last executing test programs:

17.371904788s ago: executing program 4 (id=172):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000101401"], 0x30}}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x1dc, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe1e, 0x4}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x800}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_IE={0x9f, 0x2a, [@cf={0x4, 0x6, {0x4, 0xb, 0x4, 0x7}}, @tim={0x5, 0x91, {0x5, 0x13, 0x2, "04be93b0057666c1fe1989b9cdf946573af4a2e065e571965c9810c123558bf0a96d5b5bebc49188b720b93d40695adc61a1ec063d5728788586f876144798714203527251a11cc39abbe31d5e1a206aead6b2cc1c48544973808fe7b2a6ec68a1347b315843d0d3af28ff5ac309039669132948922dab838e818fddd100d0bce927768d00076041284d299c5edb"}}]}, @NL80211_ATTR_IE={0xf9, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x0, 0x1}}, @peer_mgmt={0x75, 0x6, {0x1, 0xff01, @void, @val=0x1e, @void}}, @measure_req={0x26, 0x31, {0x7, 0x5, 0x2, "b934529a4e53e703435a17ca46845b4f57e80ebec70846782f8880f652dce49e0795478277a6d50e09a0e63cf0b7"}}, @perr={0x84, 0xaf, {0x88, 0xb, [{{}, @broadcast, 0x4, @void, 0x14}, {{}, @device_a, 0x4, @void, 0x1e}, {{0x0, 0x1}, @broadcast, 0x1000, @value=@device_b, 0xb}, {{}, @device_b, 0x4, @void, 0xd}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x6}, {{}, @device_a, 0xfffffffc, @void, 0x27}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x17}, {{}, @device_b, 0x7fff, @void, 0x13}, {{0x0, 0x1}, @device_a, 0x36df, @value, 0x1d}, {{0x0, 0x1}, @device_a, 0x8001, @value, 0x39}, {{}, @device_a, 0x5, @void, 0x26}]}}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000}, 0x4004)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000001400)={0x218, r5, 0x105, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd0}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7f, @mcast1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53b7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x65f17589}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe970}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xffffffff, @private0, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @remote, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20044004}, 0x40012)
setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000100)=0x1cbcb9c1, 0x4)

17.248762435s ago: executing program 4 (id=175):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000180000022cbd7000fbdbdf2580208033fd01ff090002000008001000f9ffffff08000200e000000208001e000900000008000100e00000028825a18c2dcc7ef07452a2d52030a8e6ac201b368908f7eebdc99695b2997fe80d70ae944f511f551d257b50f57ebb838ead5d651e3c85f786c0dd2f3334588bac536e563c62d742b5a8b958fc22a966831fa555b94457e1280a6da7048fd66bfdcf6f5f3d8c0c47c60f987c6f4d4c0fccb9985fb104a3569ba23eaf091b0d00"/197], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

17.132174876s ago: executing program 1 (id=177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0d2d85b561eb934cf0e3ab2cc299342db8cacce58140", @ANYRES32=r0, @ANYRES32=r0], 0x34}}, 0x4004010)
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)

16.011361783s ago: executing program 4 (id=179):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7f, @empty, 0xa09b}, {0xa, 0x4ea5, 0x200009, @mcast2, 0xb}, r2, 0x3f6}}, 0x48)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xfffd}], 0x1, 0x0, 0x0, 0x804c040}, 0x2000c8d0)

15.838915189s ago: executing program 3 (id=180):
memfd_create(0x0, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x10001, 0x601)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0x380000, 0x0, 0xb, 0x8, 0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = epoll_create1(0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0xa0000001})
epoll_pwait(0xffffffffffffffff, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0)
gettid()
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f00000002c0))
listen(0xffffffffffffffff, 0x4)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

14.371395151s ago: executing program 3 (id=183):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
r1 = dup(r0)
unshare(0x20060400)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x100, 0x8)
landlock_create_ruleset(&(0x7f0000000100)={0x3479, 0x2, 0x2}, 0x18, 0x0)
r2 = getpgrp(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000715a88dcd7e78d6f0fa1513247f6321779693f67fcb9813c2d417513c47f47341029eb26c6cf076bc1e8546782342c3aa3eea4a77d830c65e4628453990f41d2566bc28c790ca5617aa6eb07f01cc0e54d96b0044629ab73a31a88db70125268ff1b2ccf79b0e8fbdea8f63dc4ece0f9f068e70d611f664b5dc9394449a55f669a7d43cc9d099923671d6bc57d6d7aabf48c962d5d70788e364cb313be14e1208725"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080), 0x0}, 0x20)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file7\x00', 0x2582, 0x3)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000240)={0x11, 0xc, r6, 0x1, 0x1, 0x6, @remote}, 0x14)
bind$packet(r5, &(0x7f00000000c0)={0x11, 0xc, r6, 0x1, 0xb}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000000101040000000000000000020000002200018014000180080001006401010108000200ac1414420c000200000800068004000380"], 0x48}}, 0x0)

12.76870322s ago: executing program 1 (id=186):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000000)={&(0x7f0000000180)=[0x3, 0x1ff, 0x1d0, 0x7c, 0x6, 0x5, 0x9, 0x6151, 0x45671d7f, 0x1, 0x55, 0x6, 0x5, 0x3, 0x7f, 0x8, 0x5, 0x7, 0xffff621e, 0x6, 0x80, 0xfffffff8, 0x9, 0x1, 0x7f, 0x2, 0x81, 0x400, 0x4, 0x400, 0x8000, 0x7, 0x2, 0x8e11, 0xa, 0x40, 0x40, 0x3, 0x3, 0xffff8000, 0xfffffffa, 0xe4, 0x6914, 0x1, 0x5, 0x6, 0x8f79, 0xff, 0x4, 0x9, 0x20000000, 0x3, 0x8, 0x80f9d7d, 0x5, 0x5, 0x54b, 0xdd, 0xfffffffc, 0x0, 0x7, 0x8, 0xfffffffc, 0x3, 0x4, 0x0, 0x7fff, 0x8001, 0x5, 0xa, 0x3, 0x10003, 0x703f, 0x8, 0x763f, 0x94c, 0x92, 0xce, 0xc, 0x7fff, 0x7, 0x3, 0x890e, 0xef4, 0x4, 0x8, 0xff, 0x3, 0x3, 0x9cbb, 0x5, 0x1, 0xd021, 0x3, 0x1000, 0x5, 0xff, 0x4, 0x402, 0x2, 0x3, 0x5, 0x81, 0x8000, 0x8, 0xd, 0x5f04, 0x6, 0x4, 0xe, 0x964, 0x5, 0xff, 0x8, 0xfffffffe, 0x4, 0xc, 0x40, 0x5, 0x5, 0x4, 0x8, 0x2, 0x2, 0x0, 0x0, 0x8, 0x7, 0x8000, 0x80000000, 0x7, 0x1, 0x101, 0x7b98, 0x3, 0x7f260000, 0x9, 0xff, 0x7, 0x9, 0xc, 0x9, 0x7fffffff, 0x5, 0x7, 0x4, 0x3, 0x8, 0x8, 0x4, 0x83e, 0x7fff, 0x7, 0x9, 0x3, 0xca5d, 0xffffffff, 0x1000, 0x1, 0x0, 0x3, 0x3, 0x79, 0x9, 0x51e6, 0x46, 0xb, 0x1, 0x10000, 0x6, 0x1e00, 0x6, 0x8, 0x1, 0x45495d9b, 0xba, 0x2, 0x2, 0x7, 0x8, 0x9, 0xfffffff7, 0x1, 0xffffffff, 0x9, 0x80000001, 0xc613, 0x2, 0x86b, 0x81, 0x3, 0x9, 0x8, 0x8, 0x9, 0x0, 0x0, 0x5, 0x34b, 0x1, 0x1, 0x9, 0x6, 0x1, 0x9, 0x5, 0x8001, 0xe, 0x5, 0x10001, 0x8000, 0xf50a, 0x6, 0x85a, 0x4, 0xc3, 0x3, 0x5, 0x8, 0x4, 0x10000, 0xa, 0x1ff, 0xf, 0x2, 0x101, 0x5d4, 0xf7c, 0x6, 0x8, 0x400, 0x1, 0xffffffff, 0x6, 0x0, 0x7, 0x8, 0x8, 0x1, 0x5, 0x3, 0x8, 0x0, 0x4, 0x70, 0x4, 0x8, 0x2, 0xfa0, 0x80da, 0x5, 0x3, 0x5, 0x4e01e696, 0x3, 0xfffffffb, 0xd54, 0xb3, 0x4, 0xf7, 0xfff, 0x8, 0x1, 0x6c, 0xd9, 0x6, 0x6, 0x9, 0x2d, 0xe, 0x542dbbe9, 0x9, 0x7a8, 0x9, 0x8, 0x9, 0x101, 0x7, 0x7fff, 0x0, 0x2, 0x7, 0x6, 0x7, 0xb59, 0x7, 0xa6ab, 0x7, 0x8000, 0x20, 0x2, 0xfd, 0x8817, 0x2, 0x9, 0x5a, 0x6, 0x80000001, 0x6, 0x3, 0x3, 0x17c7286c, 0x6, 0x3, 0x0, 0x4, 0x8, 0x0, 0x401, 0x40, 0x0, 0x4b4, 0x40, 0x10, 0xf, 0x7, 0x8, 0xffff, 0x9, 0x10001, 0x3, 0x2, 0x5f6c, 0x5, 0x80000001, 0x2, 0x8, 0x2, 0x1, 0x0, 0x5, 0x4, 0x8001, 0x1, 0x7af0, 0x5, 0x0, 0x9, 0x3, 0x0, 0x3, 0x3, 0xfffffffa, 0x3ff, 0x5e9967dd, 0x4, 0x15, 0x0, 0x8, 0x3, 0xfa, 0xfffffffb, 0x2, 0x9, 0x9, 0xc25, 0x69d1, 0x4, 0x8, 0x4, 0x514c, 0x7aded2d2, 0xfffffffe, 0x400, 0x5, 0x6, 0xc48, 0xa, 0x4, 0x2, 0x0, 0x2, 0x101, 0xfffffff7, 0x1, 0x0, 0x100, 0x0, 0x8, 0x3, 0x2, 0xacf7, 0x18000, 0x5, 0x2, 0x6, 0x2, 0x2, 0x7, 0x8, 0x54, 0x81, 0xb8c, 0x10, 0x482b4b04, 0x2, 0x4, 0x7, 0x4, 0xffffa223, 0xcfb0000, 0x9, 0x8, 0x800, 0x5, 0x93, 0xe, 0x7, 0x3, 0x5, 0x4, 0xffff85f6, 0x3, 0xfffff8df, 0x8, 0x1000, 0x3f0000, 0x5, 0x3, 0x7, 0x8, 0xffffffff, 0x8001, 0xa0af, 0xf0b, 0xb, 0x167, 0x1, 0x8, 0x401, 0xb0c, 0x9, 0x3, 0xa9f1, 0x8, 0x0, 0x4, 0x6, 0x57, 0x2, 0x4, 0x3, 0xfffffffb, 0x7fffffff, 0x6, 0x6dc9, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0xc6, 0x4, 0x1, 0x40, 0x0, 0xa69, 0xffffe8f9, 0x43, 0x10, 0x80000000, 0x1, 0x35f, 0xc, 0xfffffffd, 0x3, 0x9, 0x7, 0x10001, 0x3, 0x80000001, 0x2, 0x6, 0x6, 0x6, 0x8, 0x3db, 0x2, 0x8, 0x5, 0xd, 0x26860260, 0x40, 0x0, 0x8000, 0x0, 0x101, 0x1, 0xffffa448, 0x3, 0xf11, 0x6, 0xfffffff9, 0x1, 0x0, 0x5, 0x8, 0x7, 0x9, 0xffff179d, 0x6, 0x0, 0x21, 0x279, 0x3, 0x7ff, 0xe4000000, 0x2, 0xfffffff7, 0x6, 0x0, 0xa, 0x100005, 0x1, 0x7, 0x4, 0x3, 0xfffffffb, 0x3, 0x7, 0x5, 0x6, 0x9, 0x2, 0x1, 0x3, 0x10, 0x6d80000, 0x8, 0x1ff, 0x800, 0xa, 0x2, 0xffffffff, 0x3, 0xff, 0x1, 0x5, 0x2, 0x80000001, 0x4, 0x1, 0x2, 0x1, 0x85, 0xffffffff, 0x4b4, 0x90000001, 0x5, 0x67468d6c, 0x5, 0x1, 0x5, 0x9, 0x3, 0x5, 0x687, 0x3, 0x5, 0x7, 0x3, 0x3c, 0x3, 0xfe3e, 0x0, 0x5, 0x6, 0xfffffffc, 0x6, 0x7fffffff, 0x1, 0x0, 0x0, 0x8, 0x8, 0x5, 0xfffff3c2, 0x6, 0x3, 0x6, 0x2, 0x4, 0x3, 0x6, 0x7, 0xc8e, 0x8, 0xf, 0x3, 0x0, 0x9, 0x6, 0x0, 0x14c59023, 0x9, 0xffffff6a, 0x0, 0xf97, 0x2, 0x400, 0x7f, 0x7fff, 0x9, 0xfff, 0x9, 0x7, 0x1, 0x9, 0xb27a, 0x7, 0x7, 0x404, 0x4, 0x9, 0x0, 0x80000000, 0x8, 0x6, 0x2, 0x3, 0x6, 0x2, 0x9, 0x7, 0x10000, 0xa, 0x3, 0x6, 0x10000, 0x7f, 0x5, 0x3, 0x101, 0xfffffffe, 0x2, 0x4, 0xffffffff, 0x4, 0x5, 0x2, 0x9, 0xffffffff, 0x2, 0x3, 0x1, 0x53f, 0x0, 0x0, 0x10000, 0x7, 0x80, 0x0, 0x7, 0x8, 0x0, 0x2000, 0x572800, 0x6, 0x681, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0xffffff80, 0xfffffffb, 0xffffffff, 0x4, 0x4, 0x6, 0x8, 0x4, 0x3, 0xb, 0x80000000, 0x1, 0x8, 0x7fffffff, 0x5668, 0x1, 0x9, 0x7, 0x2, 0x9, 0x2, 0x2, 0x8, 0x925e, 0xa, 0x2, 0x9c, 0x4, 0x8000, 0xa, 0x9, 0x4, 0x8, 0x80000000, 0xfffffebf, 0x23, 0x57a, 0x8, 0x4, 0xaf, 0x2, 0x6, 0x0, 0x9, 0xffff, 0x0, 0x8000, 0x7, 0x2, 0x7, 0x7, 0x5f4, 0x5, 0xdbdb, 0x7000, 0x0, 0x27a, 0x7fff, 0xae, 0x2, 0x8, 0xfffffffe, 0x5, 0x3, 0x9, 0x10001, 0x6, 0x5, 0x7fff, 0x9, 0x4, 0xfffffff9, 0x7, 0x6, 0x9d5e, 0x7665eb43, 0x3, 0x200, 0x8, 0x5, 0x4, 0x0, 0x6, 0x401, 0x6, 0x1, 0x4, 0x3, 0x0, 0x7, 0x2, 0xe62, 0x9, 0x20000, 0x7, 0xd5e, 0x551d, 0x200, 0xffffffff, 0xc66, 0xfffffff8, 0x5, 0x3, 0xa, 0x7, 0x9, 0x100, 0x6, 0x1, 0x4, 0x27023544, 0x1, 0x81, 0x9, 0x4, 0x1, 0xe, 0x8, 0x6, 0xe, 0x3ff, 0x3ff, 0xb6, 0xff, 0x2, 0x6, 0x5, 0x7, 0x1, 0x5, 0x9, 0x6, 0x80000001, 0xa, 0x7fffffff, 0x6, 0x0, 0x2, 0x9, 0x400, 0xa92, 0x9, 0x840, 0x0, 0x6, 0x7, 0xb, 0x40, 0x0, 0xb4, 0x40, 0x5, 0x1, 0x1010000, 0x8, 0x82c, 0x8000, 0x10, 0x2, 0xd, 0xd, 0x6, 0x3, 0xa, 0x7, 0x1000, 0xb, 0x9, 0x40, 0xffff, 0x1, 0x40, 0x6, 0xd, 0x400, 0xd56c, 0x9, 0x8, 0x4, 0x6, 0xddb, 0x9, 0x2, 0x66, 0x10000, 0x0, 0x0, 0x4, 0x4, 0x2, 0x3, 0x7fff, 0xa73, 0x9, 0xfffffffe, 0x7, 0x2, 0xbf3, 0xa0a6, 0x5, 0xb, 0x9, 0xfffffb0a, 0x8, 0x8001, 0x4, 0x5, 0xb, 0x6, 0x7, 0x1, 0x3, 0x6, 0x1, 0x58, 0xf, 0x80000, 0x100, 0x0, 0xa5a1, 0xd, 0x6f6, 0x2, 0x6, 0xff, 0x80000000, 0xdfb0, 0x47ad, 0x9, 0xfffffdab, 0x5, 0x5, 0x99, 0x7, 0xffffff4d, 0xffe, 0x5f25, 0x93, 0x8, 0xe, 0x100, 0x6, 0x8001, 0x2, 0x8, 0x4, 0x4, 0x9, 0x80000001, 0x5e, 0x5, 0x6, 0x1, 0x8, 0xffff, 0x0, 0x5, 0x7f, 0x4, 0x40, 0x4000e, 0xffffffff, 0x1ff, 0x2, 0x8, 0x6277, 0x5, 0x3, 0x8, 0x2, 0x2, 0x9, 0xa, 0x8, 0x1, 0x4, 0x7f, 0x200, 0xfffffff7, 0x7, 0x6, 0xe9df, 0xff, 0x6, 0x0, 0x3ff, 0x6, 0x7fff, 0xf4, 0x9, 0xa, 0x6, 0x6, 0x7, 0x8b14, 0x3, 0x9, 0x2000000, 0x5, 0xff, 0x7, 0x80000, 0x3, 0xfffffffc, 0x5, 0x1, 0x6, 0x2, 0x2, 0xd3, 0x1, 0x3a5, 0x0, 0x99d1, 0x7, 0x7, 0x5, 0x4, 0x0, 0x2, 0x3ff, 0x0, 0x4, 0x1, 0x9bc, 0xd, 0x9, 0x200, 0x3, 0x0, 0x2, 0xd, 0x10001, 0x0, 0xfff, 0x6, 0x56b6fc16, 0x30dfc00, 0x7, 0xf, 0x380000, 0x1, 0x2, 0x9, 0x80, 0x80000001, 0x2, 0x8, 0x6, 0x6, 0x3, 0xd, 0x1, 0x6, 0x1b1, 0x1, 0x1, 0xfffffff9], 0x1, 0x400, 0x8})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
r2 = getpid() (rerun: 32)
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async)
getpgid(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0xa1d6ff532c950930, 0x0, &(0x7f0000000080)) (async)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b)

