last executing test programs:

5m14.510557315s ago: executing program 1 (id=293):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000300)="b805000000b9032000000f01d965660f38808de0e70000c4217d6f7100652e0fc75cba0fb9430a00000f32b9800000c00f3235002000000f30410f07c744240017010000c7442402cd3810f6ff2c244e0fc76e1c470f32", 0x57}], 0x1, 0x4b, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x43, &(0x7f0000000200)=[{&(0x7f0000000380)=""/86, 0x56}], 0x1}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000005740)=""/4101, 0x1005}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/190, 0xbe}, {&(0x7f0000000140)=""/160, 0xa0}, {&(0x7f0000000340)=""/181, 0xb5}], 0x6}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000700036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r9 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f00000001c0))
sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}]}, 0x50}}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a118000600014002020a600e41b0000900ac00040211000000560012000a00ff030048035c4ce477df0676f9edac91d698b8298c9061c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de61fccd40dd6e4edef3d93452a9247c47870ae1d092665c07a81eaa034c5f9fbb42dd0f98a952c795c0e", 0xd8}], 0x1}, 0x40044)

5m14.214237483s ago: executing program 1 (id=294):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

5m11.142062141s ago: executing program 1 (id=305):
prctl$PR_MCE_KILL_GET(0x22)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x1a, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0xffffffd3, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0)

5m10.9922682s ago: executing program 1 (id=306):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00') (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2000000, 0xc, 0xfeff, 0x18e3, 0x200000001, 0x300000000, 0xfffffffffffffff7, 0xce, 0x2f})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
r1 = syz_clone(0x8400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
ptrace$getregset(0x4212, r1, 0x202, 0x0)
chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x24, r4, 0x21, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x60000}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80) (async)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0xfffffffc, 0x2, 0x6, 0x3, 0x83, "02000000080000000000000000000062fb85d7"}) (async)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x4, 0xfff, 0x1, 0x200141, 0x3, "0915bc1c424ff7b7cd8f42e1ff0aa6905446b3"})
r8 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8)
fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000001240)=0x5)
r9 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0x9) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r7, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x4000) (async)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020126bd7000fedbdf2508000000050037000100000008003c000000000005002d00010000000800310010000000080031000400000008003400080000007e91f58ca12bf4f3fc0bed6be5953bfebc3564140f76a292bb5c54226fb39be7dfb6669066f33bd2ebbac133c35ea45cb3a9ac2b5cc3685677e15d677ef754caaa0874416529c32c23b298c77d79d03ce2a2a1fede9925ab7fcd2847bf60ab2225a3936777ef09e9680a852e83300df7fc21b01df4683273a12dd9c5cd380d55f36575466f29bbb9577dcd7968620c48610b5fcc8ea4d50d51fad5c1bc63ef44e5295b9998"], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040010)
r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
readv(r11, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000240)=""/168, 0xa8}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f00000003c0)=""/140, 0x8c}], 0x4)

5m10.96596134s ago: executing program 1 (id=307):
semctl$IPC_RMID(0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000003d00010710000000000000000300000004"], 0x18}}, 0x880)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)
r3 = syz_open_dev$vim2m(0x0, 0x61, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, 0x0, 0x8000)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602120000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000f6fbdbdf250300000008000c0004000000080009000400000006001b004e22000008001900ac1414aa"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
socket$l2tp(0x2, 0x2, 0x73)
r5 = socket$phonet(0x23, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCPNDELRESOURCE(r5, 0x89ef, &(0x7f0000000140)=0x14dd)
r6 = socket(0x1e, 0x4, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r6, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="eee4", 0x2}], 0x1}}], 0x1, 0x4801)
r8 = dup3(r7, r6, 0x0)
recvmmsg$unix(r8, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000017c0)=""/4090, 0xffa}], 0x1}}], 0x1, 0x18ca02a0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)

5m10.659486652s ago: executing program 1 (id=308):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501800, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'dummy0\x00', @broadcast})

5m10.405043901s ago: executing program 32 (id=308):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x501800, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'dummy0\x00', @broadcast})

3m19.946928811s ago: executing program 4 (id=813):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, @bcast, @rose={'rose', 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a52296c1fbe400f72b51a65927bab48c30c5b8d5d6aed813dce0"], 0x0}, 0x0)

3m18.094267443s ago: executing program 4 (id=819):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "d229b5fc31ba4516b32b5ce6cae16f36"}, 0x11, 0x2)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x42c, 0x3f3, 0x1, 0x70bd2a, 0x25dfdbfd, {0x10, 0x1, 0x3b, [0xff, 0x4, 0x0, 0xc0, 0x7ff, 0x8, 0x5, 0x3, 0x10000, 0x7, 0x4, 0xc0, 0x800, 0x400, 0x8, 0x80, 0x81, 0x8, 0x0, 0xfffffe01, 0xcefa, 0x7, 0x5, 0x4e2571c1, 0x7f, 0x582f1de8, 0x1000, 0x9, 0xa, 0x1ff, 0xfffffff8, 0x9, 0x2, 0x1, 0x1, 0xa, 0x3, 0xffffffd5, 0x8, 0x1, 0x7ff, 0x401, 0x3, 0x1000, 0x4, 0x7f, 0x0, 0x7, 0x5540, 0x7484, 0x5, 0x5, 0x8, 0x1, 0x1, 0x2, 0xdb3, 0xfffffff7, 0x1, 0x9, 0x1f, 0x8, 0x1, 0x226], [0x0, 0x4, 0x2, 0x0, 0x5, 0x4, 0x8a3, 0x401, 0xed7, 0x80000000, 0x2, 0x1, 0x7, 0xd, 0x12c5633c, 0x0, 0x80000001, 0xf, 0xe6c, 0x4, 0x4, 0x3, 0x6ce, 0x4, 0xfffffffa, 0xb07, 0x40, 0x39c, 0x0, 0xf8d7, 0xffffffff, 0x5, 0x2, 0xfffffffc, 0xfffffffb, 0x7, 0x8d, 0x7ff, 0x2, 0x0, 0x1, 0x8, 0x81, 0x7, 0x7, 0x3, 0x8001, 0x4, 0x5, 0x7b0, 0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2e, 0x4, 0x2, 0x9, 0xe, 0x76, 0xcb4, 0x200], [0x7, 0x1, 0x8, 0x67, 0x80000001, 0x5, 0x3ff, 0x2, 0x81, 0x4, 0x1ff, 0x3, 0x3, 0x200, 0x7fff, 0x3, 0x6, 0x8, 0x3, 0x38c90447, 0x2, 0x9, 0x6, 0x4, 0x10001, 0x5, 0x401, 0xffff, 0xfab8, 0x9, 0x2, 0xffffffff, 0x1, 0x4, 0x6, 0x2, 0x9, 0x80000000, 0x8, 0x0, 0xe, 0x1, 0x7, 0x0, 0x8, 0x7, 0x3, 0x8, 0x1, 0xc, 0x7fff, 0x80000001, 0x5, 0x1, 0xfffffff3, 0x4, 0x9, 0x2, 0x0, 0x101, 0x3, 0x8, 0x7, 0x10001], [0x80000000, 0x4, 0x80000001, 0x4107a920, 0x80000000, 0x6, 0x5, 0x5, 0xfffffa67, 0x1, 0x0, 0x7, 0x0, 0x3, 0x9, 0x81, 0x3, 0x9, 0xffffffff, 0x2, 0x8, 0x92c, 0x1, 0x7aa, 0x2, 0xa, 0x5, 0x0, 0x7, 0xbf, 0x100, 0x7fffffff, 0x7, 0xfc35, 0x1, 0x200, 0xffff347b, 0x1, 0xffffffff, 0x9, 0x2130c688, 0x4, 0x1000, 0x1000, 0x53, 0x80000001, 0x0, 0x5, 0x8, 0x7, 0x0, 0xa, 0xd80, 0x0, 0x81, 0x400, 0x4, 0x4, 0x9, 0xfffffbff, 0x901, 0x1ff, 0x9, 0xe5f], 0xa, ['-\xf7\x00', '\x00', '!-@!:\x00']}, ["", "", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000001)
syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_0\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "bf795dfc4d12272e"}]}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "16cfabe5390b6dbf"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000010)
syz_usb_connect(0x1, 0x18e, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0xe4, 0xcc, 0x7, 0xff, 0x1199, 0x6815, 0x256, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17c, 0x2, 0x4a, 0x3, 0x20, 0x1b, [{{0x9, 0x4, 0x26, 0x2, 0x0, 0xa5, 0x1b, 0x8b, 0x6}}, {{0x9, 0x4, 0xc0, 0x4, 0x6, 0x65, 0x98, 0xe0, 0x4, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x9, 0xd, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xff, 0x6, 0xfd, "da299ce7ef89f8"}, @as_header={0x7, 0x24, 0x1, 0x7, 0xfa}, @as_header={0x7, 0x24, 0x1, 0x2, 0xd}]}, @hid_hid={0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xebf}}], [{{0x9, 0x5, 0x4, 0x10, 0x400, 0xd, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xe6, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x9, 0x40, 0x80, [@generic={0x78, 0x21, "1e9c4f8c173edb048be1118e1b7cba65dc154ba5f30bfcd5d3ddc237341c880c022bafdf1dfd1636aefcebb6f84cb55e24d83c528124dfc0a5bd83963d6c4e2bc031102218c2a15439b6735bd9aba3d4c6da6575a885c7f5d5a21a50363c60db6422c04ab276cfa32beed5f6e3be2a2fdea1cf5e943f"}, @generic={0x27, 0x23, "c01b68e2f40fa8e8eed2c159f9f8e6a30022367ca08ae8ae0408c3ab94caee8de189b7e286"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0x1, 0x2, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x1, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x100}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x8, 0x2, 0x3}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x8, 0x4, 0xc0, [@generic={0x50, 0x23, "20d0d2e6395d705ed0d1a67e14b669e709be4dab49c643a8ceabdab9fdf725afbee71a8d22b49aeca9a143cf5db5d4f5e4fa95d5b95d65278077ab3bb66570366721e57f18cc5b2fbc7ba6c269de"}]}}]}}]}}]}}, &(0x7f0000000f00)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x310, 0x3, 0x4, 0x7, 0x20, 0x3}, 0xc5, &(0x7f00000009c0)={0x5, 0xf, 0xc5, 0x6, [@ptm_cap={0x3}, @generic={0x8c, 0x10, 0xb, "0ccd6ca7b43d3f43e60e1891cdfde4855a6273946f0dd06b8e5deafb6badc8268220faa9562575344b76f4d88a60cd231afaf72346a1b8d05cf8028538a2d1b63a531ca1072defff98690cea7880f34c2dec39afa1efdcd4f7a159c043ef7c214a9cdf65a066e9a55ef25b931c6e4454d3572d0b3005e6b0f0a48c3e10d78688f8392e63660051143d"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x3, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x63, 0x4, 0x7f, 0xf00f, 0x8, [0xff0030, 0xc000, 0xf, 0xff0000]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xa, 0x3, 0xdb, 0xce, 0x1, 0x3}]}, 0xa, [{0xb0, &(0x7f0000000ac0)=@string={0xb0, 0x3, "957fd8e85eae356ccccb3a1c222422f08b267a8e220104d47586fa17d0e8d227dbb9fb63e48b744832357dfb0a4f0ccdb96a6d3e1e01cd1b1373df4e47c96718829430c9aeddaa12be6c8eb1d9d5b1ceee637e4400446c6f9c8c312626ec7a14cbc80ad28751968a60fdbb9d51963c9519bcb78305ee2d56018b2d78bfab350ee9cc2ebf213074f881d8ac18ad681a86c1ef31d65a34f194695f6383c03b29b68f3caa1fc9f319c787b4087b01fb"}}, {0x1c, &(0x7f0000000b80)=@string={0x1c, 0x3, "f087b007dfba0da1a57c40887201f0246e437bfcd029fd0cc72b"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x418}}, {0x100, &(0x7f0000000c00)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x414}}, {0xa4, &(0x7f0000000e40)=@string={0xa4, 0x3, "ec4e97f6477d76290f07fd9a9f6cdbc0463a6f9715eaeb57e01420a4837c938b64aa0e67b090690b42dc2e23db37af343a50f35a767ccc41b6d31bccec3a58a6ae2cc72b745b1142e2caac78f8d83b22fd1952247bb0d790ee7d0410a94481a802dd1f1581a7d41b3de1e7b7897b779866d686d61a6c19a8a575880581778ba9a40779bb017bb733a897b980be507718354842ba4a0e2c7cfaf9357994107dc280ed"}}]})
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001040)=@get={0x1, &(0x7f0000000fc0)=""/90, 0x3})
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
r5 = accept$packet(r4, 0x0, &(0x7f00000010c0))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x50, r4, 0x94871000)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
close(r0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001100)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000001200)=0xe8)
quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000302, r6, 0x0)
recvfrom$inet_nvme(r4, &(0x7f0000001240)=""/161, 0xa1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x402200, 0x0)
r7 = socket$inet6_sctp(0xa, 0x4, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000001340)=0x4, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001380)={<r8=>r5})
r9 = accept4(r8, &(0x7f00000013c0)=@in={0x2, 0x0, @local}, &(0x7f0000001440)=0x80, 0xc00)
setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000001500)={@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @empty}, 0x3, 0x4, 0x3, 0x4}}, {&(0x7f0000001480)=""/46, 0x2e}, &(0x7f00000014c0), 0x1d}, 0xa0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r9)
sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0xc1000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x2c, r10, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xfffffff8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000040)
r11 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000001700)={r8})
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000001c40)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c00)={&(0x7f0000001780)={0x450, 0x3f4, 0x400, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x35, [0xadc, 0x6, 0x4, 0x6, 0x4, 0xc, 0xe, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x2, 0x3, 0xc, 0x3, 0x5, 0x40, 0x2, 0xa, 0xfffffff7, 0x8001, 0xff, 0x9, 0x916, 0x9, 0xfffff57d, 0xc, 0x6, 0x6, 0x7, 0x1, 0x101, 0x7, 0x1, 0x5, 0x5, 0x0, 0x3, 0x5, 0x40, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x10000, 0x81, 0x1, 0x9, 0xaf7a, 0x800, 0x9, 0x1, 0xe, 0x3, 0x400, 0x7f, 0x62ee, 0x8, 0x2], [0xf, 0xf1, 0x3, 0x6, 0x6, 0xa, 0x6, 0x9, 0xfffffff8, 0x9, 0x0, 0x5, 0x10, 0x2, 0x4d3e, 0x9, 0x5, 0x2, 0xfffeffff, 0x8, 0xcd7, 0x9, 0x8, 0x1ff, 0x5, 0x5, 0x0, 0x1, 0xe8b, 0x7, 0x6, 0x2, 0xe, 0x2, 0x1f7, 0x9, 0x8, 0x0, 0x5, 0xffff, 0x531, 0xfff, 0x3, 0x10001, 0x5, 0x3, 0xd6, 0xfff, 0x80000000, 0x4, 0x9, 0x3, 0x101, 0x4, 0x8001, 0x81, 0x623d, 0x5, 0xd, 0x1, 0x80, 0x7, 0x6, 0x6], [0x5, 0x100, 0x7f, 0x401, 0x6b1e, 0x1, 0xb56, 0x3, 0x3a, 0xf1, 0x1, 0x3, 0xfffffff8, 0x100, 0x6, 0x2, 0x4, 0x8001, 0x4, 0x1, 0x7, 0x1, 0xcc8, 0x4, 0x3, 0x5, 0x8d0, 0x8, 0x1, 0x7, 0x8, 0x7, 0xffff067d, 0x0, 0x2, 0x7, 0x1, 0x1, 0x6f, 0x3, 0x0, 0x6, 0xd45, 0xd, 0x9, 0x101, 0x9, 0x8b, 0x44d9, 0x1a, 0x19df1e2a, 0x9, 0x4, 0x51, 0x8, 0x4, 0x9, 0x3, 0x4abf, 0x2, 0x48, 0x0, 0x79ed, 0x7f], [0x8, 0x2, 0x103, 0x1, 0x4, 0x7, 0xffffffc0, 0x80000000, 0x7, 0xfffffffb, 0xd, 0x3, 0x8a0, 0x9, 0xb, 0x81, 0x9, 0x3, 0xb, 0x419a6448, 0x7, 0xe5, 0x10, 0x7fffffff, 0x4d61, 0x54f5, 0x1e, 0x4, 0x2, 0x8000, 0x6, 0xffff, 0x656, 0x7fe6, 0xfffffff9, 0x3, 0x81, 0x7fff, 0x8, 0x7fff, 0x9, 0x1000, 0x5, 0x9, 0xfffffffb, 0x3, 0xfff, 0xe, 0x7, 0x8, 0x0, 0x1, 0x2, 0x5, 0x1, 0x9, 0x80000000, 0x7fff, 0x80, 0xffffffaa, 0x8, 0x80000000, 0x0, 0x1], 0x2e, ['#r.(\x00', '\xda((*&-\x00', 'bridge_slave_0\x00', '/dev/kvm\x00', '\x00', '+\x00', '[9..\x8d*\x00']}, ["", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x40}, 0x4040081)

3m15.033691731s ago: executing program 4 (id=840):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) (fail_nth: 3)
syz_emit_vhci(0x0, 0x0)

3m14.46298143s ago: executing program 4 (id=843):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x2, 0x10000b, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000440)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000040)="96b414bbbcc9", 0x6}], 0x2}, 0x24048004)

3m14.385803455s ago: executing program 4 (id=845):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/53, 0x3ff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)
syz_emit_vhci(0x0, 0x0)

3m14.148319907s ago: executing program 4 (id=848):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x82c81, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)='C', 0x1}, {&(0x7f0000000240)="0762f065e4", 0x5}], 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b01, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x82c81, 0x0) (async)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)='C', 0x1}, {&(0x7f0000000240)="0762f065e4", 0x5}], 0x2) (async)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[]) (async)

2m58.984908216s ago: executing program 33 (id=848):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x82c81, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)='C', 0x1}, {&(0x7f0000000240)="0762f065e4", 0x5}], 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b01, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x82c81, 0x0) (async)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)='C', 0x1}, {&(0x7f0000000240)="0762f065e4", 0x5}], 0x2) (async)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[]) (async)

2m43.528156584s ago: executing program 3 (id=1004):
ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})

2m43.388321309s ago: executing program 3 (id=1005):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0x5, {0x5, 0x4, "2b7f25"}}, 0x0, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f00000008c0)={0x84, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xc}, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x200, 0x40, [0xf00]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3fc0}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'yp'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "cc32"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', '', [{}, {0x20, 'netwpzio.prioid[\x00|\x1aN\x18v\xe9\xe3\x13B\xa4\x92\xd3\x9a\'Y\xab\x9c7\x03T\xd6\xd2\xb4\x92\xd1\x86\r]\'\x9a|i\x9a\xa3%\xa8\x1ag\x1c1\x91\x80J\xf5\xd8\xc7\xdfH\x8a9\x1dA\x1d\x9cr\x10\xbb;\x82'}, {0x20, 'net_prio.prioidx\x00'}], 0xa, "6096b5c7e88226994e9969966c201bbcec83e161559753455efa03ffa9"}, 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8)

2m42.780356442s ago: executing program 3 (id=1006):
timer_create(0x3, 0x0, &(0x7f0000000080))
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
rt_sigaction(0xe, &(0x7f0000000300)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x18000002, 0x0, {[0xffffffffffff7fff]}}, 0x0, 0x8, &(0x7f0000000280))
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000dc3906010300000000000000000a00000805000100070000000500010007000000090900020073797a3100000000000000000000000000000042d6555006b2a1de87a4547032731cdece523297ee4d45a3e89121c9f84959f6324d4dd97ffd9c9aa526e285a341c0680b597bdb57be93c9e0b1400e6f876b76bc8e0bac581773c4c63021bb36c1624deca3c42b28c4de98f0989957ca57f7198705c4"], 0x3c}, 0x1, 0x0, 0x0, 0x20004040}, 0xc058011)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x20004880)

