last executing test programs:

19m18.629448571s ago: executing program 2 (id=753):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800ff207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x4000)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) (async)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000180)) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x40)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r7, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) (async)
syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x3c, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x49, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x4, r9, 0x2}, 0xc) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) (async)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
getresuid(0x0, 0x0, 0x0) (async)
sched_setscheduler(0x0, 0x2, 0x0) (async)
getpid()

19m17.783810085s ago: executing program 2 (id=758):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xfffa, 0x3, 0x6e, 0x10000}, {0x4, 0x0, 0x6, 0x100}]})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
creat(&(0x7f0000000240)='./bus\x00', 0xc2)
move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x2)

19m17.495939385s ago: executing program 2 (id=761):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0)
munlockall()
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})
r4 = socket$kcm(0x29, 0x5, 0x0)
r5 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd, 0x0, r0}, &(0x7f0000000740)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x10})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x1e, 0x4, 0x0)
r9 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80)
dup3(r9, r8, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001000)=""/4124, 0x100f}, {&(0x7f0000000f80)=""/118, 0x76}], 0x2}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1}}, {{&(0x7f0000000500), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000ac0)=""/201, 0xc9}, {&(0x7f0000000bc0)=""/222, 0xde}, {&(0x7f0000000cc0)=""/252, 0xda}, {&(0x7f0000000180)}, {&(0x7f0000000dc0)=""/157, 0x9d}, {&(0x7f0000000e80)=""/235, 0xeb}], 0x7, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000780)=""/246, 0xf6}], 0x1, &(0x7f00000008c0)}}], 0x4, 0x58ca2280, 0x0)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r10, 0xffffffffffffffff, 0x0)

19m15.283715562s ago: executing program 2 (id=767):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x20000000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x3c}}, 0x0)
r5 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000018000000000000000000100000a14000000060a010800000000000000000d0000071400000011"], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8})
io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(r2, 0x0, 0x80)
fchdir(r10)
symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00')
syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=<r11=>0x0, &(0x7f0000000200)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
sendmsg$IPSET_CMD_GET_BYINDEX(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x54, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)

19m14.13131573s ago: executing program 2 (id=773):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x8}, 0x94)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x188843, 0x198)
fcntl$setlease(r3, 0x400, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x28f, 0x0, 0xfffffffffffffffb}]})
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0), 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19m13.240308883s ago: executing program 2 (id=776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x63)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048080)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
fcntl$dupfd(r4, 0x406, r4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x12c, &(0x7f0000000800)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x10000dc9, @empty, 0x9}, @in6={0xa, 0x4e22, 0x40, @mcast1, 0x7}, @in6={0xa, 0x4e22, 0x89, @remote, 0x4}, @in6={0xa, 0x4ea2, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7f7}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e21, 0x2, @private2, 0xc132}, @in6={0xa, 0x4e24, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4}, @in6={0xa, 0x4e23, 0x7d000000, @dev={0xfe, 0x80, '\x00', 0xc}, 0xfffff6f0}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x5}}, @in6={0xa, 0x4e23, 0x80000001, @private1, 0xfffffffb}]}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, &(0x7f0000002d80))
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000080500000a2c000000180a03000000000000000000020000020900020073797a30000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x54}}, 0x20008040)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_PIE_OFF(r8, 0x7006)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000)

19m12.329800008s ago: executing program 32 (id=776):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x63)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048080)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
fcntl$dupfd(r4, 0x406, r4)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x12c, &(0x7f0000000800)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0x10000dc9, @empty, 0x9}, @in6={0xa, 0x4e22, 0x40, @mcast1, 0x7}, @in6={0xa, 0x4e22, 0x89, @remote, 0x4}, @in6={0xa, 0x4ea2, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7f7}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e21, 0x2, @private2, 0xc132}, @in6={0xa, 0x4e24, 0xfffffffa, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4}, @in6={0xa, 0x4e23, 0x7d000000, @dev={0xfe, 0x80, '\x00', 0xc}, 0xfffff6f0}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x5}}, @in6={0xa, 0x4e23, 0x80000001, @private1, 0xfffffffb}]}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, &(0x7f0000002d80))
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000080500000a2c000000180a03000000000000000000020000020900020073797a30000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x54}}, 0x20008040)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r8, r8, &(0x7f0000000000)=0x7, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$RTC_PIE_OFF(r8, 0x7006)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80800)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000)

4m34.520276211s ago: executing program 5 (id=4390):
r0 = socket$igmp(0x2, 0x3, 0x2)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x3}, 0x2)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
r1 = syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000280)=0x5, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e20, @empty}}, 0xf7}, 0x90)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000001c0)={r6, 0x3142, 0x62, "ff86be17e5c27b0868e1fd90154a1cdf5a93c1c5f476c11ad26d65cb072a5c26c45288e896419eb7c02c9797c180863dc57f35872de540fd15c0ec8e3377a79ec500a49362e07b10e8a0b6125e913ae2cf5d21c12279ff31f43ceeebe3f4d0d8709a"}, 0x6a)
r7 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000040)=0xefbe, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000004000dba12bbd7000fcdbdf25027c00001800c28014000100000000000104000980"], 0x30}, 0x1, 0x0, 0x0, 0x4c090}, 0x2000c0c5)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000800)=[@set_irq_handler={0xc8, 0x20, {0xff, 0x2}}, @code={0xa, 0x60, {"c744240057000000c744240200000000ff1c24b8010000000f01d9477fb566baf80cb8fa16be8fef66bafc0c66b8000066efc442d999e866ba2000ec0fc72b0f01d1410fc7abdbdae542440f0057b2"}}, @out_dx={0x6a, 0x28, {0x31df, 0x4, 0x9417}}, @nested_create_vm={0x12d, 0x18, 0x1}, @in_dx={0x69, 0x20, {0x4bb3, 0x7}}, @wrmsr={0x65, 0x20, {0x1a0, 0x8001}}, @set_irq_handler={0xc8, 0x20, {0xcc, 0x2}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_code={0x12e, 0x6c, {0x3, "c74424007b000000c744240200000000ff2c24c4e209ac0b440f20c0350c000000440f22c0c7442400e3000000c744240200300000ff2c24c4617951cf0f01c5f30fc7b09b5679ce45dbe32e67400f20810f2084"}}, @out_dx={0x6a, 0x28, {0xf078, 0x4, 0x8}}, @nested_vmresume={0x130, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0xb8a}}, @uexit={0x0, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0xaa}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0xe, 0x6, 0xa1e8, 0x7}}, @set_irq_handler={0xc8, 0x20, {0x73, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x545, 0x1, 0x4, 0xffffffff00000000}}, @wrmsr={0x65, 0x20, {0x22b, 0xa}}, @nested_load_code={0x12e, 0x63, {0x0, "410f2011c744240000000080c744240200700000c7442406000000000f011424660f3822c96440e576360f234d470f794a0f66baf80cb8b4b2198fef66bafc0ced430f01c23961c00f211f"}}, @nested_load_code={0x12e, 0x6c, {0x0, "c463fbf0fd07430fc7bc0471000000b8010000000f01c10d16dc0000f22ef32e3e420f35470f0178cd0f79c5c74424009ce40000c74424029a330000c7442406000000000f011c2466b81d008ee866470f388106"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x4ed, 0x515a7bed, 0x0, 0xf7}}, @nested_vmlaunch={0x12f, 0x18}, @out_dx={0x6a, 0x28, {0xccdb, 0x0, 0x80}}, @wr_crn={0x67, 0x20, {0x3, 0x1}}, @wr_crn={0x67, 0x20, {0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xa9, 0x7, 0x4, 0x7}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x0, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x1}], 0x51b})
ioctl$KVM_SET_VAPIC_ADDR(r12, 0x4008ae93, &(0x7f00000002c0)=0x4)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0xffffffff, 0x10000, 0x81, 0x107f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x7, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x1, 0x7ed53619, 0x1, 0x9, 0x9644, 0x5, 0x58b, 0x2, 0x1003ff, 0x9, 0x2, 0x1, 0x0, 0x80000004, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x1, 0x400, 0x63c, 0x4, 0xfffffffb, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0xfffffff9, 0x100006, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x4, 0x4, 0x3, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0xffff, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x5, 0x8, 0x100, 0xc0000000, 0x6, 0x4, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x5, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x9, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x7f, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda5a, 0x7ffffffe, 0x9, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x3e, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x3, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x9, 0x10001, 0x7, 0x7f, 0x5, 0x3, 0x200000a, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x8000399b, 0x6, 0x0, 0x81c4, 0x2, 0x72f7, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0x4, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x4, 0x5, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x4, 0xec2, 0x6, 0x80000008, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x103, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x46, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x1, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0x10, 0x3, 0x9, 0xfdc4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x2, 0x365, 0x8, 0x8, 0x4000000f, 0x8, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x1000092, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x40000002, 0x0, 0x3, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x40008, 0x7, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x8d7, 0x200, 0x3, 0x1, 0x3, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0xc, 0x1f6, 0x9, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0x12, 0x5, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x5, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x5, 0xfff, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x100006, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x4000003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x101, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0x1, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x6, 0xffe, 0x1, 0x89d, 0x8, 0x3, 0x710, 0xe, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0x8001, 0x5, 0x7, 0x9}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0xffffffff, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_ifindex=r11, @remote}, 0x10)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f00000007c0))
r13 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x2fd, 0xea94, 0x6, 0xa, 0x4, 0xc091}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8ae, 0x8, 0xffff}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xf578083aa4be5d65}]}}}]}, 0x78}}, 0x40840)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r14, 0x2f, 0xc, 0x2, 0xa18a, 0x14, @dev={0xfe, 0x80, '\x00', 0x30}, @local, 0x10, 0x7, 0x7, 0x2}})
sendmsg$unix(r9, &(0x7f0000000500)={&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000440)="b2541c4660802cfa8a88b4101674e1e2ec6af8e05b4e153c933638d2ecff16263a3cc562e33b2a23f3ba29990eb73ee9abc2868c4e98c7eed5205cb07cc98f7c96e9a9cbd76e8208cd57abafd28dc65eb4fca5875dc3d021236303c9278221e315173736f75dab59cccda853ebfd55e01c36ec42eb85759ab3", 0x79}, {&(0x7f00000005c0)="27ffeb79b7152baff4591fee4b652e71913a3f8ffb31337c22b2e65adc43554424f49095446404aa5c4ef5bcd517b38f0fc51bccad4bc3e1f78903391d5dc378b316fdb9e8572b80a1155e5b7782079c9c54745c36dbb75f80cecc1c852fb09dcb5dfbc9247f47756111d566fea2a0323cc7369bf6c5719bb279b7e6b7ddff4657272a2dd06dd86f72719534b7bcc816cbbf6702d6c6b67a8f81faf282a7d1644897ed1ba9fbe4aba6ab678bdf53238681c79d4de1b2e16e68c8c7dbc3b319997c2d90c1255ff1", 0xc7}, {&(0x7f0000000d40)="571069b7884d5c6bd4e7079c530c580c2e49f53c2e440dad974e3c8f876263bd174e937459a5a7a706a58da58c8d4d4190aba7e49f022081959f92a39d00a32dd84fc6dafdeb2f0ecd58aad8abab4280524da3e74ccbdc2841d9ad947b2e2a56305bf53320cab7bc6170ab456d18149dc8fa48206d19049c78ee575a870488aaa6d80708cfa923670671969cc055bd7a6a136cf6690c3242beb04a6d684b04fe3671fb5688d66d6a69906c064cf53696fc5a8f1bd20c5216b49b5a873935cb1a706dd8470e24", 0xc6}], 0x3, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r10]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x38, 0x804}, 0x40)

4m33.947984031s ago: executing program 5 (id=4391):
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x2aa20000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt(r0, 0x1, 0x7, &(0x7f00000002c0)=""/209, &(0x7f0000000100)=0xd1) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 32)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x48, &(0x7f0000001000), &(0x7f0000000180)=0xc) (async, rerun: 32)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 32)
writev(r3, &(0x7f0000000840)=[{&(0x7f0000000000)="580000001400ad", 0x7}, {&(0x7f0000000200)="6bdffc7c820612911a8b98a56d63c896b5d43121c06b060c5c8ad4a18d751b4aeebaf542b59edc24ee964376dbf954380a0bb3cfc1e27242c82de17be409c9aa2344920b52a24edf010000000000000024", 0x51}, {&(0x7f0000000580)="7b00d9d94a99b56c3adc8d5844e932bb65a057dbe0037b23962de01dd193a0b2091d1c7bd939da0f5354c59601bcd0270b2aab42a0ca8cb4fc8dc7ce501d64942493e7abc341e9ff8434d451c2821db3e736889ab3", 0x55}, {&(0x7f0000000180)="6645ef144b9f1f195dc4a2b648f2464f5498473bcf6e95140a6e3a928dbe0bf4f9796c58f336ea", 0x27}, {&(0x7f0000000600)="779e9e1523f8782bd4102f62bf71e17a1065d44f4fdeb4232c4a442adecc77b132366c212d06673258cea44f8aaca2e1912397936198ac1f3c775e456d1b920475a17be51b8557585502efd9b678367e51710876757829c00a41ef09ff9bdd3fd5025ab87476c25afb45545bba75ca0fe7e79832328f660d36ed3c791ee8420188a658ed316d5634017da85f7ffe50ed9924a86f405d26d41f440e7151f58686b5833c174ebe1fbe78571e2c12d185448347eb7922bb322f1fb3b0fc25669dd4d619ab7adb91f8640171a2d4525b617c8bce417929274059d89baf22accc19f1e2e423302a96f8e4570000000000", 0xee}, {&(0x7f0000000e80)="de4b3554185bb0699c92fe8c5114336ca79c9e61c0e0da1f41432437de6c2ab79cebdff15c0ac8a9d4ad998e8d0f029c0a66519e2fefdac7131f46db29c8a84675f9921fd8216e2ac6ef8f46d14b2e8b836090211c1d44bed9db1e7767fde633707f2c143b82f96e7fb6b6bb29c84fc96a7c3a75c84f44bec8302f5d1454ab9b7386040aa97d03d0f917941476daaee6b8d918df65200cab546542dda64540907838ff8527ac4c681ee9fa188d4b85898c8d70b141a2026ce50289a9679dae679d2dd03ae3699184c2913e900ecf149aa77f97249933f077a198fa6ed334cebfe419591597df31050f25054ee0014b7b1eeb10ceb7675c99be125afcbf79f28a02b0483d870fc54101bd36aaee74bf41a7172545a76c20466b596226977bbf760d7128525e4ea8a8705ea7b95c7153d67bddd4df7691de1a6c57ca4d75c3989d50bb7c780475deee13b23f6038ed6a5e8f6840e2747069a9f93585a4513f86c119416c841a95899db210c65399557484d186a3258c67560a9de276279ca4d8b49db9cc182aeb7c8f03f30ffbd5c687e20894b30a72dcd6d17448a140b6586bd27e4b3ab08b855d840999d25d70aabae20b5e5384dd7f014e58f7a0734f0c9cf7910203e9db01ad435bee022586a773b0c156a147fd3d64d6d81e4cb45a1eb7fb33dab2278ba66adeb41ab7e3b1d5bc7518d24bc66bcbe0aeae6fa5039ecd9b6f238e2c6ef48b87a1a82f634f82452f75c61aff065cefa52a12b97caf020da1d1132d5ca88c93e543029e8882d94777e5dcaa46ff6b09c9833969c3a82afe46a532dc5a5fadb70b0742acb1a3e824e5456969ac5f5d28a509850b979602febb48a9c4bc583d24d9063cf8c1d6b885ac2d5eb8a32d65f5b5cae0d647a4bfc40d1070b178002f55112bb7377003379f41e31bef57fb0804b38fae49ce39c37d0cfddb9ab48b2be0069dc1048f738ce5e3ef320e6d56cecf4337602810395a56de2b6237728f06d7ee81040eb2c93b9ed50773cb77cb3920bf76748b4c167a3243e636c5604bc5000e5eed6c33c28e09056fd44bb917479751be43f6f85d28f16535ad17587272b834ff98a887324f245727fc94406d11f6f86da332d9cbec30accca29755e26fed7368bc504a8a7e16a84851aa51f5db7d0b87dcfd0c5cb6a7075cff35c0dddf9d0ed9a93eb7a4aa7579649043aa11c70a51c91a9ca9701ddaaee8f5b1a6336f2269a7c7bcb6850bc1406360cf0a64c55e6b45609e1e595178fbba9e870a027c0e9d2529888fa316129b88ee4490ef910d6f7d828284e5c7d03c919e97685b70e7f3c642edaa07262edc9b651c7d28fc958a00d246a8e1b312a7fd319e9388ec586df547267baa8fcfdbafb2055cfef75de18b647b364f6d145373c140e4a2b7b5afc26a838622dc01144b7aeacfd3289bd283a68fadea1bfadb83ba0ffc459ca41c5b5715546808e3d37193019b36f274068cf6381cd73fec1be92aff7e1b6fbf3a535ba657607260e16d2244df5220d3c44c870804a4a83512db2203d1dd9c455bbfa293e0bd32731d202f4afc2ca8bf4cbd484e42557245e59df3bcb19f9d4eabfaf97eeb2bb54c507502f4b70323144d7b61436bb993ac925390bc7896f8aba16ee3e821f8a1c95ed865e487760b4592d68eed30baa15cb7cd6548a43da69c15b12a33256c0aad15a6fb4bf6c58316f078d2d984ac05e27786602275ba4cd59bc7f8941c61665f3f05b5d5ccf87da1234dcc8ecb3a6e9ddf4b612a058c53088899c3d47f6eefaff86e62193beca66b455e0c38bd49a0e9fef0e62e76fbb42e39948836023acffee90e912865cb15e0db7c83684fafbee60e35a90590a20de0f60b9aa902587614f38fb4a2cbb73b2f35aedfa8bcd193b5461833838fa5532e31b1b9bacb93aeaea4e727dc1b1974ee049eb69af009af98a9ca3787bc6ee4dcbfe466d081927ac96de131332ac29695bb4f2dd349d85c6219f20d57d727f1977c09ccabcde9d03bf5e3fee2b2541403337e6bf045d7a0a9265d0d25c266131a1e3b154691db301bc14810105a6b48f8662f4ed3a34247b8950a58a27f65e8edbdb734895f8f6e4646d7556a863b19b81bfb6617ee6eda611ade8dc0d748071ac74dd55b32e24c0926ce8ff11a9699c3850b1b47b9473e2c409706ca75acd39a32874cb640e3777c84640d635672903e2e0bdb3017b54c77fc1aad25b0512382d523a3ff12df7e9996c13b050488ffef6c5a86d1f9706dca87b5cf9944836debf29f3265cb99d3a801c0020356b74126b1d84166a4e68d89315ff62422b8bd91495bb40a02f9ed83093ccbd3bdafe2ea68b61c82a7c07e96b297e1b04e9982d0e917f58433bc383ecf3b36edaaf7fab5e30312d150761fe31718e7cfbf4e9a70c2d5114cad774bbdc955a70a526b265fd76789589c032015b8b405c2aff7b9f3f260ad3aff598f972e98ff10a5a27a36681efaa042f23c009ad794ce017ee7bb27fee4870f8f38393980c31436e28d99f1563a0615d33f04d78b16332fc033af75b03e41b4c3f454d33be2fd90f8c2c3130461d06345c6ee02e586821ea3482c0627a0f8927e158c7db1f0791d2df346d0a1b16e39817c5ee4f7eb4091579088892f2e063fe91f6638eace0b85ebeeb24afed8efaf6b82d198e7ef78fe0ae67abb3a0e43a074e57798c3885cf03798990dccc403bac0e0fcb9b2425c75cb8fd8f603601fdb1ed47226673aad678ac9b77fc8c0b156c6727f5603bfc692fd262c679cbedd65fe24c4ca3ff502e8343c9e0f786f02565d10f48701dd64783647e5443d370aea16cd8ef7e9e72f85458c74421f33f7135cbba88a3cefd7379739f73f35cac78a132e31e498ba462315821a3992ef295faf395e9647a6867a4afdacd5079ccce146ee014ce79b719e77b99adec383e283fc7c895f2bdd616278e67f7a488ec060d18c0dc6584f0dbd375c63286c3f8e666ddf306b0a71c7c12548ba94a5fde451868ba22c74e806d72b1b1693a476e84d7e155ffd3fb443b75986203a96b518d327e80736a64b46ea8f491586966a26f9edebe19245e838ad13ba6dbdb0cbd7e3395a76bdf4b846e475bbfb337cd45a8f49e85c27f6007e30d576bb57b12d8b4b296e73405906157ed424d804a80362c3f2885524c16317baa6c586fac38371fb43e01a3153d49b135b21b09b60c0dfcb69ad7f25d89a36c90715758c38a466b44c9a8be4c12a99cf324c1dfa52071a3da9f6454acc677995bd8544ef4adf9da1aa6d03b43e52f8f1a0aad4135e5f38d0025ba7b551aa4b68586bacfa8cfe833c1393ab215e3c8304ddaf4e9e75e8d0b39dd226e45a27518ca4f383620cf34f1e9fa619b02f1ea8a94ebe3910ceac13b7908a622e43a817c70bda90c6d2e52bac41d2e99bdf3c453c7a1d99259b66195e9916ebecbc2869ea32bc4f3d268efda40e7a699282be0666a05a8a0f6e1f05585f973f6ea9354a9e75fd442b61831343aeaf2146f601866a1e88c0ba30a1dcf7cdfb075b2fd20520644edf1213eba4d7a96a2019ac1d534e5340d353bfc73e32db4099cc73af4966a33417b3fb7f9cfd9fdbd3e7608502c092be943e4ceafb2d26cbf18ea387bd97f55eb3b9b92f6c19626ec0843fce50aed15c94bd5e4d36fab19ff40491a3ca2f3886ee124a694a4e9d9052919d812f90f5ccaecc2d8311dff8bb1ee81136741b3ed4ee84693c72e4e1cfb7be9ea04a670ebf2c16513652ff57fd3c6156b599f3a7fb9340ac9b8d59a691d74acab4468f80a5b9534ab5692729cb311479419fbe22f997e2b35bc7eaeaa7dc433cc9e6a14696e4bc7cb4f56a843ee57304497f2bae5bee300d53708ce302c4b357af0d75ba8b91e8a14ad092590eac60fb3ab9dff03fc2566f497404dfd431ada676bc946a79d4767d3ae491c38afc6501e5ca6709c0fd841f96aa778c52fd8d85ba94be219f679488560fe5e5fc03c9e7deb6d7364d16466bd735259c9a0b4b94b90691bcce625bbc1cf35ea1b89281e85689f77458575841d0487adacbd147d82db72551e9214fd22934b3fb1db62b2bd34a36a66b59e67094375d7a839fdf13ab05a6675bcf408b847a1cda26198326183508ed53ae77f6eed7fd6c5ab17bb34ea6399d7b0ef2a0e46b8fb44e4729f4151d9ffa2c9f4651cdf27cbbd5ed9051fd467c6d71980dcb840e64bd108b376b8d558b94caf8f1afcbd394109eef1492acf3ceeae86bbddc200a01164630085b6e7618504a5164ceccf6126442a98c9d407733fc89645dbd89a70e1acac0eed60f61ef51bab7fb047adff30c2c1c7e24074b6bc293d06ca424ee0a0fcbc0a6c3cf5909bc65cac9179c99bd940642facb6e48d45ff70746e848cf0220a3f63b1d9ad96adf9ce0764760f39cc8c2d13f9e3ca5dc3747ab161f7f0224ba749845f722935b5a689d1dcf6e26d48fce0416b12d94dcf53ba9a5d06cc15e286c124367d042fb041b148870f79ddd8a9bab585277c6076582100cc42ce8899d605f431f7e7edfbf8c8d585ceb32092007dfe4aa24a5126ca8f8ccca63adea37d9bdfec6c51884515bf602493d68ef3374cf2ad7b5f4634ac1e04a2702cb2a914d0045ca2b9f9ac97e2917586a7ab192ee91fabca2fef6bd0a9e9c1a37f420dd965723ce3cfe992d946c18b9847392b5f60efcb8bdb1a885357633b0f9e56332f1a021c8a433fac6b1c3ddbf14b0d20cd37f1755d04513954e4e6c13e82ef2cc41673e34854d3814214d778f5c4caed752519cb2da2e43e4b4125eb02cf2b726c528d32469a3ae9d34cccaaccaf68e77b7021eff8ce1b5fac1fd2573df540cd09398ecf56704cb2a0c82147d05915df934b7a7fc6e61ffc96777d1a464563f951d1d93afdc6e3b5fbcda52dd0da7c3546ea83870d6a4cfc9e1dc6082919e2e26d6320ab8f45a4c7dc58e696102c0276ed7b9d0a9cc6b7fdf209c8186c45a42164df7f6420dbee1b6f839d738fe00378543c9b49470643d16d871cafbc4f92effd917850fda41f9235c50f0690db4aff5ca26a82014b96c0bc6a1379cc7e931a3412d798a0e4846727e2626ff838ef502210632cdbb731de2316e9ffeca15c7183ddbdb86cbe8965de7b31c390afa933576cd047fabb84ac2797f0a01376b6679984127", 0xe3f}], 0x6) (async)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000040)=0x7)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
r9 = socket$netlink(0x10, 0x3, 0x15)
personality(0x4000005) (async)
splice(r2, 0x0, r9, 0x0, 0x80000001, 0x0)

