last executing test programs:

14.142974746s ago: executing program 4 (id=3703):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20)
madvise(&(0x7f00002f9000/0x2000)=nil, 0x2000, 0x2)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='cubic', 0x38)
gettid()
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
r6 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000340)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x10002, 0x1})
io_uring_enter(r6, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1)

12.488219692s ago: executing program 0 (id=3705):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000040)={0x0, 0x33424752, 0x2, @stepwise={0x7fffffff, 0x1, 0x5, 0x7, 0x6, 0x80000000}})

12.087185606s ago: executing program 4 (id=3707):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0)
r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30)

10.020598575s ago: executing program 4 (id=3711):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x4002}, 0x4000004)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x4, 0x2)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000001080)=""/4103, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000000090108000004000000000000000008080006400000000000010c050200060100000c0004800800014000000004000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r5 = accept$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0)

9.719899471s ago: executing program 2 (id=3712):
socket$inet6(0xa, 0x1, 0x0)
gettid()
truncate(&(0x7f0000000000)='./file0\x00', 0x96f)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x28a02, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0)

9.369093593s ago: executing program 0 (id=3713):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
write(r0, &(0x7f0000001780)="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", 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

8.522591913s ago: executing program 2 (id=3716):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7.597071643s ago: executing program 3 (id=3717):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000100b2", @ANYRES32=0x0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

7.461248357s ago: executing program 2 (id=3718):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}})
r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r4, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
syz_emit_ethernet(0x4e, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000)
ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6.798250296s ago: executing program 4 (id=3719):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000340)={'vlan0\x00', @ifru_ivalue=0x5}})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1c}], 0x1, 0x0, 0x45, 0x4002}, 0x4000004)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000440)=[{}, {}, {}], 0x3, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0)={[0x800]}, 0x8)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0)
syz_open_dev$vim2m(0x0, 0x4, 0x2)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000001080)=""/4103, &(0x7f0000000400)=0x1007)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8})
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x1, r6, 0x1, 0x1, 0xa, 0x1ff, 0x1})
close_range(r3, 0xffffffffffffffff, 0x0)

6.453171073s ago: executing program 3 (id=3722):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_cancel(0x0, 0xfffffffffffffffe, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000240)=@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xffffffff}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000500)="be18cb99a7d06f0056d5242aeafb05537373b8ac8fa71c85585a129a23382e98a9970f94e410a1220eb68840366c5c4baf9b4650f183b0201d2aa1405147888d8ed3e3e428bb163bbb78dc099f9be3c73cadc04658d186e54dd5f947962491eb2b0322dc4a8444f7f6ebe7c7aa5dbe654d2d13b88d5f92917a3a1d5c51996a2cd5b63eadcd4a704a1012c5345e0b33e90fc8e53af4cf7d1f154a", 0x9a}, {&(0x7f00000005c0)="f1667168d7fa7f7af7d06a20050d14f58cb00cc12e129edd4cc1fc376481d2014bc9e3eb379dd6062fe0c1d3ac1e1b6249e412e9123a50d28f5bfdb6ccd671cbe523bcfbcf8647efcbcf0ed143d6405811e83f2df915d5c3f2bbdfe2e1980dbe73af8d09d521457913112cd06b238e1d968e9325a6ded9d0174eda46d63e3baae342fa332f33cd2321d423717ea92ada27e87c7761e24ffb1fea02fea0108798ee3f09b48c9517871f9508937bab52318a", 0xb1}, {&(0x7f0000000280)="2b12236d3948d5297ab0510e3bb57adf648acc3477d56f81b1a22de96d77d6ea5fe54a23bfdcf20e6f6a5fe2c7ff9932c41b9634fc3276eb0e12bbf25e94cb", 0x3f}, {&(0x7f0000000880)="b76953b1b3e53ce5437efacb7ad332b5655252b8e04228b5e5bddbff48b2acc9ad051074e910566391ea2eb5a3ab2bc887ca92ff98c097ae3c6d05f755a94c695864be5ca1a1adf2dd79e3b1c45cc8dee16411d4d21ae2fdce5700558e99ca5e773fe884676cf484ca2b40a53a013c6cfa54ea0a1ffe17dd1e729ddf56283c8ccceb3177c4ceb2663ed6d6591523d292187410e0cfa1d7188ad5d05aeadacd951a3f958bb2222bc4a98283a74794dbd6d4b8690a6c1f7b5aad1fdd411357a9bca05a2a101f4703f6d11ad3249a0a0ac4b9f4dc399eab4ea49a4c148e29ee9811197350fc2dca934cc6661705206ef9f4ca5bc4e1eaa996afa1cc3f12ae3579150d1ae51c4fa18c4f64037beb229e1d1186737f8e6d2bc24684de62c1072794790e37d83706b63b704c094ec72a4cd48814324a086bd4f71d0eefa99402d0bee455e75c2479d2def3ffd6d732cc0be8f937a2d4096cb367e150e8acccc18d4203d2b1e130e91dd758aebfbe71bd66934ad86f1053a56d79097956db4d666914db494616e642837feade6a3c81cb8dc61292fbcbf24b71edcec887bae843275d2264a7d00e979c7748e470f88c56ba611485e50ea45cf5f86c1cba6ac2d540a9b19ac67348ec4db8881821ce6b4ae979ee35b46b56e18a6a921368a8674a41e8e395d142b78074e9894e7e8f0ec2582265343a48746eab74be26ee4f947d825049efea45c7df8bb91e47900b49c63acb909c2cafedb0cb4cdf80eedf6d2a4db0407ebfbb54b7e7dc1454c094dda06bb260ad850c48b8b8596959b98125b189321fabd30e3d16da3f5700d5ee43c6c7ec55185219d30f88e59ae65e6aa36cfa6aa0638a5388efa999aa5f4bb427a0f342a855246ac27312d3bc158abe07246a30414fe9e3fa63fbd00af4a80c7ef992319ba6db45aea6d932bb57e462912a17f71e7651576c94f863ca48ac397f450c053f87767ca3287a9946a0e4c587252018d8546d697610517ac3975d5fa5c411ada30584d09347042bd7fbb6002594867546d9672b302594f0a968eac2bd8a1dd30058a5b11259588d745f1ed97ae98fee3ca4cac6fb969a701d40a99597285859240158f5b2e65be5663e25d11fa06ff66beac63dcf34b4c11ef953127a7735126a355bf95900068b7760694fbdcc387dcbd4fe823a124b0420cf71bfa294aa7dfd7b70b4f9e6ac89e02340e79c783fdcf96ffd6e69749bd7499d62498d41890bf013e218c0b4b2ef1e89c20cbb4f346c51df2e5b7079ae821fc66451e954f9f3447399f14ecf5b19dffa9d3c0f4fb876878302ffbf8184cd32912f172f9d13112ec04b5bc420fcd9b4b3f579fa0d8710d8f069a665c100d248065f5683edb86af14764c00ee38a5bf31a72aac60ed8ecf6ea1c6a1317c6ee0a413737cbb35a990841a55977a11363b93123d205e4e84038a829b349aed0a172e457aa2f344ba47321b36e23f18f068dd8aa6c6ad8d209f3eb75a1e2ff9fe4fe870d901c081a5e2c1f551d1e5a9f46d587a1ba5dbc5f18a73c781279cee98fd9f5f0781116ee9eb1051c72f1e687092b0f1e063d24e5f36de8c03794859fcbd1702e89aed744cf79251fea1f35c17b57377dcf74daf2ca8ab0ce37d0a790c644de1da0ad2701951ad7eb761428d317dcd9488a037286189f1782d607280eb21ab4e8e003d63b0e8fd99cd60f48671fb490fbd2832907b474b813d34a6db9a639ff671d19ee502f66fc5a2c197894bde8d2c5677aed1df9b9db2a5e240ab4954f9c26f1a458407492d130cb11ed4a8146eea4c962e3aa78105a9912ee6f04ddab656aa31811ea27c7ae24cddcc347174257aadfcf4f4d23f8e18b297e756b539dea374f307c85760f77bc09e8e62a76dfb4883224a37e6038934b8543b34b48aebf495f447a8f60714ded8a6cd15c5deff7ce6a61a1042a427bcc18098c56a449d5a5b62e957e09f5c6dd721eef6b0509f7424e2a1eceafb93f62ee1fd3f7e074ab4af847aaed5dffe5a92837d6320727ad2dda6ce6a4cd69185a26895f2cf4e74e99ea1eadf083940fcc7cbcb4b2efd55a9c855942b3347d8d48064aab1fb0bc16da88140d35f8c757d1d487fc5dd730fc0c236c4e5ba10f9458caa5c8fab3844d24aebb73e0626d53cd792d7f23938fecd935405ccfc7f795d1f04d96ba7c137605d36675f5d9385bb55e32ea49b991a1df64b0a021c31730558a8edc95901da1ad2ecc88b93f6b5da29a0c09d05f6d1095fe5e09697b602be2cf20afd534b717eb54e57e3c86a2deedc22756160479d2924f442dbac8089a0036383c72ce4246a2fe9fad46784cf6e9ef0a9992e37cf4410f8e019f71f56a68bf72bdd3698d16875e57447dfbce0f5d8148be19cc671665a7b4a7c2959977f822f720660cfd17263ff15b8455d3868b4b0c106958030654d60e03a15d6c544760025c7f845f04e34b5d9d122c5a9d78683b0b2677e73ae64f6307d8bfa8958ea27b18c3a1b54e9cb94a6ee37578fb0a6cf379e0d78cccd72820418c7f7aef29d4a13c313d4778cddc0c7c6a5fa1946be038b4b56e0d0f4989fd6e296a914c2f00cbeb9182b9f9bef95200cf87c0725c6f02239a7d63e208281bea82731b96bcc6a4c19e1ffb93013a579e7efc4d91f7f4bc6a311c235ce04e3790f64de13bf0dc322b34c26ae375aa612e5482762c68dcfa8053b425ed25724dedd13e59d71f686475ec30ceb444728c1377afe9b17450a59d34b31e1649ac01d5a4b58e1a95a0359306c88cb175aa22440734e2870264f4537e5504cc8288e1f586c7d19f9e95d762b5b32da8bc836c8d0d972349c765506d61897ba2520d692c4ccc6cbd8b973b32eb9b2231332df95164d8a551bec678ae20ea4fe329099fef3b4d8ed22194cc206dc82526b6f6d611c5208f466ce689542b0698e4fe261fbfb1e8ecea9bb68b58647285e7985e963266f1c16320b7fd29c3c27fc51d2a47ada1df1c183c0237fdd61ecb8790c49bfc4cefc6e810ea45c8542d0cd5c94296276676911f81448a77e74492292f47c42d692fa8969a22c67be5c5634947254b83f26cb2ccb7f6b98f107156d31bf2fa072d3c9cfb722c7134d55a4063b3a37bf58fd7dbcc8194007bd2ecca0a6a2e2a3e5c47947cdcbcf64b98809a1e00bad7dd0c0fcfe2be3ba16721c19ca6ca2235276dd2bdba8ea82f6a4632a76eb84a840bff03028b083a2323d7efa00301aa52e7271bdbc93fd45555ff53b287d9e8d4bce6fe4f9e74b5e7dfbb1e0275231a6524440ed3191e2da4357871ce7afcc5fa786e3175d6a76e4208d88b0a7b2f5bc332ec0b856452d6c1b2cf4bad6b36fc656ef10f8750059ccfc0cb79101c7f67992b231ada2685307b18d563eba2b0b106287cc7dff0bcb12676059ca6d9b2d6be0186070afdffbaf840e6f454dcb22cb5ee97fb7bd796650e58fd9fbf21439a251a0bb2de0e3bba1a540d74535ffb37dd7c7a48d359c116ed0f54d1ee429e0a41faf1dc69d2c13eff3197f648aa58a2bf218b3d8384580ee82a0d03640fc961e92c5f833c37bfb8bbf51b47aec21818100666c7aadd22f21e1b9a14e7ece1445efbbbe9b576dcaed758d7f505e9af027ff79cb535716974685c1e8b042732fc2cdcf0c985520269086535bfea84fd0410ebeb15ae72aff6905ae8a51a8bfd6852080f927b3d3cf8dba492542d5d89998710fe58c911fb8e09ad4df17de099304dca46976145167e4bf0aa1a5d39251e57d578b1edfbba5151e9e0fa8aa19986c2cb480c0e4bd64606517d9d80a400d29570ea73f2a6b48b125cb36cdcec3a495f1cdf595e9c8e948fd21a7d65dc4c8a48c7fa27cb1b1173b8f073d8fce42397342a6c4030e34307de423d61a6b7853431a77083fbea164cb6e7752a1f78f21ccf285134d41da71f89cef0704dab3415e5db99114ff42e7947cc66721bcab5121f3d4302c31c0a9427f375db789a8f5d3aedd396b5360bdc2aaa44a1006f18da41dc3e3131122e60bf01dcb8aa05e20ad939ecc0ab438da4d02a27d265b5a7332b7ebea9d03c1bde60d68c9014d2d68274510b111e8477601cb39432572e07db80af2bda2108e651e30900ff7957c96eec34c89635d6fbfd5d060eac9080538b429ce34ccb0b285f87ca5bae75866694fe31fdbee3b5ba194ededc8819af00c304817b70d8447d753de1a860d813e99fb7512b66aa63395e545a4b2a99e444e5b66be2d44d504c8d8b8d545e7bac9529bfb1f14b30ed95697de4dee33b588d4436b8af7a81fba50e8c9cdcc906d1a5a80b6723cc0c6b83b677876daf9290465a2ff08d77208bae48ce5540bad11601928f9986165b8433f8a47cc4641e16a5d1572bca3c6876750b0dc1a08c4c5912d7fccd1ac1b58a21168bcd0440c87467cb3638bd29f76bfb4999ec72d6947dcdb73991456887f32f3afafbeb737cf617347e2f3ac187fa334fb8f3a89a1c063187d21d64614b8b7c4fad01940427ab53f64adcfd4ee9383f036393c5f8318e8463762eb292be7a02b9b96f70753a73efb99c0dc479fb20ad96bde1320ae6a24988d402d94481d3d286238bd326417143366afee88cacc1e1844fff75a863bf039bba2f1ccfcf08a29d766c88deff153258f508bdff9707339bbbfb825f883b2b23b4202ba2213587b76b3f08b8b6411a04c4eac181699bff12889204d28cde1b8e222917589331fe6639412e3d9ef5ae36bcfbd9b6fa9f8c123ae1dd6b1ba34bd679c7afc6277fc22bf283ecbf043e76e1004d02eede5ca9aae47b3e51ecfd894ca6d04a0c1d26e54316005e8da14990ecf57c9408859187562d70d6640e0c53512252c5f0f893d75df9fd94a90934e17364114e967479eb3c5089ba3f0909b52d30379ca99176dc0f2e8b652badd9c1b0e135d782ced959638f4500844710f5630ba81fe2fd7281ca4952138a39ee7ec93700dcfb4d6825b68f238b4c7d0ae02f6b32951e62a7be3f8b5dab0628b74a46379e7be7dbf8682967d11bfd6566a9308af3c6a1b55220827a98839b0f89ff2fa5309003e69eabc59913a0e0cb9fe1d255f0516be5a2fa536dd4bc9db7d0c3d1f904fe65a9dfbe89f48e9fa9e9341e6de7ad470aa38f090af719c518c4a9e7818f284230c2cd8e4fc8ce4df391aae68148231a0e5a62122032522bd0e23258b93c33476b97cb6eb39957ba30a4a2dc20857b93f08db9892cd3f2d4f57ab3ddaa7ded8e2e676d9ee51f998ae1021c0cdd407ed203209590760a55c982b371d4ec66ed6094158dbf75fca061faa97b90fb41279e5e76fd13535e7bb97d7b5f4473924569a7dd30c239bdf2ec2f906a7550e69c612886cab7d2b82428b2f7d1002b0c68817e56a2ab22d35056dd95ad1bc174e9303962ddb12199d7465570541f453e4e6cc1c163e8de63ada3693e5811d3317e7512d7b924ce516c3ae1520fd64bd13e7dfe2cc7264952e27d205dba6c7d0015d4cd6e4b7d35f67c6d9ebe1b8d1475a5addf12d72bc40579784d54efcc9ca2bacb63654a84f98fd1860334acaeab6b0aa583aa59749bb23724b8aefdc17ae3538cdb9d9632a8f4c794592552d9981c5f328d8f19ccc40db05eef98c68a56712cb3b6ad2a9990680b598f1f78fd0c2a436db160c94075f249a6b6803dbd7abcb1fa7dbafad1d5765b2e024339678677d62f23f0fe5441c335dfc789ceb167c55836613ab48ebb37529bf66471ddda613432d6a17107075b726432bcadfe3062a91213f432b2daad387c04b6565dfcf64c6cfe13bb4041679a5c8e6566b82bee5d316a33", 0x1000}, {&(0x7f0000000380)="307737dc58bc2149d40e7ac27afc6fb4f2dcb8b7ec323e417e665cdfa6eb07b2a6fee8a5d8a700a31c7bfdb0c6d675e40711", 0x32}, {&(0x7f00000006c0)="3259a65d891588d7541e72cc32beb201100f1e0d2fb252a3157f039bbd758b25a4ade16f6fd5dc8872ceba7fe1b835ba5c20", 0x32}, {&(0x7f0000000700)="707d8e44c0c046636ad61d9823c3ded2c922998048197fb35c76843c79615fb5feea3906f9462f4451c71373ea72c71e1989e8d8f7f9ae041c924929ae6b2c318bd2a5205aed020bc6bddd7a2a2734972a5a7b67782e5454869dcfd899ad55c1339e12704e1e583438536b32e8115c25f518a3919a651ec23d27a1b4a8ae7a0f32257f47529f2394abe2fc270e9fbd2117d7edaa", 0x94}, {&(0x7f0000001880)="57040e9af67cea241ca6c846cd0d07e53636008c31cf27d91b8fb089ed5e4baaffe4b282510eda02fcdb7d53f368758d4cb55f8d78f70fbc4e66ea2725ad8b6673fd07c61a11bc5400f253e0e82750f14145966b26df608a481104617960504118bba2524cedffc4ec903296f5efcfd0", 0x70}, {&(0x7f00000007c0)="80389216a3a3332f991b583565f4437cad495d283c57201d11661cead44b17c2c008360832e6", 0x26}], 0x9, 0x0, 0x0, 0x4000090}, {&(0x7f00000019c0)=@in={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001a00)="7fb8764c349855d6a93e37d89287c32005beea5a080b34c7686902b9ae5053160f7c7961", 0x24}, {&(0x7f0000001a40)="1daba7db5a03db7555600c57161840f82273891e09a912765fe6cdca7553b89be05169d1d49ce9a1a69e119fa2a7b83fc329b1b33cbf120b3a24a76f3c180cd87293392a9a3d4d4b5e881dc0f4bd12d9e4342cbb127f0192d4b0ef5fc1f94bc81bceba5fa919dccb50df509be898dd314af34c42338bdd4a100132fb5e6b03bf93dbdbd23d42fffd37a0bbdeb79df8618d59fe94fead9268", 0x98}, {&(0x7f0000001b00)="0c4ace0476fcf61d99271d763897e5336071ac5675af06efbbb252dff77130d8e81d93fd18d2cf264338e4385c4816eb4d22c660eda0ce6a7e0c7fc85f3a5564d2bc05709a1648a20837a33e", 0x4c}, {0x0}], 0x4, &(0x7f0000001d00)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x8a10}}], 0x68, 0x4008801}, {&(0x7f0000001d80)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001dc0)="c566ac07bd9a59fb42146a62976987cacc68ac2d69a2d87b1a3171e58f48c08e45303e6ddd242b8d9df23b1751110855df23f07534aedf574781926cff964ba1ce20a4c94960a854aef3c459587dade05932b29ffe10dd03f7cf98f0b7c01395df342d22bd431a846df48b47203a91871eca5e40f60c3921ccdcfd058cf5ed366f032be229e7ef42866222a369bc67ae8c514a93e3beef06d5fb532331f75f48718686cd4c0fbfea83e1e7cd34475c59986de2734f7ced98b14722307768d273e3ac65d6041ca7fbacb4b5f33c85774e09d80e", 0xd3}, {0x0}], 0x2, &(0x7f0000002080)=[@init={0x18, 0x84, 0x0, {0x1, 0x9, 0xffa4, 0xfff0}}, @authinfo={0x18}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}], 0x48, 0x8800}, {&(0x7f0000002100)=@in6={0xa, 0x4e20, 0x3, @mcast1, 0x5}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000002140)="8c089a4fd856a9ad7beda816868d288b9f1c42270cc624cb0455e579b4ab9866d47b8f5c592e277598b7f8873480c028fa3127460802073336097a00b13b5ef41f5399e723d252404c1546d6c96ccea2ee5c7c35925e81710b66275503223833be5f5dbe54b924c6250a95b64d03ca591b3087bcc826d82a6eca5c0833f47fdd9a01999b3c0fcb1a6c7ed701482b7aee18acc64143ba86", 0x97}], 0x1, &(0x7f0000002340)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xffff, 0x8004, 0x6, 0xffff7fff, 0x8, 0x1, 0x81}}, @authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xfa77, 0xa, 0x5, 0x4, 0x3, 0x9, 0x4}}, @init={0x18, 0x84, 0x0, {0x874, 0xe, 0xde32, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x40, 0x1, 0x7, 0x1, 0x4, 0xffff, 0x9}}, @init={0x18, 0x84, 0x0, {0x7ff, 0x2, 0x71a3, 0x8672}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}], 0x108}], 0x4, 0x800)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x47c, 0x12}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x6}, @device_a, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xc, {0xa, 0x7}, "6e74be79f529790a"}, {0x0, 0x8, {0x6, 0x9}, "4ba5ec15b9af5b51"}], {0x0, 0x5, {0xa, 0xd50}, "6339425cdfdc7c15"}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040894}, 0x5)
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="b9ff030768441a8cb89e14f088a8", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000000000/0x4000)=nil)

