last executing test programs:

12m15.09192984s ago: executing program 2 (id=250):
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x0)

12m11.588068173s ago: executing program 2 (id=265):
syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0x4, 0x80, 0x9c, 0x6, @time={0x38, 0x7}, {0xe, 0xe}, {0x2, 0x9}, @connect={{0x6, 0x2}, {0x9, 0x9}}}, {0x0, 0x7, 0x7, 0x8, @time={0x85, 0x2}, {0x1, 0x4}, {0x6, 0xe}, @connect={{0x1, 0x4}, {0xe, 0x8}}}, {0xa, 0xb, 0x7, 0x7c, @time={0x5, 0x6}, {0x6, 0x9b}, {0x4, 0xe9}, @addr={0xfa, 0x7f}}, {0xb, 0x7, 0x9, 0x7, @time={0x81, 0x5}, {0xb, 0x10}, {0x0, 0xc}, @ext={0x0, 0x0}}, {0x9, 0x84, 0x2, 0x3, @time={0x5, 0x3ff}, {0x60, 0x1}, {0x9, 0x1}, @queue={0x1, {0x6, 0x1}}}], 0x8c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001880000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0)
dup(r2)
r6 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
syz_open_dev$char_usb(0xc, 0xb4, 0x2000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc}}}, @IFLA_IFALIASn={0x4}, @IFLA_LINKMODE={0x0, 0x11, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

12m9.800688557s ago: executing program 2 (id=266):
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x8100)
syz_clone3(0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0xfffffdfc, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x1, 0xfb, 0x0, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x26}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xfff9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="d4000000200000006910830000000000bfffffff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

12m8.739090634s ago: executing program 2 (id=270):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="a963032f1e21a6403952d4e336797a9afa0826fb0f8cd25f5af9add70a48736dd27dc36c110b198793c4e3e27c0a5748eadb974988e0e022fb18807d0577dbea507e8f4f65a517d9738feb94476d8025fc398989684237daf48c2236472785909dc47ce7769ca2f7ca04ff0d7e33199be0a2da3a0911f12e6b7fa1203a79a1f3e27291f1d9a37d5af29fe3c4fbe75172fd63ee2b5ddea354dc63b9c2872203c753ddfa05f4fcad", 0xa7}, {&(0x7f0000000080)="848d4608f7a2ea0e803780f7f2e5c55a897046b1a9a92f27d4c811f0c166006511d00ae5", 0x24}], 0x2, &(0x7f00000002c0)=[{0xe0, 0x88, 0x4, "6d9dfe54cd53c30b995b046dadd5f9ea31568a3a7ce9bd6e82f2b3715f0c85258bd9d63ecc4de3719d62c84735301a06c4382382013bf860f3ec7bdb27d15064e44a7ff8b9581e6a92b342e0c31ff9569ccd1de13830cb6f1af8a6ca4f0756b6c39b27633bd69235564f7bc4276f9e239c3340bf269d811f15a1ee57fc6d58b4fda0449e7c5861dcafe0ff53e20b2893e8446d6443a922de21bd15a2ea040faee866cc103bd318cbbb074f5c08be430bd3fb03c5afb987fdacd3719da2ba1a07531816ca715686a114447749"}, {0xb0, 0x10f, 0x3, "8f94cac4e08a2ecce62357ee891fb0cd4866d78559eac61edb6412e70e85e8d3049eb146aff133e5e2799594388cbf718f7c2d2ee18b51d9807a2b2674806fcf42fcd0e611dcdcd2fea0a8a0e38d9da04363e667e71391a8b8d4d40d4498637ec81e06ba70b526ad9313d2d1e1438d317c6335985d83a73b359db61b0d1a7d9891facc7f7702c07aad88eb17befbba9df3d6d5447a5182b00cc5e165"}, {0x48, 0x10f, 0x8001, "b09b23a623e8698aa0b13d36482e914f413bea771bde98857f5cec3bb35eaddbb8009d30b8db36c16d8eef2cd79d36afe7"}, {0x68, 0x88, 0x1, "9ce77257213fc1114ad7ee162e48d66252ea4b1131a5af4fc1993cc7aadf0f09567b523dd8fb8cb236bd8d4ed419770a6766d85533cbf4a28a0825ff52a78370e976875645c0fc9f8c8801675b65f67755c409e4"}], 0x240}, 0x44)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
unshare(0x2c020400)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={<r5=>r0})
close(r0)
ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f0000000000)={'bond0\x00', {0x2, 0x0, @multicast1}})

12m8.183579514s ago: executing program 2 (id=271):
syz_emit_ethernet(0xfc0, &(0x7f0000002700)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a00000000000000000000e0ff000012000000fe8000000000000000000000000012aa840040"], 0x0)

12m7.823353749s ago: executing program 2 (id=274):
syz_open_dev$vim2m(0x0, 0x3fe, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000180)=""/142, 0x8e}], 0x2}, 0x100)
sendmmsg$alg(r1, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="55b69a04dedc990800000000000000df94", 0x11}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x20004040)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f00000001c0)={0x0, <r5=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
r7 = socket(0x2, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x33, 0xfd, 0x4, 0x49, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast2={0xff, 0x3}, 0x40, 0x7800, 0x0, 0x4}})
getsockopt$bt_hci(r7, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0x20}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r9 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r10 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r9, r8})

12m6.383566221s ago: executing program 32 (id=274):
syz_open_dev$vim2m(0x0, 0x3fe, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30)
r1 = accept$alg(r0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000180)=""/142, 0x8e}], 0x2}, 0x100)
sendmmsg$alg(r1, &(0x7f0000005d40)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="55b69a04dedc990800000000000000df94", 0x11}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x20004040)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f00000001c0)={0x0, <r5=>0x0})
prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r6 = socket(0x10, 0x2, 0x0)
r7 = socket(0x2, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x33, 0xfd, 0x4, 0x49, @dev={0xfe, 0x80, '\x00', 0x44}, @mcast2={0xff, 0x3}, 0x40, 0x7800, 0x0, 0x4}})
getsockopt$bt_hci(r7, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0x20}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r9 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r10 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r9, r8})

5m29.991049467s ago: executing program 5 (id=1926):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x1)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000000080000000000000000000003000005050003000600000005000300110000000900010073797a300000000005000300210000000c00048008002140ffffffff06d50c186df9d6f4445363aaa5229b9662455a98658e6cd92260b9087e2d7e8322de25c345488bce2221b84538ef4abf53d6680cd1966792f2712cdbd04dc5ffb9a90d05d363c5b44922c6f8cafa73f5"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

5m29.75085614s ago: executing program 5 (id=1928):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x6})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000380)={0x2, 0x0, 0x60, 0x3, 0x9})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0})
io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57)
io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xfffffffffffffff6, 0x80000000440, 0x1, 0x5, 0xffffeffffffffffe, 0x2004c6, 0x0, 0x0, 0xfffffffffffdfffa, 0x0, 0x89b3, 0x2000, 0x4, 0x5], 0x3b390000, 0x200306})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

5m28.082653181s ago: executing program 5 (id=1937):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0x38)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e, 0x0, r2}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30)

5m24.712457497s ago: executing program 5 (id=1946):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xffffffe4, 0x3, 0x26, 0x30000000})
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r3}}, 0x48)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0xdddd0000, 0x4000, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x2, 0x16, 0x4, 0x6, 0x5, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x6c, 0x20, 0x0, @in={0x2, 0x4e22, @multicast1}}]}, 0x28}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000280)=""/254)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x37, 0x1, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic='x[%@\v']}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5m24.128924518s ago: executing program 5 (id=1949):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x800, 0x4)
read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000300)=ANY=[@ANYRES16=0x0], 0x1)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000000080000000000000000000003000005050003000600000005000300110000000900010073797a300000000005000300210000000c00048008002140ffffffff06d50c186df9d6f4445363aaa5229b9662455a98658e6cd92260b9087e2d7e8322de25c345488bce2221b84538ef4abf53d6680cd1966792f2712cdbd04dc5ffb9a90d05d363c5b44922c6f8cafa73f5"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

5m21.960236865s ago: executing program 5 (id=1959):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffdc}, [@ldst={0x5, 0x0, 0x6, 0x0, 0x8, 0x0, 0x92}], {0x95, 0x0, 0x300}}, &(0x7f0000000040)='GPL\x00'}, 0x94)

5m21.272278445s ago: executing program 33 (id=1959):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffdc}, [@ldst={0x5, 0x0, 0x6, 0x0, 0x8, 0x0, 0x92}], {0x95, 0x0, 0x300}}, &(0x7f0000000040)='GPL\x00'}, 0x94)

31.400168201s ago: executing program 0 (id=3073):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d0000"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49)
io_setup(0x1, &(0x7f00000016c0)=<r8=>0x0)
r9 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, 0x0)
close(r10)
io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r7, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}])
sendfile(r4, r5, 0x0, 0x20000023896)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x14c, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