4m33.8008908s ago: executing program 5 (id=4393):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000400))
syz_usb_connect(0x1, 0x12a, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x51, 0x9b, 0xb9, 0x8, 0x582, 0x64, 0x98ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x118, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0xc6, 0x0, 0x1, 0xdf, 0x15, 0x54, 0x2, [@generic={0xfd, 0x21, "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"}], [{{0x9, 0x5, 0x8a, 0x10, 0x3ff, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000340)=@string={0x4, 0x3, "92b5"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]})
syz_usb_connect$cdc_ncm(0x1, 0xbc, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x2, 0x1, 0x9d, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "8633f957e4"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x8, 0x5f60}, {0x6, 0x24, 0x1a, 0xa, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x3ff}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x2, 0x8, 0x3, 0x6, 0x80}, @mdlm={0x15, 0x24, 0x12, 0xb}, @mbim={0xc, 0x24, 0x1b, 0x20, 0x345, 0x4, 0x2b, 0x200, 0xb0}, @dmm={0x7, 0x24, 0x14, 0x6, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe4, 0xd2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x5, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x2}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x1, 0x7, 0x9c, 0x20, 0x2f}, 0x6b, &(0x7f0000000280)={0x5, 0xf, 0x6b, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0xa8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x0, 0x3f49}, @generic={0x3e, 0x10, 0x1, "6a5373cfca62264bfbdb2b33d3d0714c708af99888f4387a4697af6c65b6b17297c3992f1774403b39a5e678fc339545dbe77221baae4c47d00670"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "6c48d46a21feae7465edeb06a4df8c2d"}, @ptm_cap={0x3}]}, 0x2, [{0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "c3b940227cf27ca0a27aaf50d87e0caac2886b1b7f59c379377dee7406962466c4b017e9eeb68ac063b5b82f578dfde8aa78d9065ed4389e03169904248a903b21c452b287b168e2fd82b43f8659e871f053a06f01b1998d2deed55714a17983e69169d0cfeef2510f17036fa0329e304bc54d88f8bfc15f7d407a71159aa4f2431810e5c794759e8280a02aaffce51fd1da0819add2727b9ef7dcf4003654da74462725ef61e186f02d026a4fd9a95287bbffb106929e6a7dbd"}}, {0x2, &(0x7f0000000440)=@string={0x2}}]})

4m32.173808369s ago: executing program 5 (id=4401):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000010ac0542024000010203010902240001010008050904007f02030102"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})

4m30.403610479s ago: executing program 5 (id=4410):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000004200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}})

4m30.102614828s ago: executing program 5 (id=4411):
syz_io_uring_submit(0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0xfff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000001300000001e00000020000080000200000000000000000000000000000000002000000000000000000000000000a"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000080ff0000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0002000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700"], 0xb8}}, 0x10)

4m29.181722681s ago: executing program 33 (id=4411):
syz_io_uring_submit(0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0xfff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000001300000001e00000020000080000200000000000000000000000000000000002000000000000000000000000000a"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000080ff0000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0002000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0700"], 0xb8}}, 0x10)

7.340507802s ago: executing program 1 (id=5664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0) (async)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x1400, 0x4) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x1400, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
r2 = socket(0x1, 0x803, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
io_setup(0x1, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (async)
io_submit(r7, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newqdisc={0x448, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x41c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0xa, 0x0, 0xc7d, 0xe, 0x7, 0x9, 0x3, 0xfffffa6c, 0x8, 0x6, 0x3, 0x9, 0xfffffffc, 0xe89f7c6, 0x9, 0x2, 0x8, 0x3, 0x0, 0x2, 0xef83, 0x3ff, 0x7, 0x2, 0xb, 0x7fff, 0xfff, 0x81, 0x5, 0xfffffee6, 0x24e, 0x8, 0x9c0c, 0x0, 0x648, 0x4, 0x5, 0x0, 0xffffff80, 0x80, 0x6d, 0x5, 0x400, 0x9f59, 0x7ff, 0xab80, 0x3, 0xd88, 0x7f, 0x192e1ebe, 0x3, 0x2, 0x2, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0x8, 0xd, 0x62d86bf0, 0x10, 0x2, 0x756094c1, 0x2d, 0x7fffffff, 0x7fffffff, 0xded17c6, 0x4, 0x9, 0x69, 0x7, 0x166b, 0x101, 0x1, 0x7, 0xfffffffa, 0x7f, 0x0, 0xc, 0x5, 0x23b8, 0x0, 0x200, 0xfe0000, 0x857, 0x436, 0x3, 0x1, 0xaed, 0x966, 0x3b, 0xd, 0x7fffffff, 0x73, 0x6, 0x1, 0x2, 0xfffffffb, 0x0, 0x4, 0x7fffffff, 0x6, 0x5, 0x3, 0x9bc, 0x1000, 0x3, 0x7fff, 0x3, 0x5, 0x6, 0x10, 0x7f, 0x7, 0x3, 0x1, 0x0, 0x400, 0x4, 0x8bee82c, 0x80000001, 0x9, 0x7fff, 0x6, 0x8, 0x0, 0xf, 0x5d52, 0xfffffffc, 0x7, 0xe, 0x7, 0x2, 0x10001, 0x10000000, 0x4, 0xffffffff, 0x7, 0x4, 0x6, 0x6, 0x10001, 0x1, 0x2, 0x3, 0x80000000, 0xd60, 0x1, 0x2, 0x3, 0x2, 0x5, 0x1, 0x3a30, 0xd5, 0xd2d, 0x2, 0x0, 0x2, 0xe3, 0xc5, 0x1cb, 0x3, 0x931, 0x8, 0xb105, 0x4, 0x9, 0x10000, 0x8, 0x5, 0x9, 0xfffff801, 0x7fffffff, 0x3ff, 0x80000000, 0x0, 0x1, 0x4, 0x86, 0x8, 0x7, 0x6, 0xc78, 0x4, 0x4, 0x4, 0x9, 0x9, 0x7, 0x5, 0xf, 0x5, 0xfffff8de, 0x7ec1, 0x37, 0x9, 0x6, 0xffff, 0x7, 0xff, 0x7, 0xa26f, 0xfff, 0x7, 0x4, 0x6, 0x9, 0x5, 0xb4b4, 0x5, 0x8, 0x2cf8, 0x3, 0x2, 0x5000, 0x2, 0x5494, 0x3, 0x0, 0xf, 0x3, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1, 0x80000000, 0xffffffa3, 0x1ff, 0x1, 0x7, 0xff, 0x7f, 0x1000007, 0x400, 0xa, 0xa, 0x2, 0x400, 0xfffffff8, 0x80000000, 0x0, 0x9, 0x7f, 0x10, 0x8000, 0xffffffff, 0x100, 0x2, 0x8d, 0x7, 0x7]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newqdisc={0x448, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x41c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0xa, 0x0, 0xc7d, 0xe, 0x7, 0x9, 0x3, 0xfffffa6c, 0x8, 0x6, 0x3, 0x9, 0xfffffffc, 0xe89f7c6, 0x9, 0x2, 0x8, 0x3, 0x0, 0x2, 0xef83, 0x3ff, 0x7, 0x2, 0xb, 0x7fff, 0xfff, 0x81, 0x5, 0xfffffee6, 0x24e, 0x8, 0x9c0c, 0x0, 0x648, 0x4, 0x5, 0x0, 0xffffff80, 0x80, 0x6d, 0x5, 0x400, 0x9f59, 0x7ff, 0xab80, 0x3, 0xd88, 0x7f, 0x192e1ebe, 0x3, 0x2, 0x2, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0x8, 0xd, 0x62d86bf0, 0x10, 0x2, 0x756094c1, 0x2d, 0x7fffffff, 0x7fffffff, 0xded17c6, 0x4, 0x9, 0x69, 0x7, 0x166b, 0x101, 0x1, 0x7, 0xfffffffa, 0x7f, 0x0, 0xc, 0x5, 0x23b8, 0x0, 0x200, 0xfe0000, 0x857, 0x436, 0x3, 0x1, 0xaed, 0x966, 0x3b, 0xd, 0x7fffffff, 0x73, 0x6, 0x1, 0x2, 0xfffffffb, 0x0, 0x4, 0x7fffffff, 0x6, 0x5, 0x3, 0x9bc, 0x1000, 0x3, 0x7fff, 0x3, 0x5, 0x6, 0x10, 0x7f, 0x7, 0x3, 0x1, 0x0, 0x400, 0x4, 0x8bee82c, 0x80000001, 0x9, 0x7fff, 0x6, 0x8, 0x0, 0xf, 0x5d52, 0xfffffffc, 0x7, 0xe, 0x7, 0x2, 0x10001, 0x10000000, 0x4, 0xffffffff, 0x7, 0x4, 0x6, 0x6, 0x10001, 0x1, 0x2, 0x3, 0x80000000, 0xd60, 0x1, 0x2, 0x3, 0x2, 0x5, 0x1, 0x3a30, 0xd5, 0xd2d, 0x2, 0x0, 0x2, 0xe3, 0xc5, 0x1cb, 0x3, 0x931, 0x8, 0xb105, 0x4, 0x9, 0x10000, 0x8, 0x5, 0x9, 0xfffff801, 0x7fffffff, 0x3ff, 0x80000000, 0x0, 0x1, 0x4, 0x86, 0x8, 0x7, 0x6, 0xc78, 0x4, 0x4, 0x4, 0x9, 0x9, 0x7, 0x5, 0xf, 0x5, 0xfffff8de, 0x7ec1, 0x37, 0x9, 0x6, 0xffff, 0x7, 0xff, 0x7, 0xa26f, 0xfff, 0x7, 0x4, 0x6, 0x9, 0x5, 0xb4b4, 0x5, 0x8, 0x2cf8, 0x3, 0x2, 0x5000, 0x2, 0x5494, 0x3, 0x0, 0xf, 0x3, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1, 0x80000000, 0xffffffa3, 0x1ff, 0x1, 0x7, 0xff, 0x7f, 0x1000007, 0x400, 0xa, 0xa, 0x2, 0x400, 0xfffffff8, 0x80000000, 0x0, 0x9, 0x7f, 0x10, 0x8000, 0xffffffff, 0x100, 0x2, 0x8d, 0x7, 0x7]}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x5f, 0x2, {0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040c5}, 0x24004800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)=@ll={0x11, 0x1c, r11, 0x1, 0x2, 0x6, @multicast}, 0x80, 0x0}, 0x20000800)
epoll_create(0x8) (async)
r12 = epoll_create(0x8)
clock_gettime(0x0, &(0x7f0000000240)) (async)
clock_gettime(0x0, &(0x7f0000000240)={<r13=>0x0, <r14=>0x0})
epoll_pwait2(r12, &(0x7f0000000200)=[{}, {}], 0x2, &(0x7f00000003c0)={r13, r14+60000000}, &(0x7f0000000400)={[0x3]}, 0x8) (async)
epoll_pwait2(r12, &(0x7f0000000200)=[{}, {}], 0x2, &(0x7f00000003c0)={r13, r14+60000000}, &(0x7f0000000400)={[0x3]}, 0x8)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', <r16=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x4000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINKINFO={0x75, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r16}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x44}}, 0x10)

7.096525562s ago: executing program 3 (id=5666):
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000c4}, 0x40000) (async)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

7.088330394s ago: executing program 3 (id=5667):
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x1, 0x903, 0x10})
fsopen(&(0x7f0000000000)='udf\x00', 0x0)
unshare(0x8000000)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000140)=0xec62, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x3, 0x8, 0x0, 0x3}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
modify_ldt$write(0x1, &(0x7f0000000000)={0xfff}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0x0, 0xffffffffffffffff}, 0x10)
connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e26}, 0x6e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2c1a)
fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r4})
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000004000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002400000"], 0xdc}, 0x1, 0x0, 0x0, 0x8000890}, 0x0)
sendmsg$NFT_MSG_GETRULE(r2, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000000)={0xfffb, 0x6, 0x201, 0x4, 0x3, 0x7, 0x0, 0x401, r7}, 0x20)

7.065235871s ago: executing program 4 (id=5668):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00')
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) (async)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x16b}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="6f433f8987fc9e72c982b56a37a1c7b7ab31e2f6b098f57a62f9d8a98a", 0x1d}, {&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce83e6c2faa97a4f99d042e50e79936490023788174b7af0c760ea8723eed6912bd85156d534474c9e5629951d6e4287bd996f0f801217b1567d0a160a44f5c122d4512a0c8cde478f738110e77ae94c9add0b05940b71bfecd3f0a7caa562d694634388ee577c44c873818cd358c9ce80ca10c5292a03540a6350546bfe7f8b54f57db5f2a969f2624f588643e2ad9be66d45d45354c164bb186522bf2130f43c84ad5d56f74afd23a06362f2b30dcc2ac95c3b5264aaccf66d52fc57615449e5362c1c6aea5d903a198742c9c8507", 0x12c}], 0x2}}], 0x2, 0x2090) (async)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) (async)
sendto$inet(r2, &(0x7f0000000580)="04", 0x2bc, 0x10008095, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00130d00000054fa68fe66e9ce8ef9694d067e"], 0x0, 0x0, 0x0, 0x0})

6.079480217s ago: executing program 1 (id=5671):
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = creat(0x0, 0x122)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x10)
socket$isdn(0x22, 0x3, 0x3)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
poll(&(0x7f0000000000), 0x0, 0xfffffff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200), 0x4)
sendto$inet(r4, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'batadv_slave_0\x00'}, 0x20})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18)

