last executing test programs:

1m59.250674258s ago: executing program 0 (id=1713):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_open_dev$sndmidi(0x0, 0x2, 0x80080)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004500090003000000000000000300000008000200", @ANYRES8=r0], 0x1c}}, 0x0)

1m58.221385609s ago: executing program 0 (id=1714):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0)
r0 = syz_open_dev$I2C(0x0, 0x1, 0x80000)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0xa090, 0x211, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], 0x2})

1m56.882705123s ago: executing program 3 (id=1717):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (fail_nth: 2)

1m56.280776231s ago: executing program 3 (id=1720):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba00000000010902240001000000000904000001030000000921000000012205000905810300"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/188) (async)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x23, 0x9, {0x9, 0x26, "b2bf41f8f7a2e9"}}, 0x0}, 0x0)

1m54.72962128s ago: executing program 0 (id=1724):
iopl(0x3)
iopl(0x37)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000003c0)={0x20, 0x9, 0xd2, {0xd2, 0x23, "5e1ab7451ea0b9939ffe674ac71406e3cb2ea33711ec0eb2522ae0247899314c3d09ba141a158e98ec34a87221e10a45b3f759161b882ef8bf4e00000000000000c0b898214155c24e17d23b0a1f35e470d31525fe6f6791589dbaf715bbc6209f2a8862622c55665ccab8c172b560fd1560846d96967216fae94861cf6451a7bb5163b29cc784a8946e68639db6f3d971174a348ff7679345937592858e4f90b6d062577ef59f846b45a8b375350e336c497fc38e74251fbc03d6f8b0b153c8d288ce44a746f979861539b464925aad"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0xe, 0xfc, 0xc7, 0x20, 0x54c, 0x87d, 0x7874, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x10, 0x40, 0x8, [{{0x9, 0x4, 0xbd, 0x9, 0x0, 0x8, 0x2, 0x1, 0x5}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x4}, 0x8)
rseq(&(0x7f0000002d80), 0x20, 0x0, 0x0)
unshare(0x8040600)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0)
r4 = msgget(0x1, 0x64d)
msgrcv(r4, 0x0, 0x0, 0x0, 0x0)
msgsnd(r4, &(0x7f0000000180)={0x1}, 0x8, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x29, 0x4, 0x0)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r5, &(0x7f0000000900)='.', 0x1, 0x12, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'nr0\x00'})

1m52.504970049s ago: executing program 3 (id=1729):
syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e1050804a74d989e030109022400010000000009040000022ec25d000905090000"], 0x0)
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0xc)
socket$rds(0x15, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x9, 0xffffffff, 0xfffffffffffffffd, 0x5, 0x2, 0x3, 0x6, 0x1, 0x5, 0x9, 0xba, 0x2, 0x0, 0x9}, 0x10, [0x0, 0x0]})
syz_open_dev$I2C(&(0x7f0000000080), 0xffff, 0x501602)
listen(r1, 0xfffffff8)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000012c0)=0x2)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc044560f, &(0x7f00000001c0)=@overlay={0x543, 0x2, 0x4, 0x400, 0x46, {}, {0x1, 0xc, 0x6, 0x5, 0x7f, 0x4, "10a2aaec"}, 0x4, 0x3, {}, 0x9})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x7, 0x4, 0x7, 0x4, 0x3c5b, 0x6, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0xa, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0xda45, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x601, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x5, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x0, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x0, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0xfffffffc, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0xd4, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0x7f, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x8, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x47, 0x3, 0x101, 0x10000, 0x800, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x40c0000, 0x3, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x10000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x5, @local}, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
pipe2(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='fsi_master_gpio_cmd_rel_addr\x00', r6, 0x0, 0x8}, 0x18)
read$FUSE(r4, &(0x7f0000002600)={0x2020}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede)
fcntl$setpipe(r4, 0x407, 0xc000)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="75706461746520646566616b6c7420757365723a6c6f61643dd698d2f3cf03e8f3b3"], 0x1a, 0xffffffffffffffff)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x7, 0x1, 0x5, 0x9})

1m50.722464833s ago: executing program 2 (id=1733):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x40800)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSRS485(r5, 0x5437, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x154}}, 0x800)
ftruncate(r6, 0x2000009)
sendfile(r0, r6, 0x0, 0x7ffff004)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x8)
sendto$inet(r8, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)

1m49.451255966s ago: executing program 0 (id=1735):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x800, 0x4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0})
statx(r4, &(0x7f0000000e80)='./bus\x00', 0x1000, 0x4, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000fc0), 0x80, 0x0)
r9 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001000), 0x8000, 0x0)
sendmmsg$unix(r3, &(0x7f0000001380)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000004c0)="666bf0cbc16f0023e1b98f724c83e5392fe29a25a3569bf7986c85823f6d9b08e81c9489d7f551a46afde354ea1760c6b44fcdb2bd53235996f760aea606ce5ab470739d829a1fd9c492", 0x4a}, {&(0x7f0000000280)="cd9fc5d4c70bdd56e3df3a09cdd4ab59195a1dd559641a23c88d4f0cf19b1977abf4dfff5099619a3e98609a1950e291066af8b3d7ad", 0x36}, {&(0x7f0000000540)="4b05d30b9b726c434ed01afc4e247a50c0ffbd724e5c5a2b7e2a941c93a9321ba933d7c645cbfeae1a42b2f9bb0e7c3e47ad35c17239b80c6ef8f6356b5c9da666ada929e9c82b5ddcd9cd70c1fb0c6540eddc7e1af173b1be24726b7efc4cb94bbf7a50d7036fe1a5092cc8b05b1ec6f88c26989dee8b021075dc47a22002076803760594f121b2ae77fd642f84fb8a0a16fe083540e2e140145a2269afc9f7c458e314902b4d60966f262332d8ce514658a0fb", 0xb4}, {&(0x7f0000000380)="49bd73646817cf90c6ae2f2f3e8ea1a251219e5bbf1b2aa3", 0x18}, {&(0x7f0000000600)="010a489415f924c530b344a24afa8d9deea51edfe02eb4c7d41e263e2d38c7ddc4b4d7e5689e75fbfd6cadc1dbc9f25262d25959b352b3a7d7ae949569be976572f3fe36e79bd76d4aa941f428fed052b25850e4aa04d642ed162e7101dcfb1fa34d89d9d41ebd53d099755dc64effc66ee39bae386b8e8ca0301fae3596939a2a52", 0x82}, {&(0x7f0000000400)="e25728097c5c1d950206206a9cbe9e", 0xf}, {&(0x7f00000006c0)}], 0x7, &(0x7f0000001180)=ANY=[@ANYBLOB="24000000000020000100005918bf42ba524260ba60b10074d21f48", @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000880)="99fe693caa46150b12bb511f1b6979a8d1e08d2202f0b6", 0x17}, {&(0x7f00000008c0)="98af01a5f0f817cef62d166aba8b3646f3bd8317c0a9a1a51d31cb0b0dd1f8e492418c5077ef0a25657534f90c9e387eae13ab7fbb3a5af45e445ee61c", 0x3d}, {&(0x7f0000000900)="7b121eddb1a1c9d722e2f34145f466f92bc6", 0x12}, {&(0x7f0000000940)="bd179ecadb1f8fdd8bdb33e672856d8febb514716e7fe4522e7f61a97d7ce266a0cd861e5e7926826186182ea81d3be18da9a57ac134ffa4bcec4b348fb3373074ddafa048ac96510eab43f93c06f2b46e0f54bcb7eefac998e83b01a3a8ec3a5e9f6c0fc2db3207c9e2c88d2ba99f202a3e7d537040128dc82bc25b94dd86f3b93049e175f4715f425df98e1409bac43702ae5bfeb0542c05c025b32e63c8b8581a41b112af0c2d0e68d86f33515ea89c89fbc61d8b0e373732f506cbb51ebe01f760cb923f4a59a21cb202d8ed1613063932fc8c", 0xd5}, {&(0x7f0000000a40)="8c064f1a90fd4f3b007b6c5b8db3afcbb217a57971f9d73be386", 0x1a}, {&(0x7f0000000a80)="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", 0xfe}, {&(0x7f0000000b80)="c9bade6e68c495da727f0dc413ee98ee02f7e9e831bf71e8d08f614063fd1120170541d1f1acf603b1df4315c66e7be056ba7c99fbea30e471cd8776b4d72ea5ffea15d362f22b1972b40d3cce8ddbaf36998708b665fec5edb9eec403aa93a8f55923b499176312d468a1535e6a404b50f56bd8c9ee1962c8dd65d12086d939815e5a3ec9fad1a3acaa789a16d99c523b7765a9e634793b1eb17b832720008a7bf1089bbec7f88fd817a32230e4a2fefdb8335574c4d6eddf08f255983220d3d52328ff77b10841d21dfd1ec0388ae6223c1587", 0xd4}, {&(0x7f0000000c80)="abe1c0fb7f2964c381c84817af1722b674e76de67551cac8a36c69e7cc453aa66e", 0x21}], 0x8, &(0x7f0000001040)=ANY=[@ANYBLOB="9e5ebb6400ff0100000100000002008000000000000000", @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x10000}}], 0x2, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00')
r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wrdno=', @ANYRESHEX=r11, @ANYBLOB=',\x00'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103)

1m49.119270112s ago: executing program 2 (id=1736):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="3b6c59343a8833ccfdb601e52c658dcd78b9f487e903426ac8cee100eccb2e5caa8994c6e9865f1ee4e6a30e31e208fb932091", 0x33}], 0x1}, 0x400c004)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x50100, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r1)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4)
ioctl$TCFLSH(r1, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x97ff)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x12c, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x55}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="02abaca27e986a0852ba2241a7b5ad4d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e6c086ca1f769992952a91d0d7c4848a"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8b86a8e4dd5c1d8b"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0adb6cb6f1758c45"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "74452b2fce560843"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="9cd45b9918c4bca5ee01c143a86480334267863c9c9b4ed0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="613de63adbcfb0f6baa5a2ab25244905"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="852ab46f90f91742e0bd0b7784907c1d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b22c9d600bff1c8e"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="fb727815732bdf297ed00c179544bf10"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7a33bf2151f071d3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4000810)

1m48.173322413s ago: executing program 3 (id=1737):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010102139e190838074045160527f5100109021200010602989f0904e9190300ffd063"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010001fb0000fcffffff107316c40200776c616e300000000000000000000000080009000000000008000a0040000000000000000000816d44c0d72a5be5f9ed797e010c03d44d02cd9f72b1147c47f64cf634eada577626a6082d467c544e203cd96eb99a9cb2598f3e33a4862b1b0276d0c07a66f0052dca3821c76ff2e9bf895240bff4c77c28ff1b4815290debedf3427a473c34eceb04aa61d4cac83a92b64720312c2dc3074229533b4463fd072a9f3b"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004040)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', <r8=>0x0, 0x700, 0x700, 0xf1e2, 0x3, {{0xf, 0x4, 0x0, 0x6, 0x3c, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0x7, 0xf8, [@remote]}, @lsrr={0x83, 0x1f, 0xfd, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @multicast2, @empty, @private=0xa010102]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r10=>0x0, 0x8, 0x7800, 0x101, 0x4, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x67, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @lsrr={0x83, 0xf, 0x2a, [@multicast2, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x7, 0xe8, [@rand_addr=0x64010102]}, @rr={0x7, 0x13, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @remote]}, @timestamp={0x44, 0xc, 0x73, 0x0, 0x6, [0xfffffffd, 0x9]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg1\x00', <r11=>0x0})
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000440)=<r12=>0x0, &(0x7f0000000480)=0x4)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x7, 0x0, 0x8001, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x9, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="24010000", @ANYRES16=r6, @ANYBLOB="000229bd7000ffdbdf25110000000c00018008000100", @ANYRES32=r7, @ANYBLOB="2000018008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468315f746f5f687372000000000c00018008000100", @ANYRES32=r9, @ANYBLOB="44000180140002006e72300000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="14000200626174616476300000000000000000000800030004000000080001001f29ce3483a6dcf840f13b8a4befcea43f1a3f3a7810c2613ce5f62437b1d0d76fca3ea8f083caa501cbc0512911db1a67edec0bafcb5b2bb554d0403c12ee8a3e0024aecf0300b874a9d7d919a9aacccc92fa998c0e5887b44f0148b625d981ef8d3fcf3c1df8e91e6568ea452276de9c6a36e838e6a1", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006e72300000000000000000000000000008000300020000006800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="140002006873723000"/20], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x11)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)="021b91"})
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0)
r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0)

1m47.984775335s ago: executing program 0 (id=1739):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
r3 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680)
ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x5)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x3a)
r4 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (fail_nth: 1)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f00006e6000/0x3000)=nil)
syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x48)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CHANGE_FD(r5, 0xc040128b, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x146}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$UHID_INPUT(r7, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006)

1m44.92569764s ago: executing program 0 (id=1743):
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
chdir(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
keyctl$set_reqkey_keyring(0xe, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10042, 0x0)

1m44.711950132s ago: executing program 3 (id=1744):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x20000014})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
fdatasync(0xffffffffffffffff)
epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9546}})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000004c00)=""/102392, 0x18ff8)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)

1m44.631713137s ago: executing program 2 (id=1745):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x8, 0x9, 0x1, {0x7, @pix={0x1, 0x9, 0x34524742, 0x6, 0x2, 0x7, 0x0, 0x4, 0x1, 0x6, 0x2, 0x2}}, 0xea8})
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000002c0)={0x2, 0x45da3c5d5a9f1064, 0x0, "c42d05e643c3d4c28e5b8a08ef37b1907541f5671ca13460106d519bc6a6faed", 0x34424752})
read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80000)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f0000000180)=""/4, 0x4}], 0x2)

1m42.81175601s ago: executing program 2 (id=1747):
iopl(0x3)
iopl(0x37)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x100, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0x8, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000003c0)={0x20, 0x9, 0xd2, {0xd2, 0x23, "5e1ab7451ea0b9939ffe674ac71406e3cb2ea33711ec0eb2522ae0247899314c3d09ba141a158e98ec34a87221e10a45b3f759161b882ef8bf4e00000000000000c0b898214155c24e17d23b0a1f35e470d31525fe6f6791589dbaf715bbc6209f2a8862622c55665ccab8c172b560fd1560846d96967216fae94861cf6451a7bb5163b29cc784a8946e68639db6f3d971174a348ff7679345937592858e4f90b6d062577ef59f846b45a8b375350e336c497fc38e74251fbc03d6f8b0b153c8d288ce44a746f979861539b464925aad"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0xe, 0xfc, 0xc7, 0x20, 0x54c, 0x87d, 0x7874, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa, 0x10, 0x40, 0x8, [{{0x9, 0x4, 0xbd, 0x9, 0x0, 0x8, 0x2, 0x1, 0x5}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x4}, 0x8)
rseq(&(0x7f0000002d80), 0x20, 0x0, 0x0)
unshare(0x8040600)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902"], 0x0)
r4 = msgget(0x1, 0x64d)
msgrcv(r4, 0x0, 0x0, 0x0, 0x0)
msgsnd(r4, &(0x7f0000000180)={0x1}, 0x8, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x29, 0x4, 0x0)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r5, &(0x7f0000000900)='.', 0x1, 0x12, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'nr0\x00'})

1m39.903402136s ago: executing program 3 (id=1749):
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000400), 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000005c0)={{}, 0x0, 0xc, @inherit={0x0, 0x0}, @name="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"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r2 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0)
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0)
connect$vsock_stream(r2, &(0x7f00000000c0), 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000340)=0x6, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000001000010405d600000200000000000000", @ANYRES32=0x0, @ANYBLOB="211a0000000000006c00128008000100687372006000028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="050003000300000005000600010000000500070000", @ANYRES32=r4], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r7, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xac, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0x2, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x80, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0xf0a, 0x4, 0x4007f, 0x3, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0x8, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8001, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x0, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0xffffffff, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x2, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0x10d500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x6, 0x1afa, 0x6, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x82, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c)
io_uring_enter(r8, 0x27e2, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

1m38.231779383s ago: executing program 2 (id=1750):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x4004000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r7, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x2000000, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

1m33.961324063s ago: executing program 2 (id=1754):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
syz_genetlink_get_family_id$team(&(0x7f0000000280), r0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
listen(0xffffffffffffffff, 0x0)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
close(r10)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')
r11 = getpid()
sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7)

