last executing test programs:

26.479441073s ago: executing program 2 (id=37):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e80), r0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000fdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000000000002000000000000000025bd7000000000000a0000010000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000d00fc010000000000000000000000000001"], 0x14c}, 0x1, 0x0, 0x0, 0x44}, 0x4810) (async)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c010000100001000000000000000000fe8000000000000000000000080000bbac1414bb0000000000000000000000000000fff920000002000000003b000000a474829032f65e637b3592f15646293f0f09d2aaddac3b93f7a9ca4fa5f0c09b0fe140e162fe0587389531513d26b684b2919329d2b0f904597f333643de25d7a9866dd19dfd7ef21d5042fd519277a8827550f99ac5860c9ff7acc060f6080e4f65480decc75f6fa582218283c6e5411a5d307af16932a4ff5912e87b7432c7605cc98d4161e630dce60737c4386124d079416e35bc801f453a039f895397655dc5fa3ea373bfb25f974aa65853664222257f765c78e81718540d5ad6881adb0b996fa85446f4af518d641154c08dc1707b3c809b9b9409b5aaf7245f67af87d90b17ff9eaf553e41c488b3c091413a9f69540afd8c5118a7a47afd07289ec93a75bc665a22e9f35483412d7ba8f92abc3e9ade1ed8209af8dacc6b1b41adb5d7f1118199180a15d596531f72be3d291fb53d8c1c2d2e9d593f0309742b97be928760ff440fbdd86a994bfd3f36db1829a713fc53157b143fe6f5398953bb7175954c00a5cd981c3a4967ddf8055c81cede9bdd2a3d0b969d62", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000fdffffffffffffff04000000000000000000000000000000020000000000000004000000000000000000004000000000000000000000000000000002000000000000000025bd7000000000000a0000010000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000d00fc010000000000000000000000000001"], 0x14c}, 0x1, 0x0, 0x0, 0x44}, 0x4810)

26.224672089s ago: executing program 2 (id=40):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x600600, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

26.112431994s ago: executing program 2 (id=43):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000040)={0x80, 0x0, 0xdd14})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0xfffffffc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r4)
sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r5, 0xf03, 0x0, 0x9000000, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00\x00\x00\t\x00\x00\x00\xc1\x04\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x2c}}, 0x0) (async)
sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r5, 0xf03, 0x0, 0x9000000, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00\x00\x00\t\x00\x00\x00\xc1\x04\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x2c}}, 0x0)
getsockopt$sock_int(r3, 0x1, 0x1e, 0x0, &(0x7f0000000200)) (async)
getsockopt$sock_int(r3, 0x1, 0x1e, 0x0, &(0x7f0000000200))
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
setuid(0xee01)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r7, r6, 0x0) (async)
r8 = dup3(r7, r6, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
inotify_add_watch(r8, &(0x7f00000001c0)='./file0\x00', 0xdc2)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) (async)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1002080, 0x0)

25.177033615s ago: executing program 2 (id=47):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x85}], 0x1c)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0xd, 0x1, 0x1, 0x3, 0xe, 0x1, 0x6d, 0xf2, 0x8, 0x7, 0x6d, 0xfe, 0x0, 0x6, 0x1, 0x9}})
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="400c15"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="40144300000001"], 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="20223900000039103c9eb2f42c79af4d30c1befe640083052fc7365e2deffe9ae31003bbb85628d794b6e4c5044f8f9cd97774f09a8831944562db25fec717"], &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x60, 0x1, 0xd5, "57722db33a9c75a24c64209783721504966870dd3538b99b5aaab60489840075eca40776374368c883e18c031778ad77365a5a2d7ccaf98bd5aa97773c14c98311f596fae1ea761bc84f66c95812387b0440dee73316a3f9aadfb8c0bf5c379d6bb278c85d7be4dd835f52a88b0d0e9e8bc8081cbebb69b9d3948a3bc74f56cf893c7da41223d15c17655ef00d8047815c9a01f6c73ba73b138a5ee4fb201172ad4de2ab989d50ce6a44ba59b1f8722cf657d61a36c9066b9ad2d19819a91fdd166f5e40544824ccd823b82b807ac0f6fea54711a5"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1}})

22.707642828s ago: executing program 2 (id=58):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec000000210001000000000004000000ff010000000041450000000000006a551c02000000000000000000000000001000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000020000bbac1e000100000000000000000000000020010000000000000000000000000000fe8800000000000000000000000001016c01000004350000020002002001000000000000000000000000000200000000000000000000ffffac1e0101ff020000000000000000000000000001fc0200000000000000000000000000013c000000000000000a"], 0xec}}, 0x40040f0)

20.249504705s ago: executing program 2 (id=62):
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000480)={&(0x7f0000000880)={{@my=0x0, 0x6}, {@local, 0x2936}, 0x400, "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"}, 0x418, 0x8})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000d00)={0x0, 0xa, 0x5, "8613f44684"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

20.009418708s ago: executing program 32 (id=62):
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000480)={&(0x7f0000000880)={{@my=0x0, 0x6}, {@local, 0x2936}, 0x400, "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"}, 0x418, 0x8})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001180)={0x84, &(0x7f0000000d00)={0x0, 0xa, 0x5, "8613f44684"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.421202421s ago: executing program 3 (id=88):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={<r1=>0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setgroups(0x0, 0x0)
setregid(0x0, r2)
r3 = socket$inet6(0xa, 0x2, 0x3a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000700)={@rand_addr=0x64010101, @multicast1, 0x1, "f6ca08c443b328cd29ff360f989debaba701c239ac74a7767344f8d7a074101e", 0x8, 0xfffd, 0xf, 0x53}, 0x3c)
setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000040)={@rand_addr=0x64010101, @multicast1, 0xffffffffffffffff, "c838db03c680f5a11d24ac5ad3ea432c0347b3cebb9360c9635f569f2e1ee8ac", 0x0, 0x304a, 0x495f, 0x1f5e}, 0x3c)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
syz_pidfd_open(r1, 0x0)
preadv(r3, &(0x7f0000001640)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/187, 0xbb}, {&(0x7f0000000100)=""/202, 0xca}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000280)=""/187, 0xbb}, {&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000000480)=""/32, 0x20}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/16, 0x10}], 0xc, 0x105, 0xd8f)

9.985640494s ago: executing program 3 (id=89):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000680)={0x20, 0x7, 0x4, "af97e17a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000380)={0x14, &(0x7f00000002c0)={0x20, 0x7, 0x3e, {0x3e, 0x11, "b727b98f0dd73b78a96696b958392b3279eedd44591657e197e8c89411cc4411caca055a7b05877b9336409664dd59603e6cef332440dfce1fc138e7"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f00000003c0)={0x40, 0x1, 0x97, "89d4d764e0dc275841a366689e92b7cf851937720a99f6a1ff724b3c47fdf5484e47dfbeece9e3a09acda71843fb053e15287746f970911610ecf857b0b59e06e242b4f5bb0b74232a13b1bbc84ef7beec190104b08db2d988c7de74548c025b1dcaeca7a7152b89d25eb7dd408d11b964d920888f40ea2aaea0c34fa88550dffc48d88137c1b70e1fa7f5e9834d7eac90d47647236837"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x1, 0xe00, 0x4, 0x2c0, 0x3, 0xfff8, 0xc, 0x90, 0x7, 0x8, 0x7ff, 0x7}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xffffffd6}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001500)={0x34, &(0x7f00000012c0)={0x20, 0x14, 0x4, "833aa34a"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="00000600000082b1b3ec8ac1b2a9268bfa9ecd82456350b3e96acd9e0e0c9d18baa38b0dceee93a758da12c3be22b5b2439a9807161ed9ddb5e5bcee968a662909a7c714e40434a25e4ad530b03fce9bcd5533a581c77bd0513db1dadc1714be3ba3fe2a73e6828956d41f1e6ca2004791704421a71f1b18420b0da70f50127d0394b93ca567cebfb6b8621c1d6d80b02defdf2d827364a20b03d504140ecaa3c3da1aa9b7168dee5fa7db92a2bcf6f4713cac73c2c2f3a2d11176314dd72e4e3afd72786e176e179f8ba42c88ac7ffd9f92692cbb21acb8b9362f83dac716cbc4453ad67465378166466e0900000000000000c0"], 0x0, 0x0})
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)=0x1)
syz_usb_connect(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202", @ANYRES8], 0x0)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080))
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)

9.153580627s ago: executing program 0 (id=92):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000100)={0x2, 0x3})
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e24, 0xff, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x5e}, {0xc, 0x480000000000000, 0x8000000000000000, 0x3, 0x3, 0x8, 0x6, 0xffffffffffffff1e}, {0xffffffff8974b177, 0x21a2, 0x9, 0x6}, 0x0, 0x0, 0x3, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x0, 0xa, 0xfffffff8, 0x254e, 0x10}}, 0xe8)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7008000000000000000008000100fae6c03c0f840ecf0600000000000000e9b5b16a864f0c5bb8c6ac237b8730c30b07868e96c27f123b32c4fec4820699f7f02cc30efb03ef71128c3a201f8e78f4b79e68a22d43448db2d46b583de85e25b10f4fffe317e59cb7dbb7be77131b821e244e74067b40a123f211e2c9fd7f1bdce8d4a3f9", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
statx(r7, &(0x7f0000000100)='./bus\x00', 0x4000, 0x10, &(0x7f0000000300))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000380)=""/135)
connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, r4, 0xffffffffffffffff, 0x3}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8)
sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0xe14393ba65cdfb2b, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000240)={0x3, {"77962180ed0f82f430f249d94534208f", "45d5c22cb6cd9d0fa5975dbf5f9e3413", "a9f300000000f274e8a44cd492a341be"}, 0x0, 0x4})
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000100)={0x2, 0x3}) (async)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e24, 0xff, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x5e}, {0xc, 0x480000000000000, 0x8000000000000000, 0x3, 0x3, 0x8, 0x6, 0xffffffffffffff1e}, {0xffffffff8974b177, 0x21a2, 0x9, 0x6}, 0x0, 0x0, 0x3, 0x1, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d2, 0x2b}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x0, 0xa, 0xfffffff8, 0x254e, 0x10}}, 0xe8) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7008000000000000000008000100fae6c03c0f840ecf0600000000000000e9b5b16a864f0c5bb8c6ac237b8730c30b07868e96c27f123b32c4fec4820699f7f02cc30efb03ef71128c3a201f8e78f4b79e68a22d43448db2d46b583de85e25b10f4fffe317e59cb7dbb7be77131b821e244e74067b40a123f211e2c9fd7f1bdce8d4a3f9", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) (async)
statx(r7, &(0x7f0000000100)='./bus\x00', 0x4000, 0x10, &(0x7f0000000300)) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x80045530, &(0x7f0000000380)=""/135) (async)
connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, r4, 0xffffffffffffffff, 0x3}, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) (async)
sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r9, 0xe14393ba65cdfb2b, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x0) (async)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000240)={0x3, {"77962180ed0f82f430f249d94534208f", "45d5c22cb6cd9d0fa5975dbf5f9e3413", "a9f300000000f274e8a44cd492a341be"}, 0x0, 0x4}) (async)

8.607226662s ago: executing program 0 (id=93):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r2, 0x103, 0x70bd25, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84880}, 0x4000024)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x19)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000080))

8.400852011s ago: executing program 0 (id=94):
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100002c27b740c71b4010b1b501020301090224000100000000090400000212c71c000905a42e7fbb00100009058202906cc0617dd6991dc373e56724986b0bcef7811ef2b28c96e81895fd7ddd7978695ef9f550328e794d0c6e1b1cfa17c04a83c280dbb978bd345837173868bc78fb39a1ca90d1d1c6a57db72f526d44ea6bbecd3ec084916165189cb95528ecfa6dce668e718d11", @ANYRESOCT], 0x0)

6.88166328s ago: executing program 0 (id=95):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={<r0=>0xffffffffffffffff, &(0x7f0000000040)='\x00', 0xe04c0, &(0x7f0000000080)={@align=0xff, {0x12, 0x5ff, 0x9, 0x2}}, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0xc82})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2})
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={0x3})
r1 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x9a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\x00D(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\x18s\xf7!~0\xc7y\xe2\xb2VP\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yxm\x96\xbfS\x97\x9c/\x1f5i\xc6\x861\x8a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xac\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
read(r1, &(0x7f0000000480)=""/157, 0x9d)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000100)={0x2040000, 0x600000, 0x8})
syz_usb_connect$midi(0x0, 0x48, &(0x7f0000000440)=ANY=[@ANYBLOB="120150020000001030144b4741000102030109023600010108400009040000020103308109050a0200"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})

6.358903985s ago: executing program 1 (id=96):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e020200114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x80000000})
socket$kcm(0x10, 0x2, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async)
ioctl$TCXONC(r1, 0x540a, 0x0) (async)
ioctl$TCXONC(r1, 0x540a, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040200080211000000040000a118000200e020200114000e1208000f0100810401a80016ea1f000840032e5f54c92011144dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101015ee4bd31445a7ba9599763001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e5e6d98031b68c76f9cefbbcbee5de6ccd40d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x80000000}) (async)

