 0x2, 0x1, 0xf6e9, 0xffff, 0xfffff800, 0x6}, {0x0, 0x7, 0x3, 0x2, 0x2, 0x2, 0x4}, {0x180000000, 0x9, 0x2, 0x2, 0xfffffffc, 0x0, 0x800}]})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{0x4b564d07, 0x0, 0xffffffffffffffff}, {0x19b, 0x0, 0x6}, {0x2ce, 0x0, 0xfffffffffffffff9}]})

1.839805382s ago: executing program 4 (id=4364):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xefff, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

1.714703787s ago: executing program 4 (id=4365):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="d8000000180081054e81f783db4cb9040a1d080006007c02cdfc55a10a0017000600a42603600e12080006ba0474f701a8000100fe80ffff7f6f94007134cf6efb8000a007a290457f01890500277ce06bbaceac3c2fb14c2ee5a7a3aab62f00001fb71b14d6d930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edbb5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bb9ad809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ecbee5de6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef3d93000020000000000000", 0xd8}], 0x1}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

1.477727251s ago: executing program 4 (id=4366):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4d4}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {}, {}, 0x4, 0x6e6bbf}, 0xfffffffe, 0x0, 0xb}}, 0x128}}, 0x20004040)

1.350225943s ago: executing program 6 (id=4367):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="4a080000000056e0396393b9bb38d9330e621064d236026a0a5e7bd3708f7a67a2174eb17136b5281221b6a51f5602531f5c34cf999cf38f547693c904fb476f754707472cb61d3e44e2150ee5cc726590db65b853d2cb32d88138afbf21fc5dd6a5b53e655772e3ce0d42be2a19b86069d0328453f663e9af50dbf067d757663ea87c1438f832fdc2a359"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x400caed0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xffffffff})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="119c8413fe281628f7a7dc73038eb08ce502d26be7e426453a0a8de11fda40b6d477a81955368cb690ac47e207f26cc76829e507d7b6ff9d5a1853ddd90096db645e9dcddb477a6dd1092fa9ea1977e937d12d291d34d4f3e2cbbbd60889b75476b73b47b01f6d04de869d895c0d4d777e5bb168adac37939d7a7364065317ee4db75455f7145b65908e6d835552a03045bf08b15b027cf93af59d0244e1832412257253de1de63243b320a3354c08fb7c14ea5486929e4713"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 2 (id=4368):
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0xf, 0xb9, {0xb9, 0x9, "0984765065a4e3434963420a46346618d047005d26d987925fe3f288535f320d77f75ed54b98946187787691f499449b7ff234927369a2da434375dcbaf2791a7838267488aa11070a51ea7c74a2c5b16687a36b0cda7d685a6a688d1c3b8554225b296f824f1facfa9df5e49ffab2f1016ea26165efdaeb9dd706589bbb0012262cf22c187d0037ea93358546eb0c34322b8b410935b7108143ab2d96104471b559482da8e39e765599df439a2248701bacad014846b3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, &(0x7f0000000700)={0x1c, &(0x7f00000001c0)={0x40, 0x10, 0x81, "11f9230f42ba3ffd503f039db619400278ce0c28a6a72603a76a77171c89382f182452f52606476275a239f07791a9693cfc2e0457f3948b19692cf3ea410233baa0e96ee00708500ce0f8d7da7b728ba1aba8972f145e9795b6d6d31c0981b53be0c4c5f07225461072e846d47b7c746875478c586dc1a0070f1e4c3f6a555708"}, &(0x7f0000000280)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000006c0)})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

6D:C22E.001F: unknown main item tag 0x0
[  658.939167][ T5718] lg-g15 0003:046D:C22E.001F: unknown main item tag 0x0
[  658.939195][ T5718] lg-g15 0003:046D:C22E.001F: unknown main item tag 0x0
[  658.939220][ T5718] lg-g15 0003:046D:C22E.001F: unknown main item tag 0x0
[  658.939246][ T5718] lg-g15 0003:046D:C22E.001F: unknown main item tag 0x0
[  658.939272][ T5718] lg-g15 0003:046D:C22E.001F: unknown main item tag 0x0
[  658.939298][ T5718] lg-g15 0003:046D:C22E.001F: unknown main item tag 0x0
[  658.939323][ T5718] lg-g15 0003:046D:C22E.001F: unknown main item tag 0x0
[  658.941258][ T5718] lg-g15 0003:046D:C22E.001F: item fetching failed at offset 129/235
[  658.944981][ T5718] lg-g15 0003:046D:C22E.001F: probe with driver lg-g15 failed with error -22
[  659.148196][ T1260] usb 3-1: USB disconnect, device number 66
[  659.180773][ T5631] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  659.283824][T16951] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  659.329208][ T5631] usb 1-1: Using ep0 maxpacket: 16
[  659.337641][ T5631] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  659.337667][ T5631] usb 1-1: config 0 has no interface number 0
[  659.337703][ T5631] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  659.337725][ T5631] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  659.350838][T16951] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  659.353571][T16951] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  659.396343][ T5631] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  659.396374][ T5631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.396394][ T5631] usb 1-1: Product: syz
[  659.396408][ T5631] usb 1-1: Manufacturer: syz
[  659.396423][ T5631] usb 1-1: SerialNumber: syz
[  659.441557][ T5631] usb 1-1: config 0 descriptor??
[  659.442552][T17216] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  659.442733][T17216] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  659.523715][T16951] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  659.525240][T16951] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  659.558984][T17224] tmpfs: Bad value for 'mpol'
[  659.561374][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4015'.
[  659.585744][T16951] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  659.589666][T16951] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  659.665866][T17216] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  659.665978][T17216] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  659.862967][T16951] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  660.061578][T17237] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4018'.
[  660.081385][T13535] usb 7-1: new high-speed USB device number 81 using dummy_hcd
[  660.186088][T16951] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.228929][T13535] usb 7-1: Using ep0 maxpacket: 8
[  660.233447][T13535] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  660.233506][T13535] usb 7-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  660.233531][T13535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.247482][T13535] usb 7-1: config 0 descriptor??
[  660.340538][T16951] 8021q: adding VLAN 0 to HW filter on device team0
[  660.396108][  T183] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.396262][  T183] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.480055][  T183] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.480187][  T183] bridge0: port 2(bridge_slave_1) entered forwarding state
[  660.501735][   T32] usb 7-1: USB disconnect, device number 81
[  661.084348][ T5631] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  661.084381][ T5631] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  661.084669][ T5631] asix 1-1:0.34: probe with driver asix failed with error -71
[  661.124113][ T5631] usb 1-1: USB disconnect, device number 29
[  661.497028][T16951] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.001590][T17264] syzkaller1: entered promiscuous mode
[  662.001622][T17264] syzkaller1: entered allmulticast mode
[  662.447867][T13535] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  662.615191][T13535] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  662.615256][T13535] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  662.615287][T13535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.632017][T13535] usb 3-1: config 0 descriptor??
[  662.667311][T13535] pwc: Askey VC010 type 2 USB webcam detected.
[  662.797226][T16951] veth0_vlan: entered promiscuous mode
[  662.959189][T16951] veth1_vlan: entered promiscuous mode
[  663.288663][T13535] pwc: recv_control_msg error -71 req 02 val 2700
[  663.289194][T13535] pwc: recv_control_msg error -71 req 02 val 2c00
[  663.290570][T13535] pwc: recv_control_msg error -71 req 04 val 1000
[  663.291355][T13535] pwc: recv_control_msg error -71 req 04 val 1300
[  663.291911][T13535] pwc: recv_control_msg error -71 req 04 val 1400
[  663.292363][T13535] pwc: recv_control_msg error -71 req 02 val 2000
[  663.292840][T13535] pwc: recv_control_msg error -71 req 02 val 2100
[  663.305796][T13535] pwc: recv_control_msg error -71 req 04 val 1500
[  663.306273][T13535] pwc: recv_control_msg error -71 req 02 val 2500
[  663.307053][T13535] pwc: recv_control_msg error -71 req 02 val 2400
[  663.307489][T13535] pwc: recv_control_msg error -71 req 02 val 2600
[  663.308010][T13535] pwc: recv_control_msg error -71 req 02 val 2900
[  663.308447][T13535] pwc: recv_control_msg error -71 req 02 val 2800
[  663.310229][T13535] pwc: recv_control_msg error -71 req 04 val 1100
[  663.310664][T13535] pwc: recv_control_msg error -71 req 04 val 1200
[  663.362740][T16951] veth0_macvtap: entered promiscuous mode
[  663.376224][T16951] veth1_macvtap: entered promiscuous mode
[  663.431356][T13535] pwc: Registered as video103.
[  663.438232][T13535] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input55
[  663.616558][T13535] usb 3-1: USB disconnect, device number 67
[  664.175675][T17291] tc_dump_action: action bad kind
[  664.230345][T16951] batman_adv: batadv0: Interface activated: batadv_slave_0
[  664.260934][T16951] batman_adv: batadv0: Interface activated: batadv_slave_1
[  664.288766][ T1504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  664.288818][ T1504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  664.288856][ T1504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  664.288901][ T1504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  665.306046][ T5705] usb 7-1: new high-speed USB device number 82 using dummy_hcd
[  665.506847][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  665.581934][ T5705] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  665.581985][ T5705] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  665.582007][ T5705] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  665.582035][ T5705] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  665.595272][ T5705] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  665.595305][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.595326][ T5705] usb 7-1: Product: syz
[  665.595342][ T5705] usb 7-1: Manufacturer: syz
[  665.595357][ T5705] usb 7-1: SerialNumber: syz
[  665.629750][ T5705] usb 7-1: config 0 descriptor??
[  665.634822][ T5705] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected
[  665.712199][    T9] usb 1-1: Using ep0 maxpacket: 16
[  665.714677][    T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  665.714706][    T9] usb 1-1: config 0 has no interface number 0
[  665.714751][    T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  665.714779][    T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  665.757200][    T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  665.757234][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.757257][    T9] usb 1-1: Product: syz
[  665.757273][    T9] usb 1-1: Manufacturer: syz
[  665.757289][    T9] usb 1-1: SerialNumber: syz
[  665.757470][T17305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4036'.
[  665.774800][ T5705] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  665.829692][    T9] usb 1-1: config 0 descriptor??
[  665.831581][T17303] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  665.831763][T17303] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  665.923200][ T5705] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  666.027784][ T5765] usb 7-1: USB disconnect, device number 82
[  666.037372][ T1529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.037392][ T1529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.042464][T17303] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  666.042594][T17303] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  666.062084][ T5765] garmin_gps 7-1:0.0: device disconnected
[  666.165324][   T32] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  666.191545][ T1529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.191566][ T1529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.319179][   T32] usb 3-1: Using ep0 maxpacket: 16
[  666.371589][   T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.371648][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  666.371678][   T32] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  666.371701][   T32] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  666.373144][   T32] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  666.373173][   T32] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  666.373195][   T32] usb 3-1: Manufacturer: syz
[  666.380040][   T32] usb 3-1: config 0 descriptor??
[  666.747380][   T55] usb 3-1: USB disconnect, device number 68
[  666.875027][ T1260] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  667.027945][ T1260] usb 5-1: unable to get BOS descriptor or descriptor too short
[  667.029449][ T1260] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  667.029475][ T1260] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  667.029525][ T1260] usb 5-1: config 1 interface 1 has no altsetting 0
[  667.050867][ T1260] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  667.050902][ T1260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.050924][ T1260] usb 5-1: Product: syz
[  667.050939][ T1260] usb 5-1: Manufacturer: syz
[  667.050955][ T1260] usb 5-1: SerialNumber: syz
[  667.479718][ T1260] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  667.501833][    T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  667.501867][    T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  667.502140][    T9] asix 1-1:0.34: probe with driver asix failed with error -71
[  667.506536][ T1260] usb 5-1: USB disconnect, device number 56
[  667.560017][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  667.582539][    T9] usb 1-1: USB disconnect, device number 30
[  667.684738][ T5765] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  667.864918][ T5765] usb 3-1: Using ep0 maxpacket: 16
[  667.869189][ T5765] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  667.869221][ T5765] usb 3-1: config 0 has no interface number 0
[  667.892880][ T5765] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  667.892918][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.892940][ T5765] usb 3-1: Product: syz
[  667.892956][ T5765] usb 3-1: Manufacturer: syz
[  667.892974][ T5765] usb 3-1: SerialNumber: syz
[  667.943080][ T5765] usb 3-1: config 0 descriptor??
[  667.965829][ T5765] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  668.286790][T17326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4042'.
[  668.316953][T17326] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4042'.
[  668.346977][ T5765] gspca_spca1528: reg_w err -71
[  668.365875][    T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  668.377839][ T5765] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  668.405423][ T5765] usb 3-1: USB disconnect, device number 69
[  668.520037][    T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  668.520159][    T9] usb 5-1: config 1 has no interface number 0
[  668.520209][    T9] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  668.520239][    T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  668.520267][    T9] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  668.578185][    T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  668.578218][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.578238][    T9] usb 5-1: Product: syz
[  668.578253][    T9] usb 5-1: Manufacturer: syz
[  668.578268][    T9] usb 5-1: SerialNumber: syz
[  668.621959][T17322] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  668.714025][   T32] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  668.831734][T17322] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  668.866822][   T32] usb 1-1: unable to get BOS descriptor or descriptor too short
[  668.868333][   T32] usb 1-1: config 121 has an invalid interface number: 143 but max is 0
[  668.868361][   T32] usb 1-1: config 121 has no interface number 0
[  668.868395][   T32] usb 1-1: config 121 interface 143 has no altsetting 0
[  668.872396][   T32] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=d8.a1
[  668.872431][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.872454][   T32] usb 1-1: Product: syz
[  668.872470][   T32] usb 1-1: Manufacturer: syz
[  668.872490][   T32] usb 1-1: SerialNumber: syz
[  669.212331][    T9] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  669.215218][   T32] usb 1-1: USB disconnect, device number 31
[  669.803677][   T32] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  669.930280][    T9] usb 5-1: USB disconnect, device number 57
[  669.953740][   T32] usb 3-1: Using ep0 maxpacket: 32
[  669.955852][   T32] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  669.955885][   T32] usb 3-1: config 0 has no interface number 0
[  669.955936][   T32] usb 3-1: config 0 interface 184 has no altsetting 0
[  669.958194][   T32] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  669.958222][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.958242][   T32] usb 3-1: Product: syz
[  669.958256][   T32] usb 3-1: Manufacturer: syz
[  669.958270][   T32] usb 3-1: SerialNumber: syz
[  670.014383][    T9] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem
[  670.020541][   T32] usb 3-1: config 0 descriptor??