12.304745244s ago: executing program 3 (id=187):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1000, 0x7, 0x0, 0x9}, 'syz1\x00', 0x9})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/freeze_filesystems', 0x163b81, 0x10f)
write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010)
mknod(0x0, 0x8001420, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x210000, 0x0)
getpgrp(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8)
setsockopt(0xffffffffffffffff, 0xffffffff, 0x8178, &(0x7f0000000080)="d59cfa1ad27d3f98193a3bfb260578586d99b58f39760a27a7a6bfd2d684b55d5db05b993e3b0658c0dc1fbe5595bbbce4d59627f6f62138bd0602c00a6f9fe0156413bdf73a1146420f2243788451ccba4517d8298ea0e53d2492ff93ba7b51811b6e0848aa8d1e8d8b9ae6fdf937ff748838573f0c87b7e58f382b123035437bb097b95169f3fc460cb888abc1864403616f96b6fd1e046952d6d4bc79013604605ed7ee262381cb763b24f49592", 0xaf)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000140)={0x0, {"9d32634a23a31f9ae6b280f1e273b625", "43211645218bd91e360318a998477d9c", "ff653d1b5286031de4ad065e0544f04f"}, 0x8, 0x5})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000000500)={0x50, 0xf, 0x1d, {0x12, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x7, {0x8, 0xfffb, 0xeb4d, 0xf773}}})

7.95958205s ago: executing program 4 (id=193):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe)
pselect6(0x40, &(0x7f0000000280)={0x5, 0xfffffffffffffff8, 0xd91, 0x6cd2, 0x24, 0x81, 0x10, 0x3}, &(0x7f0000000300)={0x5, 0x1, 0x100000000000000, 0x9, 0x3c, 0xfaa9, 0x20000000003, 0x3a}, &(0x7f0000000480)={0xd, 0x84, 0x3, 0xffffffffffff1c49, 0x2, 0x3, 0x5, 0x2}, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000500), 0x8})
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x4)
futex(&(0x7f000000cffc), 0xb, 0x20400002, 0x0, &(0x7f0000000040), 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
sync_file_range(0xffffffffffffffff, 0x889, 0x8, 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000)
preadv2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000040)=""/50, 0x32}], 0x2, 0x1, 0x7, 0x4)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000440))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
syz_emit_ethernet(0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffff07000000000000810020004305"], 0x0)
recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000580)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/175, 0xaf}], 0x1}, 0x12102)
clock_gettime(0x4, &(0x7f00000000c0)={<r4=>0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f0000000100)={<r6=>0x0, <r7=>0x0})
futimesat(r3, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)={{r4, r5/1000+60000}, {r6, r7/1000+10000}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x30, r9, 0x1, 0x0, 0xffffffff, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x30}}, 0x80)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)

7.953472988s ago: executing program 0 (id=194):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x10040)
shutdown(r0, 0x1)

7.646449248s ago: executing program 0 (id=195):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000001180)={{r0}, "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"})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4d, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000180)}}, 0x10)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x8, 0xa})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x503, 0x70bd2a, 0x20000, {0x0, 0x0, 0x0, 0x0, 0x1d961, 0x8048}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0xc811)

7.383540832s ago: executing program 0 (id=196):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2)
syz_open_dev$evdev(0x0, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f00000022c0)={0x28, 0x0, 0x0, @host}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000040)=0x100000000000404, 0x6, 0x0)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000040)=0x100000000000404, 0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31300d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f30c4c17f12886f0000000f55a60b000000660f383eb1e2f8ce49f00936db809b6700000f222209c4260f20560fc72cd0", 0x3d}], 0x1, 0x40, &(0x7f0000000280)=[@cr4={0x1, 0x20000}, @flags={0x3, 0x80000}], 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0xf, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x4, 0x0, 0x9})
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559})
syz_open_dev$char_usb(0xc, 0xb4, 0xffb8)

5.812433254s ago: executing program 3 (id=197):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000d40000000000000000000000000100", [0x0, 0x2000000000001]}})

5.811238266s ago: executing program 4 (id=198):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700))
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="0504"], 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0))
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r5=>0x0})
bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r5, 0x3}, 0x18)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x310, 0x8000, {{0x10, 0x4, 0x1, 0x37, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp={0x44, 0x20, 0xa1, 0x0, 0x3, [0x9, 0x2, 0xffffffff, 0x2, 0x1, 0x516, 0xd]}, @generic={0x88, 0xb, "872e90430907c48f7a"}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r7 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)=""/56, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000340)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0xffffffffffff0000, 0x4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

5.444681657s ago: executing program 1 (id=199):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000200)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b70800ffbf0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.311791875s ago: executing program 4 (id=200):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x511000)
write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2)

5.304775664s ago: executing program 1 (id=201):
setresuid(0xee01, 0x0, 0xffffffffffffffff)
keyctl$clear(0x3, 0xfffffffffffffffd)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a3a440000000010109023b000101010000090400001202eb0000052406000005240000000d240f010000000000001e000009058202000200000009050d22"], 0x0)

4.299103954s ago: executing program 0 (id=205):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x10040)
shutdown(r0, 0x1)

4.247983581s ago: executing program 3 (id=206):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r1, 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000460000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c000240000000008000000108000440000000010c00014000000080"], 0xe8}}, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0)
close(0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4", 0x0, 0x0, 0x0}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000060000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a8d5dda63e717542700000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x1, 0x20002f5})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendmmsg$inet(r5, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c00)="0f", 0x1}], 0x1}}], 0x1, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4000000010901030000000000000000070000030c0004800800014000007fff84000200060003400000000006000340000000000c00028005000100840000000c00028005000100010000002c00018014000300000000000000000000000000000000011400040000000000000000000000ffff0a0101012c00018014000300fe8a000000000000000000000000000114000400fc0200000000000000000000000073797a31000000000900010073797a31000000b3eab0b600"/196], 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x1)

4.127160243s ago: executing program 2 (id=207):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000180000022cbd7000fbdbdf2580208033fd01ff090002000008001000f9ffffff08000200e000000208001e000900000008000100e00000028825a18c2dcc7ef07452a2d52030a8e6ac201b368908f7eebdc99695b2997fe80d70ae944f511f551d257b50f57ebb838ead5d651e3c85f786c0dd2f3334588bac536e563c62d742b5a8b958fc22a966831fa555b94457e1280a6da7048fd66bfdcf6f5f3d8c0c47c60f987c6f4d4c0fccb9985fb104a3569ba23eaf091b0d00"/197], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

2.865821531s ago: executing program 0 (id=208):
r0 = memfd_secret(0x0)
close_range(r0, r0, 0x2)
syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x102)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000980)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x20, 0xa, 0x2, "1aa2"}, 0x0, 0x0, 0x0, 0x0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x8000000)

2.844116493s ago: executing program 2 (id=209):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x7, 0x1, '{&\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000045)

2.813134658s ago: executing program 1 (id=210):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0xfd, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x26, 0x22}}}}}]}}]}}, 0x0)
r1 = socket(0x8000000010, 0x2, 0x0)
write(r1, &(0x7f00000002c0)="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", 0xfc)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x3, "17c65782"}]}}, 0x0}, 0x0)

2.176163508s ago: executing program 2 (id=211):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000200)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b70800ffc30000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.15413406s ago: executing program 2 (id=212):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
syz_emit_vhci(0x0, 0x4) (async, rerun: 64)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x101c0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) (async)
write(r2, &(0x7f0000000040)="240000001e005f0214fffffffffffff807000000010000000000fa0af15c318751dd7fe1", 0x24) (async)
setns(0xffffffffffffffff, 0x20000) (async, rerun: 32)
unshare(0x400) (async, rerun: 32)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) (async)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000000)={r9, 0x2, 0x3}) (async)
ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000240)=0x4) (async)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000b, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x3], 0x0, 0x8340})