5.016141637s ago: executing program 0 (id=5674):
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1100023, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',blksize=0x0000000000000000,max_read=0x8000000000000000,default_permissions,max_read=0x000000000000000f,blksize=0x0000000000001800,default_permissions,silent,sync,seclabel,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',obj_user=syz2\x00,fowner=', @ANYRESDEC=0xee01, @ANYBLOB="ac00e36da4b777bac6ff0cb93d31bd87aeb3265da42292680814489e9c7c42d25d56e66071ab26a3ec6b2a6cdf5219fc19e2b46ddfe393b65d62a7ae4e2c7d0f1b865c7aa9a63bc3d770a636"], 0x1, 0x0, &(0x7f0000000180)="a15bdd25d162b75e4b24ba3b403dc542e65a6fb813d808cfefa10edb6581828d37ab9c946f506b26a67a2db8040df8db20749a30")
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0)
r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
execveat$binfmt(r4, r5, 0x0, 0x0, 0x1000)
fspick(r1, &(0x7f00000001c0)='./file1\x00', 0x1)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x278000003e7, 0x0, 0x20, 0xffffffffffffffff, 0x1})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800b00010065787468647200001c0048800500020089000000080001400000000d08000640000000010900010073797a300000000009000a0073797a32000000001400000011000100000000008700000000000000"], 0x84}}, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="00047000db1e6d6600000000f3d800000000"], 0x14}}, 0x30004014)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="03000800010000000000140000004500801614000000000190780a010100951414aa0400907800001400450000000000000000110000ac1414aa7f000001"], 0xfdef)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0)

5.015193706s ago: executing program 4 (id=5675):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x54e, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x5}]}, 0x34}}, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4d, 0x300, 0x1daf6}, 0x10)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xf6, &(0x7f0000000780)=@generic={0x4, 0x2, 0xee, "e3ed76a1", "d2f63caa5b9180cab2482cb2c004155e9ffc5dad49e6f3066f4ba6d6807f56e9ad84b6de47f4885d3a1435d8f23984bd6ce95012b3a8202b275b73be01e8dc352fd99dbeb6ea8b150bec06815c75f86bf7663c598fedcbad1255100a67ef76fddd7127c98264171775e87f4fe10acc785cb6fa2d7d1fc58fe892f4408d4351c98d2779cdf49bc8741145ad3b0b124608b0573b98e6e11fe72ab05a0d7b65aa6a62a7e919b4c2f7a25eb0fa84fa0ddaba1d2760c81e8acb61c9ab219f05b1247e68d7a2ad063fe2b9d82c001e789d84777765c7895f01f3d9717d2d943b9384f362bc9f682ba9ea84b58ff2424552"})
syz_usb_connect$cdc_ecm(0x2, 0x175, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x163, 0x1, 0x1, 0xd, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "b8c2db26"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x5, 0x2}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x6, 0xfa, 0x1, 0xf1, 0x5}, @mdlm_detail={0xfe, 0x24, 0x13, 0x0, "0ecb7b3088acc81a6d5006c713f1699a0e34308d502aee44eccf084f2def1d66c323c1321144312ccd32acfc15bba83eececeea22ba3267e5df6a034dce25d2dc16d3eb91d28abef8e2746fb2d663e7a22d868f76da404be6d0654582ff6db314d8d1237cee313d7ebc3d2d773e1d471771c6a50121b042e36e897c80835aae4f963ff568bebb8f7b9aaa2f6774a8e5007429bdaafee9c8ba0d91579ed37d8f95daba36afde34dded27cd1d8353b9a5d109c679d0ba3f16d02206b68c10f475f833e6a626fb67b69e2ca78978542b0814087ca17e7aaf089a30f6711357ba0cabbb4123ffa39fefc542e873ffd790af1c3da520e2d5aea894325"}, @mbim={0xc, 0x24, 0x1b, 0x9b, 0x8, 0x9, 0x1, 0x1, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd3, 0xe9, 0x90}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xac, 0x6, 0x49}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x10}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0xf, 0x0, 0xff, 0xf1}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0xbf, &(0x7f00000002c0)=@string={0xbf, 0x3, "79634bb653c7c8f8eadd2f033ec114f6b1816337f6fc010b32cd6e893f12217a6b11b187417dc859bdaf5fc938f7cb60f269b69f06d666ef012ceac84ae4102fb94cbef09db8aa02deae60b62283a6000ea5b253180c58007b5153ddcc057871fddba357fd13c5f9c6e633ee9787674c66487269f3e36144920a85ac49402c99f9602fbf8eee09630c4ab29ad2f3178395c8d24bf789bf17f639684f0f6a8bff7f9f84cc0f6c825dfb899edb594e242908c7f615a8a130ba240dbd4e76"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140c}}]})
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1a8, 0x29, 0x36, {0x5e, 0x31, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xdb, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x378}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.833492544s ago: executing program 1 (id=5676):
unshare(0x6020400)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x20)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0}, 0x0)

4.692435519s ago: executing program 3 (id=5678):
r0 = socket(0xa, 0x5, 0x0)
listen(r0, 0x100)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0xa00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c00000084"], 0x2c, 0x4855}, 0x400c850)

4.60884383s ago: executing program 3 (id=5679):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201610117592920570509201ec70102030109022400010200100009045807028ab538000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = shmget(0x1, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

4.027628761s ago: executing program 0 (id=5680):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x54e, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x5}]}, 0x34}}, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4d, 0x300, 0x1daf6}, 0x10)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xf6, &(0x7f0000000780)=@generic={0x4, 0x2, 0xee, "e3ed76a1", "d2f63caa5b9180cab2482cb2c004155e9ffc5dad49e6f3066f4ba6d6807f56e9ad84b6de47f4885d3a1435d8f23984bd6ce95012b3a8202b275b73be01e8dc352fd99dbeb6ea8b150bec06815c75f86bf7663c598fedcbad1255100a67ef76fddd7127c98264171775e87f4fe10acc785cb6fa2d7d1fc58fe892f4408d4351c98d2779cdf49bc8741145ad3b0b124608b0573b98e6e11fe72ab05a0d7b65aa6a62a7e919b4c2f7a25eb0fa84fa0ddaba1d2760c81e8acb61c9ab219f05b1247e68d7a2ad063fe2b9d82c001e789d84777765c7895f01f3d9717d2d943b9384f362bc9f682ba9ea84b58ff2424552"})
syz_usb_connect$cdc_ecm(0x2, 0xec, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x1, 0x1, 0xd, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "b8c2db26"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x5, 0x2}, [@obex={0x5, 0x24, 0x15, 0x4}, @mdlm_detail={0x81, 0x24, 0x13, 0x0, "0ecb7b3088acc81a6d5006c713f1699a0e34308d502aee44eccf084f2def1d66c323c1321144312ccd32acfc15bba83eececeea22ba3267e5df6a034dce25d2dc16d3eb91d28abef8e2746fb2d663e7a22d868f76da404be6d0654582ff6db314d8d1237cee313d7ebc3d2d773e1d471771c6a50121b042e36e897c808"}, @mbim={0xc, 0x24, 0x1b, 0x9b, 0x8, 0x9, 0x1, 0x1, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd3, 0xe9, 0x90}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xac, 0x6, 0x49}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x10}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0xf, 0x0, 0xff, 0xf1}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0xbf, &(0x7f00000002c0)=@string={0xbf, 0x3, "79634bb653c7c8f8eadd2f033ec114f6b1816337f6fc010b32cd6e893f12217a6b11b187417dc859bdaf5fc938f7cb60f269b69f06d666ef012ceac84ae4102fb94cbef09db8aa02deae60b62283a6000ea5b253180c58007b5153ddcc057871fddba357fd13c5f9c6e633ee9787674c66487269f3e36144920a85ac49402c99f9602fbf8eee09630c4ab29ad2f3178395c8d24bf789bf17f639684f0f6a8bff7f9f84cc0f6c825dfb899edb594e242908c7f615a8a130ba240dbd4e76"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140c}}]})
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b0, 0x29, 0x36, {0x5e, 0x32, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x200000000000007a, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x380}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.024721495s ago: executing program 3 (id=5681):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3, 0x0, @a}, 0x48, 0xffffffffffffffff)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x141542, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r7, 0x3b83, &(0x7f0000000140)={0x28, 0x10002, 0x0, 0x0, 0x200, 0x8, 0x0, 0x30182e})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001d00010029bd7000fedbdf2507000000", @ANYRES32=r9, @ANYBLOB="8000080a1597691de8a59504b5a7d33e1a0645ac23a6b81196e82fd05f5dd3c90cff37a09e3d150cc99086503652a58fad7269bed67acaaaed7758d9e0a7a4275f91d6467d2371caccca9d40942285749ad4ed8f7158981848fa1db5321a92a38918d6704ee4029d7af11c74782f8c3d6e953eeacc87d4295e8610952bee2b9121d94136059e4596b3e159dbd61559b7020bbceb50f80deb636b1dca67b2b9cf0672dedecad568c520d8dceb091fcbc5349e576e919860d0d2325bc14aa148d2fc46e7670590"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2", @ANYRES32=0x0, @ANYRES32=0x0], 0xc4}}, 0x8044)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c)
sendmsg$kcm(r3, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x45}, 0x80, 0x0}, 0x20000080)
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20000000)
sendmsg$kcm(r2, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0)
socket(0x10, 0x3, 0x0)

3.73955862s ago: executing program 6 (id=5682):
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) (async)
socket(0xa, 0x3, 0x3a) (async)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x4, 0x200000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x17c, 0xfff, 0x354}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500002c0000000000119078ffffffffe000000100004e20001890780400000000004166f6e8e808591c0000"], 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) (async)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0xfffffffffffffffb, 0x7, 0x0}) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301)
ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, 0x0) (async)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
r6 = socket(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x3, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc, 0x5], [0x0, 0x4, 0x0, 0xfffe]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) (async)
r8 = getpgrp(0x0)
r9 = syz_pidfd_open(r8, 0x0)
ioctl$FS_IOC_GETVERSION(r9, 0xff06, 0x0) (async)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400040, 0x0)
syz_open_dev$dri(0x0, 0x1ff, 0x0)

3.607837376s ago: executing program 6 (id=5683):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0)

3.550907276s ago: executing program 6 (id=5684):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) (fail_nth: 2)

3.440394621s ago: executing program 6 (id=5685):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

3.399481451s ago: executing program 6 (id=5686):
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = creat(0x0, 0x122)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x10)
r3 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r3, 0x0)
poll(&(0x7f0000000000), 0x0, 0xfffffff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000200), 0x4)
sendto$inet(r5, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'batadv_slave_0\x00'}, 0x20})
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x18)

3.301319099s ago: executing program 1 (id=5687):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd00000000000086dd60cb653e00303afffe800000000000002000000000000000fe8000000000000000000000000000aa89"], 0x0)

3.097458876s ago: executing program 0 (id=5688):
r0 = syz_usb_connect(0x4, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r8, 0x40, 0x0, 0xb}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc880}, 0x840)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xfff9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r10)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff)
socket(0x2, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abdc2eff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_sctp(0xa, 0x4, 0x84)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)=ANY=[@ANYBLOB="200004e000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.979233786s ago: executing program 4 (id=5689):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000182020207b1af8ff00000000bfa100000000001007010000f8ffffffb702000008000000b7030000010000007a0000000600008095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x39, &(0x7f0000000140)=""/57, 0x3f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8007}, 0x94)

2.624103441s ago: executing program 1 (id=5690):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setxattr$security_capability(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0)
lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x3)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000240)})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r4, &(0x7f0000000200)='m', 0x1)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))
syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
socket(0x8000000010, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$apparmor_exec(r7, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES16], 0x15)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x5, 0x4})
r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000400)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @in_dx={0x69, 0x20, {0x5ae9, 0x4}}, @in_dx={0x69, 0x20, {0x94c9, 0x1}}, @wr_crn={0x67, 0x20, {0x4, 0x6}}, @in_dx={0x69, 0x20, {0x4a61, 0x3}}, @set_irq_handler={0xc8, 0x20, {0xc2, 0x1001}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host_nat=0x6c0c, 0x4, 0x6, 0x23e2}}, @code={0xa, 0x4b, {"c4217a6f1821590c0f01c3c74424007f000000c744240204000000ff1c2466b854008ed066bad104ec360f09b8010000000f01c1450f06460f30"}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x5b52, 0x9, 0xffffffff}}, @cpuid={0x64, 0x18, {0x740c, 0x8}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest64=0x2801, 0x401, 0x80000001, 0xd}}, @uexit={0x0, 0x18, 0x8}, @set_irq_handler={0xc8, 0x20, {0x55, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x51, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro_nat=0x6406, 0x7, 0x3, 0x56e538af}}, @wrmsr={0x65, 0x20, {0xaba, 0xfff8000000000000}}, @wrmsr={0x65, 0x20, {0x2ac, 0x1}}], 0x2b3})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000700)={[0x1000, 0x3b, 0x9, 0x5, 0xf, 0x5, 0x5, 0x0, 0x5, 0xc000, 0x4, 0x7fffffff, 0x6, 0x1, 0xc350, 0x2], 0x200000, 0x10404})

2.595958532s ago: executing program 4 (id=5691):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0xa, [0x0, 0x2, 0x0, 0x400, 0x6, 0x4, 0x49, 0x6, 0x91, 0x0]}, &(0x7f0000000040)=0x18)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0x5, 0x29, 0x2, 0x80, 0x0, 0xad, '\x00', "8173828d"}}, 0x0}, 0x0)

2.072111375s ago: executing program 6 (id=5692):
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$pppl2tp(0x18, 0x1, 0x1)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}})
gettid()
socket$inet_sctp(0x2, 0x1, 0x84)
syz_emit_ethernet(0xc2, &(0x7f0000000300)=ANY=[@ANYRES16], 0x0)
quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c00018014000300"/44, @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x3fe, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x8, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x100, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r10 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x4c}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0xfc}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0)

1.805475206s ago: executing program 3 (id=5693):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x4, 0x34}]})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0)
r4 = io_uring_setup(0x664c, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000280)={0xc})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, 0x0)
r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x430101)
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000003c0)=0x1000)
r8 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r8, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, 0x7, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004001}, 0x45)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r8, r6})
r9 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x16, 0x16, 0x0, 0x8000}})
close_range(r4, 0xffffffffffffffff, 0x0)
r10 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x1, 0x300)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r10, 0x40044160, 0x3)
syz_usb_connect(0x2, 0x36, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905080aff03f70709090504"], 0x0)

1.294756098s ago: executing program 0 (id=5694):
r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x52081, 0x0)
close_range(r0, r1, 0x2) (async)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x6}) (async)
r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0)
r4 = dup3(r0, r3, 0x0)
pwritev2(r4, &(0x7f00000000c0), 0x0, 0x45, 0x1, 0x19)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)=']).\x00', &(0x7f00000001c0)='-%\'.\x00']}, &(0x7f0000000300)={[&(0x7f0000000240)='\x00', &(0x7f0000000280)='-^\x00', &(0x7f00000002c0)='\x00']})
read$eventfd(r4, &(0x7f0000000340), 0x8) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={<r5=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x3ff, 0x9, "591bbedceba6ce483c35ef1a931ef2066e98f25c3518a7f09d66c8fdf05896858b63378b6024bb01bf17e44904ebcc132a29091789a62554f70a270e0b28221af7feecd2584f4affc8f8041a5dbc1e22efb0c636f017cb235b057bcdb6e224779c8d9303e7a54c88300ba2febe19c0f72477ae364247deb7a3d73a81c32920e55942da92a481a040d0c50eea31854e3ce20f7e6d4143cb77b0c45931836737080a2f24872929d6f61e9ef8ae9b1cfacd26e4fc1ce3b22f13a8357891ed700b286f6ec8bf9b51d6044bab9f32c571e931fdfa5a311dd2d504970734d538031831b41f9584f8be9b001e79912634c5189105f2e1f9751d97b7b7a8afa5d8e3ce4f", 0x3, 0x80, 0xd1, 0x7, 0x81, 0x0, 0x5, 0x1}, r5}}, 0x120) (async)
ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000540)={0xc86, 0x1962, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000013240), r4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000013280)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f0000013380)={&(0x7f0000013200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000013340)={&(0x7f00000132c0)={0x64, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5}, @NL80211_ATTR_SSID={0x5, 0x34, @random="a5"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xd, 0x34, @random="4b23c899ab0548de5f"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x52}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x41) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f00000133c0)=0xd, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10, &(0x7f0000013400)=0x800, 0x0, 0x4)
writev(r0, &(0x7f00000135c0)=[{&(0x7f0000013440)="69ac7689d77ef90d34a5e784a84608370498616f40f0ef39c905ab9c073dd8849c20b964333a16e2e2ed82d959bf18fb2e4bb739d7e5d9e3bf09a3d858d907c51ac5883ae53f853946a8d78e1069b89f4d4feb7dda622251f6e75e97cf0a938d8bb6f671f587f84fa893e309f4b45e8b8c03d274ed147c4527bae424831a1b8508b27c780fe2f9ef0e4c1e36b3930383a01bdedadb5e494d9825", 0x9a}, {&(0x7f0000013500)="2a0a0dfc3171df40e881ec95a382ecfdb810c288e5e51431478e315281711c648fc79af4ca9452f1ba90939c887d6c9f6e282dfad1f5f7b488dc4c5c83325d522f28b69f11b60b9efebc440bd40533a4acb46d79d1460cda70e3d456cdfe2191be89cf3082af47f35e8f5755daa477c00837e24415648fc3dfc74ba2e6ae83d25b66b6c11d1dec9e11c3e745c8c5dcc53f2e6595cf119aff20b88124", 0x9c}], 0x2)
r8 = syz_io_uring_setup(0x5980, &(0x7f0000013600)={0x0, 0xa560, 0x1, 0x0, 0x2f7, 0x0, r4}, &(0x7f0000013680), &(0x7f00000136c0))
r9 = syz_clone(0x50000, &(0x7f0000013700)="6f069e0cea8f141145d15ccb66d42202b4b7979d2b408959dcf4cb9a9ccec35fa8a05c7cc1f5b189397fcf868521e59f0053e284db30001c19c04e34e2953ae36defb104393ccee19a9cc4aa5de9c272214c8ceebdd3e099d301b63c6946ceae6896ce7c89b333591e7969637224d832a9f6bb6e7bb1aec9a7708128758629c706473e04d59ce5f280c387439e6107830a2c732a3611ff", 0x97, &(0x7f00000137c0), &(0x7f0000013800), &(0x7f0000013840))
fcntl$lock(r8, 0x7, &(0x7f0000013880)={0x0, 0x3, 0x916, 0xe26, r9}) (async)
fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000138c0)) (async)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000013900)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r10, &(0x7f0000013940)='memory.events.local\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000013980)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
close_range(r11, r3, 0x2) (async)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000015e00)={0x401, 0x0, &(0x7f0000015d00)=[{&(0x7f00000139c0)=""/4096, 0x1000}, {&(0x7f00000149c0)=""/244, 0xf4}, {&(0x7f0000014ac0)=""/106, 0x6a}, {&(0x7f0000014b40)=""/172, 0xac}, {&(0x7f0000014c00)=""/4096, 0x1000}, {&(0x7f0000015c00)=""/16, 0x10}, {&(0x7f0000015c40)=""/176, 0xb0}], &(0x7f0000015d80)=[0x49, 0x10001, 0x5, 0x2, 0x10, 0x2, 0x6, 0x8, 0x7], 0x7}, 0x20) (async)
socket$nl_route(0x10, 0x3, 0x0)