6.323500388s ago: executing program 3 (id=97):
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x2, 0xc0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x21}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x101, 0x2, 0xd7, 0x1, 0x28, 0xfa}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x5, 0x2, [0x3, 0x8], 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x81, 0x9a, 0x2, 0xf, 0x6}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2f, 0x8a, "d5c0123d16da6179"}]}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0xc6, 0x9, 0x6, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x7, 0x2, 0x2e, 0x5}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0xa, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x1, 0xa0}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x10, 0x67, "aeaca52fa0b3"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x3, 0xb, 0x9, "44f92638edbfbd47"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x4, 0x7, {0x7, 0x25, 0x1, 0xc, 0x2, 0x6}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x1, 0x9, 0x0, 0x40, 0x9}, 0x39, &(0x7f0000000300)={0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "611bca01f107ef617ef26a489c37dff5"}, @ssp_cap={0x20, 0x10, 0xa, 0xf2, 0x5, 0x1, 0xf, 0x58aa, [0xc00f, 0xc0c0, 0x0, 0xc011, 0x3f00]}]}, 0x3, [{0x96, &(0x7f0000000400)=@string={0x96, 0x3, "0a6c1d8f1fdaf2ac10101931399121e81b54600ca909ab6c2db2be9f545f8f63c17bfe590a48d8a0a7cdd6252a797fbfb4f374a9388744e41f3787356f8b2025eea0f88db6a0e5c77ac6e7be7a66b5384179ae0bc053d9c720ae9a2c5dfc43c84f061f5cd078a37c0b2174f956ab10fcf10d0c7fb204186934e0ef525b47cd83566eef9c3baee84ce64c05eba2a9f887dff1d73d"}}, {0xa6, &(0x7f00000004c0)=@string={0xa6, 0x3, "f526723aec5949080d6ceaf4c5b010e0230ed6840afe1b683536f85821589b80e5cd9482d7c87573460b85d9e64a4ffcda5b3a57b00f99e4a1852b7021ca54221b43415deafc759b156857593919512ddf14f4e525599e466c7915176b0d9699827fc5b86f8d36a2b5f9ce3fbea5ab4d8b9527d772f726771d0e0ecc36a82459e5d1477d67ada86887846f1a2bf481eb9fda4e912436ae1e14b885473765c56222275077"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41e}}]})
syz_usb_disconnect(r1)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000700)=ANY=[], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)={0x54, r3, 0x1, 0x21, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x20019}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2a, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @supported_rates={0x1, 0x5, [{0x4, 0x1}, {0x60}, {0x1}, {0x12, 0x1}, {0x36}]}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x2, 0x0, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x9}}]}]}, 0x54}}, 0x4014080)
ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.798252711s ago: executing program 1 (id=98):
r0 = syz_io_uring_complete(0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x8000)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x8, 0x1, 0xfffffffffffffff1, 0x1})
linkat(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
r3 = accept4$inet(r0, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10, 0x80800)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, 0xfffffffffffffffd, 0x4000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000040)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x50, r0, 0xfbc63000)
linkat(r0, &(0x7f0000000480)='./file0\x00', r0, &(0x7f00000004c0)='./file0/file0\x00', 0x1c00)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x4004)
renameat2(r0, &(0x7f0000000600)='.\x00', r0, &(0x7f0000000640)='./file1\x00', 0x6)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000680)={0x2, 0x6})
sync_file_range(r0, 0xffffffffffffc96f, 0x3, 0x3)
renameat2(r0, &(0x7f00000006c0)='./file0\x00', r0, &(0x7f0000000700)='./file0/file0\x00', 0x0)
renameat2(r0, &(0x7f0000000740)='./file0\x00', r0, &(0x7f0000000780)='./file0/file0\x00', 0x6)
mknodat$loop(r0, &(0x7f00000007c0)='./file0\x00', 0xc008, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, &(0x7f00000008c0)={&(0x7f0000000800)=""/142, 0x8e})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl0\x00', <r6=>0x0, 0x29, 0x6, 0x5, 0x4, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x0, 0x3, 0xffff0000}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000ac0)=<r8=>0x0, &(0x7f0000000b00)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000b40)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001000)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x40c, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '()\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '&[])X\f}--@\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1163c00}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '\'*.,!//.@-&\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+/*\x12/\xc3/)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x220, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{*--\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.\\+\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')\'*$\xdb\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#-#-\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']}^!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{\xcf$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb2}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':,*\x0e&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x2008c000}, 0x40040010)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000001040), &(0x7f0000001080)=0x4)
renameat2(r0, &(0x7f00000010c0)='./file0\x00', r0, &(0x7f0000001100)='./file0\x00', 0x1)
recvmsg$inet_nvme(r0, &(0x7f0000002600)={&(0x7f0000001140)=@can, 0x80, &(0x7f0000002540)=[{&(0x7f00000011c0)=""/201, 0xc9}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/229, 0xe5}, {&(0x7f00000023c0)=""/96, 0x60}, {&(0x7f0000002440)=""/235, 0xeb}], 0x5, &(0x7f00000025c0)=""/28, 0x1c}, 0x100)

5.70454186s ago: executing program 1 (id=99):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec000000210001000000000004000000ff010000000041450000000000006a551c02000000000000000000000000001000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000060000bbac1e000100000000000000000000000020010000000000000000000000000000fe8800000000000000000000000001016c01000004350000020002002001000000000000000000000000000200000000000000000000ffffac1e0101ff020000000000000000000000000001fc0200000000000000000000000000013c000000000000000a"], 0xec}}, 0x40040f0)

5.533364713s ago: executing program 1 (id=100):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3"], 0x0)

4.052590538s ago: executing program 1 (id=101):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x80000000) (async)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x80000000)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8)
ioctl$TCXONC(r0, 0x4b45, 0x3) (async)
ioctl$TCXONC(r0, 0x4b45, 0x3)
r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x123002, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x8)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))

3.996156064s ago: executing program 3 (id=102):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xbc53a65107f9f595}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x8c, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:smartcard_device_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000087}, 0x4c805)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="7f4126bd7000fedadf250100000006000a000300000006000800a1aa0000060008000000000005001d000600000005001d000300000005001100d300000005001100060000000c0009000201aaaaaaaaaaaa05000700"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

3.828820262s ago: executing program 3 (id=103):
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
syz_usb_connect(0x2, 0xb77, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x9f, 0xba, 0x8e, 0x8, 0x2040, 0xb120, 0xc742, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb65, 0x3, 0x81, 0x8, 0x70, 0x40, "", [{{0x9, 0x4, 0x18, 0x7, 0x6, 0x71, 0xc7, 0x8, 0xb8, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "6b82a698"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x9, 0x8}, {0x6, 0x24, 0x1a, 0x7, 0x4}, [@country_functional={0x8, 0x24, 0x7, 0x9, 0x2, [0x5]}, @obex={0x5, 0x24, 0x15, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x7, 0x6, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x81}, @acm={0x4, 0x24, 0x2, 0x8}, @obex={0x5}]}], [{{0x9, 0x5, 0x4, 0x1b, 0x408, 0x3, 0x9, 0x10}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x0, 0xa, 0x2}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x55, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd8, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0xf2, 0x71, 0xe7}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xbf, 0x9, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6f, 0xfff9}]}}, {{0x9, 0x5, 0x0, 0xc, 0x3ff, 0x2c, 0xf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0xad, 0x1, 0xa, 0x59, 0xab, 0xa2, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0x41}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x402, 0x2, 0xb2, 0x1, 0x3, 0xd}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x5, "8e"}, @selector_unit={0xa, 0x24, 0x5, 0xfa, 0xfa, "0b5317ce53"}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x6, 0x2, [0x7, 0xa], 0x1}, @selector_unit={0x5, 0x24, 0x5, 0x6}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0xb8e, 0x4a, "2b49cb89"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x6, 0x3, 0x4, [@generic={0x39, 0x2, "3a7a3d5ceceb5f29dc3c4b71f2e27e4507063848cd1b5307dc56951582998cb2c75b5151f1d44a40d2ab61b093b5a7c5100a9d881fde04"}, @generic={0x81, 0xd, "d6fe658dd3dda7be419e514123a82ddac907a68110a51fb1873973b0cc23b09bba2db8087f8686c00f756569b37710b5cb2095fd776b7ee30704ab648992f76e7ab47d5acd6d5b8fa365319a00e3ce7f7d047531f5e11ec7fa402ebbd4464254114d25a571497522b7018f836f93fdee5cfa79194123ae789286601064e6bb"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x1, 0x3, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x0, 0x3, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x80}]}}, {{0x9, 0x5, 0xa, 0x1d, 0x40, 0x6, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2f}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x3, 0xa, 0x2, [@generic={0xfe, 0x21, "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"}, @generic={0xdc, 0x31, "94f863b5c60adcc8b11ca4a017c6c7aa98a4ddb5730087bff58c5be0890e63f32ada66c8f866bac2618ed0479b01f52438cd1b6ac67ba79e793e279f49a839eb42f72aff30f341528d1766abf4a75c7cddcb4c91c6b4b863dfcc413320ef27f0370c3a3068fd58193882518ccad261ceaf3a01e25f4d293b434cd6b49937baddf73ca61aa05a90183b5239a722bfd9948df88cdbf654f467f8e93d1bf1b1253ebdc90c1334b79c1ad05a3836be594a4ca3c64639e2cc8feb0e8b842fb267463d7256574c3ff644b2bd1c6dc610a32951e1f5cf87ae090222a096"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x3, 0x8, 0x53}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xd6, 0x8, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xacf5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x5, 0x70, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x47, 0x8, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x4}, @generic={0x7b, 0xd, "0fbedd0f1448557e5ce390d252aa077cc8fdfb9af140588dc8d319a4b567dbbdae9e9f7cb797790a638aef4a7aed767b06429e4cdac97a3fe33f50d1ea364f79af98338ecfff73f9f9c2805db87daa4191b40d1ed11179d630177bdbf19e8e8e1283ac0a1d2c22f8ef5bce65b25ad5ee09884de397ee22daa4"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xef, 0xc, 0xd, [@generic={0xa6, 0x31, "65266da0cb5cd16b737f1f90225d3a8e0d098a31c14eca77a46c199c03b089c85c01e7d6df5ecb84a4a848f4f200256326c80019ce97f1b14ddd13ae68f078fa3f33ea80559bca473b4347c3399fb768f29b9a1fce2cdce619f4aa229aa3f0dacf4b3962175e766f879d0cfb586617fb563f7f7e8dd7d125e0c26e27bda55716cf0ca51f8f87d20895331cf0ce8ec66cefa3b43acc884864b26fc708d014001b8a037c22"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x8000}]}}]}}, {{0x9, 0x4, 0x11, 0x2, 0x10, 0x89, 0x54, 0x3e, 0x38, [@generic={0xb4, 0x31, "0335d249dbf62f0c24126b7f83b50d25c7e298303bb5691387d4004127026c4f8d61f3a9e1f1890e4c86d24ed84f222e1c5ab16c0e44302e4945268af60adadaef1bddddaa79ec790c3f9dc80f6cb5444a8b6b8766379a08ae1e8fef45ef525be2d9195e46a9ad7d4696d347e5d2ba530fdcbf373e523d27078fc05f560f296d8067ad0187e17dd866a798ae0888a5743cd70e476ea7f73546022e543032b0c107dda7a1d59554b024594075bac54b7a3dc5"}, @generic={0x4, 0x9, "7292"}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0xff, 0x7, 0x2}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x1, 0x2, 0x8}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0xf, 0x0, 0x3f}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x4, 0x8a, 0xef, [@generic={0xdc, 0xe, "8faa3e4ff81ae1d63b3a2cc2e6e47448aa2537c518841c5e86fa390affa369474872f2f79efe753d922e235aaa40dca27a043706d765ca4c074e49b49009b53c0ae3b106fc4ede71db2a090e98e6ee7a4b70e534f8e1868fee0fee1327f482493437120c2e2719c7d277661b50f8d8b8841179d3c14aceb37291a604a2bc6c340fefdde51d02ba3d7b62281faf9ad417a58526bf70a79d7b8850088c190f1a42da2c5e09cc3c3b1c4cfcac49223a6749a638d65aa2e8af080df4607ac972e46cbd67832375fd86ea4c22533b7641c325d576924f7dec9856873c"}, @generic={0x34, 0x3, "d3b60b3a9804f80fecdc0d761f264244d33fc8be078c64c32f4766279ddc35de65edb9b8cefbd57088f72e37ef85689f2033"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xff, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xff00}, @generic={0x16, 0x4, "faf82ba51a1802c2dc328a561f7cfacc8c971752"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x10, 0x81, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x9, 0x0, 0x8}}, {{0x9, 0x5, 0xf, 0x1, 0x3d7, 0xd7, 0x3, 0x1b, [@generic={0x63, 0x10, "c6fedc3de9c177c3af4509edf6be4f579b4809263d90847164d3238ace21f06f792e26c82eeee7dc484f968c2488f07b1683f211cb37280b12104268c9bb868ef0d0b756784b9dd954b9a64a3cc63494f2d85a9ea4b8bee7e5af49f9789fc56066"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0xa5, 0x2, 0xa, [@generic={0xed, 0xc, "dfed15069066a7ac012c2aa437f5b835f84f7dfbc712bf5df73713605c304270e4d5eb3df55cb6027bca9f20ed20fd917699a80d308d7b8b0e1ad8248d5fadffd64080f6638c44967cea3412974932f42248334c60670c4c8c9bdd5e5529022cd1497984f0e11cb7fc7f098daa3983ee59769413cad3f4bfc5a84d515b061c478cb938f17c5232f8a4e3fa40a3fef226d764b887cad5f4dcc20879ceda0b0cc26c603c9ae864cb9bd737f204690a33d9f599b9c68bd197b4ecde95fa7a3f35ff738a0bdaae2743f673f32c53fe36e9fba8f41c8c00eb0a0a8427d78b3d0f45234ce47da9850126fd3a8cfd"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x363}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0xb, 0xd5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x8}]}}, {{0x9, 0x5, 0x0, 0x1, 0xc8ba32f02f9cd27d, 0xe8, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x8}, @generic={0xc0, 0x11, "277f4767dab01acbd4ce186bd58ef2806aefb81ef7edf80e8cc2ed26c97f1451aa08c1846b61f70c93a8377967872a2f1d152f679cd2976c182dc03ed7a548a67c5ac13fd713e3f8ef4214fcced482694e3e773dc964b5e1fd8e1d0f8bd337391c6c41f46ae7a43126ea95a89a2afdb6ee41d2b1dcedcbc2e62e0495ebdadb57865214ab65670fae731946d7b29f9af47b542402bbeba83dd0981d1881596d9496afe2e2f30ccf880871ede8eeafb70675c14f779bb72da70cd74c4713e1"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xf8, 0x3, 0x6d}}, {{0x9, 0x5, 0xb6d6bf9f34ab3c6a, 0xc, 0x200, 0x5, 0x1, 0x42}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x82, 0x81, 0x77, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x2}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x3, 0xc, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc0, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x4, 0x0, 0x9, [@generic={0xc8, 0x2, "7983719b036590528c160724f6dc16c632d6df0d2a0449838d77dd6e4c05887bfbf9c39dd7fbfce9b57bca9aed16a2b4cc69d413cd8b968cce78f717140ab3ffd3a2c682be54f00329ca0d428f908ca9a231370ab2308951c64c85e3d6a8d6fc42aa2c27d669b3725f12393b9882b657c4b059ff8ccffcde869afa53458922ea922b71c8c4d5fabb373b5356b3a4f9f0b07b1f954ea11277d731a283104f1f8fd70453968e1285af2747b582dfcf4c036ace527d3163908ea140b708c53289eb7510f0ecd033"}, @generic={0xc2, 0x18, "1d733e208ed96ab56ec48329fcbd7dce3137a65234ba6680f03dd28168b12d0c55c4469a45dffac19f89ec04eba9fc6b62665c2c2af58832a05c38625e86dc4758f30452a30890567bbc06f36a33d5bdaa164747718a77f85f819f73f01d239623c153c53dcf9b9169965cd345a74ab743b06b54ddaa3733df06c58823fad68641607739a91406e4b6b67f6029a9c2248aa59f49df6b33b959546cde19c3e43159e42d4c2b02e9fbca66e2a459029fd892da8a94769d4a609fc0e2f97947078f"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x110, 0x4, 0x5, 0x80, 0x8, 0xb}, 0x39, &(0x7f0000001140)={0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x9, 0x2f, 0xa0, 0x80}, @ssp_cap={0x18, 0x10, 0xa, 0x4b, 0x3, 0x5, 0x0, 0x10, [0x3f3f, 0xc000, 0xff3fc0]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x6, 0x9, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x3, 0xfff}]}, 0x3, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x480a}}, {0xce, &(0x7f00000011c0)=ANY=[@ANYBLOB="ce03a559f45a15bda8ce30df2a35e07eb495b87d8558255074ec5f65202144154177b4ca96f84de9cd12a6f4aa919a91165ad22de87a8c8ae2ad5f54b72007d6da22e8928588af7fb6ad2c356550ad3f92d0bf9b489182926972d0222f223b787ca0fe8a7277d4c4657337d4078289c6e98fbad40f2579d4616a7ba92f38de79d32dabccdab2025ca74856524c33329e099258812de2551fbb1a09cdc49ad685fb7dbaeedd39b5708e7373a39089a6f0e4df56edf79b4f4b32d1452e20fe0817f9204e41f294c83c1730b9a476fb"]}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x449}}]})
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
read(r0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x9, 0x0, 0x1, 'queue1\x00', 0xf})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x402c5342, &(0x7f00000000c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0x3)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x8)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
read(r1, &(0x7f0000001340)=""/189, 0xbd)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x18}}}}}, 0x36)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010078f029b152fb75bd0000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800044000000002080006400000000108000340000000040500020000000000080007400000000508000514000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="0c080408c8000797621a753803405b8063e98c645fc9dc69409ddd367fa462eca99edf6538d721f4ed05e0d6aa8d523f185aceceaf3dfe624e655dcf30f5cbfc10713764a5b9e27eb4faa2fdd129763c877fc0828a4a34de57c70f13721e3309cc1060fac7f5baba54524f20792c910000"], 0x7)