[  670.348243][    T9] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  670.429242][   T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  670.429266][   T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  670.429277][   T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  670.429462][   T32] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61
[  670.583132][   T32] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  670.738364][   T32] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  670.738398][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.738420][   T32] usb 1-1: Product: syz
[  670.738435][   T32] usb 1-1: Manufacturer: syz
[  670.738451][   T32] usb 1-1: SerialNumber: syz
[  670.747740][   T32] usb 1-1: config 0 descriptor??
[  670.783639][   T32] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  670.895760][ T5705] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[  670.932935][    T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  671.095211][ T5705] usb 7-1: Using ep0 maxpacket: 16
[  671.103592][ T5705] usb 7-1: config 242 has an invalid interface number: 224 but max is 0
[  671.103622][ T5705] usb 7-1: config 242 has no interface number 0
[  671.103709][ T5705] usb 7-1: config 242 interface 224 has no altsetting 0
[  671.106193][ T5705] usb 7-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=27.0a
[  671.106224][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.106303][ T5705] usb 7-1: Product: syz
[  671.106320][ T5705] usb 7-1: Manufacturer: syz
[  671.106335][ T5705] usb 7-1: SerialNumber: syz
[  671.123842][    T9] usb 5-1: Using ep0 maxpacket: 16
[  671.141871][    T9] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  671.141907][    T9] usb 5-1: config 0 has no interface number 0
[  671.141958][    T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  671.141983][    T9] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  671.162444][    T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  671.162480][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  671.162507][    T9] usb 5-1: Product: syz
[  671.162521][    T9] usb 5-1: Manufacturer: syz
[  671.162535][    T9] usb 5-1: SerialNumber: syz
[  671.264931][    T9] usb 5-1: config 0 descriptor??
[  671.266109][T17362] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  671.266326][T17362] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  671.509464][T17362] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  671.509740][T17362] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  671.518469][ T5705] usb 7-1: selecting invalid altsetting 1
[  671.518497][ T5705] catc 7-1:242.224: Can't set altsetting 1.
[  671.518623][ T5705] catc 7-1:242.224: probe with driver catc failed with error -5
[  671.579834][ T5705] usb 7-1: USB disconnect, device number 83
[  671.733863][    T9] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  671.734115][    T9] asix 5-1:0.34: probe with driver asix failed with error -61
[  672.246253][   T32] gspca_stk1135: reg_w 0xf err -71
[  672.247308][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  672.247322][   T32] gspca_stk1135: Sensor write failed
[  672.247349][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  672.247361][   T32] gspca_stk1135: Sensor write failed
[  672.247387][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  672.247397][   T32] gspca_stk1135: Sensor read failed
[  672.247423][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  672.247433][   T32] gspca_stk1135: Sensor read failed
[  672.247440][   T32] gspca_stk1135: Detected sensor type unknown (0x0)
[  672.247472][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  672.247483][   T32] gspca_stk1135: Sensor read failed
[  672.247507][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  672.247518][   T32] gspca_stk1135: Sensor read failed
[  672.247545][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  672.247556][   T32] gspca_stk1135: Sensor write failed
[  672.247581][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  672.247592][   T32] gspca_stk1135: Sensor write failed
[  672.247679][   T32] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  672.285025][   T32] usb 1-1: USB disconnect, device number 32
[  672.920236][T17391] sg_write: process 1336 (syz.0.4053) changed security contexts after opening file descriptor, this is not allowed.
[  672.920599][T17391] ucma_write: process 1336 (syz.0.4053) changed security contexts after opening file descriptor, this is not allowed.
[  673.286139][ T5765] usb 3-1: USB disconnect, device number 70
[  673.411764][ T5603] usb 7-1: new full-speed USB device number 84 using dummy_hcd
[  673.585567][ T5603] usb 7-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  673.585607][ T5603] usb 7-1: config 1 interface 0 has no altsetting 0
[  673.592680][ T5603] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  673.592712][ T5603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.592733][ T5603] usb 7-1: Product: syz
[  673.592749][ T5603] usb 7-1: Manufacturer: syz
[  673.592764][ T5603] usb 7-1: SerialNumber: syz
[  673.787412][T13535] usb 5-1: USB disconnect, device number 58
[  673.950562][ T5603] usb 7-1: USB disconnect, device number 84
[  674.393984][T17406] FAULT_INJECTION: forcing a failure.
[  674.393984][T17406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  674.394026][T17406] CPU: 0 UID: 0 PID: 17406 Comm: syz.0.4058 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  674.394057][T17406] Tainted: [L]=SOFTLOCKUP
[  674.394066][T17406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  674.394079][T17406] Call Trace:
[  674.394087][T17406]  <TASK>
[  674.394097][T17406]  dump_stack_lvl+0xe8/0x150
[  674.394131][T17406]  should_fail_ex+0x46b/0x600
[  674.394164][T17406]  _copy_from_iter+0x1d3/0x1670
[  674.394203][T17406]  ? trace_kmem_cache_alloc+0x29/0xe0
[  674.394233][T17406]  ? __alloc_skb+0x27d/0x7d0
[  674.394259][T17406]  ? __pfx__copy_from_iter+0x10/0x10
[  674.394286][T17406]  ? kmem_cache_alloc_node_noprof+0x27c/0x6e0
[  674.394315][T17406]  ? __alloc_skb+0x27d/0x7d0
[  674.394346][T17406]  ? netlink_sendmsg+0x650/0xb40
[  674.394375][T17406]  ? skb_put+0x11b/0x210
[  674.394404][T17406]  netlink_sendmsg+0x6c0/0xb40
[  674.394441][T17406]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.394482][T17406]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  674.394523][T17406]  ? aa_sock_msg_perm+0x122/0x200
[  674.394555][T17406]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.394582][T17406]  sock_sendmsg_nosec+0x112/0x150
[  674.394608][T17406]  ____sys_sendmsg+0x55c/0x870
[  674.394644][T17406]  ? __pfx_____sys_sendmsg+0x10/0x10
[  674.394682][T17406]  ? import_iovec+0x73/0xa0
[  674.394716][T17406]  ___sys_sendmsg+0x2a5/0x360
[  674.394745][T17406]  ? __lock_acquire+0x6b5/0x2d10
[  674.394771][T17406]  ? __pfx____sys_sendmsg+0x10/0x10
[  674.394834][T17406]  ? __fget_files+0x2a/0x420
[  674.394858][T17406]  ? __fget_files+0x3a6/0x420
[  674.394894][T17406]  __x64_sys_sendmsg+0x1c3/0x2a0
[  674.394928][T17406]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  674.394965][T17406]  ? __pfx_ksys_write+0x10/0x10
[  674.395002][T17406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.395024][T17406]  do_syscall_64+0x15f/0xf80
[  674.395047][T17406]  ? trace_irq_disable+0x3b/0x140
[  674.395077][T17406]  ? clear_bhb_loop+0x40/0x90
[  674.395104][T17406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.395126][T17406] RIP: 0033:0x7f422d37ce59
[  674.395147][T17406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  674.395167][T17406] RSP: 002b:00007f422b5ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  674.395190][T17406] RAX: ffffffffffffffda RBX: 00007f422d5f5fa0 RCX: 00007f422d37ce59
[  674.395207][T17406] RDX: 0000000004008040 RSI: 0000200000000080 RDI: 0000000000000005
[  674.395222][T17406] RBP: 00007f422b5ce090 R08: 0000000000000000 R09: 0000000000000000
[  674.395236][T17406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  674.395248][T17406] R13: 00007f422d5f6038 R14: 00007f422d5f5fa0 R15: 00007fff37dd7e48
[  674.395282][T17406]  </TASK>
[  674.819571][T17411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  674.913731][ T5603] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  675.090592][ T5603] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  675.090626][ T5603] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  675.090653][ T5603] usb 1-1: config 1 has no interface number 0
[  675.091357][ T5603] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.091397][ T5603] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  675.091429][ T5603] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  675.110508][ T5603] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  675.110542][ T5603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.110563][ T5603] usb 1-1: Product: syz
[  675.110578][ T5603] usb 1-1: Manufacturer: syz
[  675.110593][ T5603] usb 1-1: SerialNumber: syz
[  675.397802][T17420] syzkaller1: entered promiscuous mode
[  675.397833][T17420] syzkaller1: entered allmulticast mode
[  676.700038][   T32] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  676.856560][   T32] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  676.856596][   T32] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  676.856619][   T32] usb 5-1: Product: syz
[  676.856634][   T32] usb 5-1: Manufacturer: syz
[  676.856650][   T32] usb 5-1: SerialNumber: syz
[  676.905931][   T32] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  677.250225][   T32] vp7045: USB control message 'in' went wrong.
[  677.250246][   T32] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  677.250282][   T32] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  677.259190][   T32] usb 5-1: USB disconnect, device number 59
[  677.603519][ T5603] cdc_ncm 1-1:1.1: bind() failure
[  677.683668][ T5603] usb 1-1: USB disconnect, device number 33
[  678.848966][   T32] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  679.006497][   T32] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  679.006532][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.006554][   T32] usb 1-1: Product: syz
[  679.006571][   T32] usb 1-1: Manufacturer: syz
[  679.006587][   T32] usb 1-1: SerialNumber: syz
[  679.041538][   T32] usb 1-1: config 0 descriptor??
[  679.055902][   T32] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  679.230988][T17478] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  679.231065][T17478] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  679.240300][ T5603] usb 7-1: new high-speed USB device number 85 using dummy_hcd
[  679.413592][ T5603] usb 7-1: no configurations
[  679.413705][ T5603] usb 7-1: can't read configurations, error -22
[  679.548702][ T5603] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[  679.709801][ T5603] usb 7-1: no configurations
[  679.709822][ T5603] usb 7-1: can't read configurations, error -22
[  679.710130][ T5603] usb usb7-port1: attempt power cycle
[  680.092256][ T5603] usb 7-1: new high-speed USB device number 87 using dummy_hcd
[  680.111078][ T5603] usb 7-1: no configurations
[  680.111101][ T5603] usb 7-1: can't read configurations, error -22
[  680.249566][ T5603] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[  680.271939][   T32] gspca_stk1135: reg_w 0xd err -71
[  680.274127][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  680.274144][   T32] gspca_stk1135: Sensor write failed
[  680.274171][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  680.274182][   T32] gspca_stk1135: Sensor write failed
[  680.274206][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  680.274217][   T32] gspca_stk1135: Sensor read failed
[  680.274242][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  680.274253][   T32] gspca_stk1135: Sensor read failed
[  680.274260][   T32] gspca_stk1135: Detected sensor type unknown (0x0)
[  680.274290][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  680.274301][   T32] gspca_stk1135: Sensor read failed
[  680.274325][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  680.274335][   T32] gspca_stk1135: Sensor read failed
[  680.274360][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  680.274370][   T32] gspca_stk1135: Sensor write failed
[  680.274454][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  680.274617][   T32] gspca_stk1135: Sensor write failed
[  680.274823][ T5603] usb 7-1: no configurations
[  680.274822][   T32] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  680.274839][ T5603] usb 7-1: can't read configurations, error -22
[  680.285787][ T5603] usb usb7-port1: unable to enumerate USB device
[  680.410949][   T32] usb 1-1: USB disconnect, device number 34
[  681.107883][   T32] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  681.268027][   T32] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  681.268061][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.268082][   T32] usb 5-1: Product: syz
[  681.268098][   T32] usb 5-1: Manufacturer: syz
[  681.268114][   T32] usb 5-1: SerialNumber: syz
[  681.517654][ T5603] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  681.676123][ T5603] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  681.676180][ T5603] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7
[  681.676200][ T5603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  681.676216][ T5603] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  681.718742][ T5603] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  681.718776][ T5603] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  681.718796][ T5603] usb 3-1: Manufacturer: syz
[  681.724752][ T5603] usb 3-1: config 0 descriptor??
[  681.751322][   T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  681.751360][   T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  682.172474][T17507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.173055][T17507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.302477][T17539] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4094'.
[  682.938820][ T5705] usb 3-1: USB disconnect, device number 71
[  683.036994][   T60] Bluetooth: hci5: command 0x0405 tx timeout
[  683.117575][   T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  683.118262][   T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  683.121207][   T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  683.121262][   T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  683.122164][   T32] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  683.159036][   T32] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  683.177981][   T32] usb 5-1: USB disconnect, device number 60
[  683.486630][ T5705] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  683.642307][ T5705] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  683.642359][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.642379][ T5705] usb 1-1: Product: syz
[  683.642394][ T5705] usb 1-1: Manufacturer: syz
[  683.642408][ T5705] usb 1-1: SerialNumber: syz
[  683.651041][ T5705] usb 1-1: config 0 descriptor??
[  683.704350][ T5705] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  684.716507][    T9] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[  684.907925][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  684.907955][    T9] usb 3-1: config 0 has no interfaces?
