last executing test programs:

23m2.192990907s ago: executing program 0 (id=3394):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = fsopen(&(0x7f0000000000)='hfsplus\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
syz_usb_disconnect(r1)

22m59.064362678s ago: executing program 0 (id=3409):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
ioprio_get$pid(0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r3, &(0x7f0000000280)="4083", 0x2)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000140))
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000b40)={0x1, 0xa, 0x0, 0x1003, 0xfffffe00, 0x1000, 0xffffffed, 0x21, 0x21000000, 0x200000, 0x9})
sendto$inet6(r2, 0x0, 0x0, 0xc001, 0x0, 0x0)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc)
r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x80)
sendmsg$kcm(r8, 0x0, 0x91)

22m58.482357246s ago: executing program 0 (id=3413):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x70, &(0x7f00000014c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0x0, 0x0, 0x1000}, {"84f3ca6311a388137d041b56bd8b91156655b02bea27aa1a71dbd54aeccf099ba91dd1c751d10f18b67475fe20754fa22c33925f367e41ade13b"}}}}}}, 0x0)

22m50.917346095s ago: executing program 0 (id=3414):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xce}, 0x38)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1001)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
read$dsp(r1, &(0x7f00000001c0)=""/235, 0xeb)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
chroot(&(0x7f0000000080)='./file0/file0\x00')
pivot_root(&(0x7f0000000040)='./file0/../file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x80088, 0x0, 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2efdc806dd48681a, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x1d, 0x0, 0xc, 0xffffffff}, {0x7}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf, 0xff})
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x29f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1c, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x3, {[@local=@item_012={0x0, 0x2, 0x4}, @global=@item_012={0x1, 0x1, 0x6, "e6"}]}}, 0x0}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

22m50.218216045s ago: executing program 0 (id=3456):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0xf000000, @mcast1, 0x4, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000040)="f4000900062b3c25fe80000000000000dc8b850f2384", 0x16}, {&(0x7f0000001400)="8c0b4eab3af0d6535584b4b67b1b1b60a00c", 0x12}], 0x2}, 0x800)

22m47.588392641s ago: executing program 0 (id=3481):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = dup(r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)

22m46.152622293s ago: executing program 32 (id=3481):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = dup(r1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)

9m14.444675248s ago: executing program 5 (id=7121):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x40d9, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x15, &(0x7f0000000040), 0x10)
sendmmsg$inet_sctp(r0, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000084000000020000000600f8ff80a904001400000084000000050000000000000002000000"], 0x28}], 0x1, 0x40)
r4 = fcntl$dupfd(r2, 0x0, r3)
sendmsg$tipc(r4, &(0x7f00000014c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x3}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="b96d20bfd0e7b3cac6bded0c3b7b5e28ae5f02ae7d933667b9d46a8ea56fc3a4018204985eafd3c4de1b58a1621bd4c7bb8aff2a8b3ea51b3309d07dd6bf5017e7b41522ffa8a7b76f035aefa831acd28e7a1f2329716cd11c93d85494d67da95343745cf5676a14cbe45ff92f889110057e914fc6d50991209487dcb012a8597d13317ac2e6ed324b253ce4eb43cdf489c01c26453f579e5c548f2983840f3899a10c0e8f578180977fd63b1a2c13782129cd5f466ef9e4b8bdbe61b6f2ae48d36de98794b32797d55807e4417ef12c51f8d13a4606506b49f92da673bb0586acf03722d1bbe0a9c3de211231d49418a609", 0xf2}, {&(0x7f0000000200)="d314c89fe16c13303953032e49ca4f351e1aed43117f910009f3f4e918a8195b51cb1646102e501e7582e936b4fcb45dc152ae036539e2da5da64cf66b216b60204259207cd5", 0x46}, {&(0x7f0000000280)="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", 0xfe}, {&(0x7f0000000380)="4ed0121b2351e56c97d564ce9d82a81e361d25aa381954e12389998847e38db84985c9390951cb18985d0394fb9b82a1e276cbbc57ab923c8c05721852b891807d38fa1b740e8222a009ae92f3b1cad68efe6acdd31e0449cb627f6500bfb7b0c40e084a03ce80113459aaf71956addad05b5530f5132ca3ecf26085dced821e77738be05e40493a88069442ee1601f4ca64e2e523daa9435c1b3ca2df2f254719ab78053b249fda1b1d9d91aecd0ff08b48014fd08602c19e3f53da7fcb7c71dddbaf2ca631519f0c2409d91ac592bc1f0028671bd98975d4935a3852726424d5b34fd2b52dd03ffcb62d95d0effde4c0760db855", 0xf5}], 0x4, &(0x7f00000004c0)="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", 0x1000, 0x24000004}, 0x811)

9m14.410199338s ago: executing program 5 (id=7122):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x4a0582)
syz_usb_disconnect(r1)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$vimc1(0xffffff9c, &(0x7f0000000800), 0x2, 0x0)
ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000840)={0xe, {0x7, 0x0, 0x5, 0x8}})
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4004)
r6 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x13)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r8 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000100))
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffc, 0x0, 0xfffe, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x9, 0x20000005}, {0xfaf5, 0x4, 0x0, 0x400000000a789}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1000}}, 0xe8)
sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
pipe(&(0x7f0000000080))
ptrace$setsig(0x4203, r0, 0xfffffffffffffff7, &(0x7f0000000240)={0xb, 0x5, 0x4})

9m13.466848196s ago: executing program 5 (id=7126):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000003", 0x20000238}])
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000280)={[{0xfffffffa, 0xa, 0x4, 0x5, 0x0, 0x8a, 0x5, 0xfd, 0x3, 0xe, 0xfd, 0x9, 0x6}, {0xabf, 0x6, 0xf2, 0x3c, 0x1, 0x81, 0xfc, 0x0, 0x0, 0xe5, 0x6, 0x0, 0x5}, {0x6, 0x5, 0x6, 0x4c, 0x2, 0x5, 0x1, 0x7, 0x5, 0x0, 0x3, 0xf, 0xfff}], 0x1})

9m13.20741853s ago: executing program 5 (id=7127):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
r4 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x11, &(0x7f00000002c0), 0x2)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, &(0x7f0000000000))
syz_open_dev$dri(&(0x7f00000000c0), 0x7f, 0x800)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, r2, r3, 0x0, 0x0, 0xfffffffd})

9m13.085926307s ago: executing program 5 (id=7129):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xc260, 0x20000)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$userio(0xffffff9c, &(0x7f00000000c0), 0x2100, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x121000, 0x41)
inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x4000004)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$FUSE_ATTR(r1, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
faccessat2(r6, &(0x7f0000000040)='./file0\x00', 0x5, 0x100)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
fcntl$setflags(r4, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24014080)
ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x13, {}, [{0x4}]}, 0x18}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r8, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc7b4, 0x3}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x48010)
r9 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2040}})
io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0)

9m9.799830114s ago: executing program 5 (id=7136):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_io_uring_setup(0x1896, &(0x7f00000000c0)={0x0, 0x87d6, 0x2}, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x3, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x8, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2003, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x13cb9256, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x6, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000e2795510d10502200005000203010902120001000000000904"], 0x0)

8m55.060179449s ago: executing program 33 (id=7136):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_io_uring_setup(0x1896, &(0x7f00000000c0)={0x0, 0x87d6, 0x2}, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x3, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x8, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2003, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x13cb9256, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x6, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000e2795510d10502200005000203010902120001000000000904"], 0x0)

16.269866917s ago: executing program 2 (id=9334):
r0 = socket$inet(0x2, 0x3, 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0)
syz_usb_control_io(r1, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0003040000006803"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "0fa78e9e8a6310eb02f9482fe03bd43126953abb2514198e718894f82ef038bcebe58a06116047b09a6b8403d271563f49baba99878d8dfe519f2e30342ec3fa06eb6fb88d6c9bc679b77c775bdd7e3c42338f9cfc7f116a7e3ee56ab3e64a135bd2a79864932c413cc9b9a8c27ce27a3c4448f00fd35504bf6b5ba2296f6d40513d67d46c1df5bfd47a537c73c91939a711e5e2032db50388d40c832f51dc143af1ae7e0bccacf075ec57eec7246e4b86e5610c2f2ead8b76947cc3eff273718048de993d65b40ce73e04d56bf1b8e04f070bacc501422ccc3939cbbdb2d28cc8f3e673317908aaccca5e17d0ec710a9f81204d342df83c"}}}, 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000a020000009368f089721172aed91c8537be1650e5b063cc1112cab847f04e964961db1ceea3cae8c0ad5977bb53f1db5b883a79ce12d47faa1d6a3ea6328416988794b4985490b0cc13583b0389cf54c6b870089aa03fbfb528ad8f256c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x92c, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0x2, 0x9c, 0x54, 0x8, 0xdf6, 0x70, 0x3727, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91a, 0x3, 0x81, 0x9, 0x20, 0x6, [{{0x9, 0x4, 0x25, 0xff, 0x4, 0xc1, 0x7f, 0x3, 0x9, [@hid_hid={0x9, 0x21, 0xfffd, 0x6c, 0x1, {0x22, 0xe0b}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "75e9"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x8306, 0x7}, {0x6, 0x24, 0x1a, 0x101}, [@obex={0x5, 0x24, 0x15, 0x9}]}], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x7}}, {{0x9, 0x5, 0xe, 0x2, 0x250, 0x2, 0x81, 0xa2, [@generic={0x19, 0x6, "2968a78dc8701ea19852cff11ff89361b13db58a00d2f7"}, @generic={0x94, 0x10, "e1c751b1b9af4f779abf4f722e810fd4baadad1a4e4d268e25ea36f40953c5d1e2b6aae066ae7e53e04d3535dd0b697dbbc3985b70ba6dfe00354b30b032503e6b1afd450119f774b3e4d247c3e2809fac2255bd14795a0640dea324cc3c42ccffca2026fd8c9c888330b39c25e4fa03b53340d0da92f94dcc00b1a08060cf5072dd881ccc05971861635e0a962e4d5bd116"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x5, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa8}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x2}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x3, 0x9, 0xb, [@generic={0xe6, 0xa, "882631939dcd1e4079dd9e9afe7f215ca15d2f9a4b4f2a710940c1980f6dc9d0316e08d1b821bb7f4c57665ea3e859e1fadf4d9549f5fc6318228cf9c6f41cbe61293afa0ae5159744930353f71400899e50acdfb77c0fc7c8b3fb7b53750c9c6163a52b630bb22487e62e438b33f7267e0fec254680f32e2980572b0e2c5c1c384ec34fae781feceb9229567eceaeebcd8980f7f63c3911336cf73f8e8f3cfb19ad9cd44c82e6bd96f9375eaf21ad59fa820d9eb1e801f776a4ded0c82a4bbdbae65bace5b87b037479370ab456f56e48b747cddf1115322f4dd1c8d82cfff99be7596c"}, @generic={0x4f, 0x30, "e9ba44105576247f583b42aa65e5d53562f9d6ed042684f7affb67b0f19823a9c94e25d7489863d2b76f361ed73611e4162cf6908901f7c96336e372878c8a1aeb603a8288a1f740fb21c94847"}]}}]}}, {{0x9, 0x4, 0xec, 0x2, 0xd, 0xe8, 0x0, 0xb7, 0x7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'u'}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x13}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "c168"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf, 0x2}, {0x6, 0x24, 0x1a, 0x9, 0x1}, [@acm={0x4, 0x24, 0x2, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x40, [0x4, 0xfff7, 0x73, 0x3, 0x1, 0x6]}, @mdlm={0x15, 0x24, 0x12, 0x7a6}, @dmm={0x7, 0x24, 0x14, 0xaf, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xd, 0x42d}, @mdlm={0x15, 0x24, 0x12, 0x5}]}], [{{0x9, 0x5, 0x7, 0x2, 0x40, 0x0, 0xfa, 0x7, [@generic={0xc6, 0x6, "dc3c94e9619a506d816fd94b7cd30c6552ce87c4a02a0b5025b1a586735935d054f27805e49f2a663cba742a8c69d6ef8ee50449906340d24b8304b6f99b7598eeeae09c10ace52f091c34a3278c3b4870b6b6d6a09dd687518d2f5a9b84f8f8eda99e8d39703963ddf7eaa363b4807cd69ee543f3877590464c7c19be368a8397147f4302b50837fef13bdab5c3792de1aa2914c3018509c6ac2acf156cdd88dda851912fca79760def86893ce22a1acc43c61fe25ce09a00d72d96021ae1d8e546a95a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x0, 0x1, 0xc, 0x6}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x4e, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x1, 0x66, 0x95, [@generic={0x3a, 0x21, "6bc9755fc83591622eb2edcd9f8a4db53b2987ea9b9aa9dcfe91fe474f5d21ff7346bdca453613c52d288404aba799295e2d28f173b1c8b2"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x1d, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfff}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x10, 0xb, 0x2}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x3, 0x7f, 0xb, [@generic={0x9c, 0xe, "a7574f6b97f9a007e15f9b90dc21966ea330f00c64516871fc77cebe223f06f4579ef612b027c33e062e8cd2860d15051b39f61b55c65a5ae5277ecb5ee1074637c526129e9c4cc464ee58de0816dbf3bae971eda1d434b1cec630f3d9c2e6d4ea57d162d8cfb70c1b7300893f13975625e7ce9b3fa7894d33ee9de5c2847cdb83e3478299c4b43f391f819099398ed7d3336b3953697d4da218"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0x1, 0x1}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x21, 0xd8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x9, 0x1, 0xfd, [@generic={0x100, 0x24, "67b40c2eb1fcb9a97417f4c220d6ddc8766082000aa14d5ad2371dbed96f91c1c41534c48eed67e6fa4cc594b7f589286bc20225ade07c6e129b55d291406f6079abeb921dfbdb1b9f3be20390d3574248c1baab7b740b479312217e88346c046cce22db846778a56277f8338862001e9d6b71afe9d8efd846c9d5a9603106ddfaeda9f268f5c6b21bbfd456300815f9b62d97cd142689ce3561608e7f20fb5e25598d312bee8c48e53f627de10357d24c87b1197a488d19aad4b3240402b83b0b00d64417c87c2656002f997c0e4df2ad46fb528eee42ef279c80ef4dc3c2ddf3b32f271711356c64a2bc5496f1520243e8436bd0b7f9165533cf11619d"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x7f, 0x40, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x6}, @generic={0x36, 0x21, "77298d508ff45cd79ac5cc4092f12a1fc71669ebc0698be07642d8477c6f3e924abecf2cee67e23bc93fc08f79cebb7a009f3109"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x0, 0x2, 0x5}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x89, 0x2, 0x7, [@generic={0x85, 0x9, "d7077a985916713f86e26ecc0efdbc898da4053a2596dbffc4689d8e1b36bec9b6f7742a8166de515653f9896c69ece68c9a94c57e375da7fb141a92b0d7754c20e6d9c3b06bc69257eb812d4996247ea23f0a8164faf9a31270a87bc48b0cd1620ad1a5101a3a444194bcd385187d96ff45f612647c14a4202a2d1cd77a3ac2eebae5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xec, 0x4}]}}]}}, {{0x9, 0x4, 0x64, 0x6, 0x3, 0xff, 0x5d, 0x1, 0x2, [@hid_hid={0x9, 0x21, 0x471, 0x1, 0x1, {0x22, 0x6a}}, @hid_hid={0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xe14}}], [{{0x9, 0x5, 0xf, 0x12, 0x200, 0x1, 0x2, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x5, 0xc6, [@generic={0xdf, 0x8, "d69c74de7ee9e4e85a66009760bda72a1077e90e6fcbd70b3273377c67c5a7b0e41d1ce95ba4037112cedf9c7202df42c82b93925de77531767a212ff770ab453f66f5db5a53db3d2ae4aa2b9a7b51eec7bc9bdf4386bdbd445ba0c88dc40d6e0ba8e927e2b66a9895ec6c0227ca89ad8bf265f36b579348c7ae0c253efca0e26e14ebd085226534f84e99035a4b45a15693a163f5da3080086bfec4f44f6c5ddd19e02b09205c37a7f3406ac3de4a0200f59cf4e51547fc650d12b7a29eaa7bf8e2a07dc92b3c72cb8f05b536ef8a2edb0bad0a047741a3041a162482"}, @generic={0x79, 0xd, "3d514f5bbc26490d092e9fcfbdaaeaa11521583f213e70a2d118874517fbf6957ab3bdd1790f3a6bf07d5ddf3092d670fb67a684c87a8ae51c18abf0fab4f7d94f00e717225b8079e58fe9992aa517682c5e71764390d7a2aec8a7bf26b739696a452fbea93d887dcf7825dd997d661ae136490939e267"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x3, 0x7, 0x0, [@generic={0xae, 0x24, "1d730a2ac39b676baeda778582725ee279a51e80b262dd0ee66141e5be81fc8b5023bb8e9b07084ad9fbccf60a96575a3d02ed341b6f4bb5190b2c0cbd01c32340156572b099064075193d874c7a91598f3eb1568d779980cfb638f8fef9945eda646e498e242f4cdd9067722581ba974bdafdd17d12957d0e3730ba54cf9c5159eed6b52213891b820bd16e03b54d83424906b21612aac8eb7bc15cb3fadcac3e9c3f1975a0ea72322db4ef"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0xfff}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x4, 0x81, 0xff, 0x1}, 0x3b, &(0x7f00000000c0)={0x5, 0xf, 0x3b, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd0, "c85cc8f62e49069c88aa1099e129fba6"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xf7, 0x9, 0x7, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ec1517d1d9e34a06782e34888a71ae33"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x7a53c829a23f57b6}}]})
dup3(r0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020)
socket$inet(0x2, 0x3, 0x8) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
setsockopt$inet_int(r0, 0x0, 0x5, 0x0, 0x0) (async)
syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0003040000006803"], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io$uac1(r1, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "0fa78e9e8a6310eb02f9482fe03bd43126953abb2514198e718894f82ef038bcebe58a06116047b09a6b8403d271563f49baba99878d8dfe519f2e30342ec3fa06eb6fb88d6c9bc679b77c775bdd7e3c42338f9cfc7f116a7e3ee56ab3e64a135bd2a79864932c413cc9b9a8c27ce27a3c4448f00fd35504bf6b5ba2296f6d40513d67d46c1df5bfd47a537c73c91939a711e5e2032db50388d40c832f51dc143af1ae7e0bccacf075ec57eec7246e4b86e5610c2f2ead8b76947cc3eff273718048de993d65b40ce73e04d56bf1b8e04f070bacc501422ccc3939cbbdb2d28cc8f3e673317908aaccca5e17d0ec710a9f81204d342df83c"}}}, 0x0) (async)
syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, 0x0) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000a020000009368f089721172aed91c8537be1650e5b063cc1112cab847f04e964961db1ceea3cae8c0ad5977bb53f1db5b883a79ce12d47faa1d6a3ea6328416988794b4985490b0cc13583b0389cf54c6b870089aa03fbfb528ad8f256c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x3, 0x92c, &(0x7f0000000900)={{0x12, 0x1, 0x310, 0x2, 0x9c, 0x54, 0x8, 0xdf6, 0x70, 0x3727, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91a, 0x3, 0x81, 0x9, 0x20, 0x6, [{{0x9, 0x4, 0x25, 0xff, 0x4, 0xc1, 0x7f, 0x3, 0x9, [@hid_hid={0x9, 0x21, 0xfffd, 0x6c, 0x1, {0x22, 0xe0b}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "75e9"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x8306, 0x7}, {0x6, 0x24, 0x1a, 0x101}, [@obex={0x5, 0x24, 0x15, 0x9}]}], [{{0x9, 0x5, 0xd, 0x0, 0x8, 0x6, 0x4, 0x7}}, {{0x9, 0x5, 0xe, 0x2, 0x250, 0x2, 0x81, 0xa2, [@generic={0x19, 0x6, "2968a78dc8701ea19852cff11ff89361b13db58a00d2f7"}, @generic={0x94, 0x10, "e1c751b1b9af4f779abf4f722e810fd4baadad1a4e4d268e25ea36f40953c5d1e2b6aae066ae7e53e04d3535dd0b697dbbc3985b70ba6dfe00354b30b032503e6b1afd450119f774b3e4d247c3e2809fac2255bd14795a0640dea324cc3c42ccffca2026fd8c9c888330b39c25e4fa03b53340d0da92f94dcc00b1a08060cf5072dd881ccc05971861635e0a962e4d5bd116"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x5, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa8}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x2}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x3, 0x9, 0xb, [@generic={0xe6, 0xa, "882631939dcd1e4079dd9e9afe7f215ca15d2f9a4b4f2a710940c1980f6dc9d0316e08d1b821bb7f4c57665ea3e859e1fadf4d9549f5fc6318228cf9c6f41cbe61293afa0ae5159744930353f71400899e50acdfb77c0fc7c8b3fb7b53750c9c6163a52b630bb22487e62e438b33f7267e0fec254680f32e2980572b0e2c5c1c384ec34fae781feceb9229567eceaeebcd8980f7f63c3911336cf73f8e8f3cfb19ad9cd44c82e6bd96f9375eaf21ad59fa820d9eb1e801f776a4ded0c82a4bbdbae65bace5b87b037479370ab456f56e48b747cddf1115322f4dd1c8d82cfff99be7596c"}, @generic={0x4f, 0x30, "e9ba44105576247f583b42aa65e5d53562f9d6ed042684f7affb67b0f19823a9c94e25d7489863d2b76f361ed73611e4162cf6908901f7c96336e372878c8a1aeb603a8288a1f740fb21c94847"}]}}]}}, {{0x9, 0x4, 0xec, 0x2, 0xd, 0xe8, 0x0, 0xb7, 0x7, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'u'}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x8, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x13}}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "c168"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf, 0x2}, {0x6, 0x24, 0x1a, 0x9, 0x1}, [@acm={0x4, 0x24, 0x2, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x40, [0x4, 0xfff7, 0x73, 0x3, 0x1, 0x6]}, @mdlm={0x15, 0x24, 0x12, 0x7a6}, @dmm={0x7, 0x24, 0x14, 0xaf, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xd, 0x42d}, @mdlm={0x15, 0x24, 0x12, 0x5}]}], [{{0x9, 0x5, 0x7, 0x2, 0x40, 0x0, 0xfa, 0x7, [@generic={0xc6, 0x6, "dc3c94e9619a506d816fd94b7cd30c6552ce87c4a02a0b5025b1a586735935d054f27805e49f2a663cba742a8c69d6ef8ee50449906340d24b8304b6f99b7598eeeae09c10ace52f091c34a3278c3b4870b6b6d6a09dd687518d2f5a9b84f8f8eda99e8d39703963ddf7eaa363b4807cd69ee543f3877590464c7c19be368a8397147f4302b50837fef13bdab5c3792de1aa2914c3018509c6ac2acf156cdd88dda851912fca79760def86893ce22a1acc43c61fe25ce09a00d72d96021ae1d8e546a95a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x24, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x0, 0x1, 0xc, 0x6}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x4e, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x1, 0x66, 0x95, [@generic={0x3a, 0x21, "6bc9755fc83591622eb2edcd9f8a4db53b2987ea9b9aa9dcfe91fe474f5d21ff7346bdca453613c52d288404aba799295e2d28f173b1c8b2"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x1d, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfff}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x10, 0xb, 0x2}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x3, 0x7f, 0xb, [@generic={0x9c, 0xe, "a7574f6b97f9a007e15f9b90dc21966ea330f00c64516871fc77cebe223f06f4579ef612b027c33e062e8cd2860d15051b39f61b55c65a5ae5277ecb5ee1074637c526129e9c4cc464ee58de0816dbf3bae971eda1d434b1cec630f3d9c2e6d4ea57d162d8cfb70c1b7300893f13975625e7ce9b3fa7894d33ee9de5c2847cdb83e3478299c4b43f391f819099398ed7d3336b3953697d4da218"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0x1, 0x1}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x21, 0xd8, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x9, 0x1, 0xfd, [@generic={0x100, 0x24, "67b40c2eb1fcb9a97417f4c220d6ddc8766082000aa14d5ad2371dbed96f91c1c41534c48eed67e6fa4cc594b7f589286bc20225ade07c6e129b55d291406f6079abeb921dfbdb1b9f3be20390d3574248c1baab7b740b479312217e88346c046cce22db846778a56277f8338862001e9d6b71afe9d8efd846c9d5a9603106ddfaeda9f268f5c6b21bbfd456300815f9b62d97cd142689ce3561608e7f20fb5e25598d312bee8c48e53f627de10357d24c87b1197a488d19aad4b3240402b83b0b00d64417c87c2656002f997c0e4df2ad46fb528eee42ef279c80ef4dc3c2ddf3b32f271711356c64a2bc5496f1520243e8436bd0b7f9165533cf11619d"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x10, 0x7f, 0x40, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x6}, @generic={0x36, 0x21, "77298d508ff45cd79ac5cc4092f12a1fc71669ebc0698be07642d8477c6f3e924abecf2cee67e23bc93fc08f79cebb7a009f3109"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x0, 0x2, 0x5}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x89, 0x2, 0x7, [@generic={0x85, 0x9, "d7077a985916713f86e26ecc0efdbc898da4053a2596dbffc4689d8e1b36bec9b6f7742a8166de515653f9896c69ece68c9a94c57e375da7fb141a92b0d7754c20e6d9c3b06bc69257eb812d4996247ea23f0a8164faf9a31270a87bc48b0cd1620ad1a5101a3a444194bcd385187d96ff45f612647c14a4202a2d1cd77a3ac2eebae5"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xec, 0x4}]}}]}}, {{0x9, 0x4, 0x64, 0x6, 0x3, 0xff, 0x5d, 0x1, 0x2, [@hid_hid={0x9, 0x21, 0x471, 0x1, 0x1, {0x22, 0x6a}}, @hid_hid={0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xe14}}], [{{0x9, 0x5, 0xf, 0x12, 0x200, 0x1, 0x2, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x5, 0xc6, [@generic={0xdf, 0x8, "d69c74de7ee9e4e85a66009760bda72a1077e90e6fcbd70b3273377c67c5a7b0e41d1ce95ba4037112cedf9c7202df42c82b93925de77531767a212ff770ab453f66f5db5a53db3d2ae4aa2b9a7b51eec7bc9bdf4386bdbd445ba0c88dc40d6e0ba8e927e2b66a9895ec6c0227ca89ad8bf265f36b579348c7ae0c253efca0e26e14ebd085226534f84e99035a4b45a15693a163f5da3080086bfec4f44f6c5ddd19e02b09205c37a7f3406ac3de4a0200f59cf4e51547fc650d12b7a29eaa7bf8e2a07dc92b3c72cb8f05b536ef8a2edb0bad0a047741a3041a162482"}, @generic={0x79, 0xd, "3d514f5bbc26490d092e9fcfbdaaeaa11521583f213e70a2d118874517fbf6957ab3bdd1790f3a6bf07d5ddf3092d670fb67a684c87a8ae51c18abf0fab4f7d94f00e717225b8079e58fe9992aa517682c5e71764390d7a2aec8a7bf26b739696a452fbea93d887dcf7825dd997d661ae136490939e267"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x3, 0x7, 0x0, [@generic={0xae, 0x24, "1d730a2ac39b676baeda778582725ee279a51e80b262dd0ee66141e5be81fc8b5023bb8e9b07084ad9fbccf60a96575a3d02ed341b6f4bb5190b2c0cbd01c32340156572b099064075193d874c7a91598f3eb1568d779980cfb638f8fef9945eda646e498e242f4cdd9067722581ba974bdafdd17d12957d0e3730ba54cf9c5159eed6b52213891b820bd16e03b54d83424906b21612aac8eb7bc15cb3fadcac3e9c3f1975a0ea72322db4ef"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0xfff}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x4, 0x81, 0xff, 0x1}, 0x3b, &(0x7f00000000c0)={0x5, 0xf, 0x3b, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd0, "c85cc8f62e49069c88aa1099e129fba6"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xf7, 0x9, 0x7, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ec1517d1d9e34a06782e34888a71ae33"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x7a53c829a23f57b6}}]}) (async)
dup3(r0, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) (async)