3.560089081s ago: executing program 1 (id=104):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x1)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8, 0x4})
r1 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x19f, 0x3, 0x2c, 0x8}, {0x9, 0x5, 0xc, 0x2, 0x200, 0x3, 0x2, 0x5}, {0x9, 0x5, 0x1, 0x3, 0x400, 0xa, 0x9, 0x9}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x40, 0x22, 0x5c, {0x5c, 0x9, "930fd9220895da34790ed2ae28c39ef917e6cbcdd93d90ab6b296badf143a17d7e2caa383773e6e99f512fef4b9b6eaedb69515d97c85d9985842b8462ffe7b51d9728ec6fd210ffac9d12dce56c59e480c8475e7ba94e44bbfc"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000200)={0x20, 0xf, 0xda, "04699df76dd46fe54633789565bcb5bed379b3fe287e207008c2c3f6fc8223f0c241f554dade42c331cb2168a542365791bf212ff767f3e2a00325514d1f3930b8436724378bcd92d5b7d60b74b161f46a20ce194e0cca9f75e8eb8effd192091951620c053ac85ce8ae4f51997b84f4a398a03f8ca9aacedf1bdc0141ef97d6f279813ef26ad3227b017d52ff5a18930b25afbf788b67862762dd60f61ae830732ba9c8e36b9952da7e4525d628f7cfbf4d0bd35afc0534efd4e895d2b80e77ffa82f65e67ad80c148fc50806393bf184f62cd17e68e25eae34"}, &(0x7f0000000300)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000740)={0x21, 0x0, 0x2, "2ac9"}})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x80, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000800)={0xf3ec, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0x8, "4a873ad30df628"})
ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001800)={{r3, 0x840, 0x440000000000, 0x8, 0x0, 0x4, 0x7, 0x9, 0x9, 0x8, 0x10, 0x1, 0x6, 0xfffffffffffffffc}})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000002800)=<r4=>0xffffffffffffffff)
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000002840)={0x52, 0x3, 0x4, 0x1, 0xfffffff8, {0x77359400}, {0x5, 0x8, 0x4, 0x0, 0x4, 0xd, "c8c3ce66"}, 0x0, 0x4, {}, 0x3ff, 0x0, r4})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000028c0)='./file0\x00', 0x40, 0x20)
r6 = openat$incfs(r5, &(0x7f0000002900)='.pending_reads\x00', 0x800, 0x100)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002980), r6)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x1480020}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x68, r7, 0x602, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x20000000)
sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x80)
r8 = syz_usb_connect$cdc_ncm(0x4, 0x95, &(0x7f0000002bc0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x7, 0x0, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x80000, 0x9000, 0x1ff, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x35}, [@obex={0x5, 0x24, 0x15, 0xfff3}, @dmm={0x7, 0x24, 0x14, 0x3, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x3c4b, 0x4, 0xf}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x9, 0x3, 0x7}, @dmm={0x7, 0x24, 0x14, 0x0, 0x51}, @obex={0x5, 0x24, 0x15, 0x535}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0xff, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x7, 0x5}}}}}}}]}}, &(0x7f00000030c0)={0xa, &(0x7f0000002c80)={0xa, 0x6, 0x110, 0x6, 0x8, 0x5, 0x10, 0x2}, 0x83, &(0x7f0000002cc0)={0x5, 0xf, 0x83, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "3c37cf8a14f819df5fb0f4caab4e2abb"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xc7, 0x8, 0xb52, 0x7}, @generic={0x4a, 0x10, 0x4, "b98e36d602adb65c1e1c598b5eac2e7e4b9304764c2b19d1f1a645f5379f4369e2d24354c200c0b0c50940717c801fbc0b0297de50eab3f374ff63f61d431582b9d9ce4095cb85"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb, 0x84, 0x80, 0x3b4, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x8, 0x1}]}, 0x8, [{0x51, &(0x7f0000002d80)=@string={0x51, 0x3, "86cf03344bb144a3a308e598e73e4e7719c8325cfc728855f0dc9dbb37445c9c8c762b44342f14bdfafbeb2b7fcbd01e3250a6ee36627b933deb85349afc3349506f13216e3025de2d7859bc8b14df"}}, {0x4, &(0x7f0000002e00)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000002e40)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000002e80)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x580c}}, {0x87, &(0x7f0000002f00)=@string={0x87, 0x3, "c484c456a9c712490b811fe1d98d485fa9dcc600b57da2b032d906cda35deff9d2163241b31395c443a6633caf8e01d6ecbe0384badfec57abb7fc2f9084b13134ef75f8422b98a6ccc04d9ec42cc70621039bce8c592be0c98b13d10d36259f86a623c0fc91ae0b1b6736d9bb977aad6b8870b3a53f6560ddb9426f0e9269cc32443d6d35"}}, {0x4, &(0x7f0000002fc0)=@lang_id={0x4, 0x3, 0x1809}}, {0xa8, &(0x7f0000003000)=@string={0xa8, 0x3, "1441e6ae5d3179792be4b68755da789a1b5cd38ba199781d1283c1216b74f03a13b93a2b24d66499d7676871781ab1e5b489d51169202d18156d7f25fe9ffd850f3164bffe90eb739aed06c25fd5782919d557b92912aff3d69eae0b60261021e6d4c9344a1bdbd275093e134c4a86b1a79fc7aa3ed0bf633b3ec9468fc18f52ab020fb9326f46bbcaa424b84b13f44f215bff97a603388408b6a84bb8667d98289b48fdd1d3"}}]})
syz_usb_control_io$cdc_ncm(r8, &(0x7f00000031c0)={0x14, &(0x7f0000003140)={0x20, 0x4, 0x16, {0x16, 0x24, "0bc0f0398704bde87afa59a6d45bb91c557b0aab"}}, &(0x7f0000003180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003480)={0x44, &(0x7f0000003200)={0x20, 0xe9b4e9b0fcf89628, 0xae, "846b2838414f58ca2915d2d13d91ed38f40053067a429e69be012e8830646a48a6d15939612c199500ab832ef060aa44c9f331e131c6b0d6e2827b7ae21008ea2d1b94fb902afc83b51e261e42cdf7a642cd3ce97c07843a1c4a0f66353dc918ce0064c0927f2d226469796de2ae4e49769fc60ba2f7679583df3d4dd04b2384748471b10b5b472d4e2009feccb5b7d96f85ec59d83fd85342d13cbca00bb76f3040836fe9d7fddcebd3f7befbca"}, &(0x7f00000032c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003300)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000003340)={0x20, 0x80, 0x1c, {0x8, 0x8, 0x741, 0x4, 0xffff, 0x0, 0x8, 0xe, 0x0, 0xe6, 0x9, 0x3}}, &(0x7f0000003380)={0x20, 0x85, 0x4, 0x5}, &(0x7f00000033c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003400)={0x20, 0x87, 0x2}, &(0x7f0000003440)={0x20, 0x89, 0x2}})
ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000003500)={0x6, {0x5, 0x4, 0x99, 0x200}})
ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000003540)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2})
r9 = syz_genetlink_get_family_id$fou(&(0x7f00000035c0), r6)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000003680)={'syztnl2\x00', &(0x7f0000003600)={'syztnl0\x00', <r10=>0x0, 0x4, 0x99, 0x7f, 0x0, 0x68, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7800, 0x3b04f2d, 0x2}})
sendmsg$FOU_CMD_DEL(r6, &(0x7f0000003740)={&(0x7f0000003580), 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x34, r9, 0x38962dd924acc46d, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40080)
readv(r2, &(0x7f0000004840)=[{&(0x7f0000003780)=""/88, 0x58}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/45, 0x2d}], 0x3)
syz_usb_control_io$sierra_net(r1, &(0x7f00000049c0)={0x14, &(0x7f0000004880)={0x20, 0x4, 0xf9, {0xf9, 0x0, "f76a7626292cc227f703706e900a07d77a6d69ce4d6fdc9ed52b50eb52b11f3c624b1d4ef2f0f02b6a1ec63b5e56c894975e2b7cca87f19aa6084e43bdbda4b872aa52abeccb59c3fac0f8245276d479297b23148b08c536533d274af3650950c38e45968abb1702091ae6cb9fe94247a8f1a835129cf7fa2c763b747aedafab06dca1e487ecf10cb907d60dc99dc4c11e2db892a52a2c9b52c3da5e9de1b3d9d63b2e6cfaaa6393b68751c15866c4a6f3ab29012a9f57c26c43a002f2d271844959c51d007d663542fd40410d591ec8d0ce10f5b32eb9f8efb2d09fba890b66a566879cb6d2bc388771fd7839b1a6cad88c8adf3385db"}}, &(0x7f0000004980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000004ec0)={0x1c, &(0x7f0000004a00)={0x40, 0x12, 0x2c, "5bbab9e75d5335ff31c5c23387040e11d7ed7153b40ced1f81ebfff2149861e1a0f2154839620f3071064747"}, &(0x7f0000004a40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000004e80)={0x21, 0x0, 0x1, "d8"}})
r11 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000004f00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x44, 0x10, 0xfb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf9, 0x6, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x71, 0x4, 0x6}}]}}}]}}]}}, &(0x7f0000005240)={0xa, &(0x7f0000004f40)={0xa, 0x6, 0x250, 0x5, 0x9, 0xd, 0xff, 0x37}, 0xfc, &(0x7f0000004f80)={0x5, 0xf, 0xfc, 0x1, [@generic={0xf7, 0x10, 0x1, "7a77435e5b9d1025837fc58a2f7dd795c548bedea1028486e93e54f443d2686465a8057c0549a9b505b080d92efed7b97e10874d05422f80c645844dc660b07d614d68ca15f2362c60357dba94c27044266c35cf125a1867756da263197a7f71f7c582ef1216923836a528c7109561bee89a51240aed38d0e4f9ac09d07676ebd7276d8d4ea4d81e70a87bdd1a118aebb1d4ad1b10943100dea034924b29cda81fb0478a9de658b2341a7e3d1e5c43f5ad1d5ef078ce22589b930a7a868c3ce248c2b6f2e00443e98099b2dd3290828f3382c03199e516dfab4002bf25093c0e2d17c0c479fda7ce9bac8c936121629a2ff3169a"}]}, 0x3, [{0x2b, &(0x7f0000005080)=@string={0x2b, 0x3, "6e9bbbf82b672758a2862e4d133a7f3381917602b25e5880025d0be60590044d372cc8f2e94aac6b52"}}, {0x59, &(0x7f00000050c0)=@string={0x59, 0x3, "ed3595df0d57a2b8281effaeb880c734f54ab083713651b92b89fdb49c5b5c8c20586d1293ace78aac9e354a960eee23da37df70cd9feaae5700474cc4ae12f89cfddd0b7a86636ad59d659863d2e24760fbf9aa5e960b"}}, {0xe6, &(0x7f0000005140)=@string={0xe6, 0x3, "8cde375de1a80c131bb40cb12f4e44690836e1d1d127c83c078ccd303d422cc4fa01d4aca8ac81f27a73f02b1310631c560834ac0bbecc572ee3ce85a4eb6db6c8202737d0ec522b48dcbc29d1648e51c148d1c26ee27dccd4979262dc8c9fd3464fdc0daba6ba215c700976e4168ce5b86fc13cebe5fd59c52e8d9d49602fe661e832f027748cf0dd936c335be60216283fd0bdee19eb8f0e9d17b9e2964e7c261c54b44b200a8965398c980c17d164ded948cb2676d9a3718cbf55eaae9a7eddef37c2d4605206eb85e06bde670634073bb7b0dfc69f3689a0afce9e68271679a8f2ac"}}]})
syz_usb_control_io$printer(r11, &(0x7f0000005300)={0x14, &(0x7f0000005280)={0x40, 0x10, 0x35, {0x35, 0x5, "853c3100bd59cbce3a456a15681b8bfd66ab79848c95e2163c31c5d9e3798c626e5298687b6c61acb092d2d24cd408fd87fdb9"}}, &(0x7f00000052c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f00000055c0)={0x34, &(0x7f0000005340)={0x20, 0x3, 0xe4, "aa8407289f461a4b3f43f5727ff5f463e762d30707ec2a1470a0d14cd852ad329fbc3cb6be4e96769b8c532647b1b1a4ecc73d7480615f713fac855b56efbc33448c363d2d430da7959e1917d7024ce9e03f0d4c4451610113801020fb5819f8703e2ec5cd1a20d401d79a8441ebd0a83b71c9d13d58b539cb2bcb4b8b255e96d51b45e925a2524672f411862f05ede0b784de8d947838e71c6975c0a1a67e0bd205bfa9ba3688caea5ffa21c700a2622df7e82974858ff73c039696e36eece5676eaf70fa38899d9ecd14644989a27581eacee9feebdc9c11d6adea1db0d546c16c14f0"}, &(0x7f0000005440)={0x0, 0xa, 0x1}, &(0x7f0000005480)={0x0, 0x8, 0x1}, &(0x7f00000054c0)={0x20, 0x0, 0x78, {0x76, "e2fa29e0c06faf3fddf7ca58accfe7a1c8b55ca8dd0ccbc2ed2e681a41f74048eaa08b712862ac3b3ca0d01600512108a060e53e4a0bbd7db3ed00e504dc81e32644eca020689d63c85ab214e2efe6198b3876540e081dc09effce461acf43a7a88c4661f0186661f548fba588f1d44df5d56c6c8931"}}, &(0x7f0000005540)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000005580)={0x20, 0x0, 0x1, 0x3}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000005640)={'vcan0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000005680)={'team0\x00', <r13=>0x0})
sendmsg$TEAM_CMD_NOOP(r6, &(0x7f0000005f40)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005f00)={&(0x7f00000056c0)={0x804, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r10}, {0xd4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff7a0}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe6e}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x154, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9835}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}]}}, {{0x8, 0x1, r10}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x45}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x101, 0x8, 0x7f, 0x37}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x726}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r13}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb5a0}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000006080)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006040)={&(0x7f0000006000)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x40800)