1.195508944s ago: executing program 0 (id=5695):
socket$kcm(0x21, 0x2, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x24040040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
syz_open_dev$sndpcmc(0x0, 0x6, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127)
open$dir(&(0x7f0000000240)='./file0\x00', 0x179000, 0x154)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x20}}, 0x4000000)
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="ffffd230936cce7c17e296fae8145b2d451d1dfd", @ANYRESDEC, @ANYRESOCT=0x0], 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x40001)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="280000000b14010026bd7200fddbdf25080001"], 0x28}}, 0x0)

684.072034ms ago: executing program 4 (id=5696):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) (fail_nth: 3)

608.378264ms ago: executing program 1 (id=5697):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r3, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4)
recvmmsg(r3, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0x5eb8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80), 0xc00}, 0xffff}], 0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$kcm(0xa, 0x5, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x4)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

22.25284ms ago: executing program 4 (id=5698):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x54e, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r1, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x5}]}, 0x34}}, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4d, 0x300, 0x1daf6}, 0x10)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xf6, &(0x7f0000000780)=@generic={0x4, 0x2, 0xee, "e3ed76a1", "d2f63caa5b9180cab2482cb2c004155e9ffc5dad49e6f3066f4ba6d6807f56e9ad84b6de47f4885d3a1435d8f23984bd6ce95012b3a8202b275b73be01e8dc352fd99dbeb6ea8b150bec06815c75f86bf7663c598fedcbad1255100a67ef76fddd7127c98264171775e87f4fe10acc785cb6fa2d7d1fc58fe892f4408d4351c98d2779cdf49bc8741145ad3b0b124608b0573b98e6e11fe72ab05a0d7b65aa6a62a7e919b4c2f7a25eb0fa84fa0ddaba1d2760c81e8acb61c9ab219f05b1247e68d7a2ad063fe2b9d82c001e789d84777765c7895f01f3d9717d2d943b9384f362bc9f682ba9ea84b58ff2424552"})
syz_usb_connect$cdc_ecm(0x2, 0xec, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xda, 0x1, 0x1, 0xd, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "b8c2db26"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x5, 0x2}, [@obex={0x5, 0x24, 0x15, 0x4}, @mdlm_detail={0x81, 0x24, 0x13, 0x0, "0ecb7b3088acc81a6d5006c713f1699a0e34308d502aee44eccf084f2def1d66c323c1321144312ccd32acfc15bba83eececeea22ba3267e5df6a034dce25d2dc16d3eb91d28abef8e2746fb2d663e7a22d868f76da404be6d0654582ff6db314d8d1237cee313d7ebc3d2d773e1d471771c6a50121b042e36e897c808"}, @mbim={0xc, 0x24, 0x1b, 0x9b, 0x8, 0x9, 0x1, 0x1, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd3, 0xe9, 0x90}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xac, 0x6, 0x49}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x10}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x6, 0xf, 0x0, 0xff, 0xf1}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0xbf, &(0x7f00000002c0)=@string={0xbf, 0x3, "79634bb653c7c8f8eadd2f033ec114f6b1816337f6fc010b32cd6e893f12217a6b11b187417dc859bdaf5fc938f7cb60f269b69f06d666ef012ceac84ae4102fb94cbef09db8aa02deae60b62283a6000ea5b253180c58007b5153ddcc057871fddba357fd13c5f9c6e633ee9787674c66487269f3e36144920a85ac49402c99f9602fbf8eee09630c4ab29ad2f3178395c8d24bf789bf17f639684f0f6a8bff7f9f84cc0f6c825dfb899edb594e242908c7f615a8a130ba240dbd4e76"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140c}}]})
open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x2}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1b0, 0x29, 0x36, {0x5e, 0x32, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x200000000000007a, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x380}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

0s ago: executing program 0 (id=5699):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xf468, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0)
mq_notify(r3, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) (async)
close(r2)
mq_notify(r3, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x9, 0x6e2, 0x51880}) (async, rerun: 32)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

kernel console output (not intermixed with test programs):