2m41.732798465s ago: executing program 3 (id=1007):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x692281, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, <r2=>0xffffffffffffffff}) (async)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={<r3=>0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r6=>0x0})
sendto$packet(r4, &(0x7f0000000040)="3f031c000302140006001e008900000088a8", 0x12, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r6, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) (async)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000002c0)={r3, 0x3}) (async)
r7 = socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000400)="73c63fe646582d8620c89b3ce82df028489648842f4418cbb1ca3ad517693919f15b96af3962436be4c2d785745da2937d7e99f320af3fb89f9def74fc4a357279b37f86d97796207a162576bb61aa2eb2ee96fe13070302c9472d08af7ba3df4df4298b7d8e16e7f9b292dd929cb662837f58785bab35e4b2e94a8cfe3ff5b47535647e117c93abc36a5f42f2e01fca0240643028a86e9f587b3d6aa9f1e108f77d95b64613315966ec37287d", 0xad, r7}, 0x68)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async)
setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f00000001c0)=0x400, 0x4)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) (async)
sendmmsg$inet(r8, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0xfe3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000025c0), 0x1}}], 0x4, 0x608d8d0)
r9 = socket$kcm(0xa, 0x922000000003, 0x11)
r10 = socket$kcm(0x10, 0x2, 0x4) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_UPDATE_FT_IES(r11, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="80010000", @ANYRES16=r12, @ANYBLOB="08002dbd7000fbdbdf2560000000ce71fff6", @ANYRES32=r13, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
connect(r9, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x1}, 0x80)
sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) (async)
r14 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r14, 0x8028640c, &(0x7f0000000080)={0xa000006, 0x0, 0x0, 0x1, 0x6})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})

2m41.432156459s ago: executing program 3 (id=1009):
syz_open_dev$tty20(0xc, 0x4, 0x1)
socket(0x2c, 0xa, 0x3)
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="010326bd6000000000002d"], 0x20}}, 0x20040814)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000001240)={0xfe, "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"})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="d8bfa84cbe5a104cc07a221577752d5629f7f8239218e227c43c75018f24f1bb60", 0x21)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x3c}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x8}}}, 0x24}}, 0x2008815)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="62af263ea3c1befb3bd81deb2fc1cacaa4d2f3c7d8ed578a43f7c4bb44173641f1fd8524ba1d6678d41a89626989170aadb2c8de3262863630637e1f80b2b4b51ee58b9299e10879e5e7cf131a96d45102b25ddcd1a9c1396236f8a9e1be48f3df174a31122fc89187100d16d31e65e68a314119e411a442d36d25fa1a910a16926bbe70937af1a2daffcd5c3a62c21741d80998ec5bdc21609f993fe686eab92a3d9509e824ba65d8ca5a278c2daaa30bae078462870b37ea7868c8f4793a95dfe47a9c60ea83231e51dda3ae07e726e228a4b101565798f3c4d0633da550910f4615720e9ca37e6f3e77bb52ae52a1312724d2f1a641", 0xf7}], 0x1, 0x9)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x149882, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000010a010100000080000000000a00000408000a40ff"], 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050)
connect$phonet_pipe(r6, &(0x7f0000000840)={0x23, 0x9, 0x7, 0x3}, 0x10)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000094}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_open_dev$sndctrl(&(0x7f0000000700), 0x8001, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYRES32=r7], 0x6f4}}, 0x0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x181100, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)=0x7ffd)

2m40.978892604s ago: executing program 3 (id=1011):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
r2 = dup(r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x730)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x1d}]}, 0x14}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$NBD_DO_IT(r0, 0xab03)
futex_waitv(&(0x7f0000000b40)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000f80), 0x0)

2m24.851987036s ago: executing program 34 (id=1011):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
r2 = dup(r1)
ioctl$NBD_SET_SOCK(r0, 0xab00, r2)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x730)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x14, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x1d}]}, 0x14}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$NBD_DO_IT(r0, 0xab03)
futex_waitv(&(0x7f0000000b40)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000f80), 0x0)

6.048057131s ago: executing program 0 (id=1760):
r0 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_ep_read(r1, 0x6, 0x90, &(0x7f0000000000)=""/144)
syz_usb_ep_read(r1, 0xa, 0x1c, &(0x7f00000000c0)=""/28)
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x2, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x41, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0x9, 0xa2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x2}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x131, 0x5, 0x2, 0xa0, 0x20, 0x8}, 0x5a, &(0x7f0000000180)={0x5, 0xf, 0x5a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xff, 0x67, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0x44, 0x4, 0x101, 0xf000, 0x0, [0xff000f, 0xffffc0, 0xff0000, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x1, 0x8, 0x4}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x5, 0x0, 0xc, [0xff0000, 0xf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x4, 0x40, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x7, 0xb4af}]}, 0x6, [{0x40, &(0x7f0000000200)=@string={0x40, 0x3, "6c0e1f8261ef4f91656ed935bb167ba9581f62c159ea194985584fe1ebf2b08058e3ffe1936506e3df24cd878f700c6b73e4684032bebdb13b71916eee34"}}, {0x49, &(0x7f0000000240)=@string={0x49, 0x3, "5699a9e90c8ca5584e1dba3947a69d010462d77f169e08938ca560dae1017f2b74eecc031e8c78bb304c7e341f8be2089a938ac55b7ce5af3101ceaa0d1c86d7d6b88b18221624"}}, {0xf4, &(0x7f00000002c0)=@string={0xf4, 0x3, "ddf545ef03af83f47c76a25008fd2fb1eebe17bda409e7a1fdaab3dbdd432a3a3dbd13c5a11407029d48ae675d8eae4e3cb19423f83086c4c6a43a1cc38bc969f4b385f18781abb8f81cb85181ab8afe97258affd865db569efcf3aa599a85b95dd447ff60585517ff1f4524e79c341b36b3e5a7ce61008a38a56858c82df9f6a8d3d0fccd8119e32da0ed94fbba09f8b1ce6c472c5ca9a1efed7ea22a06b4ecb51b3cacdba00a8c27494b695af453961c2f0dcdd4ed4076b96ea15b93a239eb663bc31b8c24a181757c9f9c5990a7955192a0282a270ce7c64a19959e8c644085adb540800e02d78cc71df7f889b45b35cd"}}, {0xdd, &(0x7f00000003c0)=@string={0xdd, 0x3, "fa4d756b717c825b28cb9f682238f89ba3982c0a8262bb46b007e8d839e883d463679f15d84c3029811928fced68b34348be5e0eca8278ca23681421ebe28ed5fda9c0ac60b776a9264b4aa24eaee4e59a771dc4084339027313f6a155ce7e4f44d8eeba0fb8a257f15f6f90b7c3b78e42035b730c738bbb72448a1d3c653f4738f1ddf3baaea57f985900250ec71ef1b1f0614dd6269f497486c2042804668e4eea9f9b2504f776d4ad8fcf038da3f01c10ecb0944f78d1807857d7016bc1b356263a260308620f43bf2bc4a82e540a5e432b823ab97795bd5774"}}, {0xa6, &(0x7f00000004c0)=@string={0xa6, 0x3, "32e6e455d4586f0b50ed70f462821441556c1e9afa80903ce49968ac97d4e615e5b7b094a58669951fcf1a36ee1a1bfcd336bf07da60b07ed9a80737bfbbe1e2a72f3e85589f1df58d56a5eadd9bc003ea016f33a17dac0b0a83985471dc34b762d4371a3f1700ace9af4b1dbb7e6c53317a8e6fdd628521b642d22179073afc08b09c9a9bc708f7e06959e5a4045172ccbb7b3fc30ce85346b0762d34c1aa598cedb736"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x807}}]})

4.920053395s ago: executing program 6 (id=1767):
set_mempolicy(0x6, &(0x7f00000003c0)=0xb, 0xe3)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000002600)=ANY=[@ANYBLOB="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"/324], 0x144}}, 0x20000010)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000000))
syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xce, 0x30, 0xe5, 0x40, 0x61d, 0xc170, 0xe559, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc4, 0x9, 0x0, 0xf6, 0xae, 0x21, 0x40}}]}}]}}, 0x0)
sendmsg$rds(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
r5 = socket$phonet(0x23, 0x2, 0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d", 0x12}], 0x1}, 0x24004880)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0)
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020)
sendmsg$tipc(r6, &(0x7f0000000400)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="8fcb21fce1731a99cd0fd33157ae19a3385cd177ded93486fe93f96d7064b7b0f61b56c5fc9a8c6c76b97e77c7d77dda056a436ef7d54e6052c83ae15ed8ca1248984f30ace1185227ac23189fbf8345d667f8f2bbc8e26e8f44b2eda3785741439f8e15d233641f3cc820516f4b4aa61b958e8bf7a6bdabfc16361e", 0x7c}, {&(0x7f0000000300)="263d49ae1d977eba53b0b7394f5ddb24b4077ac45285753adec63e7315cf51217532aa51aff82165bef618e7829d6d6bf671665b1fc20763dc3cbdd440ec48597481875a02ed228c0d5a5646ac252589553b0507f09eccfefce6dc9d77aa0f569d62ce8f36f7317bc6266e01ee35a76055e23bfde22489", 0x77}], 0x2, 0x0, 0x0, 0x8000}, 0x2000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100))

4.547132283s ago: executing program 2 (id=1770):
r0 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="97", 0x1}], 0x1, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000700)={0x0, 0x1})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r5})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=@newspdinfo={0x1c, 0x24, 0x200, 0x70bd29, 0x25dfdbfd, 0x401, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
connect$802154_dgram(r10, &(0x7f0000000580)={0x24, @short={0x2, 0x1}}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000003c0)={'tunl0\x00', <r11=>0x0, 0x8000, 0x40, 0x0, 0x5, {{0x21, 0x4, 0x2, 0x38, 0x84, 0x65, 0x0, 0x10, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x86, [@multicast1]}, @rr={0x7, 0x1b, 0x1d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, @multicast2, @multicast1, @multicast1]}, @cipso={0x86, 0x4b, 0x1, [{0x7, 0x11, "5696bbf4ea66d1ac1f61fe1f285c3f"}, {0x5, 0xd, "19687c14b8ef8d5d125963"}, {0x5, 0x7, "463e344e97"}, {0x0, 0x10, "03196db3a98999ae4a8aee77244e"}, {0x7, 0x10, "334545149df0c6a1e1a45fbff439"}]}]}}}}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x6000)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x3, 0xa, 0xabc87e1b3f7b9bd9, 0xa0, 0x11, r11, r12}, {0xfffffffffffeffff, 0x2, 0x0, 0x7, 0x800, 0x8, 0xc, 0x2}, {0x85, 0x1000, 0x2}, 0x10001, 0x6e6bb7, 0x3, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x3, 0x3, 0x0, 0x401, 0x0, 0x5}}, 0xe8)
write$sequencer(r7, &(0x7f00000005c0)=[@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}, @l={0x92, 0x0, 0xd0}], 0x10)
sendmmsg(r6, &(0x7f0000001880)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x3, @multicast, 'rose0\x00'}}, 0x80, 0x0}}], 0x1, 0x24048090)

4.509099036s ago: executing program 2 (id=1771):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
r0 = socket$nl_route(0x10, 0x3, 0x0)
readv(r0, &(0x7f00000011c0)=[{}, {&(0x7f0000001280)=""/163, 0xa3}, {&(0x7f0000001340)=""/4112, 0x1010}, {&(0x7f0000001180)=""/50, 0x32}], 0x4)
r1 = socket(0x2, 0x80805, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', '', [{}, {0x20, 'netwpzio.prioid[\x00|\x1aN\x18v\xe9\xe3\x13B\xa4\x92\xd3\x9a\'Y\xab\x9c7\x03T\xd6\xd2\xb4\x92\xd1\x86\r]\'\x9a|i\x9a\xa3%\xa8\x1ag\x1c1\x91\x80J\xf5\xd8\xc7\xdfH\x8a9\x1dA\x1d\x9cr\x10\xbb;\x82'}, {0x20, 'net_prio.prioidx\x00'}], 0xa, "6096b5c7e88226994e9969966c201bbcec83e161559753455efa03ffa9"}, 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x422601, 0x0)
ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000001240))

3.611165707s ago: executing program 6 (id=1778):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd2d, 0x5, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040040}, 0x40000)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xd1e}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x4040) (async)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xd1e}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x4040)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x2c}}, 0x8000001)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x40001)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r5, 0x10, 0x70bd28, 0xace, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa004881}, 0x8011)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, r2, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000b40)={0x0, &(0x7f0000000880)=[@rdmsr={0x32, 0x18, {0xc1}}, @wrmsr={0x1e, 0x20, {0xb99, 0x5}}, @wrmsr={0x1e, 0x20, {0xa54, 0x9}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x7}}, @wr_crn={0x46, 0x20, {0x3, 0x66f4}}, @rdmsr={0x32, 0x18, {0x380}}, @uexit={0x0, 0x18, 0xd8a}, @code={0xa, 0x5a, {"40d9d067f3460f6fe7c44161e2d8c74424006fb297e2c744240232230432c7442406000000000f01142466660fd2d3b9bf0800000f322626420f4078fe0f01c4360f0d640c4af30f09"}}, @code={0xa, 0x49, {"64450f20860f017dcbb805000000b9006800000f01d9440f01cb0f060f35b97c0300000f32b8010000000f01c10f79c6f30f5892a7490000"}}, @uexit={0x0, 0x18}, @cpuid={0x14, 0x18, {0x3ff, 0x7}}, @wr_crn={0x46, 0x20, {0x4, 0x4278}}, @wr_crn={0x46, 0x20, {0x4, 0x7fffffff}}, @cpuid={0x14, 0x18, {0x80000000, 0x8}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x2, 0xa9}}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x3, 0x4}}, @uexit={0x0, 0x18, 0x9}], 0x293}) (async)
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000b40)={0x0, &(0x7f0000000880)=[@rdmsr={0x32, 0x18, {0xc1}}, @wrmsr={0x1e, 0x20, {0xb99, 0x5}}, @wrmsr={0x1e, 0x20, {0xa54, 0x9}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x7}}, @wr_crn={0x46, 0x20, {0x3, 0x66f4}}, @rdmsr={0x32, 0x18, {0x380}}, @uexit={0x0, 0x18, 0xd8a}, @code={0xa, 0x5a, {"40d9d067f3460f6fe7c44161e2d8c74424006fb297e2c744240232230432c7442406000000000f01142466660fd2d3b9bf0800000f322626420f4078fe0f01c4360f0d640c4af30f09"}}, @code={0xa, 0x49, {"64450f20860f017dcbb805000000b9006800000f01d9440f01cb0f060f35b97c0300000f32b8010000000f01c10f79c6f30f5892a7490000"}}, @uexit={0x0, 0x18}, @cpuid={0x14, 0x18, {0x3ff, 0x7}}, @wr_crn={0x46, 0x20, {0x4, 0x4278}}, @wr_crn={0x46, 0x20, {0x4, 0x7fffffff}}, @cpuid={0x14, 0x18, {0x80000000, 0x8}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x2, 0xa9}}, @wr_crn={0x46, 0x20, {0x3, 0x1}}, @cpuid={0x14, 0x18, {0x3, 0x4}}, @uexit={0x0, 0x18, 0x9}], 0x293})
ioctl$KVM_RUN(r7, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r8, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0xc3cbad3248287c12}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xd0, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4ee896b4}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x1222}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x40}, {0x5}}]}, 0xd0}}, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r8) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r8)
sendmsg$NL80211_CMD_GET_SURVEY(r8, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r9, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0000a0}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x110, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xdfa, 0x7}}}}, [@chandef_params, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f06ab4220fdc"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db048fa085f077430f98658a49"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8d1a939a8a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2ee859a335"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}], @key_params=[@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d3b7ae8100c40e6217b290dc92"}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "552c254954e98d15a6cbf57b5d"}]]}, 0x110}, 0x1, 0x0, 0x0, 0x4004}, 0x4040810) (async)
sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x110, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xdfa, 0x7}}}}, [@chandef_params, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @random="f06ab4220fdc"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "db048fa085f077430f98658a49"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8d1a939a8a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2ee859a335"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}], @key_params=[@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d3b7ae8100c40e6217b290dc92"}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "552c254954e98d15a6cbf57b5d"}]]}, 0x110}, 0x1, 0x0, 0x0, 0x4004}, 0x4040810)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={{0x14}, [@NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r9, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8805}, 0x20000000) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r9, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8805}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001300)={{0x1, 0x1, 0x18, <r12=>r8, {0x7}}, './file0\x00'})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000001340)={0xc, <r13=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r12, 0x3b82, &(0x7f00000013c0)={0x18, r13, 0x2, 0x0, &(0x7f0000001380)=[{0xe, 0x1}, {0x0, 0x3}]}) (async)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r12, 0x3b82, &(0x7f00000013c0)={0x18, r13, 0x2, 0x0, &(0x7f0000001380)=[{0xe, 0x1}, {0x0, 0x3}]})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r12, 0x6612)
ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f0000001400))

3.571337179s ago: executing program 6 (id=1779):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x26)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000240)=0x8)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

3.457651015s ago: executing program 2 (id=1780):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0x5, {0x5, 0x4, "2b7f25"}}, 0x0, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f00000008c0)={0x84, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xc}, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x200, 0x40, [0xf00]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3fc0}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'yp'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "cc32"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [{}, {0x20, 'netwpzio.prioid[\x00|\x1aN\x18v\xe9\xe3\x13B\xa4\x92\xd3\x9a\'Y\xab\x9c7\x03T\xd6\xd2\xb4\x92\xd1\x86\r]\'\x9a|i\x9a\xa3%\xa8\x1ag\x1c1\x91\x80J\xf5\xd8\xc7\xdfH\x8a9\x1dA\x1d\x9cr\x10\xbb;\x82'}, {0x20, 'net_prio.prioidx\x00'}], 0xa, "6096b5c7e88226994e9969966c201bbcec83e161559753455efa03ffa9"}, 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8)

3.453846465s ago: executing program 6 (id=1781):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="f081550100a000000f0100180045000fbe252e8a094d36420f705626002e660f3a176a4bbdb9800000c00f20c035100000000f22c067420f01c30f5966baf80cb8c087678eef66bac60ced45c194710a000000058a3bc6827dbcae009008f2", 0x5f}], 0xaaaaaaaaaaaad8e, 0xe, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x61, &(0x7f0000000100)=[@cr4={0x1, 0x210be3}], 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000000)="2e000000010002", 0x7)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r8 = semget(0x0, 0x1, 0x55)
semctl$GETALL(r8, 0x0, 0xd, &(0x7f0000000040)=""/86)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.28995238s ago: executing program 6 (id=1782):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2481000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)={0xc0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6b05}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000000000b0000040"])
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_SET_NOTIFY(r4, 0x7cb, &(0x7f0000000100)={0x100000000, 0x10000, 0x5})
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xff06, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x7, &(0x7f0000002400)=<r8=>0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}])
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/74, 0x4a}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

3.12188945s ago: executing program 6 (id=1783):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="120100008cbd7f209904f4cdee78010203010000010001100010000904130001ff06d20005240600010524009a830d240f0100000000060091008106241a00000804240200090505030800090905"], 0x0)

2.794418653s ago: executing program 0 (id=1785):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x8a, 0x76, 0x88, 0x40, 0x1776, 0x501c, 0xf10d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x10, 0x4, [{{0x9, 0x4, 0xee, 0x1, 0x0, 0x5e, 0x10, 0x4e, 0x5}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x34, 0x83, {0x83, 0xb, "e23c955ee01788b67d18bb847058b231d398ed799a1fd924d2020afbd4ebcfa9899861933a8393bea0f938fcae278c50d89e8ea813d8201fe4f04d19fa438eb1774dd8727acfe5fca08af0ad9aac0f07e1f3482bf21835891e8e3fef43d48dd100d68ff23a653ba71e5a509f278e7df24238881649857ad2ba82f8df25a7c0cf4f"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc04}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x40, 0x30, 0x45, "f1d704fce8415cc692f466d39443e9a4359004b6225bd6df4cafcc04400a9143d95573f9bd888d838ae85a36a36a12e29c22e38ee283d15781a8f0d5ff775b5925fd145993"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0x20, 0x81, 0x1, "c6"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "016b"}, &(0x7f0000000300)={0x20, 0x83, 0x1, '\"'}, &(0x7f0000000340)={0x20, 0x84, 0x3, "1458fb"}, &(0x7f0000000380)={0x20, 0x85, 0xfffffffffffffd12, "2e0b12"}})

1.532815716s ago: executing program 2 (id=1792):
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x77)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0xdd)
truncate(&(0x7f00000000c0)='./bus\x00', 0x9471)
lsetxattr$security_ima(&(0x7f0000000080)='./bus\x00', &(0x7f0000000040), &(0x7f0000000000)=@sha1={0x1, "e4912e9587bfec964d1de6d9cd5dfc0997674727"}, 0x15, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x59}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080)
dup3(r1, r0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400ffbffcdbdf25027c0000000000800a0000"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r5)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
finit_module(r1, 0x0, 0x0)