6.438994774s ago: executing program 0 (id=3723):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)

5.257231728s ago: executing program 1 (id=3724):
socket$inet(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000100)="24000000580025000307f4f9002304000a04", 0x12)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "cc2b128bd8f713b7", "4c31fcf3c1052934ab6c618c9b111c16", "4c7395b4", "eb77357bc3c74bff"}, 0x28)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x2, 0x1}, 0x10)
madvise(&(0x7f000023f000/0x2000)=nil, 0x2000, 0x13)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000569000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000900)="65f30fa7e066b94209000066b81286694866ba000000000f30baa100ec65a00000660f3881433f640f07b801088ed8baf80c66b834ff178166efbafe0cb000eeb8000002c0640f01cf", 0x49}], 0x1, 0x30, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000380)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sched_setattr(0x0, 0x0, 0x0)

5.191204844s ago: executing program 0 (id=3725):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)="75c1ccf79c5bfe88cd6a6a000063ab59578db363f48925590534d436138406b6417e39a06607de99de69db13fd737428808940bcd0840dc930c81a8bd8b665cd233c5831977dd63ce2c88d43b17700000000000000", 0x55}, {&(0x7f0000000380)="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", 0x236}, {&(0x7f0000000100)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fa", 0x28}], 0x3}, 0x40)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0)
close(r0)

4.978746874s ago: executing program 3 (id=3726):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000340)={'vlan0\x00', @ifru_ivalue=0x5}})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1c}], 0x1, 0x0, 0x45, 0x4002}, 0x4000004)
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000440)=[{}, {}, {}], 0x3, &(0x7f0000000480)={0x0, 0x3938700}, &(0x7f00000004c0)={[0x800]}, 0x8)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0)
syz_open_dev$vim2m(0x0, 0x4, 0x2)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000001080)=""/4103, &(0x7f0000000400)=0x1007)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x40, 0x0, 0x9, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8})
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x1, r6, 0x1, 0x1, 0xa, 0x1ff, 0x1})
close_range(r3, 0xffffffffffffffff, 0x0)

4.906778884s ago: executing program 0 (id=3727):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00')
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x20)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000400ea0018010000756c6c25000000007b1ef8ff00000000bfa100000000000007010000f8ffffffb700000008000000b700", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = io_uring_setup(0x8c3, &(0x7f0000000280)={0x0, 0x93d2, 0x2, 0x45, 0x227})
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)

4.724871693s ago: executing program 4 (id=3728):
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
fcntl$dupfd(r0, 0x0, r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, 0x0})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000080))

4.704065337s ago: executing program 2 (id=3729):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
socket$inet6(0xa, 0x3, 0x3c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xffffffffffffff64, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0xffffffffffffffff, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
epoll_create1(0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0)
sendto$inet(r4, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf", 0x5b, 0x11, 0x0, 0x0)
syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xfffffffc, 0x400, 0x8003, 0x25f}, &(0x7f0000000240), &(0x7f0000000200))
syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, 0x0, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8)
close(r5)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x27, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0xffffffff, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x6, 0x3, 0x2, 0x0, 0x6, 0x3, 0x9, 0x2ab, 0x4, 0x7, 0x9, 0x3c5b, 0x1, 0x1ff, 0x9, 0x5, 0x1f461e2c, 0x7, 0x2000e665, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x808242, 0xffffffff, 0x6, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x7, 0x80092a3, 0x1200000, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x7, 0x8, 0x4, 0x2, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2c3, 0xc31d4fc, 0xffe, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x1, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x7fffffff, 0x405, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x9, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0x3, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93693, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x68000000, 0x7fff, 0x40000, 0x20000001, 0x1, 0x4, 0x5, 0x4, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x7, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x6, 0x38, 0x800006, 0x200, 0x80, 0x1, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff5, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x6, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0xef8, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb2d, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x7, 0x7fff, 0x420, 0xe620, 0x2, 0x2, 0x4, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0x8000ee1, 0x0, 0xffff, 0x5, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x4007, 0x8, 0x1000, 0x5a2b, 0xe, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3401, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.244247236s ago: executing program 0 (id=3730):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)

3.130067469s ago: executing program 1 (id=3731):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

2.842220548s ago: executing program 1 (id=3732):
r0 = syz_open_dev$I2C(0x0, 0x100000000007, 0x8b01)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000500)="63fc96c97223a0706642bb8052ef26276752b777888c1b1d07d62ee35414d36358159d19f80839e439e70335d319f0291ba2cb797d8225e9077ee4d646b22c7fa43cb93b4be9332c93c37fe0cb77ad27df9a51f5283b3c16280086221270c19c4d5faa242f8dce82d6e44aba2bfab5559b341872ae9f74389da550b5c7c8985b43d620d5977f56983b12", 0x8a}, {0x0}, {0x0}], 0x3, 0x3, 0x8001)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.762167183s ago: executing program 3 (id=3733):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000001c0)=0x100010)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x8, 0x0, 0xb44, 0x9, 0x0, 0xffffffff, 0x5}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = memfd_secret(0x0)
ftruncate(r3, 0x5)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000010000", @ANYRES32, @ANYBLOB], 0x18, 0x10}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x3)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="e6643d", @ANYRESHEX=r4, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRES16=r2, @ANYBLOB])
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x18)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000240)=[{0x1, 0x0, 0x3}]}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})

2.659180879s ago: executing program 2 (id=3734):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x800}, 0x20)
madvise(&(0x7f00002f9000/0x2000)=nil, 0x2000, 0x2)
gettid()
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
r5 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x10002, 0x1})
io_uring_enter(r5, 0x6efc, 0x3900, 0xb, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1)

2.587916877s ago: executing program 1 (id=3735):
socket(0x2, 0x80805, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x2, 0x3, 0xff)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
syz_emit_vhci(0x0, 0x64)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r6, 0x90004)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)

1.676810279s ago: executing program 1 (id=3736):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_cancel(0x0, 0xfffffffffffffffe, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000240)=@in6={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xffffffff}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000500)="be18cb99a7d06f0056d5242aeafb05537373b8ac8fa71c85585a129a23382e98a9970f94e410a1220eb68840366c5c4baf9b4650f183b0201d2aa1405147888d8ed3e3e428bb163bbb78dc099f9be3c73cadc04658d186e54dd5f947962491eb2b0322dc4a8444f7f6ebe7c7aa5dbe654d2d13b88d5f92917a3a1d5c51996a2cd5b63eadcd4a704a1012c5345e0b33e90fc8e53af4cf7d1f154a", 0x9a}, {&(0x7f00000005c0)="f1667168d7fa7f7af7d06a20050d14f58cb00cc12e129edd4cc1fc376481d2014bc9e3eb379dd6062fe0c1d3ac1e1b6249e412e9123a50d28f5bfdb6ccd671cbe523bcfbcf8647efcbcf0ed143d6405811e83f2df915d5c3f2bbdfe2e1980dbe73af8d09d521457913112cd06b238e1d968e9325a6ded9d0174eda46d63e3baae342fa332f33cd2321d423717ea92ada27e87c7761e24ffb1fea02fea0108798ee3f09b48c9517871f9508937bab52318a", 0xb1}, {&(0x7f0000000280)="2b12236d3948d5297ab0510e3bb57adf648acc3477d56f81b1a22de96d77d6ea5fe54a23bfdcf20e6f6a5fe2c7ff9932c41b9634fc3276eb0e12bbf25e94cb", 0x3f}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000380)="307737dc58bc2149d40e7ac27afc6fb4f2dcb8b7ec323e417e665cdfa6eb07b2a6fee8a5d8a700a31c7bfdb0c6d675e40711", 0x32}, {&(0x7f00000006c0)="3259a65d891588d7541e72cc32beb201100f1e0d2fb252a3157f039bbd758b25a4ade16f6fd5dc8872ceba7fe1b835ba5c20", 0x32}, {&(0x7f0000000700)="707d8e44c0c046636ad61d9823c3ded2c922998048197fb35c76843c79615fb5feea3906f9462f4451c71373ea72c71e1989e8d8f7f9ae041c924929ae6b2c318bd2a5205aed020bc6bddd7a2a2734972a5a7b67782e5454869dcfd899ad55c1339e12704e1e583438536b32e8115c25f518a3919a651ec23d27a1b4a8ae7a0f32257f47529f2394abe2fc270e9fbd2117d7edaa", 0x94}, {&(0x7f0000001880)="57040e9af67cea241ca6c846cd0d07e53636008c31cf27d91b8fb089ed5e4baaffe4b282510eda02fcdb7d53f368758d4cb55f8d78f70fbc4e66ea2725ad8b6673fd07c61a11bc5400f253e0e82750f14145966b26df608a481104617960504118bba2524cedffc4ec903296f5efcfd0", 0x70}, {&(0x7f00000007c0)="80389216a3a3332f991b583565f4437cad495d283c57201d11661cead44b17c2c008360832e6", 0x26}], 0x9, 0x0, 0x0, 0x4000090}, {&(0x7f00000019c0)=@in={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001a00)="7fb8764c349855d6a93e37d89287c32005beea5a080b34c7686902b9ae5053160f7c7961", 0x24}, {&(0x7f0000001a40)="1daba7db5a03db7555600c57161840f82273891e09a912765fe6cdca7553b89be05169d1d49ce9a1a69e119fa2a7b83fc329b1b33cbf120b3a24a76f3c180cd87293392a9a3d4d4b5e881dc0f4bd12d9e4342cbb127f0192d4b0ef5fc1f94bc81bceba5fa919dccb50df509be898dd314af34c42338bdd4a100132fb5e6b03bf93dbdbd23d42fffd37a0bbdeb79df8618d59fe94fead9268", 0x98}, {&(0x7f0000001b00)="0c4ace0476fcf61d99271d763897e5336071ac5675af06efbbb252dff77130d8e81d93fd18d2cf264338e4385c4816eb4d22c660eda0ce6a7e0c7fc85f3a5564d2bc05709a1648a20837a33e", 0x4c}, {0x0}], 0x4, &(0x7f0000001d00)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x8a10}}], 0x68, 0x4008801}, {&(0x7f0000001d80)=@in={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000001f80)=[{&(0x7f0000001dc0)="c566ac07bd9a59fb42146a62976987cacc68ac2d69a2d87b1a3171e58f48c08e45303e6ddd242b8d9df23b1751110855df23f07534aedf574781926cff964ba1ce20a4c94960a854aef3c459587dade05932b29ffe10dd03f7cf98f0b7c01395df342d22bd431a846df48b47203a91871eca5e40f60c3921ccdcfd058cf5ed366f032be229e7ef42866222a369bc67ae8c514a93e3beef06d5fb532331f75f48718686cd4c0fbfea83e1e7cd34475c59986de2734f7ced98b14722307768d273e3ac65d6041ca7fbacb4b5f33c85774e09d80e", 0xd3}, {0x0}], 0x2, &(0x7f0000002080)=[@init={0x18, 0x84, 0x0, {0x1, 0x9, 0xffa4, 0xfff0}}, @authinfo={0x18}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}], 0x48, 0x8800}, {&(0x7f0000002100)=@in6={0xa, 0x4e20, 0x3, @mcast1, 0x5}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000002140)="8c089a4fd856a9ad7beda816868d288b9f1c42270cc624cb0455e579b4ab9866d47b8f5c592e277598b7f8873480c028fa3127460802073336097a00b13b5ef41f5399e723d252404c1546d6c96ccea2ee5c7c35925e81710b66275503223833be5f5dbe54b924c6250a95b64d03ca591b3087bcc826d82a6eca5c0833f47fdd9a01999b3c0fcb1a6c7ed701482b7aee18acc64143ba86", 0x97}], 0x1, &(0x7f0000002340)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xffff, 0x8004, 0x6, 0xffff7fff, 0x8, 0x1, 0x81}}, @authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0xfa77, 0xa, 0x5, 0x4, 0x3, 0x9, 0x4}}, @init={0x18, 0x84, 0x0, {0x874, 0xe, 0xde32, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x40, 0x1, 0x7, 0x1, 0x4, 0xffff, 0x9}}, @init={0x18, 0x84, 0x0, {0x7ff, 0x2, 0x71a3, 0x8672}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}], 0x108}], 0x4, 0x800)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x47c, 0x12}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x6}, @device_a, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xc, {0xa, 0x7}, "6e74be79f529790a"}, {0x0, 0x8, {0x6, 0x9}, "4ba5ec15b9af5b51"}], {0x0, 0x5, {0xa, 0xd50}, "6339425cdfdc7c15"}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040894}, 0x5)
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000004c0)="b9ff030768441a8cb89e14f088a8", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000000000/0x4000)=nil)