[  684.911338][ T5705] gspca_stk1135: reg_w 0xd err -71
[  684.911608][    T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  684.911633][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.911652][    T9] usb 3-1: Product: syz
[  684.911667][    T9] usb 3-1: Manufacturer: syz
[  684.911682][    T9] usb 3-1: SerialNumber: syz
[  684.913151][ T5705] gspca_stk1135: serial bus timeout: status=0x00
[  684.913170][ T5705] gspca_stk1135: Sensor write failed
[  684.913200][ T5705] gspca_stk1135: serial bus timeout: status=0x00
[  684.913211][ T5705] gspca_stk1135: Sensor write failed
[  684.913238][ T5705] gspca_stk1135: serial bus timeout: status=0x00
[  684.913249][ T5705] gspca_stk1135: Sensor read failed
[  684.913275][ T5705] gspca_stk1135: serial bus timeout: status=0x00
[  684.913286][ T5705] gspca_stk1135: Sensor read failed
[  684.913294][ T5705] gspca_stk1135: Detected sensor type unknown (0x0)
[  684.913328][ T5705] gspca_stk1135: serial bus timeout: status=0x00
[  684.913339][ T5705] gspca_stk1135: Sensor read failed
[  684.913364][ T5705] gspca_stk1135: serial bus timeout: status=0x00
[  684.913376][ T5705] gspca_stk1135: Sensor read failed
[  684.913403][ T5705] gspca_stk1135: serial bus timeout: status=0x00
[  684.913413][ T5705] gspca_stk1135: Sensor write failed
[  684.913440][ T5705] gspca_stk1135: serial bus timeout: status=0x00
[  684.913450][ T5705] gspca_stk1135: Sensor write failed
[  684.913537][ T5705] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  685.019919][ T5705] usb 1-1: USB disconnect, device number 35
[  685.089387][    T9] usb 3-1: config 0 descriptor??
[  685.297032][   T32] usb 3-1: USB disconnect, device number 72
[  685.498800][T17567] Option '                                                                     ' to dns_resolver key: bad/missing value
[  685.621134][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  685.815971][   T32] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[  685.906652][T17574] veth0_virt_wifi: entered promiscuous mode
[  685.906682][T17574] veth0_virt_wifi: entered allmulticast mode
[  685.946606][   T32] usb 7-1: device descriptor read/64, error -71
[  686.087192][   T37] audit: type=1326 audit(5336134886.454:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17573 comm="syz.0.4108" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f422d37ce59 code=0x7fc00000
[  686.205287][   T32] usb 7-1: new high-speed USB device number 90 using dummy_hcd
[  686.378141][   T32] usb 7-1: device descriptor read/64, error -71
[  686.486123][   T32] usb usb7-port1: attempt power cycle
[  686.675070][ T5603] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  686.824972][   T32] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[  686.846140][   T32] usb 7-1: device descriptor read/8, error -71
[  686.847747][ T5603] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  686.847774][ T5603] usb 1-1: config 0 has no interface number 0
[  686.847820][ T5603] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.847848][ T5603] usb 1-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  686.847890][ T5603] usb 1-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00
[  686.847922][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.911702][ T5603] usb 1-1: config 0 descriptor??
[  686.995153][   T55] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  687.094884][   T32] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[  687.120306][   T32] usb 7-1: device descriptor read/8, error -71
[  687.168006][   T55] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  687.168040][   T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.168061][   T55] usb 3-1: Product: syz
[  687.168077][   T55] usb 3-1: Manufacturer: syz
[  687.168093][   T55] usb 3-1: SerialNumber: syz
[  687.225067][   T32] usb usb7-port1: unable to enumerate USB device
[  687.660954][ T5603] hid_parser_main: 113 callbacks suppressed
[  687.660981][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.661015][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.661045][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.661074][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.661103][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.661132][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.661796][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.661830][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.661860][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.661889][ T5603] logitech 0003:046D:C20A.0020: unknown main item tag 0x0
[  687.763468][ T5603] logitech 0003:046D:C20A.0020: hidraw0: USB HID v7f.fd Device [HID 046d:c20a] on usb-dummy_hcd.0-1/input2
[  687.763578][ T5603] logitech 0003:046D:C20A.0020: no inputs found
[  687.883340][   T55] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  687.883401][   T55] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  687.980220][   T32] usb 1-1: USB disconnect, device number 36
[  688.014170][   T55] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  688.059071][   T55] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  688.093706][   T55] usb 3-1: USB disconnect, device number 73
[  689.513691][ T5765] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[  689.678543][ T5765] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  689.678573][ T5765] usb 7-1: config 0 has no interfaces?
[  689.701951][ T5765] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  689.701984][ T5765] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  689.702006][ T5765] usb 7-1: Product: syz
[  689.702022][ T5765] usb 7-1: Manufacturer: syz
[  689.702038][ T5765] usb 7-1: SerialNumber: syz
[  689.775881][ T5765] usb 7-1: config 0 descriptor??
[  691.562723][   T55] usb 3-1: new full-speed USB device number 74 using dummy_hcd
[  691.924146][   T55] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  691.924183][   T55] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  691.924224][   T55] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  691.924249][   T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.047881][ T5603] usb 7-1: USB disconnect, device number 93
[  692.267996][   T55] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  692.285078][   T55] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input57
[  692.362367][   T55] input: failed to attach handler kbd to device input57, error: -5
[  692.376748][   T55] usb 3-1: USB disconnect, device number 74
[  692.585398][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4125'.
[  693.588915][ T1260] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  693.742201][ T1260] usb 3-1: Using ep0 maxpacket: 16
[  693.760417][ T1260] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  693.760450][ T1260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.760472][ T1260] usb 3-1: Product: syz
[  693.760487][ T1260] usb 3-1: Manufacturer: syz
[  693.760501][ T1260] usb 3-1: SerialNumber: syz
[  693.776357][ T1260] usb 3-1: config 0 descriptor??
[  693.791401][ T1260] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  693.802493][ T1260] usb 3-1: Detected FT-X
[  693.879421][T17649] block device autoloading is deprecated and will be removed.
[  694.127631][T17663] FAULT_INJECTION: forcing a failure.
[  694.127631][T17663] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  694.127670][T17663] CPU: 0 UID: 0 PID: 17663 Comm: syz.4.4130 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  694.127700][T17663] Tainted: [L]=SOFTLOCKUP
[  694.127708][T17663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  694.127720][T17663] Call Trace:
[  694.127729][T17663]  <TASK>
[  694.127737][T17663]  dump_stack_lvl+0xe8/0x150
[  694.127769][T17663]  should_fail_ex+0x46b/0x600
[  694.127802][T17663]  _copy_to_user+0x31/0xb0
[  694.127835][T17663]  simple_read_from_buffer+0xe1/0x170
[  694.127866][T17663]  proc_fail_nth_read+0x1be/0x230
[  694.127899][T17663]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  694.127928][T17663]  ? rw_verify_area+0x2ac/0x4e0
[  694.127956][T17663]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  694.127983][T17663]  vfs_read+0x212/0xa80
[  694.128018][T17663]  ? __pfx_vfs_read+0x10/0x10
[  694.128047][T17663]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  694.128146][T17663]  ? lockdep_hardirqs_on+0x7a/0x110
[  694.128201][T17663]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  694.128250][T17663]  ? mutex_lock_nested+0x152/0x1d0
[  694.128275][T17663]  ? fdget_pos+0x252/0x320
[  694.128308][T17663]  ksys_read+0x156/0x270
[  694.128339][T17663]  ? __pfx_ksys_read+0x10/0x10
[  694.128373][T17663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.128396][T17663]  do_syscall_64+0x15f/0xf80
[  694.128416][T17663]  ? trace_irq_disable+0x3b/0x140
[  694.128444][T17663]  ? clear_bhb_loop+0x40/0x90
[  694.128470][T17663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.128492][T17663] RIP: 0033:0x7fed5fc4d68e
[  694.128512][T17663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  694.128531][T17663] RSP: 002b:00007fed5deddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  694.128554][T17663] RAX: ffffffffffffffda RBX: 00007fed5dede6c0 RCX: 00007fed5fc4d68e
[  694.128570][T17663] RDX: 000000000000000f RSI: 00007fed5dede0a0 RDI: 0000000000000006
[  694.128584][T17663] RBP: 00007fed5dede090 R08: 0000000000000000 R09: 0000000000000000
[  694.128598][T17663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  694.128611][T17663] R13: 00007fed5ff06038 R14: 00007fed5ff05fa0 R15: 00007ffc98886ef8
[  694.128642][T17663]  </TASK>
[  694.262133][   T55] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[  694.418716][   T55] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  694.418746][   T55] usb 7-1: config 0 has no interfaces?
[  694.498126][   T55] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  694.498163][   T55] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  694.498186][   T55] usb 7-1: Product: syz
[  694.498203][   T55] usb 7-1: Manufacturer: syz
[  694.498275][   T55] usb 7-1: SerialNumber: syz
[  694.544684][   T55] usb 7-1: config 0 descriptor??
[  694.656468][ T1260] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  694.660073][ T1260] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  694.675631][ T1260] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  694.718683][ T1260] usb 3-1: USB disconnect, device number 75
[  694.752650][ T1260] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  694.805456][ T1260] ftdi_sio 3-1:0.0: device disconnected
[  695.180780][ T5603] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  695.351211][ T5603] usb 1-1: Using ep0 maxpacket: 32
[  695.355802][ T5603] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  695.355835][ T5603] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  695.355857][ T5603] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  695.355880][ T5603] usb 1-1: config 1 has no interface number 0
[  695.355938][ T5603] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  695.355967][ T5603] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  695.356011][ T5603] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  695.356036][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.466456][ T5603] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  695.652461][T17673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  695.653283][T17673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  695.656109][ T5603] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  696.079971][ T5705] usb 1-1: USB disconnect, device number 37
[  696.131581][ T5705] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  696.351836][T17703] FAULT_INJECTION: forcing a failure.
[  696.351836][T17703] name failslab, interval 1, probability 0, space 0, times 0
[  696.351863][T17703] CPU: 0 UID: 0 PID: 17703 Comm: syz.4.4146 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  696.351880][T17703] Tainted: [L]=SOFTLOCKUP
[  696.351884][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  696.351892][T17703] Call Trace:
[  696.351897][T17703]  <TASK>
[  696.351902][T17703]  dump_stack_lvl+0xe8/0x150
[  696.351929][T17703]  should_fail_ex+0x46b/0x600
[  696.351947][T17703]  should_failslab+0xa8/0x100
[  696.351966][T17703]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  696.351983][T17703]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  696.351998][T17703]  ? dup_task_struct+0x52/0x840
[  696.352018][T17703]  dup_task_struct+0x52/0x840
[  696.352033][T17703]  ? rt_spin_unlock+0x160/0x200
[  696.352049][T17703]  copy_process+0x89b/0x4450
[  696.352069][T17703]  ? __lock_acquire+0x6b5/0x2d10
[  696.352083][T17703]  ? __might_fault+0xaf/0x130
[  696.352100][T17703]  ? __might_fault+0xaf/0x130
[  696.352119][T17703]  ? __pfx_copy_process+0x10/0x10
[  696.352141][T17703]  kernel_clone+0x2d7/0x940
[  696.352160][T17703]  ? __pfx_kernel_clone+0x10/0x10
[  696.352186][T17703]  __se_sys_clone3+0x33c/0x360
[  696.352205][T17703]  ? __pfx___se_sys_clone3+0x10/0x10
[  696.352236][T17703]  ? __pfx_ksys_write+0x10/0x10
[  696.352256][T17703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.352269][T17703]  do_syscall_64+0x15f/0xf80
[  696.352281][T17703]  ? trace_irq_disable+0x3b/0x140
[  696.352298][T17703]  ? clear_bhb_loop+0x40/0x90
[  696.352312][T17703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.352324][T17703] RIP: 0033:0x7fed5fc8ce59
[  696.352337][T17703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  696.352348][T17703] RSP: 002b:00007fed5deddef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  696.352361][T17703] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fed5fc8ce59
[  696.352370][T17703] RDX: 00007fed5deddf10 RSI: 0000000000000058 RDI: 00007fed5deddf10
[  696.352382][T17703] RBP: 00007fed5dede090 R08: 0000000000000000 R09: 0000000000000058
[  696.352390][T17703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  696.352397][T17703] R13: 00007fed5ff06038 R14: 00007fed5ff05fa0 R15: 00007ffc98886ef8
[  696.352417][T17703]  </TASK>
[  696.959901][ T5603] usb 3-1: new full-speed USB device number 76 using dummy_hcd
[  697.016606][ T5765] usb 7-1: USB disconnect, device number 94
[  697.177002][ T5603] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  697.198011][ T5603] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  697.198046][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.198068][ T5603] usb 3-1: Product: syz
[  697.198084][ T5603] usb 3-1: Manufacturer: ␉
[  697.198100][ T5603] usb 3-1: SerialNumber: syz
[  697.280335][T13535] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  697.439725][T13535] usb 1-1: Using ep0 maxpacket: 16
[  697.441838][T13535] usb 1-1: config 1 has an invalid interface number: 62 but max is 0
[  697.441865][T13535] usb 1-1: config 1 has no interface number 0
[  697.441966][T13535] usb 1-1: config 1 interface 62 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.441997][T13535] usb 1-1: config 1 interface 62 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 64
[  697.442022][T13535] usb 1-1: config 1 interface 62 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  697.442051][T13535] usb 1-1: config 1 interface 62 has no altsetting 0
[  697.443195][T13535] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  697.443224][T13535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  697.443283][T13535] usb 1-1: SerialNumber: syz
[  697.479777][ T5603] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  697.480141][T17721] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  697.610059][ T1260] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  697.647590][ T5603] usb 3-1: USB disconnect, device number 76
[  697.702946][ T6283] udevd[6283]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory
[  697.703021][ T6283] udevd[6283]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  697.740375][ T1260] usb 5-1: device descriptor read/64, error -71
[  697.785168][T13535] cdc_acm 1-1:1.62: ttyACM0: USB ACM device
[  697.796173][T13535] usb 1-1: USB disconnect, device number 38
[  697.979403][ T1260] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  698.109303][ T1260] usb 5-1: device descriptor read/64, error -71
[  698.166396][T17739] vxfs: WRONG superblock magic 00000000 at 1
[  698.166958][T17739] vxfs: WRONG superblock magic 00000000 at 8
[  698.166975][T17739] vxfs: can't find superblock.