3.559003349s ago: executing program 0 (id=105):
r0 = semget$private(0x0, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x1, 0x7}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, 0x0, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x149001, 0x0)
ioctl$int_out(r5, 0x4, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000140)=0x5)
ioctl$TCSETS(r4, 0x5406, &(0x7f0000000000)={0x7e2, 0x0, 0x0, 0x0, 0x0, "6c5a2c5c704642125215b60ea1a08e98f8221f"})
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x99)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fallocate(r2, 0x4e, 0x100000000, 0x2)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x20000000002, &(0x7f0000000040))
ptrace$cont(0x21, r6, 0x80000001, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="08004d0137"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})
semop(r0, &(0x7f0000000100)=[{0x2, 0x9, 0x3000}, {0x2, 0x9, 0x1000}], 0x2)

2.265196323s ago: executing program 0 (id=106):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, 0x16, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x6, 0x0, 0x1, [@typed={0xd, 0xe4, 0x0, 0x0, @binary="b1fc2d971a289f852a"}]}]}]}, 0x2c}}, 0x40) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0x4b3, 0x3108, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x24, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0xc5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
r4 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_KEY(r4, 0x6a, 0x1, 0x0, 0xc)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xd0, 0xb8, 0xa4, 0x8, 0x77d, 0x627a, 0x10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xe, 0x2, 0x30, 0xa, "", [{{0x9, 0x4, 0x2, 0x4, 0x0, 0x3, 0xc0, 0xc6, 0x2}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) (async)
write$tun(r1, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x30, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da"}}, 0x3e)