1.408431322s ago: executing program 2 (id=1793):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x4030408, 0x0, 0xb0ee, 0x100, 0x0, 0x0, 0x0, 0x10, 0x8}}, 0x50)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000001680)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r1, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000700001"], 0x18}], 0x1}, 0x0)

1.38756882s ago: executing program 2 (id=1795):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x101000)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)}], 0x1}}], 0x1, 0xc0)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="4a7a7caf0f0690713cee8b2dc3f1ce1852407a6a8a426097297d5431c998c929bd7d5d1bd75e37be9cfb9c5873daf8aa67a81f6715e496c22c2269ce035e6647f103686f71f3de947988b7d876e0641cce3d48723b6429a95d60532fc9fcfb33e60444129c10d39754a551ecd534eda25f81c893d25975948dfcc14e7e8ee07838c2656cee26924b914044a705c3058764cebe19b9d7f8f87b17b09f0c"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24004040)
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000080)="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", 0x1f5d7363fb9df849, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000020c0)={0x0, @in6={{0xa, 0x4e23, 0xc2a, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0xde3, 0x1000}, &(0x7f0000002180)=0x90)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xbe5, &(0x7f00000000c0)=ANY=[])

1.107685518s ago: executing program 0 (id=1798):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x4bfa, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x8b100a, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r2, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x43, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x24000044)
umount2(&(0x7f0000000280)='./file0/../file0\x00', 0xa)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000002b00070129bd700000000000017ca80000080001806704a1"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

1.021521958s ago: executing program 0 (id=1799):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xb85, 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
socket(0x2, 0x80805, 0x0) (async)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x3}, 0x8)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0x4}, &(0x7f0000000080)=0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005440), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000005440), r0)

916.503585ms ago: executing program 0 (id=1800):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x24, 0x0, 0x100, 0xfffffffd, 0x4, {0x10}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004095}, 0x24044890) (async)
r0 = syz_open_dev$video4linux(&(0x7f0000000340), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x7})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000", 0x17}], 0x1}, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0)

911.183121ms ago: executing program 0 (id=1801):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x40, 0x2, 0x5, {0x5, 0x4, "2b7f25"}}, 0x0, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f00000008c0)={0x84, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xc}, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x200, 0x40, [0xf00]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x3fc0}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'yp'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "cc32"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x1e, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x4}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0xd2859f99480e5041}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [{}, {0x20, 'netwpzio.prioid[\x00|\x1aN\x18v\xe9\xe3\x13B\xa4\x92\xd3\x9a\'Y\xab\x9c7\x03T\xd6\xd2\xb4\x92\xd1\x86\r]\'\x9a|i\x9a\xa3%\xa8\x1ag\x1c1\x91\x80J\xf5\xd8\xc7\xdfH\x8a9\x1dA\x1d\x9cr\x10\xbb;\x82'}, {0x20, 'net_prio.prioidx\x00'}], 0xa, "6096b5c7e88226994e9969966c201bbcec83e161559753455efa03ffa9"}, 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8)

713.136506ms ago: executing program 5 (id=1802):
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x1)
syz_clone(0x10002c00, &(0x7f0000000000)="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", 0x1000, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="6fe237ade0dc73eaaba58ce132e459942d39ae21a3271488b46faf3d04efa33c05d4243ed31cfe28dd33e06a08a48ec074a7fbeb")
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
tee(r0, r0, 0x7, 0xc)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0xfff)
r1 = syz_open_dev$vcsu(&(0x7f0000001100), 0x3, 0x1)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001140)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64)
syz_open_procfs$userns(0x0, &(0x7f0000001180))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000011c0)={<r4=>0xffffffffffffffff})
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000001200)={0x52, 0x7d, 0x2, {0x0, 0x4b, 0x8, 0x5, {0x1, 0x2, 0x2}, 0x10000, 0x4, 0x8, 0x7ff, 0x8, 'ns/user\x00', 0x7, '&\xa1$[\\:{', 0x1, '.', 0x8, 'ns/user\x00'}}, 0x52)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001300)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r5, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x40000)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001400)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1})
sendmsg$inet(r3, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001440)="fdf313ad8e75efd94edab89f31aeb03a7f16b470dacc087a25e552afe3cd5b2ba7e0c4332d93850b7721f0f58e05b27417781fb9334cbcd3fd6a81d7dafd40edcc7093a17d2287f390a289eaadb0b9ec3c0ee648d02c0fcbfbda03d560838f87b7193b21279a60cb9f8f8f6c6072b94c9cbbc0e2ef3b4a5e8e5225f3188ca71b502134848b7ba7371c77faf51077b5ea9185cf458fff2b3d34a283de0194be7cd266dc8fd51e54f2549b94aa2fdfec87a09938ac3ed55f88eb32917e3801ce0d2d6882d01038d0abb1a4aa66c07e067360fe1d1d98c82326c5bd5b2a96f79ed36ae7e0dfcda3f1139c4c", 0xea}, {&(0x7f0000001540)="b2bf15818400cd54108d7c86c8b0bfa3ae399521036bf129d13019b13bea074d183b412df979bba961c5d109fc7671d4ef237df40ab6fbebdeaad27d5365de3271b71a88fa0ecf6af8b9a4dc11343551f29ee4bed58e2a6c22d3", 0x5a}, {&(0x7f00000015c0)="9f84fe3ef3db0b104d7f6ce321fc8acd4401da71e0a0fc8df61f97c8f0dd6d67e7a7e1b9ba9bd77ed3728c065cb05a38eaf1af3d7def325b4668031989b2e0d2d9c3e46f8516092114b561b3a85c538f", 0x50}, {&(0x7f0000001640)="8f1406ed713bbfe894a33a878fbbf7cc3f8080c618e77dd20a3fd654d3e0e94b7a2f66888f39e431a4850ff98ef3611e08c254ddbfc86588f527c9b7a2571bbba33c50af7a05ba97ac99fd2be61aee4ed0c234a1840edf36844cf3aa96f6a98e9c17d0a1a237a0d32f71f971197e85106086b5b1b9a72235814e64e0e04f87314e8f8eb9beaf0ffa779156f38571cae893d256ee249954fc5b3ef12d6770458249ca5ee775", 0xa5}, {&(0x7f0000001700)="57bf0eada0c83139a7667bef071315e09adff5011549ed578228f1cf1ebddcf45bbc70d7426d75b08bab60b6b0fdd0eca04216c2c016cb753ce4627c9cb200051211d4d14b2e78f761b1946752157ab4bfec861d61a9b4c1245c51879dc292d8e8a738ffdd7976e35e7b5014d4b90cebf75f9f158a651b7a5bc6389901390f1832d5de66e43f415c04c6cb22487229207c0214611f810beec5231375124453e0302d4341b1976892708dced67ec094bac2e9ce9fafc51c", 0xb7}], 0x5, &(0x7f0000001840)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x64, 0x0, 0x7, {[@noop, @cipso={0x86, 0x4b, 0xffffffffffffffff, [{0x0, 0x12, "7533b75d2b0398b687df6db31d3389b8"}, {0x0, 0x5, "0f0638"}, {0x7, 0x3, "1d"}, {0x1, 0x5, "87673d"}, {0x0, 0xf, "da3e5c76caf7425e4be2e74338"}, {0x3, 0xd, "2dc66c4db44165d3089f6b"}, {0x1, 0xa, "69289e493d2d566d"}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf64}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xaf, [@multicast1, @broadcast, @multicast2, @multicast2, @remote, @rand_addr=0x64010101, @empty]}, @rr={0x7, 0xf, 0xee, [@dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010102, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x14, 0xbf, 0x1, 0x1, [{@local}, {@multicast2, 0x8000}]}, @rr={0x7, 0x1f, 0x7b, [@empty, @local, @local, @rand_addr=0x64010102, @loopback, @local, @dev={0xac, 0x14, 0x14, 0xb}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x9a, 0x1, 0xe, [{@local, 0x80000000}]}, @lsrr={0x83, 0xb, 0x1a, [@empty, @remote]}, @timestamp={0x44, 0x10, 0xb, 0x0, 0x1, [0x8, 0x200, 0x9]}, @noop, @timestamp={0x44, 0x20, 0xc1, 0x0, 0x4, [0x6, 0xe, 0x5, 0x9, 0xfffff4c4, 0x8, 0x7]}]}}}], 0x170}, 0x1)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r3)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001a80)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, r8, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x7c}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40000)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001b80)={0xaa, 0x141})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001bc0))
sendmsg$NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86)
r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d00), 0x2, 0x0)
fadvise64(r10, 0x7, 0x3, 0x3)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d40), r5)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001dc0)={'wpan3\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f00000020c0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001f00)={0x154, r11, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x100, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff1f82}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x154}, 0x1, 0x0, 0x0, 0xc000}, 0x1)

620.396805ms ago: executing program 5 (id=1803):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r1, 0x10}}, 0x10)

619.436044ms ago: executing program 5 (id=1804):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x100801)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCSIFMTU(r1, 0x89e1, &(0x7f0000000000)={'veth0_vlan\x00', 0x200})
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r2, &(0x7f00000021c0)="39763418bd1030ef2c446244439c7f2c826a0a6b9b11e948f2f0dd709843b726e0b30aa1809dea4c5185d70ab2b1dd0e04b8258ea51b87ceb975215517930d6636ce5e1eab995ed44ce9748dffbbecf44bab8956c32865f80e85a31fe3aa44037a2a2c763e3816221ab1c9534ab241cad5f48ad193ab5328044fb104bd32997c0c4968bf2368fce103f818a3aa8db1b5ffdb9506d45d27a2527071cb411b1f23a8917d92ab975b0c0ad3ea08e76d1f4bb2005a1b56964314afc54da9fa25105e9eb00fa394355918af43a3d5f86736337b678467e5b0a0b8eec6a617f98186431a5ea37c5979739f7ec7f349d6aa37", 0xef, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x3ff}, 0x1c)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400})
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2)
r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_CONTINUE(r3, 0xc028aa05, &(0x7f0000000140)={{&(0x7f00001f7000/0x3000)=nil, 0x3000}, 0x1000000})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020)

186.518712ms ago: executing program 5 (id=1805):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x7, 0xa, 0xdc1fd5d9b1aac82c, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x41)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
setpriority(0x2, 0xff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

121.940074ms ago: executing program 5 (id=1806):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000e40)}}], 0x1, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x10800000001fb, 0xac4481)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x3a)
bind(r0, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r5=>0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="66baa00066b86b4266ef66ba6b0066b8e200f30fc7f8440f20c0350f000000440f22c0c4e2b1488c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4e}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r9)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000b80)={'wpan0\x00', <r11=>0x0})
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r12, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="09012abd7000fcdbdf251b00000008000300", @ANYRES32=r11, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x44)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r14, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c0100001000010000000000fcdbdf2500000000000000000000000000000000fe80000000000000000000000000001600000000081e00040000208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)
bind$bt_hci(r13, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r13, &(0x7f0000000040)="05000000010000", 0x7)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000225bd7000ffdbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="050007001000000008000100000000000c000600010000000100000008000300", @ANYRES32=r4, @ANYBLOB='\t\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="050007001f0000000c000600020000000200000008000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x2000800}, 0x5)
r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r15, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

0s ago: executing program 5 (id=1807):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x8014)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x6, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x80)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x292b9f57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a26aa20}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c5d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2da04951}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfc68a8f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17fdfb99}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000000)
fsetxattr$security_capability(r0, &(0x7f0000000380), &(0x7f00000003c0)=@v2={0x2000000, [{0x9f, 0x7}, {0x7, 0x1}]}, 0x14, 0x1)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200, 0x3d}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xf98}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x28, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3ff}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x100}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x10000080}, 0x80)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0)
sendmsg$kcm(r3, &(0x7f0000001b40)={&(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x0, 0x0, {0xa, 0x4e20, 0x3b, @local, 0x7}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="0a8b26b7baa74881e31b347e078ac6d603c55671e5782b313e4fd8f8f800d080e96cbf8223acaf2301e049865c8d50ba9ac7292587db7724edd4542d0986b67e9231ec5f82217c7ecdfc8d5a8007141131927515cca2643a560a5f58e24291cfe9513db22871168a75bfa2efb2e10a5cd8988f828188b391615dbedb03e2227c5a68a18542b4014d9d28823000c3ec08", 0x90}, {&(0x7f0000000740)="032bab74d51542c5ede83d85bee5cc242444eda3d0ae262edbd400301a4f65a0db736974e00d51a9b3ad4c14d41d9181c9bad97b067da49c4906120f24ae565ffc4de7770e984540a4f0c4428535f461eb3b66feb224cd814ecf6c213dec287d19ae41468bc901f13ba424d44c8958b9fc7a582a779b731f53073cf9a0c10e17de298e11c91600c50710f6a6399d5e5ecab7bfd19e56ff1f0d4635fb295f4de1849987a72b3c8040bb9402508e6ac993e4d7775dde63f74e1f84d1853ab2c5c519287c837e4974122f17dceb0b33dc2bf4229397fe0e2a9fb73cef3c18687b742d30347913c1ee", 0xe7}, {&(0x7f0000000840)="c11676a32e7b8be1a8420fc59d650f8f2acea4084f501f71822f88af9c99d2c2aa05d1561912521bd9c1960dad07937eee080bf3e97ac36ddf39067e9d5acad84e945a0d4d6299ab237ca1079929a2fd8e9728a0c91beda608c6965a448d54ccb4b0d8dc068fad1040fed16599b521a265490b39b26c697f06036220c696bb7ca729a8e42ce87565602048c8ccb75dbffddf7e32c50d3d769500f0775456e8d249d4da0056bf5cf2294264352df00f06abd8a5dfefd08a172c7fa88177598957a520", 0xc2}], 0x3, &(0x7f0000000980)=[{0x18, 0x1, 0x8, "eec82e11f2"}, {0x58, 0x10d, 0x6, "3ce851628fc6d97c80c071fe679a7df21ab9ddb2eed0894e106c4dc5d64de62298b80d6f268527fd98d9df577bf30a746cdb127bb03ecd53036758cd30e319cb6e9546a860"}, {0x1010, 0x108, 0x5, "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"}, {0x18, 0x88, 0x0, "35ebc0d9"}, {0xf0, 0x115, 0xfa, "10b70fac3d54207a8698c9882f43b244d97bbf4cf0ccbc69e586e0e761db07a834172afc378d5e0e0f0edaa5f9abe8a1838261c8c705590269f2847d4e7ccbb0823626604c693f3a8e4787daf485f8ce712e73f128dc274ada5b138112c4ab613386454281e8c125a90cf4c7961dc29477f77906b51ed73b3dcd87aa429617105bc65e474db8e570a6d72e570293dc5037ed3dc8fd8405dfed90f7f7da10d8e73693513548dd9e988e366985d7a26bc0956754f34f88ef5a2995c22445526866054fa9341f36fa0fc125da6924a4fc5f0e2d4313b8d68e385011"}], 0x1188}, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001b80)=0x9)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001bc0)={0xc})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c40), r3)
sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000001e00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x134, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x48}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x618}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x134}, 0x1, 0x0, 0x0, 0x404c01c}, 0x10)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000001e40)=0x6, 0x4)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000002380)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002340)={&(0x7f0000001ec0)={0x470, r2, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x48}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x401}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0x81, 0x2a, [@mic={0x8c, 0x18, {0x571, "c9874a2afa88", @long="2d51d2230ab582f9e7751debe5cc009f"}}, @tim={0x5, 0x59, {0xca, 0xa1, 0x4, "6a8a6555b7958324435d7788a23ffba2e01386654c52ab4db574aeeccef478f657835912720851ab08c490a1804b3316fba1e3ca57ad4236ebc74681c891d505d998a14277850849e238102f0aaf14d34085fa466cd8"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE={0x224, 0x2a, [@fast_bss_trans={0x37, 0x9e, {0x4, 0x3, "d5cbca1b733b95b364e7b052d049c23a", "030c9bc169a8d65b594b86c707caa6329e25b68491bd6875542cc1dd5b8aa555", "b8850cee701cb37afe0fa2eb1bbec19f4361b2b5563eb4e593dcb4739309914a", [{0x1, 0x15, "bf4f39692e18089acdf54a3e2aaf4f77266475ec93"}, {0x3, 0x1b, "6f7889b02a1c2992c8054d570a248a4f4285a2b6adb53ce4b4c8e8"}, {0x3, 0x16, "9b1391dc51b280801cdcc8872767e44725aad1faf269"}]}}, @mesh_chsw={0x76, 0x6, {0x5, 0x6, 0x25, 0xfff}}, @fast_bss_trans={0x37, 0xd8, {0x3e, 0x7, "73605e849497950cd54a2077bf013ba6", "cc74f6e378aecc4cd64a85f8c09fdceb71dac7c35955b8b57530c992beb7a330", "5e00c271a590d7c18f9e4721cb23563d370a43b8cde8dd724ee03240218deb6a", [{0x2, 0x27, "2c94901b0283039a16d56180ff91dcd5a42108457ebb5b9641f22b0584d9fb24f9d551691cf522"}, {0x3, 0x6, "044431c94652"}, {0x2, 0x1, "9c"}, {0x1, 0x1, "19"}, {0x1, 0x1a, "729fbaf5fc1f8f94524fe4ede1d71c8490b322c49f1ddc097da0"}, {0x2, 0x1d, "e62c1847fbd60e8805b8f2e749262cd1a9c641d533df950f2a57154ba1"}, {0x4, 0x12, "9a30c6ff743a8507c9fe79d1ce323d412e27"}]}}, @measure_req={0x26, 0x9c, {0x0, 0x7, 0xff, "3a40f0366f8bd2ec650c4604293d1c287d37084186a9ee27201617c9163977d732229063f1f1c3edbd3082127978668c28ff51c4805fbee34ce78275b8a795354cb25b083f1a440a2b0b437300695912b7deaaae8d48a285318958cde7de1049d7cfd1d6a58fed342bcc6dbb0ff1f67ff82e142fa053f534296bf7cb4bfc7079f09afea685280fa1cab35e99a3367128b67d02b868b407d890"}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x80}, @NL80211_ATTR_IE={0x166, 0x2a, [@perr={0x84, 0x55, {0xf5, 0x5, [{{0x0, 0x1}, @device_a, 0x3, @value, 0x39}, {{}, @device_a, 0x3, @void, 0x38}, {{0x0, 0x1}, @device_b, 0x80, @value, 0xd}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x3e}, {{}, @broadcast, 0x1000, @void, 0xc}]}}, @random_vendor={0xdd, 0x65, "4a3b155883b074ad90c96bc58f221d6b43925caa49ad125814fa4fc3f9531ab63191e0960d10fb98fd49713c3f61fa89e0dd93412d9e78aefb7fa7df899f3ccbcae82fe4db311c6b0c966023bd113544e82d89f313086e49994077677c517cd373ed39de65"}, @dsss={0x3, 0x1, 0xc}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @ssid={0x0, 0x6, @default_ibss_ssid}, @link_id={0x65, 0x12, {@from_mac, @device_a, @device_b}}, @measure_req={0x26, 0x3, {0x3, 0x8, 0x1}}, @fast_bss_trans={0x37, 0x7b, {0xc, 0x2, "056b7352843ee2aa400e8ad81ce9da81", "7d176f55dc799644cc0b031b08c08f27d4bab933654d82f98ec1040ab7c0f34c", "4fbadcab9e87ca88ef0d7058f1c8506a8a7fdabf02e725d36c6c698a7ac10d9e", [{0x1, 0x1a, "f18d74bdcb4d643d5410a78c64bc585a0d3293877238290acd59"}, {0x1, 0xb, "f1534d1d4797dc2c8d7048"}]}}]}]}, 0x470}, 0x1, 0x0, 0x0, 0x8000}, 0x60d0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002400), r1)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x4c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}]}, 0x4c}}, 0x20000040)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002580), r3)
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x30, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x10)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000002680)={0x14})
ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002700), r4)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x64, r8, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a08}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x64}}, 0x24048040)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000002840)={0x51, 0x5, 0x4, {0x2888, 0x9}, {0x4, 0x7}, @rumble={0x29c, 0x7}})
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000002880)=0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f00000028c0), 0xffffffffffffffff)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x8000)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000)

kernel console output (not intermixed with test programs):