[  698.220380][ T1260] usb usb5-port1: attempt power cycle
[  698.444461][T17750] netlink: 'syz.0.4166': attribute type 21 has an invalid length.
[  698.444480][T17750] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4166'.
[  698.444536][T17750] netlink: 'syz.0.4166': attribute type 5 has an invalid length.
[  698.444545][T17750] netlink: 'syz.0.4166': attribute type 6 has an invalid length.
[  698.444552][T17750] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4166'.
[  698.550782][ T5603] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  698.559174][ T1260] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  698.579727][ T1260] usb 5-1: device descriptor read/8, error -71
[  698.701506][ T5603] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  698.701537][ T5603] usb 3-1: config 0 has no interfaces?
[  698.703771][ T5603] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  698.703804][ T5603] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  698.703826][ T5603] usb 3-1: Product: syz
[  698.703839][ T5603] usb 3-1: Manufacturer: syz
[  698.703848][ T5603] usb 3-1: SerialNumber: syz
[  698.706781][ T5603] usb 3-1: config 0 descriptor??
[  698.740534][ T5705] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  698.818985][ T1260] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  698.840315][ T1260] usb 5-1: device descriptor read/8, error -71
[  698.888914][ T5705] usb 1-1: Using ep0 maxpacket: 16
[  698.890812][ T5705] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  698.893138][ T5705] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  698.893167][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.893188][ T5705] usb 1-1: Product: syz
[  698.893204][ T5705] usb 1-1: Manufacturer: syz
[  698.893215][ T5705] usb 1-1: SerialNumber: syz
[  698.899033][ T5705] r8152-cfgselector 1-1: Unknown version 0x0000
[  698.899056][ T5705] r8152-cfgselector 1-1: config 0 descriptor??
[  698.949783][ T1260] usb usb5-port1: unable to enumerate USB device
[  699.339695][T17752] binder: BC_ATTEMPT_ACQUIRE not supported
[  699.339708][T17752] binder: 17751:17752 ioctl c0306201 2000000001c0 returned -22
[  699.342613][ T5705] r8152-cfgselector 1-1: USB disconnect, device number 39
[  700.108351][ T5705] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  700.258443][ T5705] usb 1-1: Using ep0 maxpacket: 32
[  700.264933][ T5705] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  700.264968][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.264983][ T5705] usb 1-1: Product: syz
[  700.264992][ T5705] usb 1-1: Manufacturer: syz
[  700.265001][ T5705] usb 1-1: SerialNumber: syz
[  700.523827][T17756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  700.524800][T17756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  700.569486][ T5705] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  700.569924][ T5705] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[  700.644694][ T5705] usb 1-1: USB disconnect, device number 40
[  701.008156][ T5603] usb 7-1: new full-speed USB device number 95 using dummy_hcd
[  701.165064][ T5603] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  701.165086][ T5603] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.165099][ T5603] usb 7-1: Product: syz
[  701.165108][ T5603] usb 7-1: Manufacturer: syz
[  701.165117][ T5603] usb 7-1: SerialNumber: syz
[  701.203355][ T5603] usb 7-1: config 0 descriptor??
[  701.234706][ T5603] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  701.270302][T17789] Scaler: =================  START STATUS  =================
[  701.270367][T17789] Scaler: ==================  END STATUS  ==================
[  701.271403][T17789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4183'.
[  701.350672][T17792] binder_alloc: 17788: binder_alloc_buf, no vma
[  701.355565][   T55] usb 3-1: USB disconnect, device number 77
[  701.372667][T17789] sg_write: data in/out 455644/242 bytes for SCSI command 0x0-- guessing data in;
[  701.372667][T17789]    program syz.0.4183 not setting count and/or reply_len properly
[  701.574881][T17800] FAULT_INJECTION: forcing a failure.
[  701.574881][T17800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  701.574965][T17800] CPU: 0 UID: 0 PID: 17800 Comm: syz.2.4186 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  701.574987][T17800] Tainted: [L]=SOFTLOCKUP
[  701.574993][T17800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  701.575002][T17800] Call Trace:
[  701.575011][T17800]  <TASK>
[  701.575019][T17800]  dump_stack_lvl+0xe8/0x150
[  701.575043][T17800]  should_fail_ex+0x46b/0x600
[  701.575068][T17800]  _copy_from_user+0x2d/0xb0
[  701.575092][T17800]  video_usercopy+0x36f/0x1450
[  701.575122][T17800]  ? __pfx___video_do_ioctl+0x10/0x10
[  701.575145][T17800]  ? __pfx_video_usercopy+0x10/0x10
[  701.575175][T17800]  ? __fget_files+0x2a/0x420
[  701.575196][T17800]  ? __fget_files+0x2a/0x420
[  701.575213][T17800]  ? __fget_files+0x3a6/0x420
[  701.575234][T17800]  v4l2_ioctl+0x190/0x1e0
[  701.575257][T17800]  ? __pfx_v4l2_ioctl+0x10/0x10
[  701.575278][T17800]  __se_sys_ioctl+0xff/0x170
[  701.575300][T17800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.575317][T17800]  do_syscall_64+0x15f/0xf80
[  701.575334][T17800]  ? clear_bhb_loop+0x40/0x90
[  701.575353][T17800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.575369][T17800] RIP: 0033:0x7f28e2b9ce59
[  701.575386][T17800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  701.575410][T17800] RSP: 002b:00007f28e0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  701.575428][T17800] RAX: ffffffffffffffda RBX: 00007f28e2e15fa0 RCX: 00007f28e2b9ce59
[  701.575439][T17800] RDX: 0000200000000380 RSI: 00000000c0d05605 RDI: 0000000000000003
[  701.575450][T17800] RBP: 00007f28e0df6090 R08: 0000000000000000 R09: 0000000000000000
[  701.575459][T17800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  701.575469][T17800] R13: 00007f28e2e16038 R14: 00007f28e2e15fa0 R15: 00007ffe77253508
[  701.575492][T17800]  </TASK>
[  701.777537][   T55] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  701.941738][   T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  701.941797][   T55] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  701.941822][   T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.952714][   T55] usb 1-1: config 0 descriptor??
[  702.107832][   T55] pwc: Askey VC010 type 2 USB webcam detected.
[  702.195931][   T55] pwc: send_video_command error -71
[  702.195952][   T55] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  702.196073][   T55] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  702.214058][   T55] usb 1-1: USB disconnect, device number 41
[  702.230884][ T1260] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[  702.397221][ T1260] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  702.397256][ T1260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.397277][ T1260] usb 3-1: Product: syz
[  702.397293][ T1260] usb 3-1: Manufacturer: syz
[  702.397309][ T1260] usb 3-1: SerialNumber: syz
[  702.433767][ T5603] gspca_stk1135: reg_w 0xd err -71
[  702.434806][ T5603] gspca_stk1135: serial bus timeout: status=0x00
[  702.434821][ T5603] gspca_stk1135: Sensor write failed
[  702.434843][ T5603] gspca_stk1135: serial bus timeout: status=0x00
[  702.434852][ T5603] gspca_stk1135: Sensor write failed
[  702.434877][ T5603] gspca_stk1135: serial bus timeout: status=0x00
[  702.434887][ T5603] gspca_stk1135: Sensor read failed
[  702.434911][ T5603] gspca_stk1135: serial bus timeout: status=0x00
[  702.434922][ T5603] gspca_stk1135: Sensor read failed
[  702.434929][ T5603] gspca_stk1135: Detected sensor type unknown (0x0)
[  702.434957][ T5603] gspca_stk1135: serial bus timeout: status=0x00
[  702.434967][ T5603] gspca_stk1135: Sensor read failed
[  702.434990][ T5603] gspca_stk1135: serial bus timeout: status=0x00
[  702.435001][ T5603] gspca_stk1135: Sensor read failed
[  702.435025][ T5603] gspca_stk1135: serial bus timeout: status=0x00
[  702.435035][ T5603] gspca_stk1135: Sensor write failed
[  702.435059][ T5603] gspca_stk1135: serial bus timeout: status=0x00
[  702.435069][ T5603] gspca_stk1135: Sensor write failed
[  702.435146][ T5603] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[  702.537398][ T1260] usb 3-1: config 0 descriptor??
[  702.563017][ T5603] usb 7-1: USB disconnect, device number 95
[  702.745782][ T1260] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  702.778615][ T5705] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  702.909260][ T5705] usb 5-1: device descriptor read/64, error -71
[  703.148077][ T5705] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  703.280480][ T5705] usb 5-1: device descriptor read/64, error -71
[  703.395809][ T5705] usb usb5-port1: attempt power cycle
[  703.396707][   T55] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  703.630771][   T55] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  703.630803][   T55] usb 1-1: config 0 has no interface number 0
[  703.630940][   T55] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  703.637930][   T55] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  703.638013][   T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.638034][   T55] usb 1-1: Product: syz
[  703.638049][   T55] usb 1-1: Manufacturer: syz
[  703.638065][   T55] usb 1-1: SerialNumber: syz
[  703.689847][   T55] usb 1-1: config 0 descriptor??
[  703.703249][T17810] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  703.751182][ T5603] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[  703.866443][ T5705] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  703.891329][ T5705] usb 5-1: device descriptor read/8, error -71
[  703.930596][ T5603] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  703.930626][ T5603] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  703.934097][ T5603] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  703.934127][ T5603] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  703.934148][ T5603] usb 7-1: Product: syz
[  703.934163][ T5603] usb 7-1: Manufacturer: syz
[  703.934180][ T5603] usb 7-1: SerialNumber: syz
[  703.999808][ T5603] usb 7-1: config 0 descriptor??
[  704.126482][ T5705] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  704.172354][ T5705] usb 5-1: device descriptor read/8, error -71
[  704.277012][ T5705] usb usb5-port1: unable to enumerate USB device
[  704.698666][   T55] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 8e:2a:a6:9f:4d:be
[  704.724414][ T1260] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  704.743354][ T1260] usb 3-1: USB disconnect, device number 78
[  705.674728][    C0] sl0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 20060 ms
[  705.674768][    C0] sl0: transmit timed out, driver error?
[  706.149793][T17837] dummy0: entered allmulticast mode
[  706.220577][    T9] usb 1-1: USB disconnect, device number 42
[  706.233142][    T9] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  706.651851][ T5765] usb 7-1: USB disconnect, device number 96
[  706.800277][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4197'.
[  706.955921][ T5705] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  707.105978][ T5705] usb 3-1: device descriptor read/64, error -71
[  707.359519][ T5705] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  707.485642][ T5705] usb 3-1: device descriptor read/64, error -71
[  707.607773][ T5705] usb usb3-port1: attempt power cycle
[  707.644487][T17834] dummy0: left allmulticast mode
[  707.754512][ T5765] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[  707.895223][ T5765] usb 7-1: Using ep0 maxpacket: 8
[  707.898092][ T5765] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.898219][ T5765] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  707.898264][ T5765] usb 7-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  707.898289][ T5765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.954409][ T5705] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  707.981309][ T5705] usb 3-1: device descriptor read/8, error -71
[  708.003457][ T5765] usb 7-1: config 0 descriptor??
[  708.214246][ T5705] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  708.239698][ T5705] usb 3-1: device descriptor read/8, error -71
[  708.352568][ T5705] usb usb3-port1: unable to enumerate USB device
[  708.412163][ T5765] hid (null): unknown global tag 0xe
[  708.465243][ T5765] hid-u2fzero 0003:10C4:8ACF.0021: unknown global tag 0xe
[  708.465278][ T5765] hid-u2fzero 0003:10C4:8ACF.0021: item 0 2 1 14 parsing failed
[  708.467695][ T5765] hid-u2fzero 0003:10C4:8ACF.0021: probe with driver hid-u2fzero failed with error -22
[  709.635289][ T5765] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  709.783564][ T5765] usb 5-1: device descriptor read/64, error -71
[  710.044227][ T5765] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  710.163801][ T5765] usb 5-1: device descriptor read/64, error -71
[  710.273522][ T5765] usb usb5-port1: attempt power cycle
[  710.310759][ T5705] usb 7-1: USB disconnect, device number 97
[  710.574653][ T1260] usb 3-1: new full-speed USB device number 83 using dummy_hcd
[  710.624982][ T5765] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  710.653714][ T5765] usb 5-1: device descriptor read/8, error -71
[  710.757295][ T1260] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  710.757329][ T1260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.757345][ T1260] usb 3-1: Product: syz
[  710.757353][ T1260] usb 3-1: Manufacturer: syz
[  710.757373][ T1260] usb 3-1: SerialNumber: syz
[  710.777324][ T1260] usb 3-1: config 0 descriptor??
[  710.817763][ T1260] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  710.933054][ T5765] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  710.968599][ T5765] usb 5-1: device descriptor read/8, error -71
[  711.073484][ T5765] usb usb5-port1: unable to enumerate USB device
[  711.195113][    T9] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  711.238610][   T37] audit: type=1800 audit(5336134911.617:14): pid=17955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.4222" name="/" dev="sockfs" ino=69815 res=0 errno=0
[  711.371601][T17962] kAFS: No cell specified
[  711.378797][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  711.378829][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  711.378853][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  711.381737][    T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  711.381767][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.381786][    T9] usb 1-1: Product: syz
[  711.381800][    T9] usb 1-1: Manufacturer: syz
[  711.381815][    T9] usb 1-1: SerialNumber: syz
[  711.457271][    T9] usb 1-1: config 0 descriptor??