2.098002173s ago: executing program 2 (id=213):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000009, 0x3032, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x5, 0x3}}}}}]}}]}}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, r1, 0x0, 0x2}, 0x50)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000cc0)=[{0x2b, 0x0, [0xd8, 0x7, 0x8008, 0x2, 0x4, 0x4, 0x2, 0x10, 0x7, 0xfffe0000, 0x7fffffff, 0x7b2b, 0x3, 0x6, 0x0, 0xdaa1]}], r3, 0x1, 0x1, 0x48}}, 0x20)
syz_io_uring_setup(0x41, &(0x7f0000000340)={0x0, 0xb296, 0x40, 0x2, 0x18}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.643718589s ago: executing program 3 (id=214):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x0, 0x0}], 0x1})
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x240, 0x0)
mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
statx(r3, 0x0, 0x1000, 0x8, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="6cd11c584d12f1cc8b78a0816cb3a58017a13dd1f8cfd9758354527d06e11afea4d453167ae1efb8494deb6fb52083a43d598d7b52ab6ccaa3ae747528974712ec53e63c8a2d71f63aaedf6d3ded735245447d5ffce64a36502108485c0cf0a26d28b37dbda95c5fb897805cccb690b1233b8a674f2aee1a77e2bec8e978701d66a5e4933a52c36a9cb20f1dc30d3793f7b4156589f806c550a0d1428a1bf42f0978ededc7d162dc0b13f5645457054c6f07884edc08ee0ef65a5bbce541b60adb2872565f1282769090e0889f5f42cdeef987fd98c50059375e9bc910bd0c96054cb94dd9a34170db2fc798094d5e8ecda681b9a6c535f33bbb1590c09f785733c474240b8774f13b5038c0ab50212c4ef1d5c2ef07ed2f0ce2d542a06ad09ea2489aa2a2aab6285ba880d2c98d25f509aa58392efd69bf4d674710f1d04d91067c4d16e0f1455dc6463f71ede1795a6ef0d91b39d79a94edc713eca214da64ea2bed1f6e6550eede9517706dd469ba838bf530f8c2a5b167381e8e8430f77deec1e2389732dae4951c79bfba80f1e62990d4e02072f3f7c8f1abe4996f6014e75637b43f57428e5fe642765064b3c83d6644a0845d20a888e7655444059ffca50c793dcd29ab95d6b07e55a42892443094933f3f9bbdd49b09ee407d464b73b9b5ea8207d57478947749a826836b5d69c6347ef9c31f48c7ad8e37f4b9f44f07562a357ab50e5e2aae61dc341875a3d62a1f4a3563b01156e2b72d501ed281062caad60c597973ab932d54bc32834c115398d9f57a9c6fd11d769cbacf7381628653abcae58a46a1ee69ed12038ce7a1bdc71f4efbcaae49402fe33901ffe62c8a48272d2ba3250d8e487f9f4895f10628fde5ef48dad44331131d5288d30e8ed7a27011e77aefff53a8d3ae08d435d67c3d34e404fd7d930a91a1560192de3910cc5f0e92692da6a75fe9d10cc2a55864b5339b898e92af672e9f83410720f0f0e3024ae0bdd83f0843310bd5b6c2382f73c967bc432377957867ce1445f9ea1527ce9203065987aa26b24eb5da4227ce1a737b0e9ac41865bad3c41bb374d557b3fc505ca02a5cbc11e38ef905635790a4073d68c304b9856b461dea2251cc49807f5cb8da40a1366b578c93ebc17a8d29439b0db3b1d1465d3e12c9c98998caa0727d37eb789f98b580e9195d4028e340f971ffd8c602b77f298d8b5bbfac15e1d3a6c3ed06fe8100db335b2e4dd8014c372e1b5aaf08e2d0e9ea6fe6373aa1ca9f8fa670367dc403ddab777dddb9e610d06d7ba7c856466399a4fb99dab224931e252962c3c3d27c7f83d05c00ce132c0636a82757f5b99401feac71acd046842499eb786c28c6d89c73edfb8aabe620dbc4ef9224115d96c8610353a5841a680bfc42a1d940f15533e7c0fb6f89bff6484086face4a338fc021aecac1995e835acbbd9df9aa5bdc0a3777e3f0da1af7385971042811c11155e82ef6aa70d1cd7230e9fe9ab537db0f6eb02f53e55f89c01a198c75499076e99dd706a476650f3118108547291aef83c27e27334fcd499a369c7fb2252dcfa939de6965965219baae805e03746393b341022e31eacc5f173757d443e8b6af51f905dc347a82d75990a88e054335378d1b6dbcf78ad27ac01a2b164153f361bead1ff8e0640c92dab5f8c249b6c034759d30e33b977a43e11af0d7ac04f2b5b68183b6888b163b5931dacd34e53d393449939d78d5cd2b746c74c0bb9d3ce42a2547fb8a614d5632c33fde9278ba3145d036382a22c24e4c0ff9bf34e3d193ab357a9e3480561e04daaab4a076a91d61cde45323264f921ee35a504d60d9fa5f4c3e97d3e0be1d4119174a443055f21c2b9ff12fdae49a352f730d76302e9fa924b4a919690d2e1cc3217314207042c59f771a2d7391d98a40b2d49dade3edb39e75f3fd8a03ca99f6d6c6dc6f36105ea33e42c0f63b5a572372841888dfa9b19d6454fb7b6b4bbccf11977679540d3be4e4c657c1a4c57366435a604ca0744956e4f755c22b45f8f705a3b5da09734ad80a5f20c4a40504da8ebec40035e9c101f8f08f51794de9a407f6d62d05cee811afd08e89d74e6a758c89d517b52723a330cbd7199f6dba1bdcaa3d80a11990a1a325b471711dc3ad6b0735d8dc53d6416a10ea4eb5e0747572bd82065f51177c917b6d48ac5c55ac0101a9590aab1b0d3e912469ab732b095cc7791439766e4c47c942ba0199e231ab3b5ba2c71d541f7e45754943ef9677d04c4d67856187691f2333d85f556ea2bdefbd48af3064746939b38cf6eba548deab7ff88aed252b8166cd18813b240afbffd79d808cf98c9ae9b291c4ae8a41210c3a4f64ef1862cdb83a5a042b66d55c86e106f03dab13eb893dbcd1d5dd84eb8b837a3c2436c87d1746230bc67b9477b8c8e2aab3ac294170f673de5fb3843891322894e82bc4302ada5cb0908540784bdf8ddd56c7edede44b116131df120391cd0b4e424291602855aa946087e6311efe30e160c6af9a8389c0034cd3bc70b4bef50d52f10624a5a8649196fa644d1ec175bb15d29a331a078483068e2f7a36e6e7933ef5afabb766f2941fe09fc91865b5f9639bb548d22b9010345d210f3db415d40ded8a57a86837988fff8f3704301ffb3197010853a489f6633018565e66676511fd48c78c60021e14cfff982b0c59f2ea3964c255468c35c3543b54402f2d909cb7997ec9c3962cf9ddfe4e973d69ee0d13cc0ce621478920ef874970a65249b6dc222d19fcce965b168f5988396668f0c3abbb7ba149eda5bd525b5328fef30856eb6b026732cd35822509501a12d1468690182ba545a76d5f96d8eec5339b183bacb444a6efd6d597226d63de6d7f98982688b5ea81f08c578d89e6f907a42c38d10fbb482dc50826617a34b5f3dece53e9f6b4f621b27b3b025a244cc644a426826bc2a4dfd2ed7b1ab94f4d9b0eb6e2267a83d0055f4f3bbd49079806ce89053edafc439dadd4e2c82944169069aa4e579b42f61d180c05714cba0b907012ad287d759c50e64b0f321a00b87113811e3cdaecf50b76491e2bc6113f45cf6036812e0410482517f50077b0e3f74ae4bc36dff3120686c271ad4b9bffc2cb757732f040be809df7c3ad7707b95683ae2a465ce0a5f3ba3ba3f43bd881c3548e1b45118993238511b0b85133f1a88aec95f1d41e942be15876a33243a07e01eaa953495286aa700e43bc1dbaf5b571462b2636f20178c5b45983aef0de1a92b560163eced9f6476b21cf4651c9a3ba51557942052e268c798c5ff3ad5c4adc0a928313d110a7b237bcb34d39b1291d0b921467b6d30610b1007fac865b9cdd5047424ed02e6566e7356cdb483779679539a0c264bd47e98090527de73923e25ab173fd43a788b41271538f0e2fc7a543ace04384fa1f57757a896900e74baf0830caf440df8a2b56e9e8432bc739a96b167f535995207c8339043e2bc6b704376f14df472bab968552a8b27bbbfaf36277808694cab4e3cd101a0bdd6e1e6781f7f2d2bce2c4078a3b3c1f473274ad8ef2dd9b5815c8e7d94c04f981608145428613ba97b5c025be57c53a70ad8f8c15b6b6396a9a0fca60958c2dc40d3e6c4d69584033c197d3db43b20ce856470b55611b92e018c69b04be7c236e50bcac113cc17ca938fc5c0e9f95b00dbf2e91639babaeb916b81412ce95a2126d4c4158b846580ea6aadba8d46de38af3db357677d0f839521ef1bd74be53d550dca59f67485b0a91834f10e20b8633db18f23544a827f4655904ef15cb77dbd5746bccc617a2e763cc0cd28f33d9b69bf601922eaa4dc4463fd9661333efdb3296c3afaaf17b97f642f55e4b634955bc3062528f0a56d66443b79cf69f63be0b2b0ca18bf4f522e5b000f3002a1ac34e819f86bed1dfc8c8580e26b5014e5f8c01d5e40f20e2aba13be0dcdac3b5dd78aa6602786507cd9e3b83966ca2613a3278050347a6f6f7eb37078e0d0d93e61a90ec9694c538e5267bd277d07e8b8dababd5269a73a425049dd84bbd0faf1417dba9410211df10d41955d2b2d2d9518bc1183bb6e4fe346387c757ceeb4f98c8de926d7fee385a866b5e352b835dc2a58591958db69fd12f998a128dba101c780a2efb19a94e8a311efcdb70d5b8e37eb72385b85879389b1791c0a262052805f280fde12ece76ed737e0c523cb93553794749d57c7b7b29ac260ed2ef7b27559a2bfc4f6c5539dee0c386b0c84a83799e8a13c58c4dfd5e195629ef86ad9385b16fb981ce79ef413c257b7d692b020efe8ad050b211be52f3aef70ef92d1699366dec64637a77cc1ebe1ae119ef7c947de2d51657ad337835c0d53f1f1e1c3426da7c83cd3bc0accf0517a818eb02048211e48866821baa2e060db4efc6bd025939c80435ccbaeeeb772450b7900f955d1e3055bda994d1f9d8ac98ed4286e017d6cff1f04f98432ee75ce4fbaf5cd6342cfbc6bf22f9f15a47a2e8386bb409b1dbf2b11f96b798cb9e488fb02961d9241c6bbc965286878d2d9c7120e378120f1abe3067118ff1b0295f5545757375474a38443a3c7420c91c527a35c6ad1088f0be19cdb6cd991b6a9bcd26c4cb04fa399244aa77e7bc2ef1a69137fb269c6bd4cfbced80b25762086cf466628207f07e36d124b5dcbc4e0fb5af5720c7f91090b87a9d7657fd2c59c22afed560ac5ce517dddffa71bac17c097d2b6eabacf7cf71df6c2d127630d1b775a2dd2a4841c7657179f02070adc30542c3dc3a84a409cfb5682f4a74b854bc0f034f53bfd73e48e9e6e16ef5cfc851e8069409bafb5f97965c8a47d05490444ff92775fee51b1e75e7e83ad04abcf46a77e1caedc3cbc0c1ffa54875c4d1172173c6175fdfd7756656459a5470175c573ec4403d83661e7c9ca6279fdc60e06f4b716e392b4ad1a22e9b7516b808f74ba5dd3e5108b4ca277d94c2df7efe48d6d7f76c33a11d7e75b89fe566232ef756de423dd632f5533c9235a806b909617b491b79ddc0f08d2735261ccae922abcefa8f677587ee5f649f9aa3503a5b61f1688c7340405a6535f619a003243b2cb1a5252afad85834833318d9527e472dd2c7afe84a370b95fe2d6a8c2bcd59c13d233562dbb8fa4933eb69325c9628406f6ec6eb380e745981c626823e23b063b53d19e8892cc3a2ac635ead8cb3e9a96bd78229869cd175ef438f027d902ad0646d155b9bd9629fecb0a7950ad562650d557ae64dfea75427431a50777bd18607e731c87198a7dbab33103386cb956813e84e5a9d5bb3bcdb253178207889f8cdb1d2528610fa3bc1f2c7dea3fd15ecf3fb02b4737e047a894977851c2720e680418c011d0e94cf9d0b7038b1056bbda87f3f1c61f29db2e98f18bc3634557b825ec12d89f87e21f439c517cdf34978f0446d05aec0bf3299a014ba6c6c8dd597b8169dfb31ff7333ebc3b2bc6dbf085276712a25346b9cdffb1ad5074324d865ceee4b531e06c7837fdfc2ef33394e279fa63d535aeecb6de9c726806c4cd7988f35bffbc9c7eff7f81e24ae97e5da618b9dc5446e43a182a7d5196e09bc66d4d9822e20560db0e21d5506334f479f7241975e9c623ed419dcd11842cddba529e98ffe8b56ce5dbc568e8f08cb37e189563af1a0b0e191c28ca105024e1d7e6ea8f20855fdf24918666d01ccb1bcd9f1f427d137a22f6f23aa2c972960f27f64d4c6ef783e3ec5792f92ec49ee3e415a4659ebe0f583fb26e2a6c4a9c861c3fc6cbf7d9fc8111a4e", @ANYRESHEX=r3, @ANYRES16=r4], 0x0)

655.518768ms ago: executing program 1 (id=215):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0xfe44, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="9f6ca31223be7720aa0d0020004a4d40baafc06360614c4a18d1190a1cfdde8ce9aa9a798996e77767917128fca40ef79e86e86a80e844d486194215b8e97ebbcdee6b6f0b4fc9351eed89fb3869cb3c8e7f5ad4ca4d1667a14ea0dc9200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000700)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x0, 0x1, 0x1}})
syz_usb_control_io(r0, 0x0, 0x0)

614.005776ms ago: executing program 2 (id=216):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, 0x0)