29.141810983s ago: executing program 0 (id=3077):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xffffffff}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fedbdf2530000040080023000d838d85862a3c19b18d81bdab04e6bf1cc941f684fca41e5c0d3505d24fedd19823ae01043997dc9bfecc6f4ef3dd2de88da7bfbf5cec11f8ffa13ccb45505ddb8bdad5bb70872ec22999505de67494509db03a44999f0f97af49fe3fceea2d3e86200d0fabc77092129e049570341ae1c6cbb70f9fc95dbc6354277013429840b7bf9b4871babb12b8443ef06a79e4e68de42b5d3250f4ad10c71b5061e8aec22a23912fb00169cf3be04a50d6e0ce8b8572845a03539fe958af3c71f973a8cccac94125628d0e78bd0b50cba69a20296d0b1737710e1bc8a4", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004800)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002100)=ANY=[@ANYBLOB="12010200000000000000a8a440000102030109021b0001018140950904006d01070101050905ee827937c33d089e0b117141386b8d1a0102ff030d090d08a894ed3097a625910d73e9c2f09081ad74e46a073be233222d"], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
connect$pptp(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r9, @ANYBLOB="a55772ee0b53f39e77b5752baff489e686cea6977c949335dfe543026cdb7c9e3672ed2aa95ee92264b8a94b0f183ad4faa6af812bb4d774454fe4f5d87930ce61969a5a555960740ffb49cd6e2b4428c0662b85c5153990903e1f3a033bb05f9bfb654505bbd9accd95320a21847c83502588997b62fbeadbd933044ea72534db1094e6ee8217e3dedc2633047135954aac5993260aa8ee061a6c58519ba3f07d451b2e715ad11c6b334e83739a4098"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

23.896643124s ago: executing program 0 (id=3088):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x5)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
r4 = dup3(r3, r1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000600)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast1, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}], 0x30}}], 0x1, 0x810)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x121000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x1000000010, 0x80000, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x8000003d)
fcntl$setsig(r5, 0xa, 0x21)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000140)=0x4, 0x4)
fallocate(r6, 0x0, 0x0, 0x9000f3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
rt_sigtimedwait(&(0x7f0000000580)={[0x400]}, 0x0, 0x0, 0x8)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x5)

22.78880973s ago: executing program 0 (id=3089):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000000000020030430600000000000010902240001000000000904000001030000000921000000012202000905810300000000007a7f79c810f66f84a98f23d6677751b27b7f67be56a930a4d14940e8"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="48602a564cbdcd14"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000001080)=ANY=[@ANYBLOB="20140d0000005edb5ab3a84f740f1ab9a998959dec265eb2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000001080)=ANY=[@ANYBLOB="20140d0000005edb5ab3a84f740f1ab9a998959dec265eb2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000400)=@pppoe, 0x80, &(0x7f0000000340)=[{&(0x7f0000000480)=""/249, 0xf9}], 0x1, &(0x7f0000000580)=""/121, 0x79}, 0x3}, {{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/60, 0x3c}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000b00)=""/219, 0xdb}], 0x4, &(0x7f0000000c00)=""/143, 0x8f}, 0x1000}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000800)=""/43, 0x2b}, {&(0x7f0000000cc0)=""/125, 0x7d}, {&(0x7f0000002200)=""/4088, 0xff8}, {&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/103, 0x67}, {&(0x7f0000000e40)=""/98, 0x62}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0x10000}], 0x3, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000400)=@pppoe, 0x80, &(0x7f0000000340)=[{&(0x7f0000000480)=""/249, 0xf9}], 0x1, &(0x7f0000000580)=""/121, 0x79}, 0x3}, {{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/60, 0x3c}, {&(0x7f00000006c0)=""/221, 0xdd}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000b00)=""/219, 0xdb}], 0x4, &(0x7f0000000c00)=""/143, 0x8f}, 0x1000}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000800)=""/43, 0x2b}, {&(0x7f0000000cc0)=""/125, 0x7d}, {&(0x7f0000002200)=""/4088, 0xff8}, {&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/103, 0x67}, {&(0x7f0000000e40)=""/98, 0x62}], 0x6, &(0x7f0000000840)=""/48, 0x30}, 0x10000}], 0x3, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) (async)
ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000040))
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x24500, 0x0)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) (async)
r6 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9)
keyctl$setperm(0x5, r6, 0x0)
ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f00000000c0))
socket$nl_route(0x10, 0x3, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x2000, 0x0, 0x1f) (async)
preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x2000, 0x0, 0x1f)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101})

21.128866937s ago: executing program 0 (id=3092):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x20500, 0x0)
ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000004f00))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
r3 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f00000000c0)={{0xb, 0x0, 0x0, 0x0, '\x00', 0x4}, 0x0, [0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xa, 0x0, 0x7, 0x0, 0x100000000, 0x0, 0x539d61cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0xa8, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]})
poll(0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0)
ppoll(&(0x7f00000000c0)=[{r6, 0x200}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r5, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f0000000180)=0x1)
write$binfmt_elf32(r4, 0x0, 0x4cd)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e22fcffffff000000007ecd00"/56, @ANYRES8=r6, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESDEC], 0x54}}, 0x20000080)
sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x6, 0x24, 0x1ff, 0x8, 0x80000001, 0xb8, 0xf, 0x2cd4, 0x3}, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010000000000000000e9098014000700000300000000"], 0x1c}}, 0x40000)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)

16.551968743s ago: executing program 0 (id=3104):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000abaff9), 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x4}}, 0x10) (async)
bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)={{0x80a0000, 0x4000, 0xd, 0x4, 0x1, 0x2, 0x7, 0x2, 0x0, 0x2, 0x5, 0xd}, {0x0, 0xd000, 0x9, 0x6, 0x54, 0x10, 0x3, 0x5, 0x8, 0x4, 0xe9, 0x6f}, {0x80a0000, 0x8000000, 0x0, 0xf, 0x3, 0x5, 0x9, 0x7, 0x5, 0x6, 0x8, 0x8}, {0xdddd0000, 0x4, 0xc, 0x3, 0x3, 0x2, 0x9, 0x7, 0x7, 0x0, 0x9, 0x5}, {0xdddd1000, 0x8080000, 0xf, 0xbe, 0x5, 0x2, 0xa0, 0x8, 0xf, 0x3, 0x40, 0x9}, {0x6000, 0x8080000, 0xb, 0xc1, 0x8, 0x4, 0x9d, 0x9, 0x1d, 0x5, 0x2, 0xff}, {0x2, 0x10000, 0x3, 0xd, 0xc, 0x2, 0xf7, 0xde, 0x6, 0x0, 0x7}, {0x10000, 0x4, 0x9, 0xd0, 0x4, 0x10, 0x7, 0xc, 0xbe, 0x0, 0x7f}, {0x100000}, {0x2000, 0x9}, 0x6, 0x0, 0x0, 0x0, 0xd, 0x0, 0xeeef0000, [0x7ff, 0x7, 0x1800000, 0x100]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x63, &(0x7f0000000240)=[@cr4={0x1, 0x2509e0}], 0x1)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, 0x0, &(0x7f0000000180)) (async)
getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, 0x0, &(0x7f0000000180))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x2, 0x2}}}, 0x10)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71503b0000004b5beabcc136810000860500000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
getdents64(r9, &(0x7f0000002f40)=""/4098, 0x1002) (async)
getdents64(r9, &(0x7f0000002f40)=""/4098, 0x1002)
getdents64(r9, 0x0, 0x0)
r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x1, &(0x7f00000003c0)={0x0, r10}, 0x0)
landlock_restrict_self(r10, 0x0) (async)
landlock_restrict_self(r10, 0x0)
symlinkat(&(0x7f0000000000)='./file1/file4/file7/file6\x00', r8, &(0x7f0000000200)='./file0\x00')
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r11 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r11, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0xfffffffffffffd79)
close_range(r0, 0xffffffffffffffff, 0x0)

15.930215738s ago: executing program 6 (id=3108):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da05000000000001090224"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x100000000, 0xfa11, 0xffffffff}, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1781, 0x898, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x60, 0xc0, [{{0x9, 0x4, 0x0, 0x66, 0x2, 0x3, 0x1, 0x1, 0xc, {0x9, 0x21, 0xe, 0x4, 0x1, {0x22, 0x86f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x5, 0x5}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x5a, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0)
sendfile(r3, r3, 0x0, 0x5)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x5f, 0xfffffffc)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
close(0xffffffffffffffff)
socket$rds(0x15, 0x5, 0x0)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0xffffffffffffffff, 0x0, 0x4004)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x200000000000000)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000001d00)={0x13, 0x10, 0xfa00, {&(0x7f0000005d40), r5, 0x2}}, 0x18)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[], 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000740)=""/187, 0xbb}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2)

13.234348871s ago: executing program 3 (id=3114):
r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143101)
r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x40180, 0x0)
pidfd_send_signal(r2, 0x21, 0x0, 0x0)
r3 = dup(r1)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'})
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4)
ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x3)
socket$packet(0x11, 0x3, 0x300)
ioctl$UI_DEV_CREATE(r4, 0x5501)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x3, 0x75)
ioctl$UI_DEV_DESTROY(r4, 0x5502)

