last executing test programs:

6m46.09342671s ago: executing program 3 (id=724):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "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"})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="f081550100a000000f0100180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f20c035f70000000f22c067420f01c3460f79c20cb8c087678eef66ba0ced45c194710a00000005c68244bcae0090", 0x59}], 0x1, 0x1b, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x9e2}], 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) (async)
r8 = dup3(r1, r0, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="04d08a395de3fb4293c204069e995155c29598a2a49682b4f46130b3e81da27515428d53e8cf823c81b9a83296e39842e0907296f83f8673235590f9f8f761e0c806e9d5e838c5f95b6de3ff79373058f0697948d9d7a0f1e60932ecf45617426db882c8521f554a2a2933cdd34b48fae045f2711a019b802600512f60c332fd14f54e39e4335a310e9be351c6e7ec705fa0764af634d5e5e894e7cfed2dcafa3ee2dea4cb7f775b64dd7093e34777d5e146599df52bff6a16e6bb5f79196ba1e2"], 0x28}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfd64, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m44.284757423s ago: executing program 3 (id=729):
unshare(0x6a040000)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010101}}]}, 0x50}}, 0x20090)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
io_setup(0x1, &(0x7f00000004c0)=<r2=>0x0)
io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

6m43.800035851s ago: executing program 3 (id=733):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000))

6m43.691278806s ago: executing program 3 (id=734):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4})
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setuid(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r5, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054)
mkdir(&(0x7f0000000040)='./file1\x00', 0x120)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2020d7, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x8, 0x33424752, 0x2, @stepwise={0x7fffffff, 0x1, 0x5, 0x7, 0x6, 0x80000000}})
fcntl$setlease(r6, 0x400, 0x0)

6m43.457570756s ago: executing program 3 (id=735):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}, 0x0, 0x0, 0x0}, &(0x7f0000000980)={0x84, &(0x7f0000000280)={0x40, 0xe, 0x2d, "872c51aeb0d83b5364b9b41af1fb7597dc126ccb63c3cc85cee6da8c5692bedf28890038ac8d79cc3280ff18a0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x40, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xc, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="402345000000451161639c545d2ce9daa7602630c686377369efa824c3379300000000b1d2363b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

6m43.031997136s ago: executing program 3 (id=737):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x0)
ioctl$NBD_DISCONNECT(r0, 0xab08)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x6, 0x0, &(0x7f0000000080))
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0))
r3 = eventfd2(0x6, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000480)={0x0, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
mount(&(0x7f00000014c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='vxfs\x00', 0x0, 0x0)

6m42.773508167s ago: executing program 32 (id=737):
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x0)
ioctl$NBD_DISCONNECT(r0, 0xab08)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x200000000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_opts(r2, 0x0, 0x6, 0x0, &(0x7f0000000080))
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0))
r3 = eventfd2(0x6, 0x80001)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000480)={0x0, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
mount(&(0x7f00000014c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='vxfs\x00', 0x0, 0x0)

4m55.308884433s ago: executing program 2 (id=1226):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa)

4m55.191519513s ago: executing program 2 (id=1227):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x81, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb0180c200000386dd6d002000006488ff00000000000000000000000000000000ff020000000000000000ff00000000014f194e20006490"], 0x9e)

4m54.816261674s ago: executing program 2 (id=1229):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000000)={0x0, {0x3, 0xfffffc00}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="580000000271a71663ff000000000000000000000c000780050015002c00000005000100060000000505"], 0x58}}, 0x800)

4m54.571928888s ago: executing program 2 (id=1230):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc038563b, &(0x7f0000000000)={0x5, 0x0, 0x1014})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write(r2, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5)
socket$netlink(0x10, 0x3, 0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x7c}}, 0x4814)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f616400240002800800044000005d5608000340000000b9080001400000000a08000240000000000900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000400)=0xa)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000880))
syz_usb_control_io$hid(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x33af27280d59c746)
mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f00000000c0)='uid=1\x00nk]e\t\xee\x00\xb5\x91[!\xb1\xe0\xaf\xff\x01T_zf\xd9\xd8\xca\x13\x05\xdb\xddA\xcb\xa1\x03\x03\xd0\xf9ds\x80@\xef\xce<\x8b\xd8|\x85U\xa7\xb3;^U*\x16\xa8\xb4S L\xd3\x8b \x14\x8a\xf6\xf9\x95\x8b*qy4J\xf4\\\xe2\xa5\x04U\xfd\x02G\xa9\x8fD[\xe5\xafE@\xa2\x9e3\x1a`\xa9\xe4\xae\xd49k\xc2\xfc\xadL\xe6EIe\xd4\xea\xed\xa3\b~\xce\x8a\xec\xb3\x89N\x8e=\x12\xc2\"\xf8&C\x93\xd4\x99\xf0')
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x0}, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x40000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r7 = openat$comedi(0xffffff9c, &(0x7f00000001c0)='/dev/comedi2\x00', 0x4c2240, 0x0)
ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000080)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})
umount2(&(0x7f0000000040)='./file0\x00', 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x3, 0x9, 0x6, 0x3}, 'syz0\x00', 0x3b})
syz_open_dev$char_usb(0xc, 0xb4, 0x3)

4m51.457693605s ago: executing program 2 (id=1243):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$video4linux(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4040040)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
close(0xffffffffffffffff)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

4m51.233910616s ago: executing program 2 (id=1244):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07402abd7000000000002d"], 0x14}}, 0x0)
r3 = dup(r0)
mmap(&(0x7f00009fd000/0x4000)=nil, 0x4000, 0x1000006, 0x28011, r3, 0xb8b01000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r4 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[])
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/65)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0xfffffffc, 0x2, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0xb2, @tick=0xa, 0x2, {0xfd}, 0x0, 0x2})
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
madvise(&(0x7f00003fe000/0x2000)=nil, 0x2000, 0x11)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r9=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x202, 0x80000000, 0x9, r9}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={r9, @in={{0x2, 0x4e22, @loopback}}, 0x0, 0x9cf}, &(0x7f0000000040)=0x90)
syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)

4m51.0572199s ago: executing program 33 (id=1244):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="07402abd7000000000002d"], 0x14}}, 0x0)
r3 = dup(r0)
mmap(&(0x7f00009fd000/0x4000)=nil, 0x4000, 0x1000006, 0x28011, r3, 0xb8b01000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r4 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[])
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/65)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0xfffffffc, 0x2, 0x0, 'queue1\x00'})
write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0xb2, @tick=0xa, 0x2, {0xfd}, 0x0, 0x2})
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
madvise(&(0x7f00003fe000/0x2000)=nil, 0x2000, 0x11)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r9=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x202, 0x80000000, 0x9, r9}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000240)={r9, @in={{0x2, 0x4e22, @loopback}}, 0x0, 0x9cf}, &(0x7f0000000040)=0x90)
syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0)

2m26.702773151s ago: executing program 4 (id=1991):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r4, 0x0, r1, 0x0, 0x20000000000002, 0x2)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x14, 0xffffffb9, 0x1a}, 0x9c)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)

2m25.776044598s ago: executing program 4 (id=1992):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d00eec0e940fd322ed3d4f526341462e89a340a781fceb4d740d4e1dd651463317480d5fc86", 0x4a}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/161, 0xa1}], 0x1}, 0x3}], 0x1, 0x10020, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_settime(r2, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080))
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00')
r4 = gettid()
timer_create(0x7, &(0x7f0000000780)={0x0, 0x3f, 0x4, @tid=r4}, &(0x7f0000000000))
r5 = gettid()
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)=<r6=>0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000940)={0x3bf, 0xfffffffb, {<r7=>0xffffffffffffffff}, {0xee01}, 0x0, 0x7})
r8 = getpid()
syz_pidfd_open(r8, 0x0)
r9 = gettid()
syz_clone3(&(0x7f0000000c80)={0x88a000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000006c0), {0x17}, &(0x7f0000000a00)=""/207, 0xcf, &(0x7f0000000c00)=""/115, &(0x7f0000000b00)=[r4, r5, 0x0, r6, r7, r8, r9, 0x0], 0x8, {r3}}, 0x58)
exit(0xa1)
read$FUSE(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x23, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e22, 0x3, 'wrr\x00', 0x11, 0xa, 0xe}, {@multicast1, 0x4e21, 0x2000, 0xffffffff, 0x4, 0xffffffff}}, 0x44)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

2m24.868713291s ago: executing program 4 (id=1995):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x111000, 0x0)
pidfd_send_signal(r0, 0x11, 0x0, 0x2)

2m24.749635965s ago: executing program 4 (id=1996):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100020592020881060500c0560102030109021b0001070340f20904fc08010a"], &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x3ab1019, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000020a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xc4}}, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x5d00, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getgroups(0x5, &(0x7f0000000240)=[<r3=>0xee01, 0x0, 0xee00, 0x0, 0x0])
fchown(r1, r2, r3)
open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec0102030109022400010000000009042300020070400009058a03080004030e09050e03"], 0x0)

2m23.261614414s ago: executing program 4 (id=1999):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
syz_clone(0x202000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendto$inet6(r2, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b)

2m22.964500959s ago: executing program 4 (id=2000):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r4, 0x0, r1, 0x0, 0x20000000000002, 0x2)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x14, 0xffffffb9, 0x1a}, 0x9c)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)

2m22.573276332s ago: executing program 34 (id=2000):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r4, 0x0, r1, 0x0, 0x20000000000002, 0x2)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x14, 0xffffffb9, 0x1a}, 0x9c)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1)

4.236522022s ago: executing program 1 (id=2659):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x48)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000180)={{0x4}, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r0, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x6e7455e64848a46d, 0x0, 0x0, {0x3, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x20000010)

4.124096975s ago: executing program 1 (id=2661):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0xc00)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x62, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0xfff5, 0x9, 0x1, {0x22, 0xae3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x55, 0x4, 0x6}}}}}]}}]}}, 0x0)

2.411367204s ago: executing program 1 (id=2672):
syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0x7, 0x1000, 0x3, &(0x7f00000000c0)="ac56fd"}, {0x9, 0x2001, 0x3, &(0x7f0000000340)="1ea0c7"}, {0x8, 0x3001, 0x0, 0x0}], 0x3})

2.00695957s ago: executing program 0 (id=2679):
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f00000000c0)='!', 0xb7f40, 0x3000000000000000}])
dup3(r1, r0, 0x0)

1.739546137s ago: executing program 6 (id=2682):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4e0cdd70e9af79ce, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

1.627046826s ago: executing program 6 (id=2683):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)={0x79, 0x0, 0x726})
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xd6, 0xaf, 0x16, 0x20, 0x6e1, 0x709, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc9, 0x2, 0x0, 0x6e, 0xe2, 0x6b}}]}}]}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
sendmmsg$unix(r1, &(0x7f00000032c0)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x1, 0x6880)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="32e55d35"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0xffffffffffffffff})
dup3(r4, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.028763827s ago: executing program 1 (id=2684):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x68, r2, 0x101, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x3, 0x2, 0x0, {0x8000000000000000, 0x451, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x3, 0xf}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x0, 0x3, 0x0, {0x7ff, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x7fff, 0xf}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

990.469012ms ago: executing program 0 (id=2685):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40)

949.916665ms ago: executing program 1 (id=2686):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [<r5=>0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r5})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0], [0xffffffff], [], [0xfffffffffffffffc]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r6})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000"])
fstat(0xffffffffffffffff, &(0x7f0000000200))
bind$inet(0xffffffffffffffff, 0x0, 0x0)

908.225214ms ago: executing program 0 (id=2687):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000003e00000000000000feffffff11000000"]}, 0x108)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved})
prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x2, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x40000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r5)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000003880)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="d54d2bbd7000fcdbdff91800000018003080140001800500020001000000080001000100000008000300", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x40000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0)
ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ac, 0x4})
ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000080)={0x1, 0x0, 0xce})

881.91548ms ago: executing program 1 (id=2688):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b24, 0x0)

694.834094ms ago: executing program 0 (id=2689):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000100)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
lseek(r0, 0x3, 0x0)

603.768749ms ago: executing program 0 (id=2691):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x111a01, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0x9, 0x7ff, 0x0, 0x7ff}, 0xa, [0xeeb5, 0x7, 0x80000001, 0x1, 0x3, 0x401, 0x1, 0x0, 0x1, 0x4, 0xc30, 0x0, 0x4d, 0x2, 0x2, 0x9, 0x1, 0x7, 0x6, 0x2829, 0xe2e, 0x6, 0x82a, 0x5, 0x6, 0x9, 0x5, 0x3, 0x9, 0x4, 0x2, 0xd10, 0x4, 0xb, 0x7f, 0x3, 0x1, 0xffff, 0x5, 0xd45, 0x1d00, 0x8, 0x5, 0x5, 0x0, 0x4, 0x7fffffff, 0x9, 0x80000001, 0x9, 0x2e, 0x3, 0x3, 0x1, 0x4, 0x3, 0x8, 0x26c1, 0x7a9, 0x7ff, 0xf5fe, 0xffff, 0x8, 0x871], [0xfffffff8, 0xd, 0x1, 0x3, 0xfffffff7, 0x6bd, 0x1d, 0xd16, 0x1, 0xe, 0x10000, 0x200, 0x7, 0xdafe, 0x400, 0x6, 0xaf0, 0x1, 0x4, 0x5e, 0x3, 0x2, 0x6, 0x200, 0xd, 0x1, 0x1, 0x80, 0x3, 0x1, 0x4, 0x80000000, 0x37, 0x8a, 0x3, 0x9, 0x1, 0x20, 0x58, 0x1, 0x6, 0x5, 0xa, 0xef, 0x2, 0x9, 0x2, 0x7, 0x1ff, 0x8, 0x9b360000, 0x9, 0x7f, 0x1, 0x1f23bb65, 0x6, 0x1, 0x80000001, 0x4, 0x2, 0xfffff1f6, 0x401, 0x80, 0xff], [0x8, 0x8001, 0x44, 0x4, 0xfffffffc, 0x81, 0x7324, 0x9, 0x1, 0x2, 0x7, 0x648475e, 0x5bff, 0x8, 0x7, 0x5, 0x7f, 0x9, 0x101, 0x7fff, 0xd5b, 0x2, 0x1, 0x7, 0xfffffc01, 0x7, 0x0, 0x9, 0x4, 0x5, 0x7fffffff, 0xdc, 0xf, 0x1, 0x2, 0x9, 0x3, 0x4, 0x706a, 0x5, 0x6, 0x5, 0x7, 0x1, 0x80000000, 0x200, 0xe, 0x8, 0x8, 0x3, 0x3293, 0x7c8, 0x3, 0x0, 0xca20, 0x7, 0x8, 0x1, 0x2e4, 0x2, 0x40, 0x8001, 0x4f3, 0x1], [0x0, 0x8, 0xfff, 0x3, 0x6, 0x3, 0x2, 0x8e, 0x8, 0x1df7c44d, 0x10000, 0x0, 0xfffffffb, 0x4, 0x1, 0x8, 0xfff, 0x2, 0x5, 0x0, 0x15c5, 0x863, 0x1, 0x5865, 0xf93f, 0x5de, 0x6, 0x0, 0xe, 0x4, 0x8, 0x81, 0x5, 0x879, 0x3, 0x401, 0x8, 0x62, 0x5, 0x401, 0x6, 0xf3ed, 0x3, 0x8000, 0x10, 0x4f3, 0x9, 0x1000, 0x8001, 0x2, 0x4, 0x8, 0x1, 0x8, 0x9, 0x5, 0xffff84e1, 0x8, 0x6, 0x1, 0x1, 0x1, 0xffffa332, 0xe61]}, 0x45c)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, 0x0)