0s ago: executing program 0 (id=217):
syz_usb_connect(0x2, 0x33d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x1b, 0xd3, 0x71, 0x8, 0x4dd, 0x9032, 0x88f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32b, 0x2, 0x8, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0xf3, 0x5, 0x5, 0x2, 0xa, 0x0, 0x94, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f3"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xee2, 0xcc, 0x84, 0x4}, [@mdlm_detail={0x64, 0x24, 0x13, 0x1, "e30cbb439baac31c9c08254106ee6b69b5742a55d4c2492aed432f969253b61efb33b1731d5079755f5a48b1eb91e8583aa925cbcb7cdc496422f75e4b4f51671b583d0e801dcb749617fdbde9d9b79e206e812dd86ab7c53f5ea0c6082cf795"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x3, 0xd1, 0x1, 0x8, 0x1}]}], [{{0x9, 0x5, 0xf, 0x4, 0x400, 0x1b, 0x43, 0x0, [@generic={0xd0, 0x31, "f439d83daf3b2c2f10f52988036113717567e0bb2b4819fb4c2889ff819c751b9eab08ac4c18eb8182ea65b23add99fd8f9f56dfc5e426c0bc0d5e8b6d065154b072f02935842fc7bc918563c11b7255054d08243615c7c5bd14d52e9bca238553f937e1d1db09a517459abd51432aef275dfb208de083516b046119260da271535dc94cfc071e845952398548f5928f28b6b413dfbb540144f77b0514eb5d55f8a6daf60078bdf8f9c7be4e0f0888fb5180e50c25d91740e83bdbe2ef31da8fb2e7adc65b928b69681bacb81749"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7c, 0x3}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x6, 0x4, 0x1, [@generic={0xc, 0x21, "09ebfc3e22202221b484"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1e6}]}}, {{0x9, 0x5, 0x6, 0x2, 0x0, 0x1, 0x87, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xf6, 0x2, 0x4}}, {{0x9, 0x5, 0x80, 0x3, 0x0, 0x3, 0x9, 0x2, [@generic={0xd8, 0xa, "7c70c2bc4cf2c90600f7741ad941c8806774edfdf1de5c9187687eddd5efc19395bcbf2528f052cddc068201e9bacba4985aa52612134581f65d6631b6b17a057cf6164458ae48a9649ccd20d667c27e51b5042f35a7fdafc605e8975e75a5965b66a7f588851ce3a171d2ff6c6ab8f6052ac82833d9b36f87e94bab5bced2c962fe27d90d4d468cc4d2d8b4357f4b0cf0ba9021a50f5c03c0e475b78d2ab2206fe2e17cb47a8ce8047aec7f2e870ff4af83eff72d53b6884da6af75dd7fe0b73b79c35f1fc641dac038e84b67afc5d34f501e4f197b"}]}}]}}, {{0x9, 0x4, 0x0, 0x8, 0x0, 0x40, 0x58, 0x99, 0x0, [@generic={0x4f, 0x9, "71e6dd671a955d0457ad3191063ebf1e5e6efc9bd96d99f7407cb98598855a36354b97cdcd6f982413b9a31aa65c9619a7f874148dcc9e91013195691376c4d44513a9f302937a33069664b086"}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "5823cd624542"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xe, 0xad, 0x95, 0x2}, {0x6, 0x24, 0x1a, 0x17, 0x14}, [@mbim={0xc, 0x24, 0x1b, 0xfffd, 0x1000, 0xf0, 0x65, 0x200, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x1, 0x28, 0x4, 0x3, 0xfe}, @country_functional={0x8, 0x24, 0x7, 0xa, 0x2, [0x0]}]}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x7, 0x3, 0x2, 0x10, 0x6}, 0x106, &(0x7f0000000380)={0x5, 0xf, 0x106, 0x2, [@generic={0x45, 0x10, 0x0, "747b784be95fd984565200354fe317ddcbf7693d1c9ebba3ac5057698a57fb8f5fcf971508bbbd27128e160a11b51c8ee771420601a3da8f44e437af943328bfa03e"}, @generic={0xbc, 0x10, 0x2, "70b7fb57dee95e5f2203bac3471b30aa241fe0ec4450605afd5b8498bf135b1c2d61a99cd399fe651b114a0147cb10f9109382ed573bda7bc7551c31b5421b4c75916258c0bec25ccd9e394d33ab62beae24d6e326727c5c79faa79e6313a1174ff4d2a425a6fb4d884200c9a76c411c9e7585e162a9047e64288c31f6a359f17ca86e718370dea2849317e13142c5e781c2fcf3cef4e0d5dbf607464f285d13ec147be07934c563a5b354f5e65aefb0edd2ee1351f1dd0a58"}]}, 0x2, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40a}}]})
r0 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000580)={0x1ff, "67fb08f567547bf89283a97dce465eafd46b9683a3550e022fc3980ed81c430c", <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
syz_emit_ethernet(0x56, &(0x7f00000005c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@canfd={0xd, {{0x2, 0x1, 0x0, 0x1}, 0x39, 0x0, 0x0, 0x0, "db10259d20bedaa19464583eb86e8ca6cb4facf3c725b189c4f67551a3c9aba693adc4afb2b92168ed1d79bd00d631fcc60b2f1de68476454be34317a3e8d952"}}}}, &(0x7f0000000640)={0x1, 0x3, [0x2a7, 0x1a6, 0x8d3, 0x96b]})
ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000680)={0x50b, 0x6, 0x4, "cc82d5c6e07be15ffdd6aa0644386c9ca469fa8e8c8c708819c9f5675033a8f4", 0x59455247})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
r4 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000740)={{0x3, 0x6, 0x8, 0x7ff, '\x00', 0x1}, 0x1, 0x10, 0xb900000, r4, 0x4, 0x400, 'syz0\x00', &(0x7f0000000700)=['\x00', '\x00', '%((\x00', '\x00'], 0x7})
r5 = syz_open_dev$sg(&(0x7f0000000880), 0xdbf, 0x20a00)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000008c0)=<r6=>0x0)
ioctl$SG_BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000900)={'\x00', 0x5, 0x1, 0x7, 0x7ff, 0x9, r6})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts.
[   81.330359][ T5782] cgroup: Unknown subsys name 'net'
[   81.601389][ T5782] cgroup: Unknown subsys name 'cpuset'
[   81.646665][ T5782] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.624395][ T5782] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.971278][    T9] cfg80211: failed to load regulatory.db
[   87.302275][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.305633][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.316720][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.317916][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.319147][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.365864][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.386355][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.387824][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.389241][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.390087][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.515818][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.528218][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.534705][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.537430][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.538796][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.597677][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.605522][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.617230][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.630779][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.631870][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.633874][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.634319][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.638413][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.646128][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.678214][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.311692][ T5795] chnl_net:caif_netlink_parms(): no params data found
[   88.430812][ T5798] chnl_net:caif_netlink_parms(): no params data found
[   88.543544][ T5802] chnl_net:caif_netlink_parms(): no params data found
[   88.712877][ T5803] chnl_net:caif_netlink_parms(): no params data found
[   88.727130][ T5804] chnl_net:caif_netlink_parms(): no params data found
[   88.733441][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.734410][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.734752][ T5795] bridge_slave_0: entered allmulticast mode
[   88.738037][ T5795] bridge_slave_0: entered promiscuous mode
[   88.790136][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.790242][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.790394][ T5795] bridge_slave_1: entered allmulticast mode
[   88.791964][ T5795] bridge_slave_1: entered promiscuous mode
[   88.870463][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.870566][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.870674][ T5798] bridge_slave_0: entered allmulticast mode
[   88.872205][ T5798] bridge_slave_0: entered promiscuous mode
[   88.944627][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.944752][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.944857][ T5798] bridge_slave_1: entered allmulticast mode
[   88.947567][ T5798] bridge_slave_1: entered promiscuous mode
[   88.983777][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.034941][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.035182][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.035304][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.035603][ T5802] bridge_slave_0: entered allmulticast mode
[   89.067786][ T5802] bridge_slave_0: entered promiscuous mode
[   89.112904][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.113034][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.113142][ T5802] bridge_slave_1: entered allmulticast mode
[   89.114786][ T5802] bridge_slave_1: entered promiscuous mode
[   89.122734][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.188378][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.218585][ T5795] team0: Port device team_slave_0 added
[   89.369208][ T5796] Bluetooth: hci0: command tx timeout
[   89.446123][ T5796] Bluetooth: hci1: command tx timeout
[   89.447790][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.447867][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.447983][ T5803] bridge_slave_0: entered allmulticast mode
[   89.449509][ T5803] bridge_slave_0: entered promiscuous mode
[   89.451860][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.451991][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.452162][ T5804] bridge_slave_0: entered allmulticast mode
[   89.454212][ T5804] bridge_slave_0: entered promiscuous mode
[   89.459401][ T5795] team0: Port device team_slave_1 added
[   89.463309][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.487900][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.488042][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.488549][ T5803] bridge_slave_1: entered allmulticast mode
[   89.491203][ T5803] bridge_slave_1: entered promiscuous mode
[   89.514201][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.514365][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.514537][ T5804] bridge_slave_1: entered allmulticast mode
[   89.518165][ T5804] bridge_slave_1: entered promiscuous mode
[   89.523556][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.538040][ T5798] team0: Port device team_slave_0 added
[   89.606152][ T5796] Bluetooth: hci2: command tx timeout
[   89.625475][ T5798] team0: Port device team_slave_1 added
[   89.642415][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.642428][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.642443][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.686210][ T5796] Bluetooth: hci3: command tx timeout
[   89.715001][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.726084][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.726100][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.726123][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.731206][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.733888][ T5802] team0: Port device team_slave_0 added
[   89.762603][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.766090][ T5796] Bluetooth: hci4: command tx timeout
[   89.782089][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.785168][ T5802] team0: Port device team_slave_1 added
[   89.787292][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.787307][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.787330][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.863049][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.863062][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.863077][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.952350][ T5803] team0: Port device team_slave_0 added
[   89.954469][ T5804] team0: Port device team_slave_0 added
[   89.955348][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.955361][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.955387][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.984872][ T5803] team0: Port device team_slave_1 added
[   89.989415][ T5804] team0: Port device team_slave_1 added
[   89.990537][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.990549][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.990572][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.004223][ T5795] hsr_slave_0: entered promiscuous mode
[   90.005756][ T5795] hsr_slave_1: entered promiscuous mode
[   90.122724][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.122739][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.122753][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.142646][ T5798] hsr_slave_0: entered promiscuous mode
[   90.143447][ T5798] hsr_slave_1: entered promiscuous mode
[   90.144167][ T5798] debugfs: 'hsr0' already exists in 'hsr'
[   90.144235][ T5798] Cannot create hsr debugfs directory
[   90.181979][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.181995][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.182017][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.185270][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.185282][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.185303][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.307411][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.307426][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.307441][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.908048][ T5802] hsr_slave_0: entered promiscuous mode
[   90.908878][ T5802] hsr_slave_1: entered promiscuous mode
[   90.909447][ T5802] debugfs: 'hsr0' already exists in 'hsr'
[   90.909466][ T5802] Cannot create hsr debugfs directory
[   91.064766][ T5803] hsr_slave_0: entered promiscuous mode
[   91.065589][ T5803] hsr_slave_1: entered promiscuous mode
[   91.077577][ T5803] debugfs: 'hsr0' already exists in 'hsr'
[   91.077597][ T5803] Cannot create hsr debugfs directory
[   91.110074][ T5804] hsr_slave_0: entered promiscuous mode
[   91.110968][ T5804] hsr_slave_1: entered promiscuous mode
[   91.111539][ T5804] debugfs: 'hsr0' already exists in 'hsr'
[   91.111560][ T5804] Cannot create hsr debugfs directory
[   91.446194][ T5796] Bluetooth: hci0: command tx timeout
[   91.526076][ T5796] Bluetooth: hci1: command tx timeout
[   91.686104][ T5796] Bluetooth: hci2: command tx timeout
[   91.766944][ T5796] Bluetooth: hci3: command tx timeout
[   91.782859][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.805860][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.841377][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.846148][ T5796] Bluetooth: hci4: command tx timeout
[   91.891169][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   92.001766][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   92.032223][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   92.055652][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   92.105159][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   92.212156][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.243473][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.296562][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.338662][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.450680][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.485586][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.515636][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.564819][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   92.675625][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.694237][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   92.723794][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   92.775670][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   92.804254][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.877787][ T5795] 8021q: adding VLAN 0 to HW filter on device team0
[   92.914775][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.915626][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.958380][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.958547][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.964453][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.061602][ T5798] 8021q: adding VLAN 0 to HW filter on device team0
[   93.089959][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.110283][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.110415][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.144024][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.144144][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.204958][ T5802] 8021q: adding VLAN 0 to HW filter on device team0
[   93.210006][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.262857][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.263047][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.307261][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.307479][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.363279][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[   93.391305][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.430835][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.430955][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.502703][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.503625][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.526795][ T5796] Bluetooth: hci0: command tx timeout