11.877018147s ago: executing program 6 (id=3118):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="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", @ANYRES32, @ANYRESHEX, @ANYRES64=0x0], 0x20)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x8}, 0x8)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00070d000000000000020007000000", @ANYRES32=r1, @ANYBLOB="800087000a00020001"], 0x28}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000000)
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10083, &(0x7f0000000000)=ANY=[@ANYRES64=r4, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3])

11.396408955s ago: executing program 3 (id=3120):
mmap(&(0x7f00009f6000/0x1000)=nil, 0x1000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000040)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'load ', 0x20, 0x100000001}, 0x2f, 0xfffffffffffffffb)
r0 = socket$kcm(0x10, 0x2, 0x10)
socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002400018014000180080001000000000008000200ac1b14000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e00000021000068008000200ac14140004000380"], 0x6c}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
lseek(r4, 0x80000000004, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000080", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r5, 0xffff8000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100070000000900020073797a"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x42, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

11.326223987s ago: executing program 6 (id=3121):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x101040)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[])
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0)
ioctl$PTP_CLOCK_GETCAPS(r6, 0x80503d01, &(0x7f00000000c0))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a0000000000000000050000000003"], 0x48)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r7, 0x28, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
close_range(r5, 0xffffffffffffffff, 0x0)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0x41, 0x0, 0x6}, 0x10)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x3, 0x0, @ioapic={0xeeee0000, 0x2, 0x0, 0xeffffdff, 0x0, [{0x0, 0x80, 0x0, '\x00', 0x1d}, {0x19, 0x9, 0x0, '\x00', 0x10}, {0xfc, 0x4}, {0xfe, 0x0, 0x7f, '\x00', 0x2}, {0x8, 0x0, 0x5, '\x00', 0xb}, {0x2c, 0x10}, {0x0, 0x4, 0x26}, {0x0, 0x6, 0x0, '\x00', 0x3}, {0x0, 0x0, 0xfe, '\x00', 0x7f}, {0x8, 0xf, 0xff, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x9}, {0x5, 0x4e}, {0x4, 0x2, 0x4, '\x00', 0xfe}, {}, {0x3, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0xf, '\x00', 0x3}, {0xa0, 0x0, 0x0, '\x00', 0x40}, {0x3, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x1, 0x0, 0x0, '\x00', 0x12}, {0xfc, 0x81, 0xe, '\x00', 0x9}]}})

9.23322789s ago: executing program 1 (id=3123):
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0xa, 0x800, 0x6d090cb3)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x7, 0x0, 0xb63e}, 0xc)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x108001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfaf}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
fsopen(&(0x7f0000000140)='jfs\x00', 0x0)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000240)='us^\xc0\xff\xff\xf7a', 0x0, r3)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2})
ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"])

9.211873126s ago: executing program 6 (id=3124):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xd4a, 0x10000, 0x100000, 0x0, 0x0, r5}, &(0x7f0000000180), 0x0)
pipe(&(0x7f0000000100))
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000004c0)="0f064b0fc71ac441e012e9c4427d257c6402c423f978f50066baf80cb81c07da87ef66bafc0cecf342a60f00d6c7442400f5ff0000c744240203000000c7442406000000000f011424c4415f5c9297e5ffff", 0x52}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'})
epoll_create1(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xff}, 0x18)
setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000a00)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0)
r7 = syz_usb_connect$uac1(0x3, 0xba, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0xc, 0xb0, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x5}, [@extension_unit={0xa, 0x24, 0x8, 0x5, 0x7, 0x4, "86b592"}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x3, "0bf4debc8fbe"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xc0, 0x2, 0x3, 0x6, "ad"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xc, 0x7, 0x0, {0x7, 0x25, 0x1, 0x0, 0x24, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1ff, 0x83f, 0x3, "8be6"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0x95, 0x6, "fed2cb"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0xfff, 0xd, "23d8"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x1, 0x6, 0x6, "012e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0xf7, 0x4, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x5, 0x7, 0x3, 0x40, 0x8}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x1, 0x3}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40f}}, {0x102, &(0x7f0000000b00)=@string={0x102, 0x3, "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"}}, {0xd0, &(0x7f0000000340)=@string={0xd0, 0x3, "c200592baf94fac9b99acf85707a5ec776f995bf27081ed4fc8d004dd49d32e834c2d03050ccdd3bae85558dd597ead9b26268eea6c420042fa3ff84af29e16a11cf70aa3e15e037dc3d76a4dc644f7f78994a9b3d7aa687f06f8b8159e241bac3b412a1b2e5638196456eea74dada4d6b01e9371e2d98d3223e549fff1ac8e34db71eef6e0b5a544ef38ca24d2709195b3917664ff02123ef24ae8c527992e401f6f0a7bc41d7b0ac1bb1d9d83f12697e23f9fe3c8eb371968f82912ef58bda43b564386067c6a4100210fe16c2"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1801}}, {0x6, &(0x7f0000000480)=@string={0x6, 0x3, "2d967ae5"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x300a}}]})
syz_usb_control_io$uac1(r7, &(0x7f0000000640)={0x14, &(0x7f0000000700)={0x40, 0x2, 0x67, {0x67, 0x8, "bb8a44b910c8cfad70d2924832206a4527d789a2577e56686b3cbb0cc852c3b4aa9a308dd9741d6ba4b14be0a053fe0af51dede75e224a84580a70553271bd4f57b5088b71dbe0a9549eee2c7c6b903e04b9a11af2815de155859e9fb00a5f731ab92511f9"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}}, &(0x7f0000000980)={0x44, &(0x7f0000000780)={0x20, 0x10, 0x19, "b73380b02e304470692c92a5cabc1a913f0066db9dd34e9f1d"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000840)={0x20, 0x81, 0x1, "e6"}, &(0x7f0000000880)={0x20, 0x82, 0x3, "7645b9"}, &(0x7f00000008c0)={0x20, 0x83, 0x2, "a840"}, &(0x7f0000000900)={0x20, 0x84, 0x4, "8e808f22"}, &(0x7f0000000940)={0x20, 0x85, 0x3, "30f57f"}})

8.227719308s ago: executing program 4 (id=3125):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100003470d5205f0530c2acb6010203010902120001000000000904"], 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) (async)
io_setup(0x1, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0])
ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000080)) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000040)={0x0, 0xf, 0x19, "6203d6bed39d6bc2cd5b33d7202d0000000000000000010000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r3 = gettid()
timer_create(0xf, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000002c0)="64507594223bda1c3895dd9254e138256f314b883793e6", &(0x7f0000000400)="ff500b8b8738f4cbba92e94089598bd85cc96be43a8143d0d8201f237a5f9afccbd18ed753d466df370df1560c16210a93b0e7152293fe725424f75c3e473ec3886fcebdc830be504c3cd2c6deebbdf0b9d66a3682c72732c487dc3c7c3900466d3d3821"}}, &(0x7f0000000240)) (async)
getpgrp(r3) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x33}})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000000c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0})

7.685073578s ago: executing program 3 (id=3126):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="48010000100013070000000000000000fe880000000000000000000000000001ac1e000100000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="060000004c0014007368613100"/80], 0x148}}, 0x0)

7.619190014s ago: executing program 3 (id=3127):
syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498e, 0x103902)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808"], 0x0, 0x4}, 0x94)
syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b775d31a15ee2dd169c636f7e5e9ee98f26c095723400fd8bd9558d7be11861756154696d8944d1143491d2894c1fd0f801da9db39a1021659e7b1a06b29b7310e5c0b3c1ee243d585937a44fbe9", @ANYRES8=r3, @ANYRES8=r4], 0x0}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r5, 0x4b4c, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0xf738c3cf61f83442, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_io_uring_setup(0xbdd, &(0x7f00000002c0)={0x0, 0x9020, 0x200, 0x1, 0x4000033b}, &(0x7f0000000dc0)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x7, 0x0, 0xfffff03c}, {0x86}]}, 0x10)
sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0)
unshare(0x26020480)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xef29)
r11 = dup2(r0, r0)
read$FUSE(r11, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, 0x0)
syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)

7.562891673s ago: executing program 1 (id=3128):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a0300000000000000000001000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="1c005e80080002"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)

7.460750423s ago: executing program 1 (id=3129):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000200)='GPL\x00', 0xe5ffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.252924695s ago: executing program 1 (id=3130):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, 0x0, 0x4}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = fsopen(&(0x7f0000000100)='exfat\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x18)
symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00')
r5 = openat2(r4, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18)
write$binfmt_misc(r4, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x6)
r7 = socket(0x10, 0x3, 0x100)
rt_sigpending(&(0x7f00000000c0), 0x8)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x70000, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r10=>0x0})
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r11, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0xd, [0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, 0x0, 0xe, 0xf], 0x0, [0x4, 0x2, 0xfffe, 0x1, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x6eb, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xffff, 0x0, 0xe]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}]}}}]}, 0x90}}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYBLOB="be0f000000000000000000005e00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x50)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r9)
sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB="02002dbd7000fddbdf250100000005000400010000000500040001000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc0090)
r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r12, 0x8108551b, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r12, 0x80085504, &(0x7f0000000180))