1m28.274838276s ago: executing program 32 (id=1743):
socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
chdir(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
keyctl$set_reqkey_keyring(0xe, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10042, 0x0)

1m23.965423313s ago: executing program 33 (id=1749):
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000400), 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000005c0)={{}, 0x0, 0xc, @inherit={0x0, 0x0}, @name="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"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r2 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, 0x0)
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0)
connect$vsock_stream(r2, &(0x7f00000000c0), 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000340)=0x6, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000001000010405d600000200000000000000", @ANYRES32=0x0, @ANYBLOB="211a0000000000006c00128008000100687372006000028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="050003000300000005000600010000000500070000", @ANYRES32=r4], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
r8 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r7, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xac, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0x2, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x80, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0xf0a, 0x4, 0x4007f, 0x3, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0x8, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8001, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x0, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0xffffffff, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x2, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0x10d500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x6, 0x1afa, 0x6, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x82, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c)
io_uring_enter(r8, 0x27e2, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r11, 0xae80, 0x0)

1m17.289072311s ago: executing program 34 (id=1754):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r3 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
syz_genetlink_get_family_id$team(&(0x7f0000000280), r0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
listen(0xffffffffffffffff, 0x0)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000)
close(r10)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil})
ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f00000000c0)={0x1})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')
r11 = getpid()
sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7)

58.358998403s ago: executing program 1 (id=1778):
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x8, 0x9, 0x1, {0x7, @pix={0x1, 0x9, 0x34524742, 0x6, 0x2, 0x7, 0x0, 0x4, 0x1, 0x6, 0x2, 0x2}}, 0xea8})
read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10)
io_uring_setup(0x6443, &(0x7f0000000000)={0x0, 0xa665, 0x40, 0x1, 0xe7})
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f0000000180)=""/4, 0x4}], 0x2)

56.482145241s ago: executing program 1 (id=1779):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b010500000000000001000005a23f0b7100000000020000000600000000000000da"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r3 = memfd_create(&(0x7f0000000080), 0x1)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x408cd, 0x0)
ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0)

48.766411759s ago: executing program 1 (id=1784):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed00000001090224000100000000090400000303000000092100000001220500090581"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB=' mO'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010102139e190838074045160527f5100109021200010602989f0904e9190300ffd063"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010001fb0000fcffffff107316c40200776c616e300000000000000000000000080009000000000008000a0040000000000000000000816d44c0d72a5be5f9ed797e010c03d44d02cd9f72b1147c47f64cf634eada577626a6082d467c544e203cd96eb99a9cb2598f3e33a4862b1b0276d0c07a66f0052dca3821c76ff2e9bf895240bff4c77c28ff1b4815290debedf3427a473c34eceb04aa61d4cac83a92b64720312c2dc3074229533b4463fd072a9f3b"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004040)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', <r8=>0x0, 0x700, 0x700, 0xf1e2, 0x3, {{0xf, 0x4, 0x0, 0x6, 0x3c, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0x7, 0xf8, [@remote]}, @lsrr={0x83, 0x1f, 0xfd, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @multicast2, @empty, @private=0xa010102]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r10=>0x0, 0x8, 0x7800, 0x101, 0x4, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x67, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @lsrr={0x83, 0xf, 0x2a, [@multicast2, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x7, 0xe8, [@rand_addr=0x64010102]}, @rr={0x7, 0x13, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @remote]}, @timestamp={0x44, 0xc, 0x73, 0x0, 0x6, [0xfffffffd, 0x9]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg1\x00', <r11=>0x0})
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000440)=<r12=>0x0, &(0x7f0000000480)=0x4)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x7, 0x0, 0x8001, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x9, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="24010000", @ANYRES16=r6, @ANYBLOB="000229bd7000ffdbdf25110000000c00018008000100", @ANYRES32=r7, @ANYBLOB="2000018008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468315f746f5f687372000000000c00018008000100", @ANYRES32=r9, @ANYBLOB="44000180140002006e72300000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="14000200626174616476300000000000000000000800030004000000080001001f29ce3483a6dcf840f13b8a4befcea43f1a3f3a7810c2613ce5f62437b1d0d76fca3ea8f083caa501cbc0512911db1a67edec0bafcb5b2bb554d0403c12ee8a3e0024aecf0300b874a9d7d919a9aacccc92fa998c0e5887b44f0148b625d981ef8d3fcf3c1df8e91e6568ea452276de9c6a36e838e6a1", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006e72300000000000000000000000000008000300020000006800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="140002006873723000"/20], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x11)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)="021b91"})
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0)
r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0)

43.028600312s ago: executing program 1 (id=1788):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$bind(0x0, &(0x7f0000000500)='./file0/file0/file0\x00', 0x0, 0x2000000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
mount$fuse(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1800, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/fuse\x00'}}, {@hash}]}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62)
syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072270800000093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ca35d971d70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c00007bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1e60a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a274c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8665134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb053925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b51f393acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81bbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f19311361b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df00", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

42.379573638s ago: executing program 1 (id=1789):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x40800)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSRS485(r5, 0x5437, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="54010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x154}}, 0x800)
ftruncate(r6, 0x2000009)
sendfile(r0, r6, 0x0, 0x7ffff004)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x8)
sendto$inet(r8, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)

40.125844561s ago: executing program 1 (id=1791):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b010500000000000001000005a23f0b7100000000020000000600000000000000da"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r3 = memfd_create(&(0x7f0000000080), 0x1)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x408cd, 0x0)
ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0)

35.020534696s ago: executing program 4 (id=1793):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)}], 0x3}}], 0x1, 0x4000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x90, &(0x7f0000000100)=""/144}, 0x94)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,')

34.145072762s ago: executing program 4 (id=1794):
r0 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x8, 0x9, 0x1, {0x7, @pix={0x1, 0x9, 0x34524742, 0x6, 0x2, 0x7, 0x0, 0x4, 0x1, 0x6, 0x2, 0x2}}, 0xea8})
read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10)
io_uring_setup(0x6443, &(0x7f0000000000)={0x0, 0xa665, 0x40, 0x1, 0xe7})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f0000000180)=""/4, 0x4}], 0x2)

32.898842383s ago: executing program 4 (id=1795):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010102139e190838074045160527f5100109021200010602989f0904e9190300ffd063"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = dup3(r2, r1, 0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010001fb0000fcffffff107316c40200776c616e300000000000000000000000080009000000000008000a0040000000000000000000816d44c0d72a5be5f9ed797e010c03d44d02cd9f72b1147c47f64cf634eada577626a6082d467c544e203cd96eb99a9cb2598f3e33a4862b1b0276d0c07a66f0052dca3821c76ff2e9bf895240bff4c77c28ff1b4815290debedf3427a473c34eceb04aa61d4cac83a92b64720312c2dc3074229533b4463fd072a9f3b"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4004040)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000140)={'ip_vti0\x00', <r8=>0x0, 0x700, 0x700, 0xf1e2, 0x3, {{0xf, 0x4, 0x0, 0x6, 0x3c, 0x64, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0x7, 0xf8, [@remote]}, @lsrr={0x83, 0x1f, 0xfd, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @multicast2, @empty, @private=0xa010102]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000340)={'ip_vti0\x00', <r10=>0x0, 0x8, 0x7800, 0x101, 0x4, {{0x13, 0x4, 0x2, 0x4, 0x4c, 0x67, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @lsrr={0x83, 0xf, 0x2a, [@multicast2, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x7, 0xe8, [@rand_addr=0x64010102]}, @rr={0x7, 0x13, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @remote]}, @timestamp={0x44, 0xc, 0x73, 0x0, 0x6, [0xfffffffd, 0x9]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg1\x00', <r11=>0x0})
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000440)=<r12=>0x0, &(0x7f0000000480)=0x4)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x0, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x7ffd, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x401, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x7, 0x0, 0x8001, 0x0, 0xfffffff7, 0x1ff, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0xfffffffd, 0x0, 0x1000, 0x0, 0x40000000, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0xd5a9, 0x0, 0x0, 0x0, 0x0, 0xfb8d, 0x7b2, 0x4, 0x0, 0x0, 0x1, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0x8000c, 0x6, 0x0, 0x0, 0xffffffff, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x1, 0x0, 0x9, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0xe9, 0x3, 0xfffffffe, 0x9, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xff, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="24010000", @ANYRES16=r6, @ANYBLOB="000229bd7000ffdbdf25110000000c00018008000100", @ANYRES32=r7, @ANYBLOB="2000018008000100", @ANYRES32=r8, @ANYBLOB="1400020076657468315f746f5f687372000000000c00018008000100", @ANYRES32=r9, @ANYBLOB="44000180140002006e72300000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="14000200626174616476300000000000000000000800030004000000080001001f29ce3483a6dcf840f13b8a4befcea43f1a3f3a7810c2613ce5f62437b1d0d76fca3ea8f083caa501cbc0512911db1a67edec0bafcb5b2bb554d0403c12ee8a3e0024aecf0300b874a9d7d919a9aacccc92fa998c0e5887b44f0148b625d981ef8d3fcf3c1df8e91e6568ea452276de9c6a36e838e6a1", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="20000180140002006e72300000000000000000000000000008000300020000006800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a5f74756e00000000000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="140002006873723000"/20], 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x11)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)="021b91"})
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0)
r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0)

24.281709337s ago: executing program 35 (id=1791):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b010500000000000001000005a23f0b7100000000020000000600000000000000da"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r3 = memfd_create(&(0x7f0000000080), 0x1)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x408cd, 0x0)
ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0)

21.17387684s ago: executing program 4 (id=1797):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20004008}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b010500000000000001000005a23f0b7100000000020000000600000000000000da"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10)
read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r5 = memfd_create(&(0x7f0000000080), 0x1)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x408cd, 0x0)
ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, 0x0, 0x24, 0x0)

19.349899368s ago: executing program 4 (id=1798):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r0, 0x4, 0x40800)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSRS485(r5, 0x5437, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="54010000100001000000000000000000fe880000000000000000000000000101ac14143c00000000000000000000000000000000000200000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x154}}, 0x800)
ftruncate(r6, 0x2000009)
sendfile(r0, r6, 0x0, 0x7ffff004)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0x8)
sendto$inet(r8, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)

16.270487544s ago: executing program 4 (id=1799):
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010207010320b804020640000102030109021b00010105f07f090400c7010000000909050102ff0709e107ff0648d279", @ANYRESOCT=0x0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@initdev, @multicast2, <r2=>0x0}, &(0x7f0000000840)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x2, 0x8, 0xcd1, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x10, 0xffff, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', <r4=>0x0})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'ip6_vti0\x00', <r6=>0x0, 0x2f, 0x4b, 0x2, 0x8, 0x1, @empty, @mcast2, 0x0, 0xfc00044b25c26703, 0x10}})
r7 = socket(0x11, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', <r9=>0x0})
bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000002000/0x2000)=nil})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x800001, 0x4132, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', <r13=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080)
pipe(0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000004000000040000001500000000000000", @ANYRES32=r14], 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r15, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x150, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd2dc9814a91a239a}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20044850}, 0x4000011)
memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa5\xed\x05\x12\x0f\x0eu\xe5 \xfe\xcdMX\xb5X\x838\xf5\x18x\xc9\xb9\x03\t\x06\x96g\x8a5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0\x1f\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0)

0s ago: executing program 36 (id=1799):
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010207010320b804020640000102030109021b00010105f07f090400c7010000000909050102ff0709e107ff0648d279", @ANYRESOCT=0x0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@initdev, @multicast2, <r2=>0x0}, &(0x7f0000000840)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x2, 0x8, 0xcd1, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x10, 0xffff, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', <r4=>0x0})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'ip6_vti0\x00', <r6=>0x0, 0x2f, 0x4b, 0x2, 0x8, 0x1, @empty, @mcast2, 0x0, 0xfc00044b25c26703, 0x10}})
r7 = socket(0x11, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', <r9=>0x0})
bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r9, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000002000/0x2000)=nil})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x800001, 0x4132, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', <r13=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080)
pipe(0x0)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000004000000040000001500000000000000", @ANYRES32=r14], 0x50)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r15, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x150, r1, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd2dc9814a91a239a}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20044850}, 0x4000011)
memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa5\xed\x05\x12\x0f\x0eu\xe5 \xfe\xcdMX\xb5X\x838\xf5\x18x\xc9\xb9\x03\t\x06\x96g\x8a5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0\x1f\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0)

kernel console output (not intermixed with test programs):