[   93.562878][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[   93.607522][ T5796] Bluetooth: hci1: command tx timeout
[   93.610585][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.610809][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.657233][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.657346][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.756941][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.766191][ T5796] Bluetooth: hci2: command tx timeout
[   93.847075][ T5796] Bluetooth: hci3: command tx timeout
[   93.926695][ T5796] Bluetooth: hci4: command tx timeout
[   94.050741][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.144619][ T5795] veth0_vlan: entered promiscuous mode
[   94.193471][ T5795] veth1_vlan: entered promiscuous mode
[   94.232658][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.401315][ T5798] veth0_vlan: entered promiscuous mode
[   94.448495][ T5795] veth0_macvtap: entered promiscuous mode
[   94.457557][ T5798] veth1_vlan: entered promiscuous mode
[   94.499241][ T5795] veth1_macvtap: entered promiscuous mode
[   94.528969][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.534916][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.604925][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.640954][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.701451][ T3524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.711520][ T5798] veth0_macvtap: entered promiscuous mode
[   94.716865][ T3524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.723105][ T3524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.731533][ T3524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.740589][ T5798] veth1_macvtap: entered promiscuous mode
[   94.900338][ T5803] veth0_vlan: entered promiscuous mode
[   94.939927][ T5804] veth0_vlan: entered promiscuous mode
[   94.958466][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.005785][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.037259][ T5803] veth1_vlan: entered promiscuous mode
[   95.060628][ T5804] veth1_vlan: entered promiscuous mode
[   95.081752][   T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.085834][  T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.085856][  T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.092942][   T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.132767][   T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.158565][   T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.255082][ T5802] veth0_vlan: entered promiscuous mode
[   95.267581][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.267605][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.406590][ T5802] veth1_vlan: entered promiscuous mode
[   95.434999][ T5804] veth0_macvtap: entered promiscuous mode
[   95.443029][ T5803] veth0_macvtap: entered promiscuous mode
[   95.499618][ T5804] veth1_macvtap: entered promiscuous mode
[   95.502679][ T5803] veth1_macvtap: entered promiscuous mode
[   95.525585][  T813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.525608][  T813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.607651][ T5796] Bluetooth: hci0: command tx timeout
[   95.655594][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'.
[   95.686398][ T5796] Bluetooth: hci1: command tx timeout
[   95.689267][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.689289][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.695738][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.745479][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.784902][ T5802] veth0_macvtap: entered promiscuous mode
[   95.795669][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.829488][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.835640][ T5802] veth1_macvtap: entered promiscuous mode
[   95.844102][   T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.845582][   T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.847256][ T5796] Bluetooth: hci2: command tx timeout
[   95.852954][   T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.856337][   T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.866454][   T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.871062][   T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.880232][   T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.881730][   T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.933553][ T5796] Bluetooth: hci3: command tx timeout
[   96.003913][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.006979][ T5796] Bluetooth: hci4: command tx timeout
[   96.205807][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.372801][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.385084][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.433335][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.434140][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.515482][ T1306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.515506][ T1306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.694006][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.694029][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.897400][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.897420][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.945314][ T5925] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   97.066095][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.066118][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.346097][ T5922] Zero length message leads to an empty skb
[   97.469508][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.469536][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.762496][ T5930] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1'.
[   97.764991][ T5930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   97.814962][ T1306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.814986][ T1306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.190946][ T5943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'.
[   98.286337][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.346015][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.356006][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.356906][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.356974][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.358028][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.358066][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.359098][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.359130][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.359934][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   98.574968][   T37] audit: type=1326 audit(1771230345.084:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.575086][   T37] audit: type=1326 audit(1771230345.084:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.605324][   T37] audit: type=1326 audit(1771230345.114:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.689739][   T37] audit: type=1326 audit(1771230345.194:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.689783][   T37] audit: type=1326 audit(1771230345.204:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.696949][   T37] audit: type=1326 audit(1771230345.204:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.696996][   T37] audit: type=1326 audit(1771230345.204:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.697036][   T37] audit: type=1326 audit(1771230345.204:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.697073][   T37] audit: type=1326 audit(1771230345.204:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.697110][   T37] audit: type=1326 audit(1771230345.204:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5947 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb19e14bf79 code=0x7ffc0000
[   98.899103][  T921] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   98.986222][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   99.096162][  T921] usb 3-1: Using ep0 maxpacket: 8
[   99.142779][  T921] usb 3-1: config 0 has an invalid interface number: 179 but max is 1
[   99.142814][  T921] usb 3-1: config 0 has an invalid interface number: 106 but max is 1
[   99.142834][  T921] usb 3-1: config 0 has no interface number 0
[   99.142850][  T921] usb 3-1: config 0 has no interface number 1
[   99.142917][  T921] usb 3-1: config 0 interface 179 altsetting 205 bulk endpoint 0x8 has invalid maxpacket 64
[   99.142944][  T921] usb 3-1: config 0 interface 179 altsetting 205 has an endpoint descriptor with address 0x1B, changing to 0xB
[   99.142970][  T921] usb 3-1: config 0 interface 179 altsetting 205 endpoint 0xB has invalid maxpacket 1024, setting to 64
[   99.142999][  T921] usb 3-1: config 0 interface 179 altsetting 205 has a duplicate endpoint with address 0xB, skipping
[   99.143022][  T921] usb 3-1: config 0 interface 179 altsetting 205 has an invalid descriptor for endpoint zero, skipping
[   99.143044][  T921] usb 3-1: config 0 interface 179 has no altsetting 0
[   99.143063][  T921] usb 3-1: config 0 interface 106 has no altsetting 0
[   99.156091][    T9] usb 1-1: Using ep0 maxpacket: 8
[   99.158037][  T921] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.96
[   99.158064][  T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.158081][  T921] usb 3-1: Product: �
[   99.158094][  T921] usb 3-1: Manufacturer: à ¾
[   99.158107][  T921] usb 3-1: SerialNumber: 쳡넭ퟙ勷ẅⰮﲹἈ᪷橎茮�么�숖㌇ꡀ챢ሞ�ꢿ廖㭫꘧⿒潰㣚��볬ꔣ䚲晶�顲枽�퇧䴲膙察繫̾ᩩ塚螦꧶礞��䈵俠濧瀢Ⅎ�緽浈呼땭簒⯆ଛ栕棰�䔔擂�꒻扥암ʊ�膥퀔郆羬�복ⱴ��징�粽柧㰥㡑ࡹ郅繛옆엖⽖ࡀ䇹�紀糂䚿
[   99.191554][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.191599][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   99.239729][    T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   99.239757][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.239775][    T9] usb 1-1: Product: syz
[   99.239788][    T9] usb 1-1: Manufacturer: syz
[   99.239800][    T9] usb 1-1: SerialNumber: syz
[   99.329966][    T9] usb 1-1: config 0 descriptor??
[   99.349338][  T921] usb 3-1: config 0 descriptor??
[   99.398777][ T5940] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   99.508344][    T9] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  100.779862][   T60] Bluetooth: hci4: command 0x0405 tx timeout
[  101.025021][  T921] usb 3-1: USB disconnect, device number 2
[  101.772872][ T5964] netlink: 592 bytes leftover after parsing attributes in process `syz.3.19'.
[  101.772920][ T5964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.843957][    T9] usb 1-1: USB disconnect, device number 2
[  101.846207][  T921] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  102.040072][  T921] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  102.040124][  T921] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.040146][  T921] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  102.040181][  T921] usb 5-1: config 0 interface 0 has no altsetting 0
[  102.040215][  T921] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  102.040248][  T921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.067818][  T921] usb 5-1: config 0 descriptor??
[  102.363234][ T5961] netlink: 'syz.4.18': attribute type 8 has an invalid length.
[  102.363258][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'.
[  103.392651][ T5967] Invalid source name
[  103.535296][ T5961] bond0: entered promiscuous mode
[  103.535321][ T5961] bond_slave_0: entered promiscuous mode
[  103.550610][ T5961] bond_slave_1: entered promiscuous mode
[  103.591514][ T5961] gretap0: entered promiscuous mode
[  103.612566][ T5961] hsr1: entered promiscuous mode
[  103.977529][  T921] usbhid 5-1:0.0: can't add hid device: -71
[  103.977664][  T921] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  104.046782][  T921] usb 5-1: USB disconnect, device number 2
[  104.656804][ T5984] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  105.086060][  T921] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  105.196189][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  105.242516][  T921] usb 3-1: unable to get BOS descriptor or descriptor too short
[  105.243188][  T921] usb 3-1: not running at top speed; connect to a high speed hub
[  105.249488][  T921] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  105.249515][  T921] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  105.249532][  T921] usb 3-1: config 4 has no interface number 0
[  105.259267][  T921] usb 3-1: string descriptor 0 read error: -22
[  105.259414][  T921] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  105.259435][  T921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.332244][  T921] uvcvideo 3-1:4.147: Found UVC 0.00 device <unnamed> (04f2:b746)
[  105.332353][  T921] uvcvideo 3-1:4.147: No streaming interface found for terminal 32774.
[  105.366054][    T9] usb 5-1: Using ep0 maxpacket: 16
[  105.389909][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  105.410608][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  105.410639][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.410660][    T9] usb 5-1: Product: syz
[  105.410674][    T9] usb 5-1: Manufacturer: syz
[  105.410688][    T9] usb 5-1: SerialNumber: syz
[  105.525788][    T9] usb 5-1: config 0 descriptor??
[  105.555148][    T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  105.555182][    T9] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  105.635414][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'.
[  105.651541][ T5984] bridge0: port 3(vlan2) entered blocking state
[  105.651657][ T5984] bridge0: port 3(vlan2) entered disabled state
[  105.651868][ T5984] vlan2: entered allmulticast mode
[  105.651885][ T5984] gretap0: entered allmulticast mode
[  105.654692][ T5984] vlan2: entered promiscuous mode
[  105.654710][ T5984] gretap0: entered promiscuous mode
[  105.656316][ T5984] bridge0: port 3(vlan2) entered blocking state
[  105.656499][ T5984] bridge0: port 3(vlan2) entered forwarding state
[  105.905267][ T5950] usb 3-1: USB disconnect, device number 3
[  106.197527][    T9] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  106.469760][ T5998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.505497][ T5998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.137349][    T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  108.137385][    T9] em28xx 5-1:0.0: board has no eeprom
[  108.256073][    T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  108.256094][    T9] em28xx 5-1:0.0: dvb set to bulk mode.
[  108.257406][ T5950] em28xx 5-1:0.0: Binding DVB extension
[  108.357873][    T9] usb 5-1: USB disconnect, device number 3
[  108.380345][    T9] em28xx 5-1:0.0: Disconnecting em28xx
[  108.799811][ T6007] m1Ie5n: entered promiscuous mode
[  108.976504][ T5950] em28xx 5-1:0.0: Registering input extension
[  108.978457][    T9] em28xx 5-1:0.0: Closing input extension
[  109.208793][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.4.30'.
[  110.022015][    T9] em28xx 5-1:0.0: Freeing device
[  110.280388][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32'.
[  110.280476][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.32'.
[  110.311623][ T6029] netlink: 68 bytes leftover after parsing attributes in process `syz.0.34'.
[  112.893684][ T6059] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  112.975330][ T6062] netlink: 5 bytes leftover after parsing attributes in process `syz.4.41'.
[  113.009602][ T6062] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  113.054293][ T6062] 0ªî{X¹¦: entered allmulticast mode
[  113.054828][ T6062] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  113.385563][ T6073] syz.1.45: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  113.385825][ T6073] CPU: 0 UID: 0 PID: 6073 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  113.385850][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  113.385862][ T6073] Call Trace:
[  113.385871][ T6073]  <TASK>
[  113.385880][ T6073]  dump_stack_lvl+0xe8/0x150
[  113.385924][ T6073]  warn_alloc+0x263/0x3e0
[  113.385958][ T6073]  ? __pfx_warn_alloc+0x10/0x10
[  113.385977][ T6073]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  113.386012][ T6073]  ? kasan_save_track+0x4f/0x80
[  113.386029][ T6073]  ? kasan_save_track+0x3e/0x80
[  113.386045][ T6073]  ? __kasan_kmalloc+0x93/0xb0
[  113.386061][ T6073]  ? xskq_create+0x56/0x170
[  113.386082][ T6073]  ? xsk_init_queue+0xad/0x110
[  113.386100][ T6073]  ? xsk_setsockopt+0x54c/0x990
[  113.386119][ T6073]  ? do_sock_setsockopt+0x17c/0x1b0
[  113.386152][ T6073]  __vmalloc_node_range_noprof+0x132/0x1730
[  113.386211][ T6073]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  113.386244][ T6073]  ? __kasan_kmalloc+0x93/0xb0
[  113.386271][ T6073]  vmalloc_user_noprof+0xad/0xe0