739.655634ms ago: executing program 1 (id=3737):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48055}, 0x44040)
io_setup(0x8, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000080), 0x0, 0x2a25}])
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x443, 0x0, 0x0, 0x4], [0x7f7f, 0x40, 0x0, 0xfffffffe, 0x0, 0x0, 0xff], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]], '\x00', [{0x0, 0x20, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0xfffffffd}, {}, {}, {}, {0xd4}], '\x00', 0xff})
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
r4 = gettid()
readv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/247, 0xf7}], 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
getresuid(0x0, 0x0, 0x0)
r5 = memfd_create(&(0x7f0000000a00)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i*rR\x17\x1a\vz\x950#(Wy\xc4x\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1\\\xb5&\xd1\xca\xcb\xc5C\xa6,\xc7~\xa3\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\x03\x00\x00\x00W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x87:me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6<p7\xaaS7\xb4\xcdtd\x81V|\xc6\x99\x81\x80\'\xf8\xb5\xe0{\xb0\x04hVL/\xff\x97\td\xd5\xddc\xc0i5\x9c\x06\x88\x8cb\xfb2\xbf\xa3\xb4\xceF\xd9\xc8\xdf\xfcw\"\xdcv\x8d\x83\x91\xacn[a~\xc8\x9a1\x04\x18\xd2@O\xf3q\xb3\xadj\xb1\x01\xfa\xc4i\'\xa0\x86\x12\xcd3l\x98v;@\x95\xa5\xa8/7\x03\xb2\x88\xa7', 0x2)
fallocate(r5, 0x0, 0x0, 0x200401)
syz_emit_ethernet(0x46, 0x0, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x8)

576.896233ms ago: executing program 4 (id=3738):
socket(0x18, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r3)
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})

363.327815ms ago: executing program 2 (id=3739):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a310000000008000340000000000800018000000000380002800800034000000000080001800000000008000340000000000800034000000000090002"], 0x17d4}}, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16, @ANYRES16=r1], 0x0)

151.571153ms ago: executing program 3 (id=3740):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0xc001, &(0x7f0000000200)={0x11, 0xb, r1, 0x1, 0xd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

0s ago: executing program 3 (id=3741):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
r6 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0xffffff31, 0xffffffffffffffda}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x4, &(0x7f0000000380)=ANY=[])
io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
close(r7)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, &(0x7f00000000c0)=""/71}, 0x20)

kernel console output (not intermixed with test programs):