er raw data: 0xfffffffb
[  613.756935][   T31] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  613.756952][   T31] em28xx 4-1:0.0: No AC97 audio processor
[  613.957382][ T5786] usb 4-1: USB disconnect, device number 53
[  613.975780][ T5786] em28xx 4-1:0.0: Disconnecting em28xx
[  613.993880][    C1] vkms_vblank_simulate: vblank timer overrun
[  614.025814][T11093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.026525][T11093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.027607][T11093] binder: 11072:11093 ioctl 4018620d 0 returned -22
[  614.060496][ T5786] em28xx 4-1:0.0: Freeing device
[  614.064597][    C1] vkms_vblank_simulate: vblank timer overrun
[  614.150198][T11093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1543'.
[  614.150788][T11093] binder: 11072:11093 ioctl 8933 200000000040 returned -22
[  614.154879][T11093] binder: 11072:11093 ioctl 89f2 2000000002c0 returned -22
[  614.155092][T11093] binder: 11072:11093 ioctl 8933 200000000300 returned -22
[  614.155289][T11093] binder: 11072:11093 ioctl 89f2 2000000003c0 returned -22
[  614.155468][T11093] binder: 11072:11093 ioctl 8933 200000000400 returned -22
[  614.221420][T11093] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  614.251980][ T5814] block nbd0: Receive control failed (result -32)
[  614.288977][T11093] binder: 11072:11093 ioctl c0306201 0 returned -14
[  614.289250][T11093] binder: 11072:11093 ioctl 40044591 0 returned -22
[  614.869876][T11100] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1543'.
[  615.140403][ T5786] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  615.302607][ T5786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  615.302641][ T5786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  615.302692][ T5786] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  615.302714][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.309276][ T5786] usb 4-1: config 0 descriptor??
[  615.363373][ T5786] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  615.363424][ T5786] dvb-usb: bulk message failed: -22 (3/0)
[  615.390432][ T5786] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  615.391800][ T5786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  615.391855][ T5786] usb 4-1: media controller created
[  615.395395][ T5786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  615.436769][ T5786] dvb-usb: bulk message failed: -22 (6/0)
[  615.436938][ T5786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  615.461257][ T5786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input67
[  615.464974][ T5786] dvb-usb: schedule remote query interval to 150 msecs.
[  615.464995][ T5786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  615.479639][   T31] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  615.560648][T11099] dvb-usb: bulk message failed: -22 (2/0)
[  615.565891][T11099] dvb-usb: bulk message failed: -22 (4/0)
[  615.570340][ T5948] usb 4-1: USB disconnect, device number 54
[  615.600548][ T5947] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  615.631448][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  615.631489][   T31] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  615.631528][   T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  615.632842][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  615.632864][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  615.632874][   T31] usb 2-1: SerialNumber: syz
[  615.733076][   T31] cdc_acm 2-1:1.0: skipping garbage
[  615.733089][   T31] cdc_acm 2-1:1.0: skipping garbage
[  615.733097][   T31] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  615.733111][   T31] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[  615.733146][   T31] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[  615.744131][ T5948] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  615.802475][ T5947] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  615.802508][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  615.802534][ T5947] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  615.802546][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.806961][ T5947] usb 1-1: config 0 descriptor??
[  615.936187][   T31] usb 2-1: USB disconnect, device number 52
[  615.952874][  T978] usb 5-1: USB disconnect, device number 51
[  616.828972][T11125] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1559'.
[  617.066492][ T5947] ath6kl: Failed to submit usb control message: -110
[  617.066778][ T5947] ath6kl: unable to send the bmi data to the device: -110
[  617.066822][ T5947] ath6kl: Unable to send get target info: -110
[  617.112397][ T5947] ath6kl: Failed to init ath6kl core: -110
[  617.186704][ T5947] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110
[  617.698812][T11119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.715713][T11119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.909724][ T5786] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  618.019595][  T978] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  618.065972][ T5786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  618.065999][ T5786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  618.066052][ T5786] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  618.066075][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.071375][ T5786] usb 4-1: config 0 descriptor??
[  618.145380][ T5786] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  618.145430][ T5786] dvb-usb: bulk message failed: -22 (3/0)
[  618.187804][ T5786] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  618.188770][ T5786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  618.188822][ T5786] usb 4-1: media controller created
[  618.218588][ T5786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  618.222810][  T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  618.222836][  T978] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  618.222888][  T978] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  618.222911][  T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.269728][ T5867] usb 1-1: USB disconnect, device number 49
[  618.313385][  T978] usb 5-1: config 0 descriptor??
[  618.318549][  T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  618.318598][  T978] dvb-usb: bulk message failed: -22 (3/0)
[  618.340195][ T5786] dvb-usb: bulk message failed: -22 (6/0)
[  618.340285][ T5786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  618.346896][ T5786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input68
[  618.348859][T11121] dvb-usb: bulk message failed: -22 (2/0)
[  618.359998][T11121] dvb-usb: bulk message failed: -22 (4/0)
[  618.372302][   T31] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  618.398428][ T5786] dvb-usb: schedule remote query interval to 150 msecs.
[  618.398450][ T5786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  618.418945][  T978] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  618.430107][  T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  618.430169][  T978] usb 5-1: media controller created
[  618.433252][  T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  618.463528][ T5786] usb 4-1: USB disconnect, device number 55
[  618.465368][  T978] dvb-usb: bulk message failed: -22 (6/0)
[  618.465443][  T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  618.494548][  T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input69
[  618.550209][T11117] dvb-usb: bulk message failed: -22 (2/0)
[  618.605341][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  618.605367][   T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  618.605419][   T31] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  618.605442][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  618.611528][   T31] usb 2-1: config 0 descriptor??
[  618.616683][   T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  618.616728][   T31] dvb-usb: bulk message failed: -22 (3/0)
[  618.673889][   T31] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  618.674906][   T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  618.674960][   T31] usb 2-1: media controller created
[  618.677887][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  619.232451][T11130] dvb-usb: bulk message failed: -22 (2/0)
[  619.308640][   T31] dvb-usb: bulk message failed: -22 (6/0)
[  619.308722][   T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  619.327830][   T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70
[  619.458311][  T978] dvb-usb: schedule remote query interval to 150 msecs.
[  619.458332][  T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  619.524762][   T31] dvb-usb: schedule remote query interval to 150 msecs.
[  619.524785][   T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  619.609683][  T978] dvb-usb: bulk message failed: -22 (1/0)
[  619.609714][  T978] dvb-usb: error while querying for an remote control event.
[  619.652377][ T5786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  619.679611][ T5867] dvb-usb: bulk message failed: -22 (1/0)
[  619.679642][ T5867] dvb-usb: error while querying for an remote control event.
[  619.686698][  T978] usb 5-1: USB disconnect, device number 52
[  619.764691][T11146] overlayfs: missing 'lowerdir'
[  619.839610][ T5867] dvb-usb: bulk message failed: -22 (1/0)
[  619.839642][ T5867] dvb-usb: error while querying for an remote control event.
[  619.853743][   T31] usb 2-1: USB disconnect, device number 53
[  620.457885][  T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  620.773694][    C0] vkms_vblank_simulate: vblank timer overrun
[  620.840282][ T6016] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  620.960134][T11158] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1570'.
[  621.769542][    C0] vkms_vblank_simulate: vblank timer overrun
[  621.771745][ T5786] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  621.895427][   T31] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  621.949828][ T6016] usb 1-1: Using ep0 maxpacket: 16
[  621.954255][ T6016] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  621.954369][ T6016] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  621.954412][ T6016] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  621.954435][ T6016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.955746][ T5786] usb 3-1: unable to get BOS descriptor or descriptor too short
[  621.956870][ T5786] usb 3-1: not running at top speed; connect to a high speed hub
[  621.964098][ T5786] usb 3-1: config 129 has an invalid interface number: 252 but max is 0
[  621.964125][ T5786] usb 3-1: config 129 has no interface number 0
[  621.964157][ T5786] usb 3-1: config 129 interface 252 has no altsetting 0
[  621.973479][ T5786] usb 3-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=1a.8c
[  621.973508][ T5786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.973527][ T5786] usb 3-1: Product: syz
[  621.973541][ T5786] usb 3-1: Manufacturer: syz
[  621.973554][ T5786] usb 3-1: SerialNumber: syz
[  621.980829][ T6016] usb 1-1: config 0 descriptor??
[  621.998322][ T6016] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  622.029690][  T978] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  622.204993][  T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  622.205021][  T978] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  622.205343][  T978] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  622.205369][  T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.226069][  T978] usb 5-1: config 0 descriptor??
[  622.226639][ T5786] upd78f0730 3-1:129.252: upd78f0730 converter detected
[  622.238107][  T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  622.238159][  T978] dvb-usb: bulk message failed: -22 (3/0)
[  622.241353][ T5786] usb 3-1: upd78f0730 converter now attached to ttyUSB0
[  622.250222][ T5786] usb 3-1: USB disconnect, device number 41
[  622.258790][  T978] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  622.259822][  T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  622.259878][  T978] usb 5-1: media controller created
[  622.262351][  T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  622.266539][ T5786] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  622.267114][ T5786] upd78f0730 3-1:129.252: device disconnected
[  622.281952][  T978] dvb-usb: bulk message failed: -22 (6/0)
[  622.282038][  T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  622.286183][  T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input71
[  622.290141][  T978] dvb-usb: schedule remote query interval to 150 msecs.
[  622.290162][  T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  622.487440][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  622.487477][   T10] dvb-usb: error while querying for an remote control event.
[  622.519711][T11154] dvb-usb: bulk message failed: -22 (2/0)
[  622.521360][   T10] usb 5-1: USB disconnect, device number 53
[  622.637920][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  622.859657][   T31] usb 2-1: new full-speed USB device number 54 using dummy_hcd
[  622.900632][T11168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.901089][T11168] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.902089][T11168] binder: 11150:11168 ioctl 4018620d 0 returned -22
[  622.909283][T11168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1567'.
[  622.946159][T11168] binder: 11150:11168 ioctl 8933 200000000040 returned -22
[  622.952765][T11168] binder: 11150:11168 ioctl 89f2 2000000002c0 returned -22
[  622.952990][T11168] binder: 11150:11168 ioctl 8933 200000000300 returned -22
[  622.953234][T11168] binder: 11150:11168 ioctl 89f2 2000000003c0 returned -22
[  622.953446][T11168] binder: 11150:11168 ioctl 8933 200000000400 returned -22
[  622.993232][T11168] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  623.016450][T11169] binder: 11150:11169 ioctl c0306201 0 returned -14
[  623.016771][T11169] binder: 11150:11169 ioctl 40044591 0 returned -22
[  623.141287][T11172] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1567'.
[  623.329832][   T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  623.329859][   T31] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  623.329911][   T31] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  623.329933][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.411348][   T31] usb 2-1: config 0 descriptor??
[  623.445319][   T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  623.445357][   T31] dvb-usb: bulk message failed: -22 (3/0)
[  623.467535][   T31] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  623.468503][   T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  623.468556][   T31] usb 2-1: media controller created
[  623.471043][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  623.492474][   T31] dvb-usb: bulk message failed: -22 (6/0)
[  623.492557][   T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  623.663832][T11159] dvb-usb: bulk message failed: -22 (2/0)
[  623.992145][   T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input72
[  623.995862][   T31] dvb-usb: schedule remote query interval to 150 msecs.
[  623.995884][   T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  624.061402][T11159] dvb-usb: bulk message failed: -22 (4/0)
[  624.071410][   T31] usb 2-1: USB disconnect, device number 54
[  624.589731][ T5786] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  624.655553][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  624.656224][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  624.799643][ T5786] usb 3-1: device descriptor read/64, error -71
[  624.813209][   T31] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  624.990115][T11184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1579'.
[  625.040609][ T5786] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  625.169814][ T5786] usb 3-1: device descriptor read/64, error -71
[  625.290417][ T5786] usb usb3-port1: attempt power cycle
[  625.311077][   T31] usb 1-1: USB disconnect, device number 50
[  625.379787][ T6016] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  625.399695][   T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  625.540688][ T6016] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  625.540716][ T6016] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  625.540772][ T6016] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  625.540795][ T6016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.587923][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  625.587939][   T10] usb 2-1: config 0 has no interfaces?
[  625.587956][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  625.587969][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.624280][   T10] usb 2-1: config 0 descriptor??
[  625.639614][ T5786] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  625.640333][ T6016] usb 4-1: config 0 descriptor??
[  625.648926][ T6016] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  625.648977][ T6016] dvb-usb: bulk message failed: -22 (3/0)
[  625.661215][ T5786] usb 3-1: device descriptor read/8, error -71
[  625.696699][ T6016] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  625.697696][ T6016] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  625.697730][ T6016] usb 4-1: media controller created
[  625.722602][ T6016] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  625.729331][ T6016] dvb-usb: bulk message failed: -22 (6/0)
[  625.729415][ T6016] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  625.767692][ T6016] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input73
[  625.775834][ T6016] dvb-usb: schedule remote query interval to 150 msecs.
[  625.775855][ T6016] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  625.869611][   T31] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  625.901595][T11188] dvb-usb: bulk message failed: -22 (2/0)
[  625.912193][ T5786] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  625.930010][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  625.930032][   T10] dvb-usb: error while querying for an remote control event.
[  625.930607][ T6016] usb 4-1: USB disconnect, device number 56
[  625.935361][ T5786] usb 3-1: device descriptor read/8, error -71
[  626.039971][ T5786] usb usb3-port1: unable to enumerate USB device
[  626.073056][   T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  626.073082][   T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  626.073116][   T31] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  626.073128][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.348735][   T31] usb 1-1: config 0 descriptor??
[  626.368053][   T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  626.368083][   T31] dvb-usb: bulk message failed: -22 (3/0)
[  626.410217][   T31] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  626.411077][   T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  626.411131][   T31] usb 1-1: media controller created
[  626.413496][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  626.463744][   T31] dvb-usb: bulk message failed: -22 (6/0)
[  626.463831][   T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  626.494082][   T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input74
[  626.553907][ T5867] usb 2-1: USB disconnect, device number 55
[  626.578500][   T31] dvb-usb: schedule remote query interval to 150 msecs.
[  626.578521][   T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  626.653708][ T6016] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  626.729648][ T5947] dvb-usb: bulk message failed: -22 (1/0)
[  626.729681][ T5947] dvb-usb: error while querying for an remote control event.
[  626.785028][   T31] usb 1-1: USB disconnect, device number 51
[  626.918962][   T31] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  627.179749][ T5798] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  627.444110][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'.
[  627.459757][ T6016] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  627.463771][ T5798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  627.463809][ T5798] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  627.463914][ T5798] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  627.463976][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.520210][ T5798] usb 3-1: config 0 descriptor??
[  627.569170][ T5798] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  627.569282][ T5798] dvb-usb: bulk message failed: -22 (3/0)
[  627.630996][ T5798] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  627.639216][ T5798] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  627.639396][ T5798] usb 3-1: media controller created