le querying for an remote control event.
[  678.143626][ T5866] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  678.154316][ T5957] m920x_read = error: -19
[  678.158696][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  678.164891][   T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  678.318877][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  678.326821][   T10] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  678.329320][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  678.342095][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.350359][   T24] m920x_read = error: -19
[  678.362742][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  678.364961][   T10] usb 1-1: config 0 descriptor??
[  678.375885][   T24] dvb-usb: error -19 while querying for an remote control event.
[  678.388154][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  678.398939][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  678.414897][ T5866] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  678.425363][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  678.435433][ T5866] usb 3-1: Product: syz
[  678.439781][ T5866] usb 3-1: Manufacturer: syz
[  678.444842][ T5866] usb 3-1: SerialNumber: syz
[  678.453479][ T5866] usb 3-1: config 0 descriptor??
[  678.528340][ T5957] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  678.560544][   T24] m920x_read = error: -19
[  678.565059][   T24] dvb-usb: error -19 while querying for an remote control event.
[  678.682341][ T5866] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  678.693030][ T5866] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  678.708931][ T5957] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[  678.719229][T11390] netlink: 'syz.5.1456': attribute type 29 has an invalid length.
[  678.723378][ T5957] usb 7-1: config 1 has no interface number 0
[  678.734994][ T5957] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  678.750527][   T24] m920x_read = error: -19
[  678.755545][   T24] dvb-usb: error -19 while querying for an remote control event.
[  678.764669][ T5957] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  678.775179][ T5957] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  678.800604][ T5957] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  678.807914][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1457'.
[  678.810646][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.825912][   T10] hid (null): invalid report_size 134283244
[  678.827265][ T5957] usb 7-1: Product: syz
[  678.838285][ T5957] usb 7-1: Manufacturer: syz
[  678.843020][ T5957] usb 7-1: SerialNumber: syz
[  678.847307][   T10] uclogic 0003:5543:0003.0024: invalid report_size 134283244
[  678.855858][   T10] uclogic 0003:5543:0003.0024: item 0 4 1 7 parsing failed
[  678.864154][T11388] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  678.872362][   T10] uclogic 0003:5543:0003.0024: parse failed
[  678.878386][   T10] uclogic 0003:5543:0003.0024: probe with driver uclogic failed with error -22
[  678.896743][ T5866] radio-si470x 3-1:0.0: software version 120, hardware version 109
[  678.905659][ T5866] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  678.945407][   T24] m920x_read = error: -19
[  678.949859][   T24] dvb-usb: error -19 while querying for an remote control event.
[  679.047879][   T10] usb 1-1: USB disconnect, device number 45
[  679.092030][T11388] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  679.112282][ T5866] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  679.121181][ T5866] radio-si470x 3-1:0.0: submitting int urb failed (-90)
[  679.128702][   T24] m920x_read = error: -19
[  679.128870][ T5866] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  679.142576][   T24] dvb-usb: error -19 while querying for an remote control event.
[  679.155696][ T5866] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22
[  679.177217][ T5866] usb 3-1: USB disconnect, device number 14
[  679.319441][ T8258] m920x_read = error: -19
[  679.328004][ T5957] sierra_net 7-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07
[  679.341070][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  679.512885][ T8258] m920x_read = error: -19
[  679.517570][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  679.530238][ T5957] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71
[  679.537082][ T5957] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71
[  679.545065][ T5957] sierra_net 7-1:1.7 wwan0: Submit SYNC failed -71
[  679.551752][ T5957] sierra_net 7-1:1.7 wwan0: Send SYNC failed, status -71
[  679.564010][ T5957] usb 7-1: USB disconnect, device number 47
[  679.575159][ T5957] sierra_net 7-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.6-1, Sierra Wireless USB-to-WWAN Modem
[  679.641261][ T5957] sierra_net 7-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  679.703686][ T8258] m920x_read = error: -19
[  679.723267][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  679.919474][ T5957] m920x_read = error: -19
[  679.923889][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  680.014752][ T6011] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  680.111062][   T24] m920x_read = error: -19
[  680.116558][   T24] dvb-usb: error -19 while querying for an remote control event.
[  680.174628][ T6011] usb 1-1: Using ep0 maxpacket: 32
[  680.181383][ T6011] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  680.189951][ T6011] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  680.199617][ T6011] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  680.209897][ T6011] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  680.220003][ T6011] usb 1-1: config 1 has no interface number 0
[  680.226509][ T6011] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  680.236471][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.250920][ T6011] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  680.260188][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  680.292331][   T24] m920x_read = error: -19
[  680.296740][   T24] dvb-usb: error -19 while querying for an remote control event.
[  680.425600][   T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  680.439157][   T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  680.449822][   T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  680.462900][   T10] usb 3-1: config 220 has no interface number 2
[  680.473377][   T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  680.487897][   T10] usb 3-1: config 220 interface 0 has no altsetting 0
[  680.494728][   T10] usb 3-1: config 220 interface 76 has no altsetting 0
[  680.495574][ T5957] m920x_read = error: -19
[  680.511296][ T6011] snd_usb_pod 1-1:1.1: set_interface failed
[  680.517445][   T10] usb 3-1: config 220 interface 1 has no altsetting 0
[  680.525480][ T6011] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  680.527452][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  680.540552][   T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  680.540581][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.540601][   T10] usb 3-1: Product: syz
[  680.540616][   T10] usb 3-1: Manufacturer: syz
[  680.540631][   T10] usb 3-1: SerialNumber: syz
[  680.555312][ T6011] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71
[  680.588599][ T6011] usb 1-1: USB disconnect, device number 46
[  680.698651][   T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  680.730674][ T8258] m920x_read = error: -19
[  680.735072][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  680.764449][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'.
[  680.799087][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'.
[  680.837490][   T24] usb 7-1: device descriptor read/64, error -71
[  680.850085][   T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  680.856632][   T10] usb 3-1: No valid video chain found.
[  680.862792][   T10] usb 3-1: selecting invalid altsetting 0
[  680.875914][   T10] usb 3-1: selecting invalid altsetting 0
[  680.884002][   T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  680.896029][   T10] usb 3-1: USB disconnect, device number 15
[  680.912510][ T5957] m920x_read = error: -19
[  680.916915][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  680.923364][ T6011] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  681.094187][   T24] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  681.098738][ T6011] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  681.102641][ T5957] m920x_read = error: -19
[  681.115031][ T6011] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  681.118922][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  681.129643][ T6011] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  681.142998][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.155740][ T6011] usb 1-1: config 0 descriptor??
[  681.265718][   T24] usb 7-1: device descriptor read/64, error -71
[  681.297665][ T5957] m920x_read = error: -19
[  681.302153][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  681.383057][   T24] usb usb7-port1: attempt power cycle
[  681.409453][T11420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  681.419875][T11420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  681.479377][ T5957] m920x_read = error: -19
[  681.483760][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  681.662082][ T5957] m920x_read = error: -19
[  681.670106][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  681.746163][   T24] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  681.769003][   T24] usb 7-1: device descriptor read/8, error -71
[  681.853234][ T5957] m920x_read = error: -19
[  681.857775][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  682.024229][   T24] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  682.035079][ T5957] m920x_read = error: -19
[  682.039462][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  682.048166][   T24] usb 7-1: device descriptor read/8, error -71
[  682.163643][   T24] usb usb7-port1: unable to enumerate USB device
[  682.216741][   T24] m920x_read = error: -19
[  682.221155][   T24] dvb-usb: error -19 while querying for an remote control event.
[  682.399175][   T24] m920x_read = error: -19
[  682.403574][   T24] dvb-usb: error -19 while querying for an remote control event.
[  682.583904][   T24] m920x_read = error: -19
[  682.588325][   T24] dvb-usb: error -19 while querying for an remote control event.
[  682.762003][   T24] m920x_read = error: -19
[  682.766386][   T24] dvb-usb: error -19 while querying for an remote control event.
[  682.943778][   T24] m920x_read = error: -19
[  682.948468][   T24] dvb-usb: error -19 while querying for an remote control event.
[  683.093222][ T5957] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  683.126811][   T24] m920x_read = error: -19
[  683.131231][   T24] dvb-usb: error -19 while querying for an remote control event.
[  683.253522][ T5957] usb 3-1: Using ep0 maxpacket: 16
[  683.269889][ T5957] usb 3-1: config 166 has an invalid interface number: 177 but max is 1
[  683.280273][ T5957] usb 3-1: config 166 has an invalid interface number: 34 but max is 1
[  683.293799][ T5957] usb 3-1: config 166 has no interface number 0
[  683.301107][ T5957] usb 3-1: config 166 has no interface number 1
[  683.307644][   T24] m920x_read = error: -19
[  683.312003][   T24] dvb-usb: error -19 while querying for an remote control event.
[  683.320832][ T5957] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  683.333993][ T5957] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  683.349043][ T5957] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  683.364649][ T5957] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  683.376499][ T5957] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  683.391715][ T5957] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  683.397279][T11441] virt_wifi0 speed is unknown, defaulting to 1000
[  683.407087][ T5957] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  683.422176][ T5957] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  683.438051][ T5957] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  683.453543][ T5957] usb 3-1: config 166 interface 177 has no altsetting 0
[  683.461367][ T5957] usb 3-1: config 166 interface 34 has no altsetting 0
[  683.480907][ T5957] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  683.490121][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.498174][ T5957] usb 3-1: Product: syz
[  683.502539][ T8258] m920x_read = error: -19
[  683.506892][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  683.515668][ T5957] usb 3-1: Manufacturer: syz
[  683.520430][ T5957] usb 3-1: SerialNumber: syz
[  683.692091][   T24] m920x_read = error: -19
[  683.696516][   T24] dvb-usb: error -19 while querying for an remote control event.
[  683.756453][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.777899][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.833134][ T5957] ums-realtek 3-1:166.177: USB Mass Storage device detected
[  683.875153][ T8258] m920x_read = error: -19
[  683.879548][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  683.917776][ T5957] ums-realtek 3-1:166.34: USB Mass Storage device detected
[  684.006264][ T5957] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5
[  684.038432][ T5957] usb 3-1: Found UVC 0.00 device syz (0bda:0138)
[  684.053300][ T6011] Bluetooth: Can't get state to change to load ram patch err
[  684.067594][    T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!!
[  684.087773][ T8258] m920x_read = error: -19
[  684.092161][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  684.092593][ T6011] Bluetooth: Loading patch file failed
[  684.119463][ T5957] usb 3-1: No valid video chain found.
[  684.134260][ T6011] ath3k 1-1:0.0: probe with driver ath3k failed with error -71
[  684.143287][ T5957] usb 3-1: USB disconnect, device number 16
[  684.216328][ T6011] usb 1-1: USB disconnect, device number 47
[  684.290591][ T8258] m920x_read = error: -19
[  684.295479][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  684.469123][T11471] ieee802154 phy0 wpan0: encryption failed: -22
[  684.485098][ T5957] m920x_read = error: -19
[  684.493662][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  684.686582][ T5957] m920x_read = error: -19
[  684.690968][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  684.751034][ T6011] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  684.887448][T11475] binder: 11474:11475 ioctl c0045003 200000000180 returned -22
[  684.910597][ T6011] usb 1-1: device descriptor read/64, error -71
[  684.964119][ T5957] m920x_read = error: -19
[  684.968675][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  685.062125][T11480] could not allocate digest TFM handle sha224-asm
[  685.148015][ T5957] m920x_read = error: -19
[  685.153024][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  685.338755][ T5957] m920x_read = error: -19
[  685.343154][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  685.369158][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'.
[  685.407046][ T6011] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  685.541690][ T8258] m920x_read = error: -19
[  685.546098][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  685.565332][ T6011] usb 1-1: device descriptor read/64, error -71
[  685.684285][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1487'.
[  685.693423][ T5957] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  685.744528][   T24] m920x_read = error: -19
[  685.749160][   T24] dvb-usb: error -19 while querying for an remote control event.
[  685.835150][ T6011] usb usb1-port1: attempt power cycle
[  685.864490][ T5957] usb 7-1: Using ep0 maxpacket: 8
[  685.880454][ T5957] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  686.145434][   T24] m920x_read = error: -19
[  686.149842][   T24] dvb-usb: error -19 while querying for an remote control event.
[  686.162069][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  686.184579][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  686.195956][ T5957] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  686.216849][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.240577][ T5990] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  686.247994][ T5957] usb 7-1: config 0 descriptor??
[  686.254147][T11489] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  686.256667][ T6011] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  686.333322][ T8258] m920x_read = error: -19
[  686.337771][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  686.419269][ T6011] usb 1-1: device descriptor read/8, error -71
[  686.484297][T11488] netlink: 'syz.6.1484': attribute type 27 has an invalid length.
[  686.514455][   T24] m920x_read = error: -19
[  686.523823][   T24] dvb-usb: error -19 while querying for an remote control event.
[  686.556142][ T5990] usb 3-1: Using ep0 maxpacket: 32
[  686.572787][ T5990] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  686.575690][ T5957] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  686.592273][ T5990] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  686.616738][ T5990] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  686.628944][ T5957] usb 7-1: USB disconnect, device number 52
[  686.640062][ T5990] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  686.691160][ T5990] usb 3-1: config 0 interface 0 has no altsetting 0
[  686.697954][ T6011] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  686.707323][   T24] m920x_read = error: -19
[  686.711690][   T24] dvb-usb: error -19 while querying for an remote control event.
[  686.725639][ T5990] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  686.741701][ T6011] usb 1-1: device descriptor read/8, error -71
[  686.749126][ T5990] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  686.761643][ T5990] usb 3-1: Product: syz
[  686.765839][ T5990] usb 3-1: Manufacturer: syz
[  686.770546][ T5990] usb 3-1: SerialNumber: syz
[  686.782455][ T5990] usb 3-1: config 0 descriptor??
[  686.795563][ T5990] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  686.814246][ T5990] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  686.878161][ T6011] usb usb1-port1: unable to enumerate USB device
[  686.889098][   T24] m920x_read = error: -19
[  686.893479][   T24] dvb-usb: error -19 while querying for an remote control event.
[  687.009928][T11498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.020330][T11498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.073921][   T24] m920x_read = error: -19
[  687.078603][   T24] dvb-usb: error -19 while querying for an remote control event.
[  687.086558][ T5957] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  687.252383][ T5957] usb 7-1: Using ep0 maxpacket: 16
[  687.263070][   T24] m920x_read = error: -19
[  687.267756][   T24] dvb-usb: error -19 while querying for an remote control event.
[  687.276570][ T5957] usb 7-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config
[  687.286988][ T5957] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  687.299265][ T5957] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  687.308592][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.317118][ T5957] usb 7-1: Product: syz
[  687.321301][ T5957] usb 7-1: Manufacturer: syz
[  687.325914][ T5957] usb 7-1: SerialNumber: syz
[  687.334089][ T5957] usb 7-1: config 0 descriptor??
[  687.417715][T11504] netlink: 'syz.0.1491': attribute type 12 has an invalid length.
[  687.455002][ T5866] m920x_read = error: -19
[  687.465431][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  687.625415][T11502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.645193][T11502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.658785][   T24] m920x_read = error: -19
[  687.668859][   T24] dvb-usb: error -19 while querying for an remote control event.
[  687.687512][T11502] serio: Serial port ptm0
[  687.804539][ T5957] usb 7-1: USB disconnect, device number 53
[  687.850901][   T24] m920x_read = error: -19
[  687.856167][   T24] dvb-usb: error -19 while querying for an remote control event.
[  687.885996][ T5990] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  688.032355][ T5957] m920x_read = error: -19
[  688.036765][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  688.075493][ T5990] usb 1-1: Using ep0 maxpacket: 32
[  688.082658][ T5990] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  688.093090][ T5990] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  688.106126][ T5990] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  688.115875][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.127303][ T5990] usb 1-1: config 0 descriptor??
[  688.136814][ T5990] hub 1-1:0.0: bad descriptor, ignoring hub
[  688.144202][ T5990] hub 1-1:0.0: probe with driver hub failed with error -5
[  688.154174][ T5990] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  688.216153][ T5957] m920x_read = error: -19
[  688.221271][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  688.395784][ T5957] m920x_read = error: -19
[  688.400206][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  688.577780][ T5957] m920x_read = error: -19
[  688.582198][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  688.673914][ T5990] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  688.762434][ T5957] m920x_read = error: -19
[  688.767363][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  688.859513][ T5990] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  688.868918][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.877608][ T5990] usb 7-1: Product: syz
[  688.881892][ T5990] usb 7-1: Manufacturer: syz
[  688.886505][ T5990] usb 7-1: SerialNumber: syz
[  688.941747][ T5957] m920x_read = error: -19
[  688.946128][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  689.122744][   T24] m920x_read = error: -19
[  689.127146][   T24] dvb-usb: error -19 while querying for an remote control event.
[  689.154632][   T24] usb 3-1: USB disconnect, device number 17
[  689.164685][   T24] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  689.304668][ T5957] m920x_read = error: -19
[  689.309056][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  689.384948][ T5990] rtl8150 7-1:1.0: couldn't reset the device
[  689.391306][ T5990] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5
[  689.408699][ T5990] usb 7-1: USB disconnect, device number 54
[  689.486266][ T5957] m920x_read = error: -19
[  689.490680][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  689.678746][ T5957] m920x_read = error: -19
[  689.683237][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  689.710678][   T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  689.860410][ T5957] m920x_read = error: -19
[  689.864798][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  689.876051][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  689.886751][   T24] usb 3-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  689.903056][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  689.910115][   T24] usb 3-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[  689.941739][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.960957][   T24] usb 3-1: config 0 descriptor??
[  689.985287][   T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  690.042122][   T24] m920x_read = error: -19
[  690.048736][   T24] dvb-usb: error -19 while querying for an remote control event.
[  690.215255][ T6011] usb 3-1: USB disconnect, device number 18
[  690.225151][   T24] m920x_read = error: -19
[  690.229527][   T24] dvb-usb: error -19 while querying for an remote control event.
[  690.298802][ T5990] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  690.438035][   T24] m920x_read = error: -19
[  690.442400][   T24] dvb-usb: error -19 while querying for an remote control event.
[  690.460818][ T5990] usb 7-1: Using ep0 maxpacket: 32
[  690.469890][ T5990] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  690.480354][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.492364][ T5990] usb 7-1: config 0 descriptor??
[  690.504518][ T5990] gspca_main: sq930x-2.14.0 probing 041e:403c
[  690.619865][   T24] m920x_read = error: -19
[  690.624238][   T24] dvb-usb: error -19 while querying for an remote control event.
[  690.724206][T11558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.733375][T11558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.801148][   T24] m920x_read = error: -19
[  690.805547][   T24] dvb-usb: error -19 while querying for an remote control event.
[  690.983140][ T5866] m920x_read = error: -19
[  690.987915][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  691.047431][ T5990] gspca_sq930x: reg_r 001f failed -110
[  691.053129][ T5990] sq930x 7-1:0.0: probe with driver sq930x failed with error -110
[  691.147977][   T24] usb 1-1: reset high-speed USB device number 52 using dummy_hcd
[  691.156601][   T24] usb 1-1: device reset changed ep0 maxpacket size!
[  691.166417][   T24] usb 1-1: USB disconnect, device number 52
[  691.175355][ T5866] m920x_read = error: -19