14.460624047s ago: executing program 2 (id=9337):
write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=[@l={0x92, 0x3, 0xb0, 0x1b, 0xa, 0x3, 0x1}, @l={0x92, 0xe, 0x0, 0xe, 0xf, 0xfc, 0x7fff}, @raw={0xc, 0x2, "df3d96291e1c"}, @generic={0x82}, @e={0xff, 0xa, 0xc, 0x2, @SEQ_CONTROLLER=0xfe, 0x77, 0x9, 0x4}, @s={0x5, @SEQ_MIDIPUTC=0xad, 0x1, 0x5}, @s={0x5, @SEQ_MIDIPUTC=0xfc, 0x3, 0x4}, @t={0x81, 0x5, 0x4, 0x82, @generic=0x1}], 0x31)

14.40206435s ago: executing program 2 (id=9338):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

14.285395985s ago: executing program 2 (id=9339):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r1 = syz_open_pts(r0, 0x141601)
fcntl$setstatus(r1, 0x4, 0x102800)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3cc, 0x1f0, 0x1f0, 0xe4, 0x2ec, 0x2ec, 0x2ec, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfff}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @multicast1, @empty, 0x8, 0xffffffff}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2c82618b7900e207693f7654420bb7e3687908d0501287c390466dc25514"}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x418)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deeab526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75e03a41bed4ecfb8ce96e18dc422346f9696f4bb3226b0ca75d135ebd8cae46fb83b64c103e1fdcb1934fd1d28b4916abe2c44e26ea72be4", 0xdc}, {&(0x7f0000000040)}, {&(0x7f00000002c0)}, {0x0}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0)
sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
write(r3, &(0x7f00000001c0)="2dd5", 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$usbfs(0x0, 0xfffffffffffffffb, 0x40082)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/asound/timers\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r7, &(0x7f00000000c0)='A', 0x1)
close(0x3)
read$char_usb(r6, &(0x7f0000001500)=""/4101, 0x103d)
socket(0x3, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)

11.087958114s ago: executing program 2 (id=9353):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@private0, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xc0, 0x0, 0x0, 0xee00}}}}, 0x128}}, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0) (async)
r2 = socket$inet6(0xa, 0x3, 0x87) (async, rerun: 32)
r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000800), 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x200000001, 0x0, 0x0, 0x9}, {0x203, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x2, 0x6, 0xfffffffd}}, 0xe4) (async, rerun: 64)
r4 = epoll_create1(0x0) (async, rerun: 64)
r5 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x20201)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) (async)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)={0xc1bd5845e506572f})
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c00024b5c"], 0x0, 0x0, 0x0}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000044) (async, rerun: 32)
r7 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32)
poll(&(0x7f0000000100)=[{r7, 0x1}], 0x1, 0x4) (async)
syz_emit_ethernet(0xde, &(0x7f0000001900)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x12, "c944a6b21f22109ee302a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)

10.567147815s ago: executing program 2 (id=9354):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0)

6.912113957s ago: executing program 1 (id=9369):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x0)

6.837084463s ago: executing program 1 (id=9372):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
getpeername(r4, 0x0, &(0x7f00000000c0))
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000007c0)={0x0, 0xfffffffffffffd11, &(0x7f0000000780)={&(0x7f0000000800)={0x125c, r2, 0x1, 0x70bd2b, 0x65dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x88, 0x2d, 0x0, 0x1, [{0x17, 0x0, @random="c00b44e57c8c68178df5b8d7d5916e5844d1db"}, {0x12, 0x0, @random="ef026976c649d9961469df75193a"}, {0xd, 0x0, @random="61eddbe40129f4bde7"}, {0xa, 0x0, @default_ap_ssid}, {0x6, 0x0, @default_ap_ssid}, {0x7, 0x0, @random="2417cd"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x13, 0x0, @random="7242ca238185f226a93eed4ea5ea17"}]}, @NL80211_ATTR_SCAN_SSIDS={0xac, 0x2d, 0x0, 0x1, [{0x24, 0x0, @random="aaab9340972b8c5affddecf1058b42ffa3fcd4873c60180d462b1e8082b40f7b"}, {0x24, 0x0, @random="db70d4f9c9feb2bef9b77d61ac86b24aa08deed05b5876c9066c38dffa60d9a6"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x1a, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x13, 0x0, @random="c86a7db6b0575637b0e03df815276d"}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10a4, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x99, 0x3, "16a363a41330418a822f4fec80fddb87d13ba9f79d38a0197e485dcc4448d1cf90524e0656d68189cf23e1f70609bf677078f6357da1601bd475590a1d5f1936efea4f5e670e716e49afd88b0362ccea539772a83d3d36a1406da2980e08c96ea37918ab569530a23afcc9594cdb1613b87b171a3986da31b224c742ddf2be9f1c2e3408b008bc6c9a27dac50154b4f708341bbd2c"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "82b93a0fe65ebd9f16089d0a809b47f8311e0d9f9d54e2bcad76865dc8671cfef4570e6c503c9213006730f0e79a33abe66f57dbb7b976e943d7d82364d2bee478f9ff3b7e32e86301be1422f6edb141068c69f0a25acdb60c927b903a4820d4d35977323a15e91cbe5dddf886154062a5f323ba99c47e16cff08ded77eee9917c543f746f3144f3541e63b94121c7b4211736cb7976633adb72ac56453d6c621a1f55e480c044582df688e5469761dd70981318f10b8158a8a239e95c6701fdd0b59e52cf54ca5dbc81d451a081b587dcdde65a5f7b53737998327a32cb2ebab00bc6ec3a8cf81d1bcfe4463b125c8c7702cc7432914045024723a7816632cb1bb9ec27dba4b325f1139f3b0cf5404254a96379fc3503a7b7d80bbc344059b7a9dc8db76247ff76fc45a213b7c74408effae3516bf338669a3cc849fd2ec6522b682367565df17759530e1efed5a6b8ad77acbe3536b04a0f88715ec383dc819d5f0232f70e92adb16c6c224d529fdb8f289ed694c46576c87eb0aa1efb7c6050ebbaebe487339adc912a271b4b99916ec1b63ccb95b6cec791f75398d3f8e50ccd752a19f0be3a161f3b17d3fbeec4b852d0352278d66bc589d60abe94b01e093b17a82f956e266cd8e4c46c8cb6ee7ecd9026230afec1fbf421eed0e8de82cb25aeb6eab1ca59ca501abb4956ad26c0bacb2d5cb2822e9abd2f001ab06b67aad61c02641de09fad10b991f0313ebdcf7e86d77a72175c622f49407c7998d8515d73d11d764daffd4d09adf7310ab30385f2a06fde5f19af831fd3c5dc8f86e6e1b9836d99284117a2f835e325088b537f1d1b6f8b79aea45295e0ddbc372972e886921cf2d5c652ad92f1fa0b7b0ea0aaffa087dacb402337c93489695094339e94ee1326d765def86f984552a762d0a7c772a45b707772b4b58ef9da2f128b6efd356fb3f8b88ddcb4ed414915ff7276be1884e7a7cacd92af7560f3cfc11d30850b4b0b9594c9a3815c20fef755112df6b06cadab3e17f9c55bb2551d3342bd42005768fd52df5ead6310979cff9902f1282c4eeca6cc77a65ff8b5b8c845169e4beea00aaf2422a275987b8edb00bdee0d0de6768841e7fa16f9f12e0f736dd0552c44d0d3de3781e9c1320074b538b7d24d70e9c7482fc73c7925ebbbbeca712d2d68fb7ae994c95ae522680688b256eb14aedf2b883a497a9b16f1244540a7f8bf23b16bc2448ea1d51dff8cd2d56183c81f998d9e5e6ac73254c325ea2d6162e88750c785c64a81fccd72408e16efffe24c8d72a2a6426dc60ba4d2cbf40f1dd096d3caca80d3b364a092dd89372c326b1ffe0840fe3a78701dcbb25f75a9b526179458373ab4fcc800ce5fe9bc0719d0b1825d13794da0589c5f4741cc18db37a04888d04121e1a74be68cf4f9fa0d950e37c5e4d6b24537097da9cd0f2d0a19eb8902c5078e795be679711a164cc0c4c40cd038fa2d610a4899971717651da37c0ce26125ab66a2afdfacdc0393f4602a06cbc7002552d1a0b4cc9964efa18417cab31762ea1092274bac758af8cddfaf9695371894e40b518a13dda4b5bb08f44d8d3c42cc3aabdad4c0a2cb18226bd680149a0c850a1b6ef650e945a77ff915cf97daa80c61f83c07c7aaddced14047a1ff4ba49a105d8b54592248995d990b8da4149adc2692cf97f851e8107ea94945771c5f60b0709bc904c60fca482541e551b5d3ef3484eb2b6b5c5f15318ff257b78f016f3e66189402fd7dab1a40a8166056831293f3ffff30ef083ebd36a818ba3c85d01bbbd65e71faf22e69c18ec6c4a198c3f48f4c08f0208b27b2f1c0b65694757dee6d2aa797a2a02197cb5959d573ba574d5f029eabc40dc8d2cb4fbb24dc27815ebbc0e2226a1e04ea5c5d7de52a756435ea6ea04ecf8b8c1cf070be962abec2e3c64bef91c213d5e66dea5ebbb8da8e2d5f992d8bd0cbb2c2a27f7d8f743658c52cdae9472e732145673baa5e4b1cf5473c1ce2ab89a018f4efe2dd17c6a1e48586e3f8c6911b0afb393cc28a9315ff8033c692dd0c7933ad0b793716df5d14783c83f3dc39f9e0d0a25ab407bbab0136ce6f289cda28939368bece84af1f9a228947111699bec2feb9dfbadd7eda826b0cd8582318ed7c8e67ce1ab80799f0d99e97d2ca25ff260e530972e33a0f3934bb4db4e7a927259a89c09607c2dc1134125aff6865ca404ec98519ed90497245ee3c8a9054a9b9f1494eb76c4fc15bb0eabf4adf77dde8007313d78b65fd0828a9a24cd71b642c99f9932361bcddba9b3e67176d5efc95a6077972839eb8381dca40bd0aa70ed399ab7abb97b6e63c9976f93044a236e9553faf61deb41f9dfa750b86c64bc167816f6d07725e716ec7e7f1e97c1078429c0cb996f479b1b277acd28f6d5089e8eaabd0d1faa328f90bd1bdd96f82c1343ca258067359ac97c052104496a8521b4ba6226e4f1441b51da4c4c012e281a78ca93756a82cbb80935f900ebbf3688f02455adf058118ebe0f760327b6bb24a169af4722e53e3bf82a8359023b2357dcf5899818f429bc0a9d085527af774704adc6f114bdab21195203ec65bc77bfbd040213da9eeff87d85e823e870e00c3fa995fae0ef061544eb0e9f039e7b69a1fa88bcd13103618c3ff071347c94aceee28bf57c4fa80d149e8475837f885af8666bdcf07f81ba7a54871d85faac9a69ff3044f2f510e339b9b14a5f5526b09b5a4fad33d05367d59ba572ef1e54facc3dfec5232e7c2a658358740b8079c94320cca50c1b33b9578c29c635280257056d4098c8ad4325659a4fe48aa3b3484d6bb1fe77aaab172c49a3c58720ac99782875180ba6b0a88f23987704ab2fa75966f864f1c4a1041067757569fd6fd63c93f07e5731b81981ea68a3e3ef49f5f558fd10b528c685bfc069c12c91d9305202a0ca03c3a44d18f19f8212ca38a07d909aaf3c06a75d49adc31545f1a8979b4affafebb83706b93b1b7a657758a8e2ac8b418b6a7e03bf3e582b315380dc5ee281b6e08234a6ad311b4efbd6fefe557aebec619a00cb4e3a4e7b0bd0139d4780c80ab60516b6195e2d2022c0864bbefedaa719ff1acbe1e5be5f41dd23b6b7cc87c86383b0d5e27fb072f4a5612e9a557024e0f0fa15ee5c04df59eb59d439cab7f4dee7aeb595fb880a60b6054be1bd090a0427010cbcc52d543ebe1258ac4861dfe9c9a48ace7cf2102a334714b06f08ec3df2bd9d16fe3220380c2f5978150057bc8cefc87edd907c4a629bfe70e991001899c148d69db7ff9c0ff29dc02ae954464fe2429ae0d4a32ba1b38deac43985cb47df0617654da0a04ad4a16b0115f53207bea08342aeaed47c7a98cbe0f8f0080d36e5163f4e3321209bfa1281f3be26c996763e32975a6664bb6dd1d87a9aab1a3e4f33a59632fe632df39c1c6c00aa1ccb2a1d5216a437839fc09149a49299960d843c0182059102ccc5e554f9cb9610146fb6e084b1fdbd36c5a14089690966e53d15e2f0f4ff99424001165aec7498fe0eb462d1884ed246424aa5a7b86460a2191a1d091df50d406f3b12020bff250a4ac67e1f8cb9657eada2fbe595b03d317a1673ffe12e8f3e1352af343c0aaa1d23207f724db0b1d5728a44ba0c62e0463754a893c5945cc9915bc18259bd6bcf26d3268242a34f583ff98229610ef1670e8c3ea65bd3c84b2bb66fec352c7be06e29bfdc424bdff23e18536607c9e30bcf17f8b818ac3452b72cbc6f5021b016b8cf7ed322126b1681530fa2b8d6fd5f5636a7f3c3fc3f951d7072a28e6e5f575730d337a8fd27139b9426cba807417a04c7e0675c95d02b2b1b90f9805ac0acb6cf577bf78cf9bbbf72709675261413c39e0f0bc6058e9995a832f769eb3e0d927e2121eccbee87a7cafd02cc8685543c48f2eded68526f8dd302a05dcd7b16cb77373d3bde8b590f5e15c91bfb09f0fc2074cd5159dd1c267a2ab44919611323f9c6e6e4868fadc878c2d4152d04c00b8f254ecc291a860f4d423998f401a5dc22eca3048b9998bb4e54cb9680be788bfc007ac100b5a7f4785b52033aa37c257b8e4ed08f1aecfb9acf4c1a37ea19075c6be0145e7b396a4318bb2294a9ab8aaca865028b3822d3a0cdcc77f9e308ed56877e7f2204f8e6bc4c63e8f8c93fea371b4b2f65afcd8fe1aa086dc64d557ebc8e83d7e3d1c88eacaa1bfdafc5f20d47669f3bd91068f71c1480f18d81b5b2f61d8aad1818e3ce41662ecd4ecc8a52063569722ac0ec7b7e12dda284298d41380464105fe9e213b436fdace941af618e5f971560f82300d777a539f3cb0f52ccf94cde4eab413e5447e15f2c1f69a7eca536cb1e80a2cd66f383bdb00eae2906eabbd68dd8cfbeeec3bf48ae1b03746e50bd9d9e7f5cd0b4e4faadf9a62abfe93bfaa811dc08d3dd4060cacb9af94efa0b8d34267f534af06df102406c2d82997b6f7d6fbd2e3faacefb56c4550d3986cea990d623fdb3af0d252e02dae10033407e095f54d98e95331779e3b919ec03d8da11ce8a44f268d5ad62ea5fc7bc18ed672ef7b0db73efcdef34d9b6ab7f2e98c0cfb7e60fd0e212b1d5e0bb951a060f8f3b702bc795b38b74a2b1a44a8521d93fad183eaa46dde42f05ba9e12c0f9f9f965a1bfde6cee10a14bf1eb80ce247fbd51376385764a7fdf04fe53566741f5bc3cf58c234e91d0f7f00a9081deaa48e0d9c80a6ac3beeacd07734fd307b6e86b3c49b8265b006e6d7efbcda11c5a28d787c505709aabe19045ddf2574c775c3e15f00e0d2fd35542c829106191f71677d9336adb56e9a66c6bd4bc8729b3c75cd7114295cd65b4b71a7363801759805ff5fd0d8597027ee4285b84508c6ed58ad2ab6c333af5e8a6293fb8b713ece644f992e80027e360c9a8385c3505ec8ea9dac7668ecd5dcae8e8066685434a67cdf639d4ac76333be8171ef2ce07eb0ebd2f4ae14052f99d35468f8c4631b27b020a73a30f785370036e95ba91910ca04861a20115568331dd27ceea8859dc45296f156f4fb006f67e6789475a4d4ca847a122ffe23220667d8ecaf050adddd131954d5e834f6312d28581b05377ec24f608e2abd8ac29eda81bd3fd91d93d205a960d3623947dde00e198891ed920be493771a72934c1a99e79977d63e5ac1e61af1e131ed497888f368328633e8b43e4b68474992faecb05987b4e6463defa827b67b4000cc0f9727719118c97020556edceccbc646ac1c792436f08ceed1c732942083ce82ff0869fcf5a68a05fd78e56c59bcbed68443b8533319b3f0179c2c04a2aa17f2b4edd395433e91ebeb9d52db3681447353e82ac6c1c3c54d684af83533894ff501ebb4821608c79823074615f4d2194ab7af9e727af96a579e6b206ebf7038e3c30a4b78796a6a1474364211fe0d32f8de62b582e34c688d61d77ff8732d0d444d24c5e3a500a56ad6d1ca1c114f436cad7c58429cc3585411bc20e378cf2a68048e352b9f6ce8bd336860c45db9301a51f19f2cd19474348ee1f70aaf71d73b490ae9cccede4b5eb684b573b4161a0b59f7889c705070d877c1dacb0ef38580a7bd278d84e461b5c3a36cc239e1f006b2e687e44ba3de6bfe99d2be34f576855fb0795949abb701b2b3263374f28004d62b8bfb020ec6fb6c7a0c1c1a0f2a583d4a00041ca5b5ef66e50d402eff81733d259409cd45b329f1eafc23b48ff26c62956ee20cca89b3a51575aef86739ae7f637faf0e884795fd72a07496f651505751322435cb5833413b1897d6"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1ff}, {0x8, 0x0, 0x10}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x125c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0)