left promiscuous mode
[  604.848022][ T9449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  604.891087][T15391] ceph: No mds server is up or the cluster is laggy
[  604.913337][ T9449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  605.079639][ T9449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  605.099298][ T9449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  605.221150][    T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  605.247265][ T9449] veth1_macvtap: left promiscuous mode
[  605.302038][T15409] trusted_key: encrypted_key: key user:syz not found
[  605.303412][ T9449] veth0_macvtap: left promiscuous mode
[  605.341236][ T9449] veth1_vlan: left promiscuous mode
[  605.352168][ T9449] veth0_vlan: left promiscuous mode
[  606.277015][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  606.301994][    T9] usb 1-1: unable to read config index 0 descriptor/start: -71
[  606.326783][    T9] usb 1-1: can't read configurations, error -71
[  606.505074][ T9449] team0 (unregistering): Port device team_slave_1 removed
[  606.570559][ T9449] team0 (unregistering): Port device team_slave_0 removed
[  606.768511][T15427] netlink: 'syz.4.2977': attribute type 1 has an invalid length.
[  606.776436][T15427] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2977'.
[  607.170260][ T5876] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  607.255664][T15443] autofs: Unknown parameter '0x0000000000000000'
[  607.374374][ T5876] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  607.911189][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.946108][ T5876] usb 5-1: Product: syz
[  607.954717][ T5876] usb 5-1: Manufacturer: syz
[  607.965496][ T5876] usb 5-1: SerialNumber: syz
[  608.006681][ T5876] usb 5-1: config 0 descriptor??
[  608.125505][ T9449] IPVS: stop unused estimator thread 0...
[  608.294939][ T5876] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  608.527737][T15156] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  608.642348][T15156] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  608.694115][T15156] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  608.735565][T15156] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  608.882377][T15478] netlink: 'syz.0.2988': attribute type 1 has an invalid length.
[  608.931020][T15478] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2988'.
[  609.008200][T15156] 8021q: adding VLAN 0 to HW filter on device bond0
[  609.279805][T15156] 8021q: adding VLAN 0 to HW filter on device team0
[  609.416150][T15492] siw: device registration error -23
[  609.733348][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.740442][ T9450] bridge0: port 1(bridge_slave_0) entered forwarding state
[  609.754523][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.761616][ T9450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  609.891577][T15156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  609.921862][ T5876] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  609.933630][T15156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  610.059253][ T5876] usb 5-1: USB disconnect, device number 27
[  610.498960][T15156] 8021q: adding VLAN 0 to HW filter on device batadv0
[  610.549528][T15156] veth0_vlan: entered promiscuous mode
[  610.562285][T15156] veth1_vlan: entered promiscuous mode
[  610.569409][T15513] autofs: Unknown parameter '0x0000000000000000'
[  610.650943][T15156] veth0_macvtap: entered promiscuous mode
[  610.662431][T15156] veth1_macvtap: entered promiscuous mode
[  610.684317][T15156] batman_adv: batadv0: Interface activated: batadv_slave_0
[  610.699469][T15156] batman_adv: batadv0: Interface activated: batadv_slave_1
[  610.770092][ T9454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  610.797920][ T9454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  610.822928][ T9454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  610.835779][T15525] netlink: 772 bytes leftover after parsing attributes in process `syz.3.2996'.
[  610.858594][ T9454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  610.952582][T15531] netlink: 772 bytes leftover after parsing attributes in process `syz.3.2996'.
[  611.096032][ T9461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.120080][ T9461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.134493][T15539] binder: 15538:15539 ioctl c0306201 200000000240 returned -11
[  611.151629][ T9461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  611.173361][ T9461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  611.351918][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2913'.
[  611.868596][T15551] mkiss: ax0: crc mode is auto.
[  613.019334][T11627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  613.028827][T11627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  613.041933][T11627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  613.051273][T11627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  613.061619][T11627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  613.103496][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.145800][T15579] lo speed is unknown, defaulting to 1000
[  613.186899][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.319192][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.868953][T15579] wlan0 speed is unknown, defaulting to 1000
[  614.014413][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.062539][   T30] audit: type=1400 audit(1759822631.954:447): avc:  denied  { getopt } for  pid=15629 comm="syz.3.3015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  615.088155][ T5828] Bluetooth: hci0: command tx timeout
[  615.247853][T15579] chnl_net:caif_netlink_parms(): no params data found
[  615.392818][ T1142] bridge_slave_1: left allmulticast mode
[  615.408747][ T1142] bridge_slave_1: left promiscuous mode
[  615.443304][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.352126][ T1142] bridge_slave_0: left allmulticast mode
[  616.367989][ T1142] bridge_slave_0: left promiscuous mode
[  616.394008][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.881790][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  616.892119][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  616.902921][ T1142] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  616.920094][ T1142] bond0 (unregistering): Released all slaves
[  617.180261][ T5828] Bluetooth: hci0: command tx timeout
[  617.496647][ T1142] tipc: Left network mode
[  617.606222][T15579] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.614201][T15579] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.622020][T15579] bridge_slave_0: entered allmulticast mode
[  617.628894][T15579] bridge_slave_0: entered promiscuous mode
[  617.652341][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  617.657352][T15579] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.662629][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  617.662654][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  617.662667][ T5828] Workqueue: hci1 hci_rx_work
[  617.662692][ T5828] Call Trace:
[  617.662697][ T5828]  <TASK>
[  617.662703][ T5828]  dump_stack_lvl+0x16c/0x1f0
[  617.662726][ T5828]  sysfs_warn_dup+0x7f/0xa0
[  617.662751][ T5828]  sysfs_create_dir_ns+0x24b/0x2b0
[  617.662774][ T5828]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  617.662797][ T5828]  ? find_held_lock+0x2b/0x80
[  617.662824][ T5828]  ? do_raw_spin_unlock+0x172/0x230
[  617.662847][ T5828]  kobject_add_internal+0x2c4/0x9b0
[  617.662872][ T5828]  kobject_add+0x16e/0x240
[  617.662891][ T5828]  ? __pfx_kobject_add+0x10/0x10
[  617.662913][ T5828]  ? do_raw_spin_unlock+0x172/0x230
[  617.662935][ T5828]  ? kobject_put+0xab/0x5a0
[  617.662960][ T5828]  device_add+0x288/0x1aa0
[  617.662979][ T5828]  ? __pfx_dev_set_name+0x10/0x10
[  617.662996][ T5828]  ? __pfx_device_add+0x10/0x10
[  617.663013][ T5828]  ? mgmt_send_event_skb+0x2fb/0x460
[  617.663037][ T5828]  hci_conn_add_sysfs+0x17e/0x230
[  617.663058][ T5828]  le_conn_complete_evt+0x1260/0x2150
[  617.663081][ T5828]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  617.663097][ T5828]  ? hci_event_packet+0x459/0x11c0
[  617.663121][ T5828]  hci_le_conn_complete_evt+0x23c/0x370
[  617.663143][ T5828]  hci_le_meta_evt+0x354/0x5e0
[  617.663161][ T5828]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  617.663181][ T5828]  hci_event_packet+0x685/0x11c0
[  617.663198][ T5828]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  617.663217][ T5828]  ? __pfx_hci_event_packet+0x10/0x10
[  617.663236][ T5828]  ? kcov_remote_start+0x3c9/0x6d0
[  617.663258][ T5828]  ? lockdep_hardirqs_on+0x7c/0x110
[  617.663281][ T5828]  hci_rx_work+0x2c5/0x16b0
[  617.663300][ T5828]  ? rcu_is_watching+0x12/0xc0
[  617.663328][ T5828]  process_one_work+0x9cc/0x1b70
[  617.663360][ T5828]  ? __pfx_process_one_work+0x10/0x10
[  617.663387][ T5828]  ? assign_work+0x1a0/0x250
[  617.663409][ T5828]  worker_thread+0x6c8/0xf10
[  617.663441][ T5828]  ? __pfx_worker_thread+0x10/0x10
[  617.663461][ T5828]  kthread+0x3c5/0x780
[  617.663481][ T5828]  ? __pfx_kthread+0x10/0x10
[  617.663508][ T5828]  ? rcu_is_watching+0x12/0xc0
[  617.663535][ T5828]  ? __pfx_kthread+0x10/0x10
[  617.663557][ T5828]  ret_from_fork+0x56d/0x730
[  617.663577][ T5828]  ? __pfx_kthread+0x10/0x10
[  617.663597][ T5828]  ret_from_fork_asm+0x1a/0x30
[  617.663632][ T5828]  </TASK>
[  617.663696][ T5828] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  617.669257][T15579] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.679670][ T5828] Bluetooth: hci1: failed to register connection device
[  617.962442][T15579] bridge_slave_1: entered allmulticast mode
[  617.971493][T15579] bridge_slave_1: entered promiscuous mode
[  618.074409][T15579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  618.087062][T15579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  618.118623][T15579] team0: Port device team_slave_0 added
[  618.137636][T15579] team0: Port device team_slave_1 added
[  618.203526][T15579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  618.222295][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.254374][T15579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  618.275333][T15579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  618.282652][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  618.368529][T15579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  618.435240][ T1142] hsr_slave_0: left promiscuous mode
[  618.446365][ T1142] hsr_slave_1: left promiscuous mode
[  618.453002][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.463511][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.514890][ T1142] veth1_macvtap: left promiscuous mode
[  618.524498][ T1142] veth0_macvtap: left promiscuous mode
[  618.530084][ T1142] veth1_vlan: left promiscuous mode
[  618.536820][ T1142] veth0_vlan: left promiscuous mode
[  619.240285][ T5828] Bluetooth: hci0: command tx timeout
[  619.298766][ T1142] team0 (unregistering): Port device team_slave_1 removed
[  619.325966][ T1142] team0 (unregistering): Port device team_slave_0 removed
[  619.390512][ T5876] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  619.530828][ T5876] usb 5-1: device descriptor read/64, error -71
[  619.666729][T15579] hsr_slave_0: entered promiscuous mode
[  619.673316][T15579] hsr_slave_1: entered promiscuous mode
[  619.679493][T15579] debugfs: 'hsr0' already exists in 'hsr'
[  619.688761][T15579] Cannot create hsr debugfs directory
[  619.771012][ T5876] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  619.915700][ T1142] IPVS: stop unused estimator thread 0...
[  619.921501][ T5876] usb 5-1: device descriptor read/64, error -71
[  620.030900][ T5876] usb usb5-port1: attempt power cycle
[  620.593736][T15731] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3038'.
[  620.847936][T15579] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  621.253896][ T5876] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  621.271567][T15579] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  621.282356][T15579] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  621.291827][ T5876] usb 5-1: device descriptor read/8, error -71
[  621.302506][T15579] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  621.333709][ T5828] Bluetooth: hci0: command tx timeout
[  621.404936][T15579] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.424359][T15579] 8021q: adding VLAN 0 to HW filter on device team0
[  621.436549][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.443684][ T9450] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.464860][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.471947][ T9450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  621.496826][T15579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  621.507751][T15579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  621.530292][ T5876] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  621.595991][ T5876] usb 5-1: device descriptor read/8, error -71
[  621.711276][ T5876] usb usb5-port1: unable to enumerate USB device
[  621.976669][T15579] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.032318][T15579] veth0_vlan: entered promiscuous mode
[  622.044009][T15579] veth1_vlan: entered promiscuous mode
[  622.075694][T15781] overlayfs: failed to clone lowerpath
[  622.112390][T15579] veth0_macvtap: entered promiscuous mode
[  622.125606][T15579] veth1_macvtap: entered promiscuous mode
[  622.158403][T15579] batman_adv: batadv0: Interface activated: batadv_slave_0
[  622.197406][T15786] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3048'.
[  622.221699][T15579] batman_adv: batadv0: Interface activated: batadv_slave_1
[  622.273324][ T9443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  622.436424][ T9443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  622.452359][ T9443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  622.974182][ T9443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  623.062653][T11991] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  623.118540][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  623.213862][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  623.250986][T11991] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  623.276805][T11991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.289712][ T9443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  623.298448][ T9443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  623.306285][T11991] usb 5-1: Product: syz
[  623.311065][T11991] usb 5-1: Manufacturer: syz
[  623.315672][T11991] usb 5-1: SerialNumber: syz
[  623.347019][T11991] usb 5-1: config 0 descriptor??
[  623.452693][T15819] autofs: Unknown parameter '0x0000000000000000'
[  623.599878][T11991] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  623.901017][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  624.450457][T11627] Bluetooth: hci1: command 0x0406 tx timeout
[  624.458687][T15830] overlayfs: failed to clone lowerpath
[  624.978276][T11627] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  624.987740][T11627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  624.996071][T11627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  625.004697][T11627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  625.016818][T11627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  625.058162][T15838] lo speed is unknown, defaulting to 1000
[  625.120264][ T5904] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  625.194790][ T9461] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.272344][ T5904] usb 1-1: no configurations
[  625.297890][ T5904] usb 1-1: can't read configurations, error -22
[  625.522057][ T5904] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  625.647487][ T9461] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.725540][ T9461] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.744709][T15838] chnl_net:caif_netlink_parms(): no params data found
[  625.752793][ T5904] usb 1-1: no configurations
[  625.757433][ T5904] usb 1-1: can't read configurations, error -22
[  625.790696][ T5904] usb usb1-port1: attempt power cycle
[  625.873131][T11991] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  625.883502][ T9461] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.891006][T11991] usb 5-1: USB disconnect, device number 32
[  625.930821][T15838] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.940405][T15838] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.947580][T15838] bridge_slave_0: entered allmulticast mode
[  625.960366][T15838] bridge_slave_0: entered promiscuous mode
[  625.987968][T15838] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.995407][T15838] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.002834][T15838] bridge_slave_1: entered allmulticast mode
[  626.009439][T15838] bridge_slave_1: entered promiscuous mode
[  626.101433][T15838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.119971][T15838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  626.130433][ T5904] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  626.161085][ T5904] usb 1-1: no configurations
[  626.165698][ T5904] usb 1-1: can't read configurations, error -22
[  626.216117][ T9461] erspan0: left allmulticast mode
[  626.221242][ T9461] erspan0: left promiscuous mode
[  626.235974][ T9461] bridge0: port 3(erspan0) entered disabled state
[  626.250997][T15854] fuse: Bad value for 'fd'
[  626.272288][ T9461] bridge_slave_1: left allmulticast mode
[  626.279882][ T9461] bridge_slave_1: left promiscuous mode
[  626.287500][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.300000][ T9461] bridge_slave_0: left allmulticast mode
[  626.315995][ T9461] bridge_slave_0: left promiscuous mode
[  626.321866][ T5904] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  626.329833][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.338703][T15857] fuse: Unknown parameter '0xffffffffffffffff'
[  626.355492][ T5904] usb 1-1: no configurations
[  626.360240][ T5904] usb 1-1: can't read configurations, error -22
[  626.404031][ T5904] usb usb1-port1: unable to enumerate USB device
[  626.851138][ T5890] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  627.081077][T11627] Bluetooth: hci3: command tx timeout
[  627.244008][ T9461] bond1 (unregistering): (slave gretap1): Releasing active interface
[  627.244841][ T5890] usb 5-1: config 150 has an invalid interface number: 204 but max is 2
[  627.262592][ T5890] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  627.288940][ T5890] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3
[  627.301470][ T5890] usb 5-1: config 150 has no interface number 0
[  627.307741][ T5890] usb 5-1: config 150 interface 204 has no altsetting 0
[  627.324737][ T5890] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  627.345620][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.354019][ T5890] usb 5-1: Product: syz
[  627.358254][ T5890] usb 5-1: Manufacturer: syz
[  627.372761][ T5890] usb 5-1: SerialNumber: syz
[  627.379029][ T9461] bond2 (unregistering): (slave gretap2): Releasing active interface
[  627.555449][T15872] autofs: Unknown parameter '0x0000000000000000'
[  627.665661][ T5890] libceph: connect (1)[c::]:6789 error -101
[  627.671915][ T5890] libceph: mon0 (1)[c::]:6789 connect error
[  627.714217][T15879] ceph: No mds server is up or the cluster is laggy
[  627.878362][ T9461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  627.888373][ T9461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  627.898572][ T9461] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  627.907096][ T9461] bond0 (unregistering): Released all slaves
[  627.977960][ T9461] bond1 (unregistering): Released all slaves
[  627.988714][ T9461] bond2 (unregistering): Released all slaves
[  628.000888][T15838] team0: Port device team_slave_0 added
[  628.011366][T15838] team0: Port device team_slave_1 added
[  628.065716][T15888] fuse: Unknown parameter '0xffffffffffffffff'
[  628.072524][T15838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  628.079468][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  628.106902][T15838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  628.123420][T15838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  628.131399][T15838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  628.158242][T15838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  628.173128][ T9461] tipc: Left network mode
[  628.285716][T15838] hsr_slave_0: entered promiscuous mode
[  628.317924][T15838] hsr_slave_1: entered promiscuous mode
[  628.333284][T15838] debugfs: 'hsr0' already exists in 'hsr'
[  628.339031][T15838] Cannot create hsr debugfs directory
[  629.160535][T11627] Bluetooth: hci3: command tx timeout
[  629.903827][  T977] usb 5-1: USB disconnect, device number 33
[  630.131743][ T5876] IPVS: starting estimator thread 0...
[  630.225417][T15933] fuse: Unknown parameter '0xffffffffffffffff'
[  630.246286][T15927] IPVS: using max 50 ests per chain, 120000 per kthread
[  630.292788][T15929] mkiss: ax0: crc mode is auto.
[  630.314351][ T9461] hsr_slave_0: left promiscuous mode
[  630.321162][T15937] autofs: Unknown parameter '0x0000000000000000'
[  630.335146][ T9461] hsr_slave_1: left promiscuous mode
[  630.358978][ T9461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  630.379730][ T5876] libceph: connect (1)[c::]:6789 error -101
[  630.394181][ T9461] batman_adv: batadv0: Removing interface: batadv_slave_0
[  631.088111][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  631.112791][T15938] ceph: No mds server is up or the cluster is laggy
[  631.124889][ T9461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  631.132768][ T9461] batman_adv: batadv0: Removing interface: batadv_slave_1
[  631.154851][ T9461] veth1_macvtap: left promiscuous mode
[  631.165818][ T9461] veth0_macvtap: left promiscuous mode
[  631.178525][ T9461] veth1_vlan: left promiscuous mode
[  631.183916][ T9461] veth0_vlan: left promiscuous mode
[  631.254739][ T9461] team0 (unregistering): Port device vlan2 removed
[  631.330261][T11627] Bluetooth: hci3: command tx timeout
[  631.453758][ T9461] team0 (unregistering): Port device team_slave_1 removed
[  631.481769][ T9461] team0 (unregistering): Port device team_slave_0 removed
[  633.353884][ T9461] IPVS: stop unused estimator thread 0...
[  633.400746][T11627] Bluetooth: hci3: command tx timeout
[  633.406295][T15979] netlink: 'syz.4.3097': attribute type 1 has an invalid length.
[  633.432688][T15979] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3097'.
[  633.602696][T15838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  633.661381][T15838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  633.668433][T15988] autofs: Unknown parameter '0x0000000000000000'
[  633.706213][T15838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  633.758384][T15838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  634.651187][T16002] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  636.591345][ T5890] IPVS: starting estimator thread 0...
[  636.630084][T15838] 8021q: adding VLAN 0 to HW filter on device bond0
[  636.724615][T16023] IPVS: using max 37 ests per chain, 88800 per kthread
[  637.185001][T15838] 8021q: adding VLAN 0 to HW filter on device team0
[  637.229278][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.236433][ T9461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  637.417440][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.424604][ T9461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.444836][T15838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  638.531719][T15838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  639.202246][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  639.246378][T15838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.402929][T15838] veth0_vlan: entered promiscuous mode
[  639.506807][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  639.540252][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  639.549920][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  639.554025][T15838] veth1_vlan: entered promiscuous mode