[  711.460303][T17952] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  711.562568][    T9] rc_core: IR keymap rc-streamzap not found
[  711.562589][    T9] Registered IR keymap rc-empty
[  711.564943][    T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  711.568210][    T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input58
[  711.736312][    T9] usb 1-1: USB disconnect, device number 43
[  712.073494][ T1260] gspca_stk1135: reg_w 0xd err -71
[  712.074545][ T1260] gspca_stk1135: serial bus timeout: status=0x00
[  712.074560][ T1260] gspca_stk1135: Sensor write failed
[  712.074588][ T1260] gspca_stk1135: serial bus timeout: status=0x00
[  712.074599][ T1260] gspca_stk1135: Sensor write failed
[  712.074627][ T1260] gspca_stk1135: serial bus timeout: status=0x00
[  712.074638][ T1260] gspca_stk1135: Sensor read failed
[  712.074666][ T1260] gspca_stk1135: serial bus timeout: status=0x00
[  712.074677][ T1260] gspca_stk1135: Sensor read failed
[  712.074684][ T1260] gspca_stk1135: Detected sensor type unknown (0x0)
[  712.074717][ T1260] gspca_stk1135: serial bus timeout: status=0x00
[  712.074727][ T1260] gspca_stk1135: Sensor read failed
[  712.074754][ T1260] gspca_stk1135: serial bus timeout: status=0x00
[  712.074765][ T1260] gspca_stk1135: Sensor read failed
[  712.074793][ T1260] gspca_stk1135: serial bus timeout: status=0x00
[  712.074803][ T1260] gspca_stk1135: Sensor write failed
[  712.074830][ T1260] gspca_stk1135: serial bus timeout: status=0x00
[  712.074840][ T1260] gspca_stk1135: Sensor write failed
[  712.074934][ T1260] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  712.095687][ T1260] usb 3-1: USB disconnect, device number 83
[  712.804619][ T1260] usb 7-1: new low-speed USB device number 98 using dummy_hcd
[  712.893663][   T32] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  712.957789][ T1260] usb 7-1: unable to get BOS descriptor or descriptor too short
[  712.960895][ T1260] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  712.960960][ T1260] usb 7-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  712.960978][ T1260] usb 7-1: config 1 interface 0 has no altsetting 1
[  713.002382][ T1260] usb 7-1: string descriptor 0 read error: -22
[  713.002493][ T1260] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  713.002508][ T1260] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.073606][   T32] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  713.073638][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.073650][   T32] usb 5-1: Product: syz
[  713.073659][   T32] usb 5-1: Manufacturer: syz
[  713.073668][   T32] usb 5-1: SerialNumber: syz
[  713.116656][   T32] usb 5-1: config 0 descriptor??
[  713.128332][   T32] hub 5-1:0.0: bad descriptor, ignoring hub
[  713.128369][   T32] hub 5-1:0.0: probe with driver hub failed with error -5
[  713.135675][   T32] usbsevseg 5-1:0.0: USB 7 Segment device now attached
[  713.201780][ T5603] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  713.248899][ T5765] usb 7-1: USB disconnect, device number 98
[  713.320573][T17983] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  713.325915][   T55] usb 3-1: new full-speed USB device number 84 using dummy_hcd
[  713.343362][ T5603] usb 1-1: device descriptor read/64, error -71
[  713.504898][   T55] usb 3-1: config 8 has an invalid interface number: 223 but max is 0
[  713.504931][   T55] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  713.504951][   T55] usb 3-1: config 8 has no interface number 0
[  713.504995][   T55] usb 3-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  713.541931][   T55] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  713.541965][   T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.541987][   T55] usb 3-1: Product: syz
[  713.542003][   T55] usb 3-1: Manufacturer: syz
[  713.542019][   T55] usb 3-1: SerialNumber: syz
[  713.573558][   T55] usb-storage 3-1:8.223: USB Mass Storage device detected
[  713.598494][   T32] usb 5-1: USB disconnect, device number 73
[  713.612110][   T32] usbsevseg 5-1:0.0: USB 7 Segment now disconnected
[  713.621627][ T5603] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  713.789448][ T5765] usb 3-1: USB disconnect, device number 84
[  713.821835][ T5603] usb 1-1: device descriptor read/64, error -71
[  713.931677][ T5603] usb usb1-port1: attempt power cycle
[  713.971504][   T32] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  714.125444][   T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  714.125475][   T32] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  714.128217][   T32] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  714.128247][   T32] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  714.128269][   T32] usb 5-1: Product: syz
[  714.128286][   T32] usb 5-1: Manufacturer: syz
[  714.128301][   T32] usb 5-1: SerialNumber: syz
[  714.145828][   T32] usb 5-1: config 0 descriptor??
[  714.271360][ T5603] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  714.292175][ T5603] usb 1-1: device descriptor read/8, error -71
[  714.531059][ T5603] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  714.554020][ T5603] usb 1-1: device descriptor read/8, error -71
[  714.661558][ T5603] usb usb1-port1: unable to enumerate USB device
[  714.771038][ T5718] usb 7-1: new full-speed USB device number 99 using dummy_hcd
[  714.948141][ T5718] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  714.948177][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.948200][ T5718] usb 7-1: Product: syz
[  714.948216][ T5718] usb 7-1: Manufacturer: syz
[  714.948232][ T5718] usb 7-1: SerialNumber: syz
[  714.989285][ T5718] usb 7-1: config 0 descriptor??
[  715.001861][ T5718] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  715.131474][T13535] usb 5-1: USB disconnect, device number 74
[  715.835015][T18032] netlink: 'syz.4.4249': attribute type 4 has an invalid length.
[  715.940902][ T5765] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  716.113167][ T5765] usb 3-1: config 0 has an invalid interface number: 254 but max is 0
[  716.113199][ T5765] usb 3-1: config 0 has no interface number 0
[  716.113224][ T5765] usb 3-1: too many endpoints for config 0 interface 254 altsetting 190: 189, using maximum allowed: 30
[  716.113308][ T5765] usb 3-1: config 0 interface 254 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 189
[  716.113325][ T5765] usb 3-1: config 0 interface 254 has no altsetting 0
[  716.113346][ T5765] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  716.113360][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.127137][T18040] netlink: 'syz.0.4252': attribute type 21 has an invalid length.
[  716.129374][ T5765] usb 3-1: config 0 descriptor??
[  716.223558][ T5718] gspca_stk1135: reg_w 0xd err -71
[  716.224775][ T5718] gspca_stk1135: serial bus timeout: status=0x00
[  716.224792][ T5718] gspca_stk1135: Sensor write failed
[  716.224812][ T5718] gspca_stk1135: serial bus timeout: status=0x00
[  716.224819][ T5718] gspca_stk1135: Sensor write failed
[  716.224834][ T5718] gspca_stk1135: serial bus timeout: status=0x00
[  716.224840][ T5718] gspca_stk1135: Sensor read failed
[  716.224854][ T5718] gspca_stk1135: serial bus timeout: status=0x00
[  716.224897][ T5718] gspca_stk1135: Sensor read failed
[  716.224901][ T5718] gspca_stk1135: Detected sensor type unknown (0x0)
[  716.224920][ T5718] gspca_stk1135: serial bus timeout: status=0x00
[  716.224926][ T5718] gspca_stk1135: Sensor read failed
[  716.224939][ T5718] gspca_stk1135: serial bus timeout: status=0x00
[  716.224946][ T5718] gspca_stk1135: Sensor read failed
[  716.224960][ T5718] gspca_stk1135: serial bus timeout: status=0x00
[  716.224966][ T5718] gspca_stk1135: Sensor write failed
[  716.224980][ T5718] gspca_stk1135: serial bus timeout: status=0x00
[  716.224986][ T5718] gspca_stk1135: Sensor write failed
[  716.225080][ T5718] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[  716.246931][ T5718] usb 7-1: USB disconnect, device number 99
[  716.671616][ T5603] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  716.706796][ T5765] usb 3-1: string descriptor 0 read error: -71
[  716.716816][ T5765] gspca_main: sunplus-2.14.0 probing 055f:c420
[  716.718606][ T5765] gspca_sunplus: reg_w_riv err -71
[  716.718701][ T5765] sunplus 3-1:0.254: probe with driver sunplus failed with error -71
[  716.733319][ T5765] usb 3-1: USB disconnect, device number 85
[  716.802374][ T5603] usb 1-1: device descriptor read/64, error -71
[  716.889705][T18053] pim6reg0: tun_chr_ioctl cmd 1074025676
[  716.889728][T18053] pim6reg0: owner set to 0
[  716.904316][T18053] pim6reg0: tun_chr_ioctl cmd 1074025676
[  716.904340][T18053] pim6reg0: owner set to 0
[  716.904683][T18053] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  716.905112][T18053] pim6reg0: tun_chr_ioctl cmd 1074294401
[  717.040439][ T5603] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  717.190056][ T5603] usb 1-1: device descriptor read/64, error -71
[  717.301542][ T5603] usb usb1-port1: attempt power cycle
[  717.349756][   T55] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  717.479621][   T55] usb 5-1: device descriptor read/64, error -71
[  717.549632][ T1260] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  717.649636][ T5603] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  717.671479][ T5603] usb 1-1: device descriptor read/8, error -71
[  717.700371][ T1260] usb 3-1: Using ep0 maxpacket: 16
[  717.704484][ T1260] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  717.704515][ T1260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.704538][ T1260] usb 3-1: Product: syz
[  717.704551][ T1260] usb 3-1: Manufacturer: syz
[  717.704560][ T1260] usb 3-1: SerialNumber: syz
[  717.711506][ T1260] r8152-cfgselector 3-1: Unknown version 0x0000
[  717.711532][ T1260] r8152-cfgselector 3-1: config 0 descriptor??
[  717.719605][   T55] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  717.849766][   T55] usb 5-1: device descriptor read/64, error -71
[  717.909375][ T5603] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  717.930081][ T5603] usb 1-1: device descriptor read/8, error -71
[  717.959768][   T55] usb usb5-port1: attempt power cycle
[  718.039617][ T5603] usb usb1-port1: unable to enumerate USB device
[  718.083680][T18064] netlink: 'syz.6.4262': attribute type 4 has an invalid length.
[  718.083696][T18064] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4262'.
[  718.301014][   T55] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  718.302941][T18067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.303470][T18067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.321644][   T55] usb 5-1: device descriptor read/8, error -71
[  718.420875][T18068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input59
[  718.579182][   T55] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  718.600612][   T55] usb 5-1: device descriptor read/8, error -71
[  718.709366][   T55] usb usb5-port1: unable to enumerate USB device
[  718.860119][T13535] usb 7-1: new full-speed USB device number 100 using dummy_hcd
[  719.034168][T13535] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  719.034202][T13535] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  719.034224][T13535] usb 7-1: Product: syz
[  719.034239][T13535] usb 7-1: Manufacturer: syz
[  719.034248][T13535] usb 7-1: SerialNumber: syz
[  719.037846][T13535] usb 7-1: config 0 descriptor??
[  719.055119][T13535] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  719.858453][ T1260] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  720.008340][ T1260] usb 1-1: Using ep0 maxpacket: 16
[  720.013912][ T1260] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  720.013969][ T1260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  720.013998][ T1260] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  720.014019][ T1260] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  720.014035][ T1260] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  720.015354][ T1260] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  720.015417][ T1260] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  720.015438][ T1260] usb 1-1: Manufacturer: syz
[  720.101431][ T1260] usb 1-1: config 0 descriptor??
[  720.266277][T13535] gspca_stk1135: reg_w 0xd err -71
[  720.267327][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  720.267341][T13535] gspca_stk1135: Sensor write failed
[  720.267366][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  720.267373][T13535] gspca_stk1135: Sensor write failed
[  720.267389][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  720.267396][T13535] gspca_stk1135: Sensor read failed
[  720.267410][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  720.267419][T13535] gspca_stk1135: Sensor read failed
[  720.267427][T13535] gspca_stk1135: Detected sensor type unknown (0x0)
[  720.267457][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  720.267469][T13535] gspca_stk1135: Sensor read failed
[  720.267494][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  720.267504][T13535] gspca_stk1135: Sensor read failed
[  720.267530][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  720.267539][T13535] gspca_stk1135: Sensor write failed
[  720.267553][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  720.267559][T13535] gspca_stk1135: Sensor write failed
[  720.267628][T13535] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[  720.293852][T13535] usb 7-1: USB disconnect, device number 100
[  720.358327][T18086] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4270'.
[  720.443375][   T55] r8152-cfgselector 3-1: USB disconnect, device number 86
[  720.518883][ T1260] rc_core: IR keymap rc-hauppauge not found
[  720.518918][ T1260] Registered IR keymap rc-empty
[  720.519073][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.546719][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.560896][ T1260] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  720.581805][ T1260] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input60
[  720.634701][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.649242][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.668093][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.691669][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.708068][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.729118][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.748330][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.768209][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.788030][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.808653][ T1260] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  720.844964][ T1260] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  720.845527][ T1260] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  720.946424][T13535] usb 1-1: USB disconnect, device number 52
[  721.179585][ T1260] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  721.197892][ T5765] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  721.337827][ T5765] usb 3-1: device descriptor read/64, error -71
[  721.339776][ T1260] usb 5-1: too many configurations: 129, using maximum allowed: 8
[  721.341067][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  721.341102][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 33348, setting to 1024
[  721.342185][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  721.342212][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 33348, setting to 1024
[  721.343272][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  721.343298][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 33348, setting to 1024
[  721.344514][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  721.344544][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 33348, setting to 1024
[  721.345763][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  721.345791][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 33348, setting to 1024
[  721.346849][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  721.346875][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 33348, setting to 1024
[  721.350914][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  721.350942][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 33348, setting to 1024
[  721.394997][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  721.395030][ T1260] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 33348, setting to 1024
[  721.559460][ T1260] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  721.559493][ T1260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.559519][ T1260] usb 5-1: Product: syz
[  721.559535][ T1260] usb 5-1: Manufacturer: syz
[  721.559556][ T1260] usb 5-1: SerialNumber: syz
[  721.574829][ T1260] usb 5-1: config 0 descriptor??