6.003530851s ago: executing program 6 (id=3131):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r3, @ANYBLOB="14005a801000018005000100"], 0x30}, 0x1, 0x0, 0x0, 0x20000855}, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000500)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}]}, {0x2b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040)

5.77678478s ago: executing program 1 (id=3132):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x118)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setpgid(r2, r2)
wait4(r2, 0x0, 0x2, 0x0)
ioprio_set$pid(0x1, r2, 0x4004)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36)

5.600481673s ago: executing program 4 (id=3133):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214})
close(r2)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0})
unshare(0x24020400)
r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
fcntl$setsig(r4, 0xa, 0x2d)
fcntl$getflags(r4, 0xb)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
capset(&(0x7f00000000c0)={0x20080522}, 0x0)
pidfd_send_signal(r5, 0x7, &(0x7f0000000080)={0x2d, 0x6}, 0x0)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022dbd7000fedbdf25730000007429f2927cad08000300", @ANYRES32=r1, @ANYBLOB="0c00990009000000220000000800ef00060000000800ef000f0000000800ef00080000000800ef00090000000500ee00100000000800ef000b0000000800ef00080000000500ee0011000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x24000010)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40400, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="08e4000010e75fba00000000000000005a510000", @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008000d0001000000"], 0x30}}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f00000002c0)=""/200, 0x222000, 0x1000, 0x52, 0x2}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

4.419293575s ago: executing program 3 (id=3134):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtaction={0x224, 0x30, 0x800, 0x70bd2b, 0xbc, {}, [{0x210, 0x1, [@m_ipt={0x1c0, 0x2, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xc0, 0x6, {0x3, 'nat\x00', 0xd, 0x4, "6913ace14a6ed89a10126bdccf8bb0e47081056269c6b4936fa4dd86021e400713aaa74a4ed7ed21409e3670e5c1e0b6978f1ea244af83d36c88ea3fd2426e42da44e0d2bca6616cc7e5f21e0cd8f6a8062e8413d3c82db28de1c5702fd9a0c2415291aa1151a6ed6d7bd54b5779a32f19828d9c1dedfa99801bd6b8f167047c53cc93f2c49cf19fe1167292952695ee6b1faddd86a2"}}, @TCA_IPT_TARG={0x7b, 0x6, {0x7, 'raw\x00', 0xd, 0x5, "59597faf36b40c48a2ef5c1d5715596a6e9dadfdb2deddaaba256a17bc50464be57f4ab9d1cd65b44eff95117dfdaf3075c90e4e64e2f5ed82584c73f1b9ab010a3fb34835b08922d70ee6497898305a57"}}]}, {0x2e, 0x6, "d4404c4a8824b84368d09ccdb5597b825dbbd7aef99c354d3ef3d520abe9d4cb7dce90320fdae5b234c4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x4c, 0x16, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x1a, 0x6, "aabdb14d30833821ce2349fc1c8825d3b3a3792d3d83"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x224}}, 0x0)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000640)=""/219, 0xdb}], 0x2}}], 0x2, 0x60, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0)
syz_usb_connect(0x0, 0x186, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x19, 0x5, 0x60, 0x40, 0x19d2, 0xff4b, 0xdf95, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x2, 0x8, 0x9, 0x20, 0x7, [{{0x9, 0x4, 0x35, 0x5, 0x1, 0xff, 0xff, 0xff, 0x2, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0x3}, @as_header={0x7, 0x24, 0x1, 0x81, 0xc3, 0x4}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x1, 0x80, 0x8, "37494ae5fcffb0"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x7, "8f6390b1f8fc"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0xb8, 0x5, '0', "f3e2"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xfff9, 0x2, 0x4e, "b61f105bd299"}]}], [{{0x9, 0x5, 0xd, 0x9, 0x10, 0x81, 0x3d, 0x2, [@generic={0xc2, 0x5, "b305fccf45f8c85ef3734e27d0bcd186e254f3eae1758170da83126f956705798c81773136ba7fb33865637c47e25d28eb2fa6bfa1bb9f9eb88bd20214e2dd0f1b3cb2332cb6e67592036691c852525fc42b5560832b2bd1735b1aef68191c51c2eae467adaddc1c86e3738d454941edccc63a1fdf68474e2cd2e84b81f22ce48c30ae690e854b7f1acb8245523300b1ebe6d09b8f09ca04bcd9ea82dd5f3d912a555627c57f3c76644ada8a67909cdc899626fbd2f65365c8d0a37365fd3e1e"}]}}]}}, {{0x9, 0x4, 0x9e, 0x7, 0x3, 0xf9, 0xb2, 0xde, 0x7, [], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x4, 0x1, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x8, 0x9, 0x9, [@generic={0x18, 0x0, "b03cbc46dfdb87c6c3d146241670a562e40819067161"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x5}]}}, {{0x9, 0x5, 0x4, 0x10, 0x610, 0x2, 0x52, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x7f, 0x7}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xc5, 0xb7, 0x14, 0xff, 0x7}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x380a}}, {0x30, &(0x7f0000000440)=@string={0x30, 0x3, "b01a61e7c72f13910082a5b3428eeb0022ffc6f079db5eb32aec09986b82c25a5e0280cf69f86709064117b63b56"}}]})

1.719433339s ago: executing program 6 (id=3135):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x2c}}, 0x8000)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000980)={0x8001, 0x3, 0x9, 0x7, 0x6e64})
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x286, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000a1f169405909d02b9848000000010902740201000000000904a80010ff8a3700090505104000057f03090507010002080b04090503"], 0x0)

1.324992176s ago: executing program 4 (id=3136):
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000740)={0xc, 0xc00000, "fd3cd93fd6c01e8f2e1ac2895736a9950aaf6d1ed4696093", {0x2, 0x80}, 0x4})
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000080)="b880038ed00f01df66b8000000800f23c80f21f866350c0050000f23f80f01735466b9f80a00000f32b800008ee8f30f5af6f30fc7b4476df30fe6c0b85e0c8ee0", 0x41}], 0x1, 0x74, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x75}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="48010000100013070000000000000000fe880000000000000000000000000001ac1e000100000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="060000004c0014007368613100"/80], 0x148}}, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x10}], 0x1, 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1081000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x24, r10, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x2, 0xe, 0x5}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES16=r5, @ANYBLOB="5d2b852e7e05376e2ae473bc2cc7d7daf36d"], 0x20)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.20076213s ago: executing program 1 (id=3137):
syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003296fb608229084d488ff0102030109021200010495008109041e800056a7f702d5cce4c0f4a3282523acfaa82d375002bde765ad0a11c0"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16})
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f0000000100)=[{0x1900, 0x800, 0x0, 0x0}, {0x9, 0xa200, 0x0, 0x0}, {0xc, 0x0, 0x0, 0x0}], 0x3})

726.932029ms ago: executing program 4 (id=3138):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a0300000000000000000001000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="1c005e80080002"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)

480.869741ms ago: executing program 3 (id=3139):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
syz_emit_vhci(0x0, 0x7)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)="0059ede04513d5", 0x7, 0xfffffffffffffffd)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@setlink={0x30, 0x13, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x202a0}, [@IFLA_NET_NS_FD={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) (async)
fsopen(0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b05, 0x0) (async)
r5 = socket(0x2b, 0x1, 0x0)
r6 = syz_io_uring_setup(0x2e6, &(0x7f00000001c0)={0x0, 0xff32, 0x2, 0x1, 0x7}, &(0x7f0000000300), &(0x7f0000000380))
r7 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xdaf7, 0x2000, 0x0, 0x2a0, 0x0, r6}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x378b}}) (async)
io_uring_enter(r7, 0xdb4, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x0, r5, 0x23, {0x4, 0x6d4}, 0xf0}, 0x1) (async)
r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x200000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000"], 0x0) (async)
ioctl$EVIOCRMFF(r10, 0x550c, 0x0)

350.704811ms ago: executing program 4 (id=3140):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4008, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