595.224322ms ago: executing program 5 (id=2692):
set_mempolicy(0x1, &(0x7f0000000000)=0x3, 0x3)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000140), 0x2000000000000092, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4e0cdd70e9af79ce, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4015)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', <r4=>0x0})
sendmsg$nl_route_sched_retired(r3, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000000340)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x6, 0x2}, {0x8, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40010)
r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x966f, 0x3, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)
tee(0xffffffffffffffff, r5, 0x80000001, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
write$cgroup_int(r1, &(0x7f0000000140)=0xf1, 0x12)
close_range(r6, r5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d)
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xe1, 0x0, 0x3ff}]})
write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000f80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, @in={0x2, 0x4e27, @broadcast}}}, 0x90)
getsockname$packet(r1, &(0x7f0000000700), &(0x7f0000000740)=0x14)

490.009122ms ago: executing program 0 (id=2693):
syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000200)=[{0x7, 0x1000, 0x3, &(0x7f00000000c0)="ac56fd"}, {0x9, 0x2001, 0x4, &(0x7f0000000340)="1ea0c718"}, {0x8, 0x3001, 0x0, 0x0}], 0x3})

489.74247ms ago: executing program 5 (id=2694):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x68, r2, 0x101, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x3, 0x2, 0x0, {0x8000000000000000, 0x451, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x3, 0xf}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x0, 0x3, 0x0, {0x7ff, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x7fff, 0xf}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

467.507475ms ago: executing program 5 (id=2695):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x28000000000000, 0xfffffffe, 0x0, 0x80000, 0x1000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1)

409.16835ms ago: executing program 5 (id=2696):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40)

313.703549ms ago: executing program 5 (id=2697):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000003e00000000000000feffffff11000000"]}, 0x108)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved})
prctl$PR_SCHED_CORE(0x4e, 0x1, 0x0, 0x2, 0x0)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x40000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="d54d2bbd7000fcdbdff91800000018003080140001800500020001000000080001000100000008000300", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x40000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000654fa4003946c1249acfcbe3acfbf27f8ebd2294ac110e41bb6772e4fcc79389f863e87d48c1460a32f3a5acbc498a67b1f31425a0f9908139", @ANYRES16=r4, @ANYBLOB="000125bd7000fedbdf251400000008000300", @ANYRES32, @ANYBLOB="0c0006000200000002000000"], 0x28}, 0x1, 0x0, 0x0, 0x40040095}, 0x400c405)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0)
ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881ac, 0x4})
ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000080)={0x1, 0x0, 0xce})

219.422625ms ago: executing program 5 (id=2698):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2, @private=0xa010102}}}], 0x20}, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x4, 0xfffffffffffffff7, 0x101}}, 0x28)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000100)="30d49ed86d24", 0x6, 0xfffffffffffffffc)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0))
read$dsp(r0, &(0x7f0000000180)=""/100, 0x64)

150.20752ms ago: executing program 6 (id=2699):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000100)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
lseek(r0, 0x3, 0x0)

57.844492ms ago: executing program 6 (id=2700):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040))

47.293426ms ago: executing program 6 (id=2701):
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x1b0}, @l2cap_cid_signaling={{0x1ac}, [@l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x4000, 0xe}}, @l2cap_info_rsp={{0xb, 0x6, 0xc1}, {0x8000, 0x8, "c22ba9d660d3e5835f52637fe18ef5438e442ed8c0370e1e9e41e6e7cdcaf5b751a109b7f7ee868564229d6707ce56d9c4e4ed60884915070bbbe9c004c746b912065fdbd5de6ccda98d83c4d434772f29446085148fa939132c9bfc4149361977a163d2c8a6a8d1222247266a76083a34ef790cd31ed5eece7e22f50159018c9f72cd3ff2751b483faa7ad6e91c6d2377e7654eb7db042706efc0bd4ffaa646d477c240c48902c96c289bb691eb5f29d844a7057f36d8542514489a84"}}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0xb893, 0x4}}, @l2cap_move_chan_rsp={{0xf, 0x9, 0x4}, {0x8, 0xaf2a}}, @l2cap_move_chan_rsp={{0xf, 0x2, 0x4}, {0x8, 0x3}}, @l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x1, 0xb, 0x78, 0x800}}, @l2cap_conf_rsp={{0x5, 0x3e, 0x3e}, {0x0, 0x8000, 0xb2, [@l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_flushto={0x2, 0x2, 0x711}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x143b}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6, 0x0, 0x101, 0x2, 0xfffb}}, @l2cap_conf_mtu={0x1, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x81}, @l2cap_conf_efs={0x6, 0x10, {0x6, 0x2, 0xfff8, 0xa, 0x8, 0xcc}}, @l2cap_conf_flushto={0x2, 0x2, 0x8}]}}, @l2cap_info_rsp={{0xb, 0x4, 0x76}, {0x8001, 0x6, "d60944e64b1e6624ad2ca78725aeb171772d957e27692994ab769b8b80831924e626b45a4267057d412ea96da79e93e95eb4139c49975b0760dbfb6f1dfbb0b957360208cf7a725b3aa4896ca5229392a53c02cdd69ab23ded4cfbd0ceb662bbb52fceb2985cb0fd6062dc42fcfe946d73d4"}}]}}, 0x1b5)

0s ago: executing program 6 (id=2702):
r0 = socket$kcm(0x10, 0x400000002, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e", 0x19}], 0x1}, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async)
ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000340)=0x1d) (async)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188040f80ec51acbc0413a1810039000000000bf0ffff2101000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000004c0)='pimreg\x00', 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010700000000ffffffff41"], 0x34}}, 0x4c000)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) (async)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r6, &(0x7f0000000480)={&(0x7f0000000140)=@tipc, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/145, 0x91}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000300)=""/248, 0xf8}, {&(0x7f0000000400)=""/6, 0x6}], 0x4}, 0x2000)

kernel console output (not intermixed with test programs):