[  627.667105][ T5798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  627.784215][T11198] dvb-usb: bulk message failed: -22 (2/0)
[  628.401185][ T6016] usb 2-1: Using ep0 maxpacket: 8
[  628.538142][ T6016] usb 2-1: config 0 has an invalid interface number: 252 but max is 1
[  628.538362][ T6016] usb 2-1: config 0 has no interface number 1
[  628.544423][ T6016] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  628.544713][ T6016] usb 2-1: config 0 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  628.546057][ T6016] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  628.548685][ T6016] usb 2-1: config 0 interface 252 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  628.551721][ T6016] usb 2-1: config 0 interface 252 altsetting 128 has a duplicate endpoint with address 0x9, skipping
[  628.552345][ T6016] usb 2-1: config 0 interface 0 has no altsetting 0
[  628.552403][ T6016] usb 2-1: config 0 interface 252 has no altsetting 0
[  629.047112][ T6016] usb 2-1: Dual-Role OTG device on HNP port
[  629.047457][ T6016] usb 2-1: New USB device found, idVendor=1199, idProduct=9013, bcdDevice=42.b2
[  629.047483][ T6016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.047511][ T6016] usb 2-1: Product: Б
[  629.047525][ T6016] usb 2-1: Manufacturer: 옗恚쬈ᝇ驵諳箹陔䠲ཥ豗◢羍跌鉶ᢣ㲅뀸ꡩ⚺渟⿝삗댥㧢ꘫ鹑薽ꉝ巗輩羔拾㍋픖㒁ﭬ꣹兴Ⳙ쾨跎瑉䵵恽褣ꉴ뀮䃏侻撋࢞⳽맪嗵ྗ䁎娳ᩧ脵玼瀺챦芻箇
[  629.047552][ T6016] usb 2-1: SerialNumber: Ў
[  629.112992][ T6016] usb 2-1: config 0 descriptor??
[  629.120073][ T5798] dvb-usb: bulk message failed: -22 (6/0)
[  629.120171][ T5798] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  629.124032][ T5798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input75
[  629.220057][ T5798] dvb-usb: schedule remote query interval to 150 msecs.
[  629.220080][ T5798] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  629.448041][ T6016] usb 2-1: unknown number of interfaces: 2
[  629.469432][ T6016] usb 2-1: USB disconnect, device number 56
[  629.590014][ T5798] usb 3-1: USB disconnect, device number 46
[  629.749309][ T5798] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  629.789623][   T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  629.889633][ T5785] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[  629.940702][   T10] usb 1-1: Using ep0 maxpacket: 16
[  629.943226][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  629.943289][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  629.943331][   T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  629.943354][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.972722][   T10] usb 1-1: config 0 descriptor??
[  630.012104][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  630.042309][ T5785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  630.042344][ T5785] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  630.042396][ T5785] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  630.042419][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.087263][ T5785] usb 4-1: config 0 descriptor??
[  630.102818][ T5785] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  630.102870][ T5785] dvb-usb: bulk message failed: -22 (3/0)
[  630.107276][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  630.117425][ T5785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  630.117484][ T5785] usb 4-1: media controller created
[  630.150090][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  630.175146][ T5785] dvb-usb: bulk message failed: -22 (6/0)
[  630.175246][ T5785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  630.209906][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input76
[  630.213839][ T5785] dvb-usb: schedule remote query interval to 150 msecs.
[  630.213861][ T5785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  630.295542][T11221] dvb-usb: bulk message failed: -22 (2/0)
[  630.302071][T11221] dvb-usb: bulk message failed: -22 (4/0)
[  630.315407][ T5798] usb 4-1: USB disconnect, device number 57
[  630.401941][ T5798] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  630.939594][T11238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.940046][T11238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.941295][T11238] binder: 11216:11238 ioctl 4018620d 0 returned -22
[  630.983734][T11238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1593'.
[  630.984145][T11238] binder: 11216:11238 ioctl 8933 200000000040 returned -22
[  630.984386][T11238] binder: 11216:11238 ioctl 89f2 2000000002c0 returned -22
[  630.984573][T11238] binder: 11216:11238 ioctl 8933 200000000300 returned -22
[  630.984762][T11238] binder: 11216:11238 ioctl 89f2 2000000003c0 returned -22
[  630.984940][T11238] binder: 11216:11238 ioctl 8933 200000000400 returned -22
[  630.986186][T11238] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  631.369709][ T5814] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  631.580941][T11244] binder: 11216:11244 ioctl c0306201 0 returned -14
[  631.581162][T11244] binder: 11216:11244 ioctl 40044591 0 returned -22
[  631.665328][T11247] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1593'.
[  633.783538][ T5786] usb 1-1: USB disconnect, device number 52
[  634.169730][ T5785] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  634.199575][ T5867] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  634.279661][ T5786] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  634.322763][ T5785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  634.322790][ T5785] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  634.322841][ T5785] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  634.322867][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.329043][ T5785] usb 2-1: config 0 descriptor??
[  634.384417][ T5785] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  634.384468][ T5785] dvb-usb: bulk message failed: -22 (3/0)
[  634.402163][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  634.402188][ T5867] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  634.402239][ T5867] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  634.402263][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.407202][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  634.408167][ T5785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  634.408220][ T5785] usb 2-1: media controller created
[  634.413683][ T5867] usb 3-1: config 0 descriptor??
[  634.425729][ T5867] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  634.425779][ T5867] dvb-usb: bulk message failed: -22 (3/0)
[  634.439288][ T5867] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  634.440201][ T5867] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  634.440254][ T5867] usb 3-1: media controller created
[  634.446470][ T5867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  634.469537][ T5786] usb 1-1: Using ep0 maxpacket: 32
[  634.527938][ T5786] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  634.527967][ T5786] usb 1-1: config 0 has no interface number 0
[  634.528018][ T5786] usb 1-1: config 0 interface 184 has no altsetting 0
[  634.550172][ T5867] dvb-usb: bulk message failed: -22 (6/0)
[  634.550255][ T5867] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  634.567049][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  634.592086][T11259] dvb-usb: bulk message failed: -22 (2/0)
[  634.598981][ T5867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input77
[  634.637665][T11260] dvb-usb: bulk message failed: -22 (2/0)
[  634.643971][ T5786] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  634.644001][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.644022][ T5786] usb 1-1: Product: syz
[  634.644036][ T5786] usb 1-1: Manufacturer: syz
[  634.644051][ T5786] usb 1-1: SerialNumber: syz
[  634.676519][   T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  634.849607][   T10] usb 5-1: Using ep0 maxpacket: 8
[  634.853507][   T10] usb 5-1: config 0 has an invalid interface number: 252 but max is 1
[  634.853534][   T10] usb 5-1: config 0 has no interface number 1
[  634.853607][   T10] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  634.853634][   T10] usb 5-1: config 0 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  634.853657][   T10] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  634.853697][   T10] usb 5-1: config 0 interface 252 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  634.853719][   T10] usb 5-1: config 0 interface 252 altsetting 128 has a duplicate endpoint with address 0x9, skipping
[  634.853741][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  634.853759][   T10] usb 5-1: config 0 interface 252 has no altsetting 0
[  634.856777][   T10] usb 5-1: Dual-Role OTG device on HNP port
[  634.857110][   T10] usb 5-1: New USB device found, idVendor=1199, idProduct=9013, bcdDevice=42.b2
[  634.857134][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.857154][   T10] usb 5-1: Product: Б
[  634.857168][   T10] usb 5-1: Manufacturer: 옗恚쬈ᝇ驵諳箹陔䠲ཥ豗◢羍跌鉶ᢣ㲅뀸ꡩ⚺渟⿝삗댥㧢ꘫ鹑薽ꉝ巗輩羔拾㍋픖㒁ﭬ꣹兴Ⳙ쾨跎瑉䵵恽褣ꉴ뀮䃏侻撋࢞⳽맪嗵ྗ䁎娳ᩧ脵玼瀺챦芻箇
[  634.857195][   T10] usb 5-1: SerialNumber: Ў
[  635.257751][ T5867] dvb-usb: schedule remote query interval to 150 msecs.
[  635.257773][ T5867] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  635.287915][ T5785] dvb-usb: bulk message failed: -22 (6/0)
[  635.288000][ T5785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  635.393189][T11259] dvb-usb: bulk message failed: -22 (4/0)
[  635.436201][ T5798] dvb-usb: bulk message failed: -22 (1/0)
[  635.436221][ T5798] dvb-usb: error while querying for an remote control event.
[  635.460523][ T5867] usb 3-1: USB disconnect, device number 47
[  635.461513][   T10] usb 5-1: config 0 descriptor??
[  635.465620][ T5786] usb 1-1: config 0 descriptor??
[  635.504226][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input78
[  635.508589][ T5786] smsc75xx v1.0.0
[  635.738730][   T10] usb 5-1: unknown number of interfaces: 2
[  635.753883][   T10] usb 5-1: USB disconnect, device number 54
[  635.847063][ T5785] dvb-usb: schedule remote query interval to 150 msecs.
[  635.847297][ T5785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  635.999651][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  635.999686][   T10] dvb-usb: error while querying for an remote control event.
[  636.069729][ T5927] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  636.107921][ T5785] usb 2-1: USB disconnect, device number 57
[  636.110164][ T5867] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  636.131746][ T5786] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  636.131775][ T5786] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  636.133285][ T5786] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  636.133312][ T5786] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  636.133331][ T5786] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  636.133353][ T5786] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  636.133659][ T5786] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61
[  636.352041][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  636.352091][ T5927] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  636.352115][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.490841][ T5927] usb 4-1: config 0 descriptor??
[  636.864189][ T5785] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  637.047431][ T5927] aquacomputer_d5next 0003:0C70:F003.0032: reserved main item tag 0xd
[  637.047467][ T5927] aquacomputer_d5next 0003:0C70:F003.0032: item fetching failed at offset 3/5
[  637.048336][ T5927] aquacomputer_d5next 0003:0C70:F003.0032: probe with driver aquacomputer_d5next failed with error -22
[  637.472352][ T5785] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  637.508491][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.509234][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.766638][ T5927] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  637.859814][ T5786] usb 1-1: USB disconnect, device number 53
[  637.948855][ T5785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  637.948882][ T5785] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  637.948939][ T5785] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  637.949050][ T5785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.979632][ T5927] usb 5-1: Using ep0 maxpacket: 16
[  638.007233][ T5785] usb 2-1: config 0 descriptor??
[  638.010232][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  638.010292][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  638.010336][ T5927] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  638.010358][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.062912][ T5927] usb 5-1: config 0 descriptor??
[  638.076426][ T5927] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  638.094519][ T5785] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  638.094587][ T5785] dvb-usb: bulk message failed: -22 (3/0)
[  638.133853][ T5785] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  638.134841][ T5785] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  638.134897][ T5785] usb 2-1: media controller created
[  638.137263][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  638.180305][ T5785] dvb-usb: bulk message failed: -22 (6/0)
[  638.180392][ T5785] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  638.193431][ T5785] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input79
[  638.223192][ T5785] dvb-usb: schedule remote query interval to 150 msecs.
[  638.223224][ T5785] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  638.298819][ T5927] usb 2-1: USB disconnect, device number 58
[  638.650250][ T5785] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  638.851788][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  639.013318][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 166, changing to 11
[  639.013353][ T5785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9728, setting to 1024
[  639.013403][ T5785] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  639.013427][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.076180][ T5785] usb 3-1: config 0 descriptor??
[  639.077085][T11297] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  639.147647][ T5786] usb 4-1: USB disconnect, device number 58
[  639.222714][T11303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.223541][T11303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.225380][T11303] binder: 11287:11303 ioctl 4018620d 0 returned -22
[  639.254444][T11303] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1615'.
[  639.255211][T11303] binder: 11287:11303 ioctl 8933 200000000040 returned -22
[  639.255587][T11303] binder: 11287:11303 ioctl 89f2 2000000002c0 returned -22
[  639.255945][T11303] binder: 11287:11303 ioctl 8933 200000000300 returned -22
[  639.256379][T11303] binder: 11287:11303 ioctl 89f2 2000000003c0 returned -22
[  639.256696][T11303] binder: 11287:11303 ioctl 8933 200000000400 returned -22
[  639.259013][T11303] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  639.335657][T11305] binder: 11287:11305 ioctl c0306201 0 returned -14
[  639.335997][T11305] binder: 11287:11305 ioctl 40044591 0 returned -22
[  639.410246][T11303] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1615'.
[  639.449990][ T5927] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  639.609656][ T5927] usb 2-1: Using ep0 maxpacket: 16
[  639.612966][ T5927] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  639.612991][ T5927] usb 2-1: config 0 has no interface number 0
[  639.613098][ T5927] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  639.616164][ T5927] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  639.616487][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  639.616509][ T5927] usb 2-1: Product: syz
[  639.616524][ T5927] usb 2-1: SerialNumber: syz
[  639.694685][ T5927] usb 2-1: config 0 descriptor??
[  639.715714][ T5927] cm109 2-1:0.8: invalid payload size 208, expected 4
[  639.728754][ T5927] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input80
[  639.759784][ T5786] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  639.909927][ T5786] usb 4-1: Using ep0 maxpacket: 32
[  639.926004][ T5786] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  639.926033][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.024733][ T5786] usb 4-1: config 0 descriptor??
[  640.181816][    C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
[  640.182299][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.182553][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.182954][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.183193][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.183429][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.183740][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.184020][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.185025][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.185261][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.185552][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  640.185717][T11275] usb 2-1: USB disconnect, device number 59
[  640.185797][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  640.327087][ T5786] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  640.355145][ T5786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  640.356759][ T5786] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  640.356816][ T5786] usb 4-1: media controller created
[  640.439638][ T5927] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  640.537684][T11308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.538202][ T6016] usb 5-1: USB disconnect, device number 55
[  640.556062][T11308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.589848][ T5927] usb 1-1: Using ep0 maxpacket: 8
[  640.595553][ T5927] usb 1-1: config 0 has an invalid interface number: 252 but max is 1
[  640.595581][ T5927] usb 1-1: config 0 has no interface number 1
[  640.595704][ T5927] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  640.595730][ T5927] usb 1-1: config 0 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  640.595752][ T5927] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  640.595846][ T5927] usb 1-1: config 0 interface 252 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  640.595868][ T5927] usb 1-1: config 0 interface 252 altsetting 128 has a duplicate endpoint with address 0x9, skipping
[  640.595892][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0
[  640.595910][ T5927] usb 1-1: config 0 interface 252 has no altsetting 0
[  640.691380][ T5927] usb 1-1: Dual-Role OTG device on HNP port
[  640.691812][ T5927] usb 1-1: New USB device found, idVendor=1199, idProduct=9013, bcdDevice=42.b2
[  640.691837][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.691857][ T5927] usb 1-1: Product: Б
[  640.691872][ T5927] usb 1-1: Manufacturer: 옗恚쬈ᝇ驵諳箹陔䠲ཥ豗◢羍跌鉶ᢣ㲅뀸ꡩ⚺渟⿝삗댥㧢ꘫ鹑薽ꉝ巗輩羔拾㍋픖㒁ﭬ꣹兴Ⳙ쾨跎瑉䵵恽褣ꉴ뀮䃏侻撋࢞⳽맪嗵ྗ䁎娳ᩧ脵玼瀺챦芻箇
[  640.691951][ T5927] usb 1-1: SerialNumber: Ў
[  640.858712][T11275] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  640.877724][ T5927] usb 1-1: config 0 descriptor??
[  640.942896][ T5786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  641.571769][ T5785] usbhid 3-1:0.0: can't add hid device: -71
[  641.571893][ T5785] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  641.675664][ T5785] usb 3-1: USB disconnect, device number 48
[  641.691921][ T5786] az6027: usb out operation failed. (-71)
[  641.692332][ T5786] az6027: usb out operation failed. (-71)
[  641.692345][ T5786] stb0899_attach: Driver disabled by Kconfig
[  641.692355][ T5786] az6027: no front-end attached
[  641.692355][ T5786] 
[  641.724980][ T5786] az6027: usb out operation failed. (-71)
[  641.725000][ T5786] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  641.728014][ T5786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input81
[  641.756713][ T5927] usb 1-1: unknown number of interfaces: 2
[  641.768068][ T5786] dvb-usb: schedule remote query interval to 400 msecs.
[  641.768090][ T5786] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  641.789657][ T5786] usb 4-1: USB disconnect, device number 59
[  641.791711][ T5927] usb 1-1: USB disconnect, device number 54
[  641.828059][   T37] kauditd_printk_skb: 49 callbacks suppressed