6.686369811s ago: executing program 1 (id=9374):
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f00000000c0)=0x100000001, 0x4)
memfd_create(0x0, 0x4)
write$UHID_CREATE2(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000804"], 0x50)
read$char_usb(r4, 0x0, 0x0)
unshare(0x22020600)
r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8)
r7 = syz_io_uring_setup(0x3e1a, &(0x7f0000000380)={0x0, 0xb9d2, 0x1, 0x1, 0x38d, 0x0, r1}, &(0x7f00000002c0)=<r8=>0x0, &(0x7f0000000240)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r6})
io_uring_enter(r7, 0x353, 0x0, 0x0, 0x0, 0x0)
signalfd(r6, &(0x7f0000002340), 0x8)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
timer_settime(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100))
dup3(r7, r5, 0x80000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r10, &(0x7f0000000400)={0xa, 0x10, 0x8, @empty, 0x5}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6002adf700383a00fe80000000000000000000000000003fff020000000000000000000000000001020090780000000060fd906300003a00ff010000000000000000000000000001000000000000000000000000000000011e520acc951ee12e278a475bd7487ca8214555281dafc932b31b01a926fab581a9f8802e318275530511040913d9072f83f29e7a9dbcd6960071a3ed4a1f1fa13e36c43371e652e9ee4c4d2682deda93275882c524d07247a3955961fce8d83c11bdb1b95829cbdb1f6f0db07af7efe20c5f477b0fe87e1c0e"], 0x0)

6.138956428s ago: executing program 1 (id=9378):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2e, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe9}}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x207, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x22c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x78, 0x0, 0x2, {0x200000000000000, 0x40200, 0x0, {0x0, 0xfbfffffbffffffff, 0x0, 0xbf90, 0x0, 0x0, 0x0, 0x9, 0x522, 0x1000, 0x400000, 0x0, 0x0, 0x1000002, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r2, 0x0, 0x8, 0x0, 0x1)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x100006, 0x43ac00)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x1222, &(0x7f00000002c0)={0x0, 0x4533, 0x200, 0xffffffff, 0x115, 0x0, r4}, &(0x7f0000000440)=<r5=>0x0, &(0x7f00000003c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4})
r7 = openat$vcsa(0xffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0)
ioctl$int_in(r8, 0x5421, &(0x7f0000000040)=0x4e)
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000280))
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000080)=0x200000000)
r9 = dup2(r8, r8)
ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r9, &(0x7f0000000f80)={0x2020}, 0x2020)
io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x41481, 0x90)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)

6.084332685s ago: executing program 4 (id=9379):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={0x1c, 0x1e, 0xa01, 0x0, 0xffffffff, {0xb, 0x0, 0xf4ff}, [@typed={0x8, 0x6e, 0x0, 0x0, @u32=0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfff4}, 0xc0)

5.954119023s ago: executing program 1 (id=9380):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r0], 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000100)={0xc5e, 0x80, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})

5.898355356s ago: executing program 4 (id=9381):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23})
io_uring_enter(r1, 0x100048ed, 0x0, 0x2, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r4, 0x29, 0x1f, 0x0, &(0x7f00000010c0))
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000003c0)={0x3, 0x0, [{0xc0000001, 0x101, 0x1, 0x7, 0xed8}, {0x80000000, 0x7fffffff, 0x5, 0x800, 0x1}, {0x7, 0x710a, 0xfffffff3, 0x2, 0x4}]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={<r10=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={<r11=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000280)={<r12=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r9, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r10, 0x0, r11, r12], &(0x7f0000000300)=[0x15, 0x3, 0x3ff, 0xfef], 0x4})

5.063686928s ago: executing program 6 (id=9387):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x5f, 0x37, 0x40, 0x471, 0x602, 0xa495, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x42, 0xd8, 0x0, 0xa, [{{0x9, 0x4, 0x0, 0x10, 0x0, 0x32, 0x3a, 0xb4, 0x8}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sync_file_range(r0, 0x2000000, 0x0, 0x5)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/20)

4.823811862s ago: executing program 3 (id=9388):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2001}, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x10000000, 0x0, 0x0, 0x100000000, 0xca8}, {0x3}, 0xff, 0x0, 0x1}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

4.813906816s ago: executing program 4 (id=9389):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0xffffffff, 0xc95a, 0x3, 0x9, 0x7f, 0x2, 0x7fffffff, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x5, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0xc31b, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x7, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x2, 0x3, 0x5, 0x4, 0x6, 0x0, 0x80, 0x0, 0x1, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x200009, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x75, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x8, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x5, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x80000000, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0x6, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x3fffff, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x8, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x3, 0x10006, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8bffe, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0x2383, 0x2, 0x4, 0x6, 0x1, 0x0, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x2, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r0 = socket(0x5, 0x6, 0x200)
listen(r0, 0xdffffffc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x906, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
close(r3)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$proc_mixer(r4, &(0x7f0000000200)=ANY=[], 0x4f)
add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000080), 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x3}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYRES16=r2, @ANYBLOB="d06ff568455ad6d4872e0a31a6712f29e234825eac8cf781da5bf3915c48ebf5458dc4e485d03411b3eddf0771ba424b851766958b9b781ddc94e8676adbefd35ad11d7baf062cf27bba4803eea6a26626324e9abac19100ebce37aa2d7b9287b8187c6ac81245d0d5e8d0eb1439d6905c5c4dc7f0ba67dc7703221a61513231d8bec21466675631efc38de67e79adcf53102484c372db5af771bba20935f74b2f2328cb07fd00c1c633cdb10fe3097dc1211f5dfb18b3042cc495d5fd0396a2d25acb02730a2eb897e9190ab9ae52c4c0b7a23afb1180dae917affda5539ba34ace2b7a2676e2980dc55fd5c2a22f636d86e2710f", @ANYRESDEC=r2], 0x2c}}, 0x4004)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f00000002c0))
socket$inet(0x2, 0x2, 0x8)

4.756080487s ago: executing program 3 (id=9390):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES64], 0x7c}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

4.651428693s ago: executing program 3 (id=9391):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)=0x1)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000200)='0', 0xfffff, 0xfffffffffffffffd)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @empty}], 0x20)

3.462648649s ago: executing program 3 (id=9392):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)

3.179175533s ago: executing program 4 (id=9393):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x2, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0x8000000000000000, 0x4], 0xeeef0000, 0x1c0080})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
listen(0xffffffffffffffff, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000540)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="0268b0bb22e4d1ea70696d7927a7517fe0d5034170cd6e07adab4ebbdb9b442fb9d5a5c607b035e5fb8f3b4bf49497cfc3aca4200e136beb907fbac3b6e3525465ac1a50af95f91c5bbd5e8ea0c2d5014dcb25e22180706bec9dae235740400fd867eb02db6c00a058519428691350d68e2cc2a59d1a89d12f5f0b435603b918e15e24134d833c5506d48e7ff36726c98424a568e8b07d1ed1275068c92bd6c1ab6cd17990614d8560c94d4b78e495"}, {&(0x7f0000000440)="d8506d4473e92624135026267bfa5b90c80b7e3a8f14949890384094d29df773f69aa35c4e0e0240f4286a32c11aa97bd76cad9beaa3e861fe9864e853b2e1eabed9f0f660ca815e62068d3390bd15128e4756af452ac9588593c2c01429a76e5adbdcbc4d746cd56e686d0443ae986a6fd1519bcaf4ed79752f1f80c3287a937be51a9b2cfd3c5493b52f9ce772f8c5b9fd26e0fe35e03137f7b86d925a853ecd1ac094"}, {&(0x7f00000003c0)}], 0x0, 0x0, 0x0, 0x20040000}}], 0x800000000000263, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4800)
setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000040)=0x4, 0x4)

3.096979983s ago: executing program 3 (id=9394):
openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002000400b58803bd3742f5683b247b974ed9fe704242e6205c97c76f4f7f22ee38b9fdd862155804ced64547a7644362158a95a8a638133f80c370a36548aca010380869ce73694fac7f3469ff5fb04f9a58bc"], 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0x4, 0x10003, 0x4, 0xfff}, &(0x7f0000000600)={0x0, 0x989680}, 0x0)
close(0x3)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0021f3000000f32262708cc42dc5e7c78b56d4946d376a00e9bfc0f35f2011db7f2f18ec78f0b586b33945ee5d65cdcb2c27fd8dce2a9b80a8344d589c191b72d2c3a0fb64340ab829299c03c1c7378d63e8bbcbae7844942937279f42e759cae1b401bc89f4f24042fdcf4dbb46ef3849e22038556776a6a3e5903cea6d8b904233996a176ca7131cdc6eb717f43a8492149dce8801fd16e6967af5adc06f4a3c00000000aa4278bf271a9d534c9a1dbf7488f74c8ae46c536492b6626dd2aea5a37ba8058cd55b2a4d24b2c6ccd279c6d21cfdbdc72c1e11ea2f66a58aa18705023975ff443212ca3d8d88b4605120905090ad7f852ed9e2"], &(0x7f0000000000)=ANY=[@ANYBLOB="00033a0000003a036f55551fa2a0ed820617ab087b300f4c949541ffc9380ac50991837390e3951610405b4156a395a295d22a224d1d44b2d06955bed83bb958"]}, &(0x7f0000000500)={0x1c, &(0x7f0000000340)={0x40, 0xf, 0xca, "662c73c93a59f1033028f71bd3a48c8a3362ef64e846d3f4faa5e48d7fafd37dfeece2745f40d225e803372d7e7ae16e05e9a2eb1b516b468ea9a990609d15158ee85519dfa891468dce94e660ecc62b6753acd3813c9fd29aa1a8f898e74e6b51e956a0e5c446ced5e4ba4bed589043b8bb5c64c2d7c8ba2fd56bc31a24883aa9c571830ebe012652f9e97d2260698e5633e04e14bb56ed32ed8faababebcf238c3a5533f2d8349f630bcc3b76594ee53f5b346bfad6f2dcdab094ac1c9d8fc640ba410e5881532b61f"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x0, 0x67, {0x65, "503e95f387932f5b515c131e8fcf911334dd27b6d9612abc8815e78392013d41c9829fcda3e97ebd5a9b5b13428d3ec514a93f0dae2dd6b63c3cd6f3f1d85ed583c432001144b3001814c759d29822c08cab19d58367ea3557715e1e00c685081512acae92"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x2}})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000180)=0x80100001, 0x4)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0)
lseek(r7, 0xfffffffe, 0x1)
pipe2(&(0x7f0000000300)={<r8=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r8, 0x0, 0x1ffffffff}, 0x18)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

3.038845686s ago: executing program 6 (id=9395):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@generic={&(0x7f00000018c0)='./file0\x00'}, 0x14)

2.924418731s ago: executing program 6 (id=9396):
r0 = openat$sequencer2(0xffffff9c, 0x0, 0x1, 0x0)
write$sequencer(r0, &(0x7f0000000040)=[@l={0x92, 0x3, 0xb0, 0x1b, 0xa, 0x3, 0x1}, @l={0x92, 0xe, 0x0, 0xe, 0xf, 0xfc, 0x7fff}, @raw={0xc, 0x2, "df3d96291e1c"}, @generic={0x82}, @e={0xff, 0xa, 0xc, 0x2, @SEQ_CONTROLLER=0xfe, 0x77, 0x9, 0x4}, @s={0x5, @SEQ_MIDIPUTC=0xad, 0x1, 0x5}, @s={0x5, @SEQ_MIDIPUTC=0xfc, 0x3, 0x4}, @t={0x81, 0x5, 0x4, 0x82, @generic=0x1}], 0x31)

2.747981534s ago: executing program 1 (id=9397):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x88, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x12)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000440), &(0x7f0000000cc0)=0x4)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000100)={0x40, 0xc, 0x7, {0x7, 0x22, "5913bb3c7b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000600)={0x18, &(0x7f00000002c0)={0x20, 0x1, 0xfd, {0xfd, 0x0, "00424098750649f99a3736c3a539b4fc1692eabb93bd47ec2c6e92b40b252a156d1cfdd6c55b5eaa2c07bbc19985582719cefafbe88bbdbe0cf0964b4ad2fa3f40308f161df5fea065dc34ba7e3383feb6437df26797daadc2b2ee5861d6b4120bb663e614fbf68f24c3a03ab6a27d4395aa095372181d478c0539b2dd88bac22ac17a0cf348aaa01b49b0c892036c88d3244760ade3dad9f4fece95a3b771fa7b835b9d286ebf4f75cf806ff2150e8f11bb24b43ae630dc9f6b3db35d7dd563f3d4de7fd56b7b65233138e0e5780412a1853ff02ff37ee4e0b1072b2ad32f17d3afc323e6fb00cc05e067b556a45b2a36454eb447763261e1c6c0"}}, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0x0, 0xf, 0xc4, {0x5, 0xf, 0xc4, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0xb, 0xf00, 0xc8, [0xff0000, 0x1e]}, @generic={0xab, 0x10, 0x3, "373f2ecf09b48a7e5b99a1f18924b7806229f9a2a9b8d82d0927e13d38facc6a1c2f7fe2654d1de1d3ad113803c2d9428e3796f1e19a776b19568df2e0a08e477af540566ed33b1dc40490da0b2376556ef8c5f946672c266819102f4bc16cb4a856910ff986853178ad8236c5ab820b9f1aa807e47a8eaec54dd3ecd99fb800e5d75a2a1a9702843fe92b75ca30c47a5e19c1212f87d2359589a5abfbd73da9c748ee5caaa20b6b"}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x4, 0xfa, "8a5f99b5", "6284b507"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0xe0, 0x1, 0x0, 0x3}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000640)={0x40, 0x13, 0x81, "5ea1ebfa3962f1a5904bc8c2c6fd986711e064b6f866fae4ea514e3353207c756fbd71a4d02b96755009b09f1b9a3ea69577e567b84d030dde703cc67801b9fa9c6227cdd31d5a2469cf24a882c29dcba16ec02769370529d57e491c66b9760c7f7bebe72b5447527679edc8535b44e9b303e4e1532db3be4860a2aabbddf7af7a"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf000]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xd3}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000880)={0x40, 0xb, 0x2, "4bd6"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000900)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f0000000940)={0x40, 0x17, 0x6}, &(0x7f0000000980)={0x40, 0x19, 0x2, '|{'}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000000a00)={0x40, 0x1c, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x9b}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6a}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_ethernet(0x52, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x4, 0x0}, {[@timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x0, 0x10, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x30}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4044000)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)

2.663739279s ago: executing program 6 (id=9398):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23})
io_uring_enter(r1, 0x100048ed, 0x0, 0x2, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
r4 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r4, 0x29, 0x1f, 0x0, &(0x7f00000010c0))
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000003c0)={0x3, 0x0, [{0xc0000001, 0x101, 0x1, 0x7, 0xed8}, {0x80000000, 0x7fffffff, 0x5, 0x800, 0x1}, {0x7, 0x710a, 0xfffffff3, 0x2, 0x4}]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={<r10=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={<r11=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000280)={<r12=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r9, 0xc01864cb, &(0x7f0000000340)={&(0x7f00000002c0)=[r10, 0x0, r11, r12], &(0x7f0000000300)=[0x15, 0x3, 0x3ff, 0xfef], 0x4})

1.804744583s ago: executing program 4 (id=9399):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000000)={0x0, 0x0})
getsockopt$sock_int(r1, 0x1, 0x3c, 0x0, &(0x7f0000000000))
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x4, 0x4, 0x648, 0xffffffff, 0x0, 0x408, 0x408, 0xfeffffff, 0xffffffff, 0x580, 0x580, 0x580, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'veth0_to_bond\x00', 'veth0_to_bridge\x00', {}, {}, 0x3a}, 0x2f2, 0x31c, 0x340, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}, @common=@dst={{0x48}, {0x2, 0x1, 0x1, [0x3, 0x0, 0xf, 0x8006, 0x3ffc, 0x8, 0x0, 0x6, 0x2, 0xe0, 0x1, 0x6, 0x1, 0x8, 0x6, 0xb4], 0x2}}]}, @REJECT={0x24}}, {{@ipv6={@remote, @remote, [], [0x0, 0xffffff00], 'rose0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xf}}}, {{@uncond, 0x0, 0x154, 0x178, 0x0, {}, [@common=@ipv6header={{0x24}, {0x0, 0x1}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0x0, 0x0, 0xff]}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a4)

1.11530381s ago: executing program 6 (id=9400):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748edd, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0xfe, 0x0, 0xc8, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xc}, @RTA_ENCAP={0x46, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}}]}, 0x30}, 0x1, 0xffffffff}, 0x0)