0s ago: executing program 3 (id=107):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x400448cb, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e0b1a"], 0xe)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r2, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x69}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4010)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000003c0)="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", 0x12f}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)='|', 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000)
setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)
r8 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0xfffffffffffffff5, 0x28480)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc2604111, &(0x7f0000000a80)={0x1, [[0x9, 0xe69, 0x2, 0xb523, 0x401, 0x8, 0x7, 0x8], [0x2, 0x8000, 0x8, 0x4, 0xfff, 0x4, 0x80000000, 0x3], [0xf1, 0x7fffffff, 0xfffffffb, 0x1, 0x73, 0x0, 0x0, 0xffffff7f]], '\x00', [{0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, {0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xc, 0x21}, {0x81, 0x3, 0x1, 0x1}, {0x1, 0xf, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x19ee, 0x5, 0x1, 0x1, 0x1}, {0xfffffffb, 0x4, 0x1, 0x1, 0x1}, {0x80000000, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x4, 0x0, 0x1, 0x0, 0x1}, {0x10, 0x778f, 0x1}, {0xfffffff5, 0x6, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x1})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts.
[   75.025795][ T5595] cgroup: Unknown subsys name 'net'
[   75.269056][ T5595] cgroup: Unknown subsys name 'cpuset'
[   75.323814][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   77.040889][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.647486][ T4925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.657400][ T4925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.658652][ T4925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.659890][ T4925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.660585][ T4925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.813064][ T4925] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.820973][ T4925] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.867107][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.877293][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.894272][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.899326][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.923077][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.925926][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.926879][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.928875][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.932653][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.937482][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.938491][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.965229][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.026330][ T4925] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.704700][   T61] Bluetooth: hci0: command tx timeout
[   82.706048][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.706903][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.707108][ T5608] bridge_slave_0: entered allmulticast mode
[   82.709232][ T5608] bridge_slave_0: entered promiscuous mode
[   82.748829][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.749099][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.749366][ T5608] bridge_slave_1: entered allmulticast mode
[   82.755537][ T5608] bridge_slave_1: entered promiscuous mode
[   82.908102][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.945174][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.963950][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.964165][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.964323][ T5614] bridge_slave_0: entered allmulticast mode
[   82.966313][ T5614] bridge_slave_0: entered promiscuous mode
[   83.022244][   T61] Bluetooth: hci1: command tx timeout
[   83.022419][   T61] Bluetooth: hci3: command tx timeout
[   83.027810][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.028075][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.028343][ T5614] bridge_slave_1: entered allmulticast mode
[   83.031648][ T5614] bridge_slave_1: entered promiscuous mode
[   83.102273][ T4925] Bluetooth: hci2: command tx timeout
[   83.205373][ T5608] team0: Port device team_slave_0 added
[   83.240575][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.241002][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.241317][ T5616] bridge_slave_0: entered allmulticast mode
[   83.266802][ T5616] bridge_slave_0: entered promiscuous mode
[   83.368478][ T5608] team0: Port device team_slave_1 added
[   83.368831][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.368992][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.369137][ T5615] bridge_slave_0: entered allmulticast mode
[   83.370880][ T5615] bridge_slave_0: entered promiscuous mode
[   83.377499][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.377766][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.378013][ T5616] bridge_slave_1: entered allmulticast mode
[   83.381103][ T5616] bridge_slave_1: entered promiscuous mode
[   83.397062][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.421177][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.421445][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.421670][ T5615] bridge_slave_1: entered allmulticast mode
[   83.429361][ T5615] bridge_slave_1: entered promiscuous mode
[   83.463845][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.551341][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.551352][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.551367][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.598618][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.618335][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.618345][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.618358][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.625329][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.637043][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.641578][ T5614] team0: Port device team_slave_0 added
[   83.664298][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.693418][ T5614] team0: Port device team_slave_1 added
[   83.758718][ T5616] team0: Port device team_slave_0 added
[   83.789483][ T5615] team0: Port device team_slave_0 added
[   83.793657][ T5616] team0: Port device team_slave_1 added
[   83.797011][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.797026][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.797050][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.832011][ T5615] team0: Port device team_slave_1 added
[   83.856962][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.856972][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.856986][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.867897][ T5608] hsr_slave_0: entered promiscuous mode
[   83.870185][ T5608] hsr_slave_1: entered promiscuous mode
[   83.943255][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.943266][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.943279][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.948982][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.948992][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.949005][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.951817][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.951828][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.951840][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.981289][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.981305][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.981327][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.138317][ T5614] hsr_slave_0: entered promiscuous mode
[   84.139593][ T5614] hsr_slave_1: entered promiscuous mode
[   84.140643][ T5614] debugfs: 'hsr0' already exists in 'hsr'
[   84.140733][ T5614] Cannot create hsr debugfs directory
[   84.244673][ T5616] hsr_slave_0: entered promiscuous mode
[   84.245924][ T5616] hsr_slave_1: entered promiscuous mode
[   84.246923][ T5616] debugfs: 'hsr0' already exists in 'hsr'
[   84.246944][ T5616] Cannot create hsr debugfs directory
[   84.285934][ T5615] hsr_slave_0: entered promiscuous mode
[   84.287233][ T5615] hsr_slave_1: entered promiscuous mode
[   84.288259][ T5615] debugfs: 'hsr0' already exists in 'hsr'
[   84.288281][ T5615] Cannot create hsr debugfs directory
[   84.782311][ T4925] Bluetooth: hci0: command tx timeout
[   85.102396][ T4925] Bluetooth: hci3: command tx timeout
[   85.102424][ T4925] Bluetooth: hci1: command tx timeout
[   85.184028][   T61] Bluetooth: hci2: command tx timeout
[   85.310390][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.367612][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.374744][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.421621][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.449787][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.479918][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.491377][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.521083][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.678846][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.709848][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.720896][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.756351][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.761374][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.807882][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.834873][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.872736][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.025732][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.057502][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.071282][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.095482][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.098531][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.138725][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.174802][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.215612][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.358160][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.387388][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.400951][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.438279][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.457048][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.485912][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.491742][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.527150][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.568075][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.689641][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   86.750171][  T271] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.750350][  T271] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.819720][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.838654][  T271] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.838879][  T271] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.862998][   T61] Bluetooth: hci0: command tx timeout
[   86.979792][ T5616] 8021q: adding VLAN 0 to HW filter on device team0
[   87.035858][  T271] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.036005][  T271] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.065787][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.089826][  T190] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.089932][  T190] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.182820][ T4925] Bluetooth: hci3: command tx timeout
[   87.182928][   T61] Bluetooth: hci1: command tx timeout
[   87.207813][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[   87.262970][   T61] Bluetooth: hci2: command tx timeout
[   87.296895][  T190] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.297040][  T190] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.321432][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.374436][  T271] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.374649][  T271] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.492662][ T5614] 8021q: adding VLAN 0 to HW filter on device team0
[   87.534559][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.534767][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.613928][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.614091][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.364015][  T825] cfg80211: failed to load regulatory.db
[   88.516729][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.790037][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.942235][   T61] Bluetooth: hci0: command tx timeout
[   88.959154][ T5608] veth0_vlan: entered promiscuous mode
[   89.077615][ T5608] veth1_vlan: entered promiscuous mode
[   89.121174][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.220821][ T5616] veth0_vlan: entered promiscuous mode
[   89.263497][ T4925] Bluetooth: hci3: command tx timeout
[   89.263541][   T61] Bluetooth: hci1: command tx timeout
[   89.311160][ T5616] veth1_vlan: entered promiscuous mode
[   89.320165][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.340696][ T5608] veth0_macvtap: entered promiscuous mode
[   89.345311][   T61] Bluetooth: hci2: command tx timeout
[   89.380795][ T5608] veth1_macvtap: entered promiscuous mode
[   89.428385][ T5615] veth0_vlan: entered promiscuous mode
[   89.465946][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.490909][ T5615] veth1_vlan: entered promiscuous mode
[   89.500564][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.527741][ T5616] veth0_macvtap: entered promiscuous mode
[   89.565748][ T5616] veth1_macvtap: entered promiscuous mode
[   89.568084][  T190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.599977][  T190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.619160][  T190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.637300][ T5614] veth0_vlan: entered promiscuous mode
[   89.640008][  T190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.775837][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.777746][ T5614] veth1_vlan: entered promiscuous mode
[   89.970477][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.998146][ T5615] veth0_macvtap: entered promiscuous mode
[   90.026103][ T1321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.030132][ T1321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.031069][ T5615] veth1_macvtap: entered promiscuous mode
[   90.061442][ T1321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.088706][ T1321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.129821][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.129839][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.226802][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.348683][ T5614] veth0_macvtap: entered promiscuous mode
[   90.358581][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.426406][  T190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.426428][  T190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.570050][ T5614] veth1_macvtap: entered promiscuous mode
[   90.627032][   T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.647865][   T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.674967][   T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.700077][   T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.817494][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.817514][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.929035][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.178559][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.290912][  T816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.305198][  T816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.305274][  T816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.305286][  T816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.335521][ T1438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.360674][ T1438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.429308][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.429327][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.660429][ T5764] ieee802154 phy0 wpan0: encryption failed: -22
[   91.968588][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.968607][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.098027][ T5768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'.
[   92.240372][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'.
[   92.276979][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.276998][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.667653][ T5775] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.874487][  T825] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.877651][  T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.877670][  T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.109455][ T5598] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.208511][  T825] usb 2-1: unable to get BOS descriptor or descriptor too short
[   93.270764][  T825] usb 2-1: string descriptor 0 read error: -22
[   93.270938][  T825] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[   93.270960][  T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.396255][ T5598] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[   93.396305][ T5598] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   93.396331][ T5598] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   93.396353][ T5598] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   93.396392][ T5598] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   93.396415][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.632493][ T5708] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   93.874416][ T5708] usb 1-1: Using ep0 maxpacket: 16
[   93.894162][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   93.894202][ T5708] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30
[   93.894239][ T5708] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254
[   93.971189][ T5598] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[   93.988595][ T5598] usb 4-1: invalid MIDI out EP 0
[   94.022507][ T5708] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   94.022536][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   94.022555][ T5708] usb 1-1: SerialNumber: syz
[   94.256428][ T5770] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2'.
[   94.367733][ T5708] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[   94.367755][ T5708] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[   94.367793][ T5708] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[   94.721844][ T5708] usb 1-1: USB disconnect, device number 2
[   96.419617][ T5799] syz.0.9 (5799) used greatest stack depth: 18544 bytes left
[   96.816885][ T5806] netlink: 'syz.0.12': attribute type 5 has an invalid length.
[   97.183757][ T5817] comedi: valid board names for 8255 driver are:
[   97.183775][ T5817]  8255
[   97.183781][ T5817] comedi: valid board names for vmk80xx driver are:
[   97.183788][ T5817]  vmk80xx
[   97.183794][ T5817] comedi: valid board names for usbduxsigma driver are:
[   97.183801][ T5817]  usbduxsigma
[   97.183806][ T5817] comedi: valid board names for usbduxfast driver are:
[   97.183812][ T5817]  usbduxfast
[   97.183818][ T5817] comedi: valid board names for usbdux driver are:
[   97.183825][ T5817]  usbdux
[   97.183830][ T5817] comedi: valid board names for ni6501 driver are:
[   97.183837][ T5817]  ni6501
[   97.183841][ T5817] comedi: valid board names for dt9812 driver are:
[   97.183847][ T5817]  dt9812
[   97.183852][ T5817] comedi: valid board names for ni_labpc_cs driver are:
[   97.183860][ T5817]  ni_labpc_cs
[   97.183866][ T5817] comedi: valid board names for ni_daq_700 driver are:
[   97.183873][ T5817]  ni_daq_700
[   97.183878][ T5817] comedi: valid board names for labpc_pci driver are:
[   97.183884][ T5817]  labpc_pci
[   97.183889][ T5817] comedi: valid board names for adl_pci9118 driver are:
[   97.183894][ T5817]  pci9118dg
[   97.183898][ T5817]  pci9118hg
[   97.183903][ T5817]  pci9118hr
[   97.183908][ T5817] comedi: valid board names for 8255_pci driver are:
[   97.183915][ T5817]  8255_pci
[   97.183921][ T5817] comedi: valid board names for s526 driver are:
[   97.183927][ T5817]  s526
[   97.183931][ T5817] comedi: valid board names for multiq3 driver are:
[   97.183937][ T5817]  multiq3
[   97.183942][ T5817] comedi: valid board names for pcmuio driver are:
[   97.233012][ T5817]  pcmuio48
[   97.233023][ T5817]  pcmuio96
[   97.233029][ T5817] comedi: valid board names for pcmmio driver are:
[   97.233037][ T5817]  pcmmio
[   97.233043][ T5817] comedi: valid board names for pcmda12 driver are:
[   97.233050][ T5817]  pcmda12
[   97.233056][ T5817] comedi: valid board names for pcmad driver are:
[   97.233063][ T5817]  pcmad12
[   97.233069][ T5817]  pcmad16
[   97.233074][ T5817] comedi: valid board names for ni_labpc driver are:
[   97.233082][ T5817]  lab-pc-1200
[   97.233087][ T5817]  lab-pc-1200ai
[   97.233092][ T5817]  lab-pc+
[   97.233097][ T5817] comedi: valid board names for atmio16 driver are:
[   97.233105][ T5817]  atmio16
[   97.233110][ T5817]  atmio16d
[   97.233115][ T5817] comedi: valid board names for ni_at_ao driver are:
[   97.233123][ T5817]  at-ao-6
[   97.233127][ T5817]  at-ao-10
[   97.233133][ T5817] comedi: valid board names for ni_at_a2150 driver are:
[   97.233140][ T5817]  ni_at_a2150
[   97.233146][ T5817] comedi: valid board names for adq12b driver are:
[   97.233153][ T5817]  adq12b
[   97.233158][ T5817] comedi: valid board names for mpc624 driver are:
[   97.233165][ T5817]  mpc624
[   97.233171][ T5817] comedi: valid board names for c6xdigio driver are:
[   97.233178][ T5817]  c6xdigio
[   97.233183][ T5817] comedi: valid board names for aio_iiro_16 driver are:
[   97.233191][ T5817]  aio_iiro_16
[   97.233195][ T5817] comedi: valid board names for aio_aio12_8 driver are:
[   97.233202][ T5817]  aio_aio12_8
[   97.233208][ T5817]  aio_ai12_8
[   97.233213][ T5817]  aio_ao12_4
[   97.233219][ T5817] comedi: valid board names for fl512 driver are:
[   97.233226][ T5817]  fl512
[   97.233231][ T5817] comedi: valid board names for dmm32at driver are:
[   97.233238][ T5817]  dmm32at
[   97.233243][ T5817] comedi: valid board names for dt282x driver are:
[   97.233251][ T5817]  dt2821
[   97.233256][ T5817]  dt2821-f
[   97.233262][ T5817]  dt2821-g
[   97.233267][ T5817]  dt2823
[   97.233272][ T5817]  dt2824-pgh
[   97.233278][ T5817]  dt2824-pgl
[   97.233283][ T5817]  dt2825
[   97.233288][ T5817]  dt2827
[   97.233293][ T5817]  dt2828
[   97.233299][ T5817]  dt2829
[   97.233303][ T5817]  dt21-ez
[   97.233308][ T5817]  dt23-ez
[   97.233313][ T5817]  dt24-ez
[   97.233318][ T5817]  dt24-ez-pgl
[   97.233324][ T5817] comedi: valid board names for dt2817 driver are:
[   97.233331][ T5817]  dt2817
[   97.233336][ T5817] comedi: valid board names for dt2815 driver are:
[   97.233343][ T5817]  dt2815
[   97.233349][ T5817] comedi: valid board names for dt2814 driver are:
[   97.233356][ T5817]  dt2814
[   97.233367][ T5817] comedi: valid board names for dt2811 driver are:
[   97.233374][ T5817]  dt2811-pgh
[   97.233379][ T5817]  dt2811-pgl
[   97.233385][ T5817] comedi: valid board names for dt2801 driver are:
[   97.233392][ T5817]  dt2801
[   97.233397][ T5817] comedi: valid board names for das6402 driver are:
[   97.233404][ T5817]  das6402-12
[   97.233410][ T5817]  das6402-16
[   97.233415][ T5817] comedi: valid board names for das1800 driver are:
[   97.233422][ T5817]  das-1701st
[   97.233427][ T5817]  das-1701st-da
[   97.233432][ T5817]  das-1702st
[   97.233438][ T5817]  das-1702st-da
[   97.233443][ T5817]  das-1702hr
[   97.233449][ T5817]  das-1702hr-da
[   97.233454][ T5817]  das-1701ao
[   97.233459][ T5817]  das-1702ao
[   97.233465][ T5817]  das-1801st
[   97.233470][ T5817]  das-1801st-da
[   97.233476][ T5817]  das-1802st
[   97.233481][ T5817]  das-1802st-da
[   97.233486][ T5817]  das-1802hr
[   97.233492][ T5817]  das-1802hr-da
[   97.233497][ T5817]  das-1801hc
[   97.233502][ T5817]  das-1802hc
[   97.233507][ T5817]  das-1801ao
[   97.233512][ T5817]  das-1802ao
[   97.233517][ T5817] comedi: valid board names for das800 driver are:
[   97.233525][ T5817]  das-800
[   97.233530][ T5817]  cio-das800
[   97.233535][ T5817]  das-801
[   97.233540][ T5817]  cio-das801
[   97.233545][ T5817]  das-802
[   97.233550][ T5817]  cio-das802
[   97.233555][ T5817]  cio-das802/16
[   97.233560][ T5817] comedi: valid board names for isa-das08 driver are:
[   97.233567][ T5817]  isa-das08
[   97.233572][ T5817]  das08-pgm
[   97.233578][ T5817]  das08-pgh
[   97.233583][ T5817]  das08-pgl
[   97.233588][ T5817]  das08-aoh
[   97.233593][ T5817]  das08-aol
[   97.233598][ T5817]  das08-aom
[   97.233603][ T5817]  das08/jr-ao
[   97.233608][ T5817]  das08jr-16-ao
[   97.233612][ T5817]  pc104-das08
[   97.233617][ T5817]  das08jr/16
[   97.233623][ T5817] comedi: valid board names for das16m1 driver are:
[   97.233630][ T5817]  das16m1
[   97.233635][ T5817] comedi: valid board names for dac02 driver are:
[   97.233642][ T5817]  dac02
[   97.233654][ T5817] comedi: valid board names for rti802 driver are:
[   97.233661][ T5817]  rti802
[   97.233666][ T5817] comedi: valid board names for rti800 driver are:
[   97.233674][ T5817]  rti800
[   97.233679][ T5817]  rti815
[   97.233684][ T5817] comedi: valid board names for pcm3724 driver are:
[   97.233692][ T5817]  pcm3724
[   97.233697][ T5817] comedi: valid board names for pcl818 driver are:
[   97.233704][ T5817]  pcl818l
[   97.233709][ T5817]  pcl818h
[   97.233715][ T5817]  pcl818hd
[   97.233719][ T5817]  pcl818hg
[   97.233724][ T5817]  pcl818
[   97.233729][ T5817]  pcl718
[   97.233734][ T5817]  pcm3718
[   97.233740][ T5817] comedi: valid board names for pcl816 driver are:
[   97.233747][ T5817]  pcl816
[   97.233752][ T5817]  pcl814b
[   97.233757][ T5817] comedi: valid board names for pcl812 driver are:
[   97.233764][ T5817]  pcl812
[   97.233770][ T5817]  pcl812pg
[   97.233775][ T5817]  acl8112pg
[   97.233780][ T5817]  acl8112dg
[   97.233786][ T5817]  acl8112hg
[   97.233791][ T5817]  a821pgl
[   97.233797][ T5817]  a821pglnda
[   97.233802][ T5817]  a821pgh
[   97.233807][ T5817]  a822pgl
[   97.233813][ T5817]  a822pgh
[   97.233818][ T5817]  a823pgl
[   97.233823][ T5817]  a823pgh
[   97.233828][ T5817]  pcl813
[   97.233833][ T5817]  pcl813b
[   97.233838][ T5817]  acl8113
[   97.233843][ T5817]  iso813
[   97.233848][ T5817]  acl8216
[   97.233854][ T5817]  a826pg
[   97.233859][ T5817] comedi: valid board names for pcl730 driver are:
[   97.233866][ T5817]  pcl730
[   97.233872][ T5817]  iso730
[   97.233877][ T5817]  acl7130
[   97.233882][ T5817]  pcm3730
[   97.233887][ T5817]  pcl725
[   97.233893][ T5817]  p8r8dio
[   97.233898][ T5817]  acl7225b
[   97.233904][ T5817]  p16r16dio
[   97.233909][ T5817]  pcl733
[   97.233914][ T5817]  pcl734
[   97.233919][ T5817]  opmm-1616-xt
[   97.233925][ T5817]  pearl-mm-p
[   97.233930][ T5817]  ir104-pbf
[   97.233935][ T5817] comedi: valid board names for pcl726 driver are:
[   97.233942][ T5817]  pcl726
[   97.233947][ T5817]  pcl727
[   97.233953][ T5817]  pcl728
[   97.233958][ T5817]  acl6126
[   97.233963][ T5817]  acl6128
[   97.233968][ T5817] comedi: valid board names for pcl724 driver are:
[   97.233976][ T5817]  pcl724
[   97.233981][ T5817]  pcl722
[   97.233986][ T5817]  pcl731
[   97.233991][ T5817]  acl7122
[   97.233996][ T5817]  acl7124
[   97.234002][ T5817]  pet48dio
[   97.234007][ T5817]  pcmio48
[   97.234012][ T5817]  onyx-mm-dio
[   97.234017][ T5817] comedi: valid board names for pcl711 driver are:
[   97.234025][ T5817]  pcl711
[   97.234030][ T5817]  pcl711b
[   97.234035][ T5817]  acl8112hg
[   97.234040][ T5817]  acl8112dg
[   97.234045][ T5817] comedi: valid board names for amplc_pc263 driver are:
[   97.234053][ T5817]  pc263
[   97.234058][ T5817] comedi: valid board names for amplc_pc236 driver are:
[   97.234066][ T5817]  pc36at
[   97.234071][ T5817] comedi: valid board names for amplc_dio200 driver are:
[   97.234079][ T5817]  pc212e
[   97.234084][ T5817]  pc214e
[   97.234089][ T5817]  pc215e
[   97.234094][ T5817]  pc218e
[   97.234100][ T5817]  pc272e
[   97.234105][ T5817] comedi: valid board names for comedi_parport driver are:
[   97.234112][ T5817]  comedi_parport
[   97.234118][ T5817] comedi: valid board names for comedi_test driver are:
[   97.234125][ T5817]  comedi_test
[   97.234130][ T5817] comedi: valid board names for comedi_bond driver are:
[   97.234138][ T5817]  comedi_bond
[   97.783033][   T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   97.897848][ T5836] Zero length message leads to an empty skb
[   97.981767][   T32] usb 3-1: Using ep0 maxpacket: 32
[   98.115735][   T32] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   98.115761][   T32] usb 3-1: config 0 has no interface number 0
[   98.115802][   T32] usb 3-1: config 0 interface 184 has no altsetting 0
[   98.183774][   T32] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   98.183802][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.183821][   T32] usb 3-1: Product: syz
[   98.183834][   T32] usb 3-1: Manufacturer: syz
[   98.183847][   T32] usb 3-1: SerialNumber: syz
[   98.271152][   T32] usb 3-1: config 0 descriptor??
[   98.673073][ T5598] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[   98.675654][  T825] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   98.819910][ T5598] usb 4-1: USB disconnect, device number 2
[   99.346210][  T825] usb 2-1: USB disconnect, device number 2
[   99.352444][   T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   99.352470][   T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   99.869159][ T5823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.870944][ T5823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.962305][ T5598] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.080967][   T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  100.080996][   T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  100.081015][   T32] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  100.121403][   T32] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  100.160617][   T32] usb 3-1: USB disconnect, device number 2
[  100.163822][ T5598] usb 1-1: Using ep0 maxpacket: 32
[  100.169043][ T5598] usb 1-1: unable to get BOS descriptor or descriptor too short
[  100.185111][ T5598] usb 1-1: config 86 has an invalid interface number: 211 but max is 2
[  100.185141][ T5598] usb 1-1: config 86 has an invalid interface number: 54 but max is 2
[  100.185161][ T5598] usb 1-1: config 86 has an invalid interface number: 111 but max is 2
[  100.185179][ T5598] usb 1-1: config 86 contains an unexpected descriptor of type 0x2, skipping
[  100.185197][ T5598] usb 1-1: config 86 contains an unexpected descriptor of type 0x2, skipping
[  100.185214][ T5598] usb 1-1: config 86 has an invalid descriptor of length 37, skipping remainder of the config
[  100.185232][ T5598] usb 1-1: config 86 has 4 interfaces, different from the descriptor's value: 3
[  100.185252][ T5598] usb 1-1: config 86 has no interface number 1
[  100.185267][ T5598] usb 1-1: config 86 has no interface number 2
[  100.185283][ T5598] usb 1-1: config 86 has no interface number 3
[  100.185360][ T5598] usb 1-1: config 86 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  100.185386][ T5598] usb 1-1: config 86 interface 0 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  100.185411][ T5598] usb 1-1: config 86 interface 0 altsetting 1 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  100.185435][ T5598] usb 1-1: config 86 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  100.185454][ T5598] usb 1-1: config 86 interface 0 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  100.185475][ T5598] usb 1-1: config 86 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  100.185494][ T5598] usb 1-1: config 86 interface 0 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  100.185516][ T5598] usb 1-1: config 86 interface 0 altsetting 1 bulk endpoint 0xE has invalid maxpacket 64
[  100.185538][ T5598] usb 1-1: config 86 interface 0 altsetting 1 endpoint 0xD has an invalid bInterval 128, changing to 11
[  100.185629][ T5598] usb 1-1: config 86 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  100.185665][ T5598] usb 1-1: config 86 interface 211 altsetting 38 bulk endpoint 0x2 has invalid maxpacket 16
[  100.185689][ T5598] usb 1-1: config 86 interface 211 altsetting 38 has a duplicate endpoint with address 0xD, skipping
[  100.185712][ T5598] usb 1-1: config 86 interface 211 altsetting 38 has a duplicate endpoint with address 0xD, skipping
[  100.185735][ T5598] usb 1-1: config 86 interface 211 altsetting 38 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  100.185760][ T5598] usb 1-1: config 86 interface 211 altsetting 38 has an invalid descriptor for endpoint zero, skipping
[  100.185781][ T5598] usb 1-1: config 86 interface 211 altsetting 38 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  100.185815][ T5598] usb 1-1: config 86 interface 211 altsetting 38 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  100.185840][ T5598] usb 1-1: config 86 interface 211 altsetting 38 has a duplicate endpoint with address 0x9, skipping
[  100.185862][ T5598] usb 1-1: config 86 interface 211 altsetting 38 has a duplicate endpoint with address 0x9, skipping
[  100.185883][ T5598] usb 1-1: too many endpoints for config 86 interface 54 altsetting 34: 225, using maximum allowed: 30
[  100.185919][ T5598] usb 1-1: config 86 interface 54 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 225
[  100.186007][ T5598] usb 1-1: config 86 interface 111 altsetting 7 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  100.186032][ T5598] usb 1-1: config 86 interface 111 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  100.186052][ T5598] usb 1-1: config 86 interface 111 altsetting 7 has a duplicate endpoint with address 0x8D, skipping
[  100.186073][ T5598] usb 1-1: config 86 interface 111 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  100.186098][ T5598] usb 1-1: config 86 interface 0 has no altsetting 0
[  100.186114][ T5598] usb 1-1: config 86 interface 211 has no altsetting 0
[  100.186131][ T5598] usb 1-1: config 86 interface 54 has no altsetting 0
[  100.186148][ T5598] usb 1-1: config 86 interface 111 has no altsetting 0
[  100.233354][ T5598] usb 1-1: New USB device found, idVendor=1bc7, idProduct=10c4, bcdDevice=1f.aa
[  100.233383][ T5598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.233401][ T5598] usb 1-1: Product: syz
[  100.233414][ T5598] usb 1-1: Manufacturer: ш
[  100.233427][ T5598] usb 1-1: SerialNumber: syz
[  100.579775][ T5858] ./cgroup.net/devices.allow: Can't lookup blockdev
[  100.588995][ T5857] ./cgroup.net/devices.allow: Can't lookup blockdev
[  100.878923][ T5852] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  100.879398][ T5852] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  101.317288][ T5598] usb 1-1: USB disconnect, device number 3
[  101.404554][   T32] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  101.600790][   T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  101.600822][   T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  101.629037][   T32] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  101.629064][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.629075][   T32] usb 4-1: Product: syz
[  101.629082][   T32] usb 4-1: Manufacturer: syz
[  101.629089][   T32] usb 4-1: SerialNumber: syz
[  101.657861][   T32] usb 4-1: config 0 descriptor??
[  101.675869][ T5862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  101.675991][ T5862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  101.877802][ T5862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  101.877908][ T5862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  103.118656][   T32] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  103.333358][ T5909] comedi comedi3: das16m1: I/O base address or length out of range
[  103.390369][   T32] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:0d:01:01:03
[  103.444713][   T32] usb 4-1: USB disconnect, device number 3
[  103.450938][   T32] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet
[  103.741939][ T5913] netlink: 92 bytes leftover after parsing attributes in process `syz.2.37'.
[  103.760270][ T5915] netlink: 92 bytes leftover after parsing attributes in process `syz.2.37'.
[  104.014391][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  104.618064][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.640316][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.809802][   T32] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  104.842188][ T5598] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  104.961968][   T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.962017][   T32] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  104.962510][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.968219][ T5951] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  104.973465][ T5947] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  104.987421][   T32] usb 4-1: config 0 descriptor??
[  105.019758][   T32] pwc: Askey VC010 type 2 USB webcam detected.
[  105.054053][ T5598] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  105.054102][ T5598] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x48, changing to 0x8
[  105.054126][ T5598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10
[  105.054151][ T5598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  105.054170][ T5598] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  105.058006][ T5598] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  105.058035][ T5598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  105.058055][ T5598] usb 1-1: Product: syz
[  105.058069][ T5598] usb 1-1: Manufacturer: syz
[  105.058083][ T5598] usb 1-1: SerialNumber: syz
[  105.151504][ T5598] usb 1-1: config 0 descriptor??
[  105.163659][ T5598] radio-si470x 1-1:0.0: could not find interrupt in endpoint
[  105.163734][ T5598] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[  105.164244][ T5598] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  105.224541][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.225077][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.229524][ T5714] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  105.387133][ T5598] usb 1-1: USB disconnect, device number 4
[  105.447825][ T5714] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  105.447857][ T5714] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  105.472579][ T5714] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  105.472608][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.472626][ T5714] usb 3-1: Product: syz