[  641.828077][   T37] audit: type=1326 audit(1761827299.410:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  641.828375][   T37] audit: type=1326 audit(1761827299.410:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  641.829094][   T37] audit: type=1326 audit(1761827299.410:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  641.829428][   T37] audit: type=1326 audit(1761827299.410:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  641.924893][   T37] audit: type=1326 audit(1761827299.510:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  641.925402][   T37] audit: type=1326 audit(1761827299.510:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  641.925775][   T37] audit: type=1326 audit(1761827299.510:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  641.926095][   T37] audit: type=1326 audit(1761827299.510:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  641.926359][   T37] audit: type=1326 audit(1761827299.510:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  641.926778][   T37] audit: type=1326 audit(1761827299.510:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz.4.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc59da4efc9 code=0x7ffc0000
[  642.074549][T11275] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  642.232127][T11275] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  642.232177][T11275] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  642.232200][T11275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.237530][T11275] usb 2-1: config 0 descriptor??
[  642.682257][T11275] aquacomputer_d5next 0003:0C70:F003.0033: reserved main item tag 0xd
[  642.682296][T11275] aquacomputer_d5next 0003:0C70:F003.0033: item fetching failed at offset 3/5
[  642.683215][T11275] aquacomputer_d5next 0003:0C70:F003.0033: probe with driver aquacomputer_d5next failed with error -22
[  642.757587][ T5786] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  642.871006][T11319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.871430][T11319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.849748][ T5786] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  643.999565][ T5786] usb 1-1: Using ep0 maxpacket: 16
[  644.002084][ T5786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  644.002140][ T5786] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  644.002183][ T5786] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  644.002206][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.145408][ T5786] usb 1-1: config 0 descriptor??
[  644.555559][ T5786] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  644.601455][T11348] netlink: 'syz.3.1635': attribute type 4 has an invalid length.
[  644.639754][ T5867] usb 2-1: USB disconnect, device number 60
[  644.672108][T11353] netlink: 'syz.3.1635': attribute type 4 has an invalid length.
[  645.263552][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  645.263786][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  645.266370][T11364] binder: 11345:11364 ioctl 4018620d 0 returned -22
[  645.429970][T11365] binder: 11345:11365 ioctl 8933 200000000040 returned -22
[  645.430157][T11365] binder: 11345:11365 ioctl 89f2 2000000002c0 returned -22
[  645.431358][T11365] binder: 11345:11365 ioctl 8933 200000000300 returned -22
[  645.431632][T11365] binder: 11345:11365 ioctl 89f2 2000000003c0 returned -22
[  645.431809][T11365] binder: 11345:11365 ioctl 8933 200000000400 returned -22
[  645.549637][ T5927] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  645.636788][T11366] binder: 11345:11366 ioctl c0306201 0 returned -14
[  645.637017][T11366] binder: 11345:11366 ioctl 40044591 0 returned -22
[  645.705709][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  645.705735][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  645.705792][ T5927] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  645.705814][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.804710][ T5927] usb 2-1: config 0 descriptor??
[  645.818486][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  645.818536][ T5927] dvb-usb: bulk message failed: -22 (3/0)
[  645.852402][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  645.853344][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  645.853397][ T5927] usb 2-1: media controller created
[  645.855936][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  645.910003][ T5927] dvb-usb: bulk message failed: -22 (6/0)
[  645.910089][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  645.918317][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input82
[  645.950978][ T5927] dvb-usb: schedule remote query interval to 150 msecs.
[  645.951002][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  645.969683][T11365] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  645.989901][T11364] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1633'.
[  646.040487][T11363] dvb-usb: bulk message failed: -22 (2/0)
[  646.117194][ T5785] dvb-usb: bulk message failed: -22 (1/0)
[  646.117229][ T5785] dvb-usb: error while querying for an remote control event.
[  646.269675][ T5785] dvb-usb: bulk message failed: -22 (1/0)
[  646.269709][ T5785] dvb-usb: error while querying for an remote control event.
[  646.309603][ T5927] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  646.429631][T11275] dvb-usb: bulk message failed: -22 (1/0)
[  646.429677][T11275] dvb-usb: error while querying for an remote control event.
[  646.469901][ T5927] usb 3-1: Using ep0 maxpacket: 8
[  646.477855][ T5927] usb 3-1: config 0 has an invalid interface number: 252 but max is 1
[  646.477882][ T5927] usb 3-1: config 0 has no interface number 1
[  646.477945][ T5927] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  646.477971][ T5927] usb 3-1: config 0 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  646.477992][ T5927] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  646.478055][ T5927] usb 3-1: config 0 interface 252 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  646.478076][ T5927] usb 3-1: config 0 interface 252 altsetting 128 has a duplicate endpoint with address 0x9, skipping
[  646.478098][ T5927] usb 3-1: config 0 interface 0 has no altsetting 0
[  646.478116][ T5927] usb 3-1: config 0 interface 252 has no altsetting 0
[  646.502258][ T5927] usb 3-1: Dual-Role OTG device on HNP port
[  646.502597][ T5927] usb 3-1: New USB device found, idVendor=1199, idProduct=9013, bcdDevice=42.b2
[  646.502622][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.502642][ T5927] usb 3-1: Product: Б
[  646.502664][ T5927] usb 3-1: Manufacturer: 옗恚쬈ᝇ驵諳箹陔䠲ཥ豗◢羍跌鉶ᢣ㲅뀸ꡩ⚺渟⿝삗댥㧢ꘫ鹑薽ꉝ巗輩羔拾㍋픖㒁ﭬ꣹兴Ⳙ쾨跎瑉䵵恽褣ꉴ뀮䃏侻撋࢞⳽맪嗵ྗ䁎娳ᩧ脵玼瀺챦芻箇
[  646.502690][ T5927] usb 3-1: SerialNumber: Ў
[  646.630049][T11275] dvb-usb: bulk message failed: -22 (1/0)
[  646.630082][T11275] dvb-usb: error while querying for an remote control event.
[  646.683251][ T5927] usb 3-1: config 0 descriptor??
[  646.685613][T11371] mkiss: ax0: crc mode is auto.
[  646.789618][T11275] dvb-usb: bulk message failed: -22 (1/0)
[  646.789659][T11275] dvb-usb: error while querying for an remote control event.
[  646.984504][T11275] dvb-usb: bulk message failed: -22 (1/0)
[  646.984539][T11275] dvb-usb: error while querying for an remote control event.
[  646.987922][ T5927] usb 3-1: unknown number of interfaces: 2
[  647.019228][ T5927] usb 3-1: USB disconnect, device number 49
[  647.139664][ T5785] dvb-usb: bulk message failed: -22 (1/0)
[  647.139698][ T5785] dvb-usb: error while querying for an remote control event.
[  647.232307][T11363] dvb-usb: bulk message failed: -22 (4/0)
[  647.234113][ T5785] usb 2-1: USB disconnect, device number 61
[  647.351416][ T5785] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  647.638108][ T5785] usb 1-1: USB disconnect, device number 55
[  649.640212][ T5927] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  649.659675][ T5785] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  649.824890][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  649.824940][ T5927] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  649.824963][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.887782][ T5785] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  649.887841][ T5785] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  649.887865][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.896646][ T5785] usb 5-1: config 0 descriptor??
[  649.928924][ T5927] usb 2-1: config 0 descriptor??
[  650.069718][ T5786] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  650.281845][ T5786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  650.281872][ T5786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  650.282007][ T5786] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  650.282031][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.437609][ T5786] usb 4-1: config 0 descriptor??
[  650.461419][ T5786] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  650.461472][ T5786] dvb-usb: bulk message failed: -22 (3/0)
[  650.546349][ T5786] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  650.559397][ T5786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  650.559661][ T5786] usb 4-1: media controller created
[  650.568661][ T5786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  650.568992][ T5927] aquacomputer_d5next 0003:0C70:F003.0034: reserved main item tag 0xd
[  650.569196][ T5927] aquacomputer_d5next 0003:0C70:F003.0034: item fetching failed at offset 3/5
[  650.612481][ T5927] aquacomputer_d5next 0003:0C70:F003.0034: probe with driver aquacomputer_d5next failed with error -22
[  650.651351][T11401] dvb-usb: bulk message failed: -22 (2/0)
[  650.654463][ T5786] dvb-usb: bulk message failed: -22 (6/0)
[  650.656988][ T5786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  650.702394][ T5786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input83
[  650.726190][ T5786] dvb-usb: schedule remote query interval to 150 msecs.
[  650.726220][ T5786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  650.768508][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.768929][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.827420][T11401] dvb-usb: bulk message failed: -22 (4/0)
[  650.881401][ T5786] dvb-usb: bulk message failed: -22 (1/0)
[  650.881427][ T5786] dvb-usb: error while querying for an remote control event.
[  650.981326][ T5786] usb 4-1: USB disconnect, device number 60
[  651.329139][ T5786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  652.222739][ T5785] usb 5-1: USB disconnect, device number 56
[  652.468904][ T5785] usb 2-1: USB disconnect, device number 62
[  653.210064][ T5785] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  653.363941][ T5785] usb 2-1: Using ep0 maxpacket: 8
[  653.367801][ T5785] usb 2-1: config 0 has an invalid interface number: 252 but max is 1
[  653.367828][ T5785] usb 2-1: config 0 has no interface number 1
[  653.367891][ T5785] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  653.367917][ T5785] usb 2-1: config 0 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  653.367945][ T5785] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  653.367989][ T5785] usb 2-1: config 0 interface 252 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  653.368010][ T5785] usb 2-1: config 0 interface 252 altsetting 128 has a duplicate endpoint with address 0x9, skipping
[  653.368033][ T5785] usb 2-1: config 0 interface 0 has no altsetting 0
[  653.368051][ T5785] usb 2-1: config 0 interface 252 has no altsetting 0
[  653.488418][ T5785] usb 2-1: Dual-Role OTG device on HNP port
[  653.488738][ T5785] usb 2-1: New USB device found, idVendor=1199, idProduct=9013, bcdDevice=42.b2
[  653.488753][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.488764][ T5785] usb 2-1: Product: Б
[  653.488772][ T5785] usb 2-1: Manufacturer: 옗恚쬈ᝇ驵諳箹陔䠲ཥ豗◢羍跌鉶ᢣ㲅뀸ꡩ⚺渟⿝삗댥㧢ꘫ鹑薽ꉝ巗輩羔拾㍋픖㒁ﭬ꣹兴Ⳙ쾨跎瑉䵵恽褣ꉴ뀮䃏侻撋࢞⳽맪嗵ྗ䁎娳ᩧ脵玼瀺챦芻箇
[  653.488785][ T5785] usb 2-1: SerialNumber: Ў
[  653.561345][ T5785] usb 2-1: config 0 descriptor??
[  653.819958][ T5785] usb 2-1: unknown number of interfaces: 2
[  653.843008][ T5785] usb 2-1: USB disconnect, device number 63
[  653.969585][ T5927] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  654.119632][ T5927] usb 5-1: Using ep0 maxpacket: 16
[  654.125334][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  654.125391][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  654.125432][ T5927] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  654.125456][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.189715][ T5927] usb 5-1: config 0 descriptor??
[  654.206332][ T5927] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  655.106985][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.121201][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.122532][T11450] binder: 11429:11450 ioctl 4018620d 0 returned -22
[  655.126038][T11450] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1657'.
[  655.126526][T11450] binder: 11429:11450 ioctl 8933 200000000040 returned -22
[  655.126739][T11450] binder: 11429:11450 ioctl 89f2 2000000002c0 returned -22
[  655.126930][T11450] binder: 11429:11450 ioctl 8933 200000000300 returned -22
[  655.127122][T11450] binder: 11429:11450 ioctl 89f2 2000000003c0 returned -22
[  655.127391][T11450] binder: 11429:11450 ioctl 8933 200000000400 returned -22
[  655.242844][T11452] binder: 11429:11452 ioctl c0306201 0 returned -14
[  655.243065][T11452] binder: 11429:11452 ioctl 40044591 0 returned -22
[  655.331499][T11453] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1657'.
[  655.551968][T11450] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  656.946582][ T5785] usb 5-1: USB disconnect, device number 57
[  659.451155][ T5785] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  659.602248][ T5785] usb 1-1: Using ep0 maxpacket: 8
[  659.608499][ T5785] usb 1-1: config 0 has an invalid interface number: 252 but max is 1
[  659.608525][ T5785] usb 1-1: config 0 has no interface number 1
[  659.608592][ T5785] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  659.608618][ T5785] usb 1-1: config 0 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[  659.608639][ T5785] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  659.608678][ T5785] usb 1-1: config 0 interface 252 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  659.608700][ T5785] usb 1-1: config 0 interface 252 altsetting 128 has a duplicate endpoint with address 0x9, skipping
[  659.608723][ T5785] usb 1-1: config 0 interface 0 has no altsetting 0
[  659.608741][ T5785] usb 1-1: config 0 interface 252 has no altsetting 0
[  659.715406][ T5785] usb 1-1: Dual-Role OTG device on HNP port
[  659.715703][ T5785] usb 1-1: New USB device found, idVendor=1199, idProduct=9013, bcdDevice=42.b2
[  659.715718][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.715728][ T5785] usb 1-1: Product: Б
[  659.715736][ T5785] usb 1-1: Manufacturer: 옗恚쬈ᝇ驵諳箹陔䠲ཥ豗◢羍跌鉶ᢣ㲅뀸ꡩ⚺渟⿝삗댥㧢ꘫ鹑薽ꉝ巗輩羔拾㍋픖㒁ﭬ꣹兴Ⳙ쾨跎瑉䵵恽褣ꉴ뀮䃏侻撋࢞⳽맪嗵ྗ䁎娳ᩧ脵玼瀺챦芻箇
[  659.715749][ T5785] usb 1-1: SerialNumber: Ў
[  659.718799][ T5785] usb 1-1: config 0 descriptor??
[  660.078766][ T5785] usb 1-1: unknown number of interfaces: 2
[  660.108638][ T5785] usb 1-1: USB disconnect, device number 56
[  660.240219][T11490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1673'.
[  661.320216][ T5785] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  661.469721][ T5785] usb 1-1: Using ep0 maxpacket: 16
[  661.599767][ T5785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  661.599824][ T5785] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  661.599868][ T5785] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  661.599891][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.654059][ T5785] usb 1-1: config 0 descriptor??
[  661.665965][ T5785] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  661.949155][T11508] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  662.790684][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  662.791115][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  662.794260][T11516] binder: 11498:11516 ioctl 4018620d 0 returned -22
[  662.865506][T11516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1677'.
[  662.873695][T11516] binder: 11498:11516 ioctl 8933 200000000040 returned -22
[  662.873917][T11516] binder: 11498:11516 ioctl 89f2 2000000002c0 returned -22
[  662.874100][T11516] binder: 11498:11516 ioctl 8933 200000000300 returned -22
[  662.874283][T11516] binder: 11498:11516 ioctl 89f2 2000000003c0 returned -22
[  662.874454][T11516] binder: 11498:11516 ioctl 8933 200000000400 returned -22
[  662.904718][T11516] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  662.962686][T11518] binder: 11498:11518 ioctl c0306201 0 returned -14
[  662.962913][T11518] binder: 11498:11518 ioctl 40044591 0 returned -22
[  663.075488][T11516] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1677'.
[  663.461200][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'.
[  663.579729][ T5927] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  663.732940][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  663.732968][ T5927] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  663.733021][ T5927] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  663.733045][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.739276][ T5927] usb 2-1: config 0 descriptor??
[  663.789092][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  663.789144][ T5927] dvb-usb: bulk message failed: -22 (3/0)
[  663.806559][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  663.807724][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  663.807787][ T5927] usb 2-1: media controller created
[  663.838148][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  663.866375][ T5927] dvb-usb: bulk message failed: -22 (6/0)
[  663.866466][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  663.903200][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input84
[  663.909090][ T5927] dvb-usb: schedule remote query interval to 150 msecs.
[  663.909111][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  663.991058][T11525] dvb-usb: bulk message failed: -22 (4/0)
[  664.001122][ T5798] usb 2-1: USB disconnect, device number 64
[  664.196948][ T5798] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  664.804104][   T31] usb 1-1: USB disconnect, device number 57
[  666.201850][T11547] overlayfs: conflicting options: userxattr,metacopy=on
[  667.794742][T11565] FAULT_INJECTION: forcing a failure.
[  667.794742][T11565] name failslab, interval 1, probability 0, space 0, times 0
[  667.794777][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.0.1694 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  667.794798][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  667.794809][T11565] Call Trace:
[  667.794818][T11565]  <TASK>
[  667.794827][T11565]  dump_stack_lvl+0x189/0x250
[  667.794858][T11565]  ? __pfx____ratelimit+0x10/0x10
[  667.794880][T11565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  667.794905][T11565]  ? __pfx__printk+0x10/0x10
[  667.794934][T11565]  ? __pfx___might_resched+0x10/0x10
[  667.794954][T11565]  ? fs_reclaim_acquire+0x7d/0x100
[  667.794982][T11565]  should_fail_ex+0x46c/0x600
[  667.795012][T11565]  should_failslab+0xa8/0x100
[  667.795038][T11565]  __kvmalloc_node_noprof+0x169/0x920
[  667.795062][T11565]  ? nf_hook_entries_grow+0x281/0x720
[  667.795160][T11565]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  667.795189][T11565]  nf_hook_entries_grow+0x281/0x720
[  667.795206][T11565]  ? __pfx_call_rcu+0x10/0x10
[  667.795238][T11565]  __nf_register_net_hook+0x2c9/0x930
[  667.795270][T11565]  nf_register_net_hook+0xb2/0x190
[  667.795293][T11565]  nf_register_net_hooks+0x44/0x1b0
[  667.795316][T11565]  nf_ct_netns_do_get+0x3bf/0x5a0
[  667.795393][T11565]  ? nla_strcmp+0x106/0x140
[  667.795416][T11565]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[  667.795436][T11565]  ? nft_flowtable_lookup+0x134/0x140
[  667.795493][T11565]  nf_tables_newrule+0x1794/0x28a0
[  667.795533][T11565]  ? __pfx_nf_tables_newrule+0x10/0x10
[  667.795556][T11565]  ? nfnl_pernet+0x23/0x240
[  667.795616][T11565]  ? __nla_parse+0x40/0x60
[  667.795646][T11565]  nfnetlink_rcv+0x11e0/0x2590
[  667.795709][T11565]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  667.795753][T11565]  ? ref_tracker_free+0x61e/0x7c0
[  667.795808][T11565]  ? __netlink_deliver_tap+0x807/0x850
[  667.795874][T11565]  ? netlink_deliver_tap+0x2e/0x1b0
[  667.795913][T11565]  netlink_unicast+0x846/0xa10
[  667.795947][T11565]  ? __pfx_netlink_unicast+0x10/0x10
[  667.795974][T11565]  ? netlink_sendmsg+0x642/0xb30
[  667.795990][T11565]  ? skb_put+0x11b/0x210
[  667.796059][T11565]  netlink_sendmsg+0x805/0xb30
[  667.796077][T11565]  ? is_bpf_text_address+0x26/0x2b0
[  667.796132][T11565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  667.796161][T11565]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  667.796185][T11565]  ? __pfx_netlink_sendmsg+0x10/0x10
[  667.796205][T11565]  __sock_sendmsg+0x21c/0x270
[  667.796233][T11565]  ____sys_sendmsg+0x508/0x820