0s ago: executing program 4 (id=3141):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000000c0)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="998d1b28888acd580dccb5651a2c96061bf66acef603f1eadca84d3485a587fdfa81eb92d42a409396101c0d951343a42c8fa05074eead72c25915a65fa18a5b02230673d3f968a9ba67dfc2ca67d401bbf349e5132f9b770ac57ba744ec6460d52e35a73343dea6a60d9fd4788df84812569d8ffcb0ab614c0cdd9dedb66679fbb9caa455d76fa3a2c19c04541ae2bb0f9faf019aa31c4e2209"}, {&(0x7f00000004c0)="cd9faa55999ea0706bef29c1b262f1ce59f787a93f81fd2cd76cb871e2ad2de98dcbee76a09de2483869fa8de2284ea27a32a7292e8c5174a006551033b0c13d0483c78ff303ac862f0ad26e3b67886cb78734c91d88f3c21844f92012012cff8d3f5358f62c74f0d6e991775fe21cce22b5bd6bdbefd164afc911eb6dc12bf4fcae390de70c250a4d06f47caedadbfd08756701cecdf383b49efbd468c59f72372a29000f16cf18f7095539153231b8b388f263ca0c537a22a7a61b93bffba3de08691caf315fd7fc89d30a9482014ac31c956af7cba541a7"}], 0x0, 0x0, 0x0, 0x8810}}], 0x33f, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x10041, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES32, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64=r0], 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x20081, 0x1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3, 0x0, 0x20}, 0x38)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x6}) (async)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x6})
r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000005c0)={0x3, 0x3, 0x3, 0x0, 0x81}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000005c0)={0x3, 0x3, 0x3, 0x0, 0x81})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xfffffffffffffff6, 0x80000000440, 0x1, 0x5, 0xffffeffffffffffe, 0x2004c6, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x89b3, 0x2000, 0x4, 0x5], 0x3b390000, 0x200306}) (async)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0xfffffffffffffff6, 0x80000000440, 0x1, 0x5, 0xffffeffffffffffe, 0x2004c6, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x89b3, 0x2000, 0x4, 0x5], 0x3b390000, 0x200306})
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