[  639.608881][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  639.642882][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  639.682410][T15838] veth0_macvtap: entered promiscuous mode
[  639.712875][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.735223][T15838] veth1_macvtap: entered promiscuous mode
[  639.780123][    T9] usb 5-1: config 0 descriptor??
[  639.813194][T15838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.882754][T15838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.972116][ T9443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.998341][ T9443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.038166][ T9443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.067479][    T9] hdpvr 5-1:0.0: unexpected answer of status request, len -71
[  640.085721][ T9443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  640.094975][    T9] hdpvr 5-1:0.0: device init failed
[  640.100327][    T9] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  640.120687][    T9] usb 5-1: USB disconnect, device number 34
[  640.386845][ T9461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.426100][ T9461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.510104][ T9461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.518662][ T9461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  641.498807][T16105] wlan0 speed is unknown, defaulting to 1000
[  641.505365][T16105] wlan0 speed is unknown, defaulting to 1000
[  641.515243][T16105] wlan0 speed is unknown, defaulting to 1000
[  641.575793][T16105] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  641.671710][T16105] wlan0 speed is unknown, defaulting to 1000
[  641.686233][T16105] wlan0 speed is unknown, defaulting to 1000
[  641.701796][T16105] wlan0 speed is unknown, defaulting to 1000
[  641.716566][T16105] wlan0 speed is unknown, defaulting to 1000
[  641.730344][T16105] wlan0 speed is unknown, defaulting to 1000
[  641.743958][T16105] wlan0 speed is unknown, defaulting to 1000
[  642.213838][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3123'.
[  643.379156][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  643.388474][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  643.397355][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  643.405961][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  643.413816][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  643.651408][T16129] lo speed is unknown, defaulting to 1000
[  643.771240][ T5890] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  644.067679][ T5890] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  644.100262][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  644.131982][ T5890] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  644.170576][ T5890] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  644.178590][ T5890] usb 1-1: Manufacturer: syz
[  644.220758][ T5890] usb 1-1: config 0 descriptor??
[  644.318457][T16129] wlan0 speed is unknown, defaulting to 1000
[  644.328295][ T5890] rc_core: IR keymap rc-hauppauge not found
[  644.334308][ T5890] Registered IR keymap rc-empty
[  644.348030][ T5890] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  644.378602][ T5890] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  644.523520][    C1] igorplugusb 1-1:0.0: Error: urb status = -32
[  644.897704][T16129] chnl_net:caif_netlink_parms(): no params data found
[  644.954714][ T5904] usb 1-1: USB disconnect, device number 36
[  645.145797][   T30] audit: type=1400 audit(1759822662.034:448): avc:  denied  { create } for  pid=16159 comm="syz.1.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  645.150758][T16160] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3131'.
[  645.186735][   T30] audit: type=1400 audit(1759822662.034:449): avc:  denied  { write } for  pid=16159 comm="syz.1.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  645.221555][   T30] audit: type=1400 audit(1759822662.034:450): avc:  denied  { nlmsg_write } for  pid=16159 comm="syz.1.3131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  645.436392][T16129] bridge0: port 1(bridge_slave_0) entered blocking state
[  645.535395][T16129] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.543759][   T30] audit: type=1400 audit(1759822662.334:451): avc:  denied  { execmem } for  pid=16166 comm="syz.3.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  645.543893][T16129] bridge_slave_0: entered allmulticast mode
[  645.570706][ T5828] Bluetooth: hci2: command tx timeout
[  645.572632][T16129] bridge_slave_0: entered promiscuous mode
[  645.600950][T16129] bridge0: port 2(bridge_slave_1) entered blocking state
[  645.669793][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'.
[  645.679034][T16171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3134'.
[  645.796186][T16129] bridge0: port 2(bridge_slave_1) entered disabled state
[  645.973828][T16129] bridge_slave_1: entered allmulticast mode
[  646.050148][T16129] bridge_slave_1: entered promiscuous mode
[  646.143377][ T5876] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  646.231645][T16129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  646.248128][T16129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  646.310540][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  646.321131][T16129] team0: Port device team_slave_0 added
[  646.327647][ T5876] usb 1-1: config 3 has an invalid interface number: 173 but max is 0
[  646.329693][T16129] team0: Port device team_slave_1 added
[  646.336132][ T5876] usb 1-1: config 3 has no interface number 0
[  646.355865][ T5876] usb 1-1: config 3 interface 173 has no altsetting 0
[  646.373219][ T5876] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=5a.0b
[  646.385726][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.387205][T16129] batman_adv: batadv0: Adding interface: batadv_slave_0
[  646.393915][ T5876] usb 1-1: Product: syz
[  646.393933][ T5876] usb 1-1: Manufacturer: syz
[  646.393947][ T5876] usb 1-1: SerialNumber: syz
[  646.415678][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  646.441549][    C1] vkms_vblank_simulate: vblank timer overrun
[  646.448489][T16129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  646.461922][T16129] batman_adv: batadv0: Adding interface: batadv_slave_1
[  646.468858][T16129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  646.494723][    C1] vkms_vblank_simulate: vblank timer overrun
[  646.502846][T16129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  646.587247][T16129] hsr_slave_0: entered promiscuous mode
[  646.595381][T16129] hsr_slave_1: entered promiscuous mode
[  646.602716][T16129] debugfs: 'hsr0' already exists in 'hsr'
[  646.608616][T16129] Cannot create hsr debugfs directory
[  646.640148][ T5876] usb 1-1: selecting invalid altsetting 3
[  646.645968][ T5876] comedi comedi5: could not set alternate setting 3 in high speed
[  646.653386][T16185] netlink: 'syz.4.3138': attribute type 1 has an invalid length.
[  646.663320][T16185] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3138'.
[  646.710438][ T5876] usbdux 1-1:3.173: driver 'usbdux' failed to auto-configure device.
[  646.725461][ T5876] usbdux 1-1:3.173: probe with driver usbdux failed with error -22
[  646.756413][ T5876] usb 1-1: USB disconnect, device number 37
[  646.773597][    T9] libceph: connect (1)[c::]:6789 error -101
[  646.779587][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  646.884264][T16188] ceph: No mds server is up or the cluster is laggy
[  647.048617][T16129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.128641][T16129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.140279][T12509] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  647.212508][T16129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.282395][ T5876] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  647.301895][T12509] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30
[  647.313087][T12509] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.324694][T12509] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  647.337979][T12509] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  647.348430][T12509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.352588][T16129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  647.368629][T12509] usb 4-1: config 0 descriptor??
[  648.041612][ T5828] Bluetooth: hci2: command tx timeout
[  648.158446][T16129] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  648.173533][T16129] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  648.185659][T16129] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  648.203556][T16129] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  648.339584][T12509] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0
[  648.351542][T12509] cypress 0003:04B4:07B1.000C: unknown main item tag 0x0
[  648.379732][T12509] cypress 0003:04B4:07B1.000C: hidraw0: USB HID v0.80 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0
[  648.466890][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short
[  648.501471][ T5876] usb 5-1: unable to read config index 0 descriptor/start: -71
[  648.526867][ T5876] usb 5-1: can't read configurations, error -71
[  648.548151][T16129] 8021q: adding VLAN 0 to HW filter on device bond0
[  648.571152][    T9] usb 4-1: USB disconnect, device number 23
[  648.582542][T16129] 8021q: adding VLAN 0 to HW filter on device team0
[  648.594677][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.601789][ T9461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  648.621243][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.628364][ T9461] bridge0: port 2(bridge_slave_1) entered forwarding state
[  648.741704][T12509] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  648.747304][T16129] 8021q: adding VLAN 0 to HW filter on device batadv0
[  648.778305][T16129] veth0_vlan: entered promiscuous mode
[  648.792695][T16129] veth1_vlan: entered promiscuous mode
[  648.811736][T16129] veth0_macvtap: entered promiscuous mode
[  648.823423][T16129] veth1_macvtap: entered promiscuous mode
[  648.837531][T16129] batman_adv: batadv0: Interface activated: batadv_slave_0
[  648.852180][T16129] batman_adv: batadv0: Interface activated: batadv_slave_1
[  648.864305][ T9461] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  648.873486][ T9461] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  648.883768][ T9461] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  648.892770][ T9461] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  648.900395][T12509] usb 1-1: Using ep0 maxpacket: 16
[  648.913335][T12509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  648.927298][T12509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  648.938520][T12509] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  648.954282][T12509] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  648.967029][T12509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.978453][T12509] usb 1-1: config 0 descriptor??
[  648.988156][ T9443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.015818][ T9443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.046676][ T9443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  649.057801][ T9443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  649.754178][T12509] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.000D/input/input9
[  649.825137][T16236] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3151'.
[  649.885671][T12509] appleir 0003:05AC:8241.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0
[  650.009242][T12509] usb 1-1: USB disconnect, device number 38
[  650.084619][T16240] fido_id[16240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  650.127249][ T5828] Bluetooth: hci2: command tx timeout
[  650.678307][T16258] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  652.275834][ T5828] Bluetooth: hci2: command tx timeout
[  654.190324][ T5904] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  654.375458][ T5904] usb 1-1: Using ep0 maxpacket: 8
[  654.385454][ T5904] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  654.408765][ T5904] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  654.439147][ T5904] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  654.474098][ T5904] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  654.487364][ T5904] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  654.503875][ T5904] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  654.524391][ T5904] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  654.536372][ T5904] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  654.547990][ T5904] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  654.566892][ T5904] usb 1-1: string descriptor 0 read error: -22
[  654.573663][ T5904] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  654.583046][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.607680][ T5904] adutux 1-1:168.0: interrupt endpoints not found
[  654.825742][T16295] trusted_key: encrypted_key: key user:syz not found
[  654.865004][ T5904] usb 1-1: USB disconnect, device number 39
[  655.252017][ T5876] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  655.280413][ T5830] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  655.410248][ T5876] usb 4-1: Using ep0 maxpacket: 8
[  655.426638][ T5876] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  655.451127][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  655.463608][ T5876] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  655.490949][ T5830] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  655.528413][ T5876] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  655.550452][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  655.588938][ T5830] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  655.603574][ T5876] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  655.622924][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.631107][ T5830] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  655.684324][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.693698][ T5876] hub 4-1:1.0: bad descriptor, ignoring hub
[  655.719783][ T5876] hub 4-1:1.0: probe with driver hub failed with error -5
[  655.729886][ T5830] usb 5-1: config 0 descriptor??
[  655.739638][ T5876] cdc_wdm 4-1:1.0: skipping garbage
[  655.758375][ T5876] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  655.816302][T16327] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  656.630733][T16332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.668034][T16332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.838103][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3170'.
[  656.881165][   T30] audit: type=1400 audit(1759822673.774:452): avc:  denied  { write } for  pid=16340 comm="syz.2.3171" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  656.983428][   T30] audit: type=1400 audit(1759822673.804:453): avc:  denied  { open } for  pid=16340 comm="syz.2.3171" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  657.033637][   T30] audit: type=1400 audit(1759822673.804:454): avc:  denied  { ioctl } for  pid=16340 comm="syz.2.3171" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  657.999705][ T5830] hdpvr 5-1:0.0: unexpected answer of status request, len -71
[  658.053083][ T5830] hdpvr 5-1:0.0: device init failed
[  658.081162][ T5830] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  658.090483][ T5897] usb 4-1: USB disconnect, device number 24
[  658.168748][ T5830] usb 5-1: USB disconnect, device number 37
[  658.551053][ T5830] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  658.887201][ T5830] usb 5-1: Using ep0 maxpacket: 16
[  658.909337][T16363] trusted_key: encrypted_key: key user:syz not found
[  658.921632][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  659.030276][ T5830] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  659.060310][ T5830] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  659.073420][ T5830] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  659.092027][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.126285][ T5830] usb 5-1: config 0 descriptor??
[  659.539878][T16380] fuse: Bad value for 'fd'
[  659.815118][ T5830] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.000E/input/input10
[  660.506603][ T5830] appleir 0003:05AC:8241.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  660.535285][ T5830] usb 5-1: USB disconnect, device number 38
[  660.664911][T16392] fido_id[16392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  660.909976][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'.
[  661.182684][ T5828] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  661.192442][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  661.192458][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  661.192466][ T5828] Workqueue: hci2 hci_rx_work
[  661.192484][ T5828] Call Trace:
[  661.192488][ T5828]  <TASK>
[  661.192493][ T5828]  dump_stack_lvl+0x16c/0x1f0
[  661.192508][ T5828]  sysfs_warn_dup+0x7f/0xa0
[  661.192526][ T5828]  sysfs_create_dir_ns+0x24b/0x2b0
[  661.192542][ T5828]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  661.192558][ T5828]  ? find_held_lock+0x2b/0x80
[  661.192579][ T5828]  ? do_raw_spin_unlock+0x172/0x230
[  661.192596][ T5828]  kobject_add_internal+0x2c4/0x9b0
[  661.192613][ T5828]  kobject_add+0x16e/0x240
[  661.192628][ T5828]  ? __pfx_kobject_add+0x10/0x10
[  661.192644][ T5828]  ? do_raw_spin_unlock+0x172/0x230
[  661.192660][ T5828]  ? kobject_put+0xab/0x5a0
[  661.192677][ T5828]  device_add+0x288/0x1aa0
[  661.192689][ T5828]  ? __pfx_dev_set_name+0x10/0x10
[  661.192702][ T5828]  ? __pfx_device_add+0x10/0x10
[  661.192713][ T5828]  ? mgmt_send_event_skb+0x2fb/0x460
[  661.192729][ T5828]  hci_conn_add_sysfs+0x17e/0x230
[  661.192743][ T5828]  le_conn_complete_evt+0x1260/0x2150
[  661.192758][ T5828]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  661.192769][ T5828]  ? hci_event_packet+0x459/0x11c0
[  661.192784][ T5828]  hci_le_conn_complete_evt+0x23c/0x370
[  661.192799][ T5828]  hci_le_meta_evt+0x354/0x5e0
[  661.192812][ T5828]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  661.192825][ T5828]  hci_event_packet+0x685/0x11c0
[  661.192837][ T5828]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  661.192850][ T5828]  ? __pfx_hci_event_packet+0x10/0x10
[  661.192863][ T5828]  ? kcov_remote_start+0x3c9/0x6d0
[  661.192879][ T5828]  ? lockdep_hardirqs_on+0x7c/0x110
[  661.192894][ T5828]  hci_rx_work+0x2c5/0x16b0
[  661.192907][ T5828]  ? rcu_is_watching+0x12/0xc0
[  661.192926][ T5828]  process_one_work+0x9cc/0x1b70
[  661.192949][ T5828]  ? __pfx_process_one_work+0x10/0x10
[  661.192969][ T5828]  ? assign_work+0x1a0/0x250
[  661.192983][ T5828]  worker_thread+0x6c8/0xf10
[  661.193004][ T5828]  ? __pfx_worker_thread+0x10/0x10
[  661.193019][ T5828]  kthread+0x3c5/0x780
[  661.193032][ T5828]  ? __pfx_kthread+0x10/0x10
[  661.193047][ T5828]  ? rcu_is_watching+0x12/0xc0
[  661.193064][ T5828]  ? __pfx_kthread+0x10/0x10
[  661.193084][ T5828]  ret_from_fork+0x56d/0x730
[  661.193104][ T5828]  ? __pfx_kthread+0x10/0x10
[  661.193124][ T5828]  ret_from_fork_asm+0x1a/0x30
[  661.193159][ T5828]  </TASK>
[  661.193248][ T5828] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  661.443801][ T5828] Bluetooth: hci2: failed to register connection device
[  661.880345][ T5890] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  661.900828][  T977] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  661.971182][ T5876] IPVS: starting estimator thread 0...
[  662.050252][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  662.060599][T16416] IPVS: using max 41 ests per chain, 98400 per kthread
[  662.070898][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  662.090262][  T977] usb 1-1: Using ep0 maxpacket: 32
[  662.092076][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  662.112718][  T977] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  662.120212][ T5890] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  662.140401][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.140964][  T977] usb 1-1: config 0 has no interface number 0
[  662.176648][ T5890] usb 5-1: config 0 descriptor??
[  662.195605][  T977] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  662.211598][ T5890] hub 5-1:0.0: USB hub found
[  662.252589][  T977] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  662.271576][  T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.305357][  T977] usb 1-1: Product: syz
[  662.319587][  T977] usb 1-1: Manufacturer: syz
[  662.334966][  T977] usb 1-1: SerialNumber: syz
[  662.366442][  T977] usb 1-1: config 0 descriptor??
[  662.389254][  T977] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  662.454221][ T5890] hub 5-1:0.0: 1 port detected
[  662.460384][  T977] em28xx 1-1:0.132: Video interface 132 found:
[  663.492454][  T977] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  663.529752][ T5904] hub 5-1:0.0: activate --> -90
[  663.757613][    T9] IPVS: starting estimator thread 0...
[  663.827119][ T5904] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  663.834285][ T5890] usb 5-1: USB disconnect, device number 39
[  663.870265][T16427] IPVS: using max 44 ests per chain, 105600 per kthread
[  663.942426][  T977] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  663.956169][  T977] em28xx 1-1:0.132: board has no eeprom
[  664.020494][  T977] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  664.032698][  T977] em28xx 1-1:0.132: analog set to bulk mode.
[  664.039011][ T5830] em28xx 1-1:0.132: Registering V4L2 extension
[  664.061013][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  664.069714][  T977] usb 1-1: USB disconnect, device number 40
[  664.086841][  T977] em28xx 1-1:0.132: Disconnecting em28xx
[  664.203463][ T5830] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  664.218612][ T5830] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  664.227762][ T5830] em28xx 1-1:0.132: No AC97 audio processor
[  664.239126][ T5830] usb 1-1: Decoder not found
[  664.250624][ T5830] em28xx 1-1:0.132: failed to create media graph
[  664.261937][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  664.284676][ T5830] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  664.292476][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024
[  664.307475][    T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  664.319552][ T5830] em28xx 1-1:0.132: Remote control support is not available for this card.
[  664.328318][  T977] em28xx 1-1:0.132: Closing input extension
[  664.340298][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  664.356010][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3197'.
[  664.364687][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.444111][  T977] em28xx 1-1:0.132: Freeing device
[  664.465044][T16429] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  664.481003][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  664.970525][  T977] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  665.117965][ T5904] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  665.220230][  T977] usb 1-1: Using ep0 maxpacket: 16
[  665.227603][  T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  665.244673][  T977] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  665.254413][  T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.263051][  T977] usb 1-1: Product: syz
[  665.267528][  T977] usb 1-1: Manufacturer: syz
[  665.272470][  T977] usb 1-1: SerialNumber: syz
[  665.280263][ T5904] usb 5-1: Using ep0 maxpacket: 16
[  665.282053][  T977] usb 1-1: config 0 descriptor??
[  665.296145][ T5830] usb 4-1: USB disconnect, device number 25
[  665.309915][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  665.336618][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  665.381454][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  665.473222][  T977] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  665.477286][ T5904] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  665.517469][  T977] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  665.573326][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.642020][ T5904] usb 5-1: config 0 descriptor??
[  666.083980][ T5904] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.000F/input/input11