[  667.796261][T11565]  ? __pfx_____sys_sendmsg+0x10/0x10
[  667.796291][T11565]  ? import_iovec+0x74/0xa0
[  667.796315][T11565]  ___sys_sendmsg+0x21f/0x2a0
[  667.796339][T11565]  ? __pfx____sys_sendmsg+0x10/0x10
[  667.796407][T11565]  ? __fget_files+0x2a/0x420
[  667.796430][T11565]  ? __fget_files+0x3a6/0x420
[  667.796464][T11565]  __x64_sys_sendmsg+0x1a1/0x260
[  667.796488][T11565]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  667.796520][T11565]  ? __pfx_ksys_write+0x10/0x10
[  667.796546][T11565]  ? do_syscall_64+0xbe/0xfa0
[  667.796573][T11565]  do_syscall_64+0xfa/0xfa0
[  667.796598][T11565]  ? lockdep_hardirqs_on+0x9c/0x150
[  667.796620][T11565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.796639][T11565]  ? clear_bhb_loop+0x60/0xb0
[  667.796661][T11565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.796679][T11565] RIP: 0033:0x7f6daf82efc9
[  667.796697][T11565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  667.796713][T11565] RSP: 002b:00007f6dada96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  667.796734][T11565] RAX: ffffffffffffffda RBX: 00007f6dafa85fa0 RCX: 00007f6daf82efc9
[  667.796748][T11565] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003
[  667.796761][T11565] RBP: 00007f6dada96090 R08: 0000000000000000 R09: 0000000000000000
[  667.796773][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  667.796784][T11565] R13: 00007f6dafa86038 R14: 00007f6dafa85fa0 R15: 00007ffd23dc3148
[  667.796819][T11565]  </TASK>
[  668.426420][T11571] dlm: non-version read from control device 0
[  668.769602][ T5786] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  668.922222][ T5786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  668.922252][ T5786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  668.922312][ T5786] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  668.922341][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.973959][ T5786] usb 2-1: config 0 descriptor??
[  668.989279][ T5786] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  668.989332][ T5786] dvb-usb: bulk message failed: -22 (3/0)
[  669.042510][ T5786] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  669.054327][ T5786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  669.054393][ T5786] usb 2-1: media controller created
[  669.056967][ T5786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  669.106085][ T5786] dvb-usb: bulk message failed: -22 (6/0)
[  669.106166][ T5786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  669.133584][ T5786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input85
[  669.159936][ T5786] dvb-usb: schedule remote query interval to 150 msecs.
[  669.159967][ T5786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  669.320125][ T5786] dvb-usb: bulk message failed: -22 (1/0)
[  669.320163][ T5786] dvb-usb: error while querying for an remote control event.
[  669.482509][ T5927] dvb-usb: bulk message failed: -22 (1/0)
[  669.482541][ T5927] dvb-usb: error while querying for an remote control event.
[  669.645515][   T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  669.648017][ T5785] dvb-usb: bulk message failed: -22 (1/0)
[  669.648053][ T5785] dvb-usb: error while querying for an remote control event.
[  669.729873][ T5786] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  669.799701][ T5785] dvb-usb: bulk message failed: -22 (1/0)
[  669.799738][ T5785] dvb-usb: error while querying for an remote control event.
[  669.831869][ T5927] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  669.883789][ T5786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  669.883815][ T5786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  669.883868][ T5786] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  669.883891][ T5786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.889369][ T5786] usb 3-1: config 0 descriptor??
[  669.943576][ T5786] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  669.943576][   T31] usb 5-1: Using ep0 maxpacket: 16
[  669.943624][ T5786] dvb-usb: bulk message failed: -22 (3/0)
[  669.945628][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  669.945668][   T31] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  669.945688][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.959660][ T5785] dvb-usb: bulk message failed: -22 (1/0)
[  669.959694][ T5785] dvb-usb: error while querying for an remote control event.
[  670.009668][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  670.009719][ T5927] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  670.009743][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.087067][T11573] dvb-usb: bulk message failed: -22 (4/0)
[  670.119642][ T5785] dvb-usb: bulk message failed: -22 (1/0)
[  670.119676][ T5785] dvb-usb: error while querying for an remote control event.
[  670.150418][T11275] usb 2-1: USB disconnect, device number 65
[  670.210046][ T5786] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  670.216847][ T5786] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  670.216919][ T5786] usb 3-1: media controller created
[  670.240498][ T5786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  670.246503][ T5786] dvb-usb: bulk message failed: -22 (6/0)
[  670.246587][ T5786] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  670.267961][   T31] usb 5-1: config 0 descriptor??
[  670.278181][   T31] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  670.279640][T11585] FAULT_INJECTION: forcing a failure.
[  670.279640][T11585] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  670.279668][T11585] CPU: 1 UID: 0 PID: 11585 Comm: syz.0.1700 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  670.279685][T11585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  670.279695][T11585] Call Trace:
[  670.279702][T11585]  <TASK>
[  670.279710][T11585]  dump_stack_lvl+0x189/0x250
[  670.279739][T11585]  ? __pfx____ratelimit+0x10/0x10
[  670.279761][T11585]  ? __pfx_dump_stack_lvl+0x10/0x10
[  670.279785][T11585]  ? __pfx__printk+0x10/0x10
[  670.279804][T11585]  ? __might_fault+0xb0/0x130
[  670.279838][T11585]  should_fail_ex+0x46c/0x600
[  670.279868][T11585]  _copy_from_user+0x2d/0xb0
[  670.279901][T11585]  input_event_from_user+0xb2/0x280
[  670.280028][T11585]  ? __pfx_input_event_from_user+0x10/0x10
[  670.280049][T11585]  ? rt_spin_unlock+0x150/0x200
[  670.280072][T11585]  ? rt_spin_unlock+0x161/0x200
[  670.280093][T11585]  evdev_write+0x2a9/0x480
[  670.280145][T11585]  ? __pfx_evdev_write+0x10/0x10
[  670.280164][T11585]  ? do_raw_spin_lock+0x121/0x290
[  670.280191][T11585]  ? rw_verify_area+0x25b/0x4e0
[  670.280210][T11585]  ? __lock_acquire+0xab9/0xd20
[  670.280230][T11585]  ? __pfx_evdev_write+0x10/0x10
[  670.280253][T11585]  vfs_write+0x287/0xb40
[  670.280283][T11585]  ? __pfx_vfs_write+0x10/0x10
[  670.280305][T11585]  ? __fget_files+0x2a/0x420
[  670.280331][T11585]  ? __fget_files+0x2a/0x420
[  670.280351][T11585]  ? __fget_files+0x3a6/0x420
[  670.280372][T11585]  ? __fget_files+0x2a/0x420
[  670.280403][T11585]  ksys_write+0x14b/0x260
[  670.280426][T11585]  ? __pfx_ksys_write+0x10/0x10
[  670.280451][T11585]  ? do_syscall_64+0xbe/0xfa0
[  670.280475][T11585]  do_syscall_64+0xfa/0xfa0
[  670.280495][T11585]  ? lockdep_hardirqs_on+0x9c/0x150
[  670.280519][T11585]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.280537][T11585]  ? clear_bhb_loop+0x60/0xb0
[  670.280558][T11585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.280575][T11585] RIP: 0033:0x7f6daf82efc9
[  670.280598][T11585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  670.280613][T11585] RSP: 002b:00007f6dada96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  670.280632][T11585] RAX: ffffffffffffffda RBX: 00007f6dafa85fa0 RCX: 00007f6daf82efc9
[  670.280646][T11585] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  670.280657][T11585] RBP: 00007f6dada96090 R08: 0000000000000000 R09: 0000000000000000
[  670.280669][T11585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  670.280680][T11585] R13: 00007f6dafa86038 R14: 00007f6dafa85fa0 R15: 00007ffd23dc3148
[  670.280711][T11585]  </TASK>
[  670.381210][ T5927] usb 4-1: config 0 descriptor??
[  670.730087][ T5786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input86
[  670.761598][ T5786] dvb-usb: schedule remote query interval to 150 msecs.
[  670.761676][ T5786] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  670.788608][ T5786] usb 3-1: USB disconnect, device number 50
[  670.856959][T11275] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  670.963544][ T5927] aquacomputer_d5next 0003:0C70:F003.0035: reserved main item tag 0xd
[  670.963583][ T5927] aquacomputer_d5next 0003:0C70:F003.0035: item fetching failed at offset 3/5
[  670.964476][ T5927] aquacomputer_d5next 0003:0C70:F003.0035: probe with driver aquacomputer_d5next failed with error -22
[  671.295666][T11579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.296272][T11579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.464651][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.465921][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.467973][T11590] binder: 11574:11590 ioctl 4018620d 0 returned -22
[  671.470393][T11590] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1696'.
[  671.470741][T11590] binder: 11574:11590 ioctl 8933 200000000040 returned -22
[  671.470930][T11590] binder: 11574:11590 ioctl 89f2 2000000002c0 returned -22
[  671.471195][T11590] binder: 11574:11590 ioctl 8933 200000000300 returned -22
[  671.471386][T11590] binder: 11574:11590 ioctl 89f2 2000000003c0 returned -22
[  671.471595][T11590] binder: 11574:11590 ioctl 8933 200000000400 returned -22
[  671.472792][T11590] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  671.548760][T11591] binder: 11574:11591 ioctl c0306201 0 returned -14
[  671.549010][T11591] binder: 11574:11591 ioctl 40044591 0 returned -22
[  671.745778][ T5786] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  672.090267][T11275] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  672.134898][T11600] 9pnet_fd: Insufficient options for proto=fd
[  672.241413][T11275] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  672.241443][T11275] usb 1-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  672.241456][T11275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.244898][T11275] usb 1-1: config 0 descriptor??
[  672.702748][T11275] aquacomputer_d5next 0003:0C70:F003.0036: reserved main item tag 0xd
[  672.702786][T11275] aquacomputer_d5next 0003:0C70:F003.0036: item fetching failed at offset 3/5
[  672.703841][T11275] aquacomputer_d5next 0003:0C70:F003.0036: probe with driver aquacomputer_d5next failed with error -22
[  672.914566][  T978] usb 4-1: USB disconnect, device number 61
[  672.926754][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  672.926994][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.247985][T11275] usb 5-1: USB disconnect, device number 58
[  674.960808][T11275] usb 1-1: USB disconnect, device number 58
[  676.049650][  T978] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  676.206276][  T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  676.206303][  T978] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  676.206356][  T978] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  676.206379][  T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.261899][  T978] usb 4-1: config 0 descriptor??
[  676.277257][  T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  676.277308][  T978] dvb-usb: bulk message failed: -22 (3/0)
[  676.301167][  T978] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  676.302079][  T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  676.302136][  T978] usb 4-1: media controller created
[  676.304769][  T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  676.354801][  T978] dvb-usb: bulk message failed: -22 (6/0)
[  676.354887][  T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  676.374789][  T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input87
[  676.392698][  T978] dvb-usb: schedule remote query interval to 150 msecs.
[  676.392720][  T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  676.418082][T11275] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  676.511661][ T5798] usb 4-1: USB disconnect, device number 62
[  676.559720][T11275] usb 1-1: device descriptor read/64, error -71
[  676.799681][T11275] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  676.929626][T11275] usb 1-1: device descriptor read/64, error -71
[  677.039656][  T978] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  677.040589][T11275] usb usb1-port1: attempt power cycle
[  677.191916][  T978] usb 2-1: Using ep0 maxpacket: 32
[  677.196725][  T978] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  677.196742][  T978] usb 2-1: config 0 has no interface number 0
[  677.196769][  T978] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  677.198209][  T978] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  677.198237][  T978] usb 2-1: config 0 interface 12 has no altsetting 0
[  677.198730][ T5798] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  677.261822][  T978] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  677.261850][  T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.261871][  T978] usb 2-1: Product: syz
[  677.261884][  T978] usb 2-1: Manufacturer: syz
[  677.261898][  T978] usb 2-1: SerialNumber: syz
[  677.337832][  T978] usb 2-1: config 0 descriptor??
[  677.361602][  T978] f81534 2-1:0.12: unsupported endpoint max packet size
[  677.379579][T11275] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  677.400462][T11275] usb 1-1: device descriptor read/8, error -71
[  677.431709][T11638] FAULT_INJECTION: forcing a failure.
[  677.431709][T11638] name failslab, interval 1, probability 0, space 0, times 0
[  677.431743][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.3.1717 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  677.431765][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  677.431776][T11638] Call Trace:
[  677.431784][T11638]  <TASK>
[  677.431793][T11638]  dump_stack_lvl+0x189/0x250
[  677.431823][T11638]  ? __pfx____ratelimit+0x10/0x10
[  677.431845][T11638]  ? __pfx_dump_stack_lvl+0x10/0x10
[  677.431869][T11638]  ? __pfx__printk+0x10/0x10
[  677.431896][T11638]  ? __pfx___might_resched+0x10/0x10
[  677.431917][T11638]  ? fs_reclaim_acquire+0x7d/0x100
[  677.431944][T11638]  should_fail_ex+0x46c/0x600
[  677.431971][T11638]  ? __alloc_skb+0x112/0x2d0
[  677.431988][T11638]  should_failslab+0xa8/0x100
[  677.432014][T11638]  ? __alloc_skb+0x112/0x2d0
[  677.432029][T11638]  kmem_cache_alloc_node_noprof+0x78/0x6e0
[  677.432052][T11638]  ? netlink_autobind+0xdb/0x300
[  677.432076][T11638]  __alloc_skb+0x112/0x2d0
[  677.432098][T11638]  netlink_sendmsg+0x5c6/0xb30
[  677.432114][T11638]  ? is_bpf_text_address+0x26/0x2b0
[  677.432156][T11638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  677.432184][T11638]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  677.432205][T11638]  ? __pfx_netlink_sendmsg+0x10/0x10
[  677.432224][T11638]  __sock_sendmsg+0x21c/0x270
[  677.432251][T11638]  ____sys_sendmsg+0x508/0x820
[  677.432277][T11638]  ? __pfx_____sys_sendmsg+0x10/0x10
[  677.432307][T11638]  ? import_iovec+0x74/0xa0
[  677.432331][T11638]  ___sys_sendmsg+0x21f/0x2a0
[  677.432353][T11638]  ? __pfx____sys_sendmsg+0x10/0x10
[  677.432406][T11638]  ? __fget_files+0x2a/0x420
[  677.432425][T11638]  ? __fget_files+0x3a6/0x420
[  677.432458][T11638]  __x64_sys_sendmsg+0x1a1/0x260
[  677.432481][T11638]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  677.432511][T11638]  ? __pfx_ksys_write+0x10/0x10
[  677.432536][T11638]  ? do_syscall_64+0xbe/0xfa0
[  677.432561][T11638]  do_syscall_64+0xfa/0xfa0
[  677.432581][T11638]  ? lockdep_hardirqs_on+0x9c/0x150
[  677.432601][T11638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.432618][T11638]  ? clear_bhb_loop+0x60/0xb0
[  677.432638][T11638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.432654][T11638] RIP: 0033:0x7f95894cefc9
[  677.432670][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  677.432683][T11638] RSP: 002b:00007f958772e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  677.432703][T11638] RAX: ffffffffffffffda RBX: 00007f9589725fa0 RCX: 00007f95894cefc9
[  677.432716][T11638] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003
[  677.432727][T11638] RBP: 00007f958772e090 R08: 0000000000000000 R09: 0000000000000000
[  677.432739][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  677.432750][T11638] R13: 00007f9589726038 R14: 00007f9589725fa0 R15: 00007fffca971d38
[  677.432782][T11638]  </TASK>
[  677.555887][T11633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.556285][T11633] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.999666][T11275] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  678.020512][T11275] usb 1-1: device descriptor read/8, error -71
[  678.130120][T11275] usb usb1-port1: unable to enumerate USB device
[  678.442338][ T5927] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  678.483620][T11275] usb 2-1: USB disconnect, device number 66
[  678.636655][  T978] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  679.469598][ T5927] usb 5-1: Using ep0 maxpacket: 16
[  679.500797][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  679.500848][ T5927] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  679.500871][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.528726][ T5927] usb 5-1: config 0 descriptor??
[  679.537809][ T5927] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  679.672599][  T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  679.672632][  T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  679.672670][  T978] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[  679.672692][  T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.680902][  T978] usb 4-1: config 0 descriptor??
[  680.423417][  T978] stadia 0003:18D1:9400.0037: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.3-1/input0
[  680.423451][  T978] stadia 0003:18D1:9400.0037: no inputs found
[  680.423465][  T978] stadia 0003:18D1:9400.0037: force feedback init failed
[  680.620009][   T44] usb 1-1: new full-speed USB device number 63 using dummy_hcd
[  680.898589][  T978] usb 4-1: USB disconnect, device number 63
[  680.942030][   T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  680.942351][   T44] usb 1-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  680.942440][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.126361][T11669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.127144][T11669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.592312][ T5927] usb 5-1: USB disconnect, device number 59
[  681.751631][   T44] usb 1-1: config 0 descriptor??
[  682.026791][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'.
[  682.069695][  T978] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  682.099591][ T5927] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  683.496553][T11657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.496985][T11657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.504611][   T44] aquacomputer_d5next 0003:0C70:F003.0038: reserved main item tag 0xd
[  683.504648][   T44] aquacomputer_d5next 0003:0C70:F003.0038: item fetching failed at offset 3/5
[  683.505476][   T44] aquacomputer_d5next 0003:0C70:F003.0038: probe with driver aquacomputer_d5next failed with error -22
[  683.529624][  T978] usb 4-1: Using ep0 maxpacket: 32
[  683.568201][  T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.568259][  T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  683.568283][  T978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  683.595643][T11686] pimreg: entered allmulticast mode
[  683.634461][  T978] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7
[  683.634501][  T978] usb 4-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3
[  683.634521][  T978] usb 4-1: Product: syz
[  683.634536][  T978] usb 4-1: Manufacturer: syz
[  683.634550][  T978] usb 4-1: SerialNumber: syz
[  683.670582][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.670608][ T5927] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  683.670664][ T5927] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  683.670687][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.721556][ T5927] usb 5-1: config 0 descriptor??
[  683.724102][  T978] usb 4-1: config 0 descriptor??
[  683.728868][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  683.728911][ T5927] dvb-usb: bulk message failed: -22 (3/0)
[  683.762710][  T978] usb 4-1: no audio or video endpoints found