0.050693][   T48] usb 7-1: USB disconnect, device number 3
[  531.957936][T13156] random: crng reseeded on system resumption
[  532.530589][   T48] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  532.589766][T13181] overlayfs: failed lookup in lower (newroot/501, name='file1', err=-40): overlapping layers
[  532.704084][   T48] usb 6-1: Using ep0 maxpacket: 8
[  532.746490][T13182] random: crng reseeded on system resumption
[  532.765186][   T48] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  532.776004][   T48] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  532.787009][   T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  532.802014][   T48] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  532.821288][   T48] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  532.835673][   T48] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  532.851484][   T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.211207][   T48] usb 6-1: GET_CAPABILITIES returned 0
[  533.217253][   T48] usbtmc 6-1:16.0: can't read capabilities
[  533.667833][   T48] usb 6-1: USB disconnect, device number 71
[  533.674448][T13177] usbtmc 6-1:16.0: usb_control_msg returned -71
[  534.248333][   T48] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  534.398313][   T48] usb 2-1: Using ep0 maxpacket: 8
[  534.405782][   T48] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  534.414463][   T48] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  534.418280][   T52] Bluetooth: hci1: command 0x0405 tx timeout
[  534.424435][   T48] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  534.440240][   T48] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  534.450234][   T48] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  534.463421][   T48] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  534.472517][   T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.553854][   T52] Bluetooth: hci1: Invalid handle: 0xfd00 > 0x0eff
[  534.687010][   T48] usb 2-1: usb_control_msg returned -32
[  534.692730][   T48] usbtmc 2-1:16.0: can't read capabilities
[  537.058858][ T5913] usb 2-1: USB disconnect, device number 78
[  537.449533][ T1165] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  537.628192][ T5913] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  537.778206][ T5913] usb 7-1: Using ep0 maxpacket: 16
[  537.795931][ T5913] usb 7-1: config 251 has an invalid interface number: 70 but max is 0
[  537.935126][ T5913] usb 7-1: config 251 has no interface number 0
[  537.948943][ T5913] usb 7-1: config 251 interface 70 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  538.723601][ T5913] usb 7-1: New USB device found, idVendor=157e, idProduct=3006, bcdDevice=4a.e2
[  538.763704][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.794693][ T5913] usb 7-1: Product: syz
[  538.808146][ T5913] usb 7-1: Manufacturer: syz
[  538.813217][ T5913] usb 7-1: SerialNumber: syz
[  538.852793][T13275] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  538.882024][ T5913] usb 7-1: Could not find all expected endpoints
[  539.095738][T13291] netlink: 'syz.1.2185': attribute type 12 has an invalid length.
[  539.489830][ T5913] usb 7-1: USB disconnect, device number 4
[  539.627628][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2188'.
[  539.672241][T13298] random: crng reseeded on system resumption
[  539.968161][ T5913] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  540.122045][ T5913] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  540.131470][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.139897][ T5913] usb 6-1: Product: syz
[  540.144129][ T5913] usb 6-1: Manufacturer: syz
[  540.149273][ T5913] usb 6-1: SerialNumber: syz
[  540.157653][ T5913] usb 6-1: config 0 descriptor??
[  540.173460][ T5913] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  540.192953][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  540.208826][ T5913] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  540.228365][ T5913] usb 6-1: media controller created
[  540.254333][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  540.325940][ T5913] DVB: Unable to find symbol mt352_attach()
[  540.355753][ T5913] DVB: Unable to find symbol nxt6000_attach()
[  540.361933][ T5913] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  540.372384][T13302] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  540.388314][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input90
[  540.409527][ T5913] dvb-usb: schedule remote query interval to 1000 msecs.
[  540.417254][ T5913] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  540.428327][ T5913] dvb-usb: bulk message failed: -22 (7/0)
[  540.435203][ T5913] dvb-usb: bulk message failed: -22 (7/0)
[  540.449860][ T5913] usb 6-1: USB disconnect, device number 72
[  540.562221][ T5913] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  540.778710][T13321] netlink: get zone limit has 4 unknown bytes
[  540.912188][T13323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2198'.
[  540.988518][T13325] random: crng reseeded on system resumption
[  541.027411][   T30] audit: type=1326 audit(1761589938.304:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13326 comm="syz.5.2200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f928598efc9 code=0x0
[  542.770583][T13357] random: crng reseeded on system resumption
[  543.136932][T13364] loop6: detected capacity change from 0 to 524287999
[  543.149976][T13364] buffer_io_error: 11 callbacks suppressed
[  543.150019][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.164454][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.173023][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.181756][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.190274][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.198984][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.207707][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.216795][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.225190][T13364] ldm_validate_partition_table(): Disk read failed.
[  543.233354][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.242229][T13364] Buffer I/O error on dev loop6, logical block 0, async page read
[  543.253174][T13364] Dev loop6: unable to read RDB block 0
[  543.261713][T13364]  loop6: unable to read partition table
[  543.268625][T13364] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  544.930615][T13365] kthread_run failed with err -4
[  545.276089][T13376] 9pnet_fd: Insufficient options for proto=fd
[  545.286037][T13376] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  546.171512][T13394] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2219'.
[  546.508281][ T5913] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  546.558352][ T5953] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  546.668340][ T5913] usb 6-1: Using ep0 maxpacket: 8
[  546.675906][ T5913] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  546.684702][ T5913] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  546.695184][ T5913] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  546.705686][ T5913] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  546.715645][ T5913] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  546.729389][ T5913] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  546.741218][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.752142][ T5953] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.768253][ T5953] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  546.793176][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.810862][ T5953] usb 7-1: config 0 descriptor??
[  546.823018][ T5953] pwc: Askey VC010 type 2 USB webcam detected.
[  546.830997][   T30] audit: type=1326 audit(1761589944.114:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  546.853905][   T30] audit: type=1326 audit(1761589944.114:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  547.062918][   T30] audit: type=1326 audit(1761589944.114:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  547.088426][ T5913] usb 6-1: usb_control_msg returned -32
[  547.094151][ T5913] usbtmc 6-1:16.0: can't read capabilities
[  547.129445][T13408] netlink: 'syz.0.2223': attribute type 12 has an invalid length.
[  547.203392][   T30] audit: type=1326 audit(1761589944.114:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  547.228817][   T30] audit: type=1326 audit(1761589944.114:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  547.251714][   T30] audit: type=1326 audit(1761589944.164:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  547.276774][   T30] audit: type=1326 audit(1761589944.164:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  547.299483][   T30] audit: type=1326 audit(1761589944.164:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  547.323636][ T5953] pwc: recv_control_msg error -32 req 02 val 2b00
[  547.332117][ T5953] pwc: recv_control_msg error -32 req 02 val 2700
[  547.339160][   T30] audit: type=1326 audit(1761589944.424:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  547.361864][ T5953] pwc: recv_control_msg error -32 req 02 val 2c00
[  547.375543][ T5953] pwc: recv_control_msg error -32 req 04 val 1000
[  547.401896][ T5953] pwc: recv_control_msg error -32 req 04 val 1300
[  547.424859][   T30] audit: type=1326 audit(1761589944.424:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347e38efc9 code=0x7ffc0000
[  547.460229][ T5953] pwc: recv_control_msg error -32 req 04 val 1400
[  547.481916][ T5953] pwc: recv_control_msg error -32 req 02 val 2000
[  547.494129][ T5953] pwc: recv_control_msg error -32 req 02 val 2100
[  547.509362][ T5953] pwc: recv_control_msg error -32 req 04 val 1500
[  547.527553][ T5953] pwc: recv_control_msg error -32 req 02 val 2500
[  547.542949][ T5953] pwc: recv_control_msg error -32 req 02 val 2400
[  547.764785][ T5953] pwc: recv_control_msg error -71 req 02 val 2900
[  547.808358][ T5953] pwc: recv_control_msg error -71 req 02 val 2800
[  547.819000][ T5953] pwc: recv_control_msg error -71 req 04 val 1100
[  547.884351][ T5953] pwc: recv_control_msg error -71 req 04 val 1200
[  547.934187][ T5953] pwc: Registered as video103.
[  548.004316][ T5953] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input91
[  548.020959][ T5953] usb 7-1: USB disconnect, device number 5
[  548.707791][T13423] input: syz0 as /devices/virtual/input/input92
[  548.771576][T13425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2229'.
[  549.141407][   T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  549.153707][   T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  549.163680][   T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  549.171738][   T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  549.179555][   T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  549.293189][  T796] usb 6-1: USB disconnect, device number 73
[  549.543478][ T1165] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.835629][ T1165] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.062520][ T1165] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.761306][ T1165] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.905301][T13429] chnl_net:caif_netlink_parms(): no params data found
[  551.212230][ T5842] Bluetooth: hci4: command tx timeout
[  551.802655][T13460] wg2 speed is unknown, defaulting to 1000
[  551.810051][T13460] wg2 speed is unknown, defaulting to 1000
[  551.816665][T13460] wg2 speed is unknown, defaulting to 1000
[  551.937381][T13460] infiniband syz2: set active
[  551.942219][T13460] infiniband syz2: added wg2
[  551.948570][T13460] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  551.952430][T13460] infiniband syz2: Couldn't open port 1
[  551.979964][T13460] RDS/IB: syz2: added
[  551.984090][T13460] smc: adding ib device syz2 with port count 1
[  551.990645][T13460] smc:    ib device syz2 port 1 has pnetid SYZ0 (user defined)
[  551.999172][T13460] wg2 speed is unknown, defaulting to 1000
[  552.128434][T13460] wg2 speed is unknown, defaulting to 1000
[  552.262866][T13460] wg2 speed is unknown, defaulting to 1000
[  552.396210][T13460] wg2 speed is unknown, defaulting to 1000
[  552.531172][T13460] wg2 speed is unknown, defaulting to 1000
[  552.728605][ T5868] wg2 speed is unknown, defaulting to 1000
[  552.735148][ T5868] wg2 speed is unknown, defaulting to 1000
[  553.288266][ T5842] Bluetooth: hci4: command tx timeout
[  554.051164][T13429] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.097947][T13429] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.110781][T13429] bridge_slave_0: entered allmulticast mode
[  554.139008][T13429] bridge_slave_0: entered promiscuous mode
[  554.418335][  T796] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  554.526658][T13429] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.534629][T13429] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.558970][T13429] bridge_slave_1: entered allmulticast mode
[  554.576458][T13429] bridge_slave_1: entered promiscuous mode
[  554.588235][  T796] usb 6-1: Using ep0 maxpacket: 32
[  554.597509][  T796] usb 6-1: config 0 has an invalid interface number: 203 but max is 0
[  554.628006][  T796] usb 6-1: config 0 has no interface number 0
[  554.648348][  T796] usb 6-1: config 0 interface 203 has no altsetting 0
[  554.691152][ T1165] tipc: Left network mode
[  554.696440][  T796] usb 6-1: New USB device found, idVendor=9710, idProduct=7843, bcdDevice=ec.f3
[  554.720237][  T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.738567][  T796] usb 6-1: Product: syz
[  554.746914][  T796] usb 6-1: Manufacturer: syz
[  554.758272][  T796] usb 6-1: SerialNumber: syz
[  554.779601][  T796] usb 6-1: config 0 descriptor??
[  554.801503][  T796] mos7840 6-1:0.203: required endpoints missing
[  554.875874][T13429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.901755][T13429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  554.997946][ T5913] usb 6-1: USB disconnect, device number 74
[  555.092252][T13429] team0: Port device team_slave_0 added
[  555.130562][T13429] team0: Port device team_slave_1 added
[  555.368336][ T5842] Bluetooth: hci4: command tx timeout
[  555.376977][ T1165] hsr_slave_0: left promiscuous mode
[  555.402185][ T1165] hsr_slave_1: left promiscuous mode
[  555.417589][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  555.431583][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.483169][ T1165] veth0_macvtap: left promiscuous mode
[  555.504583][ T1165] veth1_vlan: left promiscuous mode
[  555.874083][ T1165] pimreg (unregistering): left allmulticast mode
[  557.458672][ T5842] Bluetooth: hci4: command tx timeout
[  558.204349][ T1165] team0 (unregistering): Port device team_slave_1 removed
[  558.304200][ T1165] team0 (unregistering): Port device team_slave_0 removed
[  559.014431][T13429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  559.021568][T13429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  559.050317][T13429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  559.181599][T13429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  559.208882][T13429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  559.278196][T13429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  559.491739][T13429] hsr_slave_0: entered promiscuous mode
[  559.515388][T13429] hsr_slave_1: entered promiscuous mode
[  559.541559][T13429] debugfs: 'hsr0' already exists in 'hsr'
[  559.547351][T13429] Cannot create hsr debugfs directory
[  559.857872][ T1165] IPVS: stop unused estimator thread 0...
[  561.808240][ T5868] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  562.005980][ T5868] usb 7-1: Using ep0 maxpacket: 8
[  562.020460][ T5868] usb 7-1: unable to get BOS descriptor or descriptor too short
[  562.040444][ T5868] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 16
[  562.058368][ T5868] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8
[  562.078306][ T5868] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  562.110733][ T5868] usb 7-1: config 1 interface 0 has no altsetting 0
[  562.124082][T13429] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  562.130634][ T5868] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  562.148243][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.158574][ T5868] usb 7-1: Product: syz
[  562.162778][ T5868] usb 7-1: Manufacturer: syz
[  562.188404][ T5868] usb 7-1: SerialNumber: syz
[  562.199971][T13592] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  562.214357][T13429] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  562.215774][T13592] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  562.265231][T13429] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  562.308382][T13429] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  562.517672][ T5868] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[  562.543661][ T5868] usb 7-1: USB disconnect, device number 6
[  562.799533][T13429] 8021q: adding VLAN 0 to HW filter on device bond0
[  562.835119][T13623] fuse: Bad value for 'fd'
[  562.921292][T13429] 8021q: adding VLAN 0 to HW filter on device team0
[  562.949782][T12703] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.957067][T12703] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.015574][T12703] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.022880][T12703] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.066286][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.684060][T13429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.847397][T13429] veth0_vlan: entered promiscuous mode
[  563.884170][T13429] veth1_vlan: entered promiscuous mode
[  563.983799][T13429] veth0_macvtap: entered promiscuous mode
[  564.005112][T13429] veth1_macvtap: entered promiscuous mode
[  564.071758][T13429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  564.135297][T13429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  564.167695][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  564.196721][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  564.225021][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  564.252005][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  564.610581][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  564.629431][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.712903][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  564.735221][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.957401][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  564.957420][   T30] audit: type=1326 audit(1761589962.234:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz.1.2231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f312db8efc9 code=0x0
[  565.702720][T13685] rdma_rxe: rxe_newlink: failed to add wg2
[  566.393390][T13687] overlayfs: failed to resolve './file0': -2
[  566.800549][T13703] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2283'.
[  566.930092][T13707] random: crng reseeded on system resumption
[  567.153540][T13717] overlayfs: failed to resolve './file0': -2
[  567.258260][ T5868] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  567.484734][T13722] rdma_rxe: rxe_newlink: failed to add wg2