[  721.592898][ T1260] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 25, bLength 9, bSynchAddress 54
[  721.677519][ T5765] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  721.807483][ T5765] usb 3-1: device descriptor read/64, error -71
[  721.917841][ T5765] usb usb3-port1: attempt power cycle
[  721.929947][ T1260] usb 5-1: USB disconnect, device number 79
[  722.065625][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  722.137537][ T5718] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  722.277291][ T5765] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  722.277409][ T5718] usb 1-1: device descriptor read/64, error -71
[  722.303634][ T5765] usb 3-1: device descriptor read/8, error -71
[  722.517114][ T5718] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  722.537174][ T5765] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  722.558027][ T5765] usb 3-1: device descriptor read/8, error -71
[  722.607091][T13535] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[  722.647201][ T5718] usb 1-1: device descriptor read/64, error -71
[  722.679607][ T5765] usb usb3-port1: unable to enumerate USB device
[  722.767652][ T5718] usb usb1-port1: attempt power cycle
[  722.780270][T13535] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  722.780303][T13535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.780324][T13535] usb 5-1: Product: syz
[  722.780336][T13535] usb 5-1: Manufacturer: syz
[  722.780345][T13535] usb 5-1: SerialNumber: syz
[  722.783977][T13535] usb 5-1: config 0 descriptor??
[  722.805778][T18135] 9pnet_fd: Insufficient options for proto=fd
[  722.833337][T13535] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  723.046803][ T1260] usb 7-1: new high-speed USB device number 101 using dummy_hcd
[  723.116831][ T5718] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  723.137322][ T5718] usb 1-1: device descriptor read/8, error -71
[  723.196713][ T1260] usb 7-1: Using ep0 maxpacket: 16
[  723.198632][ T1260] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[  723.198669][ T1260] usb 7-1: config 1 has no interface number 0
[  723.198715][ T1260] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  723.198742][ T1260] usb 7-1: config 1 interface 105 altsetting 2 has an endpoint descriptor with address 0x73, changing to 0x3
[  723.198768][ T1260] usb 7-1: config 1 interface 105 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0
[  723.198788][ T1260] usb 7-1: config 1 interface 105 has no altsetting 0
[  723.201340][ T1260] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  723.201368][ T1260] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  723.201390][ T1260] usb 7-1: Product: syz
[  723.201407][ T1260] usb 7-1: Manufacturer: syz
[  723.201423][ T1260] usb 7-1: SerialNumber: syz
[  723.248295][T18135] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  723.426674][ T5718] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  723.447385][ T5718] usb 1-1: device descriptor read/8, error -71
[  723.453052][ T1260] aqc111 7-1:1.105: probe with driver aqc111 failed with error -22
[  723.577110][ T5718] usb usb1-port1: unable to enumerate USB device
[  723.999191][T13535] gspca_stk1135: reg_w 0xd err -71
[  724.000232][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  724.000247][T13535] gspca_stk1135: Sensor write failed
[  724.000273][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  724.000283][T13535] gspca_stk1135: Sensor write failed
[  724.000309][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  724.000320][T13535] gspca_stk1135: Sensor read failed
[  724.000345][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  724.000356][T13535] gspca_stk1135: Sensor read failed
[  724.000364][T13535] gspca_stk1135: Detected sensor type unknown (0x0)
[  724.000394][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  724.000405][T13535] gspca_stk1135: Sensor read failed
[  724.000429][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  724.000438][T13535] gspca_stk1135: Sensor read failed
[  724.000463][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  724.000474][T13535] gspca_stk1135: Sensor write failed
[  724.000500][T13535] gspca_stk1135: serial bus timeout: status=0x00
[  724.000510][T13535] gspca_stk1135: Sensor write failed
[  724.000599][T13535] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  724.005674][T13535] usb 5-1: USB disconnect, device number 80
[  724.416252][ T1260] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  724.568675][ T1260] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  724.571735][ T1260] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  724.571764][ T1260] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  724.571777][ T1260] usb 3-1: Product: syz
[  724.571785][ T1260] usb 3-1: Manufacturer: syz
[  724.571794][ T1260] usb 3-1: SerialNumber: syz
[  724.624978][ T1260] usb 3-1: config 0 descriptor??
[  725.401465][T18160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4300'.
[  725.485607][ T1260] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  725.615565][ T1260] usb 1-1: device descriptor read/64, error -71
[  725.726255][   T32] usb 7-1: USB disconnect, device number 101
[  725.855605][ T1260] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  725.985363][ T1260] usb 1-1: device descriptor read/64, error -71
[  726.096200][ T1260] usb usb1-port1: attempt power cycle
[  726.165355][   T32] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[  726.340527][   T32] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  726.340558][   T32] usb 7-1: config 1 has no interface number 0
[  726.340588][   T32] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  726.340603][   T32] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  726.340618][   T32] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  726.370246][   T32] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  726.370280][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.370301][   T32] usb 7-1: Product: syz
[  726.370316][   T32] usb 7-1: Manufacturer: syz
[  726.370331][   T32] usb 7-1: SerialNumber: syz
[  726.396790][T18165] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  726.445821][ T1260] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  726.466660][ T1260] usb 1-1: device descriptor read/8, error -71
[  726.642432][T18165] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  726.705112][ T1260] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  726.727517][ T1260] usb 1-1: device descriptor read/8, error -71
[  726.835805][ T1260] usb usb1-port1: unable to enumerate USB device
[  726.870688][   T32] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07
[  726.904920][   T55] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  726.997688][ T5765] usb 3-1: USB disconnect, device number 91
[  727.055819][   T55] usb 5-1: Using ep0 maxpacket: 32
[  727.060960][   T55] usb 5-1: config 139 has an invalid interface number: 213 but max is 0
[  727.060990][   T55] usb 5-1: config 139 has no interface number 0
[  727.061023][   T55] usb 5-1: config 139 interface 213 has no altsetting 0
[  727.064411][   T55] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a
[  727.064430][   T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.064442][   T55] usb 5-1: Product: syz
[  727.064451][   T55] usb 5-1: Manufacturer: syz
[  727.064460][   T55] usb 5-1: SerialNumber: syz
[  727.341014][T18168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  727.341608][T18168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  727.417043][   T55] usb 5-1: USB disconnect, device number 81
[  727.537967][   T32] usb 7-1: USB disconnect, device number 102
[  727.560182][   T32] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem
[  727.835855][   T32] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  728.428729][T18210] netlink: 'syz.0.4311': attribute type 15 has an invalid length.
[  728.447771][T18212] FAULT_INJECTION: forcing a failure.
[  728.447771][T18212] name failslab, interval 1, probability 0, space 0, times 0
[  728.447807][T18212] CPU: 1 UID: 0 PID: 18212 Comm: syz.4.4312 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  728.447836][T18212] Tainted: [L]=SOFTLOCKUP
[  728.447844][T18212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  728.447856][T18212] Call Trace:
[  728.447864][T18212]  <TASK>
[  728.447873][T18212]  dump_stack_lvl+0xe8/0x150
[  728.447903][T18212]  should_fail_ex+0x46b/0x600
[  728.447934][T18212]  should_failslab+0xa8/0x100
[  728.447965][T18212]  __kmalloc_cache_noprof+0x84/0x690
[  728.447995][T18212]  ? snd_mixer_oss_put_volume1_vol+0x148/0x500
[  728.448098][T18212]  snd_mixer_oss_put_volume1_vol+0x148/0x500
[  728.448122][T18212]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  728.448155][T18212]  snd_mixer_oss_put_volume1+0x1c6/0x8b0
[  728.448176][T18212]  ? snd_mixer_oss_ioctl1+0x64b/0x1a10
[  728.448200][T18212]  snd_mixer_oss_ioctl1+0x6f6/0x1a10
[  728.448227][T18212]  ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10
[  728.448264][T18212]  ? __fget_files+0x2a/0x420
[  728.448292][T18212]  ? __fget_files+0x2a/0x420
[  728.448318][T18212]  ? __fget_files+0x3a6/0x420
[  728.448344][T18212]  ? __fget_files+0x2a/0x420
[  728.448370][T18212]  ? __pfx_snd_mixer_oss_ioctl+0x10/0x10
[  728.448392][T18212]  snd_mixer_oss_ioctl+0x48/0x60
[  728.448423][T18212]  __se_sys_ioctl+0xff/0x170
[  728.448452][T18212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.448479][T18212]  do_syscall_64+0x15f/0xf80
[  728.448498][T18212]  ? trace_irq_disable+0x3b/0x140
[  728.448527][T18212]  ? clear_bhb_loop+0x40/0x90
[  728.448551][T18212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.448570][T18212] RIP: 0033:0x7fed5fc8ce59
[  728.448591][T18212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.448608][T18212] RSP: 002b:00007fed5dede028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  728.448631][T18212] RAX: ffffffffffffffda RBX: 00007fed5ff05fa0 RCX: 00007fed5fc8ce59
[  728.448646][T18212] RDX: 0000200000000440 RSI: 0000000050009403 RDI: 0000000000000003
[  728.448659][T18212] RBP: 00007fed5dede090 R08: 0000000000000000 R09: 0000000000000000
[  728.448672][T18212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  728.448685][T18212] R13: 00007fed5ff06038 R14: 00007fed5ff05fa0 R15: 00007ffc98886ef8
[  728.448718][T18212]  </TASK>
[  728.485653][   T32] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[  728.637848][   T32] usb 7-1: Using ep0 maxpacket: 16
[  728.642918][   T32] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  728.642966][   T32] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  728.642991][   T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.658303][   T32] usb 7-1: config 0 descriptor??
[  728.814568][ T1260] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  728.901051][T18223] netlink: 'syz.2.4315': attribute type 39 has an invalid length.
[  729.051946][ T1260] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  729.051978][ T1260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  729.052030][ T1260] usb 5-1: Product: syz
[  729.052040][ T1260] usb 5-1: Manufacturer: syz
[  729.052049][ T1260] usb 5-1: SerialNumber: syz
[  729.069530][ T1260] usb 5-1: config 0 descriptor??
[  729.103243][ T1260] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  729.113731][ T5718] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  729.125890][   T32] hid_parser_main: 478 callbacks suppressed
[  729.125907][   T32] kye 0003:0458:0087.0022: unknown main item tag 0x2
[  729.125927][   T32] kye 0003:0458:0087.0022: bogus close delimiter
[  729.125935][   T32] kye 0003:0458:0087.0022: item 0 0 2 10 parsing failed
[  729.126354][   T32] kye 0003:0458:0087.0022: parse failed
[  729.126395][   T32] kye 0003:0458:0087.0022: probe with driver kye failed with error -22
[  729.134695][ T1260] dvb-usb: bulk message failed: -22 (2/0)
[  729.149736][ T1260] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  729.151977][ T1260] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  729.152031][ T1260] usb 5-1: media controller created
[  729.246154][ T1260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  729.285617][ T5718] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  729.285648][ T5718] usb 1-1: config 1 has no interface number 0
[  729.285690][ T5718] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  729.285714][ T5718] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  729.285740][ T5718] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  729.288250][ T5718] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  729.288278][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.288297][ T5718] usb 1-1: Product: syz
[  729.288312][ T5718] usb 1-1: Manufacturer: syz
[  729.288326][ T5718] usb 1-1: SerialNumber: syz
[  729.376233][   T32] usb 7-1: USB disconnect, device number 103
[  729.423402][T18225] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  729.480759][T18216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4314'.
[  729.540978][ T1260] cxusb: set interface failed
[  729.540999][ T1260] dvb-usb: bulk message failed: -22 (1/0)
[  729.627254][ T1260] DVB: Unable to find symbol mt352_attach()
[  729.638522][ T1260] dvb-usb: bulk message failed: -22 (5/0)
[  729.638555][ T1260] zl10353_read_register: readreg error (reg=127, ret==-121)
[  729.638611][ T1260] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  729.669837][T18225] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  729.734751][ T1260] rc_core: IR keymap rc-dvico-mce not found
[  729.734772][ T1260] Registered IR keymap rc-empty
[  729.739943][ T1260] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  729.749587][ T1260] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input61
[  729.785810][ T1260] dvb-usb: schedule remote query interval to 100 msecs.
[  729.785834][ T1260] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  729.800163][ T1260] usb 5-1: USB disconnect, device number 82
[  729.891514][ T5718] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:03:07
[  729.930609][ T1260] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  730.074704][   T55] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  730.224157][   T55] usb 3-1: Using ep0 maxpacket: 16
[  730.240159][   T55] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  730.240192][   T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.240214][   T55] usb 3-1: Product: syz
[  730.240230][   T55] usb 3-1: Manufacturer: syz
[  730.240245][   T55] usb 3-1: SerialNumber: syz
[  730.243275][   T32] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[  730.363556][T18245] overlayfs: workdir and upperdir must be separate subtrees
[  730.433791][   T32] usb 7-1: Using ep0 maxpacket: 16
[  730.437096][   T32] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  730.437180][   T32] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  730.445485][   T32] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  730.445517][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.445538][   T32] usb 7-1: Product: syz
[  730.445554][   T32] usb 7-1: Manufacturer: syz
[  730.445620][   T32] usb 7-1: SerialNumber: syz
[  730.505741][   T32] usb 7-1: config 0 descriptor??