858.89861ms ago: executing program 4 (id=9401):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x1000})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, 0x0, &(0x7f00000001c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x3}]})
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000007c0)={0x3b, 0xe, 0x4, "52843401ed406620bc0662b9920828ea4b58f338fdb80e732a1ea05d0936c58723a7ac9db714bf38cf7cda6f389e17e59f7630ede51b7eefb4cbb8"})
socket$inet(0x10, 0x3, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

837.585238ms ago: executing program 6 (id=9402):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
mbind(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x9, 0x0)
mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x4c}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x15, @empty, 0x749}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10fcff00f40000000000008100000010000000290000000800000061060000553b7d271afe9c75b7046a99a3a90b8f99d2a079333a54ab9370d5e49349032f1d115614de9d339351a4b2587deea7f66371933bcdde9d4b790c8881ebe4ec6115858e730882dd191cdf9a3ce6f11dc8825333cb8f9b6ead6e1048752a756e6a9bf40644acbb0c"], 0x20}}], 0x1, 0x80)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xfffffeff, &(0x7f0000000080)={&(0x7f0000000340)=@gettaction={0xc0, 0x32, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd3e}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff1a}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e94}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0xc0}}, 0x40050)
r7 = socket$kcm(0x10, 0x2, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000002f000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000c53d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328562b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaeaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509afd15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4df92cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2571f67a7c7819b0889d7614ab5e25b468ab3102cab53f312f2e29075891bd21c2301f338b8a961a01fb282fd4e53d8c0a2ebb71ceaf7e3b34e4502b5fad975855ce0e4d4c163519fabd209c3d4302f46c90a19d8a0a03396e8949a91184e8d680f724d65700b9a18d28e22810be9fb37ce6cac86c45a03165c1af3152a3c21dc927f0697343abf80e3aae6149b14d08f188e61f900bbb0eae54b0566ad8489918ddc866871e06a5f50cf35b551f7b4c7ae0300838056a65d2e0058c9d8bf1c99d40fb3e2ecdbd68b5f79003c04266a43b8794a5d90b2348f4e81ed1d00000000000000000000e321e9aa37fc5cbee1f627e86e2f58a24ccd9c0376772b2bd5e99ab9d86b753de57a5f40714d11282d809bf6bf5f7009ff38db199273d029f5b65b573722b8131f473775031a7889a2e6b6e804b26429c839373dffd00347a65a2e8ca7d387857dddcea793ce7a08e92648dd663d25d5374ddf20e98e824b269a199210b7064fb6cda054ccef091d11"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e343a185bbf7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010300090c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x89}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000ebc0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_cgroup={{0xffffffd5}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x7, 0x4, 0x0, {0x7, 0x1, 0x7f, 0x2, 0xdb}, {0x8, 0x1, 0x1, 0xadc, 0xf, 0x8}, 0x8e4a, 0x8, 0x3}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x680201, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r9], 0x20)
mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0xfffffeff, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000300), 0x101080, 0x0)
r10 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r10, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r12=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000100)={r12, 0x7fff}, 0xc)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000240)={r12, 0x7, 0x7, 0x800, 0x9, 0x2}, &(0x7f0000000280)=0x14)

0s ago: executing program 3 (id=9403):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)

kernel console output (not intermixed with test programs):