[  666.112471][  T977] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  666.213574][ T5904] appleir 0003:05AC:8241.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[  666.295934][ T5904] usb 5-1: USB disconnect, device number 40
[  666.489499][T16471] fido_id[16471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  666.733456][  T977] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  666.759641][  T977] em28xx 1-1:0.0: board has no eeprom
[  666.850630][  T977] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  666.878483][  T977] em28xx 1-1:0.0: dvb set to bulk mode.
[  666.885511][ T5830] em28xx 1-1:0.0: Binding DVB extension
[  666.931680][  T977] usb 1-1: USB disconnect, device number 41
[  667.028199][  T977] em28xx 1-1:0.0: Disconnecting em28xx
[  667.038534][ T5830] em28xx 1-1:0.0: Registering input extension
[  667.069939][  T977] em28xx 1-1:0.0: Closing input extension
[  667.108744][  T977] em28xx 1-1:0.0: Freeing device
[  667.300586][ T5890] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  667.468469][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3210'.
[  667.469884][ T5890] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  667.667341][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.685803][ T5890] usb 4-1: Product: syz
[  667.690109][ T5890] usb 4-1: Manufacturer: syz
[  667.695151][ T5890] usb 4-1: SerialNumber: syz
[  667.963643][T11627] Bluetooth: hci2: command 0x0406 tx timeout
[  668.134954][ T5890] usb 4-1: config 0 descriptor??
[  668.180292][ T5830] IPVS: starting estimator thread 0...
[  668.188427][T16498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3213'.
[  668.626800][ T5890] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  668.667058][T16501] IPVS: using max 76 ests per chain, 182400 per kthread
[  670.330375][  T977] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  670.535047][  T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  670.566390][  T977] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  670.595413][  T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.641864][  T977] usb 5-1: config 0 descriptor??
[  670.693745][ T5876] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  670.713597][  T977] pwc: Askey VC010 type 2 USB webcam detected.
[  670.870387][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  670.883838][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  670.905712][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  670.937940][ T5890] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  670.950389][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  670.991882][ T5890] usb 4-1: USB disconnect, device number 26
[  671.090277][ T5876] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  671.129251][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.164684][  T977] pwc: recv_control_msg error -32 req 02 val 2b00
[  671.175477][ T5876] hub 1-1:1.0: bad descriptor, ignoring hub
[  671.187719][  T977] pwc: recv_control_msg error -32 req 02 val 2700
[  671.197036][ T5876] hub 1-1:1.0: probe with driver hub failed with error -5
[  671.212436][  T977] pwc: recv_control_msg error -32 req 02 val 2c00
[  671.213138][T16533] fuse: Bad value for 'fd'
[  671.229424][ T5876] cdc_wdm 1-1:1.0: skipping garbage
[  671.235454][  T977] pwc: recv_control_msg error -32 req 04 val 1000
[  671.270280][ T5876] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  671.278886][  T977] pwc: recv_control_msg error -32 req 04 val 1300
[  671.301185][  T977] pwc: recv_control_msg error -32 req 04 val 1400
[  671.320383][  T977] pwc: recv_control_msg error -32 req 02 val 2000
[  671.328048][  T977] pwc: recv_control_msg error -32 req 02 val 2100
[  671.406939][  T977] pwc: recv_control_msg error -32 req 04 val 1500
[  671.444503][  T977] pwc: recv_control_msg error -32 req 02 val 2500
[  671.454527][  T977] pwc: recv_control_msg error -32 req 02 val 2400
[  671.471268][  T977] pwc: recv_control_msg error -32 req 02 val 2600
[  671.482046][  T977] pwc: recv_control_msg error -32 req 02 val 2900
[  671.691180][    T9] usb 1-1: USB disconnect, device number 42
[  671.705075][  T977] pwc: recv_control_msg error -71 req 04 val 1100
[  671.909184][  T977] pwc: recv_control_msg error -71 req 04 val 1200
[  671.961945][  T977] pwc: Registered as video103.
[  671.985995][  T977] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13
[  672.021924][  T977] usb 5-1: USB disconnect, device number 41
[  672.290395][T16547] siw: device registration error -23
[  672.660785][ T5890] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  673.342636][ T5890] usb 1-1: Using ep0 maxpacket: 8
[  673.641665][ T5890] usb 1-1: device descriptor read/all, error -71
[  674.318485][T16573] siw: device registration error -23
[  674.972968][T16580] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3238'.
[  675.224619][ T5890] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  676.426513][T16599] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  676.592978][T16603] hub 2-0:1.0: USB hub found
[  676.600431][T16603] hub 2-0:1.0: 1 port detected
[  676.955294][ T5890] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  676.970596][ T5890] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024
[  677.095203][ T5890] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  677.142584][ T5890] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  677.219184][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.331117][T16576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  677.368833][ T5890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  678.040398][  T977] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  678.193330][    T9] usb 1-1: USB disconnect, device number 45
[  678.210240][  T977] usb 4-1: Using ep0 maxpacket: 16
[  678.238481][  T977] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  678.265509][  T977] usb 4-1: config 0 has no interface number 0
[  678.300859][  T977] usb 4-1: config 0 interface 48 has no altsetting 0
[  678.318282][  T977] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  678.337853][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.393874][T16625] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3250'.
[  678.410629][  T977] usb 4-1: Product: syz
[  678.430743][  T977] usb 4-1: Manufacturer: syz
[  678.448404][  T977] usb 4-1: SerialNumber: syz
[  678.466947][T16625] nbd: must specify at least one socket
[  678.486981][  T977] usb 4-1: config 0 descriptor??
[  678.834601][T16606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.874304][T16606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.949030][T11627] Bluetooth: hci3: Unknown advertising packet type: 0x35
[  678.949085][T11627] Bluetooth: hci3: Malformed LE Event: 0x0d
[  678.956844][ T5890] usb 4-1: USB disconnect, device number 27
[  678.970230][    T9] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  679.137407][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  679.357017][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  679.388654][    T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  679.409823][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.433142][    T9] usb 5-1: config 0 descriptor??
[  679.690788][ T5904] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  679.915790][    T9] hid-u2fzero 0003:10C4:8ACF.0010: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0
[  680.013601][    T9] hid-u2fzero 0003:10C4:8ACF.0010: U2F Zero LED initialised
[  680.067954][    T9] hid-u2fzero 0003:10C4:8ACF.0010: U2F Zero RNG initialised
[  680.240298][ T5904] usb 1-1: Using ep0 maxpacket: 16
[  680.564029][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  680.592541][    T9] usb 5-1: USB disconnect, device number 42
[  680.608252][ T5904] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  680.617445][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.625838][ T5904] usb 1-1: Product: syz
[  680.631991][ T5904] usb 1-1: Manufacturer: syz
[  680.636698][ T5904] usb 1-1: SerialNumber: syz
[  680.648756][ T5904] usb 1-1: config 0 descriptor??
[  680.707556][ T5904] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  680.718132][ T5904] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  680.724705][T16662] fido_id[16662]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  680.730820][ T5897] libceph: connect (1)[c::]:6789 error -101
[  680.750720][ T5897] libceph: mon0 (1)[c::]:6789 connect error
[  680.819277][T16667] ceph: No mds server is up or the cluster is laggy
[  681.150758][T16682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'.
[  681.311765][ T5904] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  681.540255][ T5897] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  682.230332][ T5897] usb 5-1: Using ep0 maxpacket: 16
[  682.236954][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  682.253410][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  682.275729][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  682.304990][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  682.344516][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.356457][ T5897] usb 5-1: config 0 descriptor??
[  682.405926][ T5904] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  682.470738][ T5904] em28xx 1-1:0.0: board has no eeprom
[  682.964576][ T5904] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  682.972568][ T5904] em28xx 1-1:0.0: dvb set to bulk mode.
[  682.986615][  T910] em28xx 1-1:0.0: Binding DVB extension
[  683.003684][ T5904] usb 1-1: USB disconnect, device number 46
[  683.011109][ T5904] em28xx 1-1:0.0: Disconnecting em28xx
[  683.364110][ T5897] usbhid 5-1:0.0: can't add hid device: -71
[  683.450308][ T5897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  683.459604][  T910] em28xx 1-1:0.0: Registering input extension
[  683.470571][ T5904] em28xx 1-1:0.0: Closing input extension
[  683.476642][ T5897] usb 5-1: USB disconnect, device number 43
[  683.535939][ T5904] em28xx 1-1:0.0: Freeing device
[  683.930426][ T5904] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  684.462496][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  684.596772][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  684.717492][T16720] hub 2-0:1.0: USB hub found
[  684.723788][T16720] hub 2-0:1.0: 1 port detected
[  685.020767][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  685.033630][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  685.074145][ T5904] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  685.116436][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.150785][ T5904] usb 1-1: config 0 descriptor??
[  685.326691][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  685.410040][ T5904] hdpvr 1-1:0.0: unexpected answer of status request, len -71
[  685.442291][ T5904] hdpvr 1-1:0.0: device init failed
[  685.447569][ T5904] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  685.458903][   T30] audit: type=1400 audit(1759822702.334:455): avc:  denied  { write } for  pid=16727 comm="syz.4.3280" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  685.494746][ T5904] usb 1-1: USB disconnect, device number 47
[  685.957482][ T5904] libceph: connect (1)[c::]:6789 error -101
[  685.964157][ T5904] libceph: mon0 (1)[c::]:6789 connect error
[  686.057320][T16734] ceph: No mds server is up or the cluster is laggy
[  686.342213][   T10] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  687.195119][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  687.206458][T16750] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3284'.
[  687.215601][   T30] audit: type=1400 audit(1759822704.094:456): avc:  denied  { nlmsg_read } for  pid=16747 comm="syz.4.3284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  687.247850][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[  687.255620][   T10] usb 1-1: can't read configurations, error -71
[  687.694270][T16758] trusted_key: encrypted_key: key user:syz not found
[  688.852913][   T30] audit: type=1400 audit(1759822705.744:457): avc:  denied  { append } for  pid=16780 comm="syz.3.3290" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  689.048202][T16794] netlink: 'syz.1.3292': attribute type 8 has an invalid length.
[  689.128325][T16794] netlink: 'syz.1.3292': attribute type 8 has an invalid length.
[  689.220393][   T10] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  689.381617][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  689.406614][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  689.438706][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  689.463064][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.487899][   T10] usb 1-1: config 0 descriptor??
[  689.510266][ T5904] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  689.527674][   T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  689.670217][ T5904] usb 5-1: Using ep0 maxpacket: 16
[  689.676963][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  689.691022][ T5904] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  689.701013][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.708995][ T5904] usb 5-1: Product: syz
[  689.713707][ T5904] usb 5-1: Manufacturer: syz
[  689.718297][ T5904] usb 5-1: SerialNumber: syz
[  689.739428][ T5904] usb 5-1: config 0 descriptor??
[  689.747413][ T5904] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  689.758148][ T5904] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  689.970872][   T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  690.140205][   T10] usb 4-1: Using ep0 maxpacket: 32
[  690.147409][   T10] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  690.159321][   T10] usb 4-1: config 0 has no interface number 0
[  690.166209][   T10] usb 4-1: config 0 interface 184 has no altsetting 0
[  690.176337][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  690.186014][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.194320][   T10] usb 4-1: Product: syz
[  690.199371][   T10] usb 4-1: Manufacturer: syz
[  690.204571][   T10] usb 4-1: SerialNumber: syz
[  690.211849][   T10] usb 4-1: config 0 descriptor??
[  690.221881][   T10] smsc75xx v1.0.0
[  690.357318][ T5904] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  690.635547][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  690.690403][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  690.727513][   T10] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  690.760548][   T10] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61
[  690.852767][   T10] usb 4-1: USB disconnect, device number 28
[  691.179275][ T5904] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  691.188133][ T5904] em28xx 5-1:0.0: board has no eeprom
[  691.250294][ T5904] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  691.259382][ T5904] em28xx 5-1:0.0: dvb set to bulk mode.
[  691.265392][  T910] em28xx 5-1:0.0: Binding DVB extension
[  691.283710][ T5904] usb 5-1: USB disconnect, device number 44
[  691.314084][ T5904] em28xx 5-1:0.0: Disconnecting em28xx
[  691.327268][  T910] em28xx 5-1:0.0: Registering input extension
[  691.338459][ T5904] em28xx 5-1:0.0: Closing input extension
[  691.356434][ T5904] em28xx 5-1:0.0: Freeing device
[  692.496760][  T977] usb 1-1: USB disconnect, device number 50
[  692.700913][ T5904] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  692.775095][T16835] fuse: Unknown parameter 'ęd'
[  692.830343][  T910] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  692.850269][ T5904] usb 4-1: Using ep0 maxpacket: 16
[  692.869255][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  692.900425][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  692.946945][ T5904] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  692.984116][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.009242][  T910] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  693.034528][  T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.054679][ T5904] usb 4-1: config 0 descriptor??
[  693.077915][ T5904] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  693.085521][  T910] usb 5-1: Product: syz
[  693.099962][  T910] usb 5-1: Manufacturer: syz
[  693.110074][  T910] usb 5-1: SerialNumber: syz
[  693.136500][  T910] usb 5-1: config 0 descriptor??
[  693.363078][  T977] usb 4-1: USB disconnect, device number 29
[  693.463128][  T910] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  694.030998][T16842] vlan2: entered allmulticast mode
[  694.037266][T16842] veth0_to_bond: entered allmulticast mode
[  694.514096][  T977] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  695.202202][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  695.213427][  T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  695.214580][ T5890] libceph: connect (1)[c::]:6789 error -101
[  695.230203][ T5890] libceph: mon0 (1)[c::]:6789 connect error
[  695.246875][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  695.256697][  T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  695.267162][  T977] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  695.316775][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.326348][T16858] ceph: No mds server is up or the cluster is laggy
[  695.345921][  T977] usb 4-1: config 0 descriptor??
[  695.354968][  T910] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  695.384373][  T910] usb 5-1: USB disconnect, device number 45
[  695.578782][  T977] hdpvr 4-1:0.0: unexpected answer of status request, len -71
[  695.586342][  T977] hdpvr 4-1:0.0: device init failed
[  695.592945][  T977] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  695.602748][  T977] usb 4-1: USB disconnect, device number 30
[  695.611977][ T5890] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  695.790307][ T5890] usb 1-1: Using ep0 maxpacket: 16
[  695.796728][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.807648][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  695.817542][ T5890] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  695.826876][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.837423][ T5890] usb 1-1: config 0 descriptor??
[  696.160956][  T977] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  696.259644][ T5890] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  696.365491][  T977] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  696.394840][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.445372][  T977] usb 5-1: Product: syz
[  696.454176][  T977] usb 5-1: Manufacturer: syz
[  696.469013][  T977] usb 5-1: SerialNumber: syz
[  696.493847][  T977] usb 5-1: config 0 descriptor??
[  696.509831][ T5890] usb 1-1: USB disconnect, device number 51
[  696.739408][  T977] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  697.660439][    T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  698.070284][    T9] usb 4-1: Using ep0 maxpacket: 8
[  698.078342][    T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  698.100191][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.151578][    T9] usb 4-1: config 0 descriptor??
[  698.329475][  T977] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  698.341132][  T977] usb 5-1: USB disconnect, device number 46
[  698.381804][    T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  699.548121][T16903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  699.860344][ T5890] usb 5-1: new full-speed USB device number 47 using dummy_hcd
[  700.063834][ T5890] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  700.079557][T16920] vlan2: entered allmulticast mode
[  700.085991][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.094513][T16920] veth0_to_bond: entered allmulticast mode
[  700.101764][ T5890] usb 5-1: Product: syz
[  700.105956][ T5890] usb 5-1: Manufacturer: syz
[  700.115008][ T5890] usb 5-1: SerialNumber: syz
[  700.125283][ T5890] usb 5-1: config 0 descriptor??
[  700.645846][ T5890] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  700.661646][    T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  700.671806][    T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  700.684601][    T9] asix 4-1:0.0: probe with driver asix failed with error -71
[  700.694706][    T9] usb 4-1: USB disconnect, device number 31
[  702.104376][T16942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3336'.
[  702.760352][T16933] Bluetooth: hci1: command 0x0406 tx timeout
[  703.530464][ T5890] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  703.580765][ T5890] usb 5-1: USB disconnect, device number 47
[  703.898183][T16959] syzkaller0: entered promiscuous mode
[  703.905431][T16959] syzkaller0: entered allmulticast mode
[  704.159175][T16965] netlink: 'syz.4.3344': attribute type 1 has an invalid length.
[  704.167183][T16965] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3344'.
[  704.512837][T16971] siw: device registration error -23
[  706.790495][  T977] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  707.974285][  T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  707.985088][T16989] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  708.320722][  T977] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  708.329816][  T977] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  708.359460][  T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.392291][T17001] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3352'.
[  708.420964][  T977] usb 1-1: config 0 descriptor??
[  708.661084][  T977] usb 1-1: USB disconnect, device number 52
[  709.010294][   T30] audit: type=1400 audit(1759822725.874:458): avc:  denied  { map } for  pid=17005 comm="syz.3.3354" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  709.098530][T17003] ptrace attach of "./syz-executor exec"[14886] was attempted by "./syz-executor exec"[17003]
[  709.153111][T17015] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  710.028755][T17019] netlink: 'syz.0.3357': attribute type 1 has an invalid length.
[  710.099765][T17019] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3357'.
[  710.850163][T16664] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  711.399232][T17038] binder: BINDER_SET_CONTEXT_MGR already set
[  711.427396][T17038] binder: 17037:17038 ioctl 4018620d 200000000040 returned -16
[  711.510661][T17038] binder: 17037:17038 ioctl c0306201 200000000240 returned -11
[  711.593304][T16664] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  711.603871][T16664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.613128][T16664] usb 4-1: Product: syz
[  711.623170][T16664] usb 4-1: Manufacturer: syz
[  711.632171][T16664] usb 4-1: SerialNumber: syz
[  711.647982][T16664] usb 4-1: config 0 descriptor??
[  711.848683][T17053] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  711.910472][T16664] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  713.970466][  T977] libceph: connect (1)[c::]:6789 error -101
[  713.976584][  T977] libceph: mon0 (1)[c::]:6789 connect error
[  714.574623][  T977] libceph: connect (1)[c::]:6789 error -101
[  714.582129][T16664] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  714.594267][  T977] libceph: mon0 (1)[c::]:6789 connect error
[  714.620740][T16664] usb 4-1: USB disconnect, device number 32
[  714.635414][T17079] ceph: No mds server is up or the cluster is laggy
[  714.750426][T17089] vlan2: entered allmulticast mode
[  714.755658][T17089] veth0_to_bond: entered allmulticast mode
[  714.901129][ T5876] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  716.010208][  T977] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  716.167151][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short
[  716.617261][ T5876] usb 5-1: unable to read config index 0 descriptor/start: -71
[  716.636928][ T5876] usb 5-1: can't read configurations, error -71
[  716.694415][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  716.707301][  T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  717.034931][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  717.129314][  T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  717.171468][  T977] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  717.203991][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.344718][  T977] usb 4-1: config 0 descriptor??