[  105.472640][ T5714] usb 3-1: Manufacturer: syz
[  105.472701][ T5714] usb 3-1: SerialNumber: syz
[  105.528897][ T5714] usb 3-1: config 0 descriptor??
[  105.531832][ T5953] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  105.531947][ T5953] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  105.545305][   T32] pwc: recv_control_msg error -32 req 02 val 2b00
[  105.553222][   T32] pwc: recv_control_msg error -32 req 02 val 2700
[  105.737405][ T5953] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  105.737531][ T5953] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  105.837950][   T32] pwc: recv_control_msg error -32 req 04 val 1000
[  105.869663][ T5958] capability: warning: `syz.1.48' uses deprecated v2 capabilities in a way that may be insecure
[  106.134983][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.138584][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.338822][   T32] pwc: recv_control_msg error -71 req 04 val 1400
[  106.356741][   T32] pwc: recv_control_msg error -71 req 02 val 2000
[  106.357387][   T32] pwc: recv_control_msg error -71 req 02 val 2100
[  106.358018][   T32] pwc: recv_control_msg error -71 req 04 val 1500
[  106.358654][   T32] pwc: recv_control_msg error -71 req 02 val 2500
[  106.359639][   T32] pwc: recv_control_msg error -71 req 02 val 2400
[  106.360258][   T32] pwc: recv_control_msg error -71 req 02 val 2600
[  106.380140][   T32] pwc: recv_control_msg error -71 req 02 val 2900
[  106.380679][   T32] pwc: recv_control_msg error -71 req 02 val 2800
[  106.392686][   T32] pwc: recv_control_msg error -71 req 04 val 1100
[  106.393216][   T32] pwc: recv_control_msg error -71 req 04 val 1200
[  106.680324][   T32] pwc: Registered as video103.
[  106.751535][ T5974] overlayfs: missing 'lowerdir'
[  106.760863][   T32] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  106.788558][ T5714] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  106.922226][ T1244] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  106.940443][ T5714] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:0d:01:01:03
[  107.035138][ T5714] usb 3-1: USB disconnect, device number 3
[  107.085869][ T5714] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet
[  107.094803][ T1244] usb 1-1: config 0 has an invalid interface number: 32 but max is 0
[  107.094829][ T1244] usb 1-1: config 0 has no interface number 0
[  107.094870][ T1244] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.094894][ T1244] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.094928][ T1244] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  107.094949][ T1244] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.101829][   T32] usb 4-1: USB disconnect, device number 4
[  107.233963][ T1244] usb 1-1: config 0 descriptor??
[  107.685122][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.717480][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.741224][ T5991] 9pnet_fd: Insufficient options for proto=fd
[  107.749235][ T5969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  107.750189][ T5969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.990145][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[  107.990187][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[  107.990211][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[  107.990238][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[  107.990261][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[  107.990284][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[  107.990307][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x3
[  107.990331][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x2
[  107.990360][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x2
[  107.990383][ T1244] prodikeys 0003:041E:2801.0001: unknown main item tag 0x3
[  108.018029][ T1244] prodikeys 0003:041E:2801.0001: item fetching failed at offset 481/483
[  108.018909][ T1244] prodikeys 0003:041E:2801.0001: hid parse failed
[  108.043525][ T1244] prodikeys 0003:041E:2801.0001: probe with driver prodikeys failed with error -22
[  108.205989][ T1244] usb 1-1: USB disconnect, device number 5
[  108.296534][   T38] audit: type=1326 audit(1777964070.676:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5989 comm="syz.1.59" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37c4accdd9 code=0x0
[  108.842311][   T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  109.047273][   T32] usb 4-1: Using ep0 maxpacket: 8
[  109.057482][   T32] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  109.057509][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.057527][   T32] usb 4-1: Product: syz
[  109.057540][   T32] usb 4-1: Manufacturer: syz
[  109.057553][   T32] usb 4-1: SerialNumber: syz
[  109.080637][   T32] usb 4-1: config 0 descriptor??
[  109.113863][   T32] gspca_main: sq930x-2.14.0 probing 2770:930c
[  110.172301][   T32] gspca_sq930x: reg_w 0305 fd00 failed -110
[  110.369506][  T360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.403647][   T32] gspca_sq930x: Sensor ov9630 not yet treated
[  110.403738][   T32] sq930x 4-1:0.0: probe with driver sq930x failed with error -22
[  110.406771][ T4925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  110.481750][ T4925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  110.485730][ T4925] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  110.506710][ T4925] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  110.514917][ T4925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  111.085167][   T61] Bluetooth: hci2: unexpected cc 0x0c05 length: 4 > 1
[  111.171116][   T32] usb 4-1: USB disconnect, device number 5
[  111.272698][  T825] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  111.326992][ T6026] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  111.376286][  T360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.444042][  T825] usb 2-1: Using ep0 maxpacket: 32
[  111.447216][  T825] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  111.447246][  T825] usb 2-1: config 0 has no interface number 0
[  111.447292][  T825] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  111.447316][  T825] usb 2-1: config 0 interface 1 has no altsetting 0
[  111.451461][  T825] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  111.451490][  T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.451509][  T825] usb 2-1: Product: syz
[  111.451523][  T825] usb 2-1: Manufacturer: syz
[  111.451536][  T825] usb 2-1: SerialNumber: syz
[  111.553771][  T825] usb 2-1: config 0 descriptor??
[  111.703690][   T32] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  111.758555][  T360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.814235][  T825] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  111.814267][  T825] cx231xx 2-1:0.1: Not found matching IAD interface
[  111.851419][  T825] usb 2-1: USB disconnect, device number 3
[  111.919571][   T32] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  111.919602][   T32] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  111.947381][   T32] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  111.947410][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.947427][   T32] usb 1-1: Product: syz
[  111.947439][   T32] usb 1-1: Manufacturer: syz
[  111.947451][   T32] usb 1-1: SerialNumber: syz
[  112.000229][   T32] usb 1-1: config 0 descriptor??
[  112.001293][ T6028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  112.001478][ T6028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  112.204727][ T6028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  112.206848][ T6028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  112.240052][  T360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.543537][ T5717] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  112.629713][   T61] Bluetooth: hci1: command tx timeout
[  112.716189][ T5717] usb 4-1: Using ep0 maxpacket: 32
[  112.760709][ T5717] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  112.760737][ T5717] usb 4-1: config 0 has no interface number 0
[  112.760847][ T5717] usb 4-1: config 0 interface 184 has no altsetting 0
[  112.774508][ T5717] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  112.774536][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.774555][ T5717] usb 4-1: Product: syz
[  112.774568][ T5717] usb 4-1: Manufacturer: syz
[  112.774580][ T5717] usb 4-1: SerialNumber: syz
[  112.948704][ T5717] usb 4-1: config 0 descriptor??
[  113.317664][   T32] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  113.506694][ T6051] vim2m vim2m.0: vidioc_s_fmt queue busy
[  113.535285][ T6051] netlink: 'syz.1.74': attribute type 21 has an invalid length.
[  113.577891][   T32] dm9601 1-1:0.0 eth3: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:0d:01:01:03
[  113.613902][   T32] usb 1-1: USB disconnect, device number 6
[  113.698957][   T32] dm9601 1-1:0.0 eth3: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet
[  113.726695][ T6051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.74'.
[  113.998323][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  113.998352][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  114.196724][ T6055] netlink: 'syz.0.75': attribute type 29 has an invalid length.
[  114.240322][ T6056] netlink: 'syz.0.75': attribute type 29 has an invalid length.
[  114.484998][ T6040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.491949][ T6040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.715939][   T61] Bluetooth: hci1: command tx timeout
[  114.793710][  T360] bridge_slave_1: left allmulticast mode
[  114.798354][  T360] bridge_slave_1: left promiscuous mode
[  114.813532][  T360] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.856434][ T5699] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  114.920857][  T360] bridge_slave_0: left allmulticast mode
[  114.920880][  T360] bridge_slave_0: left promiscuous mode
[  114.925981][  T360] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.034109][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.034212][ T5699] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  115.051793][ T5699] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.051821][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.051839][ T5699] usb 2-1: Product: syz
[  115.051902][ T5699] usb 2-1: Manufacturer: syz
[  115.051915][ T5699] usb 2-1: SerialNumber: syz
[  115.211244][   T61] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4
[  115.346412][ T6060] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.578373][ T6061] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  115.580657][ T5699] cdc_ncm 2-1:1.0: failed to get mac address
[  115.781621][ T5699] cdc_ncm 2-1:1.0: bind() failure
[  115.864186][ T5699] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  115.865323][ T5699] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  115.867893][ T5699] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  115.928940][ T5699] usb 2-1: USB disconnect, device number 4
[  116.308962][  T360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.440263][  T360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.504162][  T360] bond0 (unregistering): Released all slaves
[  116.520752][ T6068] process 'syz.1.79' launched './file1' with NULL argv: empty string added
[  116.611547][ T6063] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  116.694692][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  116.694724][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  116.694744][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  116.695010][ T5717] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  116.744604][ T5717] usb 4-1: USB disconnect, device number 6
[  116.790098][   T61] Bluetooth: hci1: command tx timeout
[  117.060922][ T6082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.81'.
[  117.262457][   T61] Bluetooth: hci2: command 0x0406 tx timeout
[  117.306123][ T5717] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  117.476096][ T5717] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  117.476123][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.476142][ T5717] usb 4-1: Product: syz
[  117.476155][ T5717] usb 4-1: Manufacturer: syz
[  117.476169][ T5717] usb 4-1: SerialNumber: syz
[  117.502536][ T6094] Sensor A: =================  START STATUS  =================
[  117.502556][ T6094] Sensor A: Test Pattern: 75% Colorbar
[  117.502594][ T6094] Sensor A: Show Information: All
[  117.502611][ T6094] Sensor A: Vertical Flip: false
[  117.502627][ T6094] Sensor A: Horizontal Flip: false
[  117.502641][ T6094] Sensor A: Brightness: 128
[  117.502658][ T6094] Sensor A: Contrast: 128
[  117.502674][ T6094] Sensor A: Hue: 0
[  117.502689][ T6094] Sensor A: Saturation: 128
[  117.502706][ T6094] Sensor A: Pixel Rate: 160000000
[  117.502725][ T6094] Sensor A: Horizontal Blanking: 800
[  117.502743][ T6094] Sensor A: Vertical Blanking: 3223
[  117.502763][ T6094] Sensor A: ==================  END STATUS  ==================
[  117.608070][ T6094] overlayfs: failed to resolve './file1': -2
[  117.638090][ T5717] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  117.692288][ T5844] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  117.854340][ T5844] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  117.854367][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.891972][ T5844] usb 2-1: config 0 descriptor??
[  117.932809][ T5844] cp210x 2-1:0.0: cp210x converter detected
[  118.170111][ T1244] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  118.440760][  T825] usb 4-1: USB disconnect, device number 7
[  118.544710][ T5844] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  118.600569][ T1244] usb 4-1: ath9k_htc: Unable to allocate URBs
[  118.609985][  T825] usb 4-1: ath9k_htc: USB layer deinitialized
[  118.700048][ T5844] usb 2-1: cp210x converter now attached to ttyUSB0
[  118.867087][ T4925] Bluetooth: hci1: command tx timeout
[  119.028849][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1
[  119.144193][ T5717] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  119.321594][ T5717] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.321619][ T5717] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  119.321666][ T5717] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  119.321687][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.334432][ T5717] usb 1-1: config 0 descriptor??
[  119.870960][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.871495][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.871966][ T6014] bridge_slave_0: entered allmulticast mode
[  119.940601][ T6014] bridge_slave_0: entered promiscuous mode
[  119.996133][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.996531][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.996808][ T6014] bridge_slave_1: entered allmulticast mode
[  120.001965][ T6014] bridge_slave_1: entered promiscuous mode
[  120.119302][ T5717] Bluetooth: Can't get version to change to load ram patch err
[  120.119316][ T5717] Bluetooth: Loading sysconfig file failed
[  120.119341][ T5717] ath3k 1-1:0.0: probe with driver ath3k failed with error -71
[  120.158012][ T5717] usb 1-1: USB disconnect, device number 7
[  120.252230][  T360] hsr_slave_0: left promiscuous mode
[  120.295751][  T360] hsr_slave_1: left promiscuous mode
[  120.297110][  T360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.297170][  T360] batman_adv: batadv0: Removing interface: batadv_slave_0
[  120.325530][  T360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.325556][  T360] batman_adv: batadv0: Removing interface: batadv_slave_1
[  120.329098][   T38] audit: type=1326 audit(1777964082.746:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6086 comm="syz.1.85" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37c4accdd9 code=0x7fc00000
[  120.498117][  T360] veth1_macvtap: left promiscuous mode
[  120.498282][  T360] veth0_macvtap: left promiscuous mode
[  120.498465][  T360] veth1_vlan: left promiscuous mode
[  120.498719][  T360] veth0_vlan: left promiscuous mode
[  120.542850][   T32] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  120.548009][ T5717] usb 2-1: USB disconnect, device number 5
[  120.695645][ T5717] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  120.723035][   T32] usb 4-1: Using ep0 maxpacket: 32
[  120.728771][   T32] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  120.728797][   T32] usb 4-1: config 0 has no interface number 0
[  120.728841][   T32] usb 4-1: config 0 interface 184 has no altsetting 0
[  120.744939][   T32] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  120.744968][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.744986][   T32] usb 4-1: Product: syz
[  120.744998][   T32] usb 4-1: Manufacturer: syz
[  120.745011][   T32] usb 4-1: SerialNumber: syz
[  120.758852][   T32] usb 4-1: config 0 descriptor??
[  120.998662][ T5717] cp210x 2-1:0.0: device disconnected
[  121.184490][ T4925] Bluetooth: hci0: command 0x0406 tx timeout
[  121.567596][ T5717] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  121.752525][ T5717] usb 2-1: device descriptor read/64, error -71
[  121.815571][   T32] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  121.815602][   T32] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  122.022177][ T5708] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  122.042287][ T5717] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  122.234850][ T5717] usb 2-1: device descriptor read/64, error -71
[  122.265221][ T5708] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  122.265241][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[  122.265255][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 27792, setting to 64
[  122.280152][ T5708] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[  122.280182][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.280249][ T5708] usb 1-1: Product: syz
[  122.280262][ T5708] usb 1-1: Manufacturer: syz
[  122.280275][ T5708] usb 1-1: SerialNumber: syz
[  122.347720][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.355777][ T5717] usb usb2-port1: attempt power cycle
[  122.400484][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.425566][ T5708] usb 1-1: config 0 descriptor??
[  122.426823][ T6144] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  122.427274][ T6144] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  122.441274][ T5708] option 1-1:0.0: GSM modem (1-port) converter detected
[  122.604599][  T360] team0 (unregistering): Port device team_slave_1 removed
[  122.659122][  T825] usb 1-1: USB disconnect, device number 8
[  122.668307][  T825] option 1-1:0.0: device disconnected
[  122.684409][  T360] team0 (unregistering): Port device team_slave_0 removed
[  122.782509][ T5717] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  122.803268][ T5717] usb 2-1: device descriptor read/8, error -71
[  122.995895][   T32] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  122.995926][   T32] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  122.995945][   T32] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  122.996186][   T32] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  123.060361][   T32] usb 4-1: USB disconnect, device number 8
[  123.076633][ T6014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.103070][ T5717] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  123.112649][ T6014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.135163][ T5717] usb 2-1: device descriptor read/8, error -71