ge_slave_0: left promiscuous mode
[ 2204.837360][T31492] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2204.895184][ T5880] hid-steam 0003:28DE:1142.0077: Steam wireless receiver disconnected
[ 2204.908665][   T47] usb 4-1: config index 0 descriptor too short (expected 1068, got 27)
[ 2204.916990][   T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 26
[ 2204.956599][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10
[ 2204.997930][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 2205.035551][   T47] usb 4-1: New USB device found, idVendor=06e8, idProduct=b000, bcdDevice=81.f9
[ 2205.062633][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2205.078396][ T5898] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[ 2205.092715][   T47] usb 4-1: Product: syz
[ 2205.097016][   T47] usb 4-1: Manufacturer: syz
[ 2205.129565][   T47] usb 4-1: SerialNumber: syz
[ 2205.150992][   T47] usb 4-1: config 0 descriptor??
[ 2205.260093][ T5898] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 2205.274258][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2205.285594][ T5898] usb 3-1: Product: syz
[ 2205.290313][ T5898] usb 3-1: Manufacturer: syz
[ 2205.295207][ T5898] usb 3-1: SerialNumber: syz
[ 2205.304683][ T5898] usb 3-1: config 0 descriptor??
[ 2205.373284][   T47] usb 4-1: USB disconnect, device number 77
[ 2205.488105][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2205.968877][T27459] Bluetooth: hci2: command tx timeout
[ 2206.331743][T31492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2206.343528][T31492] bond_slave_0: left promiscuous mode
[ 2206.355015][T31492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2206.365494][T31492] bond_slave_1: left promiscuous mode
[ 2206.375036][T31492] bond0 (unregistering): Released all slaves
[ 2206.437698][ T4336] vlan3: entered promiscuous mode
[ 2206.466519][ T4358] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 2206.528092][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2206.614005][T25905] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2206.658178][T25905] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 2206.671858][T31492] ave_0: left promiscuous mode
[ 2206.677008][T25905] usb 2-1: can't read configurations, error -71
[ 2206.772891][T31492] tipc: Left network mode
[ 2206.929048][T30022] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 2207.090935][T30022] usb 5-1: config 0 has an invalid interface number: 87 but max is 0
[ 2207.124480][T30022] usb 5-1: config 0 has no interface number 0
[ 2207.144677][T30022] usb 5-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30
[ 2207.174736][ T4380] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 2207.188777][T30022] usb 5-1: config 0 interface 87 altsetting 28 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 2207.236630][T30022] usb 5-1: config 0 interface 87 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 204
[ 2207.323404][T31492] hsr_slave_0: left promiscuous mode
[ 2207.331931][T31492] hsr_slave_1: left promiscuous mode
[ 2207.338911][T31492] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2207.346737][T31492] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2207.357294][T31492] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2207.365246][T31492] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2207.418343][T31492] veth1_macvtap: left promiscuous mode
[ 2207.438209][T31492] veth0_macvtap: left promiscuous mode
[ 2207.535909][T30022] usb 5-1: config 0 interface 87 has no altsetting 0
[ 2207.568316][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2207.609840][T30022] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4
[ 2207.621627][T30022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2207.648740][T30022] usb 5-1: Product: syz
[ 2207.652975][T30022] usb 5-1: Manufacturer: syz
[ 2207.657602][T30022] usb 5-1: SerialNumber: syz
[ 2207.679293][T30022] usb 5-1: config 0 descriptor??
[ 2207.687449][ T4389] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9099'.
[ 2207.734747][T30022] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2208.056683][T27459] Bluetooth: hci2: command tx timeout
[ 2208.071055][T30022] usb 5-1: USB disconnect, device number 89
[ 2208.072952][T25949] usb 5-1: Failed to submit usb control message: -71
[ 2208.148310][T25949] usb 5-1: unable to send the bmi data to the device: -71
[ 2208.155512][T25949] usb 5-1: unable to get target info from device
[ 2208.231620][T25949] usb 5-1: could not get target info (-71)
[ 2208.237624][T25949] usb 5-1: could not probe fw (-71)
[ 2208.618089][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2209.292308][T31492] team0 (unregistering): Port device team_slave_0 removed
[ 2209.403950][T30022] usb 3-1: USB disconnect, device number 62
[ 2209.655631][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2210.132561][T27459] Bluetooth: hci2: command tx timeout
[ 2210.325606][ T4389] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 2210.337133][ T4396] syz_tun: entered allmulticast mode
[ 2210.343063][ T4396] syz_tun: left allmulticast mode
[ 2210.357410][ T4407] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 2210.515325][ T4334] chnl_net:caif_netlink_parms(): no params data found
[ 2210.621511][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9104'.
[ 2210.698127][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2211.119809][ T4449] tipc: Failed to remove unknown binding: 66,1,1/0:1649982051/1649982053
[ 2211.174545][ T4438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9107'.
[ 2211.198186][T10905] usb 3-1: new low-speed USB device number 63 using dummy_hcd
[ 2211.329230][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2211.377646][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2211.407555][T10905] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 2211.421252][ T5898] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 2211.429403][ T4334] bridge_slave_0: entered allmulticast mode
[ 2211.447250][T10905] usb 3-1: config 0 has no interface number 0
[ 2211.477040][ T4334] bridge_slave_0: entered promiscuous mode
[ 2211.483173][T10905] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2211.507761][T10905] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 2211.518936][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2211.526140][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2211.530385][T10905] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2211.601146][ T4334] bridge_slave_1: entered allmulticast mode
[ 2211.612622][ T4334] bridge_slave_1: entered promiscuous mode
[ 2211.623409][T10905] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 2211.649526][ T5898] usb 2-1: Using ep0 maxpacket: 8
[ 2211.672725][ T5898] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 2211.718119][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2211.728404][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2211.742516][T10905] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 2211.783215][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2211.793436][ T5898] usb 2-1: config 0 has no interface number 0
[ 2211.800828][T10905] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2211.839714][ T5898] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 2211.845148][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2211.908714][T10905] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2211.928200][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2211.950212][T10905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2211.977222][ T5898] usb 2-1: Product: syz
[ 2212.000689][ T5898] usb 2-1: Manufacturer: syz
[ 2212.013892][T10905] usb 3-1: config 0 descriptor??
[ 2212.023937][ T5898] usb 2-1: SerialNumber: syz
[ 2212.071804][ T4442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2212.089977][ T5898] usb 2-1: config 0 descriptor??
[ 2212.118867][ T4442] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2212.160744][T10905] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2212.209604][T27459] Bluetooth: hci2: command tx timeout
[ 2212.234864][ T4334] team0: Port device team_slave_0 added
[ 2212.245744][ T4334] team0: Port device team_slave_1 added
[ 2212.338385][ T5898] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[ 2212.373215][ T5898] usb 2-1: No valid video chain found.
[ 2212.500825][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2212.544036][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2212.558243][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2212.598637][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2212.624842][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2212.658297][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2212.726248][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2212.746987][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2212.773191][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2212.789498][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2212.949892][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9111'.
[ 2212.960459][ T4473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9111'.
[ 2212.970174][ T4473] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9111'.
[ 2213.287461][ T4334] hsr_slave_0: entered promiscuous mode
[ 2213.297779][ T4334] hsr_slave_1: entered promiscuous mode
[ 2213.348214][ T5898] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 2213.508155][ T5898] usb 5-1: device descriptor read/64, error -71
[ 2213.686427][   T30] audit: type=1326 audit(1747606828.930:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4433 comm="syz.2.9106" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7fc00000
[ 2213.788120][ T5898] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 2213.808119][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2213.941695][T30022] usb 3-1: USB disconnect, device number 63
[ 2213.954720][ T5898] usb 5-1: device descriptor read/64, error -71
[ 2213.976955][T30022] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 2214.129242][ T5898] usb usb5-port1: attempt power cycle
[ 2214.134899][T10905] usb 2-1: USB disconnect, device number 102
[ 2214.247790][ T4481] veth0_to_bond: entered allmulticast mode
[ 2214.273806][ T4481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9114'.
[ 2214.399113][ T4481] veth0_to_bond (unregistering): left allmulticast mode
[ 2214.616541][ T5898] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 2214.688961][ T5898] usb 5-1: device descriptor read/8, error -71
[ 2214.792613][ T4494] FAULT_INJECTION: forcing a failure.
[ 2214.792613][ T4494] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2214.806533][ T4494] CPU: 1 UID: 0 PID: 4494 Comm: syz.2.9117 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[ 2214.806562][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2214.806575][ T4494] Call Trace:
[ 2214.806584][ T4494]  <TASK>
[ 2214.806593][ T4494]  dump_stack_lvl+0x189/0x250
[ 2214.806633][ T4494]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2214.806664][ T4494]  ? __pfx__printk+0x10/0x10
[ 2214.806698][ T4494]  should_fail_ex+0x414/0x560
[ 2214.806727][ T4494]  _copy_to_user+0x31/0xb0
[ 2214.806760][ T4494]  simple_read_from_buffer+0xe1/0x170
[ 2214.806792][ T4494]  proc_fail_nth_read+0x1df/0x250
[ 2214.806827][ T4494]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2214.806861][ T4494]  ? rw_verify_area+0x258/0x650
[ 2214.806894][ T4494]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2214.806926][ T4494]  vfs_read+0x1fd/0x980
[ 2214.806968][ T4494]  ? __pfx___mutex_lock+0x10/0x10
[ 2214.806997][ T4494]  ? __pfx_vfs_read+0x10/0x10
[ 2214.807023][ T4494]  ? __fget_files+0x2a/0x420
[ 2214.807054][ T4494]  ? __fget_files+0x3a0/0x420
[ 2214.807078][ T4494]  ? __fget_files+0x2a/0x420
[ 2214.807112][ T4494]  ksys_read+0x145/0x250
[ 2214.807139][ T4494]  ? __pfx_ksys_read+0x10/0x10
[ 2214.807165][ T4494]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2214.807193][ T4494]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2214.807222][ T4494]  __do_fast_syscall_32+0xb4/0x110
[ 2214.807249][ T4494]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2214.807281][ T4494]  do_fast_syscall_32+0x34/0x80
[ 2214.807309][ T4494]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2214.807333][ T4494] RIP: 0023:0xf710e539
[ 2214.807352][ T4494] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2214.807371][ T4494] RSP: 002b:00000000f50fe590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 2214.807393][ T4494] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f50fe620
[ 2214.807407][ T4494] RDX: 000000000000000f RSI: 00000000f7472ff4 RDI: 0000000000000000
[ 2214.807419][ T4494] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2214.807432][ T4494] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2214.807444][ T4494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2214.807474][ T4494]  </TASK>
[ 2214.868369][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2214.870439][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2215.043846][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2215.149969][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2215.218338][ T5898] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 2215.398299][T32142] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[ 2215.428916][ T5898] usb 5-1: device descriptor read/8, error -71
[ 2215.828694][T30022] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 2215.888115][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2216.014853][ T5898] usb usb5-port1: unable to enumerate USB device
[ 2216.344969][T30022] usb 2-1: config 0 has no interfaces?
[ 2216.361512][T30022] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2216.417715][T30022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2216.438770][T32142] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[ 2216.445358][T30022] usb 2-1: Product: syz
[ 2216.469931][T30022] usb 2-1: Manufacturer: syz
[ 2216.471980][T32142] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[ 2216.476270][T30022] usb 2-1: SerialNumber: syz
[ 2216.507240][T32142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2216.515824][T30022] usb 2-1: config 0 descriptor??
[ 2216.539874][T32142] usb 3-1: Product: syz
[ 2216.545514][T32142] usb 3-1: Manufacturer: syz
[ 2216.573933][T32142] usb 3-1: SerialNumber: syz
[ 2216.627598][T32142] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[ 2216.662989][T32142] dvb-usb: bulk message failed: -22 (3/0)
[ 2216.810306][T32142] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2216.894753][ T4524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2216.914822][T32142] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[ 2216.928109][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2217.003431][ T4524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2217.125063][T32142] dvb_usb_umt_010 3-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22
[ 2217.158913][T32142] usb 3-1: USB disconnect, device number 64
[ 2217.204792][ T4531] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9128'.
[ 2217.748717][T25905] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 2217.822421][ T4334] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2217.851884][ T4334] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2217.885566][ T4334] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2217.899023][T25905] usb 4-1: device descriptor read/64, error -71
[ 2217.900894][ T4334] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2217.978088][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2218.067039][ T4545] netlink: 'syz.2.9131': attribute type 4 has an invalid length.
[ 2218.155051][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2218.159054][T25905] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 2218.289922][ T4334] 8021q: adding VLAN 0 to HW filter on device team0
[ 2218.328930][T25905] usb 4-1: device descriptor read/64, error -71
[ 2218.379977][T10905] usb 2-1: USB disconnect, device number 103
[ 2218.445080][T31492] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2218.452429][T31492] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2218.518810][T25905] usb usb4-port1: attempt power cycle
[ 2218.613872][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2218.621153][ T9353] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2218.808752][ T5880] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 2218.834029][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2218.901228][T25905] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 2218.930169][T25905] usb 4-1: device descriptor read/8, error -71
[ 2218.960534][ T5880] usb 2-1: Using ep0 maxpacket: 32
[ 2218.970751][ T4334] veth0_vlan: entered promiscuous mode
[ 2218.980778][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 2219.002381][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2219.018161][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2219.021207][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 2219.036900][ T4334] veth1_vlan: entered promiscuous mode
[ 2219.056388][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 2219.083204][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 2219.103307][ T4334] veth0_macvtap: entered promiscuous mode
[ 2219.113334][ T5880] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 2219.123852][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2219.141122][ T4334] veth1_macvtap: entered promiscuous mode
[ 2219.149042][ T5880] usb 2-1: Product: syz
[ 2219.153265][ T5880] usb 2-1: Manufacturer: syz
[ 2219.157957][ T5880] usb 2-1: SerialNumber: syz
[ 2219.168795][T25905] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[ 2219.210379][T25905] usb 4-1: device descriptor read/8, error -71
[ 2219.217863][ T5880] usb 2-1: config 0 descriptor??
[ 2219.225156][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2219.246509][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2219.292837][ T4334] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2219.312707][ T4334] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2219.329271][T25905] usb usb4-port1: unable to enumerate USB device
[ 2219.343194][ T4334] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2219.362977][ T4334] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2219.721657][ T4555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2219.736781][ T4555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2219.760503][ T5880] iforce 2-1:0.0: usb_submit_urb failed: -32
[ 2219.780488][T25949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2219.791002][T25949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2219.799341][ T5880] input input157: Device does not respond to id packet M
[ 2219.810261][ T5880] iforce 2-1:0.0: usb_submit_urb failed: -32
[ 2219.816432][ T5880] input input157: Device does not respond to id packet P
[ 2219.915440][ T7902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2219.931826][ T7902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2220.058114][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2220.085377][ T4584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9138'.
[ 2220.095067][ T4584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9138'.
[ 2220.104832][ T4584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9138'.
[ 2220.129661][T25905] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2220.169972][ T4555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2220.180662][ T4555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2220.197232][ T5880] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 2220.211907][ T5880] input input157: Device does not respond to id packet B
[ 2220.222450][ T5880] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 2220.229199][ T5880] input input157: Device does not respond to id packet N
[ 2220.247202][ T5880] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 2220.254885][ T5880] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 2220.279063][ T5880] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 2220.290084][ T5880] iforce 2-1:0.0: usb_submit_urb failed: -71
[ 2220.300203][T25905] usb 5-1: Using ep0 maxpacket: 32
[ 2220.309419][T25905] usb 5-1: config 64 has an invalid interface number: 110 but max is 0
[ 2220.323352][ T5880] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input157
[ 2220.335971][T25905] usb 5-1: config 64 has no interface number 0
[ 2220.346688][T25905] usb 5-1: config 64 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2220.400114][ T5880] usb 2-1: USB disconnect, device number 104
[ 2220.415182][   T30] audit: type=1326 audit(1747606835.660:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc4539 code=0x7ffc0000
[ 2220.437781][T25905] usb 5-1: config 64 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 2220.463892][T25905] usb 5-1: config 64 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[ 2220.518227][ T5898] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 2220.519276][T25905] usb 5-1: config 64 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 2220.539542][T25905] usb 5-1: config 64 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2220.550536][T25905] usb 5-1: config 64 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[ 2220.562933][T25905] usb 5-1: config 64 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2220.628599][T25905] usb 5-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9
[ 2220.638146][T25905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2220.654476][T25905] usb 5-1: Product: syz
[ 2220.669304][T25905] usb 5-1: Manufacturer: syz
[ 2220.683410][T25905] usb 5-1: SerialNumber: syz
[ 2220.762465][ T4578] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 2220.783434][   T30] audit: type=1326 audit(1747606835.660:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=449 compat=1 ip=0xf7fc4539 code=0x7ffc0000
[ 2220.806000][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2220.814441][T25905] spcp8x5 5-1:64.110: SPCP8x5 converter detected
[ 2220.831642][ T5898] usb 3-1: device descriptor read/64, error -71
[ 2220.925142][T25905] usb 5-1: SPCP8x5 converter now attached to ttyUSB0
[ 2220.958871][   T30] audit: type=1326 audit(1747606835.680:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000
[ 2221.013165][ T4578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2221.088202][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2221.108171][ T5898] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 2221.109281][   T30] audit: type=1326 audit(1747606835.680:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000
[ 2221.137792][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2221.163287][ T4578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2221.179744][T20379] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 2221.181029][   T30] audit: type=1326 audit(1747606835.680:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000
[ 2221.210633][   T30] audit: type=1326 audit(1747606835.680:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000
[ 2221.226488][T28442] usb 5-1: USB disconnect, device number 94
[ 2221.273448][   T30] audit: type=1326 audit(1747606835.680:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000
[ 2221.296645][   T30] audit: type=1326 audit(1747606835.680:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000
[ 2221.329239][ T5898] usb 3-1: device descriptor read/64, error -71
[ 2221.343124][   T30] audit: type=1326 audit(1747606835.680:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000
[ 2221.371707][   T30] audit: type=1326 audit(1747606835.680:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4588 comm="syz.6.9082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc4558 code=0x7ffc0000
[ 2221.390740][T28442] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[ 2221.481608][ T5898] usb usb3-port1: attempt power cycle
[ 2221.498900][T20379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2221.514769][T28442] spcp8x5 5-1:64.110: device disconnected
[ 2221.534128][T20379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2221.563669][T20379] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 2221.573110][T20379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2221.590873][T20379] usb 2-1: config 0 descriptor??
[ 2221.858757][ T5898] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 2221.974248][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.980792][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2222.006181][T20379] kone 0003:1E7D:2CED.0079: item fetching failed at offset 2/5
[ 2222.022782][ T5898] usb 3-1: device descriptor read/8, error -71
[ 2222.053411][T20379] kone 0003:1E7D:2CED.0079: parse failed
[ 2222.128141][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2222.151354][T20379] kone 0003:1E7D:2CED.0079: probe with driver kone failed with error -22
[ 2222.289484][T20379] usb 2-1: USB disconnect, device number 105
[ 2222.310854][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9146'.
[ 2222.370273][ T5898] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 2222.446105][ T5898] usb 3-1: device descriptor read/8, error -71
[ 2222.590211][ T5898] usb usb3-port1: unable to enumerate USB device
[ 2222.853114][T32142] usb 7-1: new high-speed USB device number 116 using dummy_hcd
[ 2222.887241][T10905] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[ 2223.063652][T10905] usb 4-1: Using ep0 maxpacket: 16
[ 2223.082798][T32142] usb 7-1: config 0 has no interfaces?
[ 2223.168136][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2223.182615][T10905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 58, changing to 9
[ 2223.195308][T10905] usb 4-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00
[ 2223.204655][T10905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2223.217246][T10905] usb 4-1: config 0 descriptor??
[ 2223.218276][T25905] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 2223.436781][T32142] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2223.442628][T25905] usb 2-1: Using ep0 maxpacket: 32
[ 2223.446718][T32142] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2223.474322][T32142] usb 7-1: Product: syz
[ 2223.483063][T32142] usb 7-1: Manufacturer: syz
[ 2223.487725][T32142] usb 7-1: SerialNumber: syz
[ 2223.496205][T32142] usb 7-1: config 0 descriptor??
[ 2223.541049][T25905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2223.588726][T25905] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2223.652740][T10905] apple 0003:05AC:0267.007A: unbalanced delimiter at end of report description
[ 2223.665355][T25905] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[ 2223.679256][T10905] apple 0003:05AC:0267.007A: parse failed
[ 2223.685414][T10905] apple 0003:05AC:0267.007A: probe with driver apple failed with error -22
[ 2223.777577][T25905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2223.806221][T25905] usb 2-1: config 0 descriptor??
[ 2223.843517][T32142] usb 4-1: USB disconnect, device number 82
[ 2223.889987][   T47] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 2224.097093][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2224.163011][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2224.188790][   T47] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 2224.208318][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2224.211049][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2224.259556][   T47] usb 3-1: config 0 descriptor??
[ 2224.463386][T25905] usbhid 2-1:0.0: can't add hid device: -71
[ 2224.512822][T25905] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2224.609322][T25905] usb 2-1: USB disconnect, device number 106
[ 2224.778102][ T5880] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 2224.903511][   T47] pyra 0003:1E7D:2CF6.007B: unknown main item tag 0x4
[ 2224.930512][   T47] pyra 0003:1E7D:2CF6.007B: item fetching failed at offset 5/7
[ 2224.959055][ T5880] usb 5-1: Using ep0 maxpacket: 32
[ 2224.965258][   T47] pyra 0003:1E7D:2CF6.007B: parse failed
[ 2224.983427][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2224.996452][   T47] pyra 0003:1E7D:2CF6.007B: probe with driver pyra failed with error -22
[ 2225.016023][ T5880] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 2225.055856][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2225.098805][ T5880] usb 5-1: Product: syz
[ 2225.103088][ T5880] usb 5-1: Manufacturer: syz
[ 2225.134204][   T47] usb 3-1: USB disconnect, device number 69
[ 2225.164842][ T5880] usb 5-1: SerialNumber: syz
[ 2225.225161][ T5880] usb 5-1: config 0 descriptor??
[ 2225.248208][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2225.319239][T25905] usb 7-1: USB disconnect, device number 116
[ 2225.563963][ T5880] gs_usb 5-1:0.0: Couldn't get device config: (err=-71)
[ 2225.573274][ T5880] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[ 2225.590882][ T5880] usb 5-1: USB disconnect, device number 95
[ 2225.728955][T32142] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 2225.930208][T32142] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 2225.941797][T32142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2225.983112][T32142] usb 4-1: config 0 descriptor??
[ 2226.069123][ T5880] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 2226.138723][T25905] usb 7-1: new high-speed USB device number 117 using dummy_hcd
[ 2226.187054][ T4708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9171'.
[ 2226.238805][ T5880] usb 5-1: Using ep0 maxpacket: 32
[ 2226.288183][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2226.293553][T25905] usb 7-1: device descriptor read/64, error -71
[ 2226.399372][T32142] elan 0003:04F3:0755.007C: unknown main item tag 0x0
[ 2226.432959][T32142] elan 0003:04F3:0755.007C: unknown main item tag 0x0
[ 2226.457832][ T5880] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[ 2226.502527][ T5880] usb 5-1: config 0 has no interface number 0