duct=00fe, bcdDevice= 0.00
[  790.023201][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.044107][   T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  790.054075][ T5922] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  790.065307][    T9] usb 5-1: config 0 descriptor??
[  790.126561][   T10] usb 7-1: device descriptor read/8, error -71
[  790.145522][ T5922] usb 1-1: device descriptor read/8, error -71
[  790.246798][   T10] usb usb7-port1: unable to enumerate USB device
[  790.254800][ T5922] usb usb1-port1: unable to enumerate USB device
[  790.517649][T16351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  790.529304][T16351] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  790.580165][    T9] elecom 0003:056E:00FE.001B: hidraw0: USB HID v0.02 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0
[  790.801819][    T9] usb 5-1: USB disconnect, device number 10
[  792.463510][T16393] loop8: detected capacity change from 0 to 8
[  792.511493][T16393] Dev loop8: unable to read RDB block 8
[  792.524888][T16393]  loop8: unable to read partition table
[  792.532064][T16393] loop8: partition table beyond EOD, truncated
[  792.540759][T16393] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  792.878869][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2823'.
[  793.534201][ T8048] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  793.651033][T16414] ptrace attach of "./syz-executor exec"[5879] was attempted by "./syz-executor exec"[16414]
[  793.684249][ T8048] usb 5-1: device descriptor read/64, error -71
[  793.964266][ T8048] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  794.094446][ T8048] usb 5-1: device descriptor read/64, error -71
[  794.204753][ T8048] usb usb5-port1: attempt power cycle
[  794.555756][ T8048] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  794.586435][ T8048] usb 5-1: device descriptor read/8, error -71
[  794.845621][ T8048] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  794.865144][ T8048] usb 5-1: device descriptor read/8, error -71
[  794.974593][ T8048] usb usb5-port1: unable to enumerate USB device
[  795.319707][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2835'.
[  796.146759][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'.
[  796.164436][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'.
[  798.010855][T16474] kvm: pic: non byte write
[  798.305814][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2851'.
[  798.315254][ T8048] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  798.333150][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2851'.
[  798.474298][ T8048] usb 4-1: Using ep0 maxpacket: 32
[  798.487409][ T8048] usb 4-1: unable to get BOS descriptor or descriptor too short
[  798.502546][ T8048] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  798.547320][ T8048] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=20.39
[  798.563500][ T8048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.585322][ T8048] usb 4-1: Product: syz
[  798.594494][ T8048] usb 4-1: Manufacturer: syz
[  798.604721][ T8048] usb 4-1: SerialNumber: syz
[  798.704121][ T5863] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  798.841521][ T8048] kvaser_usb 4-1:251.0: error -ENODEV: Cannot get usb endpoint(s)
[  798.864595][ T8048] usb 4-1: USB disconnect, device number 32
[  798.875869][ T5863] usb 2-1: config 0 has no interfaces?
[  798.883796][ T5863] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  798.895229][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.905543][ T5863] usb 2-1: Product: syz
[  798.909741][ T5863] usb 2-1: Manufacturer: syz
[  798.926564][ T5863] usb 2-1: SerialNumber: syz
[  798.936310][T16478] loop2: detected capacity change from 0 to 7
[  798.961382][ T5863] usb 2-1: config 0 descriptor??
[  798.981191][T16478]  loop2: p1
[  798.992781][T16478] loop2: partition table partially beyond EOD, truncated
[  799.023272][T16478] loop2: p1 size 1919251295 extends beyond EOD, truncated
[  799.101615][ T6926] udevd[6926]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  799.288258][T16507] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  799.303685][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2857'.
[  799.448781][T16510] syzkaller1: entered promiscuous mode
[  799.465458][T16510] syzkaller1: entered allmulticast mode
[  799.858151][T16515] bond2 (unregistering): Released all slaves
[  800.304348][ T8526] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  800.456825][ T8526] usb 7-1: config 0 has an invalid interface number: 33 but max is 0
[  800.468048][ T8526] usb 7-1: config 0 has no interface number 0
[  800.483552][ T8526] usb 7-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43
[  800.493887][ T8526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.525696][ T8526] usb 7-1: config 0 descriptor??
[  800.541180][ T8526] usb-storage 7-1:0.33: USB Mass Storage device detected
[  800.742052][T16531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  800.846912][T16531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  800.892203][ T8526] usb 7-1: USB disconnect, device number 48
[  800.920191][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'.
[  800.930486][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'.
[  801.419502][   T10] usb 2-1: USB disconnect, device number 4
[  801.471114][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2869'.
[  801.852643][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2871'.
[  801.977202][T16550] macsec1: entered promiscuous mode
[  801.999583][T16550] bridge0: entered promiscuous mode
[  802.607388][T16574] loop8: detected capacity change from 0 to 8
[  802.618618][T16574] Dev loop8: unable to read RDB block 8
[  802.627867][T16574]  loop8: unable to read partition table
[  802.633846][T16574] loop8: partition table beyond EOD, truncated
[  802.642769][T16574] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  802.842439][T16583] 8021q: adding VLAN 0 to HW filter on device bond15
[  802.862093][T16583] bond15: entered promiscuous mode
[  802.876407][T16583] team0: Port device bond15 added
[  803.967624][T16598] fuse: Bad value for 'user_id'
[  803.978483][T16598] fuse: Bad value for 'user_id'
[  804.734303][   T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  804.880077][T16611] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2887'.
[  804.945571][T16614] fuse: Bad value for 'fd'
[  805.185942][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  805.299557][   T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  805.406402][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  805.417511][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.437284][T16609] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  805.470926][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  805.705058][T16609] fuse: Unknown parameter 'rootmod'
[  805.804378][ T8526] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  805.854419][ T8048] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  805.969798][ T8526] usb 1-1: config 0 has an invalid interface number: 195 but max is 0
[  805.979218][ T8526] usb 1-1: config 0 has no interface number 0
[  805.999788][ T8526] usb 1-1: config 0 interface 195 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  806.082333][T16629] geneve3: entered promiscuous mode
[  806.092816][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 57945 - 0
[  806.104063][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 57945 - 0
[  806.155862][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 57945 - 0
[  806.174258][ T5863] usb 4-1: USB disconnect, device number 33
[  806.337219][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 57945 - 0
[  806.355302][ T8048] usb 7-1: Using ep0 maxpacket: 8
[  806.363755][ T8048] usb 7-1: unable to get BOS descriptor or descriptor too short
[  806.373938][ T8526] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=fd.08
[  806.385891][ T8048] usb 7-1: config 4 has an invalid interface number: 30 but max is 0
[  806.400289][ T8048] usb 7-1: config 4 has no interface number 0
[  806.431331][ T8526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.449379][ T8048] usb 7-1: config 4 interface 30 has no altsetting 0
[  806.466671][ T8526] usb 1-1: Product: syz
[  806.478925][ T8048] usb 7-1: string descriptor 0 read error: -22
[  806.486934][ T8048] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  806.497562][ T8526] usb 1-1: Manufacturer: syz
[  806.509016][ T8526] usb 1-1: SerialNumber: syz
[  806.518159][ T8048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.531238][ T8526] usb 1-1: config 0 descriptor??
[  806.543245][T16623] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  806.563829][ T8048] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  806.579830][ T8048] dw2102: su3000_power_ctrl: 1, initialized 0
[  806.586527][ T8048] dvb-usb: bulk message failed: -22 (2/0)
[  806.616152][ T8048] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  806.637973][ T8048] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  806.645638][ T8048] usb 7-1: media controller created
[  806.650891][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  806.657762][ T8048] dw2102: i2c transfer failed.
[  806.663383][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  806.669983][ T8048] dw2102: i2c transfer failed.
[  806.675472][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  806.681796][ T8048] dw2102: i2c transfer failed.
[  806.686937][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  806.692784][ T8048] dw2102: i2c transfer failed.
[  806.697956][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  806.704440][ T8048] dw2102: i2c transfer failed.
[  806.709798][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  806.716136][ T8048] dw2102: i2c transfer failed.
[  806.720949][ T8048] dvb-usb: MAC address: 02:02:02:02:02:02
[  806.743013][ T8048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  806.763889][T16625] dvb-usb: bulk message failed: -22 (3/0)
[  806.790210][T16625] dw2102: i2c transfer failed.
[  806.822927][T16625] dvb-usb: bulk message failed: -22 (3/0)
[  806.863438][T16625] dw2102: i2c transfer failed.
[  806.874816][T16625] dvb-usb: bulk message failed: -22 (3/0)
[  806.896182][T16625] dw2102: i2c transfer failed.
[  806.903419][ T8048] dvb-usb: bulk message failed: -22 (3/0)
[  806.909673][ T8048] dw2102: command 0x0e transfer failed.
[  806.917171][ T8048] dvb-usb: bulk message failed: -22 (3/0)
[  806.923151][ T8048] dw2102: command 0x0e transfer failed.
[  806.988784][ T8526] asix 1-1:0.195 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  807.027552][ T8526] asix 1-1:0.195: probe with driver asix failed with error -71
[  807.052416][ T8526] usb 1-1: USB disconnect, device number 30
[  807.238602][ T8048] dvb-usb: bulk message failed: -22 (3/0)
[  807.253248][ T8048] dw2102: command 0x0e transfer failed.
[  807.260144][ T8048] dvb-usb: bulk message failed: -22 (3/0)
[  807.268269][ T8048] dw2102: command 0x0e transfer failed.
[  807.275491][ T8048] dvb-usb: bulk message failed: -22 (1/0)
[  807.282257][ T8048] dw2102: command 0x51 transfer failed.
[  807.288561][ T8048] dvb-usb: bulk message failed: -22 (5/0)
[  807.295490][ T8048] dw2102: i2c probe for address 0x68 failed.
[  807.301774][ T8048] dvb-usb: bulk message failed: -22 (5/0)
[  807.308066][ T8048] dw2102: i2c probe for address 0x69 failed.
[  807.314203][ T8048] dvb-usb: bulk message failed: -22 (5/0)
[  807.320086][ T8048] dw2102: i2c probe for address 0x6a failed.
[  807.326148][ T8048] dw2102: probing for demodulator failed. Is the external power switched on?
[  807.336950][ T8048] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  807.406395][ T8048] rc_core: IR keymap rc-tt-1500 not found
[  807.414261][ T8048] Registered IR keymap rc-empty
[  807.420895][ T8048] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  807.435148][ T8048] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input73
[  807.449497][ T8048] dvb-usb: schedule remote query interval to 250 msecs.
[  807.458980][ T8048] dw2102: su3000_power_ctrl: 0, initialized 1
[  807.466372][ T8048] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  807.483069][ T8048] usb 7-1: USB disconnect, device number 49
[  807.549966][ T8048] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  807.589039][T16649] tipc: Enabling of bearer <eth:macvlan0> rejected, failed to enable media
[  808.624168][ T8048] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[  808.764191][ T8048] usb 7-1: device descriptor read/64, error -71
[  808.781371][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  808.788209][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  809.024294][ T8048] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[  809.164558][ T8048] usb 7-1: device descriptor read/64, error -71