[  691.179732][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  691.340054][ T5866] usb 7-1: USB disconnect, device number 55
[  691.361657][ T5957] m920x_read = error: -19
[  691.366073][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  691.497316][   T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  691.560253][ T5866] m920x_read = error: -19
[  691.564653][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  691.568264][T11589] 9pnet_fd: Insufficient options for proto=fd
[  691.591985][T11589] sctp: [Deprecated]: syz.6.1514 (pid 11589) Use of int in max_burst socket option.
[  691.591985][T11589] Use struct sctp_assoc_value instead
[  691.624635][T11589] overlayfs: failed to resolve './file1': -2
[  691.670359][   T24] usb 1-1: Using ep0 maxpacket: 16
[  691.677598][   T24] usb 1-1: config 53 has an invalid interface number: 240 but max is 0
[  691.685958][   T24] usb 1-1: config 53 has no interface number 0
[  691.695858][   T24] usb 1-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[  691.707994][   T24] usb 1-1: config 53 interface 240 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024
[  691.720305][   T24] usb 1-1: config 53 interface 240 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  691.731816][   T24] usb 1-1: config 53 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  691.746256][ T5866] m920x_read = error: -19
[  691.750626][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  691.762437][   T24] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89
[  691.772101][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.780512][   T24] usb 1-1: Product: syz
[  691.785384][   T24] usb 1-1: Manufacturer: syz
[  691.790003][   T24] usb 1-1: SerialNumber: syz
[  691.803474][T11574] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  691.923697][ T5957] m920x_read = error: -19
[  691.928192][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  691.965789][ T5914] Bluetooth: hci4: unexpected event for opcode 0x042d
[  691.976746][T11600] netlink: 'syz.6.1518': attribute type 1 has an invalid length.
[  692.035375][   T24] kvaser_usb 1-1:53.240: error -ENODEV: Cannot get usb endpoint(s)
[  692.051261][   T24] usb 1-1: USB disconnect, device number 53
[  692.094799][ T5866] usb 3-1: new low-speed USB device number 19 using dummy_hcd
[  692.116211][ T8258] m920x_read = error: -19
[  692.120582][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  692.257788][ T5866] usb 3-1: No LPM exit latency info found, disabling LPM.
[  692.271321][ T5866] usb 3-1: string descriptor 0 read error: -22
[  692.278022][ T5866] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d
[  692.287580][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.298898][   T24] m920x_read = error: -19
[  692.303286][   T24] dvb-usb: error -19 while querying for an remote control event.
[  692.311430][ T5866] usb 3-1: config 0 descriptor??
[  692.480566][   T24] m920x_read = error: -19
[  692.485040][   T24] dvb-usb: error -19 while querying for an remote control event.
[  692.541631][T11593] fuse: Bad value for 'fd'
[  692.556168][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.583133][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.608959][ T5866] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware
[  692.638630][ T5866] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  692.648494][ T5866] dib0700: firmware download failed at 7 with -22
[  692.661339][   T24] m920x_read = error: -19
[  692.665723][   T24] dvb-usb: error -19 while querying for an remote control event.
[  692.683507][ T5866] usb 3-1: USB disconnect, device number 19
[  692.854045][   T24] m920x_read = error: -19
[  692.859662][   T24] dvb-usb: error -19 while querying for an remote control event.
[  693.014337][T11620] IPVS: stopping backup sync thread 11622 ...
[  693.048375][   T24] m920x_read = error: -19
[  693.052758][   T24] dvb-usb: error -19 while querying for an remote control event.
[  693.082260][T11625] PKCS7: Unknown OID: [4] 0.0
[  693.090048][T11625] PKCS7: Only support pkcs7_signedData type
[  693.167901][T11634] netlink: 5052 bytes leftover after parsing attributes in process `syz.5.1531'.
[  693.214805][T11637] sctp: [Deprecated]: syz.5.1532 (pid 11637) Use of struct sctp_assoc_value in delayed_ack socket option.
[  693.214805][T11637] Use struct sctp_sack_info instead
[  693.227947][ T5866] m920x_read = error: -19
[  693.235489][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  693.292062][ T5990] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  693.346086][ T6011] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  693.409634][   T24] m920x_read = error: -19
[  693.413985][   T24] dvb-usb: error -19 while querying for an remote control event.
[  693.463055][ T5990] usb 7-1: Using ep0 maxpacket: 16
[  693.469580][ T5990] usb 7-1: config 0 has an invalid interface number: 154 but max is 0
[  693.478426][ T5990] usb 7-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config
[  693.488762][ T5990] usb 7-1: config 0 has no interface number 0
[  693.494860][ T5990] usb 7-1: too many endpoints for config 0 interface 154 altsetting 236: 84, using maximum allowed: 30
[  693.506187][ T5990] usb 7-1: config 0 interface 154 altsetting 236 has 0 endpoint descriptors, different from the interface descriptor's value: 84
[  693.520104][ T5990] usb 7-1: config 0 interface 154 has no altsetting 0
[  693.528792][ T5990] usb 7-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  693.537898][ T6011] usb 1-1: Using ep0 maxpacket: 32
[  693.543126][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.552423][ T5990] usb 7-1: Product: syz
[  693.556970][ T5990] usb 7-1: Manufacturer: syz
[  693.559399][ T5866] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  693.561672][ T5990] usb 7-1: SerialNumber: syz
[  693.573871][ T6011] usb 1-1: unable to get BOS descriptor or descriptor too short
[  693.584787][ T5990] usb 7-1: config 0 descriptor??
[  693.591173][ T6011] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  693.591608][   T24] m920x_read = error: -19
[  693.604044][ T6011] usb 1-1: config 7 has no interface number 0
[  693.605111][   T24] dvb-usb: error -19 while querying for an remote control event.
[  693.610212][ T6011] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  693.628042][ T6011] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0
[  693.638146][ T6011] usb 1-1: config 7 interface 187 has no altsetting 0
[  693.646897][ T6011] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  693.656074][ T6011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.664107][ T6011] usb 1-1: Product: syz
[  693.668518][ T6011] usb 1-1: Manufacturer: syz
[  693.673152][ T6011] usb 1-1: SerialNumber: syz
[  693.732377][ T5866] usb 3-1: not running at top speed; connect to a high speed hub
[  693.743296][ T5866] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  693.753803][ T5866] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  693.769212][ T5866] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  693.778501][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.786707][   T24] m920x_read = error: -19
[  693.791092][ T5866] usb 3-1: Product: syz
[  693.795659][   T24] dvb-usb: error -19 while querying for an remote control event.
[  693.804306][ T5866] usb 3-1: Manufacturer: syz
[  693.809127][ T5866] usb 3-1: SerialNumber: syz
[  693.825739][ T5990] cypress_m8 7-1:0.154: Nokia CA-42 V2 Adapter converter detected
[  693.851470][ T5990] nokiaca42v2 ttyUSB0: required endpoint is missing
[  693.873274][ T5990] usb 7-1: USB disconnect, device number 56
[  693.891996][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  693.900962][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  693.919615][ T6011] usb 1-1: Limiting number of CPorts to U8_MAX
[  693.932695][ T6011] usb 1-1: Unknown endpoint type found, address 0x07
[  693.939915][ T5990] cypress_m8 7-1:0.154: device disconnected
[  693.954041][ T6011] usb 1-1: Not enough endpoints found in device, aborting!
[  693.975024][ T8258] m920x_read = error: -19
[  693.995097][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  694.058908][ T5866] usb 3-1: USB disconnect, device number 20
[  694.190175][ T8258] m920x_read = error: -19
[  694.194570][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  694.260708][T11644] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1535'.
[  694.372109][ T5866] m920x_read = error: -19
[  694.378079][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  694.567308][ T5866] m920x_read = error: -19
[  694.571746][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  694.690058][T11651] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1538'.
[  694.692770][ T6011] usb 7-1: new low-speed USB device number 57 using dummy_hcd
[  694.699668][T11650] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1538'.
[  694.757080][ T5866] m920x_read = error: -19
[  694.761458][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  694.842228][ T6011] usb 7-1: device descriptor read/64, error -71
[  694.938479][ T5866] m920x_read = error: -19
[  694.942882][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  694.970600][ T5990] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  695.098758][ T6011] usb 7-1: new low-speed USB device number 58 using dummy_hcd
[  695.121882][ T5866] m920x_read = error: -19
[  695.126335][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  695.134078][ T5990] usb 3-1: Using ep0 maxpacket: 32
[  695.146448][ T5990] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  695.159592][ T5990] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=6a.c3
[  695.169650][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.178253][ T5990] usb 3-1: Product: syz
[  695.182597][ T5990] usb 3-1: Manufacturer: syz
[  695.193997][ T5990] usb 3-1: SerialNumber: syz
[  695.215516][T11663] netlink: 'syz.5.1541': attribute type 28 has an invalid length.
[  695.248667][ T6011] usb 7-1: device descriptor read/64, error -71
[  695.313057][ T5866] m920x_read = error: -19
[  695.317463][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  695.366552][ T6011] usb usb7-port1: attempt power cycle
[  695.424336][ T5990] usb 3-1: USB disconnect, device number 21
[  695.494416][ T5866] m920x_read = error: -19
[  695.498978][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  695.676159][ T5866] m920x_read = error: -19
[  695.680553][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  695.740252][ T6011] usb 7-1: new low-speed USB device number 59 using dummy_hcd
[  695.765921][ T6011] usb 7-1: device descriptor read/8, error -71
[  695.798926][T11666] netlink: 'syz.5.1542': attribute type 1 has an invalid length.
[  695.858739][ T5866] m920x_read = error: -19
[  695.863525][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  696.031981][ T6011] usb 7-1: new low-speed USB device number 60 using dummy_hcd
[  696.043981][ T5866] m920x_read = error: -19
[  696.059755][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  696.072854][ T6011] usb 7-1: device descriptor read/8, error -71
[  696.191378][ T6011] usb usb7-port1: unable to enumerate USB device
[  696.232002][ T5866] m920x_read = error: -19
[  696.242940][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  696.354038][ T5866] usb 1-1: USB disconnect, device number 54
[  696.414864][ T5957] m920x_read = error: -19
[  696.419405][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  696.495184][T11691] overlayfs: failed to resolve './file0': -2
[  696.507620][T11691] overlayfs: failed to resolve './file0': -2
[  696.514832][T11691] overlayfs: failed to resolve './file0': -2
[  696.524160][T11691] overlayfs: failed to resolve './file0': -2
[  696.606222][ T5957] m920x_read = error: -19
[  696.611460][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  696.611888][T11696] ÿ: renamed from ip6gretap0 (while UP)
[  696.741865][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1554'.
[  696.751535][T11703] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1554'.
[  696.762602][T11703] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1554'.
[  696.776036][T11703] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1554'.
[  696.798682][ T5957] m920x_read = error: -19
[  696.803077][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  696.873732][ T5866] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  696.980339][ T6013] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  696.991311][ T5957] m920x_read = error: -19
[  696.995707][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  697.044654][ T5866] usb 1-1: Using ep0 maxpacket: 8
[  697.052011][ T5866] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  697.063403][ T5866] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  697.072717][ T5866] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  697.081059][ T5866] usb 1-1: Product: syz
[  697.085624][ T5866] usb 1-1: Manufacturer: syz
[  697.090303][ T5866] usb 1-1: SerialNumber: syz
[  697.096881][ T5866] usb 1-1: config 0 descriptor??
[  697.104599][ T5866] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  697.142918][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.154356][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.164493][ T6013] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  697.177517][ T6013] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  697.183583][ T5957] m920x_read = error: -19
[  697.186681][ T6013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.198405][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  697.202821][ T6013] usb 3-1: config 0 descriptor??
[  697.337835][T11694] netlink: 'syz.0.1550': attribute type 10 has an invalid length.
[  697.361477][T11694] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  697.376008][ T5957] m920x_read = error: -19
[  697.391488][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  697.416529][T11705] netlink: 'syz.5.1555': attribute type 1 has an invalid length.
[  697.425351][ T5866] gspca_zc3xx: reg_w_i err -71
[  697.579076][ T5957] m920x_read = error: -19
[  697.583464][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  697.659682][ T6013] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xe
[  697.679042][ T6013] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[  697.693366][ T6013] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  697.762465][ T8258] m920x_read = error: -19
[  697.766861][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  697.934284][ T8258] usb 3-1: USB disconnect, device number 22
[  697.954161][ T5957] m920x_read = error: -19
[  697.958642][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  698.009160][T11715] netlink: 'syz.5.1558': attribute type 83 has an invalid length.
[  698.060153][ T5866] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  698.070246][ T5866] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  698.082753][ T5866] usb 1-1: USB disconnect, device number 55
[  698.084782][ T6013] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[  698.135084][ T5957] m920x_read = error: -19
[  698.140292][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  698.242216][ T6013] usb 7-1: device descriptor read/64, error -71
[  698.316651][ T5866] m920x_read = error: -19
[  698.321038][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  698.509140][ T5866] m920x_read = error: -19
[  698.520662][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  698.522373][ T6013] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  698.567676][T11745] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  698.693949][ T5957] m920x_read = error: -19
[  698.698330][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  698.712336][ T6013] usb 7-1: device descriptor read/64, error -71
[  698.790406][T11751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1570'.
[  698.800888][T11751] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1570'.
[  698.842511][ T6013] usb usb7-port1: attempt power cycle
[  698.851260][ T5866] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  698.893988][ T5957] m920x_read = error: -19
[  698.898388][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  698.990445][ T5866] usb 3-1: device descriptor read/64, error -71
[  699.016620][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'.
[  699.079917][ T5957] m920x_read = error: -19
[  699.084305][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  699.204000][ T6013] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[  699.228226][ T6013] usb 7-1: device descriptor read/8, error -71
[  699.257419][ T8258] m920x_read = error: -19
[  699.261794][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  699.269974][ T5866] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  699.364459][ T5957] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  699.418724][ T5866] usb 3-1: device descriptor read/64, error -71
[  699.439568][ T8258] m920x_read = error: -19
[  699.444141][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  699.482238][ T6013] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[  699.529509][ T6013] usb 7-1: device descriptor read/8, error -71
[  699.536189][ T5866] usb usb3-port1: attempt power cycle
[  699.546286][ T5957] usb 1-1: Using ep0 maxpacket: 16
[  699.554505][ T5957] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  699.564076][ T5957] usb 1-1: config 0 has no interface number 0
[  699.573561][ T5957] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  699.583745][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.584441][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1578'.
[  699.592566][ T5957] usb 1-1: Product: syz
[  699.607728][ T5957] usb 1-1: Manufacturer: syz
[  699.612475][ T5957] usb 1-1: SerialNumber: syz
[  699.619023][ T5957] usb 1-1: config 0 descriptor??
[  699.624166][ T8258] m920x_read = error: -19
[  699.628555][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  699.638982][ T5957] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  699.653549][ T6013] usb usb7-port1: unable to enumerate USB device
[  699.813840][ T8258] m920x_read = error: -19
[  699.818261][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  699.868052][ T5957] gspca_spca1528: reg_w err -71
[  699.888221][ T5957] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  699.903024][ T5957] usb 1-1: USB disconnect, device number 56
[  699.931206][ T5866] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  699.968048][ T5866] usb 3-1: device descriptor read/8, error -71
[  699.995256][ T8258] m920x_read = error: -19
[  700.000049][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  700.035334][T11789] hugetlbfs: Bad value 't' for mount option 'nr_inodes'
[  700.035334][T11789] 
[  700.104096][T11790] netlink: 'syz.0.1582': attribute type 12 has an invalid length.
[  700.120582][T11790] hugetlbfs: Bad value 't' for mount option 'nr_inodes'
[  700.120582][T11790] 
[  700.178258][ T5957] m920x_read = error: -19
[  700.189260][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  700.230390][ T5866] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  700.275436][ T5866] usb 3-1: device descriptor read/8, error -71
[  700.369590][ T5957] m920x_read = error: -19
[  700.374082][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  700.401675][ T5866] usb usb3-port1: unable to enumerate USB device
[  700.550987][ T5866] m920x_read = error: -19
[  700.555625][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  700.733974][ T5866] m920x_read = error: -19
[  700.738449][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  700.925272][ T5866] m920x_read = error: -19
[  700.929679][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  701.070832][T11813] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  701.079144][T11813] overlayfs: failed to set xattr on upper
[  701.084968][T11813] overlayfs: ...falling back to redirect_dir=nofollow.
[  701.094406][T11813] overlayfs: ...falling back to index=off.
[  701.103250][T11813] overlayfs: ...falling back to uuid=null.
[  701.112131][T11813] overlayfs: ...falling back to xino=off.
[  701.117718][ T5957] m920x_read = error: -19
[  701.122382][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  701.260996][T11822] syzkaller1: entered promiscuous mode
[  701.266600][T11822] syzkaller1: entered allmulticast mode
[  701.320415][T11828] fuse: Bad value for 'fd'
[  701.327536][ T5957] m920x_read = error: -19
[  701.337232][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  701.534525][ T8258] m920x_read = error: -19
[  701.539126][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  701.716452][ T5866] m920x_read = error: -19
[  701.720927][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  701.762820][ T6013] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[  701.901038][ T5866] m920x_read = error: -19
[  701.905560][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  701.932628][ T6013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.943710][ T6013] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.953538][ T6013] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  701.963639][ T6013] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.973869][ T6013] usb 7-1: config 0 descriptor??
[  702.092167][ T5866] m920x_read = error: -19
[  702.097719][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  702.197386][   T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  702.222423][T11851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1598'.
[  702.283099][ T5866] m920x_read = error: -19
[  702.289004][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  702.379127][   T10] usb 3-1: Using ep0 maxpacket: 32
[  702.387481][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  702.405152][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  702.415973][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.433512][   T10] usb 3-1: config 0 descriptor??
[  702.444412][   T10] hub 3-1:0.0: bad descriptor, ignoring hub
[  702.462207][   T10] hub 3-1:0.0: probe with driver hub failed with error -5
[  702.478032][ T5866] m920x_read = error: -19
[  702.481070][   T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  702.482409][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  702.646688][ T5866] m920x_read = error: -19
[  702.651073][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  702.759218][ T6013] usbhid 7-1:0.0: can't add hid device: -32
[  702.769564][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.782231][ T6013] usbhid 7-1:0.0: probe with driver usbhid failed with error -32
[  702.782642][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.828168][ T5866] m920x_read = error: -19
[  702.833722][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  702.961322][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1604'.
[  703.009986][ T5866] m920x_read = error: -19
[  703.014448][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  703.052664][ T8258] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  703.191751][ T5866] m920x_read = error: -19
[  703.196588][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  703.226765][ T8258] usb 1-1: unable to get BOS descriptor or descriptor too short
[  703.236119][ T8258] usb 1-1: no configurations
[  703.240767][ T8258] usb 1-1: can't read configurations, error -22
[  703.373910][ T5866] m920x_read = error: -19
[  703.378324][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  703.556318][ T5866] m920x_read = error: -19
[  703.560765][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  703.737260][ T5866] m920x_read = error: -19
[  703.741823][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  703.918554][ T5866] m920x_read = error: -19
[  703.922972][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  704.100309][ T5866] m920x_read = error: -19
[  704.105077][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  704.282043][ T5866] m920x_read = error: -19
[  704.286431][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  704.356865][ T8258] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  704.463771][ T5866] m920x_read = error: -19
[  704.468269][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  704.517283][ T8258] usb 1-1: Using ep0 maxpacket: 32
[  704.523922][ T8258] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  704.533721][ T8258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.543895][ T8258] usb 1-1: config 0 descriptor??
[  704.555602][ T8258] gspca_main: nw80x-2.14.0 probing 055f:d001
[  704.596982][T11833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  704.645655][ T5866] m920x_read = error: -19
[  704.652572][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  704.682433][T11894] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1608'.
[  704.705653][ T5866] usb 7-1: USB disconnect, device number 65
[  704.769899][T11890] loop2: detected capacity change from 0 to 8
[  704.784529][T11890] Dev loop2: unable to read RDB block 8
[  704.790348][T11890]  loop2: unable to read partition table
[  704.810407][T11890] loop2: partition table beyond EOD, truncated