[ 2226.553358][ T5880] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2226.592443][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2226.601986][T32142] elan 0003:04F3:0755.007C: unknown main item tag 0x0
[ 2226.640911][T32142] elan 0003:04F3:0755.007C: unknown main item tag 0x0
[ 2226.682512][T32142] elan 0003:04F3:0755.007C: unknown main item tag 0x0
[ 2226.728898][ T5880] usb 5-1: Product: syz
[ 2226.733214][ T5880] usb 5-1: Manufacturer: syz
[ 2226.737880][ T5880] usb 5-1: SerialNumber: syz
[ 2226.748872][   T47] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 2226.756624][T25905] usb 7-1: new high-speed USB device number 118 using dummy_hcd
[ 2226.807398][ T5880] usb 5-1: config 0 descriptor??
[ 2226.865532][T32142] elan 0003:04F3:0755.007C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[ 2226.971105][ T5880] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2226.990686][T25905] usb 7-1: device descriptor read/64, error -71
[ 2227.016419][   T47] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2227.089609][   T47] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2227.154325][T25905] usb usb7-port1: attempt power cycle
[ 2227.170765][   T47] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2227.175885][ T5898] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 2227.197959][ T5880] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2227.243852][   T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 2227.300503][ T5880] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2227.328195][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2227.337614][   T47] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 2227.418255][ T5898] usb 3-1: Using ep0 maxpacket: 8
[ 2227.445070][ T5898] usb 3-1: config 8 has an invalid interface number: 188 but max is 0
[ 2227.467479][   T47] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2227.499305][ T5898] usb 3-1: config 8 has no interface number 0
[ 2227.499674][   T47] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2227.535988][ T5898] usb 3-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[ 2227.563907][T25905] usb 7-1: new high-speed USB device number 119 using dummy_hcd
[ 2227.591212][ T5898] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2227.633504][ T5898] usb 3-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2227.674645][   T47] usb 2-1: Product: syz
[ 2227.674697][   T47] usb 2-1: Manufacturer: syz
[ 2227.701862][ T5898] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[ 2227.701920][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2227.701941][ T5898] usb 3-1: Product: syz
[ 2227.701957][ T5898] usb 3-1: Manufacturer: syz
[ 2227.701973][ T5898] usb 3-1: SerialNumber: syz
[ 2227.713604][T25905] usb 7-1: device descriptor read/8, error -71
[ 2227.770683][T32142] usb 4-1: USB disconnect, device number 83
[ 2227.835305][   T47] cdc_wdm 2-1:1.0: skipping garbage
[ 2227.835330][   T47] cdc_wdm 2-1:1.0: skipping garbage
[ 2227.862118][   T47] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 2227.862178][   T47] cdc_wdm 2-1:1.0: Unknown control protocol
[ 2227.886479][   T30] kauditd_printk_skb: 164 callbacks suppressed
[ 2227.886500][   T30] audit: type=1326 audit(1747606843.130:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2227.894289][   T30] audit: type=1326 audit(1747606843.130:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2227.897955][   T30] audit: type=1326 audit(1747606843.140:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2227.898081][   T30] audit: type=1326 audit(1747606843.140:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2227.898128][   T30] audit: type=1326 audit(1747606843.140:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2227.901339][   T30] audit: type=1326 audit(1747606843.150:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2227.939337][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2228.007484][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2228.052914][    C1] vkms_vblank_simulate: vblank timer overrun
[ 2228.220434][ T4717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2228.220971][ T4717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2228.254273][ T4710] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[ 2228.267265][T32142] usb 2-1: USB disconnect, device number 107
[ 2228.307966][T10905] IPVS: starting estimator thread 0...
[ 2228.368323][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2228.408502][ T4726] IPVS: using max 30 ests per chain, 72000 per kthread
[ 2228.408712][T25905] usb 7-1: new high-speed USB device number 120 using dummy_hcd
[ 2228.429439][T25905] usb 7-1: device descriptor read/8, error -71
[ 2228.454175][   T30] audit: type=1326 audit(1747606843.150:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2228.454262][   T30] audit: type=1326 audit(1747606843.320:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2228.454312][   T30] audit: type=1326 audit(1747606843.320:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2228.454379][   T30] audit: type=1326 audit(1747606843.320:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4724 comm="syz.3.9175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14539 code=0x7ffc0000
[ 2228.539071][T25905] usb usb7-port1: unable to enumerate USB device
[ 2229.216048][ T4734] usb usb8: usbfs: process 4734 (syz.1.9176) did not claim interface 0 before use
[ 2229.418212][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2230.444957][ T5898] vmk80xx 3-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[ 2230.453479][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2230.577370][ T4743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2230.629673][ T5898] vmk80xx 3-1:8.188: probe with driver vmk80xx failed with error -22
[ 2230.642610][ T5898] usb 3-1: USB disconnect, device number 70
[ 2230.857377][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2230.870014][   T24] usb 5-1: USB disconnect, device number 96
[ 2230.878153][T32142] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 2230.899141][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2230.979303][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2231.000137][   T24] quatech2 5-1:0.51: device disconnected
[ 2231.068915][T32142] usb 2-1: Using ep0 maxpacket: 16
[ 2231.100921][T32142] usb 2-1: config 8 has an invalid interface number: 39 but max is 0
[ 2231.143599][T32142] usb 2-1: config 8 has no interface number 0
[ 2231.169369][T32142] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[ 2231.217009][T32142] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2231.253854][T32142] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[ 2231.292867][T32142] usb 2-1: config 8 interface 39 has no altsetting 0
[ 2231.323046][T32142] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[ 2231.336266][T32142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2231.349081][T32142] usb 2-1: Product: syz
[ 2231.357798][T32142] usb 2-1: Manufacturer: syz
[ 2231.368143][T32142] usb 2-1: SerialNumber: syz
[ 2231.488098][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2231.521700][   T24] usb 4-1: new full-speed USB device number 84 using dummy_hcd
[ 2231.683815][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2231.695872][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2231.731393][   T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 2231.741331][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2231.762043][   T24] usb 4-1: config 0 descriptor??
[ 2231.805735][T32142] ipheth 2-1:8.39: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[ 2231.838685][T32142] ipheth 2-1:8.39: probe with driver ipheth failed with error -22
[ 2232.181899][   T24] usb 4-1: string descriptor 0 read error: -22
[ 2232.319239][   T47] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[ 2232.429889][   T24] uclogic 0003:256C:006D.007D: failed retrieving string descriptor #100: -71
[ 2232.485137][   T24] uclogic 0003:256C:006D.007D: failed retrieving pen parameters: -71
[ 2232.528122][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2232.539799][   T24] uclogic 0003:256C:006D.007D: failed probing pen v1 parameters: -71
[ 2232.552869][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2232.616795][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2232.626651][   T24] uclogic 0003:256C:006D.007D: failed probing parameters: -71
[ 2232.634819][   T47] usb 3-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0
[ 2232.646236][   T24] uclogic 0003:256C:006D.007D: probe with driver uclogic failed with error -71
[ 2232.655995][   T47] usb 3-1: Manufacturer: syz
[ 2232.669049][T25905] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2232.821343][   T47] usb 3-1: config 0 descriptor??
[ 2232.846571][   T24] usb 4-1: USB disconnect, device number 84
[ 2232.861121][   T47] hub 3-1:0.0: USB hub found
[ 2233.053933][T25905] usb 5-1: config 0 has no interfaces?
[ 2233.065119][   T47] hub 3-1:0.0: 1 port detected
[ 2233.072147][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2233.103805][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2233.119404][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2233.131878][T25905] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2233.141928][T25905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2233.143633][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2233.187489][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2233.205702][T25905] usb 5-1: Product: syz
[ 2233.228687][T25905] usb 5-1: Manufacturer: syz
[ 2233.265085][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2233.279157][T25905] usb 5-1: SerialNumber: syz
[ 2233.293282][   T47] hub 3-1:0.0: hub_hub_status failed (err = -32)
[ 2233.306231][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2233.325185][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2233.329350][T25905] usb 5-1: config 0 descriptor??
[ 2233.339098][   T24] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 2233.352126][   T47] hub 3-1:0.0: config failed, can't get hub status (err -32)
[ 2233.354514][ T4807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2233.374678][ T4807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2233.518381][ T5898] usb 2-1: USB disconnect, device number 108
[ 2233.568118][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2233.587897][ T4844] FAULT_INJECTION: forcing a failure.
[ 2233.587897][ T4844] name failslab, interval 1, probability 0, space 0, times 0
[ 2233.602614][ T4844] CPU: 0 UID: 0 PID: 4844 Comm: syz.1.9206 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[ 2233.602644][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2233.602659][ T4844] Call Trace:
[ 2233.602669][ T4844]  <TASK>
[ 2233.602679][ T4844]  dump_stack_lvl+0x189/0x250
[ 2233.602717][ T4844]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2233.602747][ T4844]  ? __pfx__printk+0x10/0x10
[ 2233.602767][ T4844]  ? __pfx___might_resched+0x10/0x10
[ 2233.602785][ T4844]  should_fail_ex+0x414/0x560
[ 2233.602812][ T4844]  should_failslab+0xa8/0x100
[ 2233.602844][ T4844]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 2233.602872][ T4844]  ? __alloc_skb+0x112/0x2d0
[ 2233.602903][ T4844]  __alloc_skb+0x112/0x2d0
[ 2233.602925][ T4844]  netlink_sendmsg+0x5c6/0xb30
[ 2233.602951][ T4844]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2233.602982][ T4844]  ? __import_iovec+0x5d4/0x7f0
[ 2233.603010][ T4844]  ? aa_sock_msg_perm+0x94/0x160
[ 2233.603035][ T4844]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2233.603058][ T4844]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2233.603078][ T4844]  __sock_sendmsg+0x219/0x270
[ 2233.603096][ T4844]  ____sys_sendmsg+0x505/0x830
[ 2233.603131][ T4844]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2233.603177][ T4844]  ___sys_sendmsg+0x21f/0x2a0
[ 2233.603208][ T4844]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2233.603262][ T4844]  ? __fget_files+0x2a/0x420
[ 2233.603292][ T4844]  ? __fget_files+0x3a0/0x420
[ 2233.603330][ T4844]  __sys_sendmsg+0x164/0x220
[ 2233.603360][ T4844]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2233.603393][ T4844]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2233.603416][ T4844]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2233.603448][ T4844]  __do_fast_syscall_32+0xb4/0x110
[ 2233.603476][ T4844]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2233.603506][ T4844]  do_fast_syscall_32+0x34/0x80
[ 2233.603527][ T4844]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2233.603546][ T4844] RIP: 0023:0xf7f03539
[ 2233.603559][ T4844] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2233.603577][ T4844] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2233.603600][ T4844] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[ 2233.603614][ T4844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2233.603626][ T4844] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2233.603637][ T4844] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2233.603649][ T4844] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2233.603674][ T4844]  </TASK>
[ 2233.621962][   T24] usb 4-1: Using ep0 maxpacket: 8
[ 2233.902526][   T24] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64
[ 2233.917143][   T24] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 64
[ 2234.057251][   T24] usb 4-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[ 2234.071759][   T24] usb 4-1: config 1 interface 0 has no altsetting 0
[ 2234.080452][   T47] usbhid 3-1:0.0: can't add hid device: -71
[ 2234.089705][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2234.105175][   T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2234.115666][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2234.129234][   T24] usb 4-1: SerialNumber: syz
[ 2234.139979][ T4833] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 2234.147429][ T4833] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 2234.161090][   T47] usb 3-1: USB disconnect, device number 71
[ 2234.377980][   T24] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[ 2234.393043][   T24] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[ 2234.408268][   T24] usb 4-1: USB disconnect, device number 85
[ 2234.410132][ T4855] Invalid logical block size (43090)
[ 2234.608104][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2235.500288][T32142] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 2235.594546][ T5898] usb 5-1: USB disconnect, device number 97
[ 2235.621964][   T30] kauditd_printk_skb: 50 callbacks suppressed
[ 2235.621985][   T30] audit: type=1326 audit(1747606850.870:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2235.658118][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2235.700420][   T30] audit: type=1326 audit(1747606850.870:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2235.770774][T32142] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2235.788243][T32142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 6701, setting to 64
[ 2235.813763][   T30] audit: type=1326 audit(1747606850.900:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2235.872067][T32142] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2235.886841][T32142] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2235.912504][T32142] usb 4-1: Manufacturer: syz
[ 2235.927735][   T30] audit: type=1326 audit(1747606850.900:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2235.931492][T32142] usb 4-1: config 0 descriptor??
[ 2235.955083][T20379] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 2236.009138][   T30] audit: type=1326 audit(1747606850.900:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2236.065259][ T4896] FAULT_INJECTION: forcing a failure.
[ 2236.065259][ T4896] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2236.078569][   T30] audit: type=1326 audit(1747606850.920:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2236.146034][T20379] usb 3-1: config 0 has no interfaces?
[ 2236.163155][ T4896] CPU: 0 UID: 0 PID: 4896 Comm: syz.6.9223 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[ 2236.163185][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2236.163199][ T4896] Call Trace:
[ 2236.163208][ T4896]  <TASK>
[ 2236.163218][ T4896]  dump_stack_lvl+0x189/0x250
[ 2236.163253][ T4896]  ? __lock_acquire+0xaac/0xd20
[ 2236.163287][ T4896]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2236.163316][ T4896]  ? __pfx__printk+0x10/0x10
[ 2236.163338][ T4896]  ? __might_fault+0xb0/0x130
[ 2236.163378][ T4896]  should_fail_ex+0x414/0x560
[ 2236.163406][ T4896]  _copy_from_iter+0x1db/0x15a0
[ 2236.163441][ T4896]  ? trace_kmem_cache_alloc+0x1f/0xc0
[ 2236.163466][ T4896]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[ 2236.163495][ T4896]  ? __pfx__copy_from_iter+0x10/0x10
[ 2236.163524][ T4896]  ? __build_skb_around+0x257/0x3e0
[ 2236.163555][ T4896]  ? netlink_sendmsg+0x642/0xb30
[ 2236.163579][ T4896]  ? skb_put+0x11b/0x210
[ 2236.163611][ T4896]  netlink_sendmsg+0x6b2/0xb30
[ 2236.163646][ T4896]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2236.163675][ T4896]  ? __import_iovec+0x5d4/0x7f0
[ 2236.163710][ T4896]  ? aa_sock_msg_perm+0x94/0x160
[ 2236.163738][ T4896]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2236.163762][ T4896]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2236.163789][ T4896]  __sock_sendmsg+0x219/0x270
[ 2236.163816][ T4896]  ____sys_sendmsg+0x505/0x830
[ 2236.163852][ T4896]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2236.163899][ T4896]  ___sys_sendmsg+0x21f/0x2a0
[ 2236.163931][ T4896]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2236.163999][ T4896]  ? __fget_files+0x2a/0x420
[ 2236.164028][ T4896]  ? __fget_files+0x3a0/0x420
[ 2236.164067][ T4896]  __sys_sendmsg+0x164/0x220
[ 2236.164099][ T4896]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2236.164144][ T4896]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2236.164174][ T4896]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2236.164203][ T4896]  __do_fast_syscall_32+0xb4/0x110
[ 2236.164233][ T4896]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2236.164264][ T4896]  do_fast_syscall_32+0x34/0x80
[ 2236.164293][ T4896]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2236.164318][ T4896] RIP: 0023:0xf7fc4539
[ 2236.164337][ T4896] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2236.164354][ T4896] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2236.164376][ T4896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[ 2236.164390][ T4896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2236.164402][ T4896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2236.164413][ T4896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2236.164425][ T4896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2236.164454][ T4896]  </TASK>
[ 2236.164990][ T4898] veth1_virt_wifi: entered promiscuous mode
[ 2236.189290][T20379] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2236.189325][T20379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2236.189347][T20379] usb 3-1: Product: syz
[ 2236.189364][T20379] usb 3-1: Manufacturer: syz
[ 2236.189381][T20379] usb 3-1: SerialNumber: syz
[ 2236.192756][T20379] usb 3-1: config 0 descriptor??
[ 2236.198832][   T30] audit: type=1326 audit(1747606850.920:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2236.242846][ T4898] netlink: 'syz.4.9224': attribute type 2 has an invalid length.
[ 2236.244292][   T30] audit: type=1326 audit(1747606850.920:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2236.555700][   T30] audit: type=1326 audit(1747606850.930:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2236.579614][   T30] audit: type=1326 audit(1747606850.950:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.1.9221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[ 2236.582854][ T4898] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9224'.
[ 2236.612053][ T4898] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[ 2236.638308][T32142] rc_core: IR keymap rc-hauppauge not found
[ 2236.644885][T32142] Registered IR keymap rc-empty
[ 2236.676275][T32142] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 2236.688210][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2236.735443][T32142] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input158
[ 2236.813370][T32142] usb 4-1: USB disconnect, device number 86
[ 2237.367517][ T4916] can: request_module (can-proto-0) failed.
[ 2237.399423][   T24] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 2237.600163][   T24] usb 2-1: config 0 has an invalid interface number: 46 but max is 0
[ 2237.618655][   T24] usb 2-1: config 0 has no interface number 0
[ 2237.629113][T32142] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 2237.657500][   T47] usb 5-1: new full-speed USB device number 98 using dummy_hcd
[ 2237.687441][   T24] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=9e.b9
[ 2237.717627][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2237.728263][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2237.745710][   T24] usb 2-1: Product: syz
[ 2237.783810][   T24] usb 2-1: Manufacturer: syz
[ 2237.798140][T32142] usb 4-1: Using ep0 maxpacket: 8
[ 2237.802651][   T24] usb 2-1: SerialNumber: syz
[ 2237.820347][   T24] usb 2-1: config 0 descriptor??
[ 2237.820372][T32142] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2237.836423][T32142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2237.843990][   T24] xr_serial 2-1:0.46: More than one union descriptor, skipping ...
[ 2237.844697][T32142] usb 4-1: Product: syz
[ 2237.857505][T32142] usb 4-1: Manufacturer: syz
[ 2237.862472][T32142] usb 4-1: SerialNumber: syz
[ 2237.871149][T32142] usb 4-1: config 0 descriptor??
[ 2237.887779][   T47] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2237.911149][   T47] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[ 2237.960126][   T47] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 2237.971166][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2237.980367][   T47] usb 5-1: Product: syz
[ 2237.984586][   T47] usb 5-1: Manufacturer: syz
[ 2237.999809][   T47] usb 5-1: SerialNumber: syz
[ 2238.029876][T25905] usb 7-1: new full-speed USB device number 121 using dummy_hcd
[ 2238.064986][ T4911] netlink: 'syz.1.9229': attribute type 4 has an invalid length.
[ 2238.080891][T32142] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2238.097419][   T47] usb 2-1: USB disconnect, device number 109
[ 2238.200891][T25905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2238.213034][T25905] usb 7-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[ 2238.222963][T25905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2238.243316][T25905] usb 7-1: config 0 descriptor??
[ 2238.669079][T25905] hid (null): unknown global tag 0x34
[ 2238.674547][T25905] hid (null): report_id 1715294536 is invalid
[ 2238.768125][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2238.785442][ T4934] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[ 2238.836820][T25905] hid (null): invalid report_count 1647814188
[ 2238.845130][T25905] hid (null): unknown global tag 0xd
[ 2238.863974][T25905] elecom 0003:056E:00E6.007E: unexpected long global item
[ 2238.924936][T25905] elecom 0003:056E:00E6.007E: probe with driver elecom failed with error -22
[ 2238.947737][ T4936] vlan3: entered promiscuous mode
[ 2238.953597][ T4936] erspan0: entered promiscuous mode
[ 2239.164681][T25905] usb 7-1: USB disconnect, device number 121
[ 2239.285998][   T24] usb 3-1: USB disconnect, device number 72
[ 2239.381362][T32142] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[ 2239.481646][ T4939] netlink: 'syz.1.9236': attribute type 1 has an invalid length.
[ 2239.490550][ T4939] netlink: 'syz.1.9236': attribute type 2 has an invalid length.
[ 2239.721186][ T4948] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[ 2239.737708][ T4948] batman_adv: batadv0: Adding interface: ip6gretap1
[ 2239.747347][ T4948] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2239.779005][ T4948] batman_adv: batadv0: Interface activated: ip6gretap1
[ 2239.808132][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2240.042808][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9243'.
[ 2240.472275][ T5898] usb 4-1: USB disconnect, device number 87
[ 2240.557222][ T4970] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[ 2240.708846][   T24] usb 7-1: new full-speed USB device number 122 using dummy_hcd
[ 2240.848342][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2241.454740][ T4926] delete_channel: no stack
[ 2241.467365][T25905] usb 5-1: USB disconnect, device number 98
[ 2241.556177][   T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 2241.571628][   T24] usb 7-1: config 0 has no interface number 0
[ 2241.579376][   T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2241.595956][   T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2241.611419][   T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 2241.625242][   T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[ 2241.650462][ T4981] tipc: Started in network mode
[ 2241.655454][ T4981] tipc: Node identity ac1414aa, cluster identity 4711
[ 2241.663582][ T4981] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2241.663604][   T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2241.670261][ T5898] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 2241.692550][   T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2241.703119][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2241.719546][   T24] usb 7-1: config 0 descriptor??
[ 2241.733461][ T4969] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2241.769154][   T24] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2241.818337][T32142] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 2241.845055][ T5898] usb 4-1: config 0 has no interfaces?
[ 2241.857286][ T5898] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2241.868997][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2241.877062][ T5898] usb 4-1: Product: syz
[ 2241.881891][ T5898] usb 4-1: Manufacturer: syz
[ 2241.886533][ T5898] usb 4-1: SerialNumber: syz
[ 2241.891259][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2241.903807][ T5898] usb 4-1: config 0 descriptor??
[ 2241.988919][T32142] usb 2-1: Using ep0 maxpacket: 16
[ 2241.996231][T32142] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2242.010086][T32142] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[ 2242.019904][T32142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2242.059184][T32142] usb 2-1: config 0 descriptor??
[ 2242.145869][ T4984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2242.155240][ T4984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2242.168229][   T24] usb 3-1: new full-speed USB device number 73 using dummy_hcd
[ 2242.492893][T32142] hid (null): invalid report_count 43536
[ 2242.523278][T32142] redragon 0003:0C45:760B.007F: unknown main item tag 0x6
[ 2242.530961][T32142] redragon 0003:0C45:760B.007F: unknown main item tag 0x0
[ 2242.538848][T32142] redragon 0003:0C45:760B.007F: unknown main item tag 0x0
[ 2242.546372][T32142] redragon 0003:0C45:760B.007F: unknown main item tag 0x0
[ 2242.554138][T32142] redragon 0003:0C45:760B.007F: unknown main item tag 0x5
[ 2242.561965][T32142] redragon 0003:0C45:760B.007F: invalid report_count 43536
[ 2242.588358][T32142] redragon 0003:0C45:760B.007F: item 0 2 1 9 parsing failed
[ 2242.621144][T32142] redragon 0003:0C45:760B.007F: probe with driver redragon failed with error -22
[ 2242.818655][T32142] tipc: Node number set to 2886997162
[ 2242.928290][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2243.248687][   T24] usb 2-1: USB disconnect, device number 110
[ 2243.335294][ T5000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9256'.
[ 2243.369158][ T5000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9256'.
[ 2243.485223][ T5004] FAULT_INJECTION: forcing a failure.
[ 2243.485223][ T5004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2243.509519][ T5004] CPU: 0 UID: 0 PID: 5004 Comm: syz.1.9258 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[ 2243.509551][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2243.509565][ T5004] Call Trace:
[ 2243.509574][ T5004]  <TASK>
[ 2243.509584][ T5004]  dump_stack_lvl+0x189/0x250
[ 2243.509619][ T5004]  ? __lock_acquire+0xaac/0xd20
[ 2243.509653][ T5004]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2243.509682][ T5004]  ? __pfx__printk+0x10/0x10
[ 2243.509702][ T5004]  ? __might_fault+0xb0/0x130
[ 2243.509740][ T5004]  should_fail_ex+0x414/0x560
[ 2243.509769][ T5004]  _copy_from_user+0x2d/0xb0
[ 2243.509799][ T5004]  generic_map_update_batch+0x572/0x7f0
[ 2243.509836][ T5004]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 2243.509859][ T5004]  ? __fget_files+0x2a/0x420
[ 2243.509894][ T5004]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 2243.509915][ T5004]  bpf_map_do_batch+0x36c/0x5f0
[ 2243.509951][ T5004]  __sys_bpf+0x384/0x860
[ 2243.509980][ T5004]  ? __pfx___sys_bpf+0x10/0x10
[ 2243.510021][ T5004]  ? ksys_write+0x1f0/0x250
[ 2243.510057][ T5004]  __ia32_sys_bpf+0x7c/0x90
[ 2243.510084][ T5004]  __do_fast_syscall_32+0xb4/0x110
[ 2243.510114][ T5004]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2243.510145][ T5004]  do_fast_syscall_32+0x34/0x80
[ 2243.510173][ T5004]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2243.510198][ T5004] RIP: 0023:0xf7f03539
[ 2243.510216][ T5004] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2243.510254][ T5004] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[ 2243.510276][ T5004] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000300
[ 2243.510291][ T5004] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[ 2243.510304][ T5004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2243.510317][ T5004] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2243.510329][ T5004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2243.510360][ T5004]  </TASK>