[  113.386294][ T6073]  ? xskq_create+0xbf/0x170
[  113.386320][ T6073]  xskq_create+0xbf/0x170
[  113.386347][ T6073]  xsk_init_queue+0xad/0x110
[  113.386385][ T6073]  xsk_setsockopt+0x54c/0x990
[  113.386411][ T6073]  ? __pfx_xsk_setsockopt+0x10/0x10
[  113.386449][ T6073]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  113.386473][ T6073]  ? __pfx_xsk_setsockopt+0x10/0x10
[  113.386499][ T6073]  do_sock_setsockopt+0x17c/0x1b0
[  113.386537][ T6073]  __x64_sys_setsockopt+0x143/0x1b0
[  113.386577][ T6073]  do_syscall_64+0x14d/0xf80
[  113.386605][ T6073]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.386625][ T6073]  ? trace_irq_disable+0x37/0x100
[  113.386643][ T6073]  ? clear_bhb_loop+0x40/0x90
[  113.386669][ T6073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.386690][ T6073] RIP: 0033:0x7fa6006fbf79
[  113.386710][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.386727][ T6073] RSP: 002b:00007fa5fe956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  113.386750][ T6073] RAX: ffffffffffffffda RBX: 00007fa600975fa0 RCX: 00007fa6006fbf79
[  113.386766][ T6073] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  113.386778][ T6073] RBP: 00007fa6007927e0 R08: 0000000000000004 R09: 0000000000000000
[  113.386791][ T6073] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.386804][ T6073] R13: 00007fa600976038 R14: 00007fa600975fa0 R15: 00007ffd2267fe88
[  113.386839][ T6073]  </TASK>
[  113.416251][ T5859] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  113.416605][ T6073] Mem-Info:
[  113.416616][ T6073] active_anon:254 inactive_anon:8253 isolated_anon:0
[  113.416616][ T6073]  active_file:13160 inactive_file:40989 isolated_file:0
[  113.416616][ T6073]  unevictable:768 dirty:126 writeback:0
[  113.416616][ T6073]  slab_reclaimable:11505 slab_unreclaimable:100601
[  113.416616][ T6073]  mapped:31494 shmem:3107 pagetables:1212
[  113.416616][ T6073]  sec_pagetables:0 bounce:0
[  113.416616][ T6073]  kernel_misc_reclaimable:0
[  113.416616][ T6073]  free:1305235 free_pcp:19620 free_cma:0
[  113.416669][ T6073] Node 0 active_anon:1016kB inactive_anon:33012kB active_file:52440kB inactive_file:163956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125976kB dirty:504kB writeback:0kB shmem:10892kB kernel_stack:12868kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  113.416771][ T6073] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  113.416813][ T6073] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  113.416869][ T6073] lowmem_reserve[]: 0 2507 2508 2508 2508
[  113.416958][ T6073] Node 0 DMA32 free:1268872kB boost:0kB min:3936kB low:6476kB high:9016kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1016kB inactive_anon:33012kB active_file:52440kB inactive_file:163956kB unevictable:1536kB writepending:504kB zspages:0kB present:3129332kB managed:2567896kB mlocked:0kB bounce:0kB free_pcp:77972kB local_pcp:15076kB free_cma:0kB
[  113.417014][ T6073] lowmem_reserve[]: 0 0 0 0 0
[  113.417099][ T6073] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:720kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  113.417157][ T6073] lowmem_reserve[]: 0 0 0 0 0
[  113.417242][ T6073] Node 1 Normal free:3936708kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB
[  113.417297][ T6073] lowmem_reserve[]: 0 0 0 0 0
[  113.417328][ T6073] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  113.419087][ T6073] Node 0 DMA32: 1889*4kB (UME) 770*8kB (UME) 208*16kB (UME) 104*32kB (UME) 72*64kB (ME) 61*128kB (UME) 28*256kB (UM) 8*512kB (ME) 4*1024kB (ME) 4*2048kB (UM) 296*4096kB (UM) = 1268756kB
[  113.419436][ T6073] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  113.419583][ T6073] Node 1 Normal: 3*4kB (UME) 3*8kB (UME) 6*16kB (UME) 4*32kB (ME) 5*64kB (UME) 3*128kB (UM) 6*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 959*4096kB (M) = 3936708kB
[  113.426079][ T6073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  113.426098][ T6073] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  113.426113][ T6073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  113.426137][ T6073] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  113.426152][ T6073] 57252 total pagecache pages
[  113.426159][ T6073] 0 pages in swap cache
[  113.426165][ T6073] Free swap  = 124996kB
[  113.426172][ T6073] Total swap = 124996kB
[  113.426180][ T6073] 2097051 pages RAM
[  113.426187][ T6073] 0 pages HighMem/MovableOnly
[  113.426193][ T6073] 423282 pages reserved
[  113.426200][ T6073] 0 pages cma reserved
[  113.605776][ T5859] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  113.605806][ T5859] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.605823][ T5859] usb 4-1: config 0 has no interface number 0
[  113.616402][ T5859] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  113.616433][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.616453][ T5859] usb 4-1: Product: syz
[  113.616467][ T5859] usb 4-1: Manufacturer: syz
[  113.616481][ T5859] usb 4-1: SerialNumber: syz
[  113.646379][ T5859] usb 4-1: config 0 descriptor??
[  113.658057][ T5859] ims_pcu 4-1:0.41: Missing CDC union descriptor
[  113.658119][ T5859] ims_pcu 4-1:0.41: probe with driver ims_pcu failed with error -22
[  114.176482][ T6079] binder: 6078:6079 ioctl c0306201 2000000003c0 returned -14
[  115.637205][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  115.795364][  T921] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  115.795576][    T9] usb 1-1: Using ep0 maxpacket: 16
[  115.834757][    T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  115.834791][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.834810][    T9] usb 1-1: Product: syz
[  115.834925][    T9] usb 1-1: Manufacturer: syz
[  115.834940][    T9] usb 1-1: SerialNumber: syz
[  115.873673][    T9] usb 1-1: config 0 descriptor??
[  115.899484][    T9] visor 1-1:0.0: Sony Clie 3.5 converter detected
[  116.008829][  T921] usb 2-1: config 0 has an invalid interface number: 11 but max is 0
[  116.008860][  T921] usb 2-1: config 0 has no interface number 0
[  116.046303][  T921] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  116.047832][  T921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.047885][  T921] usb 2-1: Product: syz
[  116.047990][  T921] usb 2-1: Manufacturer: syz
[  116.048874][  T921] usb 2-1: SerialNumber: syz
[  116.123623][  T921] usb 2-1: config 0 descriptor??
[  116.209305][  T921] usb 2-1: Expected 3 endpoints, found: 0
[  116.399421][  T921] usb 2-1: USB disconnect, device number 2
[  116.434332][    T9] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  116.483204][ T5951] usb 4-1: USB disconnect, device number 2
[  117.666375][ T5881] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  118.984571][ T5881] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  118.984624][ T5881] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.984648][ T5881] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  118.984672][ T5881] usb 5-1: config 0 interface 0 has no altsetting 0
[  118.984706][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  118.984729][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.081930][ T5881] usb 5-1: config 0 descriptor??
[  119.346282][ T5951] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  120.436045][ T5951] usb 2-1: Using ep0 maxpacket: 32
[  120.438558][ T5951] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  120.438588][ T5951] usb 2-1: config 2 has no interface number 0
[  120.438641][ T5951] usb 2-1: config 2 interface 88 has no altsetting 0
[  120.444242][ T5951] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  120.444271][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.444289][ T5951] usb 2-1: Product: syz
[  120.444302][ T5951] usb 2-1: Manufacturer: syz
[  120.444314][ T5951] usb 2-1: SerialNumber: syz
[  120.740589][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.775741][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.012290][ T5881] usbhid 5-1:0.0: can't add hid device: -71
[  121.012432][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  121.077896][ T5881] usb 5-1: USB disconnect, device number 4
[  121.299435][ T6132] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.456105][ T5951] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  121.456420][ T5951] asix 2-1:2.88: probe with driver asix failed with error -71
[  121.486161][ T5951] usb 2-1: USB disconnect, device number 3
[  121.646229][  T807] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  121.804377][  T807] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  121.804408][  T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.804426][  T807] usb 5-1: config 0 has no interface number 0
[  121.839720][  T807] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  121.839752][  T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.839772][  T807] usb 5-1: Product: syz
[  121.839787][  T807] usb 5-1: Manufacturer: syz
[  121.839802][  T807] usb 5-1: SerialNumber: syz
[  121.898292][  T807] usb 5-1: config 0 descriptor??
[  121.923420][  T807] cypress_m8 5-1:0.35: Nokia CA-42 V2 Adapter converter detected
[  121.925733][  T807] nokiaca42v2 ttyUSB1: required endpoint is missing
[  122.036244][ T6140] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  122.058063][ T6140] FAULT_INJECTION: forcing a failure.
[  122.058063][ T6140] name failslab, interval 1, probability 0, space 0, times 1
[  122.058099][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  122.058121][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  122.058133][ T6140] Call Trace:
[  122.058141][ T6140]  <TASK>
[  122.058150][ T6140]  dump_stack_lvl+0xe8/0x150
[  122.058186][ T6140]  should_fail_ex+0x46b/0x600
[  122.058218][ T6140]  should_failslab+0xa8/0x100
[  122.058243][ T6140]  __kmalloc_noprof+0xdf/0x7b0
[  122.058263][ T6140]  ? kfree+0x4d/0x690
[  122.058280][ T6140]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  122.058319][ T6140]  tomoyo_realpath_from_path+0xe3/0x5d0
[  122.058343][ T6140]  ? tomoyo_domain+0xd8/0x130
[  122.058373][ T6140]  ? tomoyo_path_number_perm+0x219/0x630
[  122.058404][ T6140]  tomoyo_path_number_perm+0x246/0x630
[  122.058438][ T6140]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  122.058467][ T6140]  ? __lock_acquire+0x6b5/0x2cf0
[  122.058498][ T6140]  ? do_raw_spin_lock+0x12b/0x2f0
[  122.058559][ T6140]  ? __fget_files+0x2a/0x420
[  122.058588][ T6140]  ? __fget_files+0x2a/0x420
[  122.058613][ T6140]  ? __fget_files+0x3a6/0x420
[  122.058638][ T6140]  ? __fget_files+0x2a/0x420
[  122.058669][ T6140]  security_file_ioctl+0xc3/0x2a0
[  122.058701][ T6140]  __se_sys_ioctl+0x47/0x170
[  122.058726][ T6140]  do_syscall_64+0x14d/0xf80
[  122.058752][ T6140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.058770][ T6140]  ? trace_irq_disable+0x37/0x100
[  122.058787][ T6140]  ? clear_bhb_loop+0x40/0x90
[  122.058812][ T6140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.058832][ T6140] RIP: 0033:0x7f540804bf79
[  122.058850][ T6140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.058865][ T6140] RSP: 002b:00007f540629e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  122.058888][ T6140] RAX: ffffffffffffffda RBX: 00007f54082c5fa0 RCX: 00007f540804bf79
[  122.058903][ T6140] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000004
[  122.058916][ T6140] RBP: 00007f540629e090 R08: 0000000000000000 R09: 0000000000000000
[  122.058929][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.058941][ T6140] R13: 00007f54082c6038 R14: 00007f54082c5fa0 R15: 00007ffeb8876948
[  122.058974][ T6140]  </TASK>
[  122.058981][ T6140] ERROR: Out of memory at tomoyo_realpath_from_path.
[  122.116740][ T5951] usb 5-1: USB disconnect, device number 5
[  122.120242][ T5951] cypress_m8 5-1:0.35: device disconnected
[  123.015637][ T6155] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET)
[  125.108488][ T6164] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  125.112205][ T6164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.112540][ T6164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.019997][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  129.116074][ T5859] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  129.186092][    T9] usb 4-1: Using ep0 maxpacket: 32
[  129.203468][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024
[  129.203507][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  129.229595][    T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  129.229624][    T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  129.229643][    T9] usb 4-1: Product: syz
[  129.229655][    T9] usb 4-1: Manufacturer: syz
[  129.229668][    T9] usb 4-1: SerialNumber: syz
[  129.259186][    T9] usb 4-1: config 0 descriptor??
[  129.265010][ T6176] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  129.281913][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[  129.281953][    T9] hub 4-1:0.0: probe with driver hub failed with error -5
[  129.296211][ T5951] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  129.307207][ T5859] usb 2-1: Using ep0 maxpacket: 16
[  129.312244][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  129.321781][ T5859] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  129.321811][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.321831][ T5859] usb 2-1: Product: syz
[  129.321845][ T5859] usb 2-1: Manufacturer: syz
[  129.321858][ T5859] usb 2-1: SerialNumber: syz
[  129.395125][ T5859] usb 2-1: config 0 descriptor??
[  129.421067][ T5859] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  129.421099][ T5859] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  129.451993][ T5951] usb 3-1: Using ep0 maxpacket: 32
[  129.455681][ T5951] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  129.455709][ T5951] usb 3-1: config 4 has no interface number 0
[  129.455757][ T5951] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.455783][ T5951] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.456209][ T5951] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  129.456236][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.554024][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'.
[  129.559578][ T5951] hub 3-1:4.128: USB hub found
[  129.699928][    T9] usb 4-1: USB disconnect, device number 3
[  129.746113][ T5951] hub 3-1:4.128: 2 ports detected
[  129.746192][ T5951] hub 3-1:4.128: Using single TT (err -22)
[  130.084676][ T5859] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  130.126313][ T5951] hub 3-1:4.128: hub_hub_status failed (err = -71)
[  130.126344][ T5951] hub 3-1:4.128: config failed, can't get hub status (err -71)
[  130.272773][ T5951] usb 3-1: USB disconnect, device number 4
[  130.424523][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.485728][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.777620][ T5859] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  130.777655][ T5859] em28xx 2-1:0.0: board has no eeprom
[  130.856145][ T5859] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  130.856177][ T5859] em28xx 2-1:0.0: dvb set to bulk mode.
[  130.857495][  T807] em28xx 2-1:0.0: Binding DVB extension
[  130.944358][ T5859] usb 2-1: USB disconnect, device number 4
[  130.985506][ T6197] tipc: Started in network mode
[  130.985569][ T6197] tipc: Node identity , cluster identity 4711
[  130.985684][ T6197] tipc: Failed to set node id, please configure manually
[  130.985842][ T6197] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  131.042434][ T5859] em28xx 2-1:0.0: Disconnecting em28xx
[  131.703250][  T807] em28xx 2-1:0.0: Registering input extension
[  131.703424][ T5859] em28xx 2-1:0.0: Closing input extension
[  132.482569][ T6205] netlink: 'syz.1.84': attribute type 6 has an invalid length.
[  132.544012][ T5859] em28xx 2-1:0.0: Freeing device
[  132.579555][  T807] usb 1-1: USB disconnect, device number 3
[  132.603539][  T807] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  132.604242][  T807] visor 1-1:0.0: device disconnected
[  133.060726][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  133.060829][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  133.646292][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  134.927618][    T9] usb 4-1: Using ep0 maxpacket: 16
[  135.336478][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.336497][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.384850][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  135.384871][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.384883][    T9] usb 4-1: Product: syz
[  135.384891][    T9] usb 4-1: Manufacturer: syz
[  135.384899][    T9] usb 4-1: SerialNumber: syz
[  135.796240][ T5881] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  135.934088][    T9] usb 4-1: 0:2 : does not exist
[  135.960285][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  135.976104][ T5881] usb 3-1: Using ep0 maxpacket: 16