[  567.618870][ T5868] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.648639][ T5868] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  567.738283][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.988840][ T5868] usb 7-1: config 0 descriptor??
[  568.004703][ T5868] pwc: Askey VC010 type 2 USB webcam detected.
[  568.422077][T13735] random: crng reseeded on system resumption
[  568.458614][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00
[  568.491286][ T5868] pwc: recv_control_msg error -32 req 02 val 2700
[  568.503073][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00
[  568.510625][ T5868] pwc: recv_control_msg error -32 req 04 val 1000
[  568.518509][ T5868] pwc: recv_control_msg error -32 req 04 val 1300
[  568.526036][ T5868] pwc: recv_control_msg error -32 req 04 val 1400
[  568.533738][ T5868] pwc: recv_control_msg error -32 req 02 val 2000
[  568.542827][ T5868] pwc: recv_control_msg error -32 req 02 val 2100
[  568.550594][ T5868] pwc: recv_control_msg error -32 req 04 val 1500
[  568.566729][ T5868] pwc: recv_control_msg error -32 req 02 val 2500
[  568.575293][ T5868] pwc: recv_control_msg error -32 req 02 val 2400
[  568.792677][ T5868] pwc: recv_control_msg error -71 req 02 val 2900
[  568.812131][ T5868] pwc: recv_control_msg error -71 req 02 val 2800
[  568.850747][ T5868] pwc: recv_control_msg error -71 req 04 val 1100
[  568.896210][ T5868] pwc: recv_control_msg error -71 req 04 val 1200
[  568.925440][ T5868] pwc: Registered as video103.
[  568.935858][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input93
[  568.980020][ T5868] usb 7-1: USB disconnect, device number 7
[  570.048043][T13760] random: crng reseeded on system resumption
[  570.099862][ T1154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  571.549240][   T48] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  571.608701][ T5953] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  571.847693][   T48] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  571.860748][   T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.872602][   T48] usb 2-1: Product: syz
[  571.877026][   T48] usb 2-1: Manufacturer: syz
[  571.877719][T13782] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2314'.
[  571.881989][ T5953] usb 7-1: Using ep0 maxpacket: 8
[  571.901676][   T48] usb 2-1: SerialNumber: syz
[  571.981884][ T5953] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  572.044561][ T5953] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  572.093255][ T5953] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  572.106812][ T5953] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  572.120056][ T5953] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  572.140579][ T5953] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  572.153133][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.353842][T13786] random: crng reseeded on system resumption
[  572.478669][   T48] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  572.499105][ T5953] usb 7-1: GET_CAPABILITIES returned 0
[  572.504752][ T5953] usbtmc 7-1:16.0: can't read capabilities
[  572.524470][   T48] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  572.763554][   T48] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  572.780340][T13777] usbtmc 7-1:16.0: usb_control_msg returned -71
[  572.780892][ T5953] usb 7-1: USB disconnect, device number 8
[  572.801793][T13804] random: crng reseeded on system resumption
[  572.818869][   T48] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  572.842366][   T48] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  572.881498][   T48] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  572.917246][   T48] usb 2-1: USB disconnect, device number 79
[  573.127494][T13818] wg2 speed is unknown, defaulting to 1000
[  573.390814][T13831] random: crng reseeded on system resumption
[  573.406935][T13831] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2334'.
[  573.958684][   T48] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  574.139233][   T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  574.170620][   T48] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  574.197909][   T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.236483][   T48] usb 7-1: config 0 descriptor??
[  574.309665][T13850] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2342'.
[  574.336105][T13850] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  576.502716][ T5842] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  576.523528][ T5842] Bluetooth: hci1: Injecting HCI hardware error event
[  576.557921][   T52] Bluetooth: hci1: hardware error 0x00
[  576.793354][   T48] usbhid 7-1:0.0: can't add hid device: -71
[  576.809375][   T48] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  576.821009][T13863] can0: slcan on ptm0.
[  576.833036][   T48] usb 7-1: USB disconnect, device number 9
[  577.026405][T13860] can0 (unregistered): slcan off ptm0.
[  577.758164][ T5868] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  577.920140][ T5868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  577.942473][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  577.984100][ T5868] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  578.015284][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.051254][ T5868] usb 6-1: config 0 descriptor??
[  578.083953][ T5868] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  578.651544][   T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  580.663612][ T5868] usb 6-1: USB disconnect, device number 75
[  581.063390][T13926] overlayfs: failed to resolve './file0': -2
[  581.818186][ T5913] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  581.978176][ T5868] usb 2-1: new low-speed USB device number 80 using dummy_hcd
[  581.981460][ T5913] usb 6-1: Using ep0 maxpacket: 8
[  582.030896][ T5913] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  582.048763][ T5913] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  582.058696][T13947] overlayfs: failed to resolve './file0': -2
[  582.063493][ T5913] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  582.075631][ T5913] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  582.085839][ T5913] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  582.100488][ T5913] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  582.140942][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.146330][ T5868] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  582.187509][ T5868] usb 2-1: config 0 has no interface number 0
[  582.208351][ T5868] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  582.223825][ T5868] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  582.255836][ T5868] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  582.273570][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.367687][ T5913] usb 6-1: GET_CAPABILITIES returned 0
[  582.375763][ T5913] usbtmc 6-1:16.0: can't read capabilities
[  582.559748][ T5868] usb 2-1: config 0 descriptor??
[  582.642251][T13940] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  582.678025][T13936] usbtmc 6-1:16.0: usb_control_msg returned -71
[  582.685358][ T5913] usb 6-1: USB disconnect, device number 76
[  582.744337][ T5868] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  582.928017][ T5868] usb 2-1: USB disconnect, device number 80
[  583.559862][   T52] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3
[  583.657563][T13973] overlayfs: failed to resolve './file0': -2
[  584.138167][ T5889] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  584.288249][ T5889] usb 7-1: Using ep0 maxpacket: 32
[  584.295190][ T5889] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  584.303335][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.314675][ T5889] usb 7-1: config 0 has no interface number 0
[  584.323051][ T5889] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  584.332227][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.340274][ T5889] usb 7-1: Product: syz
[  584.344435][ T5889] usb 7-1: Manufacturer: syz
[  584.349063][ T5889] usb 7-1: SerialNumber: syz
[  584.355563][ T5889] usb 7-1: config 0 descriptor??
[  584.364976][ T5889] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  584.374483][ T5889] cx231xx 7-1:0.1: Not found matching IAD interface
[  584.570108][ T5913] usb 7-1: USB disconnect, device number 10
[  584.938236][ T5913] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  585.096230][ T5913] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  585.126183][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.149498][ T5913] usb 2-1: Product: syz
[  585.157925][ T5913] usb 2-1: Manufacturer: syz
[  585.164780][ T5913] usb 2-1: SerialNumber: syz
[  585.181423][ T5913] usb 2-1: config 0 descriptor??
[  585.199557][ T5913] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  585.226835][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  585.248195][ T5913] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  585.267490][ T5913] usb 2-1: media controller created
[  585.283962][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  585.436767][ T5913] DVB: Unable to find symbol mt352_attach()
[  585.545713][ T5913] DVB: Unable to find symbol nxt6000_attach()
[  585.556636][ T5913] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  585.571865][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input94
[  585.603592][ T5913] dvb-usb: schedule remote query interval to 1000 msecs.
[  585.622722][ T5913] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  585.633116][ T5913] dvb-usb: bulk message failed: -22 (7/0)
[  585.639438][ T5913] dvb-usb: bulk message failed: -22 (7/0)
[  585.656600][ T5913] usb 2-1: USB disconnect, device number 81
[  585.800935][ T5913] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  588.501834][T14054] fuse: Bad value for 'fd'
[  588.708186][ T5868] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  588.717611][  T796] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  588.800225][ T5889] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  588.882406][  T796] usb 2-1: device descriptor read/64, error -71
[  588.893494][ T5868] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  588.902895][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.910912][ T5868] usb 7-1: Product: syz
[  588.916033][ T5868] usb 7-1: Manufacturer: syz
[  588.920857][ T5868] usb 7-1: SerialNumber: syz
[  588.927626][ T5868] usb 7-1: config 0 descriptor??
[  588.935236][ T5868] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  588.946161][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  588.956482][ T5868] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  588.965830][ T5868] usb 7-1: media controller created
[  588.971287][ T5889] usb 6-1: Using ep0 maxpacket: 16
[  588.983988][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  588.994011][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.005052][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  589.027086][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  589.040649][ T5889] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  589.049905][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.061057][ T5889] usb 6-1: config 0 descriptor??
[  589.076429][ T5868] DVB: Unable to find symbol mt352_attach()
[  589.113920][ T5868] DVB: Unable to find symbol nxt6000_attach()
[  589.121445][ T5868] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  589.143912][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input95
[  589.157675][  T796] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  589.167890][ T5868] dvb-usb: schedule remote query interval to 1000 msecs.
[  589.175686][ T5868] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  589.185834][ T5868] dvb-usb: bulk message failed: -22 (7/0)
[  589.191964][ T5868] dvb-usb: bulk message failed: -22 (7/0)
[  589.201390][ T5868] usb 7-1: USB disconnect, device number 11
[  589.276078][ T5868] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  589.298262][  T796] usb 2-1: device descriptor read/64, error -71
[  589.408622][  T796] usb usb2-port1: attempt power cycle
[  589.480644][ T5889] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.003B/input/input96
[  589.572190][ T5889] appleir 0003:05AC:8241.003B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0
[  589.706311][ T5913] usb 6-1: USB disconnect, device number 77
[  589.758171][  T796] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  589.800621][  T796] usb 2-1: device descriptor read/8, error -71
[  590.038138][  T796] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  590.058802][  T796] usb 2-1: device descriptor read/8, error -71
[  590.168677][  T796] usb usb2-port1: unable to enumerate USB device
[  590.353449][T14081] fuse: Bad value for 'fd'
[  590.408288][   T52] Bluetooth: hci3: command tx timeout
[  590.693437][T14088] random: crng reseeded on system resumption
[  591.185609][T14096] syzkaller1: entered promiscuous mode
[  591.191196][T14096] syzkaller1: entered allmulticast mode
[  591.288300][ T5868] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  591.456073][ T5868] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  591.466463][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.478005][ T5868] usb 7-1: Product: syz
[  591.482534][ T5868] usb 7-1: Manufacturer: syz
[  591.487256][ T5868] usb 7-1: SerialNumber: syz
[  591.509520][ T5868] usb 7-1: config 0 descriptor??
[  591.520293][ T5868] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  591.533641][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  591.544631][ T5868] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  591.554163][ T5889] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  591.562179][ T5868] usb 7-1: media controller created
[  591.595376][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  591.649420][ T5868] DVB: Unable to find symbol mt352_attach()
[  591.683052][ T5868] DVB: Unable to find symbol nxt6000_attach()
[  591.689262][ T5868] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  591.703278][ T5868] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input98
[  591.716394][ T5868] dvb-usb: schedule remote query interval to 1000 msecs.
[  591.729841][ T5868] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  591.740416][ T5868] dvb-usb: bulk message failed: -22 (7/0)
[  591.746521][ T5868] dvb-usb: bulk message failed: -22 (7/0)
[  591.752541][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.766350][ T5868] usb 7-1: USB disconnect, device number 12
[  591.772565][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.790500][ T5889] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  591.804612][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.831267][ T5889] usb 6-1: config 0 descriptor??
[  591.852266][ T5889] usbhid 6-1:0.0: can't add hid device: -22
[  591.860069][  T796] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  591.876238][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  591.910492][ T5868] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  592.018180][  T796] usb 2-1: Using ep0 maxpacket: 8
[  592.026147][  T796] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  592.034500][  T796] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  592.044349][  T796] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  592.046927][   T48] usb 6-1: USB disconnect, device number 78
[  592.054533][  T796] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  592.070556][  T796] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  592.083852][  T796] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  592.094270][  T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.307640][  T796] usb 2-1: GET_CAPABILITIES returned 0
[  592.315046][  T796] usbtmc 2-1:16.0: can't read capabilities
[  592.353071][T14110] random: crng reseeded on system resumption
[  592.416621][T14112] fuse: Bad value for 'fd'
[  592.493917][T14114] wg2 speed is unknown, defaulting to 1000
[  592.578777][   T48] usb 2-1: USB disconnect, device number 86
[  592.581735][T14104] usbtmc 2-1:16.0: usb_control_msg returned -71
[  592.921231][T14125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2431'.
[  592.968989][ T5953] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  593.011956][T14127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2431'.
[  593.088939][T14127] nbd: device at index 64 is going down
[  593.108156][ T5953] usb 6-1: device descriptor read/64, error -71
[  593.262802][T13577] udevd[13577]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  593.286070][T13806] udevd[13806]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  593.389614][ T5953] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  593.568206][ T5953] usb 6-1: device descriptor read/64, error -71
[  593.699534][ T5953] usb usb6-port1: attempt power cycle
[  593.718563][  T796] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  593.865306][T14139] random: crng reseeded on system resumption
[  593.914695][  T796] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  593.933006][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.942916][  T796] usb 2-1: Product: syz
[  593.947128][  T796] usb 2-1: Manufacturer: syz
[  593.951817][  T796] usb 2-1: SerialNumber: syz
[  593.961387][T14141] fuse: Bad value for 'fd'
[  593.966950][  T796] usb 2-1: config 0 descriptor??
[  593.980270][  T796] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  593.992905][  T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  594.004595][  T796] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  594.021873][  T796] usb 2-1: media controller created
[  594.050062][ T5953] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  594.054479][  T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  594.070217][ T5953] usb 6-1: device descriptor read/8, error -71
[  594.130642][  T796] DVB: Unable to find symbol mt352_attach()
[  594.245167][  T796] DVB: Unable to find symbol nxt6000_attach()
[  594.265634][   T48] kernel read not supported for file /radio0 (pid: 48 comm: kworker/1:1)
[  594.266761][  T796] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  594.291566][  T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input99
[  594.306446][  T796] dvb-usb: schedule remote query interval to 1000 msecs.
[  594.313892][  T796] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  594.324655][  T796] dvb-usb: bulk message failed: -22 (7/0)
[  594.328659][ T5953] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  594.330975][  T796] dvb-usb: bulk message failed: -22 (7/0)
[  594.349465][ T5953] usb 6-1: device descriptor read/8, error -71
[  594.378560][  T796] usb 2-1: USB disconnect, device number 87
[  594.427405][  T796] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  594.468641][ T5953] usb usb6-port1: unable to enumerate USB device
[  594.498839][   T48] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  594.651140][   T48] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.661541][   T48] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  594.670839][   T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.680889][   T48] usb 7-1: config 0 descriptor??