[ 2243.818960][ T5009] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[ 2243.968120][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2244.062602][T32142] usb 4-1: USB disconnect, device number 88
[ 2244.071359][   T24] usb 7-1: USB disconnect, device number 122
[ 2244.180722][   T24] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 2244.462633][ T5034] FAULT_INJECTION: forcing a failure.
[ 2244.462633][ T5034] name failslab, interval 1, probability 0, space 0, times 0
[ 2244.476117][ T5034] CPU: 0 UID: 0 PID: 5034 Comm: syz.4.9268 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[ 2244.476140][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2244.476150][ T5034] Call Trace:
[ 2244.476158][ T5034]  <TASK>
[ 2244.476165][ T5034]  dump_stack_lvl+0x189/0x250
[ 2244.476193][ T5034]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2244.476215][ T5034]  ? __pfx__printk+0x10/0x10
[ 2244.476241][ T5034]  should_fail_ex+0x414/0x560
[ 2244.476261][ T5034]  should_failslab+0xa8/0x100
[ 2244.476283][ T5034]  __kmalloc_cache_noprof+0x70/0x3d0
[ 2244.476303][ T5034]  ? sctp_add_bind_addr+0x8c/0x370
[ 2244.476328][ T5034]  sctp_add_bind_addr+0x8c/0x370
[ 2244.476352][ T5034]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 2244.476377][ T5034]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 2244.476397][ T5034]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 2244.476420][ T5034]  ? sctp_v6_is_any+0x64/0x80
[ 2244.476435][ T5034]  ? sctp_copy_one_addr+0x93/0x360
[ 2244.476458][ T5034]  sctp_bind_addr_copy+0xb3/0x3c0
[ 2244.476480][ T5034]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 2244.476501][ T5034]  sctp_connect_new_asoc+0x2e0/0x690
[ 2244.476519][ T5034]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 2244.476534][ T5034]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 2244.476554][ T5034]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 2244.476573][ T5034]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 2244.476590][ T5034]  sctp_sendmsg+0x155c/0x2810
[ 2244.476615][ T5034]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 2244.476632][ T5034]  ? aa_sk_perm+0x81e/0x950
[ 2244.476652][ T5034]  ? __pfx_aa_sk_perm+0x10/0x10
[ 2244.476670][ T5034]  ? sock_rps_record_flow+0x19/0x400
[ 2244.476696][ T5034]  ? inet_sendmsg+0x2f4/0x370
[ 2244.476721][ T5034]  __sock_sendmsg+0x19c/0x270
[ 2244.476740][ T5034]  ____sys_sendmsg+0x52d/0x830
[ 2244.476767][ T5034]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2244.476801][ T5034]  ___sys_sendmsg+0x21f/0x2a0
[ 2244.476824][ T5034]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2244.476872][ T5034]  ? __fget_files+0x2a/0x420
[ 2244.476891][ T5034]  ? __fget_files+0x3a0/0x420
[ 2244.476927][ T5034]  __sys_sendmmsg+0x28e/0x430
[ 2244.476952][ T5034]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2244.476980][ T5034]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2244.477027][ T5034]  ? ksys_write+0x1f0/0x250
[ 2244.477052][ T5034]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 2244.477074][ T5034]  __do_fast_syscall_32+0xb4/0x110
[ 2244.477095][ T5034]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2244.477116][ T5034]  do_fast_syscall_32+0x34/0x80
[ 2244.477136][ T5034]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2244.477154][ T5034] RIP: 0023:0xf70ae539
[ 2244.477167][ T5034] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2244.477180][ T5034] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 2244.477196][ T5034] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005040
[ 2244.477206][ T5034] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 2244.477214][ T5034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2244.477222][ T5034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2244.477231][ T5034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2244.477251][ T5034]  </TASK>
[ 2244.708889][   T24] usb 7-1: new high-speed USB device number 123 using dummy_hcd
[ 2244.710778][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2244.718800][T20379] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 2244.890394][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2244.905514][   T24] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2244.915681][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2244.931377][   T24] usb 7-1: config 0 descriptor??
[ 2244.968868][T20379] usb 2-1: Using ep0 maxpacket: 16
[ 2244.979847][T20379] usb 2-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa
[ 2244.989109][T20379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2244.997146][T20379] usb 2-1: Product: syz
[ 2245.003234][T20379] usb 2-1: Manufacturer: syz
[ 2245.007901][T20379] usb 2-1: SerialNumber: syz
[ 2245.013014][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2245.023441][T20379] usb 2-1: config 0 descriptor??
[ 2245.098771][   T47] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 2245.232842][ T5026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2245.244602][ T5026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2245.255793][T20379] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 2245.276501][T20379] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[ 2245.287099][   T47] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2245.294988][T20379] usb 2-1: USB disconnect, device number 111
[ 2245.302696][   T47] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2245.325104][   T47] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2245.335379][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2245.354940][ T5041] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[ 2245.386575][   T47] usb 5-1: Product: syz
[ 2245.391862][   T47] usb 5-1: Manufacturer: syz
[ 2245.396549][   T47] usb 5-1: SerialNumber: syz
[ 2245.611988][ T5038] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 2245.788905][T25905] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 2246.048123][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2246.062937][T25905] usb 4-1: Using ep0 maxpacket: 8
[ 2246.096491][T25905] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2246.141378][T25905] usb 4-1: config 248 has an invalid interface number: 51 but max is 0
[ 2246.174599][T25905] usb 4-1: config 248 has no interface number 0
[ 2246.188301][T20379] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 2246.212746][T25905] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice=39.f0
[ 2246.239586][ T5038] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 2246.247136][T25905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2246.265619][T25905] usb 4-1: Product: syz
[ 2246.271325][T25905] usb 4-1: Manufacturer: syz
[ 2246.276443][T25905] usb 4-1: SerialNumber: syz
[ 2246.475074][   T47] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 2246.499176][   T47] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 2246.558782][   T47] cdc_mbim 5-1:1.0: setting rx_max = 2048
[ 2246.627922][ T5043] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[ 2246.634614][ T5043] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 2246.644381][ T5043] vhci_hcd vhci_hcd.0: Device attached
[ 2246.688166][T20379] usb 2-1: Using ep0 maxpacket: 16
[ 2246.712059][T25905] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:248.51/input/input159
[ 2246.718367][ T5051] vhci_hcd: connection closed
[ 2246.730682][ T4830] vhci_hcd: stop threads
[ 2246.751160][T20379] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2246.762141][ T5183] bcm5974 4-1:248.51: could not read from device
[ 2246.763992][T25905] usb 4-1: USB disconnect, device number 89
[ 2246.780010][ T4830] vhci_hcd: release socket
[ 2246.809845][ T4830] vhci_hcd: disconnect device
[ 2246.821821][T20379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2246.857370][ T5898] vhci_hcd: vhci_device speed not set
[ 2246.868053][T20379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2246.930770][T20379] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2246.941219][T20379] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2246.956454][T20379] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2246.967571][T20379] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2246.980626][T20379] usb 2-1: Manufacturer: syz
[ 2247.002462][T20379] usb 2-1: config 0 descriptor??
[ 2247.088159][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2247.259117][ T5880] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 2247.268720][ T5045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2247.289790][ T5045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2247.350915][T20379] rc_core: IR keymap rc-hauppauge not found
[ 2247.356933][T20379] Registered IR keymap rc-empty
[ 2247.362240][   T24] usbhid 7-1:0.0: can't add hid device: -71
[ 2247.372072][   T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2247.378783][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2247.387682][   T24] usb 7-1: USB disconnect, device number 123
[ 2247.429734][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2247.430462][ T5880] usb 3-1: Using ep0 maxpacket: 32
[ 2247.453021][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2247.474096][ T5880] usb 3-1: config 235 has an invalid interface number: 81 but max is 0
[ 2247.487952][ T5880] usb 3-1: config 235 has no interface number 0
[ 2247.504276][ T5880] usb 3-1: config 235 interface 81 has no altsetting 0
[ 2247.513520][T20379] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 2247.523046][ T5880] usb 3-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= a.a1
[ 2247.541958][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2247.557756][T20379] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input160
[ 2247.583917][ T5880] usb 3-1: Product: syz
[ 2247.588259][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2247.604013][ T5880] usb 3-1: Manufacturer: syz
[ 2247.609524][ T5880] usb 3-1: SerialNumber: syz
[ 2247.624138][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2247.915662][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9274'.
[ 2247.928240][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2247.948848][   T24] usb 7-1: new high-speed USB device number 124 using dummy_hcd
[ 2247.950894][ T5071] loop8: detected capacity change from 0 to 1
[ 2247.963308][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2247.990813][   T47] cdc_mbim 5-1:1.0: setting tx_max = 184
[ 2248.008315][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2248.019117][ T5071] Dev loop8: unable to read RDB block 1
[ 2248.046644][   T47] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[ 2248.057876][ T5071]  loop8: unable to read partition table
[ 2248.066595][   T47] wwan wwan0: port wwan0mbim0 attached
[ 2248.090173][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2248.100626][ T5071] loop8: partition table beyond EOD, truncated
[ 2248.121001][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2248.128279][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2248.138154][ T5071] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 2248.165664][   T47] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 42:42:42:42:42:42
[ 2248.212727][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2248.213150][   T24] usb 7-1: Using ep0 maxpacket: 8
[ 2248.242080][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 2248.259495][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2248.259537][   T47] usb 5-1: USB disconnect, device number 99
[ 2248.293633][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:235.81/input/input161
[ 2248.311623][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 2248.332070][   T24] usb 7-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[ 2248.340068][T20379] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2248.344006][   T47] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[ 2248.366068][   T24] usb 7-1: Product: syz
[ 2248.446307][ T5183] bcm5974 3-1:235.81: could not read from device
[ 2248.453769][   T24] usb 7-1: Manufacturer: syz
[ 2248.466950][T20379] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 2248.505170][T20379] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2248.510903][ T5880] usb 3-1: USB disconnect, device number 74
[ 2248.526645][   T24] usb 7-1: SerialNumber: syz
[ 2248.663391][ T5082] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[ 2248.784978][ T5086] vivid-000: =================  START STATUS  =================
[ 2248.793157][ T5086] vivid-000: Generate PTS: true
[ 2248.801770][ T5086] vivid-000: Generate SCR: true
[ 2248.806978][ T5086] tpg source WxH: 720x576 (Luma)
[ 2248.813331][ T5086] tpg field: 3
[ 2248.817162][ T5086] tpg crop: (0,0)/720x576
[ 2248.823287][ T5086] tpg compose: (0,0)/16x8
[ 2248.829334][ T5086] tpg colorspace: 1
[ 2248.834381][ T5086] tpg transfer function: 0/1
[ 2248.840846][ T5086] tpg quantization: 0/1
[ 2248.847657][ T5086] tpg RGB range: 0/2
[ 2248.857562][ T5086] vivid-000: ==================  END STATUS  ==================
[ 2248.954023][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9283'.
[ 2248.966091][ T5091] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9283'.
[ 2248.979394][ T5091] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9283'.
[ 2249.168128][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2249.364815][ T5096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9285'.
[ 2249.466955][   T47] wwan wwan0: port wwan0mbim0 disconnected
[ 2249.490679][T20379] usb 2-1: USB disconnect, device number 112
[ 2249.541174][   T24] usb 7-1: config 0 descriptor??
[ 2249.673874][   T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 2249.898198][T28442] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 2250.129198][T28442] usb 4-1: Using ep0 maxpacket: 8
[ 2250.208080][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2250.388122][T20379] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 2250.409895][T28442] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 2250.432748][   T24] gspca_zc3xx: reg_w_i err -71
[ 2250.438164][T28442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2250.459016][T28442] usb 4-1: Product: syz
[ 2250.468680][T28442] usb 4-1: Manufacturer: syz
[ 2250.473386][T28442] usb 4-1: SerialNumber: syz
[ 2250.482103][T28442] usb 4-1: config 0 descriptor??
[ 2250.497261][T28442] gspca_main: sq905-2.14.0 probing 2770:9120
[ 2250.650782][T20379] usb 2-1: Using ep0 maxpacket: 8
[ 2250.713742][T20379] usb 2-1: config 8 has an invalid interface number: 188 but max is 0
[ 2250.726754][T20379] usb 2-1: config 8 has no interface number 0
[ 2250.733240][T20379] usb 2-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[ 2250.745690][T20379] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2250.756910][T20379] usb 2-1: config 8 interface 188 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[ 2250.782867][T20379] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[ 2250.798161][T20379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2250.809832][T20379] usb 2-1: Product: syz
[ 2250.814197][T20379] usb 2-1: Manufacturer: syz
[ 2250.819545][T20379] usb 2-1: SerialNumber: syz
[ 2250.864610][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9294'.
[ 2251.021552][T28442] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[ 2251.029104][   T24] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 2251.029203][   T24] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 2251.052079][T28442] sq905 4-1:0.0: probe with driver sq905 failed with error -71
[ 2251.057398][ T5114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2251.079745][ T5114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2251.115103][   T24] usb 7-1: USB disconnect, device number 124
[ 2251.115757][T28442] usb 4-1: USB disconnect, device number 90
[ 2251.248094][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2251.538308][T32142] usb 3-1: new low-speed USB device number 75 using dummy_hcd
[ 2251.709812][   T24] usb 7-1: new full-speed USB device number 125 using dummy_hcd
[ 2251.750758][T32142] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[ 2251.760008][T32142] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[ 2251.771672][T32142] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 2251.781192][T32142] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 2251.793215][T32142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 2251.803803][T32142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2251.815396][T32142] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 2251.855209][T32142] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 2251.879395][T32142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2251.940210][T32142] usb 3-1: config 0 descriptor??
[ 2251.980573][T32142] hub 3-1:0.0: bad descriptor, ignoring hub
[ 2252.010070][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2252.017532][T32142] hub 3-1:0.0: probe with driver hub failed with error -5
[ 2252.078751][   T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2252.098622][   T24] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[ 2252.114754][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2252.197547][   T24] usb 7-1: config 0 descriptor??
[ 2252.221415][T32142] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input162
[ 2252.298510][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2252.373373][T32142] usb 3-1: USB disconnect, device number 75
[ 2252.455916][T28442] usb 7-1: USB disconnect, device number 125
[ 2252.810867][ T5144] vlan2: entered promiscuous mode
[ 2252.843818][ T5144] batadv0: entered promiscuous mode
[ 2252.947269][T20379] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[ 2252.999193][T20379] vmk80xx 2-1:8.188: probe with driver vmk80xx failed with error -22
[ 2253.035227][T20379] usb 2-1: USB disconnect, device number 113
[ 2253.056594][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2253.069248][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2253.084700][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2253.109877][   T24] usb 3-1: new low-speed USB device number 76 using dummy_hcd
[ 2253.123810][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2253.133236][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2253.289006][   T24] usb 3-1: Invalid ep0 maxpacket: 64
[ 2253.328793][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2253.428779][   T24] usb 3-1: new low-speed USB device number 77 using dummy_hcd
[ 2253.583479][ T5152] chnl_net:caif_netlink_parms(): no params data found
[ 2253.609394][   T24] usb 3-1: Invalid ep0 maxpacket: 64
[ 2253.620146][   T24] usb usb3-port1: attempt power cycle
[ 2254.008701][   T47] usb 7-1: new high-speed USB device number 126 using dummy_hcd
[ 2254.186596][   T24] usb 3-1: new low-speed USB device number 78 using dummy_hcd
[ 2254.209023][   T47] usb 7-1: Using ep0 maxpacket: 32
[ 2254.368088][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2254.499409][   T47] usb 7-1: config index 0 descriptor too short (expected 243, got 36)
[ 2254.507728][   T47] usb 7-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[ 2254.527535][   T24] usb 3-1: Invalid ep0 maxpacket: 64
[ 2254.570394][   T47] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 2254.602123][   T47] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 9
[ 2254.617332][   T47] usb 7-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[ 2254.637551][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2254.658723][   T47] usb 7-1: Product: syz
[ 2254.662976][   T47] usb 7-1: Manufacturer: syz
[ 2254.678829][   T24] usb 3-1: new low-speed USB device number 79 using dummy_hcd
[ 2254.690876][   T47] usb 7-1: SerialNumber: syz
[ 2254.726616][   T24] usb 3-1: Invalid ep0 maxpacket: 64
[ 2254.749396][   T24] usb usb3-port1: unable to enumerate USB device
[ 2254.773980][ T4830] bond0: left allmulticast mode
[ 2254.789192][T32142] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0
[ 2254.821894][ T4830] bridge0: port 1(bond0) entered disabled state
[ 2254.831985][ T5176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2254.852690][T32142] hid-generic 0000:0000:0000.0080: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2255.107670][   T47] usb 7-1: USB disconnect, device number 126
[ 2255.116556][ T5181] fido_id[5181]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2255.253964][ T4333] Bluetooth: hci3: command tx timeout
[ 2255.424499][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2256.266863][ T4830] bond0 (unregistering): Released all slaves
[ 2256.283177][ T4830] bond1 (unregistering): Released all slaves
[ 2256.305931][ T4830] bond2 (unregistering): Released all slaves
[ 2256.448093][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2256.585393][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2256.607537][ T5152] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2256.629318][ T5152] bridge_slave_0: entered allmulticast mode
[ 2256.638538][ T5152] bridge_slave_0: entered promiscuous mode
[ 2256.646277][ T4830] ave_0: left promiscuous mode
[ 2256.692359][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2256.711797][ T5152] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2256.728985][ T5152] bridge_slave_1: entered allmulticast mode
[ 2256.746251][ T5152] bridge_slave_1: entered promiscuous mode
[ 2256.798676][   T24] usb 7-1: new high-speed USB device number 127 using dummy_hcd
[ 2256.812408][ T5206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9316'.
[ 2256.828233][ T5206] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 2256.955216][ T5152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2256.968873][   T24] usb 7-1: Using ep0 maxpacket: 16
[ 2256.977528][   T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 2256.983246][ T5152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2256.994163][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2257.017162][   T24] usb 7-1: config 0 descriptor??
[ 2257.027481][   T24] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 2257.078863][   T47] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 2257.253266][   T47] usb 5-1: Using ep0 maxpacket: 32
[ 2257.274040][ T5152] team0: Port device team_slave_0 added
[ 2257.301594][   T47] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[ 2257.316509][   T24] gspca_sonixj: reg_w1 err -71
[ 2257.324931][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2257.339034][   T24] sonixj 7-1:0.0: probe with driver sonixj failed with error -71
[ 2257.347465][ T4333] Bluetooth: hci3: command tx timeout
[ 2257.349836][ T5152] team0: Port device team_slave_1 added
[ 2257.363487][   T47] usb 5-1: config 0 descriptor??
[ 2257.387904][   T24] usb 7-1: USB disconnect, device number 127
[ 2257.464730][ T5223] FAULT_INJECTION: forcing a failure.
[ 2257.464730][ T5223] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2257.488068][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2257.518283][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.6.9320 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[ 2257.518316][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2257.518330][ T5223] Call Trace:
[ 2257.518339][ T5223]  <TASK>
[ 2257.518350][ T5223]  dump_stack_lvl+0x189/0x250
[ 2257.518392][ T5223]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2257.518424][ T5223]  ? __pfx__printk+0x10/0x10
[ 2257.518460][ T5223]  should_fail_ex+0x414/0x560
[ 2257.518489][ T5223]  _copy_to_user+0x31/0xb0
[ 2257.518523][ T5223]  simple_read_from_buffer+0xe1/0x170
[ 2257.518557][ T5223]  proc_fail_nth_read+0x1df/0x250
[ 2257.518591][ T5223]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2257.518624][ T5223]  ? rw_verify_area+0x258/0x650
[ 2257.518648][ T5223]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2257.518690][ T5223]  vfs_read+0x1fd/0x980
[ 2257.518721][ T5223]  ? __pfx___mutex_lock+0x10/0x10
[ 2257.518750][ T5223]  ? __pfx_vfs_read+0x10/0x10
[ 2257.518776][ T5223]  ? __fget_files+0x2a/0x420
[ 2257.518808][ T5223]  ? __fget_files+0x3a0/0x420
[ 2257.518834][ T5223]  ? __fget_files+0x2a/0x420
[ 2257.518870][ T5223]  ksys_read+0x145/0x250
[ 2257.518897][ T5223]  ? __pfx_ksys_read+0x10/0x10
[ 2257.518924][ T5223]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2257.518954][ T5223]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2257.518983][ T5223]  __do_fast_syscall_32+0xb4/0x110
[ 2257.519013][ T5223]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2257.519043][ T5223]  do_fast_syscall_32+0x34/0x80
[ 2257.519073][ T5223]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2257.519098][ T5223] RIP: 0023:0xf7fc4539
[ 2257.519117][ T5223] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2257.519135][ T5223] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 2257.519157][ T5223] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50e6620
[ 2257.519172][ T5223] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000
[ 2257.519186][ T5223] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2257.519198][ T5223] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2257.519210][ T5223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2257.519242][ T5223]  </TASK>
[ 2257.808300][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2257.894005][ T5152] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2257.901720][ T5152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2257.928125][ T5152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2257.944003][ T5152] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2257.953342][ T5152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2257.983144][ T5152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2258.000633][ T5210] blktrace: Concurrent blktraces are not allowed on sg0
[ 2258.115276][ T5210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2258.172010][ T5210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2258.377590][ T5152] hsr_slave_0: entered promiscuous mode
[ 2258.416607][ T5152] hsr_slave_1: entered promiscuous mode
[ 2258.434536][ T5152] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2258.442753][ T5152] Cannot create hsr debugfs directory
[ 2258.478107][T20379] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 2258.528095][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2258.648287][T20379] usb 2-1: Using ep0 maxpacket: 32
[ 2258.675376][T20379] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[ 2258.688071][T20379] usb 2-1: config 0 has no interface number 0
[ 2258.694249][T20379] usb 2-1: config 0 interface 184 has no altsetting 0
[ 2258.724503][T20379] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2258.735567][T20379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2258.744216][T20379] usb 2-1: Product: syz
[ 2258.748788][T20379] usb 2-1: Manufacturer: syz
[ 2258.753414][T20379] usb 2-1: SerialNumber: syz
[ 2258.808744][T20379] usb 2-1: config 0 descriptor??
[ 2258.832825][T20379] smsc75xx v1.0.0
[ 2259.203600][   T47] usbhid 5-1:0.0: can't add hid device: -71
[ 2259.210527][   T47] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2259.247075][   T47] usb 5-1: USB disconnect, device number 100
[ 2259.410645][ T4333] Bluetooth: hci3: command tx timeout
[ 2259.578092][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2259.683697][ T5251] netlink: 'syz.6.9327': attribute type 10 has an invalid length.
[ 2259.815102][ T5249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2259.876735][ T5256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9329'.
[ 2260.543892][ T4830] hsr_slave_0: left promiscuous mode
[ 2260.564120][ T4830] hsr_slave_1: left promiscuous mode
[ 2260.608064][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2260.888186][   T47] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 2260.960826][T25905] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 2261.029195][   T47] usb 7-1: device descriptor read/64, error -71
[ 2261.137833][T25905] usb 5-1: Using ep0 maxpacket: 8
[ 2261.163387][T25905] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[ 2261.198460][T25905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2261.206649][T25905] usb 5-1: Product: syz
[ 2261.268716][   T47] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 2261.280501][T25905] usb 5-1: Manufacturer: syz
[ 2261.285176][T25905] usb 5-1: SerialNumber: syz
[ 2261.296397][T20379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 2261.305083][T25905] usb 5-1: config 0 descriptor??
[ 2261.340497][T20379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 2261.354963][T20379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 2261.408865][   T47] usb 7-1: device descriptor read/64, error -71
[ 2261.445817][T20379] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[ 2261.478341][T28442] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 2261.488387][ T4333] Bluetooth: hci3: command tx timeout
[ 2261.493931][T20379] usb 2-1: USB disconnect, device number 114
[ 2261.522090][   T47] usb usb7-port1: attempt power cycle
[ 2261.658068][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2261.665545][T28442] usb 3-1: Using ep0 maxpacket: 16
[ 2261.678433][T28442] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2261.689382][T28442] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2261.701544][T28442] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2261.712611][T28442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2261.721070][T28442] usb 3-1: Product: syz
[ 2261.726274][T28442] usb 3-1: Manufacturer: syz
[ 2261.731355][T28442] usb 3-1: SerialNumber: syz
[ 2261.878711][   T47] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 2261.922758][   T47] usb 7-1: device descriptor read/8, error -71
[ 2262.145980][T28442] usb 3-1: 0:2 : does not exist
[ 2262.178687][   T47] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 2262.199453][   T47] usb 7-1: device descriptor read/8, error -71
[ 2262.314751][   T47] usb usb7-port1: unable to enumerate USB device