[  730.562869][   T55] usb 3-1: 1:1 : unsupported sample bitwidth 2 in 127 bytes
[  730.574444][   T55] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  730.575001][   T55] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  730.602603][   T32] usb 1-1: USB disconnect, device number 61
[  730.611978][   T55] usb 3-1: 1:1 : unsupported sample bitwidth 2 in 127 bytes
[  730.612429][   T55] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  730.616511][   T32] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem
[  730.616739][   T55] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  730.625540][   T55] usb 3-1: 1:1 : unsupported sample bitwidth 2 in 127 bytes
[  730.625991][   T55] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  730.633156][ T1260] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  730.766821][ T1260] usb 5-1: device descriptor read/64, error -71
[  730.782563][   T55] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  730.845580][   T55] usb 3-1: USB disconnect, device number 92
[  730.890639][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  730.984028][   T32] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  731.006344][ T1260] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  731.134691][ T1260] usb 5-1: device descriptor read/64, error -71
[  731.246501][ T1260] usb usb5-port1: attempt power cycle
[  731.544505][   T32] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  731.582871][ T1260] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  731.609088][ T1260] usb 5-1: device descriptor read/8, error -71
[  731.697420][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  731.697455][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  731.697494][   T32] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  731.697519][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.705811][   T32] usb 3-1: config 0 descriptor??
[  731.842573][ T1260] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  731.862941][ T1260] usb 5-1: device descriptor read/8, error -71
[  731.892759][   T55] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  731.974323][ T1260] usb usb5-port1: unable to enumerate USB device
[  732.104992][   T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  732.105018][   T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  732.105032][   T55] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  732.105057][   T55] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  732.105252][   T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.189024][   T55] usb 1-1: config 0 descriptor??
[  732.200539][   T32] hid-led 0003:27B8:01ED.0023: unknown main item tag 0x0
[  732.200568][   T32] hid-led 0003:27B8:01ED.0023: unknown main item tag 0x0
[  732.200586][   T32] hid-led 0003:27B8:01ED.0023: unknown main item tag 0x0
[  732.200604][   T32] hid-led 0003:27B8:01ED.0023: unknown main item tag 0x0
[  732.200621][   T32] hid-led 0003:27B8:01ED.0023: unknown main item tag 0x0
[  732.398818][   T32] hid-led 0003:27B8:01ED.0023: probe with driver hid-led failed with error -71
[  732.408311][   T32] usb 3-1: USB disconnect, device number 93
[  732.631693][   T55] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  732.909306][T18294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  732.911487][T18294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.190220][T18306] overlayfs: missing 'lowerdir'
[  733.225603][   T55] usb 7-1: USB disconnect, device number 104
[  733.694660][T18318] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  733.752178][ T5718] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[  733.945182][ T5718] usb 7-1: unable to get BOS descriptor or descriptor too short
[  733.948588][ T5718] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  733.948618][ T5718] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 2
[  733.951146][ T5718] usb 7-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  733.951178][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.008428][ T5718] usb 7-1: Product: syz
[  734.008461][ T5718] usb 7-1: Manufacturer: syz
[  734.008477][ T5718] usb 7-1: SerialNumber: syz
[  734.323334][T13535] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  734.348777][ T5718] usb 7-1: USB disconnect, device number 105
[  734.481588][T13535] usb 5-1: Using ep0 maxpacket: 16
[  734.488880][T13535] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  734.488909][T13535] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  734.561064][T13535] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  734.561096][T13535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.561117][T13535] usb 5-1: Product: syz
[  734.561133][T13535] usb 5-1: Manufacturer: syz
[  734.561150][T13535] usb 5-1: SerialNumber: syz
[  734.630503][T13535] usb 5-1: 0:2 : does not exist
[  734.654728][ T5705] kernel read not supported for file /1512/net/mcfilter6 (pid: 5705 comm: kworker/1:5)
[  734.830640][T18341] cgroup: fork rejected by pids controller in 
[  734.833380][   T55] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  734.835174][T18341] /syz0
[  734.840499][T13535] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  734.899189][ T5765] usb 1-1: USB disconnect, device number 62
[  734.981317][T13535] usb 5-1: USB disconnect, device number 87
[  734.981320][   T55] usb 3-1: Using ep0 maxpacket: 16
[  734.983504][   T55] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  734.983529][   T55] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  734.986632][   T55] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  734.986661][   T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.986682][   T55] usb 3-1: Product: syz
[  734.986698][   T55] usb 3-1: Manufacturer: syz
[  734.986714][   T55] usb 3-1: SerialNumber: syz
[  735.084359][   T55] usb 3-1: config 0 descriptor??
[  735.197633][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  735.345147][   T37] audit: type=1326 audit(5336135191.739:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18446 comm="syz.6.4345" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f357806ce59 code=0x0
[  735.661293][T13535] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  735.817688][T13535] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  735.817719][T13535] usb 5-1: config 1 has no interface number 0
[  735.817761][T13535] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  735.817788][T13535] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  735.817815][T13535] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  735.870252][T13535] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  735.870284][T13535] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.870304][T13535] usb 5-1: Product: syz
[  735.870319][T13535] usb 5-1: Manufacturer: syz
[  735.870333][T13535] usb 5-1: SerialNumber: syz
[  735.916447][T18449] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  736.130815][T18449] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  736.372275][T13535] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:04:07
[  736.816969][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  736.926481][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  736.989210][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  737.033545][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  737.052752][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  737.116861][T13535] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71
[  737.116987][T13535] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71
[  737.162112][T13535] usb 5-1: USB disconnect, device number 88
[  737.181445][T13535] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem
[  737.457600][ T2189] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  737.711601][T13535] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  737.861039][   T32] usb 3-1: USB disconnect, device number 94
[  738.127447][ T2189] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.261393][   T32] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  738.271413][T13535] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  738.432732][   T32] usb 3-1: device descriptor read/64, error -71
[  738.435152][T18481] FAULT_INJECTION: forcing a failure.
[  738.435152][T18481] name failslab, interval 1, probability 0, space 0, times 0
[  738.435175][T18481] CPU: 0 UID: 0 PID: 18481 Comm: syz.6.4352 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  738.435200][T18481] Tainted: [L]=SOFTLOCKUP
[  738.435204][T18481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  738.435212][T18481] Call Trace:
[  738.435217][T18481]  <TASK>
[  738.435223][T18481]  dump_stack_lvl+0xe8/0x150
[  738.435243][T18481]  should_fail_ex+0x46b/0x600
[  738.435262][T18481]  should_failslab+0xa8/0x100
[  738.435280][T18481]  __kmalloc_noprof+0xdf/0x7b0
[  738.435297][T18481]  ? security_sk_alloc+0x52/0x360
[  738.435314][T18481]  security_sk_alloc+0x52/0x360
[  738.435328][T18481]  sk_prot_alloc+0x101/0x210
[  738.435345][T18481]  ? sk_alloc+0x27/0x390
[  738.435362][T18481]  sk_alloc+0x3a/0x390
[  738.435379][T18481]  __netlink_create+0x65/0x260
[  738.435395][T18481]  ? __pfx_genl_release+0x10/0x10
[  738.435408][T18481]  netlink_create+0x3be/0x580
[  738.435425][T18481]  ? __pfx_genl_unbind+0x10/0x10
[  738.435436][T18481]  ? __pfx_genl_bind+0x10/0x10
[  738.435449][T18481]  __sock_create+0x4e3/0x960
[  738.435464][T18481]  ? __sock_create+0x344/0x960
[  738.435479][T18481]  __sys_socket+0xd9/0x330
[  738.435494][T18481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.435507][T18481]  __x64_sys_socket+0x7a/0x90
[  738.435521][T18481]  do_syscall_64+0x15f/0xf80
[  738.435536][T18481]  ? trace_irq_disable+0x3b/0x140
[  738.435563][T18481]  ? clear_bhb_loop+0x40/0x90
[  738.435583][T18481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.435596][T18481] RIP: 0033:0x7f357806e6c7
[  738.435609][T18481] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.435620][T18481] RSP: 002b:00007f35762c4f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  738.435634][T18481] RAX: ffffffffffffffda RBX: 00007f35782e5fa0 RCX: 00007f357806e6c7
[  738.435643][T18481] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  738.435651][T18481] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  738.435658][T18481] R10: 0000200000000580 R11: 0000000000000286 R12: 0000000000000001
[  738.435666][T18481] R13: 00007f35782e6038 R14: 00007f35782e5fa0 R15: 00007ffe524a5948
[  738.435686][T18481]  </TASK>
[  738.466726][ T2189] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  738.512583][T13535] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  738.512610][T13535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.671319][   T32] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  738.736588][T13535] usb 5-1: config 0 descriptor??
[  738.756908][T13535] gspca_main: sunplus-2.14.0 probing 055f:c420
[  738.801470][   T32] usb 3-1: device descriptor read/64, error -71
[  738.935999][   T32] usb usb3-port1: attempt power cycle
[  738.971298][ T5765] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[  739.111690][ T2189] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.133282][ T5765] usb 7-1: Using ep0 maxpacket: 32
[  739.143641][ T5765] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  739.143671][ T5765] usb 7-1: config 0 has no interface number 0
[  739.143751][ T5765] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  739.143767][ T5765] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  739.143781][ T5765] usb 7-1: config 0 interface 85 has no altsetting 0
[  739.145965][ T5765] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  739.145995][ T5765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.146049][ T5765] usb 7-1: Product: syz
[  739.146061][ T5765] usb 7-1: Manufacturer: syz
[  739.146071][ T5765] usb 7-1: SerialNumber: syz
[  739.161445][T13535] gspca_sunplus: reg_w_riv err -71
[  739.161541][T13535] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  739.182154][ T5765] usb 7-1: config 0 descriptor??
[  739.254737][   T60] Bluetooth: hci0: command tx timeout
[  739.255614][T13535] usb 5-1: USB disconnect, device number 89
[  739.275014][   T32] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  739.297863][   T32] usb 3-1: device descriptor read/8, error -71
[  739.531381][   T32] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  739.551997][   T32] usb 3-1: device descriptor read/8, error -71
[  739.638824][ T5765] appletouch 7-1:0.85: Failed to request geyser raw mode
[  739.639069][ T5765] appletouch 7-1:0.85: probe with driver appletouch failed with error -5
[  739.671732][   T32] usb usb3-port1: unable to enumerate USB device
[  739.680452][ T5765] usb 7-1: USB disconnect, device number 106
[  740.001402][   T32] usb 5-1: new full-speed USB device number 90 using dummy_hcd
[  740.019989][T18457] bridge0: port 1(bridge_slave_0) entered blocking state
[  740.020235][T18457] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.020514][T18457] bridge_slave_0: entered allmulticast mode
[  740.044528][T18457] bridge_slave_0: entered promiscuous mode
[  740.056993][T18457] bridge0: port 2(bridge_slave_1) entered blocking state
[  740.057376][T18457] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.057677][T18457] bridge_slave_1: entered allmulticast mode
[  740.061094][T18457] bridge_slave_1: entered promiscuous mode
[  740.165158][   T32] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  740.165192][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.165215][   T32] usb 5-1: Product: syz
[  740.165231][   T32] usb 5-1: Manufacturer: syz
[  740.165246][   T32] usb 5-1: SerialNumber: syz
[  740.249404][   T32] usb 5-1: config 0 descriptor??
[  740.279869][   T32] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  740.390513][T18457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  740.411271][T18457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  740.510133][T18457] team0: Port device team_slave_0 added
[  740.530427][T18457] team0: Port device team_slave_1 added
[  740.641515][ T5705] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[  740.681815][ T2189] bridge_slave_1: left allmulticast mode
[  740.681850][ T2189] bridge_slave_1: left promiscuous mode
[  740.683097][ T2189] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.754896][ T2189] bridge_slave_0: left allmulticast mode
[  740.754931][ T2189] bridge_slave_0: left promiscuous mode
[  740.756980][ T2189] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.793306][ T5705] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  740.793336][ T5705] usb 7-1: config 1 has no interface number 0
[  740.793429][ T5705] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  740.793446][ T5705] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  740.793462][ T5705] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  740.809268][ T5705] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  740.809298][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.809320][ T5705] usb 7-1: Product: syz
[  740.809336][ T5705] usb 7-1: Manufacturer: syz
[  740.809401][ T5705] usb 7-1: SerialNumber: syz
[  740.872776][T18499] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  741.078735][T18499] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  741.331351][   T60] Bluetooth: hci0: command tx timeout
[  741.505458][   T32] gspca_stk1135: reg_w 0xd err -71
[  741.506499][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  741.506512][   T32] gspca_stk1135: Sensor write failed
[  741.506538][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  741.506550][   T32] gspca_stk1135: Sensor write failed
[  741.506578][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  741.506589][   T32] gspca_stk1135: Sensor read failed
[  741.506618][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  741.506629][   T32] gspca_stk1135: Sensor read failed
[  741.506638][   T32] gspca_stk1135: Detected sensor type unknown (0x0)
[  741.506671][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  741.506682][   T32] gspca_stk1135: Sensor read failed
[  741.506708][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  741.506718][   T32] gspca_stk1135: Sensor read failed
[  741.506746][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  741.506756][   T32] gspca_stk1135: Sensor write failed
[  741.506785][   T32] gspca_stk1135: serial bus timeout: status=0x00
[  741.506795][   T32] gspca_stk1135: Sensor write failed
[  741.506881][   T32] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  741.519522][   T32] usb 5-1: USB disconnect, device number 90
[  741.941332][T15401] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  742.052276][ T2189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  742.093944][T15401] usb 3-1: Using ep0 maxpacket: 16
[  742.102560][T15401] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  742.102589][T15401] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  742.105322][T15401] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  742.105352][T15401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.105381][T15401] usb 3-1: Product: syz
[  742.105396][T15401] usb 3-1: Manufacturer: syz
[  742.105412][T15401] usb 3-1: SerialNumber: syz
[  742.109078][T15401] usb 3-1: config 0 descriptor??