[  704.820769][T11890] loop_reread_partitions: partition scan of loop2 (þ被xü^>Ñà– ) failed (rc=-5)
[  704.852002][   T24] m920x_read = error: -19
[  704.856973][   T24] dvb-usb: error -19 while querying for an remote control event.
[  704.903673][ T8258] gspca_nw80x: reg_w err -71
[  704.927545][ T8258] nw80x 1-1:0.0: probe with driver nw80x failed with error -71
[  704.952572][ T8258] usb 1-1: USB disconnect, device number 58
[  705.065239][ T5866] m920x_read = error: -19
[  705.069621][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  705.276384][ T5957] usb 3-1: USB disconnect, device number 27
[  705.309692][ T5866] m920x_read = error: -19
[  705.314347][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  705.354205][   T10] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[  705.515414][T11927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1619'.
[  705.522280][ T8258] m920x_read = error: -19
[  705.528714][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  705.575721][   T10] usb 7-1: Using ep0 maxpacket: 8
[  705.585464][   T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  705.603182][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  705.612760][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  705.625283][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  705.636969][   T10] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  705.649893][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.676391][   T10] hub 7-1:1.0: bad descriptor, ignoring hub
[  705.682725][ T6013] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  705.701533][   T10] hub 7-1:1.0: probe with driver hub failed with error -5
[  705.713596][   T10] cdc_wdm 7-1:1.0: skipping garbage
[  705.718992][   T10] cdc_wdm 7-1:1.0: skipping garbage
[  705.725269][ T5866] m920x_read = error: -19
[  705.734458][   T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  705.740069][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  705.740977][   T10] cdc_wdm 7-1:1.0: Unknown control protocol
[  705.842990][ T6013] usb 3-1: device descriptor read/64, error -71
[  705.981940][ T5866] m920x_read = error: -19
[  705.986737][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  706.120801][ T6013] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  706.163683][ T5866] m920x_read = error: -19
[  706.173991][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  706.281324][ T6013] usb 3-1: device descriptor read/64, error -71
[  706.337845][T11912] usb 7-1: reset high-speed USB device number 66 using dummy_hcd
[  706.366757][ T5957] m920x_read = error: -19
[  706.371193][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  706.399122][ T6013] usb usb3-port1: attempt power cycle
[  706.548402][ T5957] m920x_read = error: -19
[  706.552796][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  706.583526][ T5866] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  706.740997][ T5957] m920x_read = error: -19
[  706.745604][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  706.764166][ T5866] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  706.764867][ T6013] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  706.781751][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  706.792010][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  706.801575][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  706.808286][ T6013] usb 3-1: device descriptor read/8, error -71
[  706.813510][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  706.831323][ T5866] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  706.837342][ T6011] usb 7-1: USB disconnect, device number 66
[  706.842016][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  706.856783][ T5866] usb 1-1: Product: syz
[  706.861956][ T5866] usb 1-1: Manufacturer: syz
[  706.875059][ T5866] cdc_wdm 1-1:1.0: skipping garbage
[  706.880489][ T5866] cdc_wdm 1-1:1.0: skipping garbage
[  706.886875][ T5866] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  706.893293][ T5866] cdc_wdm 1-1:1.0: Unknown control protocol
[  706.922584][ T5866] m920x_read = error: -19
[  706.927043][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  707.072255][ T6013] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  707.088550][ T5866] usb 1-1: USB disconnect, device number 59
[  707.095914][ T6013] usb 3-1: device descriptor read/8, error -71
[  707.115187][ T5957] m920x_read = error: -19
[  707.119601][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  707.211550][ T6013] usb usb3-port1: unable to enumerate USB device
[  707.296760][ T5866] m920x_read = error: -19
[  707.304584][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  707.323807][T11964] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  707.337676][T11964] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  707.500170][ T5866] m920x_read = error: -19
[  707.504677][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  707.681633][ T5866] m920x_read = error: -19
[  707.689170][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  707.885432][ T5866] m920x_read = error: -19
[  707.889922][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  708.045262][ T5957] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  708.066526][ T5866] m920x_read = error: -19
[  708.070983][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  708.188890][T11980] virt_wifi0 speed is unknown, defaulting to 1000
[  708.226912][ T5957] usb 1-1: Using ep0 maxpacket: 32
[  708.233866][ T5957] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[  708.242470][ T5957] usb 1-1: config 0 has no interface number 0
[  708.253103][ T5866] m920x_read = error: -19
[  708.257471][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  708.276750][ T5957] usb 1-1: config 0 interface 207 has no altsetting 0
[  708.288071][ T5957] usb 1-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=ee.45
[  708.304380][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=209
[  708.313118][ T5957] usb 1-1: Product: syz
[  708.317384][ T5957] usb 1-1: Manufacturer: syz
[  708.322271][ T5957] usb 1-1: SerialNumber: syz
[  708.332401][ T5957] usb 1-1: config 0 descriptor??
[  708.347087][ T5957] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053
[  708.453939][ T5866] m920x_read = error: -19
[  708.462720][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  708.528692][   T30] audit: type=1107 audit(1757177848.753:119): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  708.577588][ T5957] gspca_zc3xx: reg_w_i err -71
[  708.690970][ T5866] m920x_read = error: -19
[  708.695362][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  708.704380][ T5957] gspca_zc3xx 1-1:0.207: probe with driver gspca_zc3xx failed with error -71
[  708.741602][ T5957] usb 1-1: USB disconnect, device number 60
[  708.837309][T11994] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1639'.
[  708.868481][   T24] m920x_read = error: -19
[  708.873075][   T24] dvb-usb: error -19 while querying for an remote control event.
[  709.060913][ T5957] m920x_read = error: -19
[  709.065545][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  709.103442][ T5866] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[  709.199817][   T10] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  709.242585][ T5957] m920x_read = error: -19
[  709.246989][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  709.278211][ T5866] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  709.288472][ T5866] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  709.299644][ T5866] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  709.309035][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  709.317047][ T5866] usb 7-1: SerialNumber: syz
[  709.338773][   T10] usb 3-1: device descriptor read/64, error -71
[  709.424783][   T24] m920x_read = error: -19
[  709.429190][   T24] dvb-usb: error -19 while querying for an remote control event.
[  709.477313][T12000] blk_print_req_error: 54 callbacks suppressed
[  709.477353][T12000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.495734][T12000] buffer_io_error: 54 callbacks suppressed
[  709.495752][T12000] Buffer I/O error on dev nbd0, logical block 0, async page read
[  709.511734][T12000] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.520956][T12000] Buffer I/O error on dev nbd0, logical block 1, async page read
[  709.528855][T12000] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.539339][T12000] Buffer I/O error on dev nbd0, logical block 2, async page read
[  709.555471][T12000] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.557311][ T5866] usb 7-1: 0:2 : does not exist
[  709.567593][T12000] Buffer I/O error on dev nbd0, logical block 3, async page read
[  709.579219][T12000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.591039][ T5866] usb 7-1: USB disconnect, device number 67
[  709.592091][T12000] Buffer I/O error on dev nbd0, logical block 0, async page read
[  709.609454][   T10] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  709.617314][   T24] m920x_read = error: -19
[  709.623461][T12000] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.634290][   T24] dvb-usb: error -19 while querying for an remote control event.
[  709.647714][ T6482] udevd[6482]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  709.652941][T12000] Buffer I/O error on dev nbd0, logical block 1, async page read
[  709.678797][T12000] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.688177][T12000] Buffer I/O error on dev nbd0, logical block 2, async page read
[  709.698889][T12000] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.709203][T12000] Buffer I/O error on dev nbd0, logical block 3, async page read
[  709.717567][T12000] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.727434][T12000] Buffer I/O error on dev nbd0, logical block 0, async page read
[  709.735457][T12000] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  709.744516][T12000] Buffer I/O error on dev nbd0, logical block 1, async page read
[  709.754377][T12000] ldm_validate_partition_table(): Disk read failed.
[  709.762820][T12000] Dev nbd0: unable to read RDB block 0
[  709.770507][T12000]  nbd0: unable to read partition table
[  709.777010][   T10] usb 3-1: device descriptor read/64, error -71
[  709.841128][   T24] m920x_read = error: -19
[  709.845515][   T24] dvb-usb: error -19 while querying for an remote control event.
[  709.894831][   T10] usb usb3-port1: attempt power cycle
[  710.022866][   T24] m920x_read = error: -19
[  710.027366][   T24] dvb-usb: error -19 while querying for an remote control event.
[  710.065614][ T5866] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  710.205671][   T24] m920x_read = error: -19
[  710.210050][   T24] dvb-usb: error -19 while querying for an remote control event.
[  710.248110][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short
[  710.258060][   T10] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  710.264341][ T5866] usb 1-1: unable to read config index 0 descriptor/start: -71
[  710.273934][ T5866] usb 1-1: can't read configurations, error -71
[  710.287322][T12010] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1646'.
[  710.297111][   T10] usb 3-1: device descriptor read/8, error -71
[  710.340011][T12013] tmpfs: Bad value for 'nr_inodes'
[  710.386399][ T8258] m920x_read = error: -19
[  710.390814][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  710.569321][   T10] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  710.571930][   T24] m920x_read = error: -19
[  710.581459][   T24] dvb-usb: error -19 while querying for an remote control event.
[  710.591143][   T10] usb 3-1: device descriptor read/8, error -71
[  710.664372][ T8258] usb 7-1: new full-speed USB device number 68 using dummy_hcd
[  710.709165][   T10] usb usb3-port1: unable to enumerate USB device
[  710.749896][   T24] m920x_read = error: -19
[  710.754380][   T24] dvb-usb: error -19 while querying for an remote control event.
[  710.827155][ T8258] usb 7-1: config 5 has an invalid interface number: 123 but max is 0
[  710.839373][ T8258] usb 7-1: config 5 has no interface number 0
[  710.845616][ T8258] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  710.864768][ T8258] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  710.874750][ T8258] usb 7-1: config 5 interface 123 has no altsetting 0
[  710.892438][ T8258] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  710.903671][ T8258] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.911764][ T8258] usb 7-1: Product: syz
[  710.916009][ T8258] usb 7-1: Manufacturer: syz
[  710.920831][ T8258] usb 7-1: SerialNumber: syz
[  710.931682][   T24] m920x_read = error: -19
[  710.936060][   T24] dvb-usb: error -19 while querying for an remote control event.
[  710.965355][T12023] kvm: kvm [12020]: vcpu0, guest rIP: 0x97 Unhandled WRMSR(0x11e) = 0x0
[  711.113689][   T24] m920x_read = error: -19
[  711.118172][   T24] dvb-usb: error -19 while querying for an remote control event.
[  711.295117][ T5866] m920x_read = error: -19
[  711.299652][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  711.488171][ T5866] m920x_read = error: -19
[  711.492754][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  711.669721][ T5866] m920x_read = error: -19
[  711.674095][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  711.852998][ T5866] m920x_read = error: -19
[  711.857495][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  712.034015][ T5866] m920x_read = error: -19
[  712.038399][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  712.214087][T12034] netlink: 'syz.2.1653': attribute type 5 has an invalid length.
[  712.222609][   T24] m920x_read = error: -19
[  712.227576][T12034] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1653'.
[  712.238515][   T24] dvb-usb: error -19 while querying for an remote control event.
[  712.417811][ T5866] m920x_read = error: -19
[  712.422228][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  712.517475][T12043] wlan1 speed is unknown, defaulting to 1000
[  712.523880][T12043] wlan1 speed is unknown, defaulting to 1000
[  712.531210][T12043] wlan1 speed is unknown, defaulting to 1000
[  712.553051][T12043] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  712.586491][T12043] wlan1 speed is unknown, defaulting to 1000
[  712.595168][T12043] wlan1 speed is unknown, defaulting to 1000
[  712.604921][T12043] wlan1 speed is unknown, defaulting to 1000
[  712.610008][ T5866] m920x_read = error: -19
[  712.613377][T12043] wlan1 speed is unknown, defaulting to 1000
[  712.620311][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  712.624933][T12043] wlan1 speed is unknown, defaulting to 1000
[  712.652744][   T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  712.802443][   T24] m920x_read = error: -19
[  712.806890][   T24] dvb-usb: error -19 while querying for an remote control event.
[  712.837622][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  712.854137][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  712.877531][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.892245][   T10] usb 1-1: config 0 descriptor??
[  712.901199][   T10] hdpvr 1-1:0.0: Could not find bulk-in endpoint
[  712.907728][   T10] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  713.005774][   T24] m920x_read = error: -19
[  713.010344][   T24] dvb-usb: error -19 while querying for an remote control event.
[  713.115335][   T10] usb 1-1: USB disconnect, device number 63
[  713.123823][ T5866] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  713.198048][   T24] m920x_read = error: -19
[  713.202528][   T24] dvb-usb: error -19 while querying for an remote control event.
[  713.298536][ T5866] usb 3-1: Using ep0 maxpacket: 32
[  713.304407][ T5866] usb 3-1: too many configurations: 111, using maximum allowed: 8
[  713.313978][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -61
[  713.321811][ T5866] usb 3-1: can't read configurations, error -61
[  713.379812][   T24] m920x_read = error: -19
[  713.384371][   T24] dvb-usb: error -19 while querying for an remote control event.
[  713.465370][ T5866] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  713.561506][   T24] m920x_read = error: -19
[  713.565927][   T24] dvb-usb: error -19 while querying for an remote control event.
[  713.596393][ T8258] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device.
[  713.624856][ T8258] usb 7-1: USB disconnect, device number 68
[  713.631077][ T5866] usb 3-1: Using ep0 maxpacket: 32
[  713.646625][ T5866] usb 3-1: too many configurations: 111, using maximum allowed: 8
[  713.679974][ T5914] Bluetooth: hci0: unexpected event for opcode 0x0c1b
[  713.688550][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -61
[  713.696964][ T5866] usb 3-1: can't read configurations, error -61
[  713.704182][ T5866] usb usb3-port1: attempt power cycle
[  713.754226][   T24] m920x_read = error: -19
[  713.759837][   T24] dvb-usb: error -19 while querying for an remote control event.
[  713.935695][ T8258] m920x_read = error: -19
[  713.940097][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  713.989162][   T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  714.064007][ T5866] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  714.086330][ T5866] usb 3-1: Using ep0 maxpacket: 32
[  714.092150][ T5866] usb 3-1: too many configurations: 111, using maximum allowed: 8
[  714.103729][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -61
[  714.111512][ T5866] usb 3-1: can't read configurations, error -61
[  714.117332][ T6011] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[  714.118577][ T8258] m920x_read = error: -19
[  714.131439][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  714.170832][   T10] usb 1-1: Using ep0 maxpacket: 32
[  714.177697][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  714.189554][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  714.201617][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  714.212931][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  714.222012][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.232142][   T10] usb 1-1: config 0 descriptor??
[  714.238525][T12055] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  714.248930][   T10] hub 1-1:0.0: USB hub found
[  714.277680][ T6011] usb 7-1: Using ep0 maxpacket: 32
[  714.277680][ T5866] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  714.292773][ T6011] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  714.302004][ T6011] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.311491][ T5866] usb 3-1: Using ep0 maxpacket: 32
[  714.314867][ T6011] usb 7-1: config 0 descriptor??
[  714.318857][ T5866] usb 3-1: too many configurations: 111, using maximum allowed: 8
[  714.330336][ T8258] m920x_read = error: -19
[  714.335617][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  714.346311][ T5866] usb 3-1: unable to read config index 0 descriptor/start: -61
[  714.349834][ T6011] gspca_main: nw80x-2.14.0 probing 055f:d001
[  714.356712][ T5866] usb 3-1: can't read configurations, error -61
[  714.367400][ T5866] usb usb3-port1: unable to enumerate USB device
[  714.468993][   T10] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  714.513758][ T5866] m920x_read = error: -19
[  714.518131][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  714.553423][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.562469][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.694776][ T5866] m920x_read = error: -19
[  714.700310][   T10] hid-generic 0003:046D:C314.0026: item fetching failed at offset 2/3
[  714.702956][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  714.717462][   T10] hid-generic 0003:046D:C314.0026: probe with driver hid-generic failed with error -22
[  714.901154][ T5866] m920x_read = error: -19
[  714.905561][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  715.047857][ T5866] usb 1-1: USB disconnect, device number 64
[  715.079601][ T5866] m920x_read = error: -19
[  715.083988][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  715.261497][ T5866] m920x_read = error: -19
[  715.266175][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  715.438566][ T6011] gspca_nw80x: reg_w err -71
[  715.443818][ T6011] nw80x 7-1:0.0: probe with driver nw80x failed with error -71
[  715.448709][ T5866] m920x_read = error: -19
[  715.467258][ T6011] usb 7-1: USB disconnect, device number 69
[  715.467909][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  715.667553][ T5866] m920x_read = error: -19
[  715.672030][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  715.862069][ T5866] m920x_read = error: -19
[  715.866513][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  715.926866][   T30] audit: type=1326 audit(1757177855.675:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.5.1663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb7d8ebe9 code=0x0
[  715.983250][   T30] audit: type=1326 audit(1757177855.722:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12063 comm="syz.5.1663" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb7d8ebe9 code=0x0
[  716.042075][ T5866] m920x_read = error: -19
[  716.046518][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  716.166189][T12075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.176864][T12075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.223727][   T24] m920x_read = error: -19
[  716.228170][   T24] dvb-usb: error -19 while querying for an remote control event.
[  716.416125][   T24] m920x_read = error: -19
[  716.420703][ T5866] usb 7-1: new full-speed USB device number 70 using dummy_hcd
[  716.434642][   T24] dvb-usb: error -19 while querying for an remote control event.
[  716.535366][T12097] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1672'.
[  716.610314][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  716.623029][   T24] m920x_read = error: -19
[  716.627829][   T24] dvb-usb: error -19 while querying for an remote control event.
[  716.639376][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  716.650864][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  716.683178][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  716.699240][ T5866] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  716.711086][ T5866] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  716.719261][ T5866] usb 7-1: Manufacturer: syz
[  716.728216][ T5866] usb 7-1: config 0 descriptor??
[  716.811546][   T24] m920x_read = error: -19
[  716.817211][   T24] dvb-usb: error -19 while querying for an remote control event.
[  716.936127][T12104] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  716.964206][T12104] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  717.027896][   T43] m920x_read = error: -19
[  717.032340][   T43] dvb-usb: error -19 while querying for an remote control event.
[  717.057443][ T5866] rc_core: IR keymap rc-hauppauge not found
[  717.063392][ T5866] Registered IR keymap rc-empty
[  717.069069][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.089346][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.124186][ T5866] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1
[  717.137826][ T5866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1/input48
[  717.155307][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.185689][   T24] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  717.193589][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.207620][ T8258] m920x_read = error: -19
[  717.212198][ T8258] dvb-usb: error -19 while querying for an remote control event.
[  717.220124][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.249840][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.271707][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.293265][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.314719][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.346339][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.378698][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.387987][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  717.396141][   T43] m920x_read = error: -19
[  717.400889][ T5866] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  717.408143][   T43] dvb-usb: error -19 while querying for an remote control event.
[  717.416022][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  717.423879][   T24] usb 3-1: too many configurations: 251, using maximum allowed: 8
[  717.434203][   T24] usb 3-1: unable to read config index 0 descriptor/start: -61
[  717.441789][   T24] usb 3-1: can't read configurations, error -61
[  717.450279][ T5866] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[  717.459134][ T5866] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  717.473143][ T5866] usb 7-1: USB disconnect, device number 70
[  717.593863][   T43] m920x_read = error: -19
[  717.598302][   T24] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  717.606083][   T43] dvb-usb: error -19 while querying for an remote control event.
[  717.784464][   T43] m920x_read = error: -19
[  717.789578][   T43] dvb-usb: error -19 while querying for an remote control event.