[ 2262.688081][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2262.787722][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2262.797263][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2262.825807][ T5286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2262.852506][ T5286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2262.894805][T28442] usb 3-1: USB disconnect, device number 80
[ 2263.201474][ T5303] x_tables: duplicate underflow at hook 1
[ 2263.238718][T25905] gspca_main: sunplus-2.14.0 probing 04a5:3003
[ 2263.265457][ T5293] macsec0: entered promiscuous mode
[ 2263.272847][T25905] gspca_sunplus: reg_w_riv err -71
[ 2263.279248][ T5293] macsec0: entered allmulticast mode
[ 2263.307032][T25905] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[ 2263.329452][T25905] usb 5-1: USB disconnect, device number 101
[ 2263.423270][ T5306] kvm: kvm [5305]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x200000003
[ 2263.437274][ T5306] kvm: kvm [5305]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x200000003
[ 2263.447425][ T5306] kvm: kvm [5305]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x200000003
[ 2263.460902][ T5306] kvm_intel: kvm [5305]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x200000003
[ 2263.597600][T28442] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 2263.704197][T25905] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0
[ 2263.728084][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2263.751290][T25905] hid-generic 0000:0000:0000.0081: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 2263.800357][T28442] usb 3-1: too many configurations: 9, using maximum allowed: 8
[ 2263.859447][T28442] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2263.991519][T28442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2264.057370][T28442] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2264.637492][ T5316] fido_id[5316]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 2264.704682][T28442] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2264.723892][T28442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2264.754031][T28442] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2264.768067][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2264.791247][T28442] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2264.811971][T28442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2264.855993][T28442] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2264.949471][T28442] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2264.988298][T28442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2265.049655][T28442] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2265.069328][T28442] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2265.088177][T28442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2265.152956][T28442] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2265.167711][T28442] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2265.293759][T28442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2265.358137][ T4830] IPVS: stop unused estimator thread 0...
[ 2265.371878][T28442] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2265.445887][T28442] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2265.485574][T28442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2265.515201][ T5152] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2265.600118][ T5152] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2265.744528][ T5152] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2265.808347][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2265.837115][ T5152] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2265.852154][T28442] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2265.924672][T28442] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 2265.962766][T28442] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 2266.023976][T28442] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2266.051095][T28442] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 2266.081275][T28442] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 2266.117721][T28442] usb 3-1: Product: syz
[ 2266.132798][T28442] usb 3-1: Manufacturer: syz
[ 2266.137471][T28442] usb 3-1: SerialNumber: syz
[ 2266.148184][T20379] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 2266.194268][T28442] usb 3-1: config 0 descriptor??
[ 2266.298786][T28442] usb 3-1: can't set config #0, error -71
[ 2266.328259][T10905] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 2266.346192][ T5152] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2266.356639][T28442] usb 3-1: USB disconnect, device number 81
[ 2266.378569][T20379] usb 7-1: Using ep0 maxpacket: 8
[ 2266.394793][T20379] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 2266.416263][T20379] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 2266.429091][T20379] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2266.452189][ T5152] 8021q: adding VLAN 0 to HW filter on device team0
[ 2266.470655][T20379] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2266.489068][T25905] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[ 2266.491030][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9353'.
[ 2266.517792][T20379] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2266.530167][ T4828] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2266.537326][ T4828] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2266.545978][T10905] usb 5-1: Using ep0 maxpacket: 16
[ 2266.562594][T20379] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2266.572835][T10905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 2266.593154][ T4828] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2266.600414][ T4828] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2266.637109][T10905] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2266.647696][T10905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2266.650830][T25905] usb 2-1: config 0 has an invalid interface number: 138 but max is 0
[ 2266.681061][T10905] usb 5-1: Product: syz
[ 2266.691923][T25905] usb 2-1: config 0 has no interface number 0
[ 2266.706406][T10905] usb 5-1: Manufacturer: syz
[ 2266.725850][T25905] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d500, bcdDevice=66.d6
[ 2266.731454][T10905] usb 5-1: SerialNumber: syz
[ 2266.743445][T25905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2266.755709][T25905] usb 2-1: Product: syz
[ 2266.760656][T25905] usb 2-1: Manufacturer: syz
[ 2266.765313][T25905] usb 2-1: SerialNumber: syz
[ 2266.779311][T25905] usb 2-1: config 0 descriptor??
[ 2266.794956][T25905] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in cold state, will try to load a firmware
[ 2266.822332][T20379] usb 7-1: GET_CAPABILITIES returned 0
[ 2266.827905][T20379] usbtmc 7-1:16.0: can't read capabilities
[ 2266.837180][T10905] usb 5-1: config 0 descriptor??
[ 2266.848060][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2266.851627][T25905] usb 2-1: Direct firmware load for dvb-usb-bluebird-01.fw failed with error -2
[ 2266.882709][T25905] usb 2-1: Falling back to sysfs fallback for: dvb-usb-bluebird-01.fw
[ 2267.003924][ T5152] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2267.091576][T10905] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2267.110282][T10905] em28xx 5-1:0.0: DVB interface 0 found: isoc
[ 2267.122655][ T5880] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 2267.134679][ T5152] veth0_vlan: entered promiscuous mode
[ 2267.281857][ T5880] usb 3-1: device descriptor read/64, error -71
[ 2267.377560][ T5379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2267.391559][ T5379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2267.521439][T10905] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 2267.549333][ T5880] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 2267.561566][ T5152] veth1_vlan: entered promiscuous mode
[ 2267.621424][T10905] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2267.643886][T10905] em28xx 5-1:0.0: board has no eeprom
[ 2267.666655][ T5152] veth0_macvtap: entered promiscuous mode
[ 2267.683929][ T5152] veth1_macvtap: entered promiscuous mode
[ 2267.699710][ T5880] usb 3-1: device descriptor read/64, error -71
[ 2267.723191][ T5152] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2267.742634][ T5152] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2267.768224][T10905] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2267.793143][ T5152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2267.798124][T10905] em28xx 5-1:0.0: dvb set to isoc mode.
[ 2267.805560][ T5152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2267.820359][ T5880] usb usb3-port1: attempt power cycle
[ 2267.829815][ T5152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2267.836893][T20379] em28xx 5-1:0.0: Binding DVB extension
[ 2267.844594][ T5152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2267.878465][T10905] usb 5-1: USB disconnect, device number 102
[ 2267.885971][T10905] em28xx 5-1:0.0: Disconnecting em28xx
[ 2267.891730][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2268.115459][T20379] em28xx 5-1:0.0: Registering input extension
[ 2268.158638][T10905] em28xx 5-1:0.0: Closing input extension
[ 2268.169081][ T5880] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 2268.210794][ T4830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2268.234623][ T4830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2268.251838][T10905] em28xx 5-1:0.0: Freeing device
[ 2268.281287][ T5880] usb 3-1: device descriptor read/8, error -71
[ 2268.928289][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2269.118389][ T5401] pim6reg: entered allmulticast mode
[ 2269.188756][ T5880] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 2269.227087][ T5880] usb 3-1: device descriptor read/8, error -71
[ 2269.237819][T25949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2269.266807][ T5407] FAULT_INJECTION: forcing a failure.
[ 2269.266807][ T5407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2269.279821][T25949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2269.287949][ T5407] CPU: 0 UID: 0 PID: 5407 Comm: syz.1.9361 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[ 2269.287982][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2269.287995][ T5407] Call Trace:
[ 2269.288004][ T5407]  <TASK>
[ 2269.288014][ T5407]  dump_stack_lvl+0x189/0x250
[ 2269.288047][ T5407]  ? __lock_acquire+0xaac/0xd20
[ 2269.288080][ T5407]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2269.288110][ T5407]  ? __pfx__printk+0x10/0x10
[ 2269.288131][ T5407]  ? __might_fault+0xb0/0x130
[ 2269.288170][ T5407]  should_fail_ex+0x414/0x560
[ 2269.288197][ T5407]  _copy_from_user+0x2d/0xb0
[ 2269.288229][ T5407]  get_compat_msghdr+0xad/0x4a0
[ 2269.288264][ T5407]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2269.288294][ T5407]  ? rcu_is_watching+0x15/0xb0
[ 2269.288312][ T5407]  ? ___sys_recvmsg+0x1c4/0x510
[ 2269.288350][ T5407]  ___sys_recvmsg+0x17f/0x510
[ 2269.288386][ T5407]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2269.288444][ T5407]  ? __fget_files+0x3a0/0x420
[ 2269.288483][ T5407]  do_recvmmsg+0x36a/0x760
[ 2269.288524][ T5407]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2269.288567][ T5407]  ? __pfx_vfs_write+0x10/0x10
[ 2269.288609][ T5407]  __sys_recvmmsg+0x19d/0x280
[ 2269.288643][ T5407]  ? __pfx___sys_recvmmsg+0x10/0x10
[ 2269.288675][ T5407]  ? ksys_write+0x1f0/0x250
[ 2269.288707][ T5407]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[ 2269.288741][ T5407]  __do_fast_syscall_32+0xb4/0x110
[ 2269.288770][ T5407]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2269.288800][ T5407]  do_fast_syscall_32+0x34/0x80
[ 2269.288827][ T5407]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2269.288851][ T5407] RIP: 0023:0xf7f03539
[ 2269.288879][ T5407] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2269.288897][ T5407] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[ 2269.288918][ T5407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001440
[ 2269.288932][ T5407] RDX: 0000000000000700 RSI: 0000000040002002 RDI: 0000000000000000
[ 2269.288945][ T5407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2269.288956][ T5407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2269.288968][ T5407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2269.288995][ T5407]  </TASK>
[ 2269.517255][ T5880] usb usb3-port1: unable to enumerate USB device
[ 2269.586967][ T5880] usb 7-1: USB disconnect, device number 6
[ 2269.741768][ T5417] macsec0: left allmulticast mode
[ 2269.968292][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2269.977297][   T30] kauditd_printk_skb: 40 callbacks suppressed
[ 2269.977316][   T30] audit: type=1800 audit(1747606885.130:2902): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9365" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 2270.162815][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9364'.
[ 2270.206965][ T5420] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9364'.
[ 2270.673070][ T5442] netlink: 4520 bytes leftover after parsing attributes in process `syz.1.9372'.
[ 2271.008068][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2271.293230][ T5898] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 2271.440524][T27459] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2271.460696][T27459] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2271.478737][T27459] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2271.487822][T27459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2271.494929][ T5898] usb 4-1: Using ep0 maxpacket: 8
[ 2271.500784][ T5898] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[ 2271.522971][T27459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2271.603161][ T5898] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[ 2271.618283][ T5898] usb 4-1: config 135 has no interface number 0
[ 2271.624631][ T5898] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[ 2271.681320][ T5898] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[ 2271.710733][ T5898] usb 4-1: config 135 interface 230 has no altsetting 0
[ 2271.738364][ T5898] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[ 2271.747638][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2271.760721][ T5898] usb 4-1: Product: syz
[ 2271.764955][ T5898] usb 4-1: Manufacturer: syz
[ 2271.770870][ T5898] usb 4-1: SerialNumber: syz
[ 2272.009977][ T5457] fuse: Invalid gid '00000000000000000232'
[ 2272.048090][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2272.100432][ T5486] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9384'.
[ 2272.197567][ T4823] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2272.356384][ T4823] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2272.389346][ T5472] chnl_net:caif_netlink_parms(): no params data found
[ 2272.464617][ T4823] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2272.550573][ T5880] usb 4-1: USB disconnect, device number 91
[ 2272.618847][   T47] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 2272.726223][ T4823] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2272.763428][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2272.774711][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2272.792707][ T5472] bridge_slave_0: entered allmulticast mode
[ 2272.801708][ T5472] bridge_slave_0: entered promiscuous mode
[ 2272.824039][   T47] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2272.837980][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2272.853397][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2272.870963][ T5472] bridge_slave_1: entered allmulticast mode
[ 2272.883452][ T5472] bridge_slave_1: entered promiscuous mode
[ 2273.088087][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2273.350402][   T47] usb 7-1: config 66 interface 0 has no altsetting 0
[ 2273.360391][   T47] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[ 2273.370476][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2273.379184][   T47] usb 7-1: Product: syz
[ 2273.383431][   T47] usb 7-1: Manufacturer: syz
[ 2273.391624][   T47] usb 7-1: SerialNumber: syz
[ 2273.565337][ T5507] ALSA: mixer_oss: invalid OSS volume ''
[ 2273.700073][ T5472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2273.709324][ T4333] Bluetooth: hci5: command tx timeout
[ 2273.732865][ T5472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2273.761031][   T47] ati_remote2 7-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint
[ 2273.833692][   T47] usb 7-1: USB disconnect, device number 7
[ 2274.128076][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2274.394785][ T5472] team0: Port device team_slave_0 added
[ 2274.411539][ T5472] team0: Port device team_slave_1 added
[ 2274.513322][ T5523] kvm: kvm [5522]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x200000003
[ 2274.528644][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2274.535680][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2274.557764][ T5523] kvm: kvm [5522]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x200000003
[ 2274.563711][ T5472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2274.585600][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2274.593005][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2274.619314][ T5898] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 2274.638388][ T5523] kvm: kvm [5522]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x200000003
[ 2274.662649][ T5472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2274.676832][ T5523] kvm: kvm [5522]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x10200000003
[ 2274.735001][ T5523] kvm: kvm [5522]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x200000003
[ 2274.759362][ T5523] kvm: kvm [5522]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x10200000003
[ 2274.770435][ T5523] kvm: kvm [5522]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x200000003
[ 2274.780975][ T5523] kvm: kvm [5522]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x10200000003
[ 2274.791367][ T5523] kvm: kvm [5522]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3c0200000003
[ 2274.808966][ T5898] usb 4-1: Using ep0 maxpacket: 32
[ 2274.821077][ T5898] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 2274.836631][ T5898] usb 4-1: config 0 has no interface number 0
[ 2274.872702][ T5898] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2274.889855][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2274.915927][ T5898] usb 4-1: Product: syz
[ 2274.920489][ T5898] usb 4-1: Manufacturer: syz
[ 2274.925152][ T5898] usb 4-1: SerialNumber: syz
[ 2274.942149][ T5898] usb 4-1: config 0 descriptor??
[ 2274.961103][ T5898] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2275.178113][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2275.285319][ T5898] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2275.322641][ T5898] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2275.739463][T27459] Bluetooth: hci5: command tx timeout
[ 2276.173594][ T4823] bond0 (unregistering): Released all slaves
[ 2276.196155][ T4823] bond1 (unregistering): Released all slaves
[ 2276.208166][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2276.230140][ T4823] bond2 (unregistering): Released all slaves
[ 2276.332812][ T5544] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9400'.
[ 2276.397871][ T4823] tipc: Disabling bearer <udp:syz2>
[ 2276.411961][ T4823] tipc: Left network mode
[ 2276.535666][ T5472] hsr_slave_0: entered promiscuous mode
[ 2276.582792][ T5472] hsr_slave_1: entered promiscuous mode
[ 2276.609564][ T5472] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2276.649541][ T5472] Cannot create hsr debugfs directory
[ 2276.967911][ T5556] random: crng reseeded on system resumption
[ 2277.248062][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[ 2277.367423][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2277.368864][   T47] usb 4-1: USB disconnect, device number 92
[ 2277.450653][ T4832] ==================================================================
[ 2277.458780][ T4832] BUG: KASAN: slab-use-after-free in batadv_forw_packet_steal+0xfa/0x170
[ 2277.467206][ T4832] Write of size 8 at addr ffff88805687a808 by task kworker/u8:28/4832
[ 2277.475356][ T4832] 
[ 2277.477684][ T4832] CPU: 0 UID: 0 PID: 4832 Comm: kworker/u8:28 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[ 2277.477706][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2277.477718][ T4832] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[ 2277.477744][ T4832] Call Trace:
[ 2277.477752][ T4832]  <TASK>
[ 2277.477760][ T4832]  dump_stack_lvl+0x189/0x250
[ 2277.477784][ T4832]  ? __virt_addr_valid+0x18c/0x540
[ 2277.477805][ T4832]  ? rcu_is_watching+0x15/0xb0
[ 2277.477819][ T4832]  ? __kasan_check_byte+0x12/0x40
[ 2277.477840][ T4832]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2277.477862][ T4832]  ? rcu_is_watching+0x15/0xb0
[ 2277.477876][ T4832]  ? lock_release+0x4b/0x3e0
[ 2277.477901][ T4832]  ? __virt_addr_valid+0x18c/0x540
[ 2277.477922][ T4832]  ? __virt_addr_valid+0x469/0x540
[ 2277.477949][ T4832]  print_report+0xb4/0x290
[ 2277.477969][ T4832]  ? batadv_forw_packet_steal+0xfa/0x170
[ 2277.477987][ T4832]  kasan_report+0x118/0x150
[ 2277.478015][ T4832]  ? batadv_forw_packet_steal+0xfa/0x170
[ 2277.478035][ T4832]  batadv_forw_packet_steal+0xfa/0x170
[ 2277.478055][ T4832]  batadv_iv_send_outstanding_bat_ogm_packet+0x6db/0x7e0
[ 2277.478085][ T4832]  ? process_scheduled_works+0x9ec/0x17a0
[ 2277.478106][ T4832]  process_scheduled_works+0xadb/0x17a0
[ 2277.478138][ T4832]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2277.478171][ T4832]  worker_thread+0x8a0/0xda0
[ 2277.478188][ T4832]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2277.478211][ T4832]  ? __kthread_parkme+0x7b/0x200
[ 2277.478232][ T4832]  kthread+0x70e/0x8a0
[ 2277.478249][ T4832]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2277.478271][ T4832]  ? __pfx_worker_thread+0x10/0x10
[ 2277.478286][ T4832]  ? __pfx_kthread+0x10/0x10
[ 2277.478308][ T4832]  ? __pfx_kthread+0x10/0x10
[ 2277.478326][ T4832]  ret_from_fork+0x4b/0x80
[ 2277.478343][ T4832]  ? __pfx_kthread+0x10/0x10
[ 2277.478361][ T4832]  ret_from_fork_asm+0x1a/0x30
[ 2277.478382][ T4832]  </TASK>
[ 2277.478388][ T4832] 
[ 2277.667025][ T4832] Allocated by task 29273:
[ 2277.671538][ T4832]  kasan_save_track+0x3e/0x80
[ 2277.676251][ T4832]  __kasan_kmalloc+0x93/0xb0
[ 2277.680851][ T4832]  __kmalloc_cache_noprof+0x230/0x3d0
[ 2277.686236][ T4832]  device_add+0xbe/0xb50
[ 2277.690487][ T4832]  device_create+0x25b/0x2f0
[ 2277.695085][ T4832]  mac80211_hwsim_new_radio+0x418/0x5340
[ 2277.700732][ T4832]  hwsim_new_radio_nl+0xea4/0x1b10
[ 2277.705853][ T4832]  genl_family_rcv_msg_doit+0x212/0x300
[ 2277.711424][ T4832]  genl_rcv_msg+0x60e/0x790
[ 2277.715938][ T4832]  netlink_rcv_skb+0x21c/0x490
[ 2277.720711][ T4832]  genl_rcv+0x28/0x40
[ 2277.724700][ T4832]  netlink_unicast+0x758/0x8d0
[ 2277.729467][ T4832]  netlink_sendmsg+0x805/0xb30
[ 2277.734235][ T4832]  __sock_sendmsg+0x219/0x270
[ 2277.738913][ T4832]  ____sys_sendmsg+0x505/0x830
[ 2277.743753][ T4832]  ___sys_sendmsg+0x21f/0x2a0
[ 2277.748458][ T4832]  __sys_sendmsg+0x164/0x220
[ 2277.753072][ T4832]  __do_fast_syscall_32+0xb4/0x110
[ 2277.758215][ T4832]  do_fast_syscall_32+0x34/0x80
[ 2277.763079][ T4832]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2277.769414][ T4832] 
[ 2277.771737][ T4832] Freed by task 4823:
[ 2277.775713][ T4832]  kasan_save_track+0x3e/0x80
[ 2277.780399][ T4832]  kasan_save_free_info+0x46/0x50
[ 2277.785424][ T4832]  __kasan_slab_free+0x62/0x70
[ 2277.790190][ T4832]  kfree+0x193/0x440
[ 2277.794089][ T4832]  kobject_put+0x22b/0x480
[ 2277.798526][ T4832]  mac80211_hwsim_del_radio+0x2c7/0x460
[ 2277.804338][ T4832]  hwsim_exit_net+0x584/0x640
[ 2277.809033][ T4832]  cleanup_net+0x71a/0xbd0
[ 2277.813460][ T4832]  process_scheduled_works+0xadb/0x17a0
[ 2277.819360][ T4832]  worker_thread+0x8a0/0xda0
[ 2277.824130][ T4832]  kthread+0x70e/0x8a0
[ 2277.828210][ T4832]  ret_from_fork+0x4b/0x80
[ 2277.832630][ T4832]  ret_from_fork_asm+0x1a/0x30
[ 2277.837393][ T4832] 
[ 2277.839719][ T4832] The buggy address belongs to the object at ffff88805687a800
[ 2277.839719][ T4832]  which belongs to the cache kmalloc-512 of size 512
[ 2277.853807][ T4832] The buggy address is located 8 bytes inside of
[ 2277.853807][ T4832]  freed 512-byte region [ffff88805687a800, ffff88805687aa00)
[ 2277.867433][ T4832] 
[ 2277.869767][ T4832] The buggy address belongs to the physical page:
[ 2277.876198][ T4832] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56878
[ 2277.884981][ T4832] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2277.893489][ T4832] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 2277.901037][ T4832] page_type: f5(slab)
[ 2277.905020][ T4832] raw: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122
[ 2277.913609][ T4832] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 2277.922203][ T4832] head: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122
[ 2277.930890][ T4832] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 2277.939581][ T4832] head: 00fff00000000002 ffffea00015a1e01 00000000ffffffff 00000000ffffffff
[ 2277.948299][ T4832] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 2277.956969][ T4832] page dumped because: kasan: bad access detected
[ 2277.963403][ T4832] page_owner tracks the page as allocated
[ 2277.969115][ T4832] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8972, tgid 8965 (syz.4.946), ts 299217536867, free_ts 280401045730
[ 2277.990395][ T4832]  post_alloc_hook+0x1d8/0x230
[ 2277.995192][ T4832]  get_page_from_freelist+0x21ce/0x22b0
[ 2278.000747][ T4832]  __alloc_frozen_pages_noprof+0x181/0x370
[ 2278.006600][ T4832]  alloc_pages_mpol+0x232/0x4a0
[ 2278.011477][ T4832]  allocate_slab+0x8a/0x3b0
[ 2278.016007][ T4832]  ___slab_alloc+0xbfc/0x1480
[ 2278.020701][ T4832]  __kmalloc_noprof+0x305/0x4f0
[ 2278.025650][ T4832]  io_cache_alloc_new+0x40/0x100
[ 2278.030707][ T4832]  io_msg_alloc_async+0x1b2/0x2d0
[ 2278.035738][ T4832]  io_recvmsg_prep+0x60c/0xde0
[ 2278.040525][ T4832]  io_submit_sqes+0x93d/0x1d20
[ 2278.045289][ T4832]  __se_sys_io_uring_enter+0x2df/0x2b20
[ 2278.050844][ T4832]  __do_fast_syscall_32+0xb4/0x110
[ 2278.055982][ T4832]  do_fast_syscall_32+0x34/0x80
[ 2278.060842][ T4832]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2278.067185][ T4832] page last free pid 5882 tgid 5882 stack trace:
[ 2278.073511][ T4832]  __free_frozen_pages+0xb0e/0xcd0
[ 2278.078634][ T4832]  vfree+0x1a6/0x330
[ 2278.082532][ T4832]  pcpu_balance_free+0x6ae/0x940
[ 2278.087468][ T4832]  pcpu_balance_workfn+0xd01/0xe00
[ 2278.092598][ T4832]  process_scheduled_works+0xadb/0x17a0
[ 2278.098148][ T4832]  worker_thread+0x8a0/0xda0
[ 2278.102742][ T4832]  kthread+0x70e/0x8a0
[ 2278.106820][ T4832]  ret_from_fork+0x4b/0x80
[ 2278.111247][ T4832]  ret_from_fork_asm+0x1a/0x30
[ 2278.116018][ T4832] 
[ 2278.118342][ T4832] Memory state around the buggy address:
[ 2278.123991][ T4832]  ffff88805687a700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2278.132075][ T4832]  ffff88805687a780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2278.140137][ T4832] >ffff88805687a800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2278.148198][ T4832]                       ^
[ 2278.152525][ T4832]  ffff88805687a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2278.160608][ T4832]  ffff88805687a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2278.168668][ T4832] ==================================================================
[ 2278.176933][ T4832] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2278.184158][ T4832] CPU: 0 UID: 0 PID: 4832 Comm: kworker/u8:28 Not tainted 6.15.0-rc6-syzkaller-00346-g5723cc3450bc #0 PREEMPT(full) 
[ 2278.196432][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2278.206528][ T4832] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[ 2278.214394][ T4832] Call Trace:
[ 2278.217703][ T4832]  <TASK>
[ 2278.220663][ T4832]  dump_stack_lvl+0x99/0x250
[ 2278.225295][ T4832]  ? __asan_memcpy+0x40/0x70
[ 2278.229919][ T4832]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2278.235162][ T4832]  ? __pfx__printk+0x10/0x10
[ 2278.239790][ T4832]  panic+0x2db/0x790
[ 2278.243737][ T4832]  ? __pfx_panic+0x10/0x10
[ 2278.248193][ T4832]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 2278.254118][ T4832]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 2278.260029][ T4832]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2278.266378][ T4832]  ? print_memory_metadata+0x314/0x400
[ 2278.271850][ T4832]  ? batadv_forw_packet_steal+0xfa/0x170
[ 2278.277489][ T4832]  check_panic_on_warn+0x89/0xb0
[ 2278.282443][ T4832]  ? batadv_forw_packet_steal+0xfa/0x170
[ 2278.288085][ T4832]  end_report+0x78/0x160
[ 2278.292391][ T4832]  kasan_report+0x129/0x150
[ 2278.296926][ T4832]  ? batadv_forw_packet_steal+0xfa/0x170
[ 2278.302578][ T4832]  batadv_forw_packet_steal+0xfa/0x170
[ 2278.308053][ T4832]  batadv_iv_send_outstanding_bat_ogm_packet+0x6db/0x7e0
[ 2278.315098][ T4832]  ? process_scheduled_works+0x9ec/0x17a0
[ 2278.320836][ T4832]  process_scheduled_works+0xadb/0x17a0
[ 2278.326399][ T4832]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2278.332416][ T4832]  worker_thread+0x8a0/0xda0
[ 2278.337365][ T4832]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2278.343709][ T4832]  ? __kthread_parkme+0x7b/0x200
[ 2278.348679][ T4832]  kthread+0x70e/0x8a0
[ 2278.352757][ T4832]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2278.357965][ T4832]  ? __pfx_worker_thread+0x10/0x10
[ 2278.363086][ T4832]  ? __pfx_kthread+0x10/0x10
[ 2278.367946][ T4832]  ? __pfx_kthread+0x10/0x10
[ 2278.373502][ T4832]  ret_from_fork+0x4b/0x80
[ 2278.377926][ T4832]  ? __pfx_kthread+0x10/0x10
[ 2278.382527][ T4832]  ret_from_fork_asm+0x1a/0x30
[ 2278.387301][ T4832]  </TASK>
[ 2278.390660][ T4832] Kernel Offset: disabled
[ 2278.395004][ T4832] Rebooting in 86400 seconds..