[  809.279683][ T8048] usb usb7-port1: attempt power cycle
[  809.365300][T16689] ALSA: mixer_oss: invalid OSS volume 'u'
[  809.372313][T16689] ALSA: mixer_oss: invalid OSS volume 'K�����E(�E���֤Y��a��]f���'
[  809.381008][T16689] ALSA: mixer_oss: invalid OSS volume '��I'�Y���x
���\�8'
[  809.399607][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  809.416855][T16689] ALSA: mixer_oss: invalid OSS volume '�KA�w�Ո��iI�L�rJ�4�E�mͽ'
[  809.427567][T16689] ALSA: mixer_oss: invalid OSS volume '�X*�yē�҈���|)¶�Sv'��M�3'
[  809.436179][T16689] ALSA: mixer_oss: invalid OSS volume '&οer5��<�-{kUqvW~�7�|'
[  809.444699][T16689] ALSA: mixer_oss: invalid OSS volume '/ӑ�+��e��!5�86|Cɂ����'
[  809.452711][T16689] ALSA: mixer_oss: invalid OSS volume '���a�Q�4̳����~�A$nVn�r�'
[  809.461665][T16689] ALSA: mixer_oss: invalid OSS volume '��������B\�,�Ps9�Ho�F���r�'
[  809.470442][T16689] ALSA: mixer_oss: invalid OSS volume ')�K�4�7`��.��|=*���:�}��4*'
[  809.479045][T16689] ALSA: mixer_oss: invalid OSS volume '�!�|'
[  809.485258][T16689] ALSA: mixer_oss: invalid OSS volume '�J'
[  809.491280][T16689] ALSA: mixer_oss: invalid OSS volume '�UeIg�=c��¸֋�͓��hXy�C��9'
[  809.500201][T16689] ALSA: mixer_oss: invalid OSS volume '�C<���_�E=�b�?���������H7'
[  809.509053][T16689] ALSA: mixer_oss: invalid OSS volume '�rF�cߋ;ǒJlvı���;1.h��g�'
[  809.518755][T16689] ALSA: mixer_oss: invalid OSS volume '�'
[  809.524650][T16689] ALSA: mixer_oss: invalid OSS volume 'yBq�L�a��'M��mЌ_�d�n��D&�'
[  809.533104][T16689] ALSA: mixer_oss: invalid OSS volume '|��k���G�h���o��Q���6'
[  809.541248][T16689] ALSA: mixer_oss: invalid OSS volume '�V��s�1��J��<c�b�\]_:��'
[  809.549785][T16689] ALSA: mixer_oss: invalid OSS volume '�'
[  809.555657][T16689] ALSA: mixer_oss: invalid OSS volume '���s��3�U'
[  809.562246][T16689] ALSA: mixer_oss: invalid OSS volume 't��T����3�H�)>y[<C��~#�..�'
[  809.570736][T16689] ALSA: mixer_oss: invalid OSS volume '�k8�C���Vs�m�3/֋+nݦ!��޻���'
[  809.584252][T16689] ALSA: mixer_oss: invalid OSS volume '�x��\5�Ιoe��Am�l��'
[  809.593250][T16689] ALSA: mixer_oss: invalid OSS volume '��5R1����0eIubT�gl{�L����'���'
[  809.610369][T16689] ALSA: mixer_oss: invalid OSS volume '�`��\�ݘ�5����ZHH������a�P'
[  809.621477][T16689] ALSA: mixer_oss: invalid OSS volume '�?�M�?$ٗj��W�����1,y��޿'
[  809.632168][T16689] ALSA: mixer_oss: invalid OSS volume '4i!x��닉2.�k�ޭ+GD�(G���p�~'
[  809.662348][T16689] ALSA: mixer_oss: invalid OSS volume '��H���7��;��[�Lޞ'
[  809.673617][ T8048] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  809.674133][    T9] usb 1-1: Using ep0 maxpacket: 8
[  809.690854][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  809.699633][T16689] ALSA: mixer_oss: invalid OSS volume '�Z.ͤQ�.VLB��vqVCЁ��ά_ް�&o'
[  809.699879][    T9] usb 1-1: config 4 has an invalid interface number: 30 but max is 0
[  809.718345][    T9] usb 1-1: config 4 has no interface number 0
[  809.724625][    T9] usb 1-1: config 4 interface 30 has no altsetting 0
[  809.738296][    T9] usb 1-1: string descriptor 0 read error: -22
[  809.746128][    T9] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  809.757572][T16689] ALSA: mixer_oss: invalid OSS volume 'ZP�Qg�6N�@�/aST
���'
[  809.765521][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.787200][    T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  809.797023][    T9] dw2102: su3000_power_ctrl: 1, initialized 0
[  809.803390][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  809.820824][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  809.832039][    T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  809.841287][T16689] ALSA: mixer_oss: invalid OSS volume '�����L�FvbrD�'
[  809.851166][    T9] usb 1-1: media controller created
[  809.859507][T16689] ALSA: mixer_oss: invalid OSS volume '>����'&[w��������n)�Y3�EF
�I'
[  809.871541][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  809.877794][    T9] dw2102: i2c transfer failed.
[  809.883187][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  809.891532][T16689] ALSA: mixer_oss: invalid OSS volume '��_��L�>������r�D�M'
[  809.918474][ T8048] usb 7-1: device descriptor read/8, error -71
[  809.929843][    T9] dw2102: i2c transfer failed.
[  809.936644][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  809.944628][    T9] dw2102: i2c transfer failed.
[  809.949869][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  809.958085][T16689] ALSA: mixer_oss: invalid OSS volume 'H���s7d��'
[  809.966588][T16689] ALSA: mixer_oss: invalid OSS volume '���J��/�ݚO5���@g��?�Ra��'
[  809.977187][T16689] ALSA: mixer_oss: invalid OSS volume '����O�#|I��X�w7�!йT'g���'
[  809.986581][    T9] dw2102: i2c transfer failed.
[  809.991521][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  810.016855][T16689] ALSA: mixer_oss: invalid OSS volume 'U�U�I@W;d��*(�ā4�0?۽�-�IL'
[  810.025869][T16689] ALSA: mixer_oss: invalid OSS volume '�r,4fA��r�JpX:'
[  810.048739][    T9] dw2102: i2c transfer failed.
[  810.057949][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  810.063711][    T9] dw2102: i2c transfer failed.
[  810.072582][    T9] dvb-usb: MAC address: 02:02:02:02:02:02
[  810.092165][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  810.118398][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  810.127170][    T9] dw2102: command 0x0e transfer failed.
[  810.132760][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  810.141148][    T9] dw2102: command 0x0e transfer failed.
[  810.164503][ T8048] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  810.231977][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2913'.
[  810.334633][ T8048] usb 7-1: device descriptor read/8, error -71
[  810.454525][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  810.460862][T16697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.463736][    T9] dw2102: command 0x0e transfer failed.
[  810.484495][ T8048] usb usb7-port1: unable to enumerate USB device
[  810.485006][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  810.501037][    T9] dw2102: command 0x0e transfer failed.
[  810.511167][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  810.521248][    T9] dw2102: command 0x51 transfer failed.
[  810.527815][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  810.533704][    T9] dw2102: i2c probe for address 0x68 failed.
[  810.542875][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  810.551017][T16697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  810.561204][    T9] dw2102: i2c probe for address 0x69 failed.
[  810.572010][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  810.580073][    T9] dw2102: i2c probe for address 0x6a failed.
[  810.587560][    T9] dw2102: probing for demodulator failed. Is the external power switched on?
[  810.604581][    T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  810.634291][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  810.805059][   T10] usb 4-1: Using ep0 maxpacket: 32
[  811.151623][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  811.186879][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  811.216063][T16709] kvm: kvm [16706]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3
[  811.224288][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  811.254329][    T9] rc_core: IR keymap rc-tt-1500 not found
[  811.262249][    T9] Registered IR keymap rc-empty
[  811.267253][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  811.287559][    T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  811.300365][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  811.360236][    T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input74
[  811.394047][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  811.517799][    T9] dvb-usb: schedule remote query interval to 250 msecs.
[  811.527829][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  811.556739][    T9] dw2102: su3000_power_ctrl: 0, initialized 1
[  811.585711][    T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  811.596868][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  811.607242][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.632924][   T10] usb 4-1: Product: syz
[  811.638613][    T9] usb 1-1: USB disconnect, device number 31
[  811.659699][   T10] usb 4-1: Manufacturer: syz
[  811.703848][   T10] usb 4-1: SerialNumber: syz
[  811.740393][T16716] loop6: detected capacity change from 0 to 7
[  811.741538][   T10] usb 4-1: config 0 descriptor??
[  811.783083][T16696] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  811.801237][    T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  811.835787][ T5919] Dev loop6: unable to read RDB block 7
[  811.841423][ T5919]  loop6: AHDI p2 p3
[  811.872669][ T5919] loop6: partition table partially beyond EOD, truncated
[  811.901532][ T5919] loop6: p2 size 46 extends beyond EOD, truncated
[  811.919854][T16716] Dev loop6: unable to read RDB block 7
[  811.936954][T16716]  loop6: AHDI p2 p3
[  811.941112][T16716] loop6: partition table partially beyond EOD, truncated
[  811.948735][T16716] loop6: p2 size 46 extends beyond EOD, truncated
[  811.997320][   T10] hdpvr 4-1:0.0: unexpected answer of status request, len -71
[  812.009311][   T10] hdpvr 4-1:0.0: device init failed
[  812.020218][   T10] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  812.055573][   T10] usb 4-1: USB disconnect, device number 34
[  812.090980][ T5919] udevd[5919]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  812.168360][ T6926] udevd[6926]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  812.494300][    T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  812.607372][T16732] 8021q: adding VLAN 0 to HW filter on device bond6
[  812.616922][T16732] bond6: entered promiscuous mode
[  812.623070][T16732] team0: Port device bond6 added
[  812.629316][ T8526] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  812.644782][    T9] usb 5-1: Using ep0 maxpacket: 32
[  812.667946][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  812.693644][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  812.732633][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  812.742321][    T9] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  812.754943][    T9] usb 5-1: Product: syz
[  812.759224][    T9] usb 5-1: Manufacturer: syz
[  812.763949][    T9] usb 5-1: SerialNumber: syz
[  812.788387][    T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input75
[  812.794989][ T8526] usb 2-1: Using ep0 maxpacket: 8
[  812.816383][ T8526] usb 2-1: unable to get BOS descriptor or descriptor too short
[  812.838413][ T8526] usb 2-1: config 4 has an invalid interface number: 30 but max is 0
[  812.847215][ T8526] usb 2-1: config 4 has no interface number 0
[  812.863503][ T8526] usb 2-1: config 4 interface 30 has no altsetting 0
[  812.883673][ T8526] usb 2-1: string descriptor 0 read error: -22
[  812.890257][ T8526] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  812.909709][ T8526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.924164][ T8048] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  812.949709][ T8526] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  812.965051][ T8526] dw2102: su3000_power_ctrl: 1, initialized 0
[  812.977020][ T8526] dvb-usb: bulk message failed: -22 (2/0)
[  812.998697][ T8526] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  813.026564][ T8526] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  813.039817][ T8526] usb 2-1: media controller created
[  813.045188][ T8526] dvb-usb: bulk message failed: -22 (6/0)
[  813.051147][ T8526] dw2102: i2c transfer failed.
[  813.052873][    T9] usb 5-1: USB disconnect, device number 15
[  813.056051][    C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  813.056223][ T8526] dvb-usb: bulk message failed: -22 (6/0)
[  813.080654][ T8526] dw2102: i2c transfer failed.
[  813.086054][ T8526] dvb-usb: bulk message failed: -22 (6/0)
[  813.092099][ T8526] dw2102: i2c transfer failed.
[  813.101463][ T8526] dvb-usb: bulk message failed: -22 (6/0)
[  813.110378][ T8526] dw2102: i2c transfer failed.
[  813.117889][    T9] appletouch 5-1:1.0: input: appletouch disconnected
[  813.119685][ T8048] usb 7-1: config 0 has an invalid interface number: 199 but max is 1
[  813.147179][ T8048] usb 7-1: config 0 has no interface number 1
[  813.153342][ T8048] usb 7-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  813.171085][ T8526] dvb-usb: bulk message failed: -22 (6/0)
[  813.180877][ T8526] dw2102: i2c transfer failed.
[  813.190112][ T8526] dvb-usb: bulk message failed: -22 (6/0)
[  813.196401][ T8048] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  813.211131][ T8526] dw2102: i2c transfer failed.
[  813.226895][ T8526] dvb-usb: MAC address: 02:02:02:02:02:02