[  123.249834][ T5717] usb usb2-port1: unable to enumerate USB device
[  123.441024][ T6014] team0: Port device team_slave_0 added
[  123.450233][ T6014] team0: Port device team_slave_1 added
[  123.532271][ T5717] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  123.561018][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.561032][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.561050][ T6014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.589079][ T6014] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.589097][ T6014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.589121][ T6014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.727797][ T5717] usb 1-1: device descriptor read/64, error -71
[  123.926929][ T6014] hsr_slave_0: entered promiscuous mode
[  123.928849][ T6014] hsr_slave_1: entered promiscuous mode
[  123.930380][ T6014] debugfs: 'hsr0' already exists in 'hsr'
[  123.930401][ T6014] Cannot create hsr debugfs directory
[  123.986390][ T6162] netlink: 'syz.1.96': attribute type 2 has an invalid length.
[  123.986419][ T6162] netlink: 'syz.1.96': attribute type 8 has an invalid length.
[  123.986428][ T6162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.96'.
[  124.014668][ T5717] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  124.105659][   T32] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  124.173547][ T5717] usb 1-1: device descriptor read/64, error -71
[  124.296163][ T5717] usb usb1-port1: attempt power cycle
[  124.315680][   T32] usb 4-1: unable to get BOS descriptor or descriptor too short
[  124.321732][   T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.321755][   T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.338276][   T32] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  124.338305][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.338323][   T32] usb 4-1: Product: syz
[  124.338335][   T32] usb 4-1: Manufacturer: syz
[  124.338348][   T32] usb 4-1: SerialNumber: syz
[  124.441730][   T32] usb 4-1: selecting invalid altsetting 1
[  124.450692][   T32] usb 4-1: unit 6 not found!
[  124.590705][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2
[  124.732231][ T5717] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  124.752996][ T5717] usb 1-1: device descriptor read/8, error -71
[  124.953748][ T5708] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  125.035153][ T5717] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  125.063030][ T5717] usb 1-1: device descriptor read/8, error -71
[  125.079905][ T6160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.080470][ T6160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.128128][ T5708] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  125.128161][ T5708] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  125.128237][ T5708] usb 2-1: config 0 interface 0 has no altsetting 0
[  125.130766][ T5708] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  125.130794][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.130867][ T5708] usb 2-1: Product: syz
[  125.130882][ T5708] usb 2-1: Manufacturer: syz
[  125.130896][ T5708] usb 2-1: SerialNumber: syz
[  125.172845][ T5717] usb usb1-port1: unable to enumerate USB device
[  125.256057][ T5708] usb 2-1: config 0 descriptor??
[  125.493059][ T5708] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[  125.493223][ T5708] imon 2-1:0.0: unable to initialize intf0, err -90
[  125.493238][ T5708] imon:imon_probe: failed to initialize context!
[  125.493258][ T5708] imon 2-1:0.0: unable to register, err -19
[  125.531316][   T32] usb 4-1: 2:0: failed to get current value for ch 0 (-71)
[  125.600933][ T5708] usb 2-1: USB disconnect, device number 10
[  125.829437][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3
[  125.829833][   T32] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  125.861531][   T32] usb 4-1: USB disconnect, device number 9
[  125.919531][ T5686] udevd[5686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  126.484714][ T6014] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  126.530036][ T6014] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  126.531074][ T6014] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  126.690317][ T6014] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  126.692011][ T6014] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  126.724399][   T32] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  126.771399][ T6014] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  126.826734][ T6014] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  126.862348][  T825] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  126.925328][   T32] usb 4-1: not running at top speed; connect to a high speed hub
[  126.953539][   T32] usb 4-1: config 129 has an invalid interface number: 24 but max is 2
[  126.953571][   T32] usb 4-1: config 129 has an invalid interface number: 173 but max is 2
[  126.953591][   T32] usb 4-1: config 129 contains an unexpected descriptor of type 0x2, skipping
[  126.953610][   T32] usb 4-1: config 129 has an invalid interface number: 17 but max is 2
[  126.953627][   T32] usb 4-1: config 129 has an invalid interface number: 250 but max is 2
[  126.953644][   T32] usb 4-1: config 129 contains an unexpected descriptor of type 0x2, skipping
[  126.953660][   T32] usb 4-1: config 129 has 4 interfaces, different from the descriptor's value: 3
[  126.953679][   T32] usb 4-1: config 129 has no interface number 0
[  126.953694][   T32] usb 4-1: config 129 has no interface number 1
[  126.953708][   T32] usb 4-1: config 129 has no interface number 2
[  126.953723][   T32] usb 4-1: config 129 has no interface number 3
[  126.953800][   T32] usb 4-1: config 129 interface 24 altsetting 7 endpoint 0x4 has invalid maxpacket 1032, setting to 64
[  126.953828][   T32] usb 4-1: config 129 interface 24 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  126.953853][   T32] usb 4-1: config 129 interface 24 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  126.953875][   T32] usb 4-1: config 129 interface 24 altsetting 7 endpoint 0xB has invalid maxpacket 512, setting to 64
[  126.953899][   T32] usb 4-1: config 129 interface 24 altsetting 7 has a duplicate endpoint with address 0xB, skipping
[  126.953918][   T32] usb 4-1: config 129 interface 24 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  126.953952][   T32] usb 4-1: config 129 interface 173 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  126.953979][   T32] usb 4-1: config 129 interface 173 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  126.954004][   T32] usb 4-1: config 129 interface 173 altsetting 1 has a duplicate endpoint with address 0x8, skipping
[  126.954031][   T32] usb 4-1: config 129 interface 173 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  126.954052][   T32] usb 4-1: config 129 interface 173 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  126.954077][   T32] usb 4-1: config 129 interface 173 altsetting 1 has a duplicate endpoint with address 0x5, skipping
[  126.954243][   T32] usb 4-1: config 129 interface 17 altsetting 2 has a duplicate endpoint with address 0x4, skipping
[  126.954272][   T32] usb 4-1: config 129 interface 17 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  126.954296][   T32] usb 4-1: config 129 interface 17 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  126.954320][   T32] usb 4-1: config 129 interface 17 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  126.954342][   T32] usb 4-1: config 129 interface 17 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  126.954397][   T32] usb 4-1: config 129 interface 17 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  126.954421][   T32] usb 4-1: too many endpoints for config 129 interface 250 altsetting 248: 43, using maximum allowed: 30
[  126.954459][   T32] usb 4-1: config 129 interface 250 altsetting 248 has a duplicate endpoint with address 0xB, skipping
[  126.954480][   T32] usb 4-1: config 129 interface 250 altsetting 248 has a duplicate endpoint with address 0x9, skipping
[  126.954501][   T32] usb 4-1: config 129 interface 250 altsetting 248 endpoint 0xF has an invalid bInterval 215, changing to 4
[  126.954527][   T32] usb 4-1: config 129 interface 250 altsetting 248 endpoint 0xE has an invalid bInterval 165, changing to 4
[  126.954553][   T32] usb 4-1: config 129 interface 250 altsetting 248 has a duplicate endpoint with address 0x6, skipping
[  126.954573][   T32] usb 4-1: config 129 interface 250 altsetting 248 has an invalid descriptor for endpoint zero, skipping
[  126.954592][   T32] usb 4-1: config 129 interface 250 altsetting 248 has a duplicate endpoint with address 0x8, skipping
[  126.954613][   T32] usb 4-1: config 129 interface 250 altsetting 248 has an endpoint descriptor with address 0x6A, changing to 0xA
[  126.954639][   T32] usb 4-1: config 129 interface 250 altsetting 248 has a duplicate endpoint with address 0xA, skipping
[  126.954661][   T32] usb 4-1: config 129 interface 250 altsetting 248 has an invalid descriptor for endpoint zero, skipping
[  126.954681][   T32] usb 4-1: config 129 interface 250 altsetting 248 has a duplicate endpoint with address 0x2, skipping
[  126.954704][   T32] usb 4-1: config 129 interface 250 altsetting 248 has 11 endpoint descriptors, different from the interface descriptor's value: 43
[  126.954728][   T32] usb 4-1: config 129 interface 24 has no altsetting 0
[  126.954744][   T32] usb 4-1: config 129 interface 173 has no altsetting 0
[  126.954761][   T32] usb 4-1: config 129 interface 17 has no altsetting 0
[  126.954778][   T32] usb 4-1: config 129 interface 250 has no altsetting 0
[  126.967711][   T32] usb 4-1: Dual-Role OTG device on HNP port
[  126.968129][   T32] usb 4-1: New USB device found, idVendor=2040, idProduct=b120, bcdDevice=c7.42
[  126.968153][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.968171][   T32] usb 4-1: Product: щ
[  126.968185][   T32] usb 4-1: Manufacturer: 妥嫴봕캨㔪绠閴綸墅倥敟℠ᕄ睁쪴ው醪醚娖ⷒ竨誌귢呟₷혇⋚鋨袅羯궶㔬健㾭킒鮿酈銂物⋐∯砻ꁼ諾睲쓔獥퐷與욉迩풺┏푹橡ꥻ㠯秞ⷓ첫닚専䢧剖㍌鸲鈉腘ὕ᪻촉髄藖緻㧝炵玎ꍳ覐鯷䭏턲⹅︠ᜈ⃹䅎铲㳈〗꒹ﭶ
[  126.968212][   T32] usb 4-1: SerialNumber: syz
[  126.996195][ T6209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.996427][ T6209] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  127.262687][  T825] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  127.262713][  T825] usb 2-1: config 1 has no interface number 0
[  127.262758][  T825] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 415
[  127.341980][  T825] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  127.342007][  T825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.354935][  T825] usb 2-1: Product: syz
[  127.354956][  T825] usb 2-1: Manufacturer: syz
[  127.354969][  T825] usb 2-1: SerialNumber: syz
[  127.642619][ T6212] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  127.680910][  T825] usb 2-1: Error in usbnet_get_endpoints (-22)
[  127.713756][ T6014] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  128.192470][ T5844] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  128.380488][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  128.380533][ T5844] usb 1-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00
[  128.380554][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.486245][ T5844] usb 1-1: config 0 descriptor??
[  128.709907][ T5844] usbhid 1-1:0.0: can't add hid device: -32
[  128.710037][ T5844] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  129.066221][ T6238] syzkaller1: entered promiscuous mode
[  129.066245][ T6238] syzkaller1: entered allmulticast mode
[  129.358714][ T6014] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.609010][ T6242] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  129.610046][ T6242] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  129.954644][ T6014] 8021q: adding VLAN 0 to HW filter on device team0
[  130.034410][ T6242] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  130.049637][ T6242] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  130.117036][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.147797][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.260607][ T6242] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  130.260709][ T6242] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  130.290751][ T6259] 9p: Bad value for 'rfdno'
[  130.291095][  T360] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.291247][  T360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.311884][   T32] usb 4-1: USB disconnect, device number 10
[  130.403044][ T6242] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  130.410525][ T6260] ------------[ cut here ]------------
[  130.410538][ T6260] workqueue: cannot queue hci_rx_work on wq hci0
[  130.410565][ T6260] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd67/0x1010, CPU#0: syz.3.107/6260
[  130.410601][ T6260] Modules linked in:
[  130.410630][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.3.107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  130.410657][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  130.410672][ T6260] RIP: 0010:__queue_work+0xd87/0x1010
[  130.410699][ T6260] Code: 01 00 00 4c 8d 35 e9 f5 21 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 b3 0e a1 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc
[  130.410716][ T6260] RSP: 0018:ffffc900062afb20 EFLAGS: 00010046
[  130.410733][ T6260] RAX: 1ffff1100671e97d RBX: 0000000000000008 RCX: 0000000000080000
[  130.410747][ T6260] RDX: ffff888037903968 RSI: ffffffff8a25efc0 RDI: ffffffff8faf77e0
[  130.410760][ T6260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  130.410770][ T6260] R10: dffffc0000000000 R11: ffffed100671e97b R12: dffffc0000000000
[  130.410782][ T6260] R13: ffff8880338f4be8 R14: ffffffff8faf77e0 R15: ffff888037903968
[  130.410797][ T6260] FS:  00007f6df35fc6c0(0000) GS:ffff888125ccf000(0000) knlGS:0000000000000000
[  130.410814][ T6260] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.410828][ T6260] CR2: 00007f6df35fbff8 CR3: 0000000034afa000 CR4: 00000000003526f0
[  130.410851][ T6260] Call Trace:
[  130.410861][ T6260]  <TASK>
[  130.410875][ T6260]  ? rcu_is_watching+0x15/0xb0
[  130.410900][ T6260]  queue_work_on+0x106/0x1d0
[  130.410929][ T6260]  hci_recv_frame+0x625/0x7c0
[  130.410951][ T6260]  ? skb_pull+0xc1/0x1d0
[  130.410982][ T6260]  vhci_write+0x35a/0x4a0
[  130.411007][ T6260]  vfs_write+0x629/0xba0
[  130.411043][ T6260]  ? __pfx_vfs_write+0x10/0x10
[  130.411072][ T6260]  ? __fget_files+0x2a/0x420
[  130.411100][ T6260]  ksys_write+0x156/0x270
[  130.411126][ T6260]  ? __pfx_ksys_write+0x10/0x10
[  130.411151][ T6260]  ? __pfx_kcov_ioctl+0x10/0x10
[  130.411179][ T6260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.411200][ T6260]  do_syscall_64+0x15f/0xf80
[  130.411220][ T6260]  ? trace_irq_disable+0x3b/0x140
[  130.411245][ T6260]  ? clear_bhb_loop+0x40/0x90
[  130.411271][ T6260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.411290][ T6260] RIP: 0033:0x7f6df53ad60e
[  130.411321][ T6260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  130.411337][ T6260] RSP: 002b:00007f6df35fbfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  130.411356][ T6260] RAX: ffffffffffffffda RBX: 00007f6df35fc6c0 RCX: 00007f6df53ad60e
[  130.411372][ T6260] RDX: 0000000000000022 RSI: 0000200000000040 RDI: 00000000000000ca
[  130.411384][ T6260] RBP: 00007f6df5482d69 R08: 0000000000000000 R09: 0000000000000000
[  130.411397][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.411408][ T6260] R13: 00007f6df5666218 R14: 00007f6df5666180 R15: 00007ffc5de16ff8
[  130.411438][ T6260]  </TASK>
[  130.411452][ T6260] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  130.411467][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.3.107 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  130.411490][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  130.411501][ T6260] Call Trace:
[  130.411508][ T6260]  <TASK>
[  130.411516][ T6260]  vpanic+0x56c/0xa60
[  130.411547][ T6260]  ? __pfx__printk+0x10/0x10
[  130.411567][ T6260]  ? __pfx_vpanic+0x10/0x10
[  130.411593][ T6260]  ? is_bpf_text_address+0x292/0x2b0
[  130.411620][ T6260]  ? is_bpf_text_address+0x26/0x2b0
[  130.411653][ T6260]  panic+0xc5/0xd0
[  130.411675][ T6260]  ? __pfx_panic+0x10/0x10
[  130.411711][ T6260]  __warn+0x315/0x4c0
[  130.411736][ T6260]  ? __queue_work+0xd67/0x1010
[  130.411762][ T6260]  ? __queue_work+0xd67/0x1010
[  130.411786][ T6260]  __report_bug+0x29a/0x540
[  130.411819][ T6260]  ? __queue_work+0xd67/0x1010
[  130.411842][ T6260]  ? __pfx___report_bug+0x10/0x10
[  130.411869][ T6260]  ? __pfx_hci_rx_work+0x10/0x10
[  130.411890][ T6260]  ? vfs_write+0x629/0xba0
[  130.411912][ T6260]  ? ksys_write+0x156/0x270
[  130.411936][ T6260]  ? do_syscall_64+0x15f/0xf80
[  130.411965][ T6260]  ? __lock_acquire+0x6b5/0x2d10
[  130.411999][ T6260]  report_bug_entry+0x19a/0x290
[  130.412030][ T6260]  ? __queue_work+0xd87/0x1010
[  130.412049][ T6260]  ? __queue_work+0xd8c/0x1010
[  130.412070][ T6260]  handle_bug+0xce/0x200
[  130.412091][ T6260]  exc_invalid_op+0x1a/0x50
[  130.412113][ T6260]  asm_exc_invalid_op+0x1a/0x20
[  130.412132][ T6260] RIP: 0010:__queue_work+0xd87/0x1010
[  130.412156][ T6260] Code: 01 00 00 4c 8d 35 e9 f5 21 0e 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 b3 0e a1 00 49 8b 75 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc
[  130.412170][ T6260] RSP: 0018:ffffc900062afb20 EFLAGS: 00010046
[  130.412186][ T6260] RAX: 1ffff1100671e97d RBX: 0000000000000008 RCX: 0000000000080000
[  130.412199][ T6260] RDX: ffff888037903968 RSI: ffffffff8a25efc0 RDI: ffffffff8faf77e0
[  130.412214][ T6260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  130.412226][ T6260] R10: dffffc0000000000 R11: ffffed100671e97b R12: dffffc0000000000
[  130.412239][ T6260] R13: ffff8880338f4be8 R14: ffffffff8faf77e0 R15: ffff888037903968
[  130.412259][ T6260]  ? __pfx_hci_rx_work+0x10/0x10
[  130.412286][ T6260]  ? rcu_is_watching+0x15/0xb0
[  130.412306][ T6260]  queue_work_on+0x106/0x1d0
[  130.412334][ T6260]  hci_recv_frame+0x625/0x7c0
[  130.412353][ T6260]  ? skb_pull+0xc1/0x1d0
[  130.412374][ T6260]  vhci_write+0x35a/0x4a0
[  130.412397][ T6260]  vfs_write+0x629/0xba0
[  130.412428][ T6260]  ? __pfx_vfs_write+0x10/0x10
[  130.412458][ T6260]  ? __fget_files+0x2a/0x420
[  130.412487][ T6260]  ksys_write+0x156/0x270
[  130.412513][ T6260]  ? __pfx_ksys_write+0x10/0x10
[  130.412535][ T6260]  ? __pfx_kcov_ioctl+0x10/0x10
[  130.412564][ T6260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.412584][ T6260]  do_syscall_64+0x15f/0xf80
[  130.412603][ T6260]  ? trace_irq_disable+0x3b/0x140
[  130.412627][ T6260]  ? clear_bhb_loop+0x40/0x90
[  130.412651][ T6260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.412668][ T6260] RIP: 0033:0x7f6df53ad60e
[  130.412685][ T6260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  130.412698][ T6260] RSP: 002b:00007f6df35fbfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  130.412717][ T6260] RAX: ffffffffffffffda RBX: 00007f6df35fc6c0 RCX: 00007f6df53ad60e
[  130.412731][ T6260] RDX: 0000000000000022 RSI: 0000200000000040 RDI: 00000000000000ca
[  130.412744][ T6260] RBP: 00007f6df5482d69 R08: 0000000000000000 R09: 0000000000000000
[  130.412756][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  130.412768][ T6260] R13: 00007f6df5666218 R14: 00007f6df5666180 R15: 00007ffc5de16ff8
[  130.412798][ T6260]  </TASK>
[  130.413452][ T6260] Kernel Offset: disabled