[  135.978125][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  135.982096][ T5881] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  135.982128][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.982149][ T5881] usb 3-1: Product: syz
[  135.982163][ T5881] usb 3-1: Manufacturer: syz
[  135.982177][ T5881] usb 3-1: SerialNumber: syz
[  136.034723][ T5881] usb 3-1: config 0 descriptor??
[  136.072958][ T5881] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  136.072983][ T5881] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  136.701542][ T5881] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  136.944613][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.948312][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.051490][    T9] usb 4-1: USB disconnect, device number 4
[  137.322900][ T5881] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  137.322936][ T5881] em28xx 3-1:0.0: board has no eeprom
[  137.446115][ T5881] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  137.446145][ T5881] em28xx 3-1:0.0: dvb set to bulk mode.
[  137.446530][ T5880] em28xx 3-1:0.0: Binding DVB extension
[  137.564367][ T5881] usb 3-1: USB disconnect, device number 5
[  137.592019][ T5881] em28xx 3-1:0.0: Disconnecting em28xx
[  137.950360][ T5880] em28xx 3-1:0.0: Registering input extension
[  137.951844][ T5881] em28xx 3-1:0.0: Closing input extension
[  138.206588][ T5881] em28xx 3-1:0.0: Freeing device
[  139.736281][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.985741][ T6262] bond1: invalid ARP target 0.0.0.0 specified for addition
[  139.985773][ T6262] bond1: option arp_ip_target: invalid value (0)
[  140.102059][ T6262] bond1 (unregistering): Released all slaves
[  140.451880][ T5881] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  140.616076][ T5881] usb 1-1: Using ep0 maxpacket: 16
[  140.620796][ T5881] usb 1-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30
[  140.620852][ T5881] usb 1-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  140.620880][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0
[  140.673911][ T5881] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  140.673933][ T5881] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  140.673948][ T5881] usb 1-1: Product: syz
[  140.673956][ T5881] usb 1-1: Manufacturer: syz
[  140.673964][ T5881] usb 1-1: SerialNumber: syz
[  140.712615][ T5881] usb 1-1: config 0 descriptor??
[  142.974073][ T5881] usb 1-1: selecting invalid altsetting 1
[  143.091949][ T5881] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  143.142780][ T5881] usb 1-1: USB disconnect, device number 4
[  143.201316][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  143.854701][ T6277] input: syz0 as /devices/virtual/input/input8
[  145.173908][ T6298] misc userio: Invalid payload size
[  145.226134][ T5880] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  145.232562][ T6299] misc userio: The device must be registered before sending interrupts
[  145.237708][ T6299] misc userio: The device must be registered before sending interrupts
[  145.406035][ T5880] usb 4-1: Using ep0 maxpacket: 16
[  145.440369][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  145.465381][ T5880] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  145.465402][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.465413][ T5880] usb 4-1: Product: syz
[  145.465422][ T5880] usb 4-1: Manufacturer: syz
[  145.465429][ T5880] usb 4-1: SerialNumber: syz
[  147.038609][ T5880] usb 4-1: config 0 descriptor??
[  147.100314][ T5880] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  147.100340][ T5880] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  147.472808][ T6308] capability: warning: `syz.4.115' uses deprecated v2 capabilities in a way that may be insecure
[  147.646878][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  147.762003][ T5880] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  147.796248][   T10] usb 1-1: Using ep0 maxpacket: 32
[  147.803853][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.803891][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  147.803930][   T10] usb 1-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  147.803956][   T10] usb 1-1: config 0 interface 0 has no altsetting 1
[  147.853356][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57
[  147.853383][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.853398][   T10] usb 1-1: Product: syz
[  147.853408][   T10] usb 1-1: Manufacturer: syz
[  147.853418][   T10] usb 1-1: SerialNumber: syz
[  147.926432][   T10] usb 1-1: config 0 descriptor??
[  147.993140][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  148.030525][ T6294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.050634][ T6294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.162234][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.189058][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.106217][ T5880] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  149.106253][ T5880] em28xx 4-1:0.0: board has no eeprom
[  149.196155][ T5880] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  149.196186][ T5880] em28xx 4-1:0.0: dvb set to bulk mode.
[  149.197889][   T36] em28xx 4-1:0.0: Binding DVB extension
[  149.261143][ T5880] usb 4-1: USB disconnect, device number 5
[  149.308210][ T5880] em28xx 4-1:0.0: Disconnecting em28xx
[  149.320184][   T10] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  149.412454][   T10] usb 1-1: USB disconnect, device number 5
[  149.485172][   T36] em28xx 4-1:0.0: Registering input extension
[  149.506001][ T5880] em28xx 4-1:0.0: Closing input extension
[  149.516125][  T921] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  149.537982][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.564508][ T5880] em28xx 4-1:0.0: Freeing device
[  149.683878][  T921] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  149.683910][  T921] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  149.683930][  T921] usb 5-1: config 220 has no interface number 2
[  149.684010][  T921] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  149.684039][  T921] usb 5-1: config 220 interface 0 has no altsetting 0
[  149.684058][  T921] usb 5-1: config 220 interface 76 has no altsetting 0
[  149.684076][  T921] usb 5-1: config 220 interface 1 has no altsetting 0
[  149.792138][  T921] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  149.792170][  T921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.792196][  T921] usb 5-1: Product: syz
[  149.792204][  T921] usb 5-1: Manufacturer: syz
[  149.792212][  T921] usb 5-1: SerialNumber: syz
[  150.160710][  T921] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  150.165854][  T921] uvcvideo 5-1:220.0: No valid video chain found.
[  150.169848][  T921] usb 5-1: selecting invalid altsetting 0
[  150.294612][  T921] usb 5-1: selecting invalid altsetting 0
[  150.294658][  T921] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  150.326447][ T5880] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  150.391995][  T921] usb 5-1: USB disconnect, device number 6
[  150.485665][ T5880] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  150.485699][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.549824][ T5880] usb 4-1: config 0 descriptor??
[  150.608835][ T5880] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  150.786893][ T5880] gp8psk: usb in 128 operation failed.
[  150.806034][ T5880] gp8psk: usb in 146 operation failed.
[  150.806054][ T5880] gp8psk: failed to get FW version
[  150.832900][ T5880] gp8psk: usb in 149 operation failed.
[  150.832917][ T5880] gp8psk: failed to get FPGA version
[  150.896089][  T921] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  150.931319][ T5951] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  151.054970][ T5880] gp8psk: usb in 138 operation failed.
[  151.054994][ T5880] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  151.060784][ T5880] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  151.073098][ T5880] usb 4-1: media controller created
[  151.106095][ T5951] usb 3-1: Using ep0 maxpacket: 16
[  151.145164][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  151.145701][  T921] usb 1-1: not running at top speed; connect to a high speed hub
[  151.173433][  T921] usb 1-1: config 8 has an invalid interface number: 243 but max is 1
[  151.173455][  T921] usb 1-1: config 8 has no interface number 1
[  151.173493][  T921] usb 1-1: config 8 interface 243 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  151.173509][  T921] usb 1-1: config 8 interface 243 altsetting 5 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  151.173770][  T921] usb 1-1: config 8 interface 243 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0
[  151.173785][  T921] usb 1-1: config 8 interface 243 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  151.173799][  T921] usb 1-1: config 8 interface 243 altsetting 5 has an invalid descriptor for endpoint zero, skipping
[  151.173811][  T921] usb 1-1: config 8 interface 243 has no altsetting 0
[  151.173821][  T921] usb 1-1: config 8 interface 0 has no altsetting 0
[  151.270083][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  151.270125][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  151.286980][  T921] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=88.f9
[  151.287248][  T921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.287271][  T921] usb 1-1: Product: syz
[  151.287285][  T921] usb 1-1: Manufacturer: Њ
[  151.287300][  T921] usb 1-1: SerialNumber: syz
[  151.360076][ T5951] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  151.360120][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.360141][ T5951] usb 3-1: Product: syz
[  151.360155][ T5951] usb 3-1: Manufacturer: syz
[  151.360169][ T5951] usb 3-1: SerialNumber: syz
[  151.493511][ T5880] gp8psk_fe: Frontend attached
[  151.493898][ T5880] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  151.495591][ T5880] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  151.582807][ T5951] usb 3-1: config 0 descriptor??
[  151.613536][ T6334] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  151.712458][ T5880] gp8psk: usb in 138 operation failed.
[  151.712479][ T5880] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  151.712491][ T5880] gp8psk: found Genpix USB device pID = 203 (hex)
[  151.766688][ T5880] usb 4-1: USB disconnect, device number 6
[  151.831225][ T5951] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  151.831264][ T5951] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  153.133468][  T921] usb 1-1: unsupported MDLM descriptors
[  153.366323][ T5880] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  153.426534][ T5951] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  153.426957][ T5951] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  153.427264][ T5951] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  153.427274][ T5951] em28xx 3-1:0.0: No AC97 audio processor
[  153.480659][  T921] usb 1-1: USB disconnect, device number 6
[  153.485846][ T5951] usb 3-1: USB disconnect, device number 6
[  153.531597][ T5951] em28xx 3-1:0.0: Disconnecting em28xx
[  153.580709][ T5951] em28xx 3-1:0.0: Freeing device
[  153.908779][ T6359] atomic_op ffff88803ed82a18 conn xmit_atomic 0000000000000000
[  154.026865][ T5880] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  154.046127][ T5951] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  154.193389][   T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  154.208331][ T5880] usb 5-1: Using ep0 maxpacket: 8
[  154.216102][ T5951] usb 3-1: Using ep0 maxpacket: 16
[  154.228368][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.228424][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  154.228453][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  154.228473][ T5951] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  154.228494][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  154.229114][ T5880] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  154.229140][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.229169][ T5880] usb 5-1: Product: syz
[  154.229183][ T5880] usb 5-1: Manufacturer: syz
[  154.229197][ T5880] usb 5-1: SerialNumber: syz
[  154.267673][ T5951] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  154.267702][ T5951] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  154.267720][ T5951] usb 3-1: Manufacturer: syz
[  154.351449][ T5951] usb 3-1: config 0 descriptor??
[  154.378983][ T5880] usb 5-1: config 0 descriptor??
[  154.409125][ T5880] gspca_main: se401-2.14.0 probing 047d:5003
[  154.413543][   T10] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  154.413572][   T10] usb 1-1: config 0 has no interface number 0
[  154.413681][   T10] usb 1-1: config 0 interface 128 has no altsetting 0
[  154.438048][   T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91
[  154.438077][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.438103][   T10] usb 1-1: Product: syz
[  154.438115][   T10] usb 1-1: Manufacturer: syz
[  154.438208][   T10] usb 1-1: SerialNumber: syz
[  154.550653][   T10] usb 1-1: config 0 descriptor??
[  154.621836][   T10] radio-si470x 1-1:0.128: could not find interrupt in endpoint
[  154.622341][   T10] radio-si470x 1-1:0.128: probe with driver radio-si470x failed with error -5
[  154.649293][   T10] usbhid 1-1:0.128: couldn't find an input interrupt endpoint
[  154.716097][ T5806] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  154.884362][   T10] usb 1-1: USB disconnect, device number 7
[  154.916051][ T5806] usb 2-1: Using ep0 maxpacket: 16
[  154.930648][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  154.940506][ T5806] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  154.940535][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.940552][ T5806] usb 2-1: Product: syz
[  154.940565][ T5806] usb 2-1: Manufacturer: syz
[  154.940577][ T5806] usb 2-1: SerialNumber: syz
[  154.952426][ T5880] gspca_se401: Wrong descriptor type
[  155.149524][ T5806] usb 2-1: config 0 descriptor??
[  155.192035][ T5806] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  155.192060][ T5806] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  155.289096][ T5951] rc_core: IR keymap rc-hauppauge not found
[  155.289122][ T5951] Registered IR keymap rc-empty
[  155.290367][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.306216][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.416961][ T5951] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  155.444139][ T6364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.445047][ T6364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.474019][ T5951] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10
[  155.715503][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.726403][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.825260][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.846821][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.871269][ T5806] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  155.874898][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.886117][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.908480][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.929120][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.946099][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  155.966108][ T5951] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  156.030803][ T5951] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  156.030831][ T5951] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[  156.157863][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.158458][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.231540][ T5951] usb 3-1: USB disconnect, device number 7
[  156.367013][ T5806] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  156.367046][ T5806] em28xx 2-1:0.0: board has no eeprom
[  156.506047][ T5806] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  156.506079][ T5806] em28xx 2-1:0.0: dvb set to bulk mode.
[  156.507101][   T10] em28xx 2-1:0.0: Binding DVB extension
[  156.593033][ T1887] usb 5-1: USB disconnect, device number 7
[  156.613012][ T5806] usb 2-1: USB disconnect, device number 5
[  156.697274][ T5806] em28xx 2-1:0.0: Disconnecting em28xx
[  156.967486][   T10] em28xx 2-1:0.0: Registering input extension
[  156.986101][ T5806] em28xx 2-1:0.0: Closing input extension
[  157.019254][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'.
[  157.106557][ T5806] em28xx 2-1:0.0: Freeing device
[  157.227433][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'.
[  160.573485][ T6402] netlink: 'syz.1.142': attribute type 21 has an invalid length.
[  160.580265][ T6402] netlink: 164 bytes leftover after parsing attributes in process `syz.1.142'.
[  162.426027][ T6418] misc userio: Invalid payload size