[  594.690253][   T48] pwc: Askey VC010 type 2 USB webcam detected.
[  595.094123][   T48] pwc: recv_control_msg error -32 req 02 val 2b00
[  595.101406][   T48] pwc: recv_control_msg error -32 req 02 val 2700
[  595.108668][   T48] pwc: recv_control_msg error -32 req 02 val 2c00
[  595.115765][   T48] pwc: recv_control_msg error -32 req 04 val 1000
[  595.123236][   T48] pwc: recv_control_msg error -32 req 04 val 1300
[  595.131953][   T48] pwc: recv_control_msg error -32 req 04 val 1400
[  595.141313][   T48] pwc: recv_control_msg error -32 req 02 val 2000
[  595.148552][   T48] pwc: recv_control_msg error -32 req 02 val 2100
[  595.155637][   T48] pwc: recv_control_msg error -32 req 04 val 1500
[  595.163498][   T48] pwc: recv_control_msg error -32 req 02 val 2500
[  595.170712][   T48] pwc: recv_control_msg error -32 req 02 val 2400
[  595.372568][T14159] random: crng reseeded on system resumption
[  595.381094][   T48] pwc: recv_control_msg error -71 req 02 val 2900
[  595.392423][   T48] pwc: recv_control_msg error -71 req 02 val 2800
[  595.406033][   T48] pwc: recv_control_msg error -71 req 04 val 1100
[  595.413139][   T48] pwc: recv_control_msg error -71 req 04 val 1200
[  595.422402][   T48] pwc: Registered as video103.
[  595.439550][   T48] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input101
[  595.479997][   T48] usb 7-1: USB disconnect, device number 13
[  595.489492][T14162] fuse: Bad value for 'fd'
[  595.818854][ T5953] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  596.024640][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  596.037480][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  596.055475][ T5953] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  596.074879][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.162795][ T5953] usb 2-1: config 0 descriptor??
[  596.235777][ T5953] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  596.906674][ T5953] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  598.669516][ T5953] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  598.698843][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.706877][ T5953] usb 6-1: Product: syz
[  598.721430][ T5953] usb 6-1: Manufacturer: syz
[  598.726452][ T5953] usb 6-1: SerialNumber: syz
[  598.741291][ T5953] usb 6-1: config 0 descriptor??
[  598.750269][ T5953] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  598.761704][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  598.781971][ T5953] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  598.822018][  T797] usb 2-1: USB disconnect, device number 88
[  598.841236][ T5953] usb 6-1: media controller created
[  598.885902][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  598.978008][T14185] random: crng reseeded on system resumption
[  599.018766][T14185] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2453'.
[  599.104052][ T5953] DVB: Unable to find symbol mt352_attach()
[  599.206168][ T5953] DVB: Unable to find symbol nxt6000_attach()
[  599.232984][ T5953] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  599.261307][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input103
[  599.299797][ T5953] dvb-usb: schedule remote query interval to 1000 msecs.
[  599.308773][ T5953] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  599.319470][ T5953] dvb-usb: bulk message failed: -22 (7/0)
[  599.345962][ T5953] dvb-usb: bulk message failed: -22 (7/0)
[  599.365317][ T5953] usb 6-1: USB disconnect, device number 83
[  599.457971][ T5953] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  599.469911][  T797] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  599.609081][  T797] usb 2-1: device descriptor read/64, error -71
[  599.868187][  T797] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  599.914948][ T5953] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  600.008326][  T797] usb 2-1: device descriptor read/64, error -71
[  600.071131][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.082765][ T5953] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  600.094137][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.107369][ T5953] usb 6-1: config 0 descriptor??
[  600.120882][ T5953] pwc: Askey VC010 type 2 USB webcam detected.
[  600.133125][  T797] usb usb2-port1: attempt power cycle
[  600.488279][  T797] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  600.538565][T14209] use of bytesused == 0 is deprecated and will be removed in the future,
[  600.547934][T14209] use the actual size instead.
[  600.849420][ T5953] pwc: recv_control_msg error -32 req 02 val 2b00
[  601.359234][ T5953] pwc: recv_control_msg error -32 req 02 val 2700
[  601.366559][ T5953] pwc: recv_control_msg error -32 req 02 val 2c00
[  601.373978][ T5953] pwc: recv_control_msg error -32 req 04 val 1000
[  601.382282][  T797] usb 2-1: device descriptor read/8, error -71
[  601.392075][ T5953] pwc: recv_control_msg error -32 req 04 val 1300
[  601.402193][ T5953] pwc: recv_control_msg error -32 req 04 val 1400
[  601.410090][ T5953] pwc: recv_control_msg error -32 req 02 val 2000
[  601.418767][ T5953] pwc: recv_control_msg error -32 req 02 val 2100
[  601.426528][ T5953] pwc: recv_control_msg error -32 req 04 val 1500
[  601.458728][ T5953] pwc: recv_control_msg error -32 req 02 val 2500
[  601.467063][ T5953] pwc: recv_control_msg error -32 req 02 val 2400
[  601.628249][  T797] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  601.648850][  T797] usb 2-1: device descriptor read/8, error -71
[  601.675268][ T5953] pwc: recv_control_msg error -71 req 02 val 2900
[  601.684156][ T5953] pwc: recv_control_msg error -71 req 02 val 2800
[  601.691318][ T5953] pwc: recv_control_msg error -71 req 04 val 1100
[  601.698272][ T5953] pwc: recv_control_msg error -71 req 04 val 1200
[  601.706407][ T5953] pwc: Registered as video103.
[  601.723993][ T5953] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input105
[  601.769238][ T5953] usb 6-1: USB disconnect, device number 84
[  601.776017][  T797] usb usb2-port1: unable to enumerate USB device
[  602.088362][ T3509] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  602.638193][ T5953] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  602.803645][ T5953] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  602.832835][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.856957][ T5953] usb 2-1: Product: syz
[  602.874360][ T5953] usb 2-1: Manufacturer: syz
[  602.896223][ T5953] usb 2-1: SerialNumber: syz
[  602.943538][ T5953] usb 2-1: config 0 descriptor??
[  602.994500][ T5953] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  603.046205][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  603.097177][ T5953] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  603.141394][ T5953] usb 2-1: media controller created
[  603.212696][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  603.462911][ T5953] DVB: Unable to find symbol mt352_attach()
[  603.638138][ T5953] DVB: Unable to find symbol nxt6000_attach()
[  603.674139][ T5953] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  603.701777][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input106
[  603.798017][ T5953] dvb-usb: schedule remote query interval to 1000 msecs.
[  603.831559][ T5953] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  603.869412][ T5953] dvb-usb: bulk message failed: -22 (7/0)
[  603.888549][ T5953] dvb-usb: bulk message failed: -22 (7/0)
[  603.930796][ T5953] usb 2-1: USB disconnect, device number 93
[  604.117573][ T5953] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  604.928183][ T5868] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  605.078122][ T5868] usb 6-1: Using ep0 maxpacket: 32
[  605.096754][ T5868] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  605.114443][ T5868] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024
[  605.177327][ T5868] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  605.206436][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0
[  605.250107][ T5868] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00
[  605.267550][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.301713][ T5868] usb 6-1: config 0 descriptor??
[  605.307539][T14258] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  605.368913][ T5868] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input107
[  605.698429][ T5953] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  605.873043][ T5953] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  605.882339][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.890455][ T5953] usb 2-1: Product: syz
[  605.894695][ T5953] usb 2-1: Manufacturer: syz
[  605.899373][ T5953] usb 2-1: SerialNumber: syz
[  605.907299][ T5953] usb 2-1: config 0 descriptor??
[  605.919096][ T5953] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  605.934538][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  605.945492][ T5953] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  605.960559][T14258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.971526][ T5953] usb 2-1: media controller created
[  605.973887][T14258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  605.996930][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  606.008952][ T5186] bcm5974 6-1:0.0: could not read from device
[  606.019804][ T5868] usb 6-1: USB disconnect, device number 85
[  606.031374][ T5186] bcm5974 6-1:0.0: could not read from device
[  606.038311][  T797] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  606.063742][T14196] bcm5974 6-1:0.0: could not read from device
[  606.108715][T14288] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2488'.
[  606.113303][T14196] udevd[14196]: Error opening device "/dev/input/event4": No such file or directory
[  606.149534][T14196] udevd[14196]: Unable to EVIOCGABS device "/dev/input/event4"
[  606.155298][ T5953] DVB: Unable to find symbol mt352_attach()
[  606.157261][T14196] udevd[14196]: Unable to EVIOCGABS device "/dev/input/event4"
[  606.174232][T14196] udevd[14196]: Unable to EVIOCGABS device "/dev/input/event4"
[  606.184478][T14196] udevd[14196]: Unable to EVIOCGABS device "/dev/input/event4"
[  606.200019][  T797] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  606.218227][  T797] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  606.236313][  T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.250761][ T5953] DVB: Unable to find symbol nxt6000_attach()
[  606.265247][ T5953] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  606.279551][  T797] usb 7-1: config 0 descriptor??
[  606.300166][  T797] pwc: Askey VC010 type 2 USB webcam detected.
[  606.313889][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input108
[  606.329997][ T5953] dvb-usb: schedule remote query interval to 1000 msecs.
[  606.337372][ T5953] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  606.349804][ T5953] dvb-usb: bulk message failed: -22 (7/0)
[  606.355651][ T5953] dvb-usb: bulk message failed: -22 (7/0)
[  606.365980][ T5953] usb 2-1: USB disconnect, device number 94
[  606.446074][ T5953] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  606.484762][T14291] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  606.497328][T14291] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  606.503945][T14291] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  606.513697][T14291] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  606.702482][  T797] pwc: recv_control_msg error -32 req 02 val 2b00
[  606.710222][  T797] pwc: recv_control_msg error -32 req 02 val 2700
[  606.728632][  T797] pwc: recv_control_msg error -32 req 02 val 2c00
[  606.738950][  T797] pwc: recv_control_msg error -32 req 04 val 1000
[  606.758283][  T797] pwc: recv_control_msg error -32 req 04 val 1300
[  606.768938][  T797] pwc: recv_control_msg error -32 req 04 val 1400
[  606.787240][  T797] pwc: recv_control_msg error -32 req 02 val 2000
[  606.807597][  T797] pwc: recv_control_msg error -32 req 02 val 2100
[  606.829707][  T797] pwc: recv_control_msg error -32 req 04 val 1500
[  606.837481][   T52] Bluetooth: hci4: unexpected event for opcode 0x1003
[  606.849029][  T797] pwc: recv_control_msg error -32 req 02 val 2500
[  606.867813][  T797] pwc: recv_control_msg error -32 req 02 val 2400
[  607.079689][  T797] pwc: recv_control_msg error -71 req 02 val 2900
[  607.100851][  T797] pwc: recv_control_msg error -71 req 02 val 2800
[  607.110732][  T797] pwc: recv_control_msg error -71 req 04 val 1100
[  607.119519][  T797] pwc: recv_control_msg error -71 req 04 val 1200
[  607.151281][  T797] pwc: Registered as video103.
[  607.181350][  T797] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input109
[  607.221910][  T797] usb 7-1: USB disconnect, device number 14
[  608.408180][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  608.557205][T14330] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2500'.
[  608.708472][  T796] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  608.721655][   T52] Bluetooth: hci3: Invalid handle: 0xfd00 > 0x0eff
[  608.738225][  T797] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  608.878287][  T796] usb 6-1: Using ep0 maxpacket: 32
[  608.898206][  T796] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  608.902820][  T797] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  608.906332][  T796] usb 6-1: config 0 has no interface number 0
[  608.924031][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.932687][  T797] usb 2-1: Product: syz
[  608.936881][  T797] usb 2-1: Manufacturer: syz
[  608.950564][  T797] usb 2-1: SerialNumber: syz
[  608.958547][  T796] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  608.959078][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  608.983536][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  608.995138][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  608.998133][  T796] usb 6-1: config 0 interface 1 has no altsetting 0
[  609.004471][  T797] usb 2-1: config 0 descriptor??
[  609.016233][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  609.026255][  T796] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  609.026997][  T797] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  609.055437][  T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.059840][  T797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  609.074488][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  609.081698][  T796] usb 6-1: Product: syz
[  609.082541][  T797] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  609.095285][  T796] usb 6-1: Manufacturer: syz
[  609.095310][  T796] usb 6-1: SerialNumber: syz
[  609.099873][  T796] usb 6-1: config 0 descriptor??
[  609.103274][  T797] usb 2-1: media controller created
[  609.150187][  T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  609.197067][T14334] wg2 speed is unknown, defaulting to 1000
[  609.338821][  T796] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  609.360343][  T797] DVB: Unable to find symbol mt352_attach()
[  609.386704][  T796] cx231xx 6-1:0.1: Failed to read PCB config
[  609.412763][  T796] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71
[  609.448600][  T796] usb 6-1: USB disconnect, device number 86
[  609.456654][  T797] DVB: Unable to find symbol nxt6000_attach()
[  609.469337][  T797] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  609.522167][  T797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input110
[  609.562500][  T797] dvb-usb: schedule remote query interval to 1000 msecs.
[  609.598537][  T797] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  609.632323][  T797] dvb-usb: bulk message failed: -22 (7/0)
[  609.648442][  T797] dvb-usb: bulk message failed: -22 (7/0)
[  609.690382][  T797] usb 2-1: USB disconnect, device number 95
[  609.850227][  T797] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  609.898149][  T796] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  609.969559][T14343] FAULT_INJECTION: forcing a failure.
[  609.969559][T14343] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  609.998759][T14343] CPU: 1 UID: 0 PID: 14343 Comm: syz.1.2503 Not tainted syzkaller #0 PREEMPT(full) 
[  609.998785][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  609.998796][T14343] Call Trace:
[  609.998805][T14343]  <TASK>
[  609.998813][T14343]  dump_stack_lvl+0x189/0x250
[  609.998838][T14343]  ? __pfx____ratelimit+0x10/0x10
[  609.998863][T14343]  ? __pfx_dump_stack_lvl+0x10/0x10
[  609.998885][T14343]  ? __pfx__printk+0x10/0x10
[  609.998907][T14343]  ? __might_fault+0xb0/0x130
[  609.998943][T14343]  should_fail_ex+0x414/0x560
[  609.998974][T14343]  _copy_from_user+0x2d/0xb0
[  609.998997][T14343]  ___sys_sendmsg+0x158/0x2a0
[  609.999028][T14343]  ? __pfx____sys_sendmsg+0x10/0x10
[  609.999094][T14343]  ? __fget_files+0x2a/0x420
[  609.999117][T14343]  ? __fget_files+0x3a0/0x420
[  609.999151][T14343]  __x64_sys_sendmsg+0x19b/0x260
[  609.999180][T14343]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  609.999219][T14343]  ? __pfx_ksys_write+0x10/0x10
[  609.999243][T14343]  ? do_syscall_64+0xbe/0xfa0
[  609.999269][T14343]  do_syscall_64+0xfa/0xfa0
[  609.999293][T14343]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.999310][T14343]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  609.999327][T14343]  ? clear_bhb_loop+0x60/0xb0
[  609.999351][T14343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.999369][T14343] RIP: 0033:0x7f312db8efc9
[  609.999387][T14343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  609.999403][T14343] RSP: 002b:00007f312e987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  609.999434][T14343] RAX: ffffffffffffffda RBX: 00007f312dde5fa0 RCX: 00007f312db8efc9
[  609.999448][T14343] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  609.999460][T14343] RBP: 00007f312e987090 R08: 0000000000000000 R09: 0000000000000000
[  609.999473][T14343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.999484][T14343] R13: 00007f312dde6038 R14: 00007f312dde5fa0 R15: 00007ffeabb00c48
[  609.999518][T14343]  </TASK>
[  610.238120][  T796] usb 6-1: Using ep0 maxpacket: 32
[  610.245180][  T796] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  610.253383][  T796] usb 6-1: config 0 has no interface number 0
[  610.259809][  T796] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  610.270808][  T796] usb 6-1: config 0 interface 1 has no altsetting 0
[  610.280516][  T796] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  610.366214][  T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.396737][  T796] usb 6-1: Product: syz
[  610.406890][  T796] usb 6-1: Manufacturer: syz
[  610.457407][  T796] usb 6-1: SerialNumber: syz
[  610.480899][  T796] usb 6-1: config 0 descriptor??
[  610.783520][T14354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.813987][T14354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.871092][  T796] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  610.934128][  T796] cx231xx 6-1:0.1: bad scenario!!!!!
[  610.934128][  T796] config_info=0