[  742.145295][ T2189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  742.209897][ T2189] bond0 (unregistering): Released all slaves
[  742.504867][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9
[  742.631732][ T5705] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:05:07
[  742.704592][ T2189] tipc: Disabling bearer <udp:syz1>
[  742.705406][ T2189] tipc: Left network mode
[  742.772690][T18457] batman_adv: batadv0: Adding interface: batadv_slave_0
[  742.772707][T18457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  742.772733][T18457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  742.854004][T18457] batman_adv: batadv0: Adding interface: batadv_slave_1
[  742.854022][T18457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  742.854049][T18457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  742.939040][ T5705] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71
[  742.939069][ T5705] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71
[  742.961918][ T5705] usb 7-1: USB disconnect, device number 107
[  743.038708][ T5705] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem
[  743.283477][ T5705] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  743.397952][T18536] netlink: 'syz.4.4365': attribute type 23 has an invalid length.
[  743.441459][   T60] Bluetooth: hci0: command tx timeout
[  743.454123][T18457] hsr_slave_0: entered promiscuous mode
[  743.456370][T18457] hsr_slave_1: entered promiscuous mode
[  743.458610][T18457] debugfs: 'hsr0' already exists in 'hsr'
[  743.458647][T18457] Cannot create hsr debugfs directory
[  743.771509][ T5718] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  743.871418][ T5765] usb 7-1: new full-speed USB device number 108 using dummy_hcd
[  743.888486][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10
[  743.921289][ T5718] usb 5-1: Using ep0 maxpacket: 32
[  743.927529][ T5718] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  743.930640][ T5718] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  743.930672][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  743.930692][ T5718] usb 5-1: Product: syz
[  743.930701][ T5718] usb 5-1: Manufacturer: syz
[  743.930710][ T5718] usb 5-1: SerialNumber: syz
[  743.937407][ T5718] usb 5-1: config 0 descriptor??
[  743.963388][T18541] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  744.088453][ T5765] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  744.088487][ T5765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.088517][ T5765] usb 7-1: Product: syz
[  744.088526][ T5765] usb 7-1: Manufacturer: syz
[  744.088535][ T5765] usb 7-1: SerialNumber: syz
[  744.115711][ T5765] usb 7-1: config 0 descriptor??
[  744.425700][ T5765] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  744.939217][ T5705] usb 3-1: USB disconnect, device number 99
[  745.231121][ T2189] ------------[ cut here ]------------
[  745.231134][ T2189] Have pending ack frames!
[  745.231215][ T2189] WARNING: net/mac80211/main.c:1749 at ieee80211_free_ack_frame+0x14/0x40, CPU#1: kworker/u8:19/2189
[  745.231268][ T2189] Modules linked in:
[  745.231286][ T2189] CPU: 1 UID: 0 PID: 2189 Comm: kworker/u8:19 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  745.231307][ T2189] Tainted: [L]=SOFTLOCKUP
[  745.231313][ T2189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  745.231325][ T2189] Workqueue: netns cleanup_net
[  745.231352][ T2189] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40
[  745.231375][ T2189] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 53 90 28 f7 48 8d 3d fc be 20 05 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 78 e2 65 fe 31 c0
[  745.231393][ T2189] RSP: 0018:ffffc90008147670 EFLAGS: 00010293
[  745.231411][ T2189] RAX: ffffffff8a9c8bcd RBX: ffff88802de8db40 RCX: ffff88802c538000
[  745.231426][ T2189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fbd4ad0
[  745.231438][ T2189] RBP: ffffc90008147778 R08: 0000000000000000 R09: 0000000000000000
[  745.231450][ T2189] R10: ffffc900081476e0 R11: ffffffff8a9c8bc0 R12: ffffc900081476e0
[  745.231465][ T2189] R13: ffff88805e3ff9f0 R14: 1ffff92001028ed8 R15: 0000000000000001
[  745.231478][ T2189] FS:  0000000000000000(0000) GS:ffff888125dc7000(0000) knlGS:0000000000000000
[  745.231495][ T2189] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  745.231509][ T2189] CR2: 00007f039d3bee9c CR3: 000000002af10000 CR4: 00000000003526f0
[  745.231527][ T2189] Call Trace:
[  745.231535][ T2189]  <TASK>
[  745.231545][ T2189]  idr_for_each+0x1c9/0x2a0
[  745.231567][ T2189]  ? __pfx_ieee80211_free_ack_frame+0x10/0x10
[  745.231585][ T2189]  ? __pfx_idr_for_each+0x10/0x10
[  745.231603][ T2189]  ? kfree+0x1c5/0x6c0
[  745.231621][ T2189]  ? kobject_put+0x26d/0x560
[  745.231644][ T2189]  ieee80211_free_hw+0x38/0x3c0
[  745.231663][ T2189]  mac80211_hwsim_del_radio+0x2f3/0x490
[  745.231682][ T2189]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  745.231698][ T2189]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  745.231721][ T2189]  ? lockdep_hardirqs_on+0x7a/0x110
[  745.231748][ T2189]  hwsim_exit_net+0xf02/0xfc0
[  745.231766][ T2189]  ? hwsim_exit_net+0xce/0xfc0
[  745.231785][ T2189]  ? __pfx_hwsim_exit_net+0x10/0x10
[  745.231804][ T2189]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  745.231908][ T2189]  ops_undo_list+0x49f/0x940
[  745.231934][ T2189]  ? rt_spin_unlock+0x1f0/0x200
[  745.231958][ T2189]  ? __pfx_ops_undo_list+0x10/0x10
[  745.231977][ T2189]  ? rt_spin_unlock+0x14f/0x200
[  745.231999][ T2189]  ? idr_destroy+0x21b/0x2a0
[  745.232064][ T2189]  ? rt_spin_unlock+0x160/0x200
[  745.232088][ T2189]  cleanup_net+0x56e/0x800
[  745.232112][ T2189]  ? __pfx_cleanup_net+0x10/0x10
[  745.232144][ T2189]  ? process_one_work+0x8be/0x1630
[  745.232166][ T2189]  process_one_work+0x98b/0x1630
[  745.232200][ T2189]  ? __pfx_process_one_work+0x10/0x10
[  745.232218][ T2189]  ? do_raw_spin_lock+0x12b/0x2f0
[  745.232252][ T2189]  worker_thread+0xb49/0x1140
[  745.232279][ T2189]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  745.232312][ T2189]  kthread+0x388/0x470
[  745.232329][ T2189]  ? __pfx_worker_thread+0x10/0x10
[  745.232348][ T2189]  ? __pfx_kthread+0x10/0x10
[  745.232365][ T2189]  ret_from_fork+0x514/0xb70
[  745.232389][ T2189]  ? __pfx_ret_from_fork+0x10/0x10
[  745.232408][ T2189]  ? __switch_to+0xc79/0x1410
[  745.232436][ T2189]  ? __pfx_kthread+0x10/0x10
[  745.232453][ T2189]  ret_from_fork_asm+0x1a/0x30
[  745.232488][ T2189]  </TASK>
[  745.232509][ T2189] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  745.232528][ T2189] CPU: 1 UID: 0 PID: 2189 Comm: kworker/u8:19 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  745.232552][ T2189] Tainted: [L]=SOFTLOCKUP
[  745.232560][ T2189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  745.232572][ T2189] Workqueue: netns cleanup_net
[  745.232597][ T2189] Call Trace:
[  745.232605][ T2189]  <TASK>
[  745.232612][ T2189]  vpanic+0x56c/0xa60
[  745.232634][ T2189]  ? __pfx__printk+0x10/0x10
[  745.232651][ T2189]  ? __pfx_vpanic+0x10/0x10
[  745.232669][ T2189]  ? is_bpf_text_address+0x292/0x2b0
[  745.232687][ T2189]  ? is_bpf_text_address+0x26/0x2b0
[  745.232708][ T2189]  panic+0xc5/0xd0
[  745.232728][ T2189]  ? __pfx_panic+0x10/0x10
[  745.232754][ T2189]  ? ret_from_fork_asm+0x1a/0x30
[  745.232779][ T2189]  __warn+0x315/0x4c0
[  745.232799][ T2189]  ? ieee80211_free_ack_frame+0x14/0x40
[  745.232819][ T2189]  ? ieee80211_free_ack_frame+0x14/0x40
[  745.232837][ T2189]  __report_bug+0x29a/0x540
[  745.232899][ T2189]  ? __pfx_stack_trace_save+0x10/0x10
[  745.232927][ T2189]  ? ieee80211_free_ack_frame+0x14/0x40
[  745.232947][ T2189]  ? __pfx___report_bug+0x10/0x10
[  745.232969][ T2189]  ? mac80211_hwsim_del_radio+0x2dc/0x490
[  745.232989][ T2189]  ? hwsim_exit_net+0xf02/0xfc0
[  745.233006][ T2189]  ? ops_undo_list+0x49f/0x940
[  745.233025][ T2189]  ? cleanup_net+0x56e/0x800
[  745.233042][ T2189]  ? process_one_work+0x98b/0x1630
[  745.233060][ T2189]  ? worker_thread+0xb49/0x1140
[  745.233078][ T2189]  ? kthread+0x388/0x470
[  745.233093][ T2189]  ? ret_from_fork_asm+0x1a/0x30
[  745.233116][ T2189]  report_bug_entry+0x19a/0x290
[  745.233133][ T2189]  ? ieee80211_free_ack_frame+0x14/0x40
[  745.233150][ T2189]  ? ieee80211_free_ack_frame+0x19/0x40
[  745.233166][ T2189]  handle_bug+0xce/0x200
[  745.233184][ T2189]  exc_invalid_op+0x1a/0x50
[  745.233201][ T2189]  asm_exc_invalid_op+0x1a/0x20
[  745.233218][ T2189] RIP: 0010:ieee80211_free_ack_frame+0x14/0x40
[  745.233236][ T2189] Code: 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 89 f3 e8 53 90 28 f7 48 8d 3d fc be 20 05 <67> 48 0f b9 3a 31 ff 48 89 de ba 02 00 00 00 e8 78 e2 65 fe 31 c0
[  745.233250][ T2189] RSP: 0018:ffffc90008147670 EFLAGS: 00010293
[  745.233264][ T2189] RAX: ffffffff8a9c8bcd RBX: ffff88802de8db40 RCX: ffff88802c538000
[  745.233276][ T2189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fbd4ad0
[  745.233287][ T2189] RBP: ffffc90008147778 R08: 0000000000000000 R09: 0000000000000000
[  745.233297][ T2189] R10: ffffc900081476e0 R11: ffffffff8a9c8bc0 R12: ffffc900081476e0
[  745.233308][ T2189] R13: ffff88805e3ff9f0 R14: 1ffff92001028ed8 R15: 0000000000000001
[  745.233323][ T2189]  ? __pfx_ieee80211_free_ack_frame+0x10/0x10
[  745.233341][ T2189]  ? ieee80211_free_ack_frame+0xd/0x40
[  745.233363][ T2189]  idr_for_each+0x1c9/0x2a0
[  745.233383][ T2189]  ? __pfx_ieee80211_free_ack_frame+0x10/0x10
[  745.233402][ T2189]  ? __pfx_idr_for_each+0x10/0x10
[  745.233419][ T2189]  ? kfree+0x1c5/0x6c0
[  745.233439][ T2189]  ? kobject_put+0x26d/0x560
[  745.233463][ T2189]  ieee80211_free_hw+0x38/0x3c0
[  745.233484][ T2189]  mac80211_hwsim_del_radio+0x2f3/0x490
[  745.233504][ T2189]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  745.233520][ T2189]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  745.233541][ T2189]  ? lockdep_hardirqs_on+0x7a/0x110
[  745.233568][ T2189]  hwsim_exit_net+0xf02/0xfc0
[  745.233586][ T2189]  ? hwsim_exit_net+0xce/0xfc0
[  745.233605][ T2189]  ? __pfx_hwsim_exit_net+0x10/0x10
[  745.233632][ T2189]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  745.233657][ T2189]  ops_undo_list+0x49f/0x940
[  745.233683][ T2189]  ? rt_spin_unlock+0x1f0/0x200
[  745.233707][ T2189]  ? __pfx_ops_undo_list+0x10/0x10
[  745.233729][ T2189]  ? rt_spin_unlock+0x14f/0x200
[  745.233753][ T2189]  ? idr_destroy+0x21b/0x2a0
[  745.233781][ T2189]  ? rt_spin_unlock+0x160/0x200
[  745.233808][ T2189]  cleanup_net+0x56e/0x800
[  745.233835][ T2189]  ? __pfx_cleanup_net+0x10/0x10
[  745.233878][ T2189]  ? process_one_work+0x8be/0x1630
[  745.233902][ T2189]  process_one_work+0x98b/0x1630
[  745.233943][ T2189]  ? __pfx_process_one_work+0x10/0x10
[  745.233967][ T2189]  ? do_raw_spin_lock+0x12b/0x2f0
[  745.234009][ T2189]  worker_thread+0xb49/0x1140
[  745.234042][ T2189]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  745.234082][ T2189]  kthread+0x388/0x470
[  745.234103][ T2189]  ? __pfx_worker_thread+0x10/0x10
[  745.234129][ T2189]  ? __pfx_kthread+0x10/0x10
[  745.234151][ T2189]  ret_from_fork+0x514/0xb70
[  745.234177][ T2189]  ? __pfx_ret_from_fork+0x10/0x10
[  745.234198][ T2189]  ? __switch_to+0xc79/0x1410
[  745.234230][ T2189]  ? __pfx_kthread+0x10/0x10
[  745.234252][ T2189]  ret_from_fork_asm+0x1a/0x30
[  745.234293][ T2189]  </TASK>
[  745.234806][ T2189] Kernel Offset: disabled