] Tainted: [L]=SOFTLOCKUP
[ 1323.401432][T25882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1323.401444][T25882] Call Trace:
[ 1323.401452][T25882]  <TASK>
[ 1323.401462][T25882]  dump_stack_lvl+0x189/0x250
[ 1323.401488][T25882]  ? __pfx____ratelimit+0x10/0x10
[ 1323.401514][T25882]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1323.401543][T25882]  ? __pfx__printk+0x10/0x10
[ 1323.401579][T25882]  should_fail_ex+0x414/0x560
[ 1323.401612][T25882]  _copy_to_user+0x31/0xb0
[ 1323.401636][T25882]  video_usercopy+0xd93/0x13f0
[ 1323.401666][T25882]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1323.401682][T25882]  ? __pfx_video_usercopy+0x10/0x10
[ 1323.401713][T25882]  ? __fget_files+0x3a0/0x420
[ 1323.401737][T25882]  v4l2_ioctl+0x18d/0x1e0
[ 1323.401758][T25882]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1323.401773][T25882]  __se_sys_ioctl+0xfc/0x170
[ 1323.401800][T25882]  do_syscall_64+0xfa/0xf80
[ 1323.401826][T25882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1323.401843][T25882]  ? clear_bhb_loop+0x60/0xb0
[ 1323.401864][T25882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1323.401883][T25882] RIP: 0033:0x7f65a9f8f749
[ 1323.401900][T25882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1323.401917][T25882] RSP: 002b:00007f65a81f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1323.401937][T25882] RAX: ffffffffffffffda RBX: 00007f65aa1e5fa0 RCX: 00007f65a9f8f749
[ 1323.401951][T25882] RDX: 0000200000000100 RSI: 00000000c028564d RDI: 0000000000000003
[ 1323.401965][T25882] RBP: 00007f65a81f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1323.401976][T25882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1323.401986][T25882] R13: 00007f65aa1e6038 R14: 00007f65aa1e5fa0 R15: 00007f65aa30fa28
[ 1323.402016][T25882]  </TASK>
[ 1323.669390][   T30] kauditd_printk_skb: 78 callbacks suppressed
[ 1323.669409][   T30] audit: type=1326 audit(1764918040.256:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25883 comm="syz.1.5211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f680758f749 code=0x0
[ 1324.019760][T16191] usb 7-1: 0:2 : does not exist
[ 1324.248532][T16191] usb 7-1: USB disconnect, device number 43
[ 1324.413683][T25902] Set syz0 is full, maxelem 0 reached
[ 1324.438688][T25902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1324.524614][T25902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1324.559729][T25902] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1324.679603][T25909] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5214'.
[ 1324.828008][  T184] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1324.896966][T25914] input: syz0 as /devices/virtual/input/input130
[ 1324.937378][T25914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1324.957001][T25914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1324.987788][T14554] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1324.995767][  T184] usb 2-1: Using ep0 maxpacket: 16
[ 1325.003090][  T184] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1325.012420][  T184] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1325.023141][  T184] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1325.035259][  T184] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1325.048914][  T184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1325.057511][  T184] usb 2-1: Product: syz
[ 1325.062526][  T184] usb 2-1: Manufacturer: 髒쮊ꅘﴖ鞂同勵ଞ刁粖뺕䟔멩畐렌묡׏錳뾁䓪ॺ꒯ﶉ좑⨾겋㬣鷛域划㑔ꚴ쟓ﴭ鳘썼ᓹ⣿ᅠ鍊擡嶗᠑诶阁쀭垛Ȓ٧㽒
[ 1325.081647][  T184] usb 2-1: SerialNumber: syz
[ 1325.160094][T14554] usb 5-1: too many configurations: 78, using maximum allowed: 8
[ 1325.195664][T14554] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1325.205897][T14554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1325.216966][T14554] usb 5-1: Product: syz
[ 1325.221311][T14554] usb 5-1: Manufacturer: syz
[ 1325.226149][T14554] usb 5-1: SerialNumber: syz
[ 1325.244936][T14554] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1325.266384][T16185] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1325.295433][T25920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1325.306479][T25920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1325.460091][T25925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1325.548400][  T184] usb 2-1: 0:2 : does not exist
[ 1325.559089][T25925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1325.730950][T25911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1325.764424][  T184] usb 2-1: USB disconnect, device number 25
[ 1325.976408][T25911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1326.103525][T12086] udevd[12086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1326.478881][T16185] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1326.841060][T25933] netlink: 56745 bytes leftover after parsing attributes in process `syz.1.5224'.
[ 1326.859310][T25934] FAULT_INJECTION: forcing a failure.
[ 1326.859310][T25934] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1326.872730][T16185] ath9k_htc: Failed to initialize the device
[ 1326.926574][T16185] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1326.940030][T25934] CPU: 0 UID: 0 PID: 25934 Comm: syz.3.5223 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1326.940050][T25934] Tainted: [L]=SOFTLOCKUP
[ 1326.940054][T25934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1326.940061][T25934] Call Trace:
[ 1326.940066][T25934]  <TASK>
[ 1326.940071][T25934]  dump_stack_lvl+0x189/0x250
[ 1326.940089][T25934]  ? __pfx____ratelimit+0x10/0x10
[ 1326.940104][T25934]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1326.940117][T25934]  ? __pfx__printk+0x10/0x10
[ 1326.940138][T25934]  should_fail_ex+0x414/0x560
[ 1326.940157][T25934]  _copy_to_user+0x31/0xb0
[ 1326.940170][T25934]  simple_read_from_buffer+0xe1/0x170
[ 1326.940190][T25934]  proc_fail_nth_read+0x1b3/0x220
[ 1326.940208][T25934]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1326.940224][T25934]  ? rw_verify_area+0x2a6/0x4d0
[ 1326.940237][T25934]  ? kfree+0x4d/0x660
[ 1326.940249][T25934]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1326.940264][T25934]  vfs_read+0x200/0xa30
[ 1326.940278][T25934]  ? fdget_pos+0x247/0x320
[ 1326.940290][T25934]  ? __pfx___mutex_lock+0x10/0x10
[ 1326.940307][T25934]  ? __pfx_vfs_read+0x10/0x10
[ 1326.940322][T25934]  ? __fget_files+0x2a/0x420
[ 1326.940341][T25934]  ? __fget_files+0x3a0/0x420
[ 1326.940351][T25934]  ? __fget_files+0x2a/0x420
[ 1326.940367][T25934]  ksys_read+0x145/0x250
[ 1326.940382][T25934]  ? __pfx_ksys_read+0x10/0x10
[ 1326.940398][T25934]  ? do_syscall_64+0xbe/0xf80
[ 1326.940415][T25934]  do_syscall_64+0xfa/0xf80
[ 1326.940430][T25934]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.940441][T25934]  ? clear_bhb_loop+0x60/0xb0
[ 1326.940454][T25934]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1326.940464][T25934] RIP: 0033:0x7fea3ab8e15c
[ 1326.940475][T25934] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1326.940484][T25934] RSP: 002b:00007fea3ba44030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1326.940497][T25934] RAX: ffffffffffffffda RBX: 00007fea3ade5fa0 RCX: 00007fea3ab8e15c
[ 1326.940505][T25934] RDX: 000000000000000f RSI: 00007fea3ba440a0 RDI: 0000000000000004
[ 1326.940512][T25934] RBP: 00007fea3ba44090 R08: 0000000000000000 R09: 0000000000000000
[ 1326.940518][T25934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1326.940524][T25934] R13: 00007fea3ade6038 R14: 00007fea3ade5fa0 R15: 00007fea3af0fa28
[ 1326.940541][T25934]  </TASK>
[ 1326.944926][T25933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5224'.
[ 1327.237992][ T1219] usb 5-1: USB disconnect, device number 105
[ 1327.717791][T16192] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 1327.947763][T16192] usb 7-1: Using ep0 maxpacket: 32
[ 1327.959366][T16192] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[ 1327.974709][T16192] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1328.032271][T16192] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1328.057874][T25952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1328.069760][T16185] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[ 1328.120531][T16192] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1328.141080][T25952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1328.162705][T16192] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1328.352500][T16185] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1328.386268][T16185] usb 2-1: config 179 has no interface number 0
[ 1328.401232][T16185] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1328.420548][T16185] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1328.431952][T16185] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1328.444002][T16185] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[ 1328.464229][T16192] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1328.477224][T16185] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1328.485127][T16192] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1328.528193][T16185] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1328.630219][T16185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1328.655080][T25945] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1328.665641][T16185] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1328.704668][T16185] xpad 2-1:179.65: probe with driver xpad failed with error -90
[ 1328.716397][T16192] usb 7-1: Product: syz
[ 1328.751248][T16192] usb 7-1: Manufacturer: syz
[ 1328.921681][T25945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1328.986889][T25945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1329.035987][T16192] usb 7-1: SerialNumber: syz
[ 1329.088698][T16185] usb 2-1: USB disconnect, device number 26
[ 1329.126824][T16192] usb 7-1: config 0 descriptor??
[ 1329.154613][T16192] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1329.176873][T16192] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1330.307920][T16192] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1330.458253][T16192] usb 2-1: Using ep0 maxpacket: 16
[ 1330.465945][T16192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1330.478014][T16192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1330.503085][T16192] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1330.535430][T16192] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1330.558989][T16192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1330.588503][T16192] usb 2-1: config 0 descriptor??
[ 1330.743477][ T5902] usb 7-1: USB disconnect, device number 44
[ 1330.756985][ T5902] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[ 1331.021950][T16192] microsoft 0003:045E:07DA.0043: item fetching failed at offset 31/34
[ 1331.034530][T16192] microsoft 0003:045E:07DA.0043: parse failed
[ 1331.067085][T16192] microsoft 0003:045E:07DA.0043: probe with driver microsoft failed with error -22
[ 1331.223247][T16192] usb 2-1: USB disconnect, device number 27
[ 1331.360733][T25981] binder: 25980:25981 ioctl c0306201 2000000001c0 returned -22
[ 1331.474744][T25923] syz.0.5221 (25923): drop_caches: 1
[ 1331.641700][T25990] vivid-007: =================  START STATUS  =================
[ 1331.647716][T16185] usb 7-1: new full-speed USB device number 45 using dummy_hcd
[ 1331.657301][T25990] vivid-007: Enable Output Cropping: true
[ 1331.663689][T25990] vivid-007: Enable Output Composing: true
[ 1331.670068][T25990] vivid-007: Enable Output Scaler: true
[ 1331.675654][T25990] vivid-007: Tx RGB Quantization Range: Automatic
[ 1331.685680][T25990] vivid-007: Transmit Mode: HDMI
[ 1331.692196][T25990] vivid-007: Hotplug Present: 0x00000000
[ 1331.698511][T25990] vivid-007: RxSense Present: 0x00000000
[ 1331.705174][T25990] vivid-007: EDID Present: 0x00000000
[ 1331.714553][T25990] vivid-007: ==================  END STATUS  ==================
[ 1331.788229][T16185] usb 7-1: device descriptor read/64, error -71
[ 1332.031487][T16185] usb 7-1: new full-speed USB device number 46 using dummy_hcd
[ 1332.177861][T16185] usb 7-1: device descriptor read/64, error -71
[ 1332.288569][T16185] usb usb7-port1: attempt power cycle
[ 1332.387778][T14554] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1332.537893][T14554] usb 5-1: Using ep0 maxpacket: 32
[ 1332.554251][T14554] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[ 1332.564133][T14554] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1332.603524][T14554] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1332.618407][T26008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1332.630352][T14554] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1332.635935][T26008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1332.653293][T16185] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[ 1332.927908][T14554] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1332.935111][T16185] usb 7-1: device descriptor read/8, error -71
[ 1332.952750][T14554] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1332.988520][T14554] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1333.019412][T14554] usb 5-1: Product: syz
[ 1333.023632][T14554] usb 5-1: Manufacturer: syz
[ 1333.043839][T14554] usb 5-1: SerialNumber: syz
[ 1333.065393][T14554] usb 5-1: config 0 descriptor??
[ 1333.087473][T26011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1333.097585][T26011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1333.101273][T14554] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1333.168338][T14554] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1333.197776][T16185] usb 7-1: new full-speed USB device number 48 using dummy_hcd
[ 1333.218455][T16185] usb 7-1: device descriptor read/8, error -71
[ 1333.328545][T16185] usb usb7-port1: unable to enumerate USB device
[ 1333.907904][T16185] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1334.059195][T16185] usb 2-1: too many configurations: 78, using maximum allowed: 8
[ 1334.298638][T26035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1334.307891][T26035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1334.358589][T16185] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1334.367890][T16185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1334.421731][T16185] usb 2-1: Product: syz
[ 1334.441590][T16185] usb 2-1: Manufacturer: syz
[ 1334.471070][T16185] usb 2-1: SerialNumber: syz
[ 1334.507157][T16185] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1334.596743][ T6674] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1335.098714][T26022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1335.116241][T26022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1335.175095][T16192] usb 5-1: USB disconnect, device number 106
[ 1335.184601][T16192] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[ 1335.237744][T16191] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[ 1335.364143][T26050] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5253'.
[ 1335.381048][T16191] usb 7-1: device descriptor read/64, error -71
[ 1335.403821][T16192] usb 2-1: USB disconnect, device number 28
[ 1335.458754][T26054] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5254'.
[ 1335.476954][T26054] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5254'.
[ 1335.496445][T26054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5254'.
[ 1335.576937][T26059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5256'.
[ 1335.618175][T16191] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1335.689980][ T6674] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1335.697254][ T6674] ath9k_htc: Failed to initialize the device
[ 1335.705029][T16192] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1335.748758][ T5902] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1335.768225][T16191] usb 7-1: device descriptor read/64, error -71
[ 1335.878224][T16191] usb usb7-port1: attempt power cycle
[ 1335.897942][ T5902] usb 5-1: Using ep0 maxpacket: 32
[ 1335.905210][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1335.920788][ T5902] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[ 1335.949308][ T5902] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20
[ 1335.996492][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1336.020123][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1336.040353][ T5902] usb 5-1: SerialNumber: syz
[ 1336.051776][T26057] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1336.065941][ T5902] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[ 1336.237812][T16191] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1336.259148][T16191] usb 7-1: device descriptor read/8, error -71
[ 1336.268575][ T5902] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[ 1336.276251][ T6674] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[ 1336.280487][ T5902] usb 5-1: USB disconnect, device number 107
[ 1336.450134][ T6674] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1336.459039][ T6674] usb 2-1: not running at top speed; connect to a high speed hub
[ 1336.468032][ T6674] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1336.478533][ T6674] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1336.490952][ T6674] usb 2-1: string descriptor 0 read error: -22
[ 1336.497209][ T6674] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1336.507847][T16191] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1336.507846][ T6674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1336.528373][T16191] usb 7-1: device descriptor read/8, error -71
[ 1336.534589][ T6674] usb 2-1: 0:2 : does not exist
[ 1336.591787][T26068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1336.602072][T26068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1336.638679][T16191] usb usb7-port1: unable to enumerate USB device
[ 1337.603679][T26081] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1337.619325][T26084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1337.670653][T26084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1337.938073][ T6674] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1337.953217][ T6674] usb 2-1: Warning! Unlikely big volume range (=4294967294), cval->res is probably wrong.
[ 1337.982409][ T6674] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/20196/-8016
[ 1338.020307][ T6674] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1338.062123][ T6674] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[ 1338.134161][ T6674] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1338.197220][ T6674] usb 2-1: USB disconnect, device number 29
[ 1338.604678][T26097] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1338.636297][T26097] kvm: pic: level sensitive irq not supported
[ 1338.636690][T26097] kvm: pic: non byte read
[ 1338.687581][T26097] kvm: pic: level sensitive irq not supported
[ 1338.687852][T26097] kvm: pic: non byte read
[ 1338.699270][ T6674] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1338.859416][ T6674] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[ 1338.867451][ T6674] usb 5-1: config 1 has no interface number 0
[ 1338.874570][ T6674] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8
[ 1338.877992][ T5902] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1338.913225][ T6674] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid maxpacket 1495, setting to 1024
[ 1338.931809][T26104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1338.958498][ T6674] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[ 1338.976800][ T6674] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1339.020228][ T6674] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1339.037851][ T6674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.056200][ T6674] usb 5-1: Product: syz
[ 1339.068467][ T5902] usb 2-1: too many configurations: 78, using maximum allowed: 8
[ 1339.094059][ T6674] usb 5-1: Manufacturer: syz
[ 1339.096074][ T5902] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1339.104211][ T6674] usb 5-1: SerialNumber: syz
[ 1339.138460][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1339.163549][T26095] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1339.166911][ T5902] usb 2-1: Product: syz
[ 1339.193741][T26095] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1339.199135][ T5902] usb 2-1: Manufacturer: syz
[ 1339.214043][ T6674] usb 5-1: Error in usbnet_get_endpoints (-22)
[ 1339.215439][ T5902] usb 2-1: SerialNumber: syz
[ 1339.245997][ T5902] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1339.275791][T16192] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1339.393492][T26113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1339.405401][T26113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1339.786509][T26117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1339.806841][T26101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1339.816607][T26117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1339.826117][T26101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1340.065687][T26125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1340.090183][T26125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1340.100219][T26124] binder: 26115:26124 ioctl 400c620e 0 returned -14
[ 1340.141434][   T30] audit: type=1326 audit(1764918056.696:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26115 comm="syz.0.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1340.250572][   T30] audit: type=1326 audit(1764918056.696:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26115 comm="syz.0.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1340.334346][T16192] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1340.382868][   T30] audit: type=1326 audit(1764918056.696:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26115 comm="syz.0.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1340.445940][T16192] ath9k_htc: Failed to initialize the device
[ 1340.533369][ T6674] usb 2-1: USB disconnect, device number 30
[ 1340.579108][ T6674] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1340.596695][   T30] audit: type=1326 audit(1764918056.696:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26115 comm="syz.0.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1340.642470][   T30] audit: type=1326 audit(1764918056.696:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26115 comm="syz.0.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1340.670491][   T30] audit: type=1326 audit(1764918056.696:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26115 comm="syz.0.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1340.699341][   T30] audit: type=1326 audit(1764918056.696:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26115 comm="syz.0.5274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1341.357783][ T6674] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1341.437752][T16192] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[ 1341.485522][ T5902] usb 5-1: USB disconnect, device number 108
[ 1341.517828][ T6674] usb 2-1: Using ep0 maxpacket: 32
[ 1341.531043][ T6674] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 1341.539663][ T6674] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1341.580496][T16192] usb 7-1: device descriptor read/64, error -71
[ 1341.587793][ T6674] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1341.686351][ T6674] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1341.704024][ T6674] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1341.715474][ T6674] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1341.724914][ T6674] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1341.734058][ T6674] usb 2-1: Product: syz
[ 1341.738559][ T6674] usb 2-1: Manufacturer: syz
[ 1341.755836][ T6674] usb 2-1: SerialNumber: syz
[ 1341.795663][ T6674] usb 2-1: config 0 descriptor??
[ 1341.821526][ T6674] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1341.838078][T16192] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1341.847869][ T6674] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1341.978208][T16192] usb 7-1: device descriptor read/64, error -71
[ 1342.088854][T16192] usb usb7-port1: attempt power cycle
[ 1342.438053][T16192] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1342.458349][T16192] usb 7-1: device descriptor read/8, error -71
[ 1342.697911][T16192] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1342.728531][T16192] usb 7-1: device descriptor read/8, error -71
[ 1342.848167][T16192] usb usb7-port1: unable to enumerate USB device
[ 1343.111753][T26156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5283'.
[ 1343.261276][T26162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5285'.
[ 1343.295709][T26162] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5285'.
[ 1343.394309][T26166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1343.421541][T26166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1343.439913][T26166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1343.461649][T26166] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1343.477982][ T6674] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1343.512269][T26169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1343.523616][T26169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1343.657978][ T6674] usb 5-1: Using ep0 maxpacket: 32
[ 1343.665389][ T6674] usb 5-1: config 0 has an invalid interface number: 48 but max is 0
[ 1343.673949][ T6674] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[ 1343.684277][ T6674] usb 5-1: config 0 has no interface number 0
[ 1343.691287][ T6674] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[ 1343.703039][ T6674] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 1343.717718][ T6674] usb 5-1: config 0 interface 48 has no altsetting 0
[ 1343.726483][ T6674] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[ 1343.735851][ T6674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.744107][ T6674] usb 5-1: Product: syz
[ 1343.748333][ T6674] usb 5-1: Manufacturer: syz
[ 1343.752967][ T6674] usb 5-1: SerialNumber: syz
[ 1343.759806][ T6674] usb 5-1: config 0 descriptor??
[ 1343.972654][T26172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1343.981952][T26172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1344.003196][ T6674] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[ 1344.013983][ T6674] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[ 1344.021472][ T6674] gspca_pac7302 5-1:0.48: probe with driver gspca_pac7302 failed with error -71
[ 1344.050504][ T6674] usb 5-1: USB disconnect, device number 109
[ 1344.143226][T16192] usb 2-1: USB disconnect, device number 31
[ 1344.184067][T16192] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[ 1344.279487][T26184] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1344.294705][T26184] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5292'.
[ 1344.327234][T26188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5294'.
[ 1344.415509][ T6674] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1344.539123][T26200] program syz.3.5296 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1344.566221][T26200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1344.575627][T26200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1344.662399][T26202] fuse: Bad value for 'fd'
[ 1344.668866][ T6674] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[ 1344.677207][ T6674] usb 5-1: config 0 has no interface number 0
[ 1344.687494][ T6674] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1344.757708][T14554] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1344.787213][T26201] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5291'.
[ 1344.885094][ T6674] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1344.928000][T14554] usb 2-1: Using ep0 maxpacket: 16
[ 1344.938667][T14554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1345.122309][T14554] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[ 1345.135783][ T6674] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1345.146369][T14554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.154736][ T6674] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[ 1345.247319][T14554] usb 2-1: config 0 descriptor??
[ 1345.380704][ T6674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.477738][ T6674] usb 5-1: config 0 descriptor??
[ 1345.540030][ T6674] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input131
[ 1345.742709][T14554] aquacomputer_d5next 0003:0C70:F003.0044: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0
[ 1345.878753][T16192] usb 5-1: USB disconnect, device number 110
[ 1345.968554][ T5909] usb 2-1: USB disconnect, device number 32