[  610.963266][  T796] cx231xx 6-1:0.1: Failed to read PCB config
[  611.184031][ T5913] usb 6-1: USB disconnect, device number 87
[  611.201928][T14334] chnl_net:caif_netlink_parms(): no params data found
[  611.208965][ T5842] Bluetooth: hci2: command tx timeout
[  611.346266][T14363] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  611.357128][T14363] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  611.365592][T14363] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  611.372516][T14363] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  611.389557][T14372] fuse: Bad value for 'fd'
[  611.401913][T14363] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  611.408320][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.467692][T14334] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.475332][T14334] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.483906][T14334] bridge_slave_0: entered allmulticast mode
[  611.493031][T14334] bridge_slave_0: entered promiscuous mode
[  611.506679][T14334] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.514735][T14334] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.522254][T14334] bridge_slave_1: entered allmulticast mode
[  611.531491][T14334] bridge_slave_1: entered promiscuous mode
[  611.593387][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.634797][T14334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  611.653489][T14334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  611.678976][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.755645][T14334] team0: Port device team_slave_0 added
[  611.772904][T14334] team0: Port device team_slave_1 added
[  611.812262][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.828648][  T796] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  611.872740][T14334] batman_adv: batadv0: Adding interface: batadv_slave_0
[  611.880129][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  611.906402][T14334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  611.921571][T14334] batman_adv: batadv0: Adding interface: batadv_slave_1
[  611.928700][T14334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  611.955523][T14334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.009099][ T5889] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  612.035864][  T796] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  612.051091][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.077474][  T796] usb 2-1: Product: syz
[  612.098514][  T796] usb 2-1: Manufacturer: syz
[  612.115185][  T796] usb 2-1: SerialNumber: syz
[  612.124208][  T796] usb 2-1: config 0 descriptor??
[  612.133418][  T796] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  612.134703][T14334] hsr_slave_0: entered promiscuous mode
[  612.151952][  T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  612.168005][  T796] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  612.182053][T14334] hsr_slave_1: entered promiscuous mode
[  612.191529][  T796] usb 2-1: media controller created
[  612.199599][T14334] debugfs: 'hsr0' already exists in 'hsr'
[  612.206303][T14334] Cannot create hsr debugfs directory
[  612.217377][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  612.236727][ T5889] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  612.253427][  T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  612.277485][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.313342][ T5889] usb 6-1: config 0 descriptor??
[  612.343017][ T5889] pwc: Askey VC010 type 2 USB webcam detected.
[  612.421370][  T796] DVB: Unable to find symbol mt352_attach()
[  612.502195][  T796] DVB: Unable to find symbol nxt6000_attach()
[  612.512531][  T796] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  612.535802][  T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input111
[  612.579708][ T1154] bridge_slave_1: left allmulticast mode
[  612.587288][  T796] dvb-usb: schedule remote query interval to 1000 msecs.
[  612.593490][ T1154] bridge_slave_1: left promiscuous mode
[  612.602903][  T796] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  612.608454][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.613978][  T796] dvb-usb: bulk message failed: -22 (7/0)
[  612.627940][  T796] dvb-usb: bulk message failed: -22 (7/0)
[  612.642741][  T796] usb 2-1: USB disconnect, device number 96
[  612.692757][ T1154] bridge_slave_0: left allmulticast mode
[  612.710544][ T1154] bridge_slave_0: left promiscuous mode
[  612.722143][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.757445][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00
[  612.783410][ T5889] pwc: recv_control_msg error -32 req 02 val 2700
[  612.808908][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00
[  612.817053][  T796] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  612.847500][ T5889] pwc: recv_control_msg error -32 req 04 val 1000
[  612.856910][ T5889] pwc: recv_control_msg error -32 req 04 val 1300
[  612.878730][ T5889] pwc: recv_control_msg error -32 req 04 val 1400
[  612.891957][ T5889] pwc: recv_control_msg error -32 req 02 val 2000
[  612.919773][ T5889] pwc: recv_control_msg error -32 req 02 val 2100
[  612.947520][ T5889] pwc: recv_control_msg error -32 req 04 val 1500
[  612.960514][ T5889] pwc: recv_control_msg error -32 req 02 val 2500
[  612.988581][ T5889] pwc: recv_control_msg error -32 req 02 val 2400
[  612.995808][ T5889] pwc: recv_control_msg error -32 req 02 val 2600
[  613.219999][ T5889] pwc: recv_control_msg error -71 req 02 val 2800
[  613.238217][ T5889] pwc: recv_control_msg error -71 req 04 val 1100
[  613.246410][ T5889] pwc: recv_control_msg error -71 req 04 val 1200
[  613.266291][ T5889] pwc: Registered as video103.
[  613.299797][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input112
[  613.342201][ T5889] usb 6-1: USB disconnect, device number 88
[  613.369975][ T5842] Bluetooth: hci2: command 0x040f tx timeout
[  613.376230][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  613.376489][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  613.931079][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.942731][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  613.953508][ T1154] bond0 (unregistering): Released all slaves
[  614.265900][T14415] FAULT_INJECTION: forcing a failure.
[  614.265900][T14415] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  614.279807][T14415] CPU: 0 UID: 0 PID: 14415 Comm: syz.6.2520 Not tainted syzkaller #0 PREEMPT(full) 
[  614.279835][T14415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  614.279847][T14415] Call Trace:
[  614.279855][T14415]  <TASK>
[  614.279864][T14415]  dump_stack_lvl+0x189/0x250
[  614.279892][T14415]  ? __pfx____ratelimit+0x10/0x10
[  614.279915][T14415]  ? __pfx_dump_stack_lvl+0x10/0x10
[  614.279937][T14415]  ? __pfx__printk+0x10/0x10
[  614.279960][T14415]  ? __might_fault+0xb0/0x130
[  614.279994][T14415]  should_fail_ex+0x414/0x560
[  614.280023][T14415]  _copy_from_user+0x2d/0xb0
[  614.280043][T14415]  ___sys_sendmsg+0x158/0x2a0
[  614.280070][T14415]  ? __pfx____sys_sendmsg+0x10/0x10
[  614.280133][T14415]  ? __fget_files+0x2a/0x420
[  614.280151][T14415]  ? __fget_files+0x3a0/0x420
[  614.280180][T14415]  __x64_sys_sendmsg+0x19b/0x260
[  614.280204][T14415]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  614.280241][T14415]  ? __pfx_ksys_write+0x10/0x10
[  614.280267][T14415]  ? do_syscall_64+0xbe/0xfa0
[  614.280296][T14415]  do_syscall_64+0xfa/0xfa0
[  614.280319][T14415]  ? lockdep_hardirqs_on+0x9c/0x150
[  614.280343][T14415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.280362][T14415]  ? clear_bhb_loop+0x60/0xb0
[  614.280424][T14415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.280442][T14415] RIP: 0033:0x7f08e7b8efc9
[  614.280461][T14415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  614.280478][T14415] RSP: 002b:00007f08e8a9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  614.280500][T14415] RAX: ffffffffffffffda RBX: 00007f08e7de5fa0 RCX: 00007f08e7b8efc9
[  614.280514][T14415] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000000003
[  614.280527][T14415] RBP: 00007f08e8a9e090 R08: 0000000000000000 R09: 0000000000000000
[  614.280539][T14415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  614.280550][T14415] R13: 00007f08e7de6038 R14: 00007f08e7de5fa0 R15: 00007ffe29cfc428
[  614.280584][T14415]  </TASK>
[  614.645442][ T5889] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  614.806633][ T5889] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  614.815846][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.844929][ T5889] usb 2-1: Product: syz
[  614.859749][ T5889] usb 2-1: Manufacturer: syz
[  614.866521][ T5889] usb 2-1: SerialNumber: syz
[  614.882276][ T5889] usb 2-1: config 0 descriptor??
[  614.897415][ T5889] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  614.944043][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  614.966815][ T5889] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  614.985779][ T5889] usb 2-1: media controller created
[  615.059235][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  615.109153][T14414] dvb-usb: bulk message failed: -22 (7/0)
[  615.271007][ T5889] DVB: Unable to find symbol mt352_attach()
[  615.421779][ T5889] DVB: Unable to find symbol nxt6000_attach()
[  615.427919][ T5889] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  615.451839][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout
[  615.452373][   T52] Bluetooth: hci2: command 0x040f tx timeout
[  615.471934][ T5889] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input113
[  615.506642][ T5889] dvb-usb: schedule remote query interval to 1000 msecs.
[  615.514560][ T1154] hsr_slave_0: left promiscuous mode
[  615.520084][ T5889] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  615.537295][ T1154] 0·: left promiscuous mode
[  615.544708][ T5889] dvb-usb: bulk message failed: -22 (7/0)
[  615.555343][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  615.563153][ T5889] dvb-usb: bulk message failed: -22 (7/0)
[  615.569678][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  615.579955][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  615.587374][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  615.601654][ T5889] usb 2-1: USB disconnect, device number 97
[  615.667896][ T1154] veth1_macvtap: left promiscuous mode
[  615.687877][ T1154] veth0_macvtap: left promiscuous mode
[  615.706878][ T1154] veth1_vlan: left promiscuous mode
[  615.718707][ T1154] veth0_vlan: left promiscuous mode
[  615.747862][ T5889] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  616.780946][ T1154] team0 (unregistering): Port device team_slave_1 removed
[  616.857493][ T1154] team0 (unregistering): Port device team_slave_0 removed
[  617.438810][ T5913] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  617.533031][   T52] Bluetooth: hci2: command 0x040f tx timeout
[  617.538277][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout
[  617.639808][ T5913] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  617.677859][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.701036][ T5913] usb 7-1: config 0 descriptor??
[  617.713163][T14334] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  617.747236][T14334] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  617.749714][ T5913] cp210x 7-1:0.0: cp210x converter detected
[  617.799390][T14334] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  617.834918][T14334] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  618.068395][  T797] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  618.187708][ T5913] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[  618.235946][T14334] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.264575][  T797] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  618.307638][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.334957][  T797] usb 6-1: Product: syz
[  618.339430][  T797] usb 6-1: Manufacturer: syz
[  618.344942][T14334] 8021q: adding VLAN 0 to HW filter on device team0
[  618.354298][  T797] usb 6-1: SerialNumber: syz
[  618.375967][  T797] usb 6-1: config 0 descriptor??
[  618.395931][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.399333][  T797] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  618.403196][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.457882][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.465224][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.476528][ T5913] usb 7-1: cp210x converter now attached to ttyUSB0
[  618.485078][  T797] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  618.513013][  T797] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  618.534976][  T797] usb 6-1: media controller created
[  618.560401][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2532'.
[  618.583468][ T5835] Bluetooth: hci4: unexpected event 0x06 length: 4 > 3
[  618.585163][  T797] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  618.616947][T14461] dvb-usb: bulk message failed: -22 (7/0)
[  618.777690][  T797] DVB: Unable to find symbol mt352_attach()
[  618.886663][  T797] DVB: Unable to find symbol nxt6000_attach()
[  618.900064][  T797] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  618.946167][  T797] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input114
[  618.998871][  T797] dvb-usb: schedule remote query interval to 1000 msecs.
[  619.005971][  T797] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  619.039450][  T797] dvb-usb: bulk message failed: -22 (7/0)
[  619.069022][  T797] dvb-usb: bulk message failed: -22 (7/0)
[  619.085564][  T797] usb 6-1: USB disconnect, device number 89
[  619.174013][T14334] 8021q: adding VLAN 0 to HW filter on device batadv0
[  619.229403][  T797] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  619.349319][T14334] veth0_vlan: entered promiscuous mode
[  619.384534][T14334] veth1_vlan: entered promiscuous mode
[  619.460992][T14334] veth0_macvtap: entered promiscuous mode
[  619.484101][T14334] veth1_macvtap: entered promiscuous mode
[  619.544649][T14334] batman_adv: batadv0: Interface activated: batadv_slave_0
[  619.583031][T14334] batman_adv: batadv0: Interface activated: batadv_slave_1
[  619.608405][ T5835] Bluetooth: hci2: command 0x040f tx timeout
[  619.615584][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  619.650781][   T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  619.676438][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.724279][   T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.921172][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  619.933976][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.001928][T12702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  620.018890][T12702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  620.168774][  T797] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  620.238831][  T796] usb 7-1: USB disconnect, device number 15
[  620.273668][  T796] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  620.327393][  T796] cp210x 7-1:0.0: device disconnected
[  620.343464][  T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  620.392948][  T797] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  620.430872][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.479315][  T797] usb 2-1: config 0 descriptor??
[  620.502105][  T797] pwc: Askey VC010 type 2 USB webcam detected.
[  620.910891][  T797] pwc: recv_control_msg error -32 req 02 val 2b00
[  620.918352][  T797] pwc: recv_control_msg error -32 req 02 val 2700
[  620.925557][  T797] pwc: recv_control_msg error -32 req 02 val 2c00
[  620.932849][  T797] pwc: recv_control_msg error -32 req 04 val 1000
[  620.940192][  T797] pwc: recv_control_msg error -32 req 04 val 1300
[  620.947278][  T797] pwc: recv_control_msg error -32 req 04 val 1400
[  620.954540][  T797] pwc: recv_control_msg error -32 req 02 val 2000
[  620.961071][ T5953] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  620.972451][  T797] pwc: recv_control_msg error -32 req 02 val 2100
[  620.980067][  T797] pwc: recv_control_msg error -32 req 04 val 1500
[  620.987087][  T797] pwc: recv_control_msg error -32 req 02 val 2500
[  620.994512][  T797] pwc: recv_control_msg error -32 req 02 val 2400
[  621.001961][  T797] pwc: recv_control_msg error -32 req 02 val 2600
[  621.028286][ T5913] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  621.118188][ T5953] usb 6-1: Using ep0 maxpacket: 8
[  621.124987][ T5953] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  621.133616][ T5953] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  621.144777][ T5953] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  621.157828][ T5953] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  621.167436][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.183087][ T5953] usbtmc 6-1:16.0: bulk endpoints not found
[  621.200166][ T5913] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  621.209805][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.219449][  T797] pwc: recv_control_msg error -71 req 02 val 2800
[  621.226107][ T5913] usb 7-1: Product: syz
[  621.231465][ T5913] usb 7-1: Manufacturer: syz
[  621.236206][  T797] pwc: recv_control_msg error -71 req 04 val 1100
[  621.242987][ T5913] usb 7-1: SerialNumber: syz
[  621.250547][  T797] pwc: recv_control_msg error -71 req 04 val 1200
[  621.257937][ T5913] usb 7-1: config 0 descriptor??
[  621.266391][  T797] pwc: Registered as video103.
[  621.273544][ T5913] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  621.285549][  T797] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input115
[  621.318848][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  621.333705][  T797] usb 2-1: USB disconnect, device number 98
[  621.342192][ T5913] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  621.351786][ T5913] usb 7-1: media controller created
[  621.375718][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  621.462772][ T5913] DVB: Unable to find symbol mt352_attach()
[  621.467680][T14524] dvb-usb: bulk message failed: -22 (7/0)
[  621.502134][ T5913] DVB: Unable to find symbol nxt6000_attach()
[  621.508500][ T5913] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  621.522042][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input116
[  621.535260][ T5913] dvb-usb: schedule remote query interval to 1000 msecs.
[  621.542711][ T5913] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  621.553171][ T5913] dvb-usb: bulk message failed: -22 (7/0)
[  621.560432][ T5913] dvb-usb: bulk message failed: -22 (7/0)
[  621.568770][ T5913] usb 7-1: USB disconnect, device number 16
[  621.631860][ T5913] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  621.690046][ T5835] Bluetooth: hci2: command 0x040f tx timeout
[  622.088192][ T5868] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  622.249685][ T5868] usb 2-1: Using ep0 maxpacket: 32
[  622.259271][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  622.270603][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  622.281183][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  622.294842][ T5868] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  622.319246][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.340879][ T5868] usb 2-1: config 0 descriptor??