[  717.799595][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  717.809822][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  717.818698][   T24] usb 3-1: too many configurations: 251, using maximum allowed: 8
[  717.829205][   T24] usb 3-1: unable to read config index 0 descriptor/start: -61
[  717.836789][   T24] usb 3-1: can't read configurations, error -61
[  717.843484][   T24] usb usb3-port1: attempt power cycle
[  717.933960][ T5866] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  717.942234][    T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!!
[  717.951000][    T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!!
[  717.978001][   T43] m920x_read = error: -19
[  717.982354][   T43] dvb-usb: error -19 while querying for an remote control event.
[  718.142716][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  718.154769][ T5866] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  718.168112][   T43] m920x_read = error: -19
[  718.178470][   T43] dvb-usb: error -19 while querying for an remote control event.
[  718.189123][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.204226][ T5866] usb 7-1: config 0 descriptor??
[  718.255381][   T24] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  718.280528][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  718.288835][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  718.296610][   T24] usb 3-1: too many configurations: 251, using maximum allowed: 8
[  718.306504][   T24] usb 3-1: unable to read config index 0 descriptor/start: -61
[  718.314388][   T24] usb 3-1: can't read configurations, error -61
[  718.383095][   T43] m920x_read = error: -19
[  718.390044][   T43] dvb-usb: error -19 while querying for an remote control event.
[  718.434841][ T5866] usb 7-1: string descriptor 0 read error: -71
[  718.448322][ T5866] pwc: Askey VC010 type 2 USB webcam detected.
[  718.454868][ T5866] pwc: send_video_command error -71
[  718.460254][   T24] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  718.467855][ T5866] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  718.475814][ T5866] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  718.487150][ T5866] usb 7-1: USB disconnect, device number 71
[  718.496254][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  718.509027][   T24] usb 3-1: not running at top speed; connect to a high speed hub
[  718.517262][   T24] usb 3-1: too many configurations: 251, using maximum allowed: 8
[  718.528642][   T24] usb 3-1: unable to read config index 0 descriptor/start: -61
[  718.536960][   T24] usb 3-1: can't read configurations, error -61
[  718.545804][   T24] usb usb3-port1: unable to enumerate USB device
[  718.575379][   T24] m920x_read = error: -19
[  718.579797][   T24] dvb-usb: error -19 while querying for an remote control event.
[  718.760127][ T5866] m920x_read = error: -19
[  718.764611][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  718.938819][ T5866] m920x_read = error: -19
[  718.939904][ T6011] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  718.943339][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  719.120776][ T6011] usb 1-1: Using ep0 maxpacket: 8
[  719.131460][ T5866] m920x_read = error: -19
[  719.132822][ T6011] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  719.135838][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  719.144894][ T6011] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  719.173547][ T6011] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  719.203296][ T6011] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  719.249402][ T6011] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  719.261467][ T6011] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  719.275378][ T6011] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  719.284854][ T6011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.366670][ T5866] m920x_read = error: -19
[  719.371057][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  719.516241][   T10] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[  719.548944][   T43] m920x_read = error: -19
[  719.553324][   T43] dvb-usb: error -19 while querying for an remote control event.
[  719.555055][ T6011] usb 1-1: GET_CAPABILITIES returned 0
[  719.570818][ T6011] usbtmc 1-1:16.0: can't read capabilities
[  719.711090][   T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  719.722188][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  719.733333][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  719.746690][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  719.757596][   T43] m920x_read = error: -19
[  719.762986][   T43] dvb-usb: error -19 while querying for an remote control event.
[  719.788877][   T10] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  719.805358][    C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  719.815584][T12134] usbtmc 1-1:16.0: Unable to send data, error -71
[  719.839062][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.856649][ T5990] usb 1-1: USB disconnect, device number 65
[  719.887858][   T10] usb 7-1: config 0 descriptor??
[  719.894207][T12146] syz.2.1690 (12146): /proc/12145/oom_adj is deprecated, please use /proc/12145/oom_score_adj instead.
[  719.971921][   T43] m920x_read = error: -19
[  719.998147][   T43] dvb-usb: error -19 while querying for an remote control event.
[  720.066550][T12148] virt_wifi0 speed is unknown, defaulting to 1000
[  720.170040][   T43] m920x_read = error: -19
[  720.175292][   T43] dvb-usb: error -19 while querying for an remote control event.
[  720.203962][T12150] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1692'.
[  720.251414][T12150] virt_wifi0 speed is unknown, defaulting to 1000
[  720.266843][T12150] wlan1 speed is unknown, defaulting to 1000
[  720.343762][   T10] usbhid 7-1:0.0: can't add hid device: -71
[  720.349811][   T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  720.371475][   T43] m920x_read = error: -19
[  720.385127][   T10] usb 7-1: USB disconnect, device number 72
[  720.394250][   T43] dvb-usb: error -19 while querying for an remote control event.
[  720.585215][   T43] m920x_read = error: -19
[  720.589733][   T43] dvb-usb: error -19 while querying for an remote control event.
[  720.745572][  T984] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  720.788613][ T5866] m920x_read = error: -19
[  720.792996][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  720.924224][  T984] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64
[  720.970027][  T984] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  720.996306][   T43] m920x_read = error: -19
[  721.003112][   T43] dvb-usb: error -19 while querying for an remote control event.
[  721.021416][  T984] usb 1-1: config 0 interface 0 has no altsetting 0
[  721.028191][  T984] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  721.046474][  T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.072141][  T984] usb 1-1: config 0 descriptor??
[  721.096978][T12155] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  721.194645][   T43] m920x_read = error: -19
[  721.208388][   T43] dvb-usb: error -19 while querying for an remote control event.
[  721.288366][T12165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  721.332471][T12165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.408378][   T43] m920x_read = error: -19
[  721.412764][   T43] dvb-usb: error -19 while querying for an remote control event.
[  721.570144][T12155] overlayfs: failed to resolve './file0': -2
[  721.609199][  T984] kye 0003:0458:5015.0027: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  721.622315][   T43] m920x_read = error: -19
[  721.628825][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'.
[  721.638539][   T43] dvb-usb: error -19 while querying for an remote control event.
[  721.655628][  T984] kye 0003:0458:5015.0027: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0
[  721.695116][  T984] kye 0003:0458:5015.0027: tablet-enabling feature report not found
[  721.716486][  T984] kye 0003:0458:5015.0027: tablet enabling failed
[  721.814961][   T43] m920x_read = error: -19
[  721.836289][   T43] dvb-usb: error -19 while querying for an remote control event.
[  721.861340][   T43] usb 1-1: USB disconnect, device number 66
[  721.963470][T12187] netlink: 'syz.2.1702': attribute type 11 has an invalid length.
[  721.982704][T12187] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  721.990849][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1702'.
[  722.028447][ T5866] m920x_read = error: -19
[  722.032977][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  722.210325][ T5866] m920x_read = error: -19
[  722.214716][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  722.389322][T12203] binder: 12202:12203 unknown command 0
[  722.403203][   T43] m920x_read = error: -19
[  722.407580][   T43] dvb-usb: error -19 while querying for an remote control event.
[  722.419356][T12203] binder: 12202:12203 ioctl c0306201 200000000080 returned -22
[  722.450563][T12203] binder: 12202:12203 ioctl 401070ca 200000000000 returned -22
[  722.493818][T12203] binder: 12202:12203 ioctl 5201 0 returned -22
[  722.607810][ T5866] m920x_read = error: -19
[  722.612275][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  722.787702][ T5866] m920x_read = error: -19
[  722.792083][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  722.841081][   T43] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  722.902703][T12220] netlink: 763 bytes leftover after parsing attributes in process `syz.5.1713'.
[  722.969307][   T24] m920x_read = error: -19
[  722.973713][   T24] dvb-usb: error -19 while querying for an remote control event.
[  723.109566][   T43] usb 1-1: config 0 has no interfaces?
[  723.115101][   T43] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  723.125023][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.135980][   T43] usb 1-1: config 0 descriptor??
[  723.150985][   T43] m920x_read = error: -19
[  723.155391][   T43] dvb-usb: error -19 while querying for an remote control event.
[  723.193893][ T5990] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  723.334612][   T43] m920x_read = error: -19
[  723.338992][   T43] dvb-usb: error -19 while querying for an remote control event.
[  723.346901][   T24] usb 7-1: new high-speed USB device number 74 using dummy_hcd
[  723.359863][T12208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.368675][T12208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.377343][   T43] usb 1-1: USB disconnect, device number 67
[  723.386588][ T5990] usb 3-1: Using ep0 maxpacket: 32
[  723.394633][ T5990] usb 3-1: config 0 has an invalid interface number: 54 but max is 0
[  723.404452][ T5990] usb 3-1: config 0 has no interface number 0
[  723.411714][ T5990] usb 3-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  723.422478][ T5990] usb 3-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  723.432487][ T5990] usb 3-1: config 0 interface 54 has no altsetting 0
[  723.441884][ T5990] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42
[  723.451023][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.459047][ T5990] usb 3-1: Product: syz
[  723.463748][ T5990] usb 3-1: Manufacturer: syz
[  723.469000][ T5990] usb 3-1: SerialNumber: syz
[  723.482418][ T5990] usb 3-1: config 0 descriptor??
[  723.488162][T12218] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  723.500930][T12218] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  723.516478][   T24] usb 7-1: Using ep0 maxpacket: 32
[  723.525500][ T5866] m920x_read = error: -19
[  723.529885][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  723.539155][   T24] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  723.548069][   T24] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  723.556934][   T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  723.566542][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[  723.578359][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  723.588924][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  723.598883][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  723.608682][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  723.621885][   T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  723.630927][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.641384][   T24] usb 7-1: config 0 descriptor??
[  723.650884][T12222] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  723.662650][   T24] usblp0: Disabling reads from problematic bidirectional printer
[  723.706943][   T43] m920x_read = error: -19
[  723.711372][   T43] dvb-usb: error -19 while querying for an remote control event.
[  723.725470][ T5990] ums_eneub6250 3-1:0.54: USB Mass Storage device detected
[  723.741927][ T5990] scsi host1: usb-storage 3-1:0.54
[  723.787930][ T5990] ums_eneub6250 3-1:0.54: probe with driver ums_eneub6250 failed with error 3
[  723.807938][ T5990] usb 3-1: USB disconnect, device number 44
[  723.881803][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.888649][ T5866] m920x_read = error: -19
[  723.891947][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.902288][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  723.913282][T12222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.923173][T12222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  723.964520][   T24] usblp 7-1:0.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[  723.987964][   T24] usb 7-1: USB disconnect, device number 74
[  723.998840][   T24] usblp0: removed
[  724.081103][ T5866] m920x_read = error: -19
[  724.091698][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  724.273438][ T5866] m920x_read = error: -19
[  724.277840][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  724.456194][ T5866] m920x_read = error: -19
[  724.460670][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  724.468581][   T24] usb 1-1: new low-speed USB device number 68 using dummy_hcd
[  724.562988][ T5990] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  724.636981][ T5866] m920x_read = error: -19
[  724.641375][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  724.650023][   T24] usb 1-1: Invalid ep0 maxpacket: 32
[  724.722390][ T5990] usb 3-1: Using ep0 maxpacket: 8
[  724.731308][ T5990] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  724.740989][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.749661][ T5990] usb 3-1: Product: syz
[  724.753953][ T5990] usb 3-1: Manufacturer: syz
[  724.759357][ T5990] usb 3-1: SerialNumber: syz
[  724.777547][ T5990] usb 3-1: config 0 descriptor??
[  724.786600][   T24] usb 1-1: new low-speed USB device number 69 using dummy_hcd
[  724.787260][ T5990] gspca_main: se401-2.14.0 probing 047d:5003
[  724.810485][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'.
[  724.820556][ T5866] m920x_read = error: -19
[  724.825143][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  724.826655][T12255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'.
[  724.861629][   T43] usb 7-1: new full-speed USB device number 75 using dummy_hcd
[  724.947846][   T24] usb 1-1: Invalid ep0 maxpacket: 32
[  724.955098][   T24] usb usb1-port1: attempt power cycle
[  725.000394][ T5866] m920x_read = error: -19
[  725.004779][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  725.039240][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  725.047926][   T43] usb 7-1: not running at top speed; connect to a high speed hub
[  725.058857][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  725.068610][   T43] usb 7-1: can't read configurations, error -61
[  725.192941][ T5866] m920x_read = error: -19
[  725.197329][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  725.214256][   T43] usb 7-1: new full-speed USB device number 76 using dummy_hcd
[  725.230480][ T5990] gspca_se401: Frame size: 2x0 bayer
[  725.235979][ T5990] gspca_se401: Frame size: 0x0 1/16th janggu
[  725.321197][   T24] usb 1-1: new low-speed USB device number 70 using dummy_hcd
[  725.343894][   T24] usb 1-1: Invalid ep0 maxpacket: 32
[  725.374629][ T5957] m920x_read = error: -19
[  725.379088][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  725.388806][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  725.397267][   T43] usb 7-1: not running at top speed; connect to a high speed hub
[  725.407399][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  725.415019][   T43] usb 7-1: can't read configurations, error -61
[  725.422232][   T43] usb usb7-port1: attempt power cycle
[  725.455819][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  725.461993][ T5990] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input49
[  725.466116][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.492172][   T24] usb 1-1: new low-speed USB device number 71 using dummy_hcd
[  725.500408][ T5990] usb 3-1: USB disconnect, device number 45
[  725.547267][   T24] usb 1-1: Invalid ep0 maxpacket: 32
[  725.556413][ T5957] m920x_read = error: -19
[  725.560784][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  725.570613][   T24] usb usb1-port1: unable to enumerate USB device
[  725.771015][ T5957] m920x_read = error: -19
[  725.775401][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  725.802266][   T43] usb 7-1: new full-speed USB device number 77 using dummy_hcd
[  725.826617][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  725.838586][   T43] usb 7-1: not running at top speed; connect to a high speed hub
[  725.849302][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  725.857569][   T43] usb 7-1: can't read configurations, error -61
[  725.963213][   T24] m920x_read = error: -19
[  725.967612][   T24] dvb-usb: error -19 while querying for an remote control event.
[  725.994657][   T43] usb 7-1: new full-speed USB device number 78 using dummy_hcd
[  726.018908][   T43] usb 7-1: unable to get BOS descriptor or descriptor too short
[  726.034789][   T43] usb 7-1: not running at top speed; connect to a high speed hub
[  726.045546][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  726.053933][   T43] usb 7-1: can't read configurations, error -61
[  726.061319][   T43] usb usb7-port1: unable to enumerate USB device
[  726.144453][   T43] m920x_read = error: -19
[  726.148866][   T43] dvb-usb: error -19 while querying for an remote control event.
[  726.327429][   T43] m920x_read = error: -19
[  726.331959][   T43] dvb-usb: error -19 while querying for an remote control event.
[  726.508746][   T43] m920x_read = error: -19
[  726.513133][   T43] dvb-usb: error -19 while querying for an remote control event.
[  726.693217][   T43] m920x_read = error: -19
[  726.697592][   T43] dvb-usb: error -19 while querying for an remote control event.
[  726.803856][T12284] afs: Unknown parameter 'dynoc/asound/timers'
[  726.903327][   T43] m920x_read = error: -19
[  726.907673][   T43] dvb-usb: error -19 while querying for an remote control event.
[  726.967633][  T984] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  727.085096][   T43] m920x_read = error: -19
[  727.089596][   T43] dvb-usb: error -19 while querying for an remote control event.
[  727.127832][  T984] usb 3-1: Using ep0 maxpacket: 8
[  727.139003][  T984] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  727.148191][  T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.156341][  T984] usb 3-1: Product: syz
[  727.160689][  T984] usb 3-1: Manufacturer: syz
[  727.165276][  T984] usb 3-1: SerialNumber: syz
[  727.172374][  T984] usb 3-1: config 0 descriptor??
[  727.181087][  T984] gspca_main: se401-2.14.0 probing 047d:5003
[  727.269913][   T43] m920x_read = error: -19
[  727.274307][   T43] dvb-usb: error -19 while querying for an remote control event.
[  727.448650][   T24] m920x_read = error: -19
[  727.453048][   T24] dvb-usb: error -19 while querying for an remote control event.
[  727.487939][   T30] audit: type=1326 audit(1757177866.488:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12290 comm="syz.0.1736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f273a38ebe9 code=0x0
[  727.542632][T12292] tmpfs: Cannot change global quota limit on remount
[  727.617287][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  727.628142][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  727.630327][   T24] m920x_read = error: -19
[  727.642835][   T24] dvb-usb: error -19 while querying for an remote control event.
[  727.812824][ T5957] m920x_read = error: -19
[  727.817216][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  727.844177][   T43] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  727.993813][   T24] m920x_read = error: -19
[  727.998196][   T24] dvb-usb: error -19 while querying for an remote control event.
[  728.026265][   T43] usb 1-1: Using ep0 maxpacket: 16
[  728.037832][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  728.057865][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  728.073487][   T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  728.087979][   T43] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  728.120200][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.148125][   T43] usb 1-1: config 0 descriptor??
[  728.150722][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1740'.
[  728.175949][   T24] m920x_read = error: -19
[  728.180860][   T24] dvb-usb: error -19 while querying for an remote control event.
[  728.207373][T12313] ieee802154 phy0 wpan0: encryption failed: -22
[  728.368127][   T24] m920x_read = error: -19
[  728.372593][   T24] dvb-usb: error -19 while querying for an remote control event.
[  728.420065][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1744'.
[  728.430036][T12323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1744'.
[  728.549766][   T24] m920x_read = error: -19
[  728.554437][   T24] dvb-usb: error -19 while querying for an remote control event.
[  728.640263][   T43] usbhid 1-1:0.0: can't add hid device: -71
[  728.652483][   T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  728.672155][   T43] usb 1-1: USB disconnect, device number 72
[  728.742270][   T24] m920x_read = error: -19
[  728.746663][   T24] dvb-usb: error -19 while querying for an remote control event.
[  728.784998][ T5990] usb 7-1: new low-speed USB device number 79 using dummy_hcd
[  728.794918][  T984] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input50
[  728.924585][   T24] m920x_read = error: -19
[  728.929651][   T24] dvb-usb: error -19 while querying for an remote control event.
[  729.106146][   T24] m920x_read = error: -19
[  729.110572][   T24] dvb-usb: error -19 while querying for an remote control event.
[  729.287581][   T43] m920x_read = error: -19
[  729.293231][   T43] dvb-usb: error -19 while querying for an remote control event.
[  729.469121][   T43] m920x_read = error: -19
[  729.473510][   T43] dvb-usb: error -19 while querying for an remote control event.
[  729.481386][   T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  729.596489][T12342] netlink: 56537 bytes leftover after parsing attributes in process `syz.5.1751'.
[  729.650892][ T5957] m920x_read = error: -19
[  729.655285][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  729.667225][   T24] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  729.677942][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  729.687753][   T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  729.700949][   T24] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  729.709967][   T24] usb 1-1: Product: syz
[  729.714157][   T24] usb 1-1: Manufacturer: syz
[  729.723203][   T24] usb 1-1: SerialNumber: syz
[  729.735004][   T24] usb 1-1: config 0 descriptor??
[  729.760617][   T24] usb 1-1: selecting invalid altsetting 0
[  729.832853][   T24] m920x_read = error: -19
[  729.837570][   T24] dvb-usb: error -19 while querying for an remote control event.
[  729.925062][   T24] usb 3-1: USB disconnect, device number 46
[  730.014395][ T5957] m920x_read = error: -19
[  730.018895][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  730.021710][T12333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.049201][T12333] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.074496][T12356] IPVS: set_ctl: invalid protocol: 171 172.20.20.187:20002
[  730.140195][   T24] usb 1-1: USB disconnect, device number 73
[  730.218857][ T5957] m920x_read = error: -19
[  730.223243][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  730.230005][T12358] virt_wifi0 speed is unknown, defaulting to 1000
[  730.243797][T12358] wlan1 speed is unknown, defaulting to 1000
[  730.420785][   T24] m920x_read = error: -19
[  730.425168][   T24] dvb-usb: error -19 while querying for an remote control event.
[  730.602704][   T24] m920x_read = error: -19
[  730.607089][   T24] dvb-usb: error -19 while querying for an remote control event.
[  730.784525][ T5957] m920x_read = error: -19
[  730.790006][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  730.821908][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1759'.
[  730.966081][   T24] m920x_read = error: -19
[  730.970440][   T24] dvb-usb: error -19 while querying for an remote control event.