[ 1346.163221][T26215] fido_id[26215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1346.857781][T14554] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1346.907859][ T6674] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1346.991059][T26238] loop5: detected capacity change from 0 to 7
[ 1346.998614][T26238] Dev loop5: unable to read RDB block 7
[ 1347.004213][T26238]  loop5: unable to read partition table
[ 1347.008061][T14554] usb 5-1: Using ep0 maxpacket: 32
[ 1347.015730][T26238] loop5: partition table beyond EOD, truncated
[ 1347.017329][T14554] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[ 1347.070009][T26238] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 1347.081018][ T6674] usb 7-1: too many configurations: 78, using maximum allowed: 8
[ 1347.151050][T14554] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1347.182077][ T6674] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1347.211627][T26241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5307'.
[ 1347.234642][ T6674] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1347.261156][T14554] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1347.273517][ T6674] usb 7-1: Product: syz
[ 1347.278147][ T6674] usb 7-1: Manufacturer: syz
[ 1347.282810][T14554] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1347.296691][ T6674] usb 7-1: SerialNumber: syz
[ 1347.304358][T14554] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1347.318278][ T6674] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1347.329436][T14554] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1347.338956][T14554] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1347.365742][T26245] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1347.374356][ T5909] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1347.381900][  T184] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1347.710580][T14554] usb 5-1: Product: syz
[ 1347.720946][T14554] usb 5-1: Manufacturer: syz
[ 1347.727846][ T5909] usb 2-1: Using ep0 maxpacket: 16
[ 1347.751794][ T5909] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[ 1347.767104][ T5909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5
[ 1347.778030][T14554] usb 5-1: SerialNumber: syz
[ 1347.821113][T14554] usb 5-1: config 0 descriptor??
[ 1347.821864][ T5909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1347.855471][T14554] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1347.866339][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1347.956922][T26231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1347.988556][T14554] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1347.988703][T26231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1348.035121][ T5909] usb 2-1: Product: syz
[ 1348.077757][ T5909] usb 2-1: Manufacturer: syz
[ 1348.108169][ T5909] usb 2-1: SerialNumber: syz
[ 1348.148256][ T5909] usb 2-1: config 0 descriptor??
[ 1348.497889][  T184] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 1348.505045][  T184] ath9k_htc: Failed to initialize the device
[ 1348.858596][ T5902] usb 7-1: USB disconnect, device number 57
[ 1348.872762][ T5902] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1349.272762][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5313'.
[ 1349.354766][T26262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5313'.
[ 1349.652423][ T5902] usb 5-1: USB disconnect, device number 111
[ 1349.864384][ T5902] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[ 1350.062618][ T5909] usb 2-1: 0:2 : does not exist
[ 1350.180090][ T5909] usb 2-1: USB disconnect, device number 33
[ 1350.334809][T12086] udevd[12086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1350.608049][T26281] pim6reg1: entered promiscuous mode
[ 1350.625882][T26281] pim6reg1: entered allmulticast mode
[ 1350.799054][T14554] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1350.989504][T14554] usb 5-1: config 0 has an invalid interface number: 187 but max is 0
[ 1351.016105][T14554] usb 5-1: config 0 has no interface number 0
[ 1351.040963][T14554] usb 5-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1351.090301][T14554] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e
[ 1351.114764][T14554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1351.227706][T14554] usb 5-1: Product: syz
[ 1351.230899][T26285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1351.231992][T14554] usb 5-1: Manufacturer: syz
[ 1351.255298][T14554] usb 5-1: SerialNumber: syz
[ 1351.265820][T26285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1351.288625][T14554] usb 5-1: config 0 descriptor??
[ 1351.294258][T26283] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1351.305673][T26285] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5319'.
[ 1351.484281][T26287] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5320'.
[ 1351.572809][T14554] usb 5-1: USB disconnect, device number 112
[ 1351.881668][T26294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5323'.
[ 1351.965814][T26299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1351.975494][T26299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1352.157783][ T5909] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1352.233906][T26305] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1352.308523][ T5909] usb 7-1: too many configurations: 78, using maximum allowed: 8
[ 1352.335659][ T5909] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1352.335679][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.335690][ T5909] usb 7-1: Product: syz
[ 1352.335699][ T5909] usb 7-1: Manufacturer: syz
[ 1352.335707][ T5909] usb 7-1: SerialNumber: syz
[ 1352.343030][ T5909] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1352.355996][ T5902] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1352.772040][T26296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1352.809102][T26296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1352.986922][T14554] usb 7-1: USB disconnect, device number 58
[ 1353.255229][T26337] loop5: detected capacity change from 0 to 7
[ 1353.275969][T12086] Dev loop5: unable to read RDB block 7
[ 1353.281976][T12086]  loop5: unable to read partition table
[ 1353.290326][T26339] netlink: 'syz.3.5339': attribute type 10 has an invalid length.
[ 1353.299603][T12086] loop5: partition table beyond EOD, truncated
[ 1353.310253][T26337] Dev loop5: unable to read RDB block 7
[ 1353.327906][T26337]  loop5: unable to read partition table
[ 1353.338351][T26337] loop5: partition table beyond EOD, truncated
[ 1353.341698][T26341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1353.358091][T26337] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 1353.387820][ T5902] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 1353.392399][T26341] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1353.405054][ T5902] ath9k_htc: Failed to initialize the device
[ 1353.421053][T26335] GUP no longer grows the stack in syz.1.5336 (26335): 200000005000-200000008000 (200000004000)
[ 1353.441325][T14554] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1353.453599][T26342] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1353.463591][T26346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1353.499046][T26342] netlink: 196472 bytes leftover after parsing attributes in process `syz.0.5340'.
[ 1353.520764][T26335] CPU: 1 UID: 0 PID: 26335 Comm: syz.1.5336 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1353.520800][T26335] Tainted: [L]=SOFTLOCKUP
[ 1353.520808][T26335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1353.520824][T26335] Call Trace:
[ 1353.520833][T26335]  <TASK>
[ 1353.520842][T26335]  dump_stack_lvl+0x189/0x250
[ 1353.520878][T26335]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1353.520904][T26335]  ? __pfx__printk+0x10/0x10
[ 1353.520939][T26335]  ? find_vma+0xe7/0x160
[ 1353.520980][T26335]  fixup_user_fault+0x661/0x720
[ 1353.521013][T26335]  fault_in_user_writeable+0x72/0xe0
[ 1353.521048][T26335]  futex_lock_pi+0x773/0xa90
[ 1353.521083][T26335]  ? __pfx_futex_lock_pi+0x10/0x10
[ 1353.521107][T26335]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1353.521165][T26335]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1353.521198][T26335]  ? __pfx_futex_wake+0x10/0x10
[ 1353.521221][T26335]  ? userfaultfd_unmap_complete+0x278/0x2d0
[ 1353.521251][T26335]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[ 1353.521282][T26335]  do_futex+0x292/0x420
[ 1353.521311][T26335]  ? __pfx_do_futex+0x10/0x10
[ 1353.521334][T26335]  ? __vm_munmap+0x2c1/0x380
[ 1353.521364][T26335]  __se_sys_futex+0x36f/0x400
[ 1353.521394][T26335]  ? __pfx___se_sys_futex+0x10/0x10
[ 1353.521424][T26335]  ? __x64_sys_futex+0x21/0xf0
[ 1353.521450][T26335]  do_syscall_64+0xfa/0xf80
[ 1353.521482][T26335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.521503][T26335]  ? clear_bhb_loop+0x60/0xb0
[ 1353.521530][T26335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.521551][T26335] RIP: 0033:0x7f680758f749
[ 1353.521571][T26335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1353.521609][T26335] RSP: 002b:00007f680844c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1353.521633][T26335] RAX: ffffffffffffffda RBX: 00007f68077e6090 RCX: 00007f680758f749
[ 1353.521649][T26335] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[ 1353.521665][T26335] RBP: 00007f6807613f91 R08: 0000000000000000 R09: 0000000000000000
[ 1353.521679][T26335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1353.521691][T26335] R13: 00007f68077e6128 R14: 00007f68077e6090 R15: 00007f680790fa28
[ 1353.521726][T26335]  </TASK>
[ 1353.522371][T26342] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1353.522603][T26346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1353.760559][T26342] netlink: 196472 bytes leftover after parsing attributes in process `syz.0.5340'.
[ 1353.771525][T26342] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1353.779469][T26342] netlink: 196472 bytes leftover after parsing attributes in process `syz.0.5340'.
[ 1353.789710][T26342] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1353.797563][T26342] netlink: 196472 bytes leftover after parsing attributes in process `syz.0.5340'.
[ 1353.807793][T26342] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1353.817182][T26342] netlink: 196472 bytes leftover after parsing attributes in process `syz.0.5340'.
[ 1353.829298][T26342] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1353.884814][T26342] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1353.914746][T26342] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1353.948200][T26342] netlink: 'syz.0.5340': attribute type 3 has an invalid length.
[ 1354.378277][T14554] usb 7-1: new full-speed USB device number 59 using dummy_hcd
[ 1354.544346][T14554] usb 7-1: not running at top speed; connect to a high speed hub
[ 1354.564030][T14554] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1354.564261][T26370] input: syz0 as /devices/virtual/input/input132
[ 1354.618695][T14554] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1354.633707][T14554] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1354.664212][T14554] usb 7-1: Product: ъ
[ 1354.679217][T14554] usb 7-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺
[ 1354.792230][T14554] usb 7-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔
[ 1354.890800][T26384] loop5: detected capacity change from 0 to 7
[ 1354.898536][T26384] Dev loop5: unable to read RDB block 7
[ 1354.904143][T26384]  loop5: unable to read partition table
[ 1354.913113][T26384] loop5: partition table beyond EOD, truncated
[ 1354.933033][T26384] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 1355.162480][T14554] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 59 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8
[ 1355.217980][T14554] usb 7-1: USB disconnect, device number 59
[ 1355.236217][T14554] usblp0: removed
[ 1355.244214][T26389] tipc: Started in network mode
[ 1355.266834][T26389] tipc: Node identity ac14142f, cluster identity 4711
[ 1355.298152][T26389] tipc: New replicast peer: 0.0.0.0
[ 1355.303987][T26389] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1355.627944][T16193] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1355.787853][T16193] usb 2-1: Using ep0 maxpacket: 8
[ 1355.802953][T16193] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[ 1355.916119][T16193] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1355.927767][T16193] usb 2-1: config 6 has no interface number 0
[ 1355.937074][T16193] usb 2-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1355.937150][T16193] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1355.944011][T16193] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1355.980799][T16193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1355.991308][T16193] usb 2-1: Product: syz
[ 1355.995708][T16193] usb 2-1: Manufacturer: syz
[ 1356.000881][T16193] usb 2-1: SerialNumber: syz
[ 1356.016086][T16193] hso 2-1:6.2: Failed to find INT IN ep
[ 1356.048154][T14554] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1356.219007][T14554] usb 5-1: Using ep0 maxpacket: 32
[ 1356.226700][T14554] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[ 1356.256489][T14554] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1356.284302][T14554] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1356.299937][T14554] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1356.317744][ T6674] tipc: Node number set to 2886997039
[ 1356.339265][T14554] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1356.361624][T14554] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1356.473035][T14554] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1356.524061][T14554] usb 5-1: Product: syz
[ 1356.594590][T26419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1356.603559][T26419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1356.646974][T26417] loop5: detected capacity change from 0 to 7
[ 1356.687351][T26417] Dev loop5: unable to read RDB block 7
[ 1356.713469][T26417]  loop5: unable to read partition table
[ 1356.760189][T26417] loop5: partition table beyond EOD, truncated
[ 1356.770875][T14554] usb 5-1: Manufacturer: syz
[ 1356.779150][T14554] usb 5-1: SerialNumber: syz
[ 1356.783872][T26417] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 1356.809527][T14554] usb 5-1: config 0 descriptor??
[ 1356.818118][T14554] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1356.831032][T14554] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1357.151163][T26426] vlan0: entered promiscuous mode
[ 1357.789408][T14554] usb 5-1: USB disconnect, device number 113
[ 1357.797260][T14554] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[ 1357.942966][T26428] __nla_validate_parse: 28 callbacks suppressed
[ 1357.942986][T26428] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5366'.
[ 1357.975446][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5368'.
[ 1358.021632][T26434] syz_tun: entered allmulticast mode
[ 1358.038913][T26434] syz_tun: left allmulticast mode
[ 1358.212293][T14554] usb 2-1: USB disconnect, device number 34
[ 1358.227793][ T6674] usb 7-1: new full-speed USB device number 60 using dummy_hcd
[ 1358.367826][ T6674] usb 7-1: device descriptor read/64, error -71
[ 1358.456036][T26454] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1358.607894][ T6674] usb 7-1: new full-speed USB device number 61 using dummy_hcd
[ 1358.677880][T14554] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1358.737768][ T6674] usb 7-1: device descriptor read/64, error -71
[ 1358.777756][  T184] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1358.832006][T14554] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 1358.841522][T14554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1358.850322][T14554] usb 2-1: Product: syz
[ 1358.855285][ T6674] usb usb7-port1: attempt power cycle
[ 1358.861683][T14554] usb 2-1: Manufacturer: syz
[ 1358.867090][T14554] usb 2-1: SerialNumber: syz
[ 1358.876034][T14554] usb 2-1: config 0 descriptor??
[ 1358.887305][T14554] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1358.893834][T14554] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1358.918044][  T184] usb 5-1: device descriptor read/64, error -71
[ 1359.023048][T26462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.036596][T26462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.087970][T14554] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 1359.101215][T14554] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1359.120386][T14554] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 1359.129341][T14554] usb 2-1: media controller created
[ 1359.146576][T14554] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1359.177825][  T184] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1359.207837][ T6674] usb 7-1: new full-speed USB device number 62 using dummy_hcd
[ 1359.225534][T14554] DVB: Unable to find symbol dib7000p_attach()
[ 1359.236368][T14554] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 1359.249253][ T6674] usb 7-1: device descriptor read/8, error -71
[ 1359.318634][  T184] usb 5-1: device descriptor read/64, error -71
[ 1359.410825][T14554] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1359.436972][T14554] Registered IR keymap rc-empty
[ 1359.442677][  T184] usb usb5-port1: attempt power cycle
[ 1359.458720][T14554] dvb-usb: could not initialize remote control.
[ 1359.466190][T14554] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 1359.507882][ T6674] usb 7-1: new full-speed USB device number 63 using dummy_hcd
[ 1359.531307][ T6674] usb 7-1: device descriptor read/8, error -71
[ 1359.577887][T16185] tipc: Node number set to 2886997007
[ 1359.628342][T26470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.643167][T26470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.658540][ T6674] usb usb7-port1: unable to enumerate USB device
[ 1359.663248][T26468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.690968][T26468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.807775][  T184] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1359.828585][  T184] usb 5-1: device descriptor read/8, error -71
[ 1360.181585][  T184] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1360.218558][  T184] usb 5-1: device descriptor read/8, error -71
[ 1360.348285][  T184] usb usb5-port1: unable to enumerate USB device
[ 1360.819068][T26477] binder: 26474:26477 ioctl c0285628 2000000004c0 returned -22
[ 1360.820349][T26477] binder: BINDER_SET_CONTEXT_MGR already set
[ 1360.820364][T26477] binder: 26474:26477 ioctl 4018620d 2000000002c0 returned -16
[ 1360.821751][T26477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1360.822496][T26477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1361.389596][T14554] usb 2-1: USB disconnect, device number 35
[ 1361.646925][T14554] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 1361.860446][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.867203][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.003521][T26498] validate_nla: 24 callbacks suppressed
[ 1362.003540][T26498] netlink: 'syz.6.5389': attribute type 5 has an invalid length.
[ 1362.035926][T26498] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5389'.
[ 1362.077854][T14554] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1362.228498][T14554] usb 2-1: too many configurations: 78, using maximum allowed: 8
[ 1362.247386][T14554] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1362.262159][T14554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1362.279400][T14554] usb 2-1: Product: syz
[ 1362.292716][T14554] usb 2-1: Manufacturer: syz
[ 1362.297849][T14554] usb 2-1: SerialNumber: syz
[ 1362.312369][T14554] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1362.370794][ T6674] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1362.428109][  T184] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1362.597832][  T184] usb 7-1: Using ep0 maxpacket: 16
[ 1362.613011][  T184] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1362.622798][  T184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1362.634976][  T184] usb 7-1: Product: syz
[ 1362.642996][  T184] usb 7-1: Manufacturer: syz
[ 1362.653809][  T184] usb 7-1: SerialNumber: syz
[ 1362.667274][  T184] usb 7-1: config 0 descriptor??
[ 1362.808260][T16185] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1362.836347][T26493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1362.852576][T26493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1362.967767][T16185] usb 5-1: Using ep0 maxpacket: 16
[ 1362.975351][T16185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1363.002949][T16185] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1363.024097][T16185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1363.068161][T16185] usb 5-1: Product: syz
[ 1363.080728][T16185] usb 5-1: Manufacturer: syz
[ 1363.097292][  T184] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1363.110904][T16185] usb 5-1: SerialNumber: syz
[ 1363.131973][  T184] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1363.143526][T16185] usb 5-1: config 0 descriptor??
[ 1363.174590][T16185] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1363.186266][  T184] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1363.200706][  T184] usb 7-1: media controller created
[ 1363.206020][T16185] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1363.221437][T16193] usb 2-1: USB disconnect, device number 36
[ 1363.261416][  T184] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1363.349689][  T184] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1363.364368][  T184] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1363.372881][  T184] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1363.394581][  T184] usb 7-1: USB disconnect, device number 64
[ 1363.449605][ T6674] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1363.475645][ T6674] ath9k_htc: Failed to initialize the device
[ 1363.491348][T16193] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1363.512788][  T184] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1363.764415][T16185] em28xx 5-1:0.0: unknown em28xx chip ID (104)
[ 1363.968811][T26540] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1363.993589][T26540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1364.023372][T26540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1364.189167][T26553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5405'.
[ 1364.238886][T26508] binder: 26507:26508 unknown command 0
[ 1364.244486][T26508] binder: 26507:26508 ioctl c0306201 200000000080 returned -22
[ 1364.259668][T26552] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1364.360841][T26556] macvlan1: entered promiscuous mode
[ 1364.371603][T26556] macvlan1: left promiscuous mode
[ 1364.478653][T16185] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1364.490144][T16185] em28xx 5-1:0.0: board has no eeprom
[ 1364.799103][T16185] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1364.823025][T16185] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1364.839125][ T6674] em28xx 5-1:0.0: Binding DVB extension
[ 1365.003911][T26565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1365.023862][T26565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1365.083718][T26565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1365.089198][  T184] usb 5-1: USB disconnect, device number 118
[ 1365.096376][T26565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1365.101163][ T6674] em28xx 5-1:0.0: Registering input extension
[ 1365.125227][  T184] em28xx 5-1:0.0: Disconnecting em28xx
[ 1365.133457][  T184] em28xx 5-1:0.0: Closing input extension
[ 1365.156292][  T184] em28xx 5-1:0.0: Freeing device
[ 1365.549958][T26577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5414'.
[ 1365.832222][T26587] loop9: detected capacity change from 0 to 7
[ 1365.858494][T26587] Dev loop9: unable to read RDB block 7
[ 1365.864115][T26587]  loop9: unable to read partition table
[ 1365.874150][T26587] loop9: partition table beyond EOD, truncated
[ 1365.881879][T26587] loop_reread_partitions: partition scan of loop9 (�被x�������� ) failed (rc=-5)
[ 1366.009389][T26593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1366.019827][T26593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1366.417816][ T6674] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 1366.569023][ T6674] usb 7-1: Using ep0 maxpacket: 8
[ 1366.576407][ T6674] usb 7-1: config 6 has an invalid interface number: 2 but max is 0
[ 1366.595133][ T6674] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1366.615519][ T6674] usb 7-1: config 6 has no interface number 0
[ 1366.624666][ T6674] usb 7-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1366.636660][ T6674] usb 7-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1366.664539][ T6674] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1366.674789][ T6674] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1366.683302][ T6674] usb 7-1: Product: syz
[ 1366.688652][ T6674] usb 7-1: Manufacturer: syz
[ 1366.693289][ T6674] usb 7-1: SerialNumber: syz
[ 1366.707879][  T184] usb 5-1: new full-speed USB device number 119 using dummy_hcd
[ 1366.727109][ T6674] hso 7-1:6.2: Failed to find INT IN ep
[ 1366.847826][  T184] usb 5-1: device descriptor read/64, error -71
[ 1367.097969][  T184] usb 5-1: new full-speed USB device number 120 using dummy_hcd
[ 1367.248603][  T184] usb 5-1: device descriptor read/64, error -71
[ 1367.293323][T26553] syz.1.5405 (26553) used greatest stack depth: 18080 bytes left
[ 1367.360034][T26615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1367.368181][  T184] usb usb5-port1: attempt power cycle
[ 1367.717757][  T184] usb 5-1: new full-speed USB device number 121 using dummy_hcd
[ 1367.717854][T26620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1367.763109][  T184] usb 5-1: device descriptor read/8, error -71
[ 1367.841986][T26620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1367.949819][T26620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1367.994514][T26620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1368.037988][  T184] usb 5-1: new full-speed USB device number 122 using dummy_hcd
[ 1368.062226][  T184] usb 5-1: device descriptor read/8, error -71
[ 1368.178150][  T184] usb usb5-port1: unable to enumerate USB device
[ 1368.277749][ T6674] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1368.394496][T26637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5435'.
[ 1368.430115][ T6674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1368.444132][ T6674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1368.460335][ T6674] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1368.460614][T26639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1368.473824][ T6674] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1368.483649][T26639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1368.492558][ T6674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.516403][ T6674] usb 2-1: config 0 descriptor??
[ 1368.525807][T26628] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22
[ 1368.852118][T26643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1368.861301][T26643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1368.874577][T26643] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1368.943016][ T6674] plantronics 0003:047F:FFFF.0045: reserved main item tag 0xd
[ 1368.956310][ T6674] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1369.097410][T26646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1369.106442][T26646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1369.274564][ T5902] usb 7-1: USB disconnect, device number 65
[ 1369.434813][T26653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1369.488154][T26653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1369.518572][T26653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1369.560755][T26653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1369.808031][ T6674] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1369.963650][ T6674] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1370.001481][ T6674] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1370.011019][  T184] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1370.035625][ T6674] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1370.080018][ T6674] usb 7-1: config 0 descriptor??
[ 1370.177782][  T184] usb 5-1: Using ep0 maxpacket: 8
[ 1370.187344][  T184] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1370.212922][  T184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1370.244724][  T184] usb 5-1: Product: syz
[ 1370.264943][  T184] usb 5-1: Manufacturer: syz