[  162.535892][ T6421] =======================================================
[  162.535892][ T6421] WARNING: The mand mount option has been deprecated and
[  162.535892][ T6421]          and is ignored by this kernel. Remove the mand
[  162.535892][ T6421]          option from the mount to silence this warning.
[  162.535892][ T6421] =======================================================
[  162.636100][   T10] psmouse serio2: Failed to reset mouse on : -5
[  162.736834][ T6427] IPv6: sit1: Disabled Multicast RS
[  162.738387][ T6427] sit1: entered allmulticast mode
[  164.856841][ T6449] netlink: 'syz.3.155': attribute type 22 has an invalid length.
[  164.963982][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'.
[  165.327633][ T6462] process 'syz.2.156' launched '/dev/fd/5' with NULL argv: empty string added
[  168.718848][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'.
[  171.298651][ T6499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.166'.
[  171.465407][ T6503] loop5: detected capacity change from 0 to 7
[  172.366133][   T10] misc userio: Buffer overflowed, userio client isn't keeping up
[  172.786049][ T5881] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  172.916305][ T5881] usb 4-1: device descriptor read/64, error -71
[  174.144833][ T5881] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  174.326151][ T5881] usb 4-1: device descriptor read/64, error -71
[  174.362340][   T10] input: PS/2 Generic Mouse as /devices/serio2/input/input12
[  174.438929][ T5881] usb usb4-port1: attempt power cycle
[  174.549043][    C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 1
[  174.549162][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  174.596133][   T10] psmouse serio2: Failed to enable mouse on 
[  174.946106][ T5881] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  174.977636][ T5881] usb 4-1: device descriptor read/8, error -71
[  175.101979][ T6527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.172'.
[  176.413430][ T5881] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  176.490232][ T5881] usb 4-1: device descriptor read/8, error -71
[  176.593799][ T6540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.178'.
[  176.596485][ T5881] usb usb4-port1: unable to enumerate USB device
[  176.758272][ T5806] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  177.034698][ T5806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.034832][ T5806] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  177.034859][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.397267][ T5806] usb 2-1: config 0 descriptor??
[  177.564031][ T5806] pwc: Askey VC010 type 2 USB webcam detected.
[  177.895154][   T60] Bluetooth: hci4: link tx timeout
[  177.895304][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.898612][   T60] Bluetooth: hci4: link tx timeout
[  177.898632][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.898775][   T60] Bluetooth: hci4: link tx timeout
[  177.898788][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.898912][   T60] Bluetooth: hci4: link tx timeout
[  177.898924][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.899045][   T60] Bluetooth: hci4: link tx timeout
[  177.899057][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.899179][   T60] Bluetooth: hci4: link tx timeout
[  177.899192][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.899311][   T60] Bluetooth: hci4: link tx timeout
[  177.899323][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.899442][   T60] Bluetooth: hci4: link tx timeout
[  177.899454][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.899598][   T60] Bluetooth: hci4: link tx timeout
[  177.899611][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.899741][   T60] Bluetooth: hci4: link tx timeout
[  177.899753][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.899879][   T60] Bluetooth: hci4: link tx timeout
[  177.899891][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.900011][   T60] Bluetooth: hci4: link tx timeout
[  177.900023][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.900145][   T60] Bluetooth: hci4: link tx timeout
[  177.900157][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.900277][   T60] Bluetooth: hci4: link tx timeout
[  177.900289][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.900409][   T60] Bluetooth: hci4: link tx timeout
[  177.900421][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.900546][   T60] Bluetooth: hci4: link tx timeout
[  177.900558][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.900682][   T60] Bluetooth: hci4: link tx timeout
[  177.900694][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.900854][   T60] Bluetooth: hci4: link tx timeout
[  177.900867][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.907560][   T60] Bluetooth: hci4: link tx timeout
[  177.907582][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.946543][ T5806] pwc: send_video_command error -71
[  177.946559][ T5806] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  177.946673][ T5806] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  177.953854][   T60] Bluetooth: hci4: link tx timeout
[  177.953872][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  177.965090][ T5806] usb 2-1: USB disconnect, device number 6
[  177.994893][   T60] Bluetooth: hci4: link tx timeout
[  177.994913][   T60] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  179.152296][ T6563] misc userio: Invalid payload size
[  179.256276][ T6554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.183'.
[  179.256309][ T6554] netlink: 10 bytes leftover after parsing attributes in process `syz.3.183'.
[  179.977364][   T60] Bluetooth: hci4: command 0x0405 tx timeout
[  181.674481][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'.
[  182.398926][ T6573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  184.486111][ T5951] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  186.353755][ T6600] input: syz1 as /devices/virtual/input/input15
[  186.723895][ T6606] netlink: 188 bytes leftover after parsing attributes in process `syz.4.198'.
[  186.786160][ T5951] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  186.967197][ T5951] usb 1-1: device descriptor read/64, error -71
[  187.076527][ T5951] usb usb1-port1: attempt power cycle
[  187.172907][ T6611] misc userio: Invalid payload size
[  187.350768][ T6617] overlayfs: failed to resolve './file1': -2
[  187.386113][ T5806] psmouse serio4: Failed to reset mouse on : -5
[  187.426084][ T5951] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  187.447750][ T5951] usb 1-1: device descriptor read/8, error -71
[  187.462319][ T5880] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  187.618762][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  187.618793][ T5880] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0
[  187.618817][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  187.620185][ T5880] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  187.620213][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  187.620233][ T5880] usb 2-1: SerialNumber: syz
[  187.707624][ T5951] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  187.733464][ T5951] usb 1-1: device descriptor read/8, error -71
[  187.846446][ T5951] usb usb1-port1: unable to enumerate USB device
[  187.908098][ T5880] usbtest 2-1:1.0: Linux user mode ISO test driver
[  187.908123][ T5880] usbtest 2-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  187.914133][ T5880] usb 2-1: USB disconnect, device number 7
[  187.950864][ T6626] loop2: detected capacity change from 0 to 7
[  187.965472][ T5799] Dev loop2: unable to read RDB block 7
[  187.965496][ T5799]  loop2: AHDI p1 p2 p3
[  187.965517][ T5799] loop2: partition table partially beyond EOD, truncated
[  187.990202][ T5799] loop2: p1 start 1818582900 is beyond EOD, truncated
[  187.990229][ T5799] loop2: p3 start 335544320 is beyond EOD, truncated
[  188.025066][ T6626] Dev loop2: unable to read RDB block 7
[  188.025101][ T6626]  loop2: AHDI p1 p2 p3
[  188.025133][ T6626] loop2: partition table partially beyond EOD, truncated
[  188.025407][ T6626] loop2: p1 start 1818582900 is beyond EOD, truncated
[  188.025428][ T6626] loop2: p3 start 335544320 is beyond EOD, truncated
[  190.296519][ T5872] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  190.426239][   T36] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  190.446042][ T5872] usb 1-1: Using ep0 maxpacket: 8
[  190.450990][ T5872] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  190.451020][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.451035][ T5872] usb 1-1: Product: syz
[  190.451043][ T5872] usb 1-1: Manufacturer: syz
[  190.451052][ T5872] usb 1-1: SerialNumber: syz
[  190.500575][ T5872] usb 1-1: config 0 descriptor??
[  190.514806][ T5872] gspca_main: vc032x-2.14.0 probing 046d:0896
[  190.576095][   T36] usb 2-1: Using ep0 maxpacket: 8
[  190.578147][   T36] usb 2-1: too many endpoints for config 0 interface 0 altsetting 3: 253, using maximum allowed: 30
[  190.578241][   T36] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  190.578257][   T36] usb 2-1: config 0 interface 0 has no altsetting 0
[  190.578276][   T36] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  190.578290][   T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.616065][   T36] usb 2-1: config 0 descriptor??
[  190.726167][ T5951] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  190.878919][ T5951] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  190.879033][ T5951] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.879058][ T5951] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  190.879084][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0
[  190.879119][ T5951] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  190.879142][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.908360][ T5951] usb 3-1: config 0 descriptor??
[  190.964132][   T36] usbhid 2-1:0.0: can't add hid device: -71
[  190.964326][   T36] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  191.001531][   T36] usb 2-1: USB disconnect, device number 8
[  191.036826][ T5880] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  191.140175][ T6655] netlink: 'syz.2.213': attribute type 8 has an invalid length.
[  191.140196][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'.
[  191.188272][ T5880] usb 4-1: Using ep0 maxpacket: 16
[  191.193011][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  191.219742][ T5880] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  191.219837][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.219869][ T5880] usb 4-1: Product: syz
[  191.219884][ T5880] usb 4-1: Manufacturer: syz
[  191.219898][ T5880] usb 4-1: SerialNumber: syz
[  191.272087][ T5880] usb 4-1: config 0 descriptor??
[  191.300333][ T5880] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  191.300371][ T5880] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  191.404364][ T5951] usbhid 3-1:0.0: can't add hid device: -71
[  191.404567][ T5951] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  191.418443][ T5951] usb 3-1: USB disconnect, device number 8
[  191.846085][ T5806] misc userio: Buffer overflowed, userio client isn't keeping up
[  191.895770][ T5880] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  192.049134][ T5872] gspca_vc032x: reg_w err -110
[  192.049306][ T5872] vc032x 1-1:0.0: probe with driver vc032x failed with error -110
[  192.092708][ T5859] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  192.113387][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.113981][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.266012][ T5859] usb 3-1: Using ep0 maxpacket: 32
[  192.270636][ T5880] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  192.270667][ T5880] em28xx 4-1:0.0: board has no eeprom
[  192.274597][ T5859] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  192.274626][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.274647][ T5859] usb 3-1: Product: syz
[  192.274661][ T5859] usb 3-1: Manufacturer: syz
[  192.274676][ T5859] usb 3-1: SerialNumber: syz
[  192.313482][   T10] usb 1-1: USB disconnect, device number 12
[  192.402682][ T1306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.446352][ T5880] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  192.446384][ T5880] em28xx 4-1:0.0: dvb set to bulk mode.
[  192.450529][ T5872] em28xx 4-1:0.0: Binding DVB extension
[  192.508383][   T60] ==================================================================
[  192.508400][   T60] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190
[  192.508434][   T60] Read of size 8 at addr ffffc9000d781008 by task kworker/u9:0/60
[  192.508452][   T60] 
[  192.508464][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  192.508488][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  192.508500][   T60] Workqueue: hci1 hci_rx_work
[  192.508531][   T60] Call Trace:
[  192.508539][   T60]  <TASK>
[  192.508548][   T60]  dump_stack_lvl+0xe8/0x150
[  192.508577][   T60]  print_report+0xba/0x230
[  192.508602][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  192.508623][   T60]  kasan_report+0x117/0x150
[  192.508645][   T60]  ? rt_spin_lock+0x20e/0x400
[  192.508676][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  192.508703][   T60]  __list_del_entry_valid_or_report+0xb5/0x190
[  192.508726][   T60]  kcov_remote_start+0x2af/0x710
[  192.508759][   T60]  hci_rx_work+0x10f/0x1030
[  192.508791][   T60]  ? process_scheduled_works+0xa0f/0x17a0
[  192.508816][   T60]  process_scheduled_works+0xaec/0x17a0
[  192.508851][   T60]  ? __pfx_process_scheduled_works+0x10/0x10
[  192.508877][   T60]  ? assign_work+0x3d5/0x5e0
[  192.508902][   T60]  worker_thread+0xa50/0xfc0
[  192.508935][   T60]  kthread+0x388/0x470
[  192.508963][   T60]  ? __pfx_worker_thread+0x10/0x10
[  192.508986][   T60]  ? __pfx_kthread+0x10/0x10
[  192.509011][   T60]  ret_from_fork+0x51e/0xb90
[  192.509036][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  192.509059][   T60]  ? __switch_to+0xc7d/0x1400
[  192.509082][   T60]  ? __pfx_kthread+0x10/0x10
[  192.509106][   T60]  ret_from_fork_asm+0x1a/0x30
[  192.509139][   T60]  </TASK>
[  192.509146][   T60] 
[  192.509151][   T60] The buggy address belongs to a vmalloc virtual mapping
[  192.509168][   T60] Memory state around the buggy address:
[  192.509179][   T60]  ffffc9000d780f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  192.509192][   T60]  ffffc9000d780f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  192.509204][   T60] >ffffc9000d781000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  192.509214][   T60]                       ^
[  192.509224][   T60]  ffffc9000d781080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  192.509237][   T60]  ffffc9000d781100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  192.509247][   T60] ==================================================================
[  192.509258][   T60] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  192.509273][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  192.509295][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  192.509307][   T60] Workqueue: hci1 hci_rx_work
[  192.509334][   T60] Call Trace:
[  192.509341][   T60]  <TASK>
[  192.509349][   T60]  vpanic+0x1e0/0x670
[  192.509379][   T60]  panic+0xc5/0xd0
[  192.509405][   T60]  ? __pfx_panic+0x10/0x10
[  192.509433][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  192.509456][   T60]  ? rcu_is_watching+0x15/0xb0
[  192.509488][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  192.509511][   T60]  check_panic_on_warn+0x89/0xb0
[  192.509530][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  192.509552][   T60]  end_report+0x6f/0x140
[  192.509572][   T60]  kasan_report+0x128/0x150
[  192.509592][   T60]  ? rt_spin_lock+0x20e/0x400
[  192.509613][   T60]  ? __list_del_entry_valid_or_report+0xb5/0x190
[  192.509639][   T60]  __list_del_entry_valid_or_report+0xb5/0x190
[  192.509663][   T60]  kcov_remote_start+0x2af/0x710
[  192.509702][   T60]  hci_rx_work+0x10f/0x1030
[  192.509734][   T60]  ? process_scheduled_works+0xa0f/0x17a0
[  192.509758][   T60]  process_scheduled_works+0xaec/0x17a0
[  192.509793][   T60]  ? __pfx_process_scheduled_works+0x10/0x10
[  192.509818][   T60]  ? assign_work+0x3d5/0x5e0
[  192.509843][   T60]  worker_thread+0xa50/0xfc0
[  192.509879][   T60]  kthread+0x388/0x470
[  192.509907][   T60]  ? __pfx_worker_thread+0x10/0x10
[  192.509928][   T60]  ? __pfx_kthread+0x10/0x10
[  192.509956][   T60]  ret_from_fork+0x51e/0xb90
[  192.509982][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  192.510005][   T60]  ? __switch_to+0xc7d/0x1400
[  192.510027][   T60]  ? __pfx_kthread+0x10/0x10
[  192.510056][   T60]  ret_from_fork_asm+0x1a/0x30
[  192.510093][   T60]  </TASK>
[  192.510248][   T60] Kernel Offset: disabled