[  717.712244][  T977] hdpvr 4-1:0.0: unexpected answer of status request, len -71
[  717.719703][  T977] hdpvr 4-1:0.0: device init failed
[  717.750706][  T977] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  717.783848][  T977] usb 4-1: USB disconnect, device number 33
[  718.184304][T16933] Bluetooth: hci5: command 0x0406 tx timeout
[  718.620610][ T5876] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  718.830274][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  718.842177][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  718.860201][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  718.889353][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  718.932663][ T5876] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  718.975562][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.048311][ T5876] hub 1-1:1.0: bad descriptor, ignoring hub
[  719.073587][ T5876] hub 1-1:1.0: probe with driver hub failed with error -5
[  719.099007][ T5876] cdc_wdm 1-1:1.0: skipping garbage
[  719.118232][ T5876] cdc_wdm 1-1:1.0: skipping garbage
[  719.133876][ T5876] cdc_wdm 1-1:1.0: skipping garbage
[  719.147027][ T5876] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  719.420372][ T5876] usb 1-1: USB disconnect, device number 53
[  719.680528][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  719.790309][ T5876] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  719.900261][   T10] usb 4-1: Using ep0 maxpacket: 16
[  719.928372][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  720.390950][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  720.403178][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.421083][   T10] usb 4-1: Product: syz
[  720.438235][   T10] usb 4-1: Manufacturer: syz
[  720.445137][   T10] usb 4-1: SerialNumber: syz
[  720.453335][   T10] usb 4-1: config 0 descriptor??
[  720.466747][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  720.476093][ T5876] usb 1-1: Using ep0 maxpacket: 8
[  720.486717][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  720.512831][   T10] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  720.519038][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  720.530371][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  720.543499][ T5876] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  720.559409][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.583663][ T5876] hub 1-1:1.0: bad descriptor, ignoring hub
[  720.629155][ T5876] hub 1-1:1.0: probe with driver hub failed with error -5
[  720.637848][ T5876] cdc_wdm 1-1:1.0: skipping garbage
[  720.643615][ T5876] cdc_wdm 1-1:1.0: skipping garbage
[  720.711323][ T5876] cdc_wdm 1-1:1.0: skipping garbage
[  720.723068][ T5876] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  720.805061][  T910] libceph: connect (1)[c::]:6789 error -101
[  720.822380][  T910] libceph: mon0 (1)[c::]:6789 connect error
[  720.914238][T17172] ceph: No mds server is up or the cluster is laggy
[  720.960365][ T5890] usb 1-1: USB disconnect, device number 54
[  721.112488][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  721.341925][T17182] ptrace attach of "./syz-executor exec"[15156] was attempted by "./syz-executor exec"[17182]
[  722.451981][   T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  723.028209][   T10] em28xx 4-1:0.0: board has no eeprom
[  723.510239][   T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  723.518160][   T10] em28xx 4-1:0.0: dvb set to bulk mode.
[  723.523923][T16664] em28xx 4-1:0.0: Binding DVB extension
[  723.571071][   T10] usb 4-1: USB disconnect, device number 34
[  723.577960][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  723.750621][T17206] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  724.829516][T16664] em28xx 4-1:0.0: Registering input extension
[  724.836004][   T10] em28xx 4-1:0.0: Closing input extension
[  724.861185][   T10] em28xx 4-1:0.0: Freeing device
[  724.867186][T17216] netlink: 'syz.1.3413': attribute type 10 has an invalid length.
[  724.882003][T17216] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  726.271815][T11627] Bluetooth: hci2: link tx timeout
[  726.277831][T11627] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  726.291509][T11627] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00
[  728.103642][T17273] netlink: 'syz.3.3429': attribute type 10 has an invalid length.
[  728.114904][T17273] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  728.362814][T11627] Bluetooth: hci2: command 0x0406 tx timeout
[  728.573875][T17285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3430'.
[  729.457799][ T5890] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  730.040206][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  730.075887][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  730.101315][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  730.122936][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.174670][ T5890] usb 4-1: Product: syz
[  730.192369][ T5890] usb 4-1: Manufacturer: syz
[  730.228689][ T5890] usb 4-1: SerialNumber: syz
[  730.291266][ T5890] usb 4-1: config 0 descriptor??
[  730.320034][ T5890] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  730.386732][ T5890] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  730.679853][T17305] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3438'.
[  730.974693][ T5890] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  731.861652][ T5890] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  731.896868][ T5890] em28xx 4-1:0.0: board has no eeprom
[  731.978859][ T5890] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  732.067223][ T5890] em28xx 4-1:0.0: dvb set to bulk mode.
[  732.109199][  T910] em28xx 4-1:0.0: Binding DVB extension
[  732.195454][ T5890] usb 4-1: USB disconnect, device number 35
[  732.231386][ T5890] em28xx 4-1:0.0: Disconnecting em28xx
[  732.508910][  T910] em28xx 4-1:0.0: Registering input extension
[  732.520600][ T5890] em28xx 4-1:0.0: Closing input extension
[  732.593391][ T5890] em28xx 4-1:0.0: Freeing device
[  732.730918][T17330] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3445'.
[  732.850264][T17330] nbd2: detected capacity change from 0 to 63
[  732.866121][T16933] block nbd2: Receive control failed (result -32)
[  732.876419][ T5833] block nbd2: Dead connection, failed to find a fallback
[  732.894539][ T5833] block nbd2: shutting down sockets
[  732.909937][ T5833] blk_print_req_error: 138 callbacks suppressed
[  732.909951][ T5833] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  732.950377][ T5833] buffer_io_error: 138 callbacks suppressed
[  732.950392][ T5833] Buffer I/O error on dev nbd2, logical block 0, async page read
[  732.964328][ T5833] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  732.975235][ T5833] Buffer I/O error on dev nbd2, logical block 1, async page read
[  732.989317][ T5833] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  732.998784][ T5833] Buffer I/O error on dev nbd2, logical block 2, async page read
[  733.000352][ T5897] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  733.007120][ T5833] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  733.023823][ T5833] Buffer I/O error on dev nbd2, logical block 3, async page read
[  733.033334][ T5833] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  733.044042][ T5833] Buffer I/O error on dev nbd2, logical block 0, async page read
[  733.052354][ T5833] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  733.061779][ T5833] Buffer I/O error on dev nbd2, logical block 1, async page read
[  733.069967][ T5833] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  733.079333][ T5833] Buffer I/O error on dev nbd2, logical block 2, async page read
[  733.087885][ T5833] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  733.097246][ T5833] Buffer I/O error on dev nbd2, logical block 3, async page read
[  733.105672][ T5833] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  733.115812][ T5833] Buffer I/O error on dev nbd2, logical block 0, async page read
[  733.125404][ T5833] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  733.134865][ T5833] Buffer I/O error on dev nbd2, logical block 1, async page read
[  733.146833][ T5833] ldm_validate_partition_table(): Disk read failed.
[  733.157266][ T5833] Dev nbd2: unable to read RDB block 0
[  733.169813][ T5833]  nbd2: unable to read partition table
[  733.187095][ T5833] ldm_validate_partition_table(): Disk read failed.
[  733.195464][ T5833] Dev nbd2: unable to read RDB block 0
[  733.203084][ T5833]  nbd2: unable to read partition table
[  734.148683][ T5897] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  734.160313][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.168314][ T5897] usb 5-1: Product: syz
[  734.172877][ T5897] usb 5-1: Manufacturer: syz
[  734.177465][ T5897] usb 5-1: SerialNumber: syz
[  734.184499][ T5897] usb 5-1: config 0 descriptor??
[  734.979298][ T5897] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  735.214310][T17363] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  735.371073][  T910] libceph: connect (1)[c::]:6789 error -101
[  735.390106][  T910] libceph: mon0 (1)[c::]:6789 connect error
[  735.447054][T17370] ceph: No mds server is up or the cluster is laggy
[  736.008750][T17384] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3460'.
[  736.153721][T17384] nbd3: detected capacity change from 0 to 63
[  736.168774][T16933] block nbd3: Receive control failed (result -32)
[  736.190558][ T6743] block nbd3: Dead connection, failed to find a fallback
[  736.197930][ T6743] block nbd3: shutting down sockets
[  736.206671][ T6743] ldm_validate_partition_table(): Disk read failed.
[  736.214886][ T6743] Dev nbd3: unable to read RDB block 0
[  736.224044][ T6743]  nbd3: unable to read partition table
[  736.238464][ T6743] ldm_validate_partition_table(): Disk read failed.
[  736.250318][  T910] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  736.271578][ T6743] Dev nbd3: unable to read RDB block 0
[  736.282875][ T6743]  nbd3: unable to read partition table
[  736.464352][ T5897] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  736.475888][ T5897] usb 5-1: USB disconnect, device number 50
[  736.994214][  T910] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  737.011634][  T910] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  737.034326][  T910] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  737.097354][  T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.118618][T17396] fuse: Unknown parameter 'grou00000000000000000000'
[  737.144430][T17383] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  737.153549][  T910] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  737.601763][T17401] siw: device registration error -23
[  738.343412][T17404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.620347][T11627] Bluetooth: hci0: command 0x0406 tx timeout
[  738.753685][T17404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  739.315711][T17421] binder: 17420:17421 ioctl c0306201 0 returned -14
[  739.324595][T17421] binder: 17420:17421 ioctl c0306201 0 returned -14
[  739.517081][ T5904] libceph: connect (1)[c::]:6789 error -101
[  739.524248][ T5904] libceph: mon0 (1)[c::]:6789 connect error
[  739.562044][T17426] ceph: No mds server is up or the cluster is laggy
[  739.765490][T17433] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3472'.
[  739.863644][T17433] nbd: nbd3 already in use
[  740.862631][T16664] usb 1-1: USB disconnect, device number 55
[  740.910227][  T910] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  741.225273][  T910] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  741.236623][  T910] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  741.249377][  T910] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  741.270270][  T910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.368100][T17442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  741.394450][  T910] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  742.328441][T16664] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  742.535682][T16664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  742.692074][T16664] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  742.703274][T16664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  742.715437][T16664] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  742.725340][T16664] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  742.735432][T16664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.117333][T16664] usb 1-1: config 0 descriptor??
[  743.445150][T16664] hdpvr 1-1:0.0: unexpected answer of status request, len -71
[  743.509000][T16664] hdpvr 1-1:0.0: device init failed
[  743.526159][T16664] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  743.556876][T16664] usb 1-1: USB disconnect, device number 56
[  743.598094][  T977] libceph: connect (1)[c::]:6789 error -101
[  743.613403][  T977] libceph: mon0 (1)[c::]:6789 connect error
[  743.688589][T17472] ceph: No mds server is up or the cluster is laggy
[  744.030222][  T977] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  745.932770][  T977] usb 5-1: unable to get BOS descriptor or descriptor too short
[  745.941858][  T977] usb 5-1: unable to read config index 0 descriptor/start: -71
[  745.949434][  T977] usb 5-1: can't read configurations, error -71
[  745.990304][ T5876] usb 4-1: USB disconnect, device number 36
[  746.055368][T17496] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3490'.
[  746.083769][T17496] nbd: nbd3 already in use
[  746.932872][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  747.664623][   T30] audit: type=1400 audit(1759822764.554:459): avc:  denied  { read } for  pid=17521 comm="syz.3.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  748.030070][T17530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3500'.
[  748.845441][T17535] ceph: No mds server is up or the cluster is laggy
[  748.852310][ T5876] libceph: connect (1)[c::]:6789 error -101
[  748.858356][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  750.761028][T17569] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  752.260234][  T910] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  752.420829][  T910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  752.487562][  T910] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  752.506905][  T910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.602873][T17587] ptrace attach of "./syz-executor exec"[15156] was attempted by "./syz-executor exec"[17587]
[  752.645019][  T910] usb 5-1: config 0 descriptor??
[  752.666073][  T910] pwc: Askey VC010 type 2 USB webcam detected.
[  753.095937][  T910] pwc: recv_control_msg error -32 req 02 val 2b00
[  753.128771][  T910] pwc: recv_control_msg error -32 req 02 val 2700
[  753.234475][  T910] pwc: recv_control_msg error -32 req 02 val 2c00
[  753.244962][  T910] pwc: recv_control_msg error -32 req 04 val 1000
[  753.259339][  T910] pwc: recv_control_msg error -32 req 04 val 1300
[  753.280283][  T910] pwc: recv_control_msg error -32 req 04 val 1400
[  753.303418][  T910] pwc: recv_control_msg error -32 req 02 val 2000
[  753.572770][  T910] pwc: recv_control_msg error -71 req 04 val 1500
[  753.582753][  T910] pwc: recv_control_msg error -71 req 02 val 2500
[  753.644314][  T910] pwc: recv_control_msg error -71 req 02 val 2400
[  753.712381][  T910] pwc: recv_control_msg error -71 req 02 val 2600
[  753.720296][  T910] pwc: recv_control_msg error -71 req 02 val 2900
[  753.727695][  T910] pwc: recv_control_msg error -71 req 02 val 2800
[  753.793557][  T910] pwc: recv_control_msg error -71 req 04 val 1100
[  753.838006][  T910] pwc: recv_control_msg error -71 req 04 val 1200
[  753.977139][  T910] pwc: Registered as video103.
[  754.244259][  T910] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18
[  754.290479][  T910] usb 5-1: USB disconnect, device number 53
[  756.257344][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3527'.
[  756.617483][T17643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3530'.
[  757.629187][  T910] libceph: connect (1)[c::]:6789 error -101
[  757.732314][  T910] libceph: mon0 (1)[c::]:6789 connect error
[  758.222388][ T5897] libceph: connect (1)[c::]:6789 error -101
[  758.231391][T17657] ceph: No mds server is up or the cluster is laggy
[  758.240403][ T5897] libceph: mon0 (1)[c::]:6789 connect error
[  758.775687][ T5897] libceph: connect (1)[c::]:6789 error -101
[  758.885035][  T977] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  758.926042][ T5897] libceph: mon0 (1)[c::]:6789 connect error
[  758.993863][T17669] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  759.007210][T17669] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  759.260195][ T5876] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  760.161761][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  760.175174][ T5876] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  760.194486][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.265336][ T5876] usb 1-1: config 0 descriptor??
[  760.277413][ T5876] pwc: Askey VC010 type 2 USB webcam detected.
[  760.585258][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3542'.
[  761.495670][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3541'.
[  761.694146][ T5876] pwc: recv_control_msg error -32 req 02 val 2b00
[  761.710389][ T5876] pwc: recv_control_msg error -32 req 02 val 2700
[  761.727942][ T5876] pwc: recv_control_msg error -32 req 02 val 2c00
[  761.735402][ T5876] pwc: recv_control_msg error -32 req 04 val 1000
[  761.743398][ T5876] pwc: recv_control_msg error -32 req 04 val 1300
[  761.750783][ T5876] pwc: recv_control_msg error -32 req 04 val 1400
[  761.757901][ T5876] pwc: recv_control_msg error -32 req 02 val 2000
[  761.888496][  T977] usb 4-1: unable to get BOS descriptor or descriptor too short
[  761.966667][ T5876] pwc: recv_control_msg error -71 req 04 val 1500
[  762.050661][ T5876] pwc: recv_control_msg error -71 req 02 val 2500
[  762.071682][  T977] usb 4-1: unable to read config index 0 descriptor/start: -71
[  762.082814][  T977] usb 4-1: can't read configurations, error -71
[  762.089258][ T5876] pwc: recv_control_msg error -71 req 02 val 2400
[  762.536858][ T5876] pwc: recv_control_msg error -71 req 02 val 2600
[  762.571736][ T5876] pwc: recv_control_msg error -71 req 02 val 2900
[  762.639927][ T5876] pwc: recv_control_msg error -71 req 02 val 2800
[  762.660732][ T5876] pwc: recv_control_msg error -71 req 04 val 1100
[  762.678876][ T5876] pwc: recv_control_msg error -71 req 04 val 1200
[  762.730962][ T5876] pwc: Registered as video103.
[  762.737306][ T5876] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19
[  763.410457][ T5876] usb 1-1: USB disconnect, device number 57
[  763.768123][T17721] vlan2: entered allmulticast mode
[  764.257175][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3554'.
[  764.494747][T17735] fuse: Bad value for 'rootmode'
[  765.333456][T17743] fuse: Unknown parameter 'ęd'
[  765.957533][T17754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3560'.
[  767.355592][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3564'.
[  769.511151][T17799] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  769.715998][T17803] vlan2: entered allmulticast mode
[  771.489723][T17816] ptrace attach of "./syz-executor exec"[15156] was attempted by "./syz-executor exec"[17816]
[  771.600890][T17820] binder: BINDER_SET_CONTEXT_MGR already set
[  771.606876][T17820] binder: 17819:17820 ioctl 4018620d 200000000040 returned -16
[  771.659317][T17824] binder: 17819:17824 ioctl c0306201 0 returned -14
[  771.687678][T17820] binder: 17819:17820 ioctl c0306201 200000000240 returned -11
[  772.035093][T16933] Bluetooth: hci2: link tx timeout
[  772.040313][T16933] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00
[  773.080268][ T5876] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  773.232495][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  773.566804][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  773.614453][ T5876] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  773.627025][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.723910][ T5876] usb 5-1: Product: syz
[  773.734701][ T5876] usb 5-1: Manufacturer: syz
[  773.748346][ T5876] usb 5-1: SerialNumber: syz
[  773.809243][ T5876] usb 5-1: config 0 descriptor??
[  773.954769][ T5876] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  773.988259][ T5876] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  774.300189][  T910] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  774.350269][ T5904] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  774.451510][  T910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.461714][  T910] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  774.471650][  T910] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  774.481345][  T910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.491383][  T910] usb 1-1: config 0 descriptor??
[  774.500263][ T5904] usb 4-1: Using ep0 maxpacket: 32
[  774.506659][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  774.516942][ T5904] usb 4-1: config 0 has no interfaces?
[  774.524174][ T5904] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  774.534120][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.542205][ T5904] usb 4-1: Product: syz
[  774.546415][ T5904] usb 4-1: Manufacturer: syz
[  774.551104][ T5904] usb 4-1: SerialNumber: syz
[  774.557412][ T5904] usb 4-1: config 0 descriptor??
[  774.560981][ T5876] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  774.975278][ T5876] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  774.984504][ T5876] em28xx 5-1:0.0: board has no eeprom
[  775.060225][ T5876] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  775.068173][ T5876] em28xx 5-1:0.0: dvb set to bulk mode.
[  775.074277][   T10] em28xx 5-1:0.0: Binding DVB extension
[  775.084119][ T5876] usb 5-1: USB disconnect, device number 54
[  775.093637][ T5876] em28xx 5-1:0.0: Disconnecting em28xx
[  775.126483][   T10] em28xx 5-1:0.0: Registering input extension
[  775.134782][ T5876] em28xx 5-1:0.0: Closing input extension
[  775.152727][ T5876] em28xx 5-1:0.0: Freeing device
[  775.801378][T17883] fuse: Unknown parameter 'ęd'
[  775.890564][T17885] fuse: Unknown parameter 'ęd'
[  777.395406][ T5897] usb 4-1: USB disconnect, device number 39
[  777.940264][ T5897] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  778.089529][  T977] usb 1-1: USB disconnect, device number 58
[  778.264282][ T5897] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  778.284111][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  778.299170][ T5897] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  778.316707][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  778.460220][ T5897] usb 4-1: SerialNumber: syz
[  778.552469][T17909] siw: device registration error -23
[  778.907054][ T5897] usb 4-1: 0:2 : does not exist
[  779.036726][ T5897] usb 4-1: unit 255 not found!
[  779.049182][ T5897] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  779.066036][ T5897] usb 4-1: USB disconnect, device number 40
[  780.289119][ T5904] libceph: connect (1)[c::]:6789 error -101
[  780.298343][ T5904] libceph: mon0 (1)[c::]:6789 connect error
[  780.311569][T17932] ceph: No mds server is up or the cluster is laggy
[  780.451202][  T977] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  780.570434][ T5904] libceph: connect (1)[c::]:6789 error -101
[  780.576739][ T5904] libceph: mon0 (1)[c::]:6789 connect error
[  780.675840][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  780.759947][  T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  780.849601][T17941] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  780.900218][   T10] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  780.934345][  T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  780.994912][  T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  781.056602][  T977] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  781.066015][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.081714][  T977] usb 4-1: config 0 descriptor??