[ 1370.282030][  T184] usb 5-1: SerialNumber: syz
[ 1370.330415][  T184] usb 5-1: config 0 descriptor??
[ 1370.466991][T26670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5443'.
[ 1370.550956][  T184] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1371.072094][T16185] usb 2-1: USB disconnect, device number 37
[ 1371.552020][T26687] kAFS: unable to lookup cell '(,'
[ 1371.613170][T26687] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1371.718041][T16185] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1371.882172][T16185] usb 2-1: Using ep0 maxpacket: 32
[ 1371.921866][T16185] usb 2-1: config 1 has an invalid interface number: 233 but max is 0
[ 1371.930405][T16185] usb 2-1: config 1 has no interface number 0
[ 1371.942029][T16185] usb 2-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8
[ 1372.119499][  T184] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1372.145125][T26693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1372.166386][  T184] usb 5-1: USB disconnect, device number 123
[ 1372.210748][T26693] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1372.249156][T16185] usb 2-1: config 1 interface 233 has no altsetting 0
[ 1372.288422][T16185] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac
[ 1372.301356][T16185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1372.316018][T16185] usb 2-1: Product: syz
[ 1372.328253][T16185] usb 2-1: Manufacturer: syz
[ 1372.333740][T16185] usb 2-1: SerialNumber: syz
[ 1372.348294][T26680] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1372.944044][T16185] imon_raw 2-1:1.233: IR endpoint missing
[ 1372.963882][T16185] usb 2-1: USB disconnect, device number 38
[ 1372.982478][T26699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1373.011903][T26698] macsec1: entered promiscuous mode
[ 1373.024706][T26698] bridge0: entered promiscuous mode
[ 1373.056919][T26699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1373.072322][T26703] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 1373.085602][T26703] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1373.350755][ T6674] usbhid 7-1:0.0: can't add hid device: -71
[ 1373.356878][ T6674] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1373.377503][ T6674] usb 7-1: USB disconnect, device number 66
[ 1373.408370][T16193] usb 5-1: new low-speed USB device number 124 using dummy_hcd
[ 1373.597089][T16193] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2
[ 1373.654261][T16193] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30463, setting to 8
[ 1373.665845][T16193] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1373.675113][T16193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1373.694180][T26703] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1373.887741][T16185] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1374.001864][T26718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1374.022260][T26718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1374.088137][T16185] usb 2-1: Using ep0 maxpacket: 32
[ 1374.096097][T16185] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1374.111413][T26703] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1374.123896][T26703] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5451'.
[ 1374.186858][T16185] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1374.197010][T16185] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1374.233415][T16185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1374.337211][T16185] usb 2-1: config 0 descriptor??
[ 1374.732261][T26724] netlink: 380 bytes leftover after parsing attributes in process `syz.0.5459'.
[ 1375.214691][T16185] corsair-cpro 0003:1B1C:0C10.0046: unknown main item tag 0x0
[ 1375.243429][T16185] corsair-cpro 0003:1B1C:0C10.0046: unknown main item tag 0x0
[ 1375.282618][T16185] corsair-cpro 0003:1B1C:0C10.0046: unknown main item tag 0x0
[ 1375.344228][T16185] corsair-cpro 0003:1B1C:0C10.0046: unknown main item tag 0x0
[ 1375.361403][T16185] corsair-cpro 0003:1B1C:0C10.0046: unknown main item tag 0x0
[ 1375.391252][T16185] corsair-cpro 0003:1B1C:0C10.0046: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[ 1375.804533][T16185] corsair-cpro 0003:1B1C:0C10.0046: probe with driver corsair-cpro failed with error -110
[ 1375.859256][T16185] usb 2-1: USB disconnect, device number 39
[ 1377.428950][ T5902] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[ 1377.455339][T16193] usb 5-1: string descriptor 0 read error: -71
[ 1377.564115][T16193] usb 5-1: USB disconnect, device number 124
[ 1377.658046][ T5902] usb 7-1: Using ep0 maxpacket: 16
[ 1377.672331][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1377.700834][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1377.731046][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1377.774465][ T5902] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 1377.804525][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.834310][ T5902] usb 7-1: config 0 descriptor??
[ 1377.856328][ T5902] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input136
[ 1377.888704][ T5192] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1377.906669][ T5192] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1378.018563][ T5192] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1378.268117][T12306] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1378.343144][ T5192] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1378.779357][ T5192] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1378.850496][T26779] netlink: 'syz.6.5464': attribute type 13 has an invalid length.
[ 1378.877976][T26779] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5464'.
[ 1378.930852][T26750] dummy0: entered allmulticast mode
[ 1378.943749][ T5192] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 1379.676623][T16185] usb 7-1: USB disconnect, device number 67
[ 1379.717464][T26788] tipc: Started in network mode
[ 1379.734998][T26788] tipc: Node identity f66cdab00c1, cluster identity 4711
[ 1379.755690][T26788] tipc: Enabled bearer <eth:xfrm0>, priority 10
[ 1380.318728][T26774] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1380.617758][ T5902] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1380.752688][T26798] nvme_fabrics: missing parameter 'transport=%s'
[ 1380.765610][T26798] nvme_fabrics: missing parameter 'nqn=%s'
[ 1380.778211][ T5902] usb 2-1: Using ep0 maxpacket: 16
[ 1380.786408][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1380.803078][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1380.846419][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1380.863072][ T5902] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[ 1380.864161][T26806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1380.883684][  T184] tipc: Node number set to 4202486448
[ 1380.904212][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1380.967892][T26808] ucma_write: process 1697 (syz.4.5477) changed security contexts after opening file descriptor, this is not allowed.
[ 1381.014501][ T5902] usb 2-1: config 0 descriptor??
[ 1381.035582][T26806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1381.236417][ T5902] hid-picolcd 0003:04D8:F002.0047: unknown main item tag 0x0
[ 1381.248552][ T5902] hid-picolcd 0003:04D8:F002.0047: unknown main item tag 0x0
[ 1381.257869][ T5902] hid-picolcd 0003:04D8:F002.0047: unknown main item tag 0x0
[ 1381.291324][ T5902] hid-picolcd 0003:04D8:F002.0047: unknown main item tag 0x0
[ 1381.306387][ T5902] hid-picolcd 0003:04D8:F002.0047: unknown main item tag 0x0
[ 1381.407952][ T5902] hid-picolcd 0003:04D8:F002.0047: No report with id 0xf3 found
[ 1381.420520][ T5902] hid-picolcd 0003:04D8:F002.0047: No report with id 0xf4 found
[ 1381.457902][  T184] usb 7-1: new full-speed USB device number 68 using dummy_hcd
[ 1381.470461][ T5902] usb 2-1: USB disconnect, device number 40
[ 1381.616542][T26806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1381.641763][  T184] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[ 1381.658540][  T184] usb 7-1: config 0 has no interface number 0
[ 1381.666694][  T184] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4
[ 1381.677484][  T184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1381.695290][  T184] usb 7-1: Product: syz
[ 1381.705403][  T184] usb 7-1: Manufacturer: syz
[ 1381.730472][  T184] usb 7-1: SerialNumber: syz
[ 1381.742339][  T184] usb 7-1: config 0 descriptor??
[ 1381.777205][T26816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1381.781835][T26806] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1381.798304][T26810] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22
[ 1381.826150][T26816] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1382.178282][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1382.199001][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1382.374158][T26822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5482'.
[ 1382.419268][T26831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1382.430150][T26831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1382.747729][ T5902] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1382.857513][T26835] kvm: kvm [26834]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0
[ 1382.900304][ T5902] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1382.911776][ T5902] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1382.922620][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1382.933899][ T5902] usb 2-1: config 0 descriptor??
[ 1382.962444][ T5902] pwc: Askey VC010 type 2 USB webcam detected.
[ 1383.534003][T26857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1383.548703][T26857] syzkaller0: entered promiscuous mode
[ 1383.556322][T26857] syzkaller0: entered allmulticast mode
[ 1383.629621][ T5902] pwc: recv_control_msg error -71 req 02 val 2700
[ 1383.648326][ T5902] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1383.678218][ T5902] pwc: recv_control_msg error -71 req 04 val 1000
[ 1383.687331][T26856] tipc: Resetting bearer <eth:syzkaller0>
[ 1383.708619][ T5902] pwc: recv_control_msg error -71 req 04 val 1300
[ 1383.717822][T16185] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1383.750037][ T5902] pwc: recv_control_msg error -71 req 04 val 1400
[ 1383.762992][ T5902] pwc: recv_control_msg error -71 req 02 val 2000
[ 1383.772833][T26856] tipc: Disabling bearer <eth:syzkaller0>
[ 1383.784615][ T5902] pwc: recv_control_msg error -71 req 02 val 2100
[ 1383.799710][ T5902] pwc: recv_control_msg error -71 req 04 val 1500
[ 1383.811970][ T5902] pwc: recv_control_msg error -71 req 02 val 2500
[ 1383.823600][ T5902] pwc: recv_control_msg error -71 req 02 val 2400
[ 1383.848329][ T5902] pwc: recv_control_msg error -71 req 02 val 2600
[ 1383.919895][ T5902] pwc: recv_control_msg error -71 req 02 val 2900
[ 1383.927507][T16185] usb 5-1: config 0 has an invalid interface number: 99 but max is 0
[ 1383.927945][ T5902] pwc: recv_control_msg error -71 req 02 val 2800
[ 1383.977884][T16185] usb 5-1: config 0 has no interface number 0
[ 1384.037047][T16185] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[ 1384.049316][T16185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.053947][ T5902] pwc: recv_control_msg error -71 req 04 val 1100
[ 1384.062710][T16185] usb 5-1: Product: syz
[ 1384.070764][T16185] usb 5-1: Manufacturer: syz
[ 1384.075415][T16185] usb 5-1: SerialNumber: syz
[ 1384.100536][  T184] asix 7-1:0.251: probe with driver asix failed with error -71
[ 1384.117882][T16185] usb 5-1: config 0 descriptor??
[ 1384.148400][ T5902] pwc: recv_control_msg error -71 req 04 val 1200
[ 1384.154258][T16185] peak_usb 5-1:0.99: probe with driver peak_usb failed with error 99
[ 1384.167511][  T184] usb 7-1: USB disconnect, device number 68
[ 1384.229608][ T5902] pwc: Registered as video103.
[ 1384.290146][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input137
[ 1384.415983][ T5902] usb 2-1: USB disconnect, device number 41
[ 1384.660304][T26867] loop5: detected capacity change from 0 to 7
[ 1384.668887][T26867] Dev loop5: unable to read RDB block 7
[ 1384.674619][T26867]  loop5: unable to read partition table
[ 1384.683096][T26867] loop5: partition table beyond EOD, truncated
[ 1384.698461][T26867] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 1384.727828][  T184] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[ 1384.853266][T26871] netlink: 'syz.0.5497': attribute type 3 has an invalid length.
[ 1384.920028][  T184] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1384.959719][  T184] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1384.992953][  T184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1385.011238][  T184] usb 7-1: Product: syz
[ 1385.019856][  T184] usb 7-1: Manufacturer: syz
[ 1385.026890][  T184] usb 7-1: SerialNumber: syz
[ 1385.056289][  T184] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1385.073628][T26880] dvmrp0: entered allmulticast mode
[ 1385.228224][T26884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5503'.
[ 1385.360776][  T184] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1385.393580][  T184] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[ 1385.417841][  T184] usb 7-1: media controller created
[ 1385.470965][  T184] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1385.492221][T26892] vivid-000: disconnect
[ 1385.612218][  T184] usb 7-1: USB disconnect, device number 69
[ 1385.957888][  T184] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[ 1386.049069][T26883] vivid-000: reconnect
[ 1386.169747][  T184] usb 7-1: too many configurations: 78, using maximum allowed: 8
[ 1386.285824][T16185] usb 5-1: USB disconnect, device number 125
[ 1386.409118][  T184] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1386.454388][  T184] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1386.483923][  T184] usb 7-1: Product: syz
[ 1386.497797][  T184] usb 7-1: Manufacturer: syz
[ 1386.513896][  T184] usb 7-1: SerialNumber: syz
[ 1386.555844][  T184] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1386.611453][ T6674] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1387.059590][T26895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1387.084029][T26895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1387.346783][T26919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5508'.
[ 1387.369366][T26926] loop5: detected capacity change from 0 to 7
[ 1387.393583][T26926] Dev loop5: unable to read RDB block 7
[ 1387.407149][T26926]  loop5: unable to read partition table
[ 1387.455543][T26926] loop5: partition table beyond EOD, truncated
[ 1387.467847][T26926] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 1387.692636][ T6674] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[ 1387.733583][T26928] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[ 1387.743306][  T184] usb 7-1: USB disconnect, device number 70
[ 1387.753075][ T6674] ath9k_htc: Failed to initialize the device
[ 1387.763672][  T184] usb 7-1: ath9k_htc: USB layer deinitialized
[ 1388.722871][T26946] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1388.737979][  T184] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1388.898412][  T184] usb 2-1: Using ep0 maxpacket: 32
[ 1388.916375][  T184] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1388.932086][  T184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1388.947745][ T6674] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1389.015376][  T184] usb 2-1: config 0 descriptor??
[ 1389.032364][  T184] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1389.183074][ T6674] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1389.204830][ T6674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1389.234347][ T6674] usb 5-1: Product: syz
[ 1389.245731][ T6674] usb 5-1: Manufacturer: syz
[ 1389.257605][ T6674] usb 5-1: SerialNumber: syz
[ 1389.277227][ T6674] usb 5-1: config 0 descriptor??
[ 1389.441279][  T184] gspca_nw80x: reg_w err -71
[ 1389.457526][  T184] nw80x 2-1:0.0: probe with driver nw80x failed with error -71
[ 1389.552292][ T6674] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO
[ 1389.561057][  T184] usb 2-1: USB disconnect, device number 42
[ 1389.571408][ T6674] f81604 5-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO
[ 1389.598962][ T6674] f81604 5-1:0.0: probe with driver f81604 failed with error -121
[ 1389.772985][T26948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5517'.
[ 1389.816555][  T184] usb 5-1: USB disconnect, device number 126
[ 1390.118146][ T5902] usb 7-1: new full-speed USB device number 71 using dummy_hcd
[ 1390.268047][ T5902] usb 7-1: device descriptor read/64, error -71
[ 1390.440859][T26979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1390.476532][T26979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1390.507736][ T5902] usb 7-1: new full-speed USB device number 72 using dummy_hcd
[ 1390.613299][T26979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1390.748032][ T5902] usb 7-1: device descriptor read/64, error -71
[ 1390.748580][T26979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1390.878075][ T5902] usb usb7-port1: attempt power cycle
[ 1391.294658][ T5902] usb 7-1: new full-speed USB device number 73 using dummy_hcd
[ 1391.358460][ T5902] usb 7-1: device descriptor read/8, error -71
[ 1391.827885][ T5902] usb 7-1: new full-speed USB device number 74 using dummy_hcd
[ 1391.848626][ T5902] usb 7-1: device descriptor read/8, error -71
[ 1391.973406][ T5902] usb usb7-port1: unable to enumerate USB device
[ 1392.003774][   T30] audit: type=1326 audit(1764918108.566:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1392.052476][   T30] audit: type=1326 audit(1764918108.566:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1392.157847][   T30] audit: type=1326 audit(1764918108.566:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1392.200907][   T30] audit: type=1326 audit(1764918108.566:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1392.421736][   T30] audit: type=1326 audit(1764918108.566:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1392.614892][   T30] audit: type=1326 audit(1764918108.566:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1392.638239][   T30] audit: type=1326 audit(1764918108.566:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1392.661723][   T30] audit: type=1326 audit(1764918108.566:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1392.684423][   T30] audit: type=1326 audit(1764918108.566:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1392.707264][   T30] audit: type=1326 audit(1764918108.566:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.0.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fad6bb8f749 code=0x7ffc0000
[ 1393.123868][T27005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5531'.
[ 1393.175788][T27013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5533'.
[ 1393.761981][T27038] netlink: 'syz.0.5540': attribute type 1 has an invalid length.
[ 1393.810250][T27041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1393.825538][T27041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1393.908028][ T5902] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1394.107102][ T5902] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1394.116426][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1394.140784][ T5902] usb 5-1: Product: syz
[ 1394.152427][ T5902] usb 5-1: Manufacturer: syz
[ 1394.163740][ T5902] usb 5-1: SerialNumber: syz
[ 1394.868042][ T5902] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1394.887710][ T5902] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1394.898323][ T5902] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1394.916461][ T5902] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32
[ 1395.481134][  T184] usb 5-1: USB disconnect, device number 127
[ 1397.519424][ T5902] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1397.688497][ T5902] usb 2-1: Using ep0 maxpacket: 16
[ 1397.704698][ T5902] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[ 1397.733853][ T5902] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5
[ 1397.787609][ T5902] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1397.870465][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.952640][ T5902] usb 2-1: Product: syz
[ 1397.956849][ T5902] usb 2-1: Manufacturer: syz
[ 1398.057953][ T5902] usb 2-1: SerialNumber: syz
[ 1398.059690][T27106] fuse: Bad value for 'fd'
[ 1398.099284][ T5902] usb 2-1: config 0 descriptor??
[ 1398.497823][ T5909] usb 7-1: new high-speed USB device number 75 using dummy_hcd
[ 1398.717758][ T5909] usb 7-1: Using ep0 maxpacket: 8
[ 1398.752747][ T5909] usb 7-1: config 6 has an invalid interface number: 2 but max is 0
[ 1398.816150][T27120] loop5: detected capacity change from 0 to 7
[ 1398.849602][ T5909] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1398.879111][ T5909] usb 7-1: config 6 has no interface number 0
[ 1398.892067][T27120] Dev loop5: unable to read RDB block 7
[ 1398.921920][T27120]  loop5: unable to read partition table
[ 1398.949529][T27120] loop5: partition table beyond EOD, truncated
[ 1399.061897][ T5909] usb 7-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1399.095635][T27120] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 1399.143403][ T5909] usb 7-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1399.224659][ T5909] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1399.234198][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.263124][ T5909] usb 7-1: Product: syz
[ 1399.279052][ T5909] usb 7-1: Manufacturer: syz
[ 1399.284591][ T5909] usb 7-1: SerialNumber: syz
[ 1399.302575][ T5909] hso 7-1:6.2: Failed to find INT IN ep
[ 1399.864546][T27127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1399.900952][T27127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1399.910309][T27129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1399.936362][T27129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1400.397027][ T5902] usb 2-1: 0:2 : does not exist
[ 1400.435539][ T5902] usb 2-1: USB disconnect, device number 43
[ 1400.534802][T12086] udevd[12086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1400.571615][T27135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1400.699543][T27140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1400.759847][T27140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1400.991723][T27154] fuse: Bad value for 'fd'
[ 1401.000124][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1401.104030][  T184] usb 7-1: USB disconnect, device number 75
[ 1401.130948][T27162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1401.140401][ T5902] usb 5-1: device descriptor read/64, error -71
[ 1401.154232][T27162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1401.381943][T27167] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5575'.
[ 1401.396721][T16193] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1401.404716][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1401.538273][ T5902] usb 5-1: device descriptor read/64, error -71
[ 1401.570470][T16193] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98
[ 1401.581371][T16193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1401.592210][T16193] usb 2-1: config 0 descriptor??
[ 1401.600974][T16193] pwc: Creative Labs Webcam 5 detected.
[ 1401.644095][T27174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1401.653338][ T5902] usb usb5-port1: attempt power cycle
[ 1401.669751][T27174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1401.800387][T16193] pwc: Failed to set LED on/off time (-71)
[ 1401.808490][T16193] pwc: send_video_command error -71
[ 1401.815364][T16193] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1401.823265][T16193] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[ 1401.853725][T16193] usb 2-1: USB disconnect, device number 44
[ 1401.893330][T27176] kvm: user requested TSC rate below hardware speed
[ 1402.008137][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1402.077421][ T5902] usb 5-1: device descriptor read/8, error -71
[ 1402.398690][T27179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1402.410895][ T5902] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1402.421619][T27179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1402.438632][ T5902] usb 5-1: device descriptor read/8, error -71
[ 1402.560241][ T5902] usb usb5-port1: unable to enumerate USB device
[ 1402.711841][T27193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5581'.
[ 1402.804326][ T5902] usb 7-1: new high-speed USB device number 76 using dummy_hcd
[ 1402.987861][ T5902] usb 7-1: Using ep0 maxpacket: 32
[ 1403.028993][ T5902] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[ 1403.043574][ T5902] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1403.066001][ T5902] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1403.083766][T27197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5586'.
[ 1403.096868][T27198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5586'.
[ 1403.163640][ T5902] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1403.184236][T27204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1403.218523][ T5902] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1403.219673][T27204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1403.235230][ T5902] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1403.255895][ T5902] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1403.273712][ T5902] usb 7-1: Product: syz
[ 1403.287559][ T5902] usb 7-1: Manufacturer: syz
[ 1403.428201][ T5902] usb 7-1: SerialNumber: syz
[ 1403.445753][ T5902] usb 7-1: config 0 descriptor??
[ 1403.461222][ T5902] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1403.484343][ T5902] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1403.494459][T27207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1403.510729][T27207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1404.022049][T27217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1404.033833][T27217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1404.207951][  T184] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1404.337882][  T184] usb 5-1: device descriptor read/64, error -71
[ 1404.420262][ T6674] usb 7-1: USB disconnect, device number 76
[ 1404.439302][ T6674] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[ 1404.590611][  T184] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1404.798148][  T184] usb 5-1: device descriptor read/64, error -71
[ 1404.898410][T27240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1404.906982][T27240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1404.928097][  T184] usb usb5-port1: attempt power cycle
[ 1405.043903][T27240] random: crng reseeded on system resumption
[ 1405.449792][  T184] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1405.490550][  T184] usb 5-1: device descriptor read/8, error -71
[ 1405.777759][  T184] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1405.798396][  T184] usb 5-1: device descriptor read/8, error -71
[ 1405.908195][  T184] usb usb5-port1: unable to enumerate USB device
[ 1406.121323][T27261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1406.171998][T27261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1406.290126][T27266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1406.324602][T27266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1406.497772][ T5902] usb 7-1: new high-speed USB device number 77 using dummy_hcd
[ 1406.647879][ T5902] usb 7-1: Using ep0 maxpacket: 32
[ 1406.655552][ T5902] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[ 1406.664595][ T5902] usb 7-1: config 0 has no interface number 0
[ 1406.670997][ T5902] usb 7-1: config 0 interface 184 has no altsetting 0
[ 1406.682942][ T5902] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1406.693032][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.701436][ T5902] usb 7-1: Product: syz
[ 1406.707126][ T5902] usb 7-1: Manufacturer: syz
[ 1406.712529][ T5902] usb 7-1: SerialNumber: syz
[ 1406.735619][ T5902] usb 7-1: config 0 descriptor??
[ 1406.751836][ T5902] smsc75xx v1.0.0
[ 1407.088830][T27276] fuse: Bad value for 'fd'
[ 1407.157214][T27278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1407.206220][T27278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1407.354196][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1407.365428][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1407.440901][  T184] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1407.728190][  T184] usb 5-1: Using ep0 maxpacket: 16