[  731.084237][ T5957] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  731.147585][   T24] m920x_read = error: -19
[  731.151979][   T24] dvb-usb: error -19 while querying for an remote control event.
[  731.200980][  T984] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  731.246112][ T5957] usb 3-1: not running at top speed; connect to a high speed hub
[  731.255428][ T5957] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  731.266279][ T5957] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  731.279322][ T5957] usb 3-1: config 1 interface 0 has no altsetting 0
[  731.290495][ T5957] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  731.299789][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.307912][ T5957] usb 3-1: Product: syz
[  731.312183][ T5957] usb 3-1: Manufacturer: ⡭诀Ā
[  731.317492][ T5957] usb 3-1: SerialNumber: syz
[  731.326718][T12371] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  731.334090][   T24] m920x_read = error: -19
[  731.338491][   T24] dvb-usb: error -19 while querying for an remote control event.
[  731.349385][T12371] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  731.364655][  T984] usb 1-1: device descriptor read/64, error -71
[  731.532626][   T43] m920x_read = error: -19
[  731.537060][   T43] dvb-usb: error -19 while querying for an remote control event.
[  731.630038][  T984] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  731.715582][   T43] m920x_read = error: -19
[  731.719982][   T43] dvb-usb: error -19 while querying for an remote control event.
[  731.748813][ T5990] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  731.758056][ T5990] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  731.773494][  T984] usb 1-1: device descriptor read/64, error -71
[  731.783491][ T5990] usb 7-1: config 0 descriptor??
[  731.795580][ T5990] usb 7-1: can't set config #0, error -71
[  731.803322][ T5990] usb 7-1: USB disconnect, device number 79
[  731.824305][ T5957] usb 3-1: USB disconnect, device number 47
[  731.895976][   T43] m920x_read = error: -19
[  731.904755][   T43] dvb-usb: error -19 while querying for an remote control event.
[  731.906739][  T984] usb usb1-port1: attempt power cycle
[  732.088732][   T43] m920x_read = error: -19
[  732.098968][   T43] dvb-usb: error -19 while querying for an remote control event.
[  732.280714][   T43] m920x_read = error: -19
[  732.281489][  T984] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  732.285315][   T43] dvb-usb: error -19 while querying for an remote control event.
[  732.317232][  T984] usb 1-1: device descriptor read/8, error -71
[  732.414621][T12403] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  732.484777][   T43] m920x_read = error: -19
[  732.489160][   T43] dvb-usb: error -19 while querying for an remote control event.
[  732.601454][  T984] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  732.641721][  T984] usb 1-1: device descriptor read/8, error -71
[  732.676311][   T43] m920x_read = error: -19
[  732.680812][   T43] dvb-usb: error -19 while querying for an remote control event.
[  732.772826][  T984] usb usb1-port1: unable to enumerate USB device
[  732.858041][   T43] m920x_read = error: -19
[  732.862414][   T43] dvb-usb: error -19 while querying for an remote control event.
[  732.918489][T12411] tipc: Started in network mode
[  732.925542][T12411] tipc: Node identity aaaaaaaaaa33, cluster identity 4711
[  732.933122][T12411] tipc: Enabled bearer <eth:vlan1>, priority 2
[  733.039754][   T43] m920x_read = error: -19
[  733.044163][   T43] dvb-usb: error -19 while querying for an remote control event.
[  733.221790][   T43] m920x_read = error: -19
[  733.226178][   T43] dvb-usb: error -19 while querying for an remote control event.
[  733.289217][ T5914] Bluetooth: hci4: unexpected event for opcode 0x0c26
[  733.424586][   T43] m920x_read = error: -19
[  733.433687][   T43] dvb-usb: error -19 while querying for an remote control event.
[  733.502247][T12435] binder: 12434:12435 ioctl c0306201 200000000640 returned -22
[  733.561152][T12435] Bluetooth: MGMT ver 1.23
[  733.642154][   T43] m920x_read = error: -19
[  733.646532][   T43] dvb-usb: error -19 while querying for an remote control event.
[  733.739943][  T984] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  733.820178][   T43] m920x_read = error: -19
[  733.824579][   T43] dvb-usb: error -19 while querying for an remote control event.
[  733.906536][  T984] usb 3-1: Using ep0 maxpacket: 32
[  733.918661][  T984] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  733.933772][  T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  733.945193][  T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  733.960619][  T984] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  733.972957][  T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.984617][  T984] usb 3-1: config 0 descriptor??
[  733.990558][T12433] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  734.002308][ T5957] m920x_read = error: -19
[  734.002891][  T984] hub 3-1:0.0: USB hub found
[  734.009113][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  734.119494][   T43] usb 7-1: new full-speed USB device number 80 using dummy_hcd
[  734.131284][ T5957] tipc: Node number set to 10070698
[  734.198261][ T5957] m920x_read = error: -19
[  734.203187][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  734.285013][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  734.292777][   T43] usb 7-1: can't read configurations, error -61
[  734.386872][ T5957] m920x_read = error: -19
[  734.391277][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  734.433326][  T984] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  734.440168][   T43] usb 7-1: new full-speed USB device number 81 using dummy_hcd
[  734.568785][ T5957] m920x_read = error: -19
[  734.573221][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  734.590640][ T6011] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  734.617336][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  734.629611][   T43] usb 7-1: can't read configurations, error -61
[  734.638475][   T43] usb usb7-port1: attempt power cycle
[  734.668615][  T984] hid-generic 0003:046D:C314.0028: item fetching failed at offset 2/3
[  734.683633][  T984] hid-generic 0003:046D:C314.0028: probe with driver hid-generic failed with error -22
[  734.752738][ T5957] m920x_read = error: -19
[  734.757623][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  734.763063][ T6011] usb 1-1: unable to get BOS descriptor or descriptor too short
[  734.778797][ T6011] usb 1-1: config 0 has an invalid interface number: 238 but max is 0
[  734.796465][ T6011] usb 1-1: config 0 has no interface number 0
[  734.802727][ T6011] usb 1-1: config 0 interface 238 has no altsetting 0
[  734.812379][ T6011] usb 1-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d
[  734.823027][ T6011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.833229][ T6011] usb 1-1: Product: syz
[  734.837874][ T6011] usb 1-1: Manufacturer: syz
[  734.842491][ T6011] usb 1-1: SerialNumber: syz
[  734.853171][ T6011] usb 1-1: config 0 descriptor??
[  734.932126][ T5866] m920x_read = error: -19
[  734.936538][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  734.996486][  T984] usb 3-1: USB disconnect, device number 48
[  735.017702][   T43] usb 7-1: new full-speed USB device number 82 using dummy_hcd
[  735.045146][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  735.053898][   T43] usb 7-1: can't read configurations, error -61
[  735.113737][ T5866] m920x_read = error: -19
[  735.118130][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  735.200416][   T43] usb 7-1: new full-speed USB device number 83 using dummy_hcd
[  735.223931][   T43] usb 7-1: unable to read config index 0 descriptor/start: -61
[  735.231744][   T43] usb 7-1: can't read configurations, error -61
[  735.238354][   T43] usb usb7-port1: unable to enumerate USB device
[  735.298372][   T43] m920x_read = error: -19
[  735.302846][   T43] dvb-usb: error -19 while querying for an remote control event.
[  735.307264][ T6011] gspca_main: spca501-2.14.0 probing 1776:501c
[  735.317557][ T6011] gspca_spca501: reg write: error -71
[  735.322961][ T6011] spca501 1-1:0.238: Reg write failed for 0x02,0x07,0x05
[  735.330274][ T6011] spca501 1-1:0.238: probe with driver spca501 failed with error -22
[  735.345412][ T6011] usb 1-1: USB disconnect, device number 78
[  735.462524][T12466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1792'.
[  735.478097][ T5866] m920x_read = error: -19
[  735.482677][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  735.659206][   T43] m920x_read = error: -19
[  735.663678][   T43] dvb-usb: error -19 while querying for an remote control event.
[  735.840670][   T43] m920x_read = error: -19
[  735.845129][   T43] dvb-usb: error -19 while querying for an remote control event.
[  735.895559][  T984] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  735.922875][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1798'.
[  735.973735][T12484] netlink: 'syz.0.1799': attribute type 20 has an invalid length.
[  735.973735][T12483] netlink: 'syz.0.1799': attribute type 20 has an invalid length.
[  736.023243][T12487] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1800'.
[  736.025978][   T43] m920x_read = error: -19
[  736.038059][   T43] dvb-usb: error -19 while querying for an remote control event.
[  736.091204][  T984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  736.102147][  T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  736.113589][  T984] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  736.123526][  T984] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  736.140661][  T984] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  736.149721][  T984] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  736.157783][  T984] usb 3-1: Manufacturer: syz
[  736.168911][  T984] usb 3-1: config 0 descriptor??
[  736.225582][ T5866] m920x_read = error: -19
[  736.229970][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  736.321872][   T43] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  736.417945][ T5866] m920x_read = error: -19
[  736.422360][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  736.472641][  T984] rc_core: IR keymap rc-hauppauge not found
[  736.478703][  T984] Registered IR keymap rc-empty
[  736.482244][   T43] usb 1-1: Using ep0 maxpacket: 32
[  736.489165][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.505139][   T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  736.516978][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  736.528315][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  736.539580][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.539642][   T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  736.555988][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.567363][   T43] usb 1-1: config 0 descriptor??
[  736.573196][T12490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  736.591588][   T43] hub 1-1:0.0: USB hub found
[  736.596751][  T984] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1
[  736.610547][ T5866] m920x_read = error: -19
[  736.615037][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  736.666306][  T984] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input51
[  736.710131][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.752224][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.792941][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.803188][ T5866] m920x_read = error: -19
[  736.808907][ T5866] dvb-usb: error -19 while querying for an remote control event.
[  736.825219][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.847085][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.883132][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.889340][T12506] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1806'.
[  736.911226][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.931252][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.952646][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.973928][  T984] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  736.985017][ T5957] m920x_read = error: -19
[  736.989683][   T31] INFO: task syz.3.1011:9824 blocked for more than 143 seconds.
[  737.005911][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  737.008594][  T984] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  737.026004][   T43] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  737.033486][  T984] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  737.035576][   T31]       Not tainted syzkaller #0
[  737.062241][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  737.072184][   T31] task:syz.3.1011      state:D stack:27144 pid:9824  tgid:9800  ppid:5905   task_flags:0x400140 flags:0x00004004
[  737.084386][   T31] Call Trace:
[  737.087830][   T31]  <TASK>
[  737.090937][   T31]  __schedule+0x1798/0x4cc0
[  737.095739][   T31]  ? __lock_acquire+0xab9/0xd20
[  737.100779][   T31]  ? __pfx___schedule+0x10/0x10
[  737.106036][   T31]  ? schedule+0x91/0x360
[  737.110815][   T31]  schedule+0x165/0x360
[  737.115387][   T31]  schedule_timeout+0x9a/0x270
[  737.120336][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  737.138840][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  737.154692][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  737.160272][   T31]  ? wait_for_completion+0x267/0x5d0
[  737.165672][   T31]  wait_for_completion+0x2bf/0x5d0
[  737.171009][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  737.178312][   T31]  ? flush_workqueue_prep_pwqs+0x47c/0x4f0
[  737.184188][   T31]  ? check_flush_dependency+0x88/0x400
[  737.190047][   T31]  __flush_workqueue+0x6f7/0x14b0
[  737.195138][   T31]  ? xa_find_after+0x402/0x430
[  737.199989][   T31]  ? xa_find_after+0xae/0x430
[  737.204691][   T31]  ? __pfx___flush_workqueue+0x10/0x10
[  737.210279][   T31]  ? __pfx_blk_mq_run_hw_queues+0x10/0x10
[  737.216056][   T31]  ? blk_mq_unquiesce_queue+0xbe/0x120
[  737.223065][ T5957] m920x_read = error: -19
[  737.225086][   T31]  nbd_ioctl+0xafe/0xeb0
[  737.227500][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  737.232665][   T31]  ? __pfx_nbd_ioctl+0x10/0x10
[  737.244867][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  737.251040][   T31]  ? __pfx_nbd_ioctl+0x10/0x10
[  737.256281][   T31]  blkdev_ioctl+0x5ac/0x6d0
[  737.261385][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  737.266577][   T31]  ? __fget_files+0x3a0/0x420
[  737.271307][   T31]  ? __fget_files+0x2a/0x420
[  737.276040][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  737.281037][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  737.286312][   T31]  __se_sys_ioctl+0xf9/0x170
[  737.290967][   T31]  do_syscall_64+0xfa/0xfa0
[  737.294394][   T43] hid-generic 0003:046D:C314.0029: item fetching failed at offset 2/3
[  737.308757][   T43] hid-generic 0003:046D:C314.0029: probe with driver hid-generic failed with error -22
[  737.312876][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.324656][   T31]  ? __switch_to_asm+0x39/0x70
[  737.332311][   T31]  ? clear_bhb_loop+0x60/0xb0
[  737.337107][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.345070][   T31] RIP: 0033:0x7fc8db38ebe9
[  737.351314][   T31] RSP: 002b:00007fc8dc236038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  737.360277][   T31] RAX: ffffffffffffffda RBX: 00007fc8db5c6360 RCX: 00007fc8db38ebe9
[  737.368275][   T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  737.377164][   T31] RBP: 00007fc8db411e19 R08: 0000000000000000 R09: 0000000000000000
[  737.385248][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  737.393311][   T31] R13: 00007fc8db5c63f8 R14: 00007fc8db5c6360 R15: 00007fff1ad2e148
[  737.401320][   T31]  </TASK>
[  737.404566][   T31] 
[  737.404566][   T31] Showing all locks held in the system:
[  737.412969][ T5957] m920x_read = error: -19
[  737.417486][ T5957] dvb-usb: error -19 while querying for an remote control event.
[  737.426582][   T31] 1 lock held by khungtaskd/31:
[  737.432235][   T31]  #0: ffffffff8e53cf20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  737.442383][   T31] 1 lock held by udevd/5232:
[  737.454629][   T31] 2 locks held by getty/5625:
[  737.459512][   T31]  #0: ffff8880344f40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  737.469486][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  737.480259][   T31] 2 locks held by kworker/u9:4/5908:
[  737.485579][   T31]  #0: ffff888025794148 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  737.497050][   T31]  #1: ffffc900042afba0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  737.509186][   T31] 1 lock held by syz.2.1795/12472:
[  737.514326][   T31]  #0: ffffffff8e542880 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  737.524401][   T31] 3 locks held by syz.0.1801/12489:
[  737.529775][   T31] 
[  737.532810][   T31] =============================================
[  737.532810][   T31] 
[  737.541544][   T31] NMI backtrace for cpu 1
[  737.541563][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  737.541585][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  737.541598][   T31] Call Trace:
[  737.541606][   T31]  <TASK>
[  737.541615][   T31]  dump_stack_lvl+0x189/0x250
[  737.541648][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  737.541667][   T31]  ? __pfx__printk+0x10/0x10
[  737.541708][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  737.541736][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  737.541764][   T31]  ? __pfx__printk+0x10/0x10
[  737.541796][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  737.541820][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  737.541849][   T31]  watchdog+0xf60/0xfa0
[  737.541876][   T31]  ? watchdog+0x1e2/0xfa0
[  737.541902][   T31]  kthread+0x70e/0x8a0
[  737.541933][   T31]  ? __pfx_watchdog+0x10/0x10
[  737.541952][   T31]  ? __pfx_kthread+0x10/0x10
[  737.541980][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  737.542008][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  737.542024][   T31]  ? __pfx_kthread+0x10/0x10
[  737.542054][   T31]  ret_from_fork+0x47c/0x820
[  737.542078][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  737.542108][   T31]  ? __switch_to_asm+0x39/0x70
[  737.542128][   T31]  ? __switch_to_asm+0x33/0x70
[  737.542146][   T31]  ? __pfx_kthread+0x10/0x10
[  737.542176][   T31]  ret_from_fork_asm+0x1a/0x30
[  737.542212][   T31]  </TASK>
[  737.542223][   T31] Sending NMI from CPU 1 to CPUs 0:
[  737.575435][  T984] usb 3-1: USB disconnect, device number 49
[  737.577295][    C0] NMI backtrace for cpu 0
[  737.577312][    C0] CPU: 0 UID: 0 PID: 984 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) 
[  737.577344][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  737.577357][    C0] Workqueue: usb_hub_wq hub_event
[  737.577388][    C0] RIP: 0010:io_serial_out+0x7c/0xc0
[  737.577408][    C0] Code: 17 67 fc 44 89 f9 d3 e5 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 dc 1d cb fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1
[  737.577424][    C0] RSP: 0018:ffffc90003776e90 EFLAGS: 00000002
[  737.577440][    C0] RAX: 0000000000000034 RBX: 0000000000000034 RCX: 0000000000000000
[  737.577452][    C0] RDX: 00000000000003f8 RSI: 000000000000e033 RDI: 000000000000e034
[  737.577464][    C0] RBP: 00000000000003f8 R08: ffff888024950237 R09: 1ffff1100492a046
[  737.577478][    C0] R10: dffffc0000000000 R11: ffffffff8559ed70 R12: dffffc0000000000
[  737.577492][    C0] R13: ffffffff99f5b8ec R14: ffffffff9a26e1a0 R15: 0000000000000000
[  737.577505][    C0] FS:  0000000000000000(0000) GS:ffff8881257ba000(0000) knlGS:0000000000000000
[  737.577521][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  737.577534][    C0] CR2: 0000200000000000 CR3: 000000006bab6000 CR4: 00000000003526f0
[  737.577548][    C0] DR0: 0000000000000002 DR1: 0000000000000002 DR2: 0000000000000008
[  737.577559][    C0] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  737.577572][    C0] Call Trace:
[  737.577580][    C0]  <TASK>
[  737.577590][    C0]  serial8250_console_write+0x140d/0x1ba0
[  737.577623][    C0]  ? __lock_acquire+0xab9/0xd20
[  737.577644][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  737.577672][    C0]  ? console_flush_all+0x13a/0xb10
[  737.577697][    C0]  ? console_flush_all+0x13a/0xb10
[  737.577724][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  737.577750][    C0]  ? console_flush_all+0x13a/0xb10
[  737.577774][    C0]  console_flush_all+0x6f0/0xb10
[  737.577799][    C0]  ? console_flush_all+0x13a/0xb10
[  737.577826][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  737.577855][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  737.577875][    C0]  console_unlock+0xbb/0x190
[  737.577897][    C0]  ? vprintk_emit+0x2ee/0x590
[  737.577919][    C0]  ? __pfx_console_unlock+0x10/0x10
[  737.577939][    C0]  ? vprintk_emit+0x210/0x590
[  737.577962][    C0]  ? vprintk_emit+0x495/0x590
[  737.577984][    C0]  ? vprintk_emit+0x2ee/0x590
[  737.578004][    C0]  ? vprintk_emit+0x2ee/0x590
[  737.578027][    C0]  vprintk_emit+0x4c5/0x590
[  737.578050][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  737.578074][    C0]  ? __pfx_snprintf+0x10/0x10
[  737.578097][    C0]  ? __lock_acquire+0xab9/0xd20
[  737.578119][    C0]  dev_vprintk_emit+0x337/0x3f0
[  737.578138][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  737.578164][    C0]  dev_printk_emit+0xe0/0x130
[  737.578185][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[  737.578203][    C0]  ? __queue_work+0x102/0xfb0
[  737.578227][    C0]  ? __dev_printk+0x131/0x190
[  737.578249][    C0]  _dev_info+0x10a/0x160
[  737.578268][    C0]  ? __pfx__dev_info+0x10/0x10
[  737.578285][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  737.578314][    C0]  ? kernfs_notify+0x2ee/0x370
[  737.578337][    C0]  usb_disconnect+0xdd/0x950
[  737.578365][    C0]  hub_event+0x1cf5/0x4a20
[  737.578402][    C0]  ? do_raw_spin_lock+0x121/0x290
[  737.578428][    C0]  ? register_lock_class+0x51/0x320
[  737.578454][    C0]  ? __pfx_hub_event+0x10/0x10
[  737.578470][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  737.578494][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  737.578517][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  737.578538][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  737.578559][    C0]  process_scheduled_works+0xade/0x17b0
[  737.578594][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  737.578623][    C0]  worker_thread+0x8a0/0xda0
[  737.578646][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  737.578674][    C0]  ? __kthread_parkme+0x7b/0x200
[  737.578702][    C0]  kthread+0x70e/0x8a0
[  737.578728][    C0]  ? __pfx_worker_thread+0x10/0x10
[  737.578749][    C0]  ? __pfx_kthread+0x10/0x10
[  737.578774][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  737.578797][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  737.578812][    C0]  ? __pfx_kthread+0x10/0x10
[  737.578837][    C0]  ret_from_fork+0x47c/0x820
[  737.578859][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  737.578882][    C0]  ? __switch_to_asm+0x39/0x70
[  737.578900][    C0]  ? __switch_to_asm+0x33/0x70
[  737.578917][    C0]  ? __pfx_kthread+0x10/0x10
[  737.578942][    C0]  ret_from_fork_asm+0x1a/0x30
[  737.578969][    C0]  </TASK>
[  737.590527][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  737.590548][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  737.590572][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  737.590585][   T31] Call Trace:
[  737.590595][   T31]  <TASK>
[  737.590603][   T31]  dump_stack_lvl+0x99/0x250
[  737.590634][   T31]  ? __asan_memcpy+0x40/0x70
[  737.590654][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  737.590673][   T31]  ? __pfx__printk+0x10/0x10
[  737.590717][   T31]  vpanic+0x237/0x6d0
[  737.590741][   T31]  ? __pfx_vpanic+0x10/0x10
[  737.590765][   T31]  ? preempt_schedule_common+0x83/0xd0
[  737.590802][   T31]  panic+0xb9/0xc0
[  737.590825][   T31]  ? __pfx_panic+0x10/0x10
[  737.590849][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  737.590880][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  737.590908][   T31]  watchdog+0xf9f/0xfa0
[  737.590934][   T31]  ? watchdog+0x1e2/0xfa0
[  737.590960][   T31]  kthread+0x70e/0x8a0
[  737.590992][   T31]  ? __pfx_watchdog+0x10/0x10
[  737.591012][   T31]  ? __pfx_kthread+0x10/0x10
[  737.591042][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  737.591070][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  737.591087][   T31]  ? __pfx_kthread+0x10/0x10
[  737.591116][   T31]  ret_from_fork+0x47c/0x820
[  737.591142][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  737.591171][   T31]  ? __switch_to_asm+0x39/0x70
[  737.591191][   T31]  ? __switch_to_asm+0x33/0x70
[  737.591210][   T31]  ? __pfx_kthread+0x10/0x10
[  737.591239][   T31]  ret_from_fork_asm+0x1a/0x30
[  737.591276][   T31]  </TASK>
[  737.593374][   T31] Kernel Offset: disabled