[  781.397199][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  781.595206][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[  781.611892][   T10] usb 1-1: can't read configurations, error -71
[  782.880001][  T977] hdpvr 4-1:0.0: unexpected answer of status request, len -71
[  782.931256][  T977] hdpvr 4-1:0.0: device init failed
[  782.936532][  T977] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  782.962813][  T977] usb 4-1: USB disconnect, device number 41
[  783.324044][T17968] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  785.570330][ T5897] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  785.821319][ T5897] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  785.838073][ T5897] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  785.903421][ T5897] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  785.963127][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.983683][ T5897] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  786.002097][ T5897] usb 1-1: invalid MIDI out EP 0
[  786.347233][T18007] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  786.429521][ T5897] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  786.472313][ T5897] usb 1-1: USB disconnect, device number 61
[  787.332892][T18023] trusted_key: encrypted_key: key user:syz not found
[  787.757531][T18032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3637'.
[  789.375980][T18061] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  790.270306][   T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  790.413253][   T30] audit: type=1800 audit(1759822807.304:460): pid=18073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3646" name="bus" dev="tmpfs" ino=495 res=0 errno=0
[  790.431592][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  790.480200][   T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  790.498093][T18074] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3648'.
[  790.598573][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  790.679487][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.766722][T18063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  790.780979][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  791.277046][ T5890] usb 4-1: USB disconnect, device number 42
[  793.648235][  T910] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  793.853093][  T910] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  793.867102][  T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.882108][  T910] usb 5-1: Product: syz
[  793.896064][  T910] usb 5-1: Manufacturer: syz
[  793.900775][  T910] usb 5-1: SerialNumber: syz
[  793.967200][  T910] usb 5-1: config 0 descriptor??
[  794.042985][T18110] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  794.354569][  T910] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  794.707516][T18122] fuse: Unknown parameter '0x0000000000000004'
[  794.790646][ T5890] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  794.950225][ T5890] usb 4-1: Using ep0 maxpacket: 32
[  795.157339][ T5890] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  795.170442][ T5890] usb 4-1: config 0 has no interface number 0
[  795.179229][ T5890] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  795.199181][ T5890] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  795.248637][ T5890] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  795.262439][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.270469][ T5890] usb 4-1: Product: syz
[  795.274816][ T5890] usb 4-1: Manufacturer: syz
[  795.279391][ T5890] usb 4-1: SerialNumber: syz
[  795.285893][ T5890] usb 4-1: config 0 descriptor??
[  795.293159][ T5890] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  795.506043][ T5890] usb 4-1: qt2_setup_urbs - submit read urb failed -90
[  795.561601][ T5890] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90
[  795.785002][ T5890] usb 4-1: USB disconnect, device number 43
[  795.847550][  T910] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  795.888194][  T910] usb 5-1: USB disconnect, device number 55
[  796.552499][  T910] libceph: connect (1)[c::]:6789 error -101
[  796.558539][  T910] libceph: mon0 (1)[c::]:6789 connect error
[  796.825853][ T5904] libceph: connect (1)[c::]:6789 error -101
[  797.311402][T18149] ceph: No mds server is up or the cluster is laggy
[  797.378890][ T5904] libceph: mon0 (1)[c::]:6789 connect error
[  797.554393][T18163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3671'.
[  797.719884][T18163] hsr_slave_1 (unregistering): left promiscuous mode
[  798.778572][T18172] vlan2: entered promiscuous mode
[  798.786113][T18172] vlan2: entered allmulticast mode
[  798.791610][T18172] hsr_slave_1: entered allmulticast mode
[  798.863976][T18172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3673'.
[  799.188401][  T910] libceph: connect (1)[c::]:6789 error -101
[  799.194501][  T910] libceph: mon0 (1)[c::]:6789 connect error
[  799.271628][T18174] ceph: No mds server is up or the cluster is laggy
[  800.550334][   T10] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  800.809171][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  800.877721][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.913679][   T10] usb 1-1: Product: syz
[  800.939057][   T10] usb 1-1: Manufacturer: syz
[  800.974906][   T10] usb 1-1: SerialNumber: syz
[  801.034030][   T10] usb 1-1: config 0 descriptor??
[  801.273755][   T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  802.732835][   T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  802.778089][   T10] usb 1-1: USB disconnect, device number 62
[  803.948320][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3688'.
[  805.026452][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'.
[  805.321607][T16933] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  805.352349][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'.
[  806.442888][ T5876] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  806.600242][    T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  806.631584][ T5876] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  806.642728][ T5876] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  806.678159][ T5876] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  806.791346][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.806698][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  806.819431][ T5876] usb 1-1: invalid MIDI out EP 0
[  807.251762][ T5876] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  807.276355][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  807.287762][    T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  807.301182][ T5876] usb 1-1: USB disconnect, device number 63
[  807.317358][T18275] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  807.341091][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  807.354291][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.403488][T18271] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  807.433239][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  808.073907][T18295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  808.117196][T18295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  808.220598][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  808.930379][T11627] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  808.940285][T11627] CPU: 0 UID: 0 PID: 11627 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  808.940302][T11627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  808.940311][T11627] Workqueue: hci5 hci_rx_work
[  808.940330][T11627] Call Trace:
[  808.940335][T11627]  <TASK>
[  808.940339][T11627]  dump_stack_lvl+0x16c/0x1f0
[  808.940358][T11627]  sysfs_warn_dup+0x7f/0xa0
[  808.940376][T11627]  sysfs_create_dir_ns+0x24b/0x2b0
[  808.940391][T11627]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  808.940406][T11627]  ? find_held_lock+0x2b/0x80
[  808.940426][T11627]  ? do_raw_spin_unlock+0x172/0x230
[  808.940442][T11627]  kobject_add_internal+0x2c4/0x9b0
[  808.940461][T11627]  kobject_add+0x16e/0x240
[  808.940476][T11627]  ? __pfx_kobject_add+0x10/0x10
[  808.940492][T11627]  ? kobject_put+0xab/0x5a0
[  808.940514][T11627]  device_add+0x288/0x1aa0
[  808.940527][T11627]  ? __pfx_dev_set_name+0x10/0x10
[  808.940541][T11627]  ? __pfx_device_add+0x10/0x10
[  808.940553][T11627]  ? mgmt_send_event_skb+0x2fb/0x460
[  808.940570][T11627]  hci_conn_add_sysfs+0x17e/0x230
[  808.940586][T11627]  le_conn_complete_evt+0x1260/0x2150
[  808.940602][T11627]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  808.940614][T11627]  ? hci_event_packet+0x459/0x11c0
[  808.940631][T11627]  hci_le_conn_complete_evt+0x23c/0x370
[  808.940647][T11627]  hci_le_meta_evt+0x354/0x5e0
[  808.940661][T11627]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[  808.940674][T11627]  hci_event_packet+0x685/0x11c0
[  808.940686][T11627]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  808.940699][T11627]  ? __pfx_hci_event_packet+0x10/0x10
[  808.940712][T11627]  ? kcov_remote_start+0x3c9/0x6d0
[  808.940728][T11627]  ? lockdep_hardirqs_on+0x7c/0x110
[  808.940743][T11627]  hci_rx_work+0x2c5/0x16b0
[  808.940756][T11627]  ? rcu_is_watching+0x12/0xc0
[  808.940775][T11627]  process_one_work+0x9cc/0x1b70
[  808.940796][T11627]  ? __pfx_process_one_work+0x10/0x10
[  808.940815][T11627]  ? assign_work+0x1a0/0x250
[  808.940830][T11627]  worker_thread+0x6c8/0xf10
[  808.940849][T11627]  ? __kthread_parkme+0x19e/0x250
[  808.940861][T11627]  ? __pfx_worker_thread+0x10/0x10
[  808.940876][T11627]  kthread+0x3c5/0x780
[  808.940889][T11627]  ? __pfx_kthread+0x10/0x10
[  808.940904][T11627]  ? rcu_is_watching+0x12/0xc0
[  808.940921][T11627]  ? __pfx_kthread+0x10/0x10
[  808.940935][T11627]  ret_from_fork+0x56d/0x730
[  808.940947][T11627]  ? __pfx_kthread+0x10/0x10
[  808.940961][T11627]  ret_from_fork_asm+0x1a/0x30
[  808.940984][T11627]  </TASK>
[  808.941013][T11627] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  809.205524][T11627] Bluetooth: hci5: failed to register connection device
[  810.350424][ T5828] Bluetooth: hci3: command 0x0406 tx timeout
[  811.523228][T18318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3708'.
[  811.615455][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3708'.
[  812.643924][ T5890] usb 4-1: USB disconnect, device number 44
[  812.758596][   T30] audit: type=1400 audit(1759822829.644:461): avc:  denied  { open } for  pid=18338 comm="syz.2.3712" path="/dev/ttyq8" dev="devtmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1
[  816.874908][T18382] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  817.544169][T18400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3727'.
[  818.580192][T18411] netlink: 'syz.4.3728': attribute type 1 has an invalid length.
[  818.879030][T18411] 8021q: adding VLAN 0 to HW filter on device bond1
[  819.240390][    T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  819.481441][    T9] usb 1-1: Using ep0 maxpacket: 32
[  819.547133][    T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  819.555551][    T9] usb 1-1: config 0 has no interface number 0
[  819.564315][    T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  819.592240][    T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  819.601656][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.609646][    T9] usb 1-1: Product: syz
[  819.630175][    T9] usb 1-1: Manufacturer: syz
[  819.635069][    T9] usb 1-1: SerialNumber: syz
[  819.718005][T18434] fuse: Unknown parameter 'ęd'
[  820.164021][T16933] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection
[  820.165179][    T9] usb 1-1: config 0 descriptor??
[  820.193166][    T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  820.203008][    T9] em28xx 1-1:0.132: Video interface 132 found:
[  820.703420][    T9] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  820.869594][T18444] overlayfs: failed to clone upperpath
[  821.466864][    T9] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  821.534309][    T9] em28xx 1-1:0.132: board has no eeprom
[  821.652416][    T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  821.695124][    T9] em28xx 1-1:0.132: analog set to bulk mode.
[  821.720724][  T977] em28xx 1-1:0.132: Registering V4L2 extension
[  822.066249][  T977] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  822.080081][    T9] usb 1-1: USB disconnect, device number 64
[  822.103294][    T9] em28xx 1-1:0.132: Disconnecting em28xx
[  822.153454][  T977] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  822.178987][  T977] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  822.191129][  T977] em28xx 1-1:0.132: No AC97 audio processor
[  822.213050][  T977] usb 1-1: Decoder not found
[  822.223596][  T977] em28xx 1-1:0.132: failed to create media graph
[  822.237792][  T977] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  822.256567][  T977] em28xx 1-1:0.132: Remote control support is not available for this card.
[  822.267615][T18465] ==================================================================
[  822.275668][T18465] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0
[  822.283126][T18465] Read of size 8 at addr ffff8880281b0740 by task v4l_id/18465
[  822.290657][T18465] 
[  822.292973][T18465] CPU: 0 UID: 0 PID: 18465 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  822.292994][T18465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  822.293005][T18465] Call Trace:
[  822.293011][T18465]  <TASK>
[  822.293019][T18465]  dump_stack_lvl+0x116/0x1f0
[  822.293042][T18465]  print_report+0xcd/0x630
[  822.293065][T18465]  ? __virt_addr_valid+0x81/0x610
[  822.293082][T18465]  ? __phys_addr+0xe8/0x180
[  822.293099][T18465]  ? v4l2_fh_init+0x27d/0x2c0
[  822.293114][T18465]  kasan_report+0xe0/0x110
[  822.293136][T18465]  ? v4l2_fh_init+0x27d/0x2c0
[  822.293154][T18465]  v4l2_fh_init+0x27d/0x2c0
[  822.293169][T18465]  v4l2_fh_open+0x64/0xa0
[  822.293184][T18465]  em28xx_v4l2_open+0x24e/0x7e0
[  822.293214][T18465]  v4l2_open+0x1cf/0x5e0
[  822.293238][T18465]  ? __pfx_v4l2_open+0x10/0x10
[  822.293261][T18465]  chrdev_open+0x234/0x6a0
[  822.293289][T18465]  ? __pfx_chrdev_open+0x10/0x10
[  822.293318][T18465]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  822.293343][T18465]  do_dentry_open+0x97f/0x1530
[  822.293364][T18465]  ? __pfx_chrdev_open+0x10/0x10
[  822.293391][T18465]  vfs_open+0x82/0x3f0
[  822.293416][T18465]  path_openat+0x1de4/0x2cb0
[  822.293441][T18465]  ? __pfx_path_openat+0x10/0x10
[  822.293464][T18465]  do_filp_open+0x20b/0x470
[  822.293484][T18465]  ? __pfx_do_filp_open+0x10/0x10
[  822.293512][T18465]  ? alloc_fd+0x471/0x7d0
[  822.293535][T18465]  do_sys_openat2+0x11b/0x1d0
[  822.293559][T18465]  ? __pfx_do_sys_openat2+0x10/0x10
[  822.293583][T18465]  ? find_held_lock+0x2b/0x80
[  822.293609][T18465]  ? handle_mm_fault+0x2ab/0xd10
[  822.293637][T18465]  __x64_sys_openat+0x174/0x210
[  822.293662][T18465]  ? __pfx___x64_sys_openat+0x10/0x10
[  822.293688][T18465]  ? do_user_addr_fault+0x843/0x1370
[  822.293714][T18465]  do_syscall_64+0xcd/0x4e0
[  822.293734][T18465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  822.293752][T18465] RIP: 0033:0x7f0c4bea7407
[  822.293767][T18465] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  822.293784][T18465] RSP: 002b:00007fff12eb67e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  822.293801][T18465] RAX: ffffffffffffffda RBX: 00007f0c4c622880 RCX: 00007f0c4bea7407
[  822.293812][T18465] RDX: 0000000000000000 RSI: 00007fff12eb6f1b RDI: ffffffffffffff9c
[  822.293823][T18465] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  822.293833][T18465] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  822.293843][T18465] R13: 00007fff12eb6a30 R14: 00007f0c4c789000 R15: 000055c983a7d4d8
[  822.293860][T18465]  </TASK>
[  822.293867][T18465] 
[  822.548611][T18465] Allocated by task 977:
[  822.552827][T18465]  kasan_save_stack+0x33/0x60
[  822.557484][T18465]  kasan_save_track+0x14/0x30
[  822.562137][T18465]  __kasan_kmalloc+0xaa/0xb0
[  822.566702][T18465]  em28xx_v4l2_init+0x114/0x4080
[  822.571612][T18465]  em28xx_init_extension+0x137/0x200
[  822.576872][T18465]  request_module_async+0x61/0x70
[  822.581876][T18465]  process_one_work+0x9cc/0x1b70
[  822.586792][T18465]  worker_thread+0x6c8/0xf10
[  822.591361][T18465]  kthread+0x3c5/0x780
[  822.595407][T18465]  ret_from_fork+0x56d/0x730
[  822.599981][T18465]  ret_from_fork_asm+0x1a/0x30
[  822.604724][T18465] 
[  822.607022][T18465] Freed by task 977:
[  822.610884][T18465]  kasan_save_stack+0x33/0x60
[  822.615536][T18465]  kasan_save_track+0x14/0x30
[  822.620188][T18465]  __kasan_save_free_info+0x3b/0x60
[  822.625365][T18465]  __kasan_slab_free+0x5f/0x80
[  822.630114][T18465]  kfree+0x2b8/0x6d0
[  822.633985][T18465]  em28xx_v4l2_init+0x22b5/0x4080
[  822.638982][T18465]  em28xx_init_extension+0x137/0x200
[  822.644242][T18465]  request_module_async+0x61/0x70
[  822.649252][T18465]  process_one_work+0x9cc/0x1b70
[  822.654172][T18465]  worker_thread+0x6c8/0xf10
[  822.658739][T18465]  kthread+0x3c5/0x780
[  822.662784][T18465]  ret_from_fork+0x56d/0x730
[  822.667355][T18465]  ret_from_fork_asm+0x1a/0x30
[  822.672117][T18465] 
[  822.674415][T18465] The buggy address belongs to the object at ffff8880281b0000
[  822.674415][T18465]  which belongs to the cache kmalloc-8k of size 8192
[  822.688437][T18465] The buggy address is located 1856 bytes inside of
[  822.688437][T18465]  freed 8192-byte region [ffff8880281b0000, ffff8880281b2000)
[  822.702380][T18465] 
[  822.704677][T18465] The buggy address belongs to the physical page:
[  822.711056][T18465] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x281b0
[  822.719788][T18465] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  822.728255][T18465] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  822.736123][T18465] page_type: f5(slab)
[  822.740078][T18465] raw: 00fff00000000040 ffff88801b027280 ffffea0000e5f800 dead000000000003
[  822.748636][T18465] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  822.757192][T18465] head: 00fff00000000040 ffff88801b027280 ffffea0000e5f800 dead000000000003
[  822.765837][T18465] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  822.774479][T18465] head: 00fff00000000003 ffffea0000a06c01 00000000ffffffff 00000000ffffffff
[  822.783123][T18465] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  822.791762][T18465] page dumped because: kasan: bad access detected
[  822.798144][T18465] page_owner tracks the page as allocated
[  822.803832][T18465] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5496, tgid 5496 (dhcpcd), ts 37230252463, free_ts 37221246814
[  822.823874][T18465]  post_alloc_hook+0x1c0/0x230
[  822.828620][T18465]  get_page_from_freelist+0x10a3/0x3a30
[  822.834144][T18465]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  822.840011][T18465]  alloc_pages_mpol+0x1fb/0x550
[  822.844839][T18465]  new_slab+0x24a/0x360
[  822.848976][T18465]  ___slab_alloc+0xdc4/0x1ae0
[  822.853633][T18465]  __slab_alloc.constprop.0+0x63/0x110
[  822.859075][T18465]  __kmalloc_cache_noprof+0x477/0x780
[  822.864430][T18465]  tomoyo_init_log+0xc8a/0x2140
[  822.869258][T18465]  tomoyo_supervisor+0x302/0x13b0
[  822.874263][T18465]  tomoyo_env_perm+0x191/0x200
[  822.879012][T18465]  tomoyo_find_next_domain+0xec2/0x20b0
[  822.884537][T18465]  tomoyo_bprm_check_security+0x12e/0x1d0
[  822.890239][T18465]  security_bprm_check+0x1b9/0x1e0
[  822.895328][T18465]  bprm_execve+0x81a/0x1640
[  822.899805][T18465]  do_execveat_common.isra.0+0x4a5/0x610
[  822.905416][T18465] page last free pid 5492 tgid 5492 stack trace:
[  822.911719][T18465]  __free_frozen_pages+0x7df/0x1160
[  822.917248][T18465]  __put_partials+0x130/0x170
[  822.921901][T18465]  qlist_free_all+0x4d/0x120
[  822.926472][T18465]  kasan_quarantine_reduce+0x195/0x1e0
[  822.931906][T18465]  __kasan_slab_alloc+0x69/0x90
[  822.936733][T18465]  kmem_cache_alloc_node_noprof+0x28a/0x770
[  822.942613][T18465]  __alloc_skb+0x2b2/0x380
[  822.947006][T18465]  alloc_skb_with_frags+0xe0/0x860
[  822.952100][T18465]  sock_alloc_send_pskb+0x7f9/0x980
[  822.957277][T18465]  unix_dgram_sendmsg+0x3e9/0x17f0
[  822.962369][T18465]  unix_seqpacket_sendmsg+0x12a/0x1c0
[  822.967719][T18465]  sock_write_iter+0x563/0x610
[  822.972456][T18465]  do_iter_readv_writev+0x65f/0x9e0
[  822.977626][T18465]  vfs_writev+0x35f/0xde0
[  822.981934][T18465]  do_writev+0x28c/0x340
[  822.986152][T18465]  do_syscall_64+0xcd/0x4e0
[  822.990632][T18465] 
[  822.992928][T18465] Memory state around the buggy address:
[  822.998527][T18465]  ffff8880281b0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  823.006562][T18465]  ffff8880281b0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  823.014598][T18465] >ffff8880281b0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  823.022631][T18465]                                            ^
[  823.028758][T18465]  ffff8880281b0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  823.036802][T18465]  ffff8880281b0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  823.044859][T18465] ==================================================================
[  823.053003][    C0] vkms_vblank_simulate: vblank timer overrun
[  823.120163][    T9] em28xx 1-1:0.132: Closing input extension
[  823.195930][T18465] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  823.203132][T18465] CPU: 0 UID: 0 PID: 18465 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  823.212128][T18465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  823.222165][T18465] Call Trace:
[  823.225423][T18465]  <TASK>
[  823.228332][T18465]  dump_stack_lvl+0x3d/0x1f0
[  823.232898][T18465]  vpanic+0x640/0x6f0
[  823.236864][T18465]  panic+0xca/0xd0
[  823.240554][T18465]  ? __pfx_panic+0x10/0x10
[  823.244953][T18465]  ? v4l2_fh_init+0x27d/0x2c0
[  823.249596][T18465]  ? preempt_schedule_common+0x44/0xc0
[  823.255026][T18465]  ? preempt_schedule_thunk+0x16/0x30
[  823.260376][T18465]  ? check_panic_on_warn+0x1f/0xb0
[  823.265457][T18465]  check_panic_on_warn+0xab/0xb0
[  823.270540][T18465]  end_report+0x107/0x170
[  823.274841][T18465]  kasan_report+0xee/0x110
[  823.279238][T18465]  ? v4l2_fh_init+0x27d/0x2c0
[  823.283884][T18465]  v4l2_fh_init+0x27d/0x2c0
[  823.288364][T18465]  v4l2_fh_open+0x64/0xa0
[  823.292678][T18465]  em28xx_v4l2_open+0x24e/0x7e0
[  823.297522][T18465]  v4l2_open+0x1cf/0x5e0
[  823.301748][T18465]  ? __pfx_v4l2_open+0x10/0x10
[  823.306490][T18465]  chrdev_open+0x234/0x6a0
[  823.310882][T18465]  ? __pfx_chrdev_open+0x10/0x10
[  823.315792][T18465]  ? fsnotify_open_perm_and_set_mode+0x17c/0xa60
[  823.322092][T18465]  do_dentry_open+0x97f/0x1530
[  823.326829][T18465]  ? __pfx_chrdev_open+0x10/0x10
[  823.331740][T18465]  vfs_open+0x82/0x3f0
[  823.335797][T18465]  path_openat+0x1de4/0x2cb0
[  823.340365][T18465]  ? __pfx_path_openat+0x10/0x10
[  823.345462][T18465]  do_filp_open+0x20b/0x470
[  823.349936][T18465]  ? __pfx_do_filp_open+0x10/0x10
[  823.354937][T18465]  ? alloc_fd+0x471/0x7d0
[  823.359256][T18465]  do_sys_openat2+0x11b/0x1d0
[  823.363905][T18465]  ? __pfx_do_sys_openat2+0x10/0x10
[  823.369075][T18465]  ? find_held_lock+0x2b/0x80
[  823.373726][T18465]  ? handle_mm_fault+0x2ab/0xd10
[  823.378639][T18465]  __x64_sys_openat+0x174/0x210
[  823.383462][T18465]  ? __pfx___x64_sys_openat+0x10/0x10
[  823.388806][T18465]  ? do_user_addr_fault+0x843/0x1370
[  823.394064][T18465]  do_syscall_64+0xcd/0x4e0
[  823.398539][T18465]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.404399][T18465] RIP: 0033:0x7f0c4bea7407
[  823.408784][T18465] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  823.428360][T18465] RSP: 002b:00007fff12eb67e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  823.436742][T18465] RAX: ffffffffffffffda RBX: 00007f0c4c622880 RCX: 00007f0c4bea7407
[  823.444683][T18465] RDX: 0000000000000000 RSI: 00007fff12eb6f1b RDI: ffffffffffffff9c
[  823.452624][T18465] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  823.460584][T18465] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  823.468523][T18465] R13: 00007fff12eb6a30 R14: 00007f0c4c789000 R15: 000055c983a7d4d8
[  823.476465][T18465]  </TASK>
[  823.479654][T18465] Kernel Offset: disabled
[  823.483951][T18465] Rebooting in 86400 seconds..