[ 1407.752526][  T184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1407.829272][  T184] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1407.870229][  T184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1407.883680][  T184] usb 5-1: Product: syz
[ 1407.893235][  T184] usb 5-1: Manufacturer: syz
[ 1407.904911][  T184] usb 5-1: SerialNumber: syz
[ 1407.926209][  T184] usb 5-1: config 0 descriptor??
[ 1407.950843][  T184] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1407.975608][  T184] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1408.250392][T27263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1408.259962][T27263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1408.270768][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1408.281882][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[ 1408.293712][ T5902] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[ 1408.308323][ T5902] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61
[ 1408.502853][T27263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1408.513551][T27263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1408.560495][  T184] em28xx 5-1:0.0: unknown em28xx chip ID (104)
[ 1409.176197][  T184] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1409.184814][  T184] em28xx 5-1:0.0: board has no eeprom
[ 1409.547843][  T184] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1409.555899][  T184] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1409.561676][ T6674] em28xx 5-1:0.0: Binding DVB extension
[ 1409.647878][ T5902] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1409.672750][T27309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1409.681518][T27280] em28xx 5-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1)
[ 1409.692406][T27309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1409.709481][T27309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1409.718623][T27309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1409.809127][ T5902] usb 2-1: too many configurations: 78, using maximum allowed: 8
[ 1409.836362][ T5902] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1409.845983][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.856662][ T5902] usb 2-1: Product: syz
[ 1409.861546][ T5902] usb 2-1: Manufacturer: syz
[ 1409.865175][  T184] usb 5-1: USB disconnect, device number 10
[ 1409.866243][ T5902] usb 2-1: SerialNumber: syz
[ 1409.888909][  T184] em28xx 5-1:0.0: Disconnecting em28xx
[ 1409.891271][ T5902] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1409.920465][T16193] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1409.958788][ T6674] em28xx 5-1:0.0: Registering input extension
[ 1409.989856][  T184] em28xx 5-1:0.0: Closing input extension
[ 1410.007198][ T6674] usb 7-1: USB disconnect, device number 77
[ 1410.042721][  T184] em28xx 5-1:0.0: Freeing device
[ 1410.330492][T27304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1410.346487][T27304] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1410.397855][ T6674] usb 7-1: new high-speed USB device number 78 using dummy_hcd
[ 1410.457817][T27321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1410.525320][T27321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1410.557781][ T6674] usb 7-1: Using ep0 maxpacket: 32
[ 1410.576104][ T6674] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[ 1410.598397][ T6674] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1410.632531][T27327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1410.659852][ T6674] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1410.692946][T27327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1410.717689][ T6674] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1410.742637][ T6674] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1410.753372][    T9] usb 2-1: USB disconnect, device number 45
[ 1410.776416][ T6674] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1410.786322][ T6674] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1410.798880][ T6674] usb 7-1: Product: syz
[ 1410.803077][ T6674] usb 7-1: Manufacturer: syz
[ 1410.814495][ T6674] usb 7-1: SerialNumber: syz
[ 1410.828287][ T6674] usb 7-1: config 0 descriptor??
[ 1410.846022][ T6674] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1410.858933][ T6674] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1410.971168][T16193] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1410.988117][T16193] ath9k_htc: Failed to initialize the device
[ 1410.995091][    T9] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1411.597782][T16193] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[ 1411.780015][T16193] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[ 1411.793160][T16193] usb 5-1: config 0 has no interface number 0
[ 1411.812035][T16193] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1411.846583][T16193] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1411.873707][T16193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1411.902090][T16193] usb 5-1: Product: syz
[ 1411.914452][T16193] usb 5-1: Manufacturer: syz
[ 1411.968103][T16193] usb 5-1: SerialNumber: syz
[ 1411.990443][ T6674] usb 7-1: USB disconnect, device number 78
[ 1411.997788][    T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1412.012968][ T6674] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[ 1412.033627][T16193] usb 5-1: config 0 descriptor??
[ 1412.149460][    T9] usb 2-1: too many configurations: 78, using maximum allowed: 8
[ 1412.172947][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1412.187604][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1412.218485][    T9] usb 2-1: Product: syz
[ 1412.229581][    T9] usb 2-1: Manufacturer: syz
[ 1412.243036][    T9] usb 2-1: SerialNumber: syz
[ 1412.359127][    T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1412.478131][ T6674] usb 7-1: new high-speed USB device number 79 using dummy_hcd
[ 1412.497953][T16185] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1412.670809][ T6674] usb 7-1: Using ep0 maxpacket: 8
[ 1412.678611][ T6674] usb 7-1: config 2 has an invalid interface number: 31 but max is 0
[ 1412.688134][ T6674] usb 7-1: config 2 has no interface number 0
[ 1412.716267][ T6674] usb 7-1: config 2 interface 31 has no altsetting 0
[ 1412.741847][ T6674] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 1412.761760][ T6674] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1412.786202][ T6674] usb 7-1: Product: syz
[ 1412.804320][ T6674] usb 7-1: Manufacturer: syz
[ 1412.817331][ T6674] usb 7-1: SerialNumber: syz
[ 1412.917285][T27352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1412.928690][T27352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1413.346397][ T5902] usb 2-1: USB disconnect, device number 46
[ 1413.529305][T16185] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1413.529551][T16185] ath9k_htc: Failed to initialize the device
[ 1413.533479][T27362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1413.533931][T27362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1413.536893][ T5902] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1413.793585][T27362] netlink: 'syz.0.5633': attribute type 13 has an invalid length.
[ 1413.802185][T27362] netlink: 'syz.0.5633': attribute type 17 has an invalid length.
[ 1413.939699][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5634'.
[ 1413.990302][T27362] sit0: left promiscuous mode
[ 1414.072396][T27362] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1414.086695][T27362] 8021q: adding VLAN 0 to HW filter on device team0
[ 1414.136298][T27362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1414.174025][ T6674] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22
[ 1414.271057][T16193] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71
[ 1414.336550][T16193] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 1414.465324][T16193] usb 5-1: USB disconnect, device number 11
[ 1415.132400][T27384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5637'.
[ 1415.309544][T27384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5637'.
[ 1415.368417][T27383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5637'.
[ 1415.426503][T27383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5637'.
[ 1415.475543][ T6674] usb 7-1: USB disconnect, device number 79
[ 1415.594574][T27391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5639'.
[ 1415.842138][T27400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1415.850994][T27400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1415.852714][ T6674] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1415.870862][T27393] netlink: 'syz.6.5640': attribute type 10 has an invalid length.
[ 1415.910852][T27393] team0: Failed to send options change via netlink (err -105)
[ 1415.955041][T27402] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5640'.
[ 1415.989039][T27393] team0: Port device dummy0 added
[ 1416.022372][ T6674] usb 2-1: too many configurations: 78, using maximum allowed: 8
[ 1416.050990][ T6674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1416.062241][ T6674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1416.467987][ T6674] usb 2-1: Product: syz
[ 1416.478883][ T6674] usb 2-1: Manufacturer: syz
[ 1416.486946][ T6674] usb 2-1: SerialNumber: syz
[ 1416.510722][ T6674] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1416.543906][T16185] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1416.809556][T27409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1416.823366][T27409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1416.886526][T27409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1416.904550][T27409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1416.994001][T27392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1417.020364][T27392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1417.270822][ T5902] usb 2-1: USB disconnect, device number 47
[ 1417.612250][T16185] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1417.627138][T16185] ath9k_htc: Failed to initialize the device
[ 1417.643030][ T5902] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1417.996146][T27423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1418.005404][T27423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1418.040031][T27426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1418.059464][T27426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1418.262112][T27429] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1418.509634][ T5902] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1418.748950][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1418.837994][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1418.850420][ T5902] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1418.920417][ T5902] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1418.935747][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1418.996125][ T5902] usb 2-1: Product: syz
[ 1419.010510][ T5902] usb 2-1: Manufacturer: syz
[ 1419.028911][ T5902] usb 2-1: SerialNumber: syz
[ 1419.057988][ T5902] usb 2-1: config 0 descriptor??
[ 1419.088167][T27425] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1419.103596][T27425] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1419.154298][ T5902] usb 2-1: ucan: probing device on interface #0
[ 1419.354105][ T5902] usb 2-1: ucan: could not read protocol version, ret=-71
[ 1419.397578][ T5902] usb 2-1: ucan: probe failed; try to update the device firmware
[ 1419.476166][ T5902] usb 2-1: USB disconnect, device number 48
[ 1419.649584][T16185] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1419.817903][T16185] usb 5-1: Using ep0 maxpacket: 16
[ 1419.836654][T16185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1419.871580][T16185] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1419.888814][T16185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.898213][T16185] usb 5-1: Product: syz
[ 1419.903078][T16185] usb 5-1: Manufacturer: syz
[ 1419.921785][T16185] usb 5-1: SerialNumber: syz
[ 1419.949071][T16185] usb 5-1: config 0 descriptor??
[ 1420.146182][T16185] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1420.169608][T16185] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1420.193715][T27461] netlink: 'syz.1.5658': attribute type 12 has an invalid length.
[ 1420.599893][T16185] em28xx 5-1:0.0: unknown em28xx chip ID (104)
[ 1421.172778][T27474] binder: 27468:27474 ioctl 4018620d 0 returned -22
[ 1421.318751][T16185] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1421.333912][T16185] em28xx 5-1:0.0: board has no eeprom
[ 1421.707902][T16185] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1421.716467][T16185] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1421.723609][ T6674] em28xx 5-1:0.0: Binding DVB extension
[ 1421.927752][T27448] em28xx 5-1:0.0: write to i2c device at 0xfffe failed with unknown error (status=1)
[ 1422.108934][T27479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5662'.
[ 1422.119826][ T5909] usb 5-1: USB disconnect, device number 12
[ 1422.126513][ T5909] em28xx 5-1:0.0: Disconnecting em28xx
[ 1422.140660][T27479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1422.244363][ T6674] em28xx 5-1:0.0: Registering input extension
[ 1422.254728][ T5909] em28xx 5-1:0.0: Closing input extension
[ 1422.287010][T27479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1422.310974][ T5909] em28xx 5-1:0.0: Freeing device
[ 1422.329728][T27479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1422.499677][T27487] [U] .��h��0F�wZ,��i�qg���ҏV2��sO��
[ 1422.543355][T27487] [U] ���`w*��B�BOLhU�
[ 1422.547901][T27487] [U] w$�n�|��#��%o.z\��̧mР��w
[ 1422.577742][T27487] [U] ���R{ꫢ� S���
[ 1422.588886][T27484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5664'.
[ 1422.661674][T27484] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5664'.
[ 1422.883759][T27502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5667'.
[ 1423.059996][ T5909] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1423.319245][ T5909] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1423.363883][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1423.396032][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.402440][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.448976][ T5909] usb 5-1: config 0 descriptor??
[ 1423.471319][ T5909] cp210x 5-1:0.0: cp210x converter detected
[ 1423.712552][ T5909] usb 5-1: cp210x converter now attached to ttyUSB0
[ 1423.839937][T27488] [U] 
[ 1424.019468][ T5909] usb 5-1: USB disconnect, device number 13
[ 1424.046159][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1424.270078][ T5909] cp210x 5-1:0.0: device disconnected
[ 1424.303186][T27523] FAULT_INJECTION: forcing a failure.
[ 1424.303186][T27523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1424.345249][T27523] CPU: 0 UID: 0 PID: 27523 Comm: syz.6.5672 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1424.345269][T27523] Tainted: [L]=SOFTLOCKUP
[ 1424.345273][T27523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1424.345281][T27523] Call Trace:
[ 1424.345286][T27523]  <TASK>
[ 1424.345293][T27523]  dump_stack_lvl+0x189/0x250
[ 1424.345311][T27523]  ? __pfx____ratelimit+0x10/0x10
[ 1424.345326][T27523]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1424.345345][T27523]  ? __pfx__printk+0x10/0x10
[ 1424.345360][T27523]  ? __might_fault+0xb0/0x130
[ 1424.345380][T27523]  should_fail_ex+0x414/0x560
[ 1424.345399][T27523]  _copy_from_iter+0x1cd/0x1630
[ 1424.345422][T27523]  ? __pfx__copy_from_iter+0x10/0x10
[ 1424.345443][T27523]  ? page_copy_sane+0x4e/0x280
[ 1424.345453][T27523]  copy_page_from_iter+0xdd/0x170
[ 1424.345466][T27523]  tun_get_user+0x1d40/0x3dc0
[ 1424.345478][T27523]  ? tun_get_user+0x6fc/0x3dc0
[ 1424.345493][T27523]  ? aa_file_perm+0x44c/0x1530
[ 1424.345507][T27523]  ? __pfx_tun_get_user+0x10/0x10
[ 1424.345518][T27523]  ? __lock_acquire+0x6b6/0x2cf0
[ 1424.345530][T27523]  ? kstrtoull+0x12f/0x1d0
[ 1424.345549][T27523]  ? ref_tracker_alloc+0x318/0x460
[ 1424.345566][T27523]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1424.345584][T27523]  ? tun_get+0x1c/0x2f0
[ 1424.345603][T27523]  ? tun_get+0x1c/0x2f0
[ 1424.345618][T27523]  ? tun_get+0x1c/0x2f0
[ 1424.345635][T27523]  tun_chr_write_iter+0x113/0x200
[ 1424.345652][T27523]  vfs_write+0x5c9/0xb30
[ 1424.345670][T27523]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1424.345686][T27523]  ? __pfx_vfs_write+0x10/0x10
[ 1424.345706][T27523]  ? __fget_files+0x2a/0x420
[ 1424.345721][T27523]  ksys_write+0x145/0x250
[ 1424.345737][T27523]  ? __pfx_ksys_write+0x10/0x10
[ 1424.345753][T27523]  ? do_syscall_64+0xbe/0xf80
[ 1424.345770][T27523]  do_syscall_64+0xfa/0xf80
[ 1424.345786][T27523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1424.345796][T27523]  ? clear_bhb_loop+0x60/0xb0
[ 1424.345809][T27523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1424.345819][T27523] RIP: 0033:0x7fec7398e1ff
[ 1424.345829][T27523] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1424.345839][T27523] RSP: 002b:00007fec74766000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1424.345851][T27523] RAX: ffffffffffffffda RBX: 00007fec73be5fa0 RCX: 00007fec7398e1ff
[ 1424.345859][T27523] RDX: 000000000000004e RSI: 0000200000000000 RDI: 00000000000000c8
[ 1424.345866][T27523] RBP: 00007fec74766090 R08: 0000000000000000 R09: 0000000000000000
[ 1424.345872][T27523] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001
[ 1424.345879][T27523] R13: 00007fec73be6038 R14: 00007fec73be5fa0 R15: 00007fec73d0fa28
[ 1424.345895][T27523]  </TASK>
[ 1424.774465][T27525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1424.788226][T27525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1424.920189][T27525] netlink: 'syz.0.5674': attribute type 10 has an invalid length.
[ 1424.962544][T27525] syzkaller1: entered promiscuous mode
[ 1424.977699][T27525] syzkaller1: entered allmulticast mode
[ 1425.067865][ T5909] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1425.160539][T27539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.173338][T27539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1425.228788][ T5909] usb 5-1: too many configurations: 78, using maximum allowed: 8
[ 1425.247780][ T5902] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1425.255538][ T5909] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1425.267687][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.275738][ T5909] usb 5-1: Product: syz
[ 1425.281029][ T5909] usb 5-1: Manufacturer: syz
[ 1425.285797][ T5909] usb 5-1: SerialNumber: syz
[ 1425.308182][ T5909] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1425.342265][T16193] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1425.418019][ T5902] usb 2-1: Using ep0 maxpacket: 16
[ 1425.424821][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1425.436079][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1425.446412][ T5902] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[ 1425.456181][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1425.467872][ T5902] usb 2-1: config 0 descriptor??
[ 1425.697307][T27543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.710917][T27543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1425.730154][T27543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.741222][T27543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1425.764794][T27527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.785830][T27527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1425.901767][T27549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5681'.
[ 1426.027609][T27552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5681'.
[ 1426.066951][ T5909] usb 5-1: USB disconnect, device number 14
[ 1426.384479][ T5902] usbhid 2-1:0.0: can't add hid device: -71
[ 1426.390840][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1426.406920][ T5902] usb 2-1: USB disconnect, device number 49
[ 1426.413853][T16193] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1426.428425][T16193] ath9k_htc: Failed to initialize the device
[ 1426.453508][ T5909] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1427.637843][T16193] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1427.797996][T16193] usb 5-1: Using ep0 maxpacket: 32
[ 1427.805563][T16193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1427.816659][T16193] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1427.828341][T16193] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1427.844190][T16193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1427.945676][T27588] netlink: 276 bytes leftover after parsing attributes in process `syz.6.5692'.
[ 1427.955174][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5692'.
[ 1427.964387][T27588] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5692'.
[ 1428.079234][T16193] usb 5-1: config 0 descriptor??
[ 1428.105580][T16193] hub 5-1:0.0: USB hub found
[ 1428.292728][ T5909] usb 7-1: new high-speed USB device number 80 using dummy_hcd
[ 1428.306271][T16193] hub 5-1:0.0: 2 ports detected
[ 1428.347794][T27593] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1428.370999][T27593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1428.382420][T27593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1428.470922][ T5909] usb 7-1: config 1 has an invalid descriptor of length 76, skipping remainder of the config
[ 1428.481801][ T5909] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[ 1428.506866][T16193] hub 5-1:0.0: hub_hub_status failed (err = -71)
[ 1428.531605][T16193] hub 5-1:0.0: config failed, can't get hub status (err -71)
[ 1428.545492][T16193] usbhid 5-1:0.0: can't add hid device: -71
[ 1428.560376][ T5909] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1428.574287][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1428.583562][T16193] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1428.604905][ T5909] usb 7-1: SerialNumber: syz
[ 1428.638723][T16193] usb 5-1: USB disconnect, device number 15
[ 1428.660876][ T5909] usb 7-1: bad CDC descriptors
[ 1428.924735][T27603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5695'.
[ 1429.216202][T27607] FAULT_INJECTION: forcing a failure.
[ 1429.216202][T27607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1429.229526][T27607] CPU: 0 UID: 0 PID: 27607 Comm: syz.4.5696 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1429.229546][T27607] Tainted: [L]=SOFTLOCKUP
[ 1429.229550][T27607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1429.229557][T27607] Call Trace:
[ 1429.229563][T27607]  <TASK>
[ 1429.229569][T27607]  dump_stack_lvl+0x189/0x250
[ 1429.229587][T27607]  ? __pfx____ratelimit+0x10/0x10
[ 1429.229602][T27607]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1429.229614][T27607]  ? __pfx__printk+0x10/0x10
[ 1429.229636][T27607]  should_fail_ex+0x414/0x560
[ 1429.229654][T27607]  _copy_to_user+0x31/0xb0
[ 1429.229667][T27607]  simple_read_from_buffer+0xe1/0x170
[ 1429.229687][T27607]  proc_fail_nth_read+0x1b3/0x220
[ 1429.229704][T27607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1429.229721][T27607]  ? rw_verify_area+0x2a6/0x4d0
[ 1429.229734][T27607]  ? tun_chr_write_iter+0x18a/0x200
[ 1429.229749][T27607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1429.229765][T27607]  vfs_read+0x200/0xa30
[ 1429.229786][T27607]  ? fdget_pos+0x247/0x320
[ 1429.229799][T27607]  ? __pfx___mutex_lock+0x10/0x10
[ 1429.229816][T27607]  ? __pfx_vfs_read+0x10/0x10
[ 1429.229830][T27607]  ? __fget_files+0x2a/0x420
[ 1429.229843][T27607]  ? __fget_files+0x3a0/0x420
[ 1429.229853][T27607]  ? __fget_files+0x2a/0x420
[ 1429.229867][T27607]  ksys_read+0x145/0x250
[ 1429.229883][T27607]  ? __pfx_ksys_read+0x10/0x10
[ 1429.229899][T27607]  ? do_syscall_64+0xbe/0xf80
[ 1429.229917][T27607]  do_syscall_64+0xfa/0xf80
[ 1429.229933][T27607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1429.229943][T27607]  ? clear_bhb_loop+0x60/0xb0
[ 1429.229956][T27607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1429.229966][T27607] RIP: 0033:0x7f65a9f8e15c
[ 1429.229977][T27607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1429.229986][T27607] RSP: 002b:00007f65a81f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1429.229998][T27607] RAX: ffffffffffffffda RBX: 00007f65aa1e5fa0 RCX: 00007f65a9f8e15c
[ 1429.230006][T27607] RDX: 000000000000000f RSI: 00007f65a81f60a0 RDI: 0000000000000004
[ 1429.230013][T27607] RBP: 00007f65a81f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1429.230019][T27607] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001
[ 1429.230026][T27607] R13: 00007f65aa1e6038 R14: 00007f65aa1e5fa0 R15: 00007f65aa30fa28
[ 1429.230042][T27607]  </TASK>
[ 1429.846569][T27611] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI
[ 1429.858497][T27611] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047]
[ 1429.866896][T27611] CPU: 1 UID: 0 PID: 27611 Comm: syz.0.5699 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1429.877843][T27611] Tainted: [L]=SOFTLOCKUP
[ 1429.882145][T27611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1429.892193][T27611] RIP: 0010:fd_install+0x57/0x3d0
[ 1429.897205][T27611] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 47 50 e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01
[ 1429.916809][T27611] RSP: 0018:ffffc9000b40fca0 EFLAGS: 00010202
[ 1429.922870][T27611] RAX: 0000000000000008 RBX: 0000000000000041 RCX: ffff888049ccdb80
[ 1429.930833][T27611] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005
[ 1429.938790][T27611] RBP: dffffc0000000000 R08: ffff888025776c7b R09: 1ffff11004aeed8f
[ 1429.946752][T27611] R10: dffffc0000000000 R11: ffffed1004aeed90 R12: 0000000000000005
[ 1429.954713][T27611] R13: 0000000000000005 R14: 0000000000000001 R15: ffff8880247ea580
[ 1429.962676][T27611] FS:  00007fad69df66c0(0000) GS:ffff888126192000(0000) knlGS:0000000000000000
[ 1429.971615][T27611] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1429.978194][T27611] CR2: 00007fad69dd4f98 CR3: 0000000060a2c000 CR4: 00000000003526f0
[ 1429.986185][T27611] Call Trace:
[ 1429.989454][T27611]  <TASK>
[ 1429.992373][T27611]  ? do_mq_open+0x595/0x770
[ 1429.996889][T27611]  do_mq_open+0x5a0/0x770
[ 1430.001212][T27611]  ? __pfx_do_mq_open+0x10/0x10
[ 1430.006069][T27611]  ? __pfx_do_futex+0x10/0x10
[ 1430.010733][T27611]  __x64_sys_mq_open+0x16a/0x1c0
[ 1430.015665][T27611]  ? __pfx___x64_sys_mq_open+0x10/0x10
[ 1430.021116][T27611]  ? do_syscall_64+0xbe/0xf80
[ 1430.025807][T27611]  do_syscall_64+0xfa/0xf80
[ 1430.030298][T27611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1430.036349][T27611]  ? clear_bhb_loop+0x60/0xb0
[ 1430.041098][T27611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1430.047138][T27611] RIP: 0033:0x7fad6bb8f749
[ 1430.051536][T27611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1430.071129][T27611] RSP: 002b:00007fad69df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0
[ 1430.079532][T27611] RAX: ffffffffffffffda RBX: 00007fad6bde5fa0 RCX: 00007fad6bb8f749
[ 1430.087489][T27611] RDX: 0000000000000118 RSI: 0000000000000040 RDI: 0000200000000100
[ 1430.095444][T27611] RBP: 00007fad6bc13f91 R08: 0000000000000000 R09: 0000000000000000
[ 1430.103409][T27611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1430.111386][T27611] R13: 00007fad6bde6038 R14: 00007fad6bde5fa0 R15: 00007fad6bf0fa28
[ 1430.119363][T27611]  </TASK>
[ 1430.122372][T27611] Modules linked in:
[ 1430.126981][T27611] ---[ end trace 0000000000000000 ]---
[ 1430.307958][T27611] RIP: 0010:fd_install+0x57/0x3d0
[ 1430.313236][T27611] Code: 48 81 c3 48 09 00 00 48 89 d8 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 47 50 e6 ff 4c 8b 3b 49 8d 5e 40 48 89 d8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 29 03 00 00 8b 1b 89 de 81 e6 00 00 00 01
[ 1430.338424][T27611] RSP: 0018:ffffc9000b40fca0 EFLAGS: 00010202
[ 1430.345224][T27611] RAX: 0000000000000008 RBX: 0000000000000041 RCX: ffff888049ccdb80
[ 1430.355087][T27611] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005
[ 1430.363283][T27611] RBP: dffffc0000000000 R08: ffff888025776c7b R09: 1ffff11004aeed8f
[ 1430.498140][T16193] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1430.517772][T27611] R10: dffffc0000000000 R11: ffffed1004aeed90 R12: 0000000000000005
[ 1430.527322][T27611] R13: 0000000000000005 R14: 0000000000000001 R15: ffff8880247ea580
[ 1430.537400][T27611] FS:  00007fad69df66c0(0000) GS:ffff888126092000(0000) knlGS:0000000000000000
[ 1430.550785][T27611] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1430.557426][T27611] CR2: 0000200000323000 CR3: 0000000060a2c000 CR4: 00000000003526f0
[ 1430.566709][T27611] Kernel panic - not syncing: Fatal exception
[ 1430.573127][T27611] Kernel Offset: disabled
[ 1430.577441][T27611] Rebooting in 86400 seconds..