[  683.766978][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  683.767218][T11685] pimreg: left allmulticast mode
[  683.767907][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  683.767959][ T5927] usb 5-1: media controller created
[  683.807822][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  683.824421][ T5927] dvb-usb: bulk message failed: -22 (6/0)
[  683.824505][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  683.846776][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input88
[  683.862991][ T5927] dvb-usb: schedule remote query interval to 150 msecs.
[  683.863014][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  683.937064][ T5927] usb 5-1: USB disconnect, device number 60
[  684.770361][ T5786] usb 1-1: USB disconnect, device number 63
[  685.206003][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  685.386999][T11704] 9pnet_fd: Insufficient options for proto=fd
[  685.529671][ T5927] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  685.659589][ T5927] usb 5-1: device descriptor read/64, error -71
[  685.900416][ T5927] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  685.996048][  T978] usb 4-1: USB disconnect, device number 64
[  686.030119][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  686.030187][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  686.089752][ T5927] usb 5-1: device descriptor read/64, error -71
[  686.199959][ T5927] usb usb5-port1: attempt power cycle
[  686.227347][T11709] veth3: entered promiscuous mode
[  686.480869][  T978] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  686.539637][ T5927] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  686.818083][ T5927] usb 5-1: device descriptor read/8, error -71
[  686.856573][T11717] block nbd1: Dead connection, failed to find a fallback
[  686.856603][T11717] block nbd1: shutting down sockets
[  686.856623][T11717] blk_print_req_error: 3 callbacks suppressed
[  686.856637][T11717] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.856665][T11717] buffer_io_error: 3 callbacks suppressed
[  686.856684][T11717] Buffer I/O error on dev nbd1, logical block 0, async page read
[  686.857058][T11717] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.857088][T11717] Buffer I/O error on dev nbd1, logical block 1, async page read
[  686.857382][T11717] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.857411][T11717] Buffer I/O error on dev nbd1, logical block 2, async page read
[  686.857570][T11717] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.857604][T11717] Buffer I/O error on dev nbd1, logical block 3, async page read
[  686.857789][T11717] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.857819][T11717] Buffer I/O error on dev nbd1, logical block 0, async page read
[  686.857984][T11717] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.858013][T11717] Buffer I/O error on dev nbd1, logical block 1, async page read
[  686.858182][T11717] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.858211][T11717] Buffer I/O error on dev nbd1, logical block 2, async page read
[  686.858372][T11717] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.858402][T11717] Buffer I/O error on dev nbd1, logical block 3, async page read
[  686.858574][T11717] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.858602][T11717] Buffer I/O error on dev nbd1, logical block 0, async page read
[  686.858767][T11717] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  686.858796][T11717] Buffer I/O error on dev nbd1, logical block 1, async page read
[  686.878409][T11717] ldm_validate_partition_table(): Disk read failed.
[  686.882437][T11717] Dev nbd1: unable to read RDB block 0
[  686.886490][T11717]  nbd1: unable to read partition table
[  686.898767][T11717] block nbd1: Cannot use ioctl interface on a netlink controlled device.
[  686.976301][  T978] usb 4-1: Using ep0 maxpacket: 16
[  687.044102][  T978] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  687.044155][  T978] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  687.044178][  T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.203002][  T978] usb 4-1: config 0 descriptor??
[  687.209243][  T978] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  687.329604][ T5927] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  687.350467][ T5927] usb 5-1: device descriptor read/8, error -71
[  687.462583][ T5927] usb usb5-port1: unable to enumerate USB device
[  688.890330][T11721] block nbd0: Dead connection, failed to find a fallback
[  688.890347][T11721] block nbd0: shutting down sockets
[  688.892845][T11721] ldm_validate_partition_table(): Disk read failed.
[  688.906425][T11721] Dev nbd0: unable to read RDB block 0
[  688.908358][T11721]  nbd0: unable to read partition table
[  688.940092][T11721] block nbd0: Cannot use ioctl interface on a netlink controlled device.
[  688.941126][T11721] FAULT_INJECTION: forcing a failure.
[  688.941126][T11721] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  688.941147][T11721] CPU: 1 UID: 0 PID: 11721 Comm: syz.0.1739 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  688.941159][T11721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  688.941166][T11721] Call Trace:
[  688.941170][T11721]  <TASK>
[  688.941175][T11721]  dump_stack_lvl+0x189/0x250
[  688.941195][T11721]  ? __pfx____ratelimit+0x10/0x10
[  688.941208][T11721]  ? __pfx_dump_stack_lvl+0x10/0x10
[  688.941222][T11721]  ? __pfx__printk+0x10/0x10
[  688.941235][T11721]  ? __might_fault+0xb0/0x130
[  688.941254][T11721]  should_fail_ex+0x46c/0x600
[  688.941271][T11721]  _copy_from_user+0x2d/0xb0
[  688.941282][T11721]  ___sys_recvmsg+0x12e/0x510
[  688.941298][T11721]  ? __pfx____sys_recvmsg+0x10/0x10
[  688.941323][T11721]  ? __fget_files+0x3a6/0x420
[  688.941342][T11721]  __x64_sys_recvmsg+0x19e/0x260
[  688.941355][T11721]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  688.941372][T11721]  ? __pfx_ksys_write+0x10/0x10
[  688.941386][T11721]  ? do_syscall_64+0xbe/0xfa0
[  688.941406][T11721]  do_syscall_64+0xfa/0xfa0
[  688.941417][T11721]  ? lockdep_hardirqs_on+0x9c/0x150
[  688.941429][T11721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.941439][T11721]  ? clear_bhb_loop+0x60/0xb0
[  688.941451][T11721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.941460][T11721] RIP: 0033:0x7f6daf82efc9
[  688.941471][T11721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  688.941480][T11721] RSP: 002b:00007f6dada75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  688.941492][T11721] RAX: ffffffffffffffda RBX: 00007f6dafa86090 RCX: 00007f6daf82efc9
[  688.941500][T11721] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007
[  688.941506][T11721] RBP: 00007f6dada75090 R08: 0000000000000000 R09: 0000000000000000
[  688.941513][T11721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  688.941518][T11721] R13: 00007f6dafa86128 R14: 00007f6dafa86090 R15: 00007ffd23dc3148
[  688.941536][T11721]  </TASK>
[  689.197961][T11721] tty tty1: ldisc open failed (-12), clearing slot 0
[  689.509694][ T5927] usb 4-1: USB disconnect, device number 65
[  694.701136][   T44] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  695.153182][   T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  695.153245][   T44] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  695.153269][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.659140][   T44] usb 3-1: config 0 descriptor??
[  695.762975][   T44] usb 3-1: can't set config #0, error -71
[  695.799229][   T44] usb 3-1: USB disconnect, device number 51
[  695.869926][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'.
[  695.869962][T11752] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1749'.
[  695.879383][T11752] macvlan0: entered promiscuous mode
[  696.709660][T11752] batadv0: entered promiscuous mode
[  698.072845][T11752] hsr1: entered allmulticast mode
[  698.072869][T11752] macvlan0: entered allmulticast mode
[  698.072882][T11752] veth1_vlan: entered allmulticast mode
[  698.072932][T11752] batadv0: entered allmulticast mode
[  699.729575][   T31] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  700.095148][T11770] openvswitch: netlink: Invalid MD length 60718 for MD type 0
[  700.095191][T11770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  700.199606][   T31] usb 5-1: device descriptor read/64, error -71
[  700.309267][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.339182][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.368043][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.410467][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.440592][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.472344][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.504282][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.536717][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.568633][    C0] vkms_vblank_simulate: vblank timer overrun
[  700.972045][    C0] vkms_vblank_simulate: vblank timer overrun
[  701.004479][    C0] vkms_vblank_simulate: vblank timer overrun
[  701.036772][    C0] vkms_vblank_simulate: vblank timer overrun
[  701.068602][    C0] vkms_vblank_simulate: vblank timer overrun
[  701.299572][   T31] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  701.510435][    C0] vkms_vblank_simulate: vblank timer overrun
[  701.771898][    C0] vkms_vblank_simulate: vblank timer overrun
[  701.829570][   T31] usb 5-1: device descriptor read/64, error -71
[  701.911767][    C0] vkms_vblank_simulate: vblank timer overrun
[  701.942516][    C0] vkms_vblank_simulate: vblank timer overrun
[  701.972329][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.001185][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.006033][   T31] usb usb5-port1: attempt power cycle
[  702.016729][ T5927] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  702.061441][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.092359][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.122579][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.153728][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.187711][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.218084][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.266348][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.299862][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.330752][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.362991][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.396132][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.428608][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.460921][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.494036][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.525354][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.556558][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.589654][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.621558][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.653096][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.685526][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.718427][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.766735][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.800069][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.903192][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.977199][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.023227][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.056028][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.088071][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.120854][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.152703][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.216795][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.249255][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.281226][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.314551][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.346624][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.775618][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.807667][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.840516][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.872282][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.904386][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.938500][    C0] vkms_vblank_simulate: vblank timer overrun
[  703.970734][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.003071][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.036568][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.141567][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.174149][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.206073][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.292135][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.324467][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.356761][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.387708][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.447765][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.486082][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.518473][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.566891][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.585699][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.632693][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.665771][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.744568][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.776054][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.953620][    C0] vkms_vblank_simulate: vblank timer overrun
[  704.984992][    C0] vkms_vblank_simulate: vblank timer overrun
[  705.027800][    C0] vkms_vblank_simulate: vblank timer overrun
[  705.058001][    C0] vkms_vblank_simulate: vblank timer overrun
[  705.089602][    C0] vkms_vblank_simulate: vblank timer overrun
[  705.121577][    C0] vkms_vblank_simulate: vblank timer overrun
[  705.154832][    C0] vkms_vblank_simulate: vblank timer overrun
[  705.187316][    C0] vkms_vblank_simulate: vblank timer overrun
[  705.219515][    C0] vkms_vblank_simulate: vblank timer overrun
[  706.196525][ T5927] usb 2-1: device not accepting address 67, error -71
[  710.878365][ T5786] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  713.323032][   T31] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  714.659468][    C0] sched: DL replenish lagged too much
[  717.825321][   T31] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[  718.141970][   T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  718.142020][   T31] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[  718.142043][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.147459][   T31] usb 2-1: config 0 descriptor??
[  719.546955][   T31] aquacomputer_d5next 0003:0C70:F003.0039: reserved main item tag 0xd
[  719.546995][   T31] aquacomputer_d5next 0003:0C70:F003.0039: item fetching failed at offset 3/5
[  719.547883][   T31] aquacomputer_d5next 0003:0C70:F003.0039: probe with driver aquacomputer_d5next failed with error -22
[  722.084335][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.086596][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.846098][ T5947] usb 2-1: USB disconnect, device number 70
[  722.856936][T11810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  723.039773][T11810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  723.042718][T11810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  723.043987][T11810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  723.044813][T11810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  723.270042][T11810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  723.282773][T11810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  723.284221][T11810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  723.285309][T11810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  723.287023][T11810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  725.646437][ T5814] Bluetooth: hci5: command tx timeout
[  725.646994][ T5814] Bluetooth: hci2: command tx timeout
[  727.111136][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  727.126655][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  727.131369][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  727.141621][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  727.149954][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  727.699572][ T5814] Bluetooth: hci2: command tx timeout
[  727.699605][ T5814] Bluetooth: hci5: command tx timeout
[  729.614498][ T5814] Bluetooth: hci6: command tx timeout
[  729.618871][  T978] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  729.819973][ T5814] Bluetooth: hci5: command tx timeout
[  729.820008][ T5814] Bluetooth: hci2: command tx timeout
[  729.879573][  T978] usb 2-1: Using ep0 maxpacket: 16
[  730.238267][  T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  730.238297][  T978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  730.238342][  T978] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  730.238365][  T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.772635][  T978] usb 2-1: config 0 descriptor??
[  730.865100][  T978] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  731.928755][T11810] Bluetooth: hci6: command tx timeout
[  731.928793][T11810] Bluetooth: hci2: command tx timeout
[  731.928818][T11810] Bluetooth: hci5: command tx timeout
[  733.597499][ T5867] usb 2-1: USB disconnect, device number 71
[  734.084210][ T5814] Bluetooth: hci6: command tx timeout
[  736.169743][ T5814] Bluetooth: hci6: command tx timeout
[  736.479983][    C0] Dead loop on virtual device wlan0, fix it urgently!
[  741.334263][T11868] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1781'.
[  745.919635][ T5798] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  746.119508][ T5798] usb 2-1: Using ep0 maxpacket: 16
[  746.147950][ T5798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  746.147981][ T5798] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  746.148025][ T5798] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  746.148047][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.354092][ T5798] usb 2-1: config 0 descriptor??
[  747.174644][ T5798] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  747.455182][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  747.455255][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  747.599007][T11812] chnl_net:caif_netlink_parms(): no params data found
[  748.314717][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.315146][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.377037][T11885] binder: 11879:11885 ioctl 4018620d 0 returned -22
[  748.386820][T11885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1784'.
[  748.387256][T11885] binder: 11879:11885 ioctl 8933 200000000040 returned -22
[  748.387473][T11885] binder: 11879:11885 ioctl 89f2 2000000002c0 returned -22
[  748.387682][T11885] binder: 11879:11885 ioctl 8933 200000000300 returned -22
[  748.387887][T11885] binder: 11879:11885 ioctl 89f2 2000000003c0 returned -22
[  748.388069][T11885] binder: 11879:11885 ioctl 8933 200000000400 returned -22
[  748.535665][T11886] binder: 11879:11886 ioctl c0306201 0 returned -14
[  748.535898][T11886] binder: 11879:11886 ioctl 40044591 0 returned -22
[  748.565814][T11885] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  748.611345][T11887] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1784'.
[  751.095608][ T5798] usb 2-1: USB disconnect, device number 72
[  751.967730][T11825] chnl_net:caif_netlink_parms(): no params data found
[  753.074968][T11906] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1789'.
[  753.748829][T11808] chnl_net:caif_netlink_parms(): no params data found
[  762.349594][   T31] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  762.919621][   T31] usb 5-1: Using ep0 maxpacket: 16
[  763.007280][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  763.007313][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  763.007336][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  763.007379][   T31] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  763.007402][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.063545][   T31] usb 5-1: config 0 descriptor??
[  764.984473][T11933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.985275][T11933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  765.016339][T11933] binder: 11932:11933 ioctl 4018620d 0 returned -22
[  765.037468][T11933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1795'.
[  765.038885][T11933] binder: 11932:11933 ioctl 8933 200000000040 returned -22