[  622.356518][T14552] fuse: Bad value for 'user_id'
[  622.362858][T14552] fuse: Bad value for 'user_id'
[  622.755205][T14535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.764272][T14535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.782434][ T5868] usbhid 2-1:0.0: can't add hid device: -71
[  622.789104][ T5868] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  622.799684][ T5868] usb 2-1: USB disconnect, device number 99
[  622.803638][ T5913] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  622.958194][ T5913] usb 7-1: Using ep0 maxpacket: 32
[  622.965137][ T5913] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  622.974344][ T5913] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  622.984748][ T5913] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  622.995656][ T5913] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  623.004960][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.013085][ T5913] usb 7-1: Product: syz
[  623.017562][ T5913] usb 7-1: Manufacturer: syz
[  623.022244][ T5913] usb 7-1: SerialNumber: syz
[  623.379959][T14560] binder: 14559:14560 ioctl c0306201 0 returned -14
[  623.737314][  T797] usb 6-1: USB disconnect, device number 90
[  623.852884][T14578] fuse: Bad value for 'user_id'
[  623.858091][T14578] fuse: Bad value for 'user_id'
[  624.029674][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2560'.
[  624.495897][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  624.698262][  T797] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  624.848293][  T797] usb 6-1: Using ep0 maxpacket: 8
[  624.855173][  T797] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  624.863807][  T797] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  624.874088][  T797] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  624.887156][  T797] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  624.896925][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.916332][  T797] usbtmc 6-1:16.0: bulk endpoints not found
[  625.278227][ T5868] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  625.428219][ T5868] usb 2-1: Using ep0 maxpacket: 8
[  625.435086][ T5868] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  625.443844][ T5868] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  625.454704][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  625.465012][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  625.476849][ T5868] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  625.490799][ T5868] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  625.500058][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.559880][ T5913] usb 7-1: 0:2 : does not exist
[  625.585477][ T5913] usb 7-1: USB disconnect, device number 17
[  625.632132][T14196] udevd[14196]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  625.683333][T14603] fuse: Bad value for 'user_id'
[  625.688788][T14603] fuse: Bad value for 'user_id'
[  625.726038][ T5868] usb 2-1: GET_CAPABILITIES returned 0
[  625.740716][ T5868] usbtmc 2-1:16.0: can't read capabilities
[  625.932372][ T5913] usb 2-1: USB disconnect, device number 100
[  626.013522][T14615] random: crng reseeded on system resumption
[  626.026110][T14615] FAULT_INJECTION: forcing a failure.
[  626.026110][T14615] name failslab, interval 1, probability 0, space 0, times 0
[  626.038805][T14615] CPU: 0 UID: 0 PID: 14615 Comm: syz.6.2570 Not tainted syzkaller #0 PREEMPT(full) 
[  626.038825][T14615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  626.038834][T14615] Call Trace:
[  626.038841][T14615]  <TASK>
[  626.038849][T14615]  dump_stack_lvl+0x189/0x250
[  626.038871][T14615]  ? __pfx____ratelimit+0x10/0x10
[  626.038890][T14615]  ? __pfx_dump_stack_lvl+0x10/0x10
[  626.038908][T14615]  ? __pfx__printk+0x10/0x10
[  626.038929][T14615]  ? __pfx___might_resched+0x10/0x10
[  626.038942][T14615]  ? fs_reclaim_acquire+0x7d/0x100
[  626.038964][T14615]  should_fail_ex+0x414/0x560
[  626.038986][T14615]  should_failslab+0xa8/0x100
[  626.039001][T14615]  kmem_cache_alloc_node_noprof+0x8c/0x710
[  626.039019][T14615]  ? __alloc_skb+0x112/0x2d0
[  626.039050][T14615]  __alloc_skb+0x112/0x2d0
[  626.039070][T14615]  netlink_sendmsg+0x5c6/0xb30
[  626.039095][T14615]  ? __pfx_netlink_sendmsg+0x10/0x10
[  626.039117][T14615]  ? aa_sock_msg_perm+0xf1/0x1d0
[  626.039137][T14615]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  626.039150][T14615]  ? __pfx_netlink_sendmsg+0x10/0x10
[  626.039171][T14615]  __sock_sendmsg+0x21c/0x270
[  626.039190][T14615]  ____sys_sendmsg+0x505/0x830
[  626.039216][T14615]  ? __pfx_____sys_sendmsg+0x10/0x10
[  626.039245][T14615]  ? import_iovec+0x74/0xa0
[  626.039265][T14615]  ___sys_sendmsg+0x21f/0x2a0
[  626.039286][T14615]  ? __pfx____sys_sendmsg+0x10/0x10
[  626.039354][T14615]  ? __fget_files+0x2a/0x420
[  626.039378][T14615]  ? __fget_files+0x3a0/0x420
[  626.039413][T14615]  __x64_sys_sendmsg+0x19b/0x260
[  626.039443][T14615]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  626.039481][T14615]  ? __pfx_ksys_write+0x10/0x10
[  626.039506][T14615]  ? do_syscall_64+0xbe/0xfa0
[  626.039534][T14615]  do_syscall_64+0xfa/0xfa0
[  626.039555][T14615]  ? lockdep_hardirqs_on+0x9c/0x150
[  626.039578][T14615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.039596][T14615]  ? clear_bhb_loop+0x60/0xb0
[  626.039620][T14615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.039638][T14615] RIP: 0033:0x7f08e7b8efc9
[  626.039656][T14615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  626.039672][T14615] RSP: 002b:00007f08e8a9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  626.039693][T14615] RAX: ffffffffffffffda RBX: 00007f08e7de5fa0 RCX: 00007f08e7b8efc9
[  626.039707][T14615] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000003
[  626.039720][T14615] RBP: 00007f08e8a9e090 R08: 0000000000000000 R09: 0000000000000000
[  626.039732][T14615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  626.039744][T14615] R13: 00007f08e7de6038 R14: 00007f08e7de5fa0 R15: 00007ffe29cfc428
[  626.039776][T14615]  </TASK>
[  626.704418][T14626] random: crng reseeded on system resumption
[  626.715740][T14626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2575'.
[  626.770142][T14628] fuse: Bad value for 'fd'
[  627.049128][ T5921] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  627.213882][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  627.224111][ T5921] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  627.233201][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.244692][ T5921] usb 2-1: config 0 descriptor??
[  627.256071][ T5921] pwc: Askey VC010 type 2 USB webcam detected.
[  627.473476][  T797] usb 6-1: USB disconnect, device number 91
[  627.640265][ T5835] Bluetooth: hci3: Invalid handle: 0xfd00 > 0x0eff
[  627.669208][ T5921] pwc: recv_control_msg error -32 req 02 val 2b00
[  627.677345][ T5921] pwc: recv_control_msg error -32 req 02 val 2700
[  627.685123][ T5921] pwc: recv_control_msg error -32 req 02 val 2c00
[  627.700805][ T5921] pwc: recv_control_msg error -32 req 04 val 1000
[  627.712806][ T5921] pwc: recv_control_msg error -32 req 04 val 1300
[  627.721731][ T5921] pwc: recv_control_msg error -32 req 04 val 1400
[  627.732020][ T5921] pwc: recv_control_msg error -32 req 02 val 2000
[  627.739293][ T5921] pwc: recv_control_msg error -32 req 02 val 2100
[  627.746930][ T5921] pwc: recv_control_msg error -32 req 04 val 1500
[  627.754450][ T5921] pwc: recv_control_msg error -32 req 02 val 2500
[  627.763235][ T5921] pwc: recv_control_msg error -32 req 02 val 2400
[  627.958207][  T797] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  627.972025][ T5921] pwc: recv_control_msg error -71 req 02 val 2900
[  627.979307][ T5921] pwc: recv_control_msg error -71 req 02 val 2800
[  627.986168][ T5921] pwc: recv_control_msg error -71 req 04 val 1100
[  627.993560][ T5921] pwc: recv_control_msg error -71 req 04 val 1200
[  628.001319][ T5921] pwc: Registered as video103.
[  628.009240][ T5921] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input117
[  628.042395][ T5921] usb 2-1: USB disconnect, device number 101
[  628.108684][  T797] usb 6-1: Using ep0 maxpacket: 8
[  628.126291][  T797] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  628.145623][  T797] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  628.161525][  T797] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  628.171855][  T797] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  628.184473][  T797] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  628.197595][  T797] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  628.207159][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.427904][  T797] usb 6-1: GET_CAPABILITIES returned 0
[  628.433543][  T797] usbtmc 6-1:16.0: can't read capabilities
[  628.518584][ T5835] Bluetooth: hci4: unexpected event for opcode 0x1003
[  628.631779][  T797] usb 6-1: USB disconnect, device number 92
[  628.798216][ T5921] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  628.963073][ T5921] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  628.972298][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  628.983329][ T5921] usb 2-1: config 0 has no interface number 0
[  628.989724][ T5921] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  629.000162][ T5921] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  629.025869][ T5921] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  629.048134][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.056544][ T5921] usb 2-1: Product: syz
[  629.061663][ T5921] usb 2-1: Manufacturer: syz
[  629.078127][ T5921] usb 2-1: SerialNumber: syz
[  629.096205][ T5921] usb 2-1: config 0 descriptor??
[  629.338355][  T797] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  629.469489][ T5921] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -32
[  629.488273][  T797] usb 7-1: Using ep0 maxpacket: 32
[  629.496025][  T797] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.507678][  T797] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1824, setting to 1024
[  629.519147][  T797] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  629.520116][ T5868] usb 2-1: USB disconnect, device number 102
[  629.532428][  T797] usb 7-1: config 0 interface 0 has no altsetting 0
[  629.532473][  T797] usb 7-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00
[  629.554423][  T797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.566121][  T797] usb 7-1: config 0 descriptor??
[  629.573029][T14660] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  629.595420][  T797] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input119
[  629.985913][    C0] bcm5974 7-1:0.0: trackpad urb failed: -1
[  630.200513][T14660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.213503][T14660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.225744][ T5186] bcm5974 7-1:0.0: could not read from device
[  630.232126][ T5913] usb 7-1: USB disconnect, device number 18
[  630.244704][ T5186] bcm5974 7-1:0.0: could not read from device
[  630.253485][T14196] bcm5974 7-1:0.0: could not read from device
[  630.278660][T14196] udevd[14196]: Error opening device "/dev/input/event4": No such file or directory
[  630.308235][T14196] udevd[14196]: Unable to EVIOCGABS device "/dev/input/event4"
[  630.319389][  T797] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  630.322022][T14196] udevd[14196]: Unable to EVIOCGABS device "/dev/input/event4"
[  630.358474][T14196] udevd[14196]: Unable to EVIOCGABS device "/dev/input/event4"
[  630.366185][T14196] udevd[14196]: Unable to EVIOCGABS device "/dev/input/event4"
[  630.391963][T14196] udevd[14196]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting.
[  630.424699][T14676] FAULT_INJECTION: forcing a failure.
[  630.424699][T14676] name failslab, interval 1, probability 0, space 0, times 0
[  630.424859][ T5201] udevd[5201]: worker [14196] terminated by signal 6 (Aborted)
[  630.451084][ T5201] udevd[5201]: worker [14196] failed while handling '/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input119/event4'
[  630.463959][T14676] CPU: 0 UID: 0 PID: 14676 Comm: syz.0.2593 Not tainted syzkaller #0 PREEMPT(full) 
[  630.463988][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  630.463999][T14676] Call Trace:
[  630.464009][T14676]  <TASK>
[  630.464018][T14676]  dump_stack_lvl+0x189/0x250
[  630.464045][T14676]  ? __pfx____ratelimit+0x10/0x10
[  630.464068][T14676]  ? __pfx_dump_stack_lvl+0x10/0x10
[  630.464098][T14676]  ? __pfx__printk+0x10/0x10
[  630.464126][T14676]  ? __pfx___might_resched+0x10/0x10
[  630.464144][T14676]  ? fs_reclaim_acquire+0x7d/0x100
[  630.464178][T14676]  should_fail_ex+0x414/0x560
[  630.464210][T14676]  should_failslab+0xa8/0x100
[  630.464233][T14676]  __kmalloc_noprof+0xdf/0x800
[  630.464257][T14676]  ? rcu_is_watching+0x15/0xb0
[  630.464276][T14676]  ? security_sk_alloc+0x52/0x390
[  630.464308][T14676]  security_sk_alloc+0x52/0x390
[  630.464336][T14676]  sk_prot_alloc+0x101/0x220
[  630.464361][T14676]  ? sk_alloc+0x26/0x410
[  630.464389][T14676]  sk_alloc+0x39/0x410
[  630.464420][T14676]  __netlink_create+0x65/0x260
[  630.464447][T14676]  ? __pfx_genl_release+0x10/0x10
[  630.464468][T14676]  netlink_create+0x3ca/0x590
[  630.464493][T14676]  ? __pfx_genl_unbind+0x10/0x10
[  630.464508][T14676]  ? __pfx_genl_bind+0x10/0x10
[  630.464527][T14676]  __sock_create+0x4b3/0x9f0
[  630.464557][T14676]  __sys_socket+0xd7/0x1b0
[  630.464581][T14676]  __x64_sys_socket+0x7a/0x90
[  630.464602][T14676]  do_syscall_64+0xfa/0xfa0
[  630.464622][T14676]  ? lockdep_hardirqs_on+0x9c/0x150
[  630.464642][T14676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  630.464659][T14676]  ? clear_bhb_loop+0x60/0xb0
[  630.464679][T14676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  630.464695][T14676] RIP: 0033:0x7f58c8590ee7
[  630.464712][T14676] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  630.464726][T14676] RSP: 002b:00007f58c67f4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  630.464747][T14676] RAX: ffffffffffffffda RBX: 00007f58c87e5fa0 RCX: 00007f58c8590ee7
[  630.464759][T14676] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  630.464771][T14676] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  630.464781][T14676] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000001
[  630.464793][T14676] R13: 00007f58c87e6038 R14: 00007f58c87e5fa0 R15: 00007ffeeb4ea4b8
[  630.464822][T14676]  </TASK>
[  630.728236][  T797] usb 2-1: Using ep0 maxpacket: 8
[  630.735429][  T797] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  630.743966][  T797] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  630.754378][  T797] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  630.777752][  T797] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  630.786971][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.820869][  T797] usbtmc 2-1:16.0: bulk endpoints not found
[  632.728446][ T5835] Bluetooth: hci2: command 0x040f tx timeout
[  632.810890][T14679] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  632.812910][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  633.083875][  T796] usb 2-1: USB disconnect, device number 103
[  633.174130][T14698] fuse: Bad value for 'fd'
[  633.450923][   T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  633.518265][T14679] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  633.524736][T14679] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  633.758392][T14711] random: crng reseeded on system resumption
[  633.801027][T14711] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2602'.
[  633.821716][   T30] audit: type=1800 audit(1761590031.104:97): pid=14713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2603" name="bus" dev="overlay" ino=1935 res=0 errno=0
[  633.956359][ T5835] Bluetooth: hci3: unexpected event for opcode 0x1003
[  634.103705][T14722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  634.134576][T14722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  634.162966][T14722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  634.180738][T14722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  634.193653][T14722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  634.233172][T14722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  634.244982][T14722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256
[  634.256675][T14722] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512
[  634.296626][T14722] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1)
[  634.469642][T14728] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  634.482921][T14728] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  634.494956][T14728] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  634.684542][   T30] audit: type=1800 audit(1761590031.964:98): pid=14744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2613" name="bus" dev="overlay" ino=1965 res=0 errno=0
[  634.800891][ T5835] Bluetooth: hci3: unexpected event for opcode 0x1003
[  634.875563][ T5835] Bluetooth: hci2: unexpected event for opcode 0x1003
[  635.391718][  T796] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  635.442292][   T30] audit: type=1800 audit(1761590032.724:99): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2624" name="bus" dev="overlay" ino=938 res=0 errno=0
[  635.571220][  T796] usb 2-1: Using ep0 maxpacket: 32
[  635.584990][  T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  635.615446][T14779] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  635.624068][  T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  635.624892][T14779] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  635.634827][  T796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  635.641120][T14779] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  635.653256][  T796] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  635.662289][T14789] fuse: Bad value for 'fd'
[  635.668417][  T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.692665][  T796] usb 2-1: config 0 descriptor??
[  635.831618][T14793] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2629'.
[  636.104724][T14768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.115985][T14768] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  636.134382][  T796] usbhid 2-1:0.0: can't add hid device: -71
[  636.144042][  T796] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  636.161487][  T796] usb 2-1: USB disconnect, device number 104
[  636.414553][T14818] overlayfs: failed to resolve './file1': -2
[  636.687697][T14828] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2637'.
[  636.824787][T14832] FAULT_INJECTION: forcing a failure.
[  636.824787][T14832] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  636.839555][T14832] CPU: 0 UID: 0 PID: 14832 Comm: syz.1.2640 Not tainted syzkaller #0 PREEMPT(full) 
[  636.839583][T14832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  636.839595][T14832] Call Trace:
[  636.839603][T14832]  <TASK>
[  636.839612][T14832]  dump_stack_lvl+0x189/0x250
[  636.839640][T14832]  ? __pfx____ratelimit+0x10/0x10
[  636.839664][T14832]  ? __pfx_dump_stack_lvl+0x10/0x10
[  636.839687][T14832]  ? __pfx__printk+0x10/0x10
[  636.839709][T14832]  ? __might_fault+0xb0/0x130
[  636.839746][T14832]  should_fail_ex+0x414/0x560
[  636.839777][T14832]  _copy_from_user+0x2d/0xb0
[  636.839799][T14832]  userio_char_write+0xc0/0x480
[  636.839825][T14832]  ? __pfx_userio_char_write+0x10/0x10
[  636.839845][T14832]  ? reuseport_array_free+0x250/0x360
[  636.839873][T14832]  ? security_file_permission+0x75/0x290
[  636.839902][T14832]  ? rw_verify_area+0x255/0x4d0
[  636.839922][T14832]  ? __lock_acquire+0xab9/0xd20
[  636.839947][T14832]  ? __pfx_userio_char_write+0x10/0x10
[  636.839969][T14832]  vfs_write+0x27e/0xb30
[  636.839999][T14832]  ? __pfx_vfs_write+0x10/0x10
[  636.840022][T14832]  ? __fget_files+0x2a/0x420
[  636.840048][T14832]  ? __fget_files+0x2a/0x420
[  636.840069][T14832]  ? __fget_files+0x3a0/0x420
[  636.840091][T14832]  ? __fget_files+0x2a/0x420
[  636.840124][T14832]  ksys_write+0x145/0x250
[  636.840148][T14832]  ? __pfx_ksys_write+0x10/0x10
[  636.840172][T14832]  ? do_syscall_64+0xbe/0xfa0
[  636.840201][T14832]  do_syscall_64+0xfa/0xfa0
[  636.840232][T14832]  ? lockdep_hardirqs_on+0x9c/0x150
[  636.840256][T14832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.840275][T14832]  ? clear_bhb_loop+0x60/0xb0
[  636.840296][T14832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.840313][T14832] RIP: 0033:0x7f312db8efc9
[  636.840332][T14832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  636.840348][T14832] RSP: 002b:00007f312e987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  636.840368][T14832] RAX: ffffffffffffffda RBX: 00007f312dde5fa0 RCX: 00007f312db8efc9
[  636.840382][T14832] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000003
[  636.840394][T14832] RBP: 00007f312e987090 R08: 0000000000000000 R09: 0000000000000000
[  636.840405][T14832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.840414][T14832] R13: 00007f312dde6038 R14: 00007f312dde5fa0 R15: 00007ffeabb00c48
[  636.840439][T14832]  </TASK>
[  636.898161][  T797] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  636.989756][T14834] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  637.108518][T14834] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  637.117745][T14834] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  637.138285][  T797] usb 6-1: Using ep0 maxpacket: 16
[  637.153678][  T797] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  637.166020][  T797] usb 6-1: config 0 interface 0 has no altsetting 0
[  637.175211][  T797] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  637.186299][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.196702][  T797] usb 6-1: config 0 descriptor??
[  637.615423][  T797] nzxt-smart2 0003:1E71:2009.003C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  637.741860][T14842] misc userio: Begin command sent, but we're already running
[  638.012515][ T5881] usb 6-1: USB disconnect, device number 93
[  638.017358][T14826] random: crng reseeded on system resumption
[  638.122210][T14844] overlayfs: failed to resolve './file1': -2
[  638.213239][T14848] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2646'.
[  638.533630][ T5835] Bluetooth: hci4: unexpected event for opcode 0x1003
[  638.537088][T14864] Invalid ELF header magic: != ELF
[  638.578270][  T796] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  638.758199][  T796] usb 7-1: Using ep0 maxpacket: 32
[  638.765359][  T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  638.776466][  T796] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  638.787508][  T796] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  638.800463][  T796] usb 7-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  638.809554][  T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.821033][  T796] usb 7-1: config 0 descriptor??
[  638.968465][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  639.128232][ T5835] Bluetooth: hci2: command 0x040f tx timeout
[  639.231571][T14853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  639.244293][T14853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  639.261080][  T796] usbhid 7-1:0.0: can't add hid device: -71
[  639.272421][  T796] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  639.293354][  T796] usb 7-1: USB disconnect, device number 19
[  639.764094][T14893] FAULT_INJECTION: forcing a failure.
[  639.764094][T14893] name failslab, interval 1, probability 0, space 0, times 0
[  639.798170][T14893] CPU: 0 UID: 0 PID: 14893 Comm: syz.5.2660 Not tainted syzkaller #0 PREEMPT(full) 
[  639.798199][T14893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  639.798210][T14893] Call Trace:
[  639.798219][T14893]  <TASK>
[  639.798227][T14893]  dump_stack_lvl+0x189/0x250
[  639.798256][T14893]  ? __pfx____ratelimit+0x10/0x10
[  639.798280][T14893]  ? __pfx_dump_stack_lvl+0x10/0x10
[  639.798303][T14893]  ? __pfx__printk+0x10/0x10
[  639.798327][T14893]  ? __pfx___might_resched+0x10/0x10
[  639.798348][T14893]  ? fs_reclaim_acquire+0x7d/0x100
[  639.798380][T14893]  should_fail_ex+0x414/0x560
[  639.798410][T14893]  should_failslab+0xa8/0x100
[  639.798431][T14893]  kmem_cache_alloc_noprof+0x88/0x700
[  639.798457][T14893]  ? alloc_empty_file+0x55/0x1d0
[  639.798486][T14893]  alloc_empty_file+0x55/0x1d0
[  639.798512][T14893]  alloc_file_pseudo+0x13d/0x210
[  639.798542][T14893]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  639.798576][T14893]  ? alloc_fd+0x64c/0x6c0
[  639.798606][T14893]  sock_alloc_file+0xb8/0x2e0
[  639.798625][T14893]  ? __sys_socket+0x12c/0x1b0
[  639.798651][T14893]  __sys_socket+0x13d/0x1b0
[  639.798688][T14893]  __x64_sys_socket+0x7a/0x90
[  639.798712][T14893]  do_syscall_64+0xfa/0xfa0
[  639.798735][T14893]  ? lockdep_hardirqs_on+0x9c/0x150
[  639.798759][T14893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.798778][T14893]  ? clear_bhb_loop+0x60/0xb0
[  639.798800][T14893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  639.798818][T14893] RIP: 0033:0x7f9285990ee7
[  639.798837][T14893] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  639.798854][T14893] RSP: 002b:00007f92867c2fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  639.798875][T14893] RAX: ffffffffffffffda RBX: 00007f9285be5fa0 RCX: 00007f9285990ee7
[  639.798889][T14893] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  639.798901][T14893] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  639.798912][T14893] R10: 0000200000000000 R11: 0000000000000286 R12: 0000000000000001
[  639.798924][T14893] R13: 00007f9285be6038 R14: 00007f9285be5fa0 R15: 00007ffc1f4fd678
[  639.798968][T14893]  </TASK>
[  640.198734][  T796] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  640.349184][  T796] usb 2-1: Using ep0 maxpacket: 8
[  640.358808][  T796] usb 2-1: config 1 interface 0 altsetting 98 endpoint 0x81 has an invalid bInterval 85, changing to 10
[  640.380845][  T796] usb 2-1: config 1 interface 0 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  640.416840][  T796] usb 2-1: config 1 interface 0 has no altsetting 0
[  640.430215][  T796] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40
[  640.439915][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.448017][  T796] usb 2-1: Product: syz
[  640.453868][  T796] usb 2-1: Manufacturer: syz
[  640.458219][  T797] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  640.458910][  T796] usb 2-1: SerialNumber: syz
[  640.608178][  T797] usb 6-1: device descriptor read/64, error -71
[  640.716793][  T796] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input122
[  640.751721][ T5186] bcm5974 2-1:1.0: could not read from device
[  640.760592][ T5186] bcm5974 2-1:1.0: could not read from device
[  640.767597][ T5186] bcm5974 2-1:1.0: could not read from device
[  640.774173][  T796] usb 2-1: USB disconnect, device number 105
[  640.782016][ T5186] bcm5974 2-1:1.0: could not read from device
[  640.849487][  T797] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  640.988317][  T797] usb 6-1: device descriptor read/64, error -71
[  641.048308][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  641.077182][T14921] FAULT_INJECTION: forcing a failure.
[  641.077182][T14921] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  641.090861][T14921] CPU: 1 UID: 0 PID: 14921 Comm: syz.6.2670 Not tainted syzkaller #0 PREEMPT(full) 
[  641.090889][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  641.090901][T14921] Call Trace:
[  641.090909][T14921]  <TASK>
[  641.090932][T14921]  dump_stack_lvl+0x189/0x250
[  641.090960][T14921]  ? __pfx____ratelimit+0x10/0x10
[  641.090985][T14921]  ? __pfx_dump_stack_lvl+0x10/0x10
[  641.091005][T14921]  ? __pfx__printk+0x10/0x10
[  641.091040][T14921]  should_fail_ex+0x414/0x560
[  641.091073][T14921]  _copy_to_user+0x31/0xb0
[  641.091097][T14921]  simple_read_from_buffer+0xe1/0x170
[  641.091126][T14921]  proc_fail_nth_read+0x1b3/0x220
[  641.091149][T14921]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  641.091172][T14921]  ? rw_verify_area+0x2a6/0x4d0
[  641.091191][T14921]  ? __lock_acquire+0xab9/0xd20
[  641.091216][T14921]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  641.091236][T14921]  vfs_read+0x200/0xa30
[  641.091265][T14921]  ? fdget_pos+0x247/0x320
[  641.091294][T14921]  ? __pfx___mutex_lock+0x10/0x10
[  641.091321][T14921]  ? __pfx_vfs_read+0x10/0x10
[  641.091344][T14921]  ? __fget_files+0x2a/0x420
[  641.091373][T14921]  ? __fget_files+0x3a0/0x420
[  641.091394][T14921]  ? __fget_files+0x2a/0x420
[  641.091425][T14921]  ksys_read+0x145/0x250
[  641.091448][T14921]  ? __pfx_ksys_read+0x10/0x10
[  641.091471][T14921]  ? do_syscall_64+0xbe/0xfa0
[  641.091492][T14921]  do_syscall_64+0xfa/0xfa0
[  641.091506][T14921]  ? lockdep_hardirqs_on+0x9c/0x150
[  641.091520][T14921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.091531][T14921]  ? clear_bhb_loop+0x60/0xb0
[  641.091545][T14921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.091555][T14921] RIP: 0033:0x7f08e7b8d9dc
[  641.091567][T14921] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  641.091577][T14921] RSP: 002b:00007f08e8a9e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  641.091591][T14921] RAX: ffffffffffffffda RBX: 00007f08e7de5fa0 RCX: 00007f08e7b8d9dc
[  641.091600][T14921] RDX: 000000000000000f RSI: 00007f08e8a9e0a0 RDI: 0000000000000004
[  641.091607][T14921] RBP: 00007f08e8a9e090 R08: 0000000000000000 R09: 0000000000000000
[  641.091614][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  641.091621][T14921] R13: 00007f08e7de6038 R14: 00007f08e7de5fa0 R15: 00007ffe29cfc428
[  641.091640][T14921]  </TASK>
[  641.348247][  T797] usb usb6-port1: attempt power cycle
[  641.691874][  T797] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  641.728621][ T5921] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  641.739573][  T797] usb 6-1: device descriptor read/8, error -71
[  641.905768][ T5921] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  641.915492][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.924222][ T5921] usb 2-1: Product: syz
[  641.932640][ T5921] usb 2-1: Manufacturer: syz
[  641.938412][ T5921] usb 2-1: SerialNumber: syz
[  641.951742][ T5921] usb 2-1: config 0 descriptor??
[  641.971781][ T5921] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  641.988642][  T797] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  641.997968][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  641.999324][T14947] No source specified
[  642.009686][ T5921] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  642.022817][ T5921] usb 2-1: media controller created
[  642.029428][  T797] usb 6-1: device descriptor read/8, error -71
[  642.052807][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  642.142977][ T5921] DVB: Unable to find symbol mt352_attach()
[  642.151335][  T797] usb usb6-port1: unable to enumerate USB device
[  642.195128][T14924] digitv: more than 2 i2c messages at a time is not handled yet. TODO.
[  642.204930][T14924] dvb-usb: bulk message failed: -22 (7/0)
[  642.212328][ T5921] DVB: Unable to find symbol nxt6000_attach()
[  642.220109][ T5921] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  642.241443][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input124
[  642.255905][ T5921] dvb-usb: schedule remote query interval to 1000 msecs.
[  642.263181][ T5921] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  642.276323][ T5921] dvb-usb: bulk message failed: -22 (7/0)
[  642.282601][ T5921] dvb-usb: bulk message failed: -22 (7/0)
[  642.296640][ T5921] usb 2-1: USB disconnect, device number 106
[  642.419944][ T5921] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  642.618166][  T796] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  642.768183][  T796] usb 7-1: Using ep0 maxpacket: 32
[  642.775049][  T796] usb 7-1: config 0 has an invalid interface number: 201 but max is 0
[  642.784696][  T796] usb 7-1: config 0 has no interface number 0
[  642.791129][  T796] usb 7-1: config 0 interface 201 has no altsetting 0
[  642.801363][  T796] usb 7-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04
[  642.811732][  T796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.820173][  T796] usb 7-1: Product: syz
[  642.824364][  T796] usb 7-1: Manufacturer: syz
[  642.829352][  T796] usb 7-1: SerialNumber: syz
[  642.837170][  T796] usb 7-1: config 0 descriptor??
[  642.861071][  T796] go7007 7-1:0.201: probe with driver go7007 failed with error -12
[  643.068226][T14958] nbd: illegal input index 895345970
[  643.083698][  T796] usb 7-1: USB disconnect, device number 20
[  643.230457][T14976] overlayfs: failed to resolve './file1': -2
[  643.258302][ T5868] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  643.424952][T14988] fuse: Unknown parameter 'use00000000000000000000'
[  643.428152][ T5868] usb 2-1: Using ep0 maxpacket: 8
[  643.439313][ T5868] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  643.447692][ T5868] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  643.475790][ T5868] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  643.491298][ T5868] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  643.502790][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.520552][ T5868] usbtmc 2-1:16.0: bulk endpoints not found
[  643.756778][T15000] overlayfs: failed to resolve './file1': -2
[  643.859025][ T5835] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  643.909041][T15008] netlink: 'syz.6.2702': attribute type 10 has an invalid length.
[  643.909335][T15007] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN PTI
[  643.917274][T15007] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff]
[  643.917298][T15007] CPU: 0 UID: 0 PID: 15007 Comm: syz.6.2702 Not tainted syzkaller #0 PREEMPT(full) 
[  643.946915][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  643.956960][T15007] RIP: 0010:h5_recv+0x146/0x980
[  643.961811][T15007] Code: 20 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 dc 88 e2 f9 4d 8b 65 00 31 ff 4c 89
[  643.981587][T15007] RSP: 0018:ffffc900039c7c20 EFLAGS: 00010202
[  643.987647][T15007] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f
[  643.995618][T15007] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000
[  644.003589][T15007] RBP: ffffc900039c7d40 R08: ffff88807a7ddc1f R09: 1ffff1100f4fbb83
[  644.011554][T15007] R10: dffffc0000000000 R11: ffffffff884425e0 R12: 0000000000000001
[  644.019520][T15007] R13: 00000000000002f8 R14: ffff88807a7ddc10 R15: ffffc900039c7de0
[  644.027480][T15007] FS:  00007f08e8a7d6c0(0000) GS:ffff8881258a6000(0000) knlGS:0000000000000000
[  644.036575][T15007] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  644.043169][T15007] CR2: 00007f08e8a7cf98 CR3: 0000000079316000 CR4: 00000000003526f0
[  644.051150][T15007] Call Trace:
[  644.054427][T15007]  <TASK>
[  644.057360][T15007]  ? __pfx_h5_recv+0x10/0x10
[  644.062017][T15007]  ? rcu_read_lock_any_held+0xb3/0x120
[  644.067482][T15007]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  644.073369][T15007]  ? tty_audit_push+0x7c/0x250
[  644.078140][T15007]  hci_uart_tty_receive+0x194/0x220
[  644.083341][T15007]  ? __pfx_hci_uart_tty_receive+0x10/0x10
[  644.089061][T15007]  tiocsti+0x23c/0x2c0
[  644.093219][T15007]  ? __pfx_tiocsti+0x10/0x10
[  644.097808][T15007]  ? __fget_files+0x3a0/0x420
[  644.102484][T15007]  ? __fget_files+0x2a/0x420
[  644.107092][T15007]  tty_ioctl+0x626/0xde0
[  644.111335][T15007]  ? __pfx_tty_ioctl+0x10/0x10
[  644.116101][T15007]  __se_sys_ioctl+0xfc/0x170
[  644.120689][T15007]  do_syscall_64+0xfa/0xfa0
[  644.125283][T15007]  ? lockdep_hardirqs_on+0x9c/0x150
[  644.130483][T15007]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.136553][T15007]  ? clear_bhb_loop+0x60/0xb0
[  644.141313][T15007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.147207][T15007] RIP: 0033:0x7f08e7b8efc9
[  644.151630][T15007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  644.171241][T15007] RSP: 002b:00007f08e8a7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  644.179683][T15007] RAX: ffffffffffffffda RBX: 00007f08e7de6090 RCX: 00007f08e7b8efc9
[  644.187665][T15007] RDX: 0000200000000340 RSI: 0000000000005412 RDI: 0000000000000005
[  644.195721][T15007] RBP: 00007f08e7c11f91 R08: 0000000000000000 R09: 0000000000000000
[  644.203690][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  644.211667][T15007] R13: 00007f08e7de6128 R14: 00007f08e7de6090 R15: 00007ffe29cfc428
[  644.219646][T15007]  </TASK>
[  644.222665][T15007] Modules linked in:
[  644.227926][T15007] ---[ end trace 0000000000000000 ]---
[  644.236282][T15008] macvlan0: entered promiscuous mode
[  644.239655][T15007] RIP: 0010:h5_recv+0x146/0x980
[  644.246769][T15007] Code: 20 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 dc 88 e2 f9 4d 8b 65 00 31 ff 4c 89
[  644.262511][T15008] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  644.267500][T15007] RSP: 0018:ffffc900039c7c20 EFLAGS: 00010202
[  644.281971][T15007] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f
[  644.290098][T15007] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000
[  644.298340][T15007] RBP: ffffc900039c7d40 R08: ffff88807a7ddc1f R09: 1ffff1100f4fbb83
[  644.306335][T15007] R10: dffffc0000000000 R11: ffffffff884425e0 R12: 0000000000000001
[  644.314841][T15007] R13: 00000000000002f8 R14: ffff88807a7ddc10 R15: ffffc900039c7de0
[  644.323666][T15007] FS:  00007f08e8a7d6c0(0000) GS:ffff8881259a6000(0000) knlGS:0000000000000000
[  644.333222][T15007] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  644.340052][T15007] CR2: 00007f9285bb2698 CR3: 0000000079316000 CR4: 00000000003526f0
[  644.348302][T15007] DR0: 0000000000000f80 DR1: 0000000000000000 DR2: 0000000000000000
[  644.356355][T15007] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  644.364600][T15007] Kernel panic - not syncing: Fatal exception
[  644.371085][T15007] Kernel Offset: disabled
[  644.375415][T15007] Rebooting in 86400 seconds..