[  765.040316][T11933] binder: 11932:11933 ioctl 89f2 2000000002c0 returned -22
[  765.283048][T11933] binder: 11932:11933 ioctl 8933 200000000300 returned -22
[  765.283661][T11933] binder: 11932:11933 ioctl 89f2 2000000003c0 returned -22
[  765.283873][T11933] binder: 11932:11933 ioctl 8933 200000000400 returned -22
[  765.391094][T11936] binder: 11932:11936 ioctl c0306201 0 returned -14
[  765.391322][T11936] binder: 11932:11936 ioctl 40044591 0 returned -22
[  765.445938][T11935] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1795'.
[  768.819617][T11812] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.819756][T11812] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.820324][T11812] bridge_slave_0: entered allmulticast mode
[  769.490400][T11812] bridge_slave_0: entered promiscuous mode
[  769.609825][   T31] usbhid 5-1:0.0: can't add hid device: -32
[  769.609960][   T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  769.693458][T11933] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  769.985744][T11810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  770.014436][T11810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  770.015982][T11810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  770.017246][T11810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  770.018778][T11810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  772.199795][ T5814] Bluetooth: hci1: command tx timeout
[  772.900734][T11812] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.900873][T11812] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.901149][T11812] bridge_slave_1: entered allmulticast mode
[  772.939800][T11812] bridge_slave_1: entered promiscuous mode
[  772.946852][ T5867] usb 5-1: USB disconnect, device number 69
[  774.279664][ T5814] Bluetooth: hci1: command tx timeout
[  775.688553][T11953] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1798'.
[  776.053726][T11951] ttynull ttynull: ldisc open failed (-12), clearing slot 0
[  776.329730][ T5814] Bluetooth: hci1: command tx timeout
[  777.005120][T11810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  777.030873][T11810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  777.037029][T11810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  777.054094][T11810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  777.066910][T11810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  777.890488][T11810] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  777.904079][T11810] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  777.924483][T11810] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  778.193270][T11810] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  778.232952][T11810] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  778.419714][T11810] Bluetooth: hci1: command tx timeout
[  778.902853][ T5947] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  779.210744][T11810] Bluetooth: hci3: command tx timeout
[  779.529697][ T5947] usb 5-1: Using ep0 maxpacket: 32
[  779.532607][ T5947] usb 5-1: unable to get BOS descriptor or descriptor too short
[  779.534360][ T5947] usb 5-1: config 1 interface 0 altsetting 199 endpoint 0x1 has invalid maxpacket 2047, setting to 1024
[  779.534400][ T5947] usb 5-1: config 1 interface 0 altsetting 199 bulk endpoint 0x1 has invalid maxpacket 1024
[  779.534424][ T5947] usb 5-1: config 1 interface 0 has no altsetting 0
[  779.537571][ T5947] usb 5-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40
[  779.537599][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.537619][ T5947] usb 5-1: Product: syz
[  779.537633][ T5947] usb 5-1: Manufacturer: syz
[  779.537646][ T5947] usb 5-1: SerialNumber: syz
[  779.669143][T11962] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  781.364150][ T5814] Bluetooth: hci7: command tx timeout
[  782.046036][ T5814] Bluetooth: hci3: command tx timeout
[  784.144771][T11810] Bluetooth: hci7: command tx timeout
[  784.674729][T11810] Bluetooth: hci3: command tx timeout
[  786.174237][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  786.191389][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  786.196369][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  786.225695][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  786.226651][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  786.439653][ T5814] Bluetooth: hci7: command tx timeout
[  786.789514][ T5814] Bluetooth: hci3: command tx timeout
[  788.340829][ T5814] Bluetooth: hci2: command tx timeout
[  788.489838][ T5814] Bluetooth: hci7: command tx timeout
[  790.444041][ T5814] Bluetooth: hci2: command tx timeout
[  792.489539][ T5814] Bluetooth: hci2: command tx timeout
[  794.569567][ T5814] Bluetooth: hci2: command tx timeout
[  798.005178][T11810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  798.026544][T11810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  798.028068][T11810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  798.029234][T11810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  798.112317][T11810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  800.259583][ T5814] Bluetooth: hci0: command tx timeout
[  802.351834][ T5814] Bluetooth: hci0: command tx timeout
[  804.413368][ T5814] Bluetooth: hci0: command tx timeout
[  806.510677][ T5814] Bluetooth: hci0: command tx timeout
[  808.895282][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  808.895348][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  822.009977][T11956] chnl_net:caif_netlink_parms(): no params data found
[  823.025197][T11939] chnl_net:caif_netlink_parms(): no params data found
[  824.738671][T11958] chnl_net:caif_netlink_parms(): no params data found
[  828.439879][T11967] chnl_net:caif_netlink_parms(): no params data found
[  828.448662][T11964] chnl_net:caif_netlink_parms(): no params data found
[  832.290104][T11956] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR
[  833.240525][T11810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  833.272670][T11810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  833.279862][T11810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  833.311446][T11810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  833.329788][T11810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  835.449612][T11810] Bluetooth: hci4: command tx timeout
[  836.331074][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  836.347519][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  836.348998][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  836.351998][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  836.352850][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  837.539533][ T5814] Bluetooth: hci4: command tx timeout
[  838.043923][T11958] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR
[  838.250940][T11810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  838.299864][T11810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  838.302724][T11810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  838.304004][T11810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  838.304848][T11810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  838.409785][ T5814] Bluetooth: hci1: command tx timeout
[  839.619640][ T5814] Bluetooth: hci4: command tx timeout
[  840.409601][ T5814] Bluetooth: hci5: command tx timeout
[  840.548752][T11810] Bluetooth: hci1: command tx timeout
[  841.729645][ T5814] Bluetooth: hci4: command tx timeout
[  842.621346][ T5814] Bluetooth: hci1: command tx timeout
[  843.226385][ T5814] Bluetooth: hci5: command tx timeout
[  843.945903][T11964] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[  844.252077][T11810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  844.259918][T11810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  844.269574][T11810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  844.280326][T11810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  844.659196][T11810] Bluetooth: hci1: command tx timeout
[  844.703683][T11810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  845.769641][T11810] Bluetooth: hci5: command tx timeout
[  846.849667][T11810] Bluetooth: hci3: command tx timeout
[  847.849825][T11810] Bluetooth: hci5: command tx timeout
[  848.889526][T11810] Bluetooth: hci3: command tx timeout
[  850.969559][T11810] Bluetooth: hci3: command tx timeout
[  853.049547][T11810] Bluetooth: hci3: command tx timeout
[  857.895129][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  858.065397][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  858.086031][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  858.105944][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  858.106847][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  860.329691][T11810] Bluetooth: hci2: command tx timeout
[  862.409515][T11810] Bluetooth: hci2: command tx timeout
[  864.489537][T11810] Bluetooth: hci2: command tx timeout
[  866.772350][ T5814] Bluetooth: hci2: command tx timeout
[  870.337227][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  870.337302][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  880.569707][   T38] INFO: task syz.0.1743:11737 blocked for more than 143 seconds.
[  880.569731][   T38]       Not tainted syzkaller #0
[  880.569742][   T38]       Blocked by coredump.
[  880.569749][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  880.569758][   T38] task:syz.0.1743      state:D stack:21608 pid:11737 tgid:11726 ppid:5800   task_flags:0x40044c flags:0x00080003
[  880.569805][   T38] Call Trace:
[  880.569813][   T38]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  880.569828][   T38]  __schedule+0x16f3/0x4c20
[  880.569871][   T38]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  880.569904][   T38]  ? __pfx___schedule+0x10/0x10
[  880.569952][   T38]  rt_mutex_schedule+0x77/0xf0
[  880.569972][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[  880.570006][   T38]  ? rt_mutex_slowlock_block+0x351/0x6d0
[  880.570037][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[  880.570060][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[  880.570080][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  880.570097][   T38]  ? __lock_acquire+0xab9/0xd20
[  880.570132][   T38]  ? rcu_barrier+0x4c/0x570
[  880.570167][   T38]  ? rcu_barrier+0x4c/0x570
[  880.570183][   T38]  mutex_lock_nested+0x16a/0x1d0
[  880.570200][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  880.570222][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  880.570318][   T38]  rcu_barrier+0x4c/0x570
[  880.570342][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  880.570364][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  880.570385][   T38]  netdev_run_todo+0x327/0xea0
[  880.570448][   T38]  ? __pfx_netif_state_change+0x10/0x10
[  880.570519][   T38]  ? __pfx_netdev_run_todo+0x10/0x10
[  880.570541][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[  880.570574][   T38]  ? netdev_state_change+0x1ca/0x220
[  880.570621][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  880.570643][   T38]  tun_chr_close+0x13f/0x1c0
[  880.570666][   T38]  __fput+0x45b/0xa80
[  880.570699][   T38]  task_work_run+0x1d4/0x260
[  880.570722][   T38]  ? __pfx_task_work_run+0x10/0x10
[  880.570740][   T38]  ? do_exit+0x6b0/0x2300
[  880.570765][   T38]  ? do_exit+0x6b0/0x2300
[  880.570794][   T38]  do_exit+0x6b5/0x2300
[  880.570818][   T38]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  880.570853][   T38]  ? __pfx_do_exit+0x10/0x10
[  880.570874][   T38]  ? rt_mutex_slowunlock+0x493/0x8a0
[  880.570893][   T38]  ? rt_spin_lock+0x1c1/0x3e0
[  880.570927][   T38]  do_group_exit+0x21c/0x2d0
[  880.570945][   T38]  ? rt_spin_unlock+0x161/0x200
[  880.570967][   T38]  get_signal+0x125d/0x1310
[  880.571013][   T38]  arch_do_signal_or_restart+0xa0/0x790
[  880.571044][   T38]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  880.571083][   T38]  ? exit_to_user_mode_loop+0x40/0x130
[  880.571111][   T38]  exit_to_user_mode_loop+0x72/0x130
[  880.571134][   T38]  do_syscall_64+0x2bd/0xfa0
[  880.571156][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[  880.571177][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.571197][   T38]  ? clear_bhb_loop+0x60/0xb0
[  880.571220][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  880.571238][   T38] RIP: 0033:0x7f6daf82efc9
[  880.571255][   T38] RSP: 002b:00007f6dada75038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  880.571276][   T38] RAX: 0000000000010106 RBX: 00007f6dafa86090 RCX: 00007f6daf82efc9
[  880.571290][   T38] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004
[  880.571303][   T38] RBP: 00007f6daf8b1f91 R08: 0000000000000000 R09: 0000000000000000
[  880.571316][   T38] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  880.571328][   T38] R13: 00007f6dafa86128 R14: 00007f6dafa86090 R15: 00007ffd23dc3148
[  880.571362][   T38]  </TASK>
[  880.571408][   T38] 
[  880.571408][   T38] Showing all locks held in the system:
[  880.571421][   T38] 4 locks held by kworker/u8:1/13:
[  880.571434][   T38] 6 locks held by ktimers/0/16:
[  880.571446][   T38] 5 locks held by ksoftirqd/1/30:
[  880.571458][   T38] 1 lock held by khungtaskd/38:
[  880.571468][   T38]  #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  880.571516][   T38] 3 locks held by kworker/u8:2/43:
[  880.571552][   T38] 2 locks held by getty/5554:
[  880.571562][   T38]  #0: ffff8880305a30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  880.571644][   T38]  #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400
[  880.571719][   T38] 4 locks held by kworker/1:2/5798:
[  880.571737][   T38] 2 locks held by kworker/u8:12/5966:
[  880.571750][   T38] 1 lock held by syz.1.1161/9843:
[  880.571760][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.571803][   T38] 1 lock held by syz.4.1265/10163:
[  880.571814][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.571858][   T38] 1 lock held by syz.0.1743/11737:
[  880.571868][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.571910][   T38] 1 lock held by syz.2.1754/11779:
[  880.571921][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.571962][   T38] 1 lock held by syz-executor/11808:
[  880.571974][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.572016][   T38] 1 lock held by syz-executor/11812:
[  880.572027][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.572080][   T38] 1 lock held by syz-executor/11825:
[  880.572091][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.572132][   T38] 1 lock held by syz-executor/11939:
[  880.572143][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.572185][   T38] 1 lock held by syz-executor/11956:
[  880.572197][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.572239][   T38] 1 lock held by syz-executor/11958:
[  880.572250][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.572292][   T38] 1 lock held by syz.4.1799/11962:
[  880.572303][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.572345][   T38] 1 lock held by syz-executor/11964:
[  880.572356][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.572398][   T38] 1 lock held by syz-executor/11967:
[  880.572409][   T38]  #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  880.572453][   T38] 2 locks held by syz-executor/11998:
[  880.572464][   T38]  #0: ffffffff8ed7ffe8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  880.572541][   T38]  #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80
[  880.572590][   T38] 2 locks held by syz-executor/12002:
[  880.572601][   T38] 2 locks held by syz-executor/12010:
[  880.572612][   T38]  #0: ffffffff8ed63e38 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  880.572658][   T38]  #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80
[  880.572706][   T38] 2 locks held by syz-executor/12015:
[  880.572717][   T38]  #0: ffffffff8ed64d60 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  880.572762][   T38]  #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80
[  880.572809][   T38] 6 locks held by kworker/u8:12/12029:
[  880.572820][   T38] 
[  880.572826][   T38] =============================================
[  880.572826][   T38] 
[  880.572836][   T38] NMI backtrace for cpu 1
[  880.572850][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  880.572871][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  880.572882][   T38] Call Trace:
[  880.572890][   T38]  <TASK>
[  880.572898][   T38]  dump_stack_lvl+0x189/0x250
[  880.572927][   T38]  ? __pfx_dump_stack_lvl+0x10/0x10
[  880.572951][   T38]  ? __pfx__printk+0x10/0x10
[  880.572984][   T38]  nmi_cpu_backtrace+0x39e/0x3d0
[  880.573007][   T38]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  880.573034][   T38]  ? __pfx__printk+0x10/0x10
[  880.573060][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  880.573083][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  880.573104][   T38]  watchdog+0xf60/0xfa0
[  880.573133][   T38]  ? watchdog+0x1e2/0xfa0
[  880.573162][   T38]  kthread+0x711/0x8a0
[  880.573189][   T38]  ? __pfx_watchdog+0x10/0x10
[  880.573211][   T38]  ? __pfx_kthread+0x10/0x10
[  880.573232][   T38]  ? rt_spin_unlock+0x150/0x200
[  880.573254][   T38]  ? rt_spin_unlock+0x161/0x200
[  880.573271][   T38]  ? __pfx_kthread+0x10/0x10
[  880.573295][   T38]  ret_from_fork+0x4bc/0x870
[  880.573319][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  880.573347][   T38]  ? __switch_to_asm+0x39/0x70
[  880.573364][   T38]  ? __switch_to_asm+0x33/0x70
[  880.573380][   T38]  ? __pfx_kthread+0x10/0x10
[  880.573405][   T38]  ret_from_fork_asm+0x1a/0x30
[  880.573441][   T38]  </TASK>
[  880.573448][   T38] Sending NMI from CPU 1 to CPUs 0:
[  880.573474][    C0] NMI backtrace for cpu 0
[  880.573488][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  880.573507][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  880.573516][    C0] RIP: 0010:__lock_acquire+0x50c/0xd20
[  880.573538][    C0] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 94 ed 0d 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 e3 4a 92 eb 40 83 3d 3b 7d
[  880.573551][    C0] RSP: 0018:ffffc900001576a0 EFLAGS: 00000003
[  880.573565][    C0] RAX: 000000000000000b RBX: 0000000000000001 RCX: 0000000000000002
[  880.573576][    C0] RDX: 0000000000000003 RSI: 0000000000000005 RDI: ffff88801b2cda00
[  880.573587][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ac28b41
[  880.573597][    C0] R10: 0000000000000000 R11: fffffbfff1dac52f R12: 0000000000000003
[  880.573608][    C0] R13: 0000000000000001 R14: ffff88801b2ce5b0 R15: ffff88801b2ce5a8
[  880.573619][    C0] FS:  0000000000000000(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000
[  880.573633][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  880.573644][    C0] CR2: 00007f45fc577c8a CR3: 000000000d3a6000 CR4: 00000000003526f0
[  880.573659][    C0] Call Trace:
[  880.573666][    C0]  <TASK>
[  880.573676][    C0]  reacquire_held_locks+0x127/0x1d0
[  880.573697][    C0]  ? rt_spin_lock+0x1c1/0x3e0
[  880.573714][    C0]  lock_release+0x1b4/0x3e0
[  880.573733][    C0]  ? process_backlog+0x505/0x900
[  880.573755][    C0]  rt_spin_unlock+0x29/0x200
[  880.573802][    C0]  process_backlog+0x505/0x900
[  880.573826][    C0]  __napi_poll+0xb6/0x540
[  880.573847][    C0]  net_rx_action+0x5f7/0xda0
[  880.573866][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  880.573884][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  880.573907][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  880.573940][    C0]  handle_softirqs+0x22f/0x710
[  880.573962][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  880.573984][    C0]  run_ktimerd+0xcf/0x190
[  880.574002][    C0]  ? __pfx_run_ktimerd+0x10/0x10
[  880.574024][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  880.574040][    C0]  smpboot_thread_fn+0x542/0xa60
[  880.574058][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  880.574079][    C0]  kthread+0x711/0x8a0
[  880.574099][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  880.574117][    C0]  ? __pfx_kthread+0x10/0x10
[  880.574135][    C0]  ? rt_spin_unlock+0x150/0x200
[  880.574152][    C0]  ? rt_spin_unlock+0x161/0x200
[  880.574166][    C0]  ? __pfx_kthread+0x10/0x10
[  880.574185][    C0]  ret_from_fork+0x4bc/0x870
[  880.574203][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  880.574222][    C0]  ? __switch_to_asm+0x39/0x70
[  880.574236][    C0]  ? __switch_to_asm+0x33/0x70
[  880.574251][    C0]  ? __pfx_kthread+0x10/0x10
[  880.574270][    C0]  ret_from_fork_asm+0x1a/0x30
[  880.574292][    C0]  </TASK>
[  884.619858][T11998] chnl_net:caif_netlink_parms(): no params data found