[  813.235828][ T8048] usb 7-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  813.248274][ T8048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  813.280387][ T8048] usb 7-1: SerialNumber: syz
[  813.300172][ T8526] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  813.310341][ T8048] usb 7-1: config 0 descriptor??
[  813.337624][ T8048] usb 7-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  813.367920][ T8048] usb 7-1: No valid video chain found.
[  813.384214][ T8526] dvb-usb: bulk message failed: -22 (3/0)
[  813.390012][ T8526] dw2102: command 0x0e transfer failed.
[  813.411240][ T8526] dvb-usb: bulk message failed: -22 (3/0)
[  813.422072][ T8526] dw2102: command 0x0e transfer failed.
[  813.617297][ T8048] usb 7-1: USB disconnect, device number 54
[  813.774345][ T8526] dvb-usb: bulk message failed: -22 (3/0)
[  813.791767][ T8526] dw2102: command 0x0e transfer failed.
[  813.805101][ T8526] dvb-usb: bulk message failed: -22 (3/0)
[  813.811679][ T8526] dw2102: command 0x0e transfer failed.
[  813.839479][ T8526] dvb-usb: bulk message failed: -22 (1/0)
[  813.845787][ T8526] dw2102: command 0x51 transfer failed.
[  813.852018][ T8526] dvb-usb: bulk message failed: -22 (5/0)
[  813.862920][ T8526] dw2102: i2c probe for address 0x68 failed.
[  813.869689][ T8526] dvb-usb: bulk message failed: -22 (5/0)
[  813.875809][ T8526] dw2102: i2c probe for address 0x69 failed.
[  813.881932][ T8526] dvb-usb: bulk message failed: -22 (5/0)
[  813.888837][ T8526] dw2102: i2c probe for address 0x6a failed.
[  813.897919][ T8526] dw2102: probing for demodulator failed. Is the external power switched on?
[  813.927544][ T8526] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  814.184586][ T8526] rc_core: IR keymap rc-tt-1500 not found
[  814.197638][ T8526] Registered IR keymap rc-empty
[  814.255300][ T8526] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  814.333437][ T8526] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input76
[  814.349349][T16770] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2938'.
[  814.377558][T16770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2938'.
[  814.427745][ T8526] dvb-usb: schedule remote query interval to 250 msecs.
[  814.509074][T16772] 8021q: adding VLAN 0 to HW filter on device bond2
[  814.532684][T16772] team0: Port device bond2 added
[  814.614190][ T8526] dw2102: su3000_power_ctrl: 0, initialized 1
[  814.620524][ T8526] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  814.648338][ T8526] usb 2-1: USB disconnect, device number 5
[  814.929465][ T8526] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  814.947256][T16782] input: syz1 as /devices/virtual/input/input77
[  815.434778][ T8526] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  815.600035][ T8526] usb 2-1: device descriptor read/64, error -71
[  815.636834][ T8048] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  815.795832][ T8048] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  815.824896][ T8048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.837715][ T8048] usb 4-1: config 0 descriptor??
[  815.884196][ T8526] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  815.944098][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  816.024211][ T8526] usb 2-1: device descriptor read/64, error -71
[  816.062889][   T30] audit: type=1326 audit(1758504281.908:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16787 comm="syz.3.2944" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92d618ec29 code=0x0
[  816.134398][    T9] usb 5-1: Using ep0 maxpacket: 8
[  816.145395][ T8526] usb usb2-port1: attempt power cycle
[  816.147198][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  816.160730][    T9] usb 5-1: config 4 has an invalid interface number: 30 but max is 0
[  816.173403][    T9] usb 5-1: config 4 has no interface number 0
[  816.181191][    T9] usb 5-1: config 4 interface 30 has no altsetting 0
[  816.244825][    T9] usb 5-1: string descriptor 0 read error: -22
[  816.254352][    T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  816.265225][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.347445][    T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  816.354865][    T9] dw2102: su3000_power_ctrl: 1, initialized 0
[  816.364193][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  816.400255][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  816.415097][    T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  816.422783][    T9] usb 5-1: media controller created
[  816.428815][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  816.434728][    T9] dw2102: i2c transfer failed.
[  816.439515][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  816.445781][    T9] dw2102: i2c transfer failed.
[  816.450576][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  816.461228][    T9] dw2102: i2c transfer failed.
[  816.472837][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  816.483465][    T9] dw2102: i2c transfer failed.
[  816.514757][ T8526] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  816.524436][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  816.530191][    T9] dw2102: i2c transfer failed.
[  816.555257][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  816.561352][    T9] dw2102: i2c transfer failed.
[  816.571518][    T9] dvb-usb: MAC address: 02:02:02:02:02:02
[  816.599685][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  816.633343][ T8048] ath6kl: Failed to submit usb control message: -71
[  816.646860][ T8526] usb 2-1: device descriptor read/8, error -71
[  816.697071][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'.
[  816.724179][ T8048] ath6kl: unable to send the bmi data to the device: -71
[  816.733133][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'.
[  816.752059][ T8048] ath6kl: Unable to send get target info: -71
[  816.752506][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  816.789647][    T9] dw2102: command 0x0e transfer failed.
[  816.797112][ T8048] ath6kl: Failed to init ath6kl core: -71
[  816.826403][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  816.836515][ T8048] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  816.877756][    T9] dw2102: command 0x0e transfer failed.
[  816.887227][ T8048] usb 4-1: USB disconnect, device number 35
[  816.974329][ T8526] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  817.047903][ T8526] usb 2-1: device descriptor read/8, error -71
[  817.167656][ T8526] usb usb2-port1: unable to enumerate USB device
[  817.178477][T16810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2952'.
[  817.206367][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  817.217934][    T9] dw2102: command 0x0e transfer failed.
[  817.238373][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  817.249891][    T9] dw2102: command 0x0e transfer failed.
[  817.264295][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  817.274425][    T9] dw2102: command 0x51 transfer failed.
[  817.287415][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  817.300161][    T9] dw2102: i2c probe for address 0x68 failed.
[  817.313555][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  817.326815][    T9] dw2102: i2c probe for address 0x69 failed.
[  817.340484][    T9] dvb-usb: bulk message failed: -22 (5/0)
[  817.361131][    T9] dw2102: i2c probe for address 0x6a failed.
[  817.380599][    T9] dw2102: probing for demodulator failed. Is the external power switched on?
[  817.406375][    T9] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  817.464906][   T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  817.514133][    T9] rc_core: IR keymap rc-tt-1500 not found
[  817.519897][    T9] Registered IR keymap rc-empty
[  817.536057][    T9] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  817.758776][    T9] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input78
[  817.771196][   T10] usb 1-1: config 0 has no interfaces?
[  817.782522][   T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  817.798130][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.807377][    T9] dvb-usb: schedule remote query interval to 250 msecs.
[  817.850612][    T9] dw2102: su3000_power_ctrl: 0, initialized 1
[  817.858964][   T10] usb 1-1: Product: syz
[  817.876422][   T10] usb 1-1: Manufacturer: syz
[  817.887840][    T9] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  817.906467][   T10] usb 1-1: SerialNumber: syz
[  817.954752][    T9] usb 5-1: USB disconnect, device number 16
[  817.972131][   T10] usb 1-1: config 0 descriptor??
[  818.389027][ T8048] usb 1-1: USB disconnect, device number 32
[  818.402042][    T9] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  818.854205][    T9] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  819.047096][    T9] usb 5-1: device descriptor read/64, error -71
[  819.158878][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'.
[  819.663387][    T9] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  819.824494][    T9] usb 5-1: device descriptor read/64, error -71
[  819.945939][    T9] usb usb5-port1: attempt power cycle
[  820.264401][ T8048] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  820.475522][ T8048] usb 2-1: device descriptor read/64, error -71
[  820.864154][ T8048] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  821.004203][ T8048] usb 2-1: device descriptor read/64, error -71
[  821.124581][ T8048] usb usb2-port1: attempt power cycle
[  821.564508][ T8048] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  821.584912][ T8048] usb 2-1: device descriptor read/8, error -71
[  821.824227][ T8048] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  821.893914][ T8048] usb 2-1: device descriptor read/8, error -71
[  822.004572][ T8048] usb usb2-port1: unable to enumerate USB device
[  822.214217][ T8526] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  822.365561][ T8526] usb 4-1: config 0 has no interfaces?
[  822.378914][ T8526] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  822.416819][ T8526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.455347][ T8526] usb 4-1: Product: syz
[  822.465241][ T8526] usb 4-1: Manufacturer: syz
[  822.484336][ T8526] usb 4-1: SerialNumber: syz
[  822.500880][ T8526] usb 4-1: config 0 descriptor??
[  822.590569][ T5868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  822.604431][ T5868] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  822.613539][ T5868] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  822.622422][ T5868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  822.631159][ T5868] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  822.741243][ T8526] usb 4-1: USB disconnect, device number 36
[  822.776824][ T9516] team0: Port device syz_tun removed
[  822.794197][ T8048] usb 7-1: new low-speed USB device number 55 using dummy_hcd
[  822.902129][T16904] loop6: detected capacity change from 0 to 7
[  822.912233][T16904] Dev loop6: unable to read RDB block 7
[  822.922637][T16904]  loop6: unable to read partition table
[  822.944881][T16904] loop6: partition table beyond EOD, truncated
[  822.947353][ T8048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  822.955813][T16904] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  822.986140][ T8048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  823.034396][ T8048] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  823.073530][ T8048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.100117][T16907] loop6: detected capacity change from 0 to 7
[  823.108925][ T6926] Dev loop6: unable to read RDB block 7
[  823.114842][ T6926]  loop6: unable to read partition table
[  823.120893][ T6926] loop6: partition table beyond EOD, truncated
[  823.121505][ T8048] usb 7-1: config 0 descriptor??
[  823.144949][T16907] Dev loop6: unable to read RDB block 7
[  823.150534][T16907]  loop6: unable to read partition table
[  823.214271][T16907] loop6: partition table beyond EOD, truncated
[  823.220890][T16907] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  823.516486][T16910] 8021q: adding VLAN 0 to HW filter on device bond16
[  823.537341][T16910] bond16: entered promiscuous mode
[  823.551892][T16910] team0: Port device bond16 added
[  823.632449][T16917] ip6tnl1: entered promiscuous mode
[  823.725965][T16925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2979'.
[  823.753678][T16925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2979'.
[  824.287113][T16902] chnl_net:caif_netlink_parms(): no params data found
[  824.314224][    T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  824.694302][ T5868] Bluetooth: hci5: command tx timeout
[  825.048600][T16902] bridge0: port 1(bridge_slave_0) entered blocking state
[  825.088256][T16902] bridge0: port 1(bridge_slave_0) entered disabled state
[  825.119440][T16902] bridge_slave_0: entered allmulticast mode
[  825.153248][T16902] bridge_slave_0: entered promiscuous mode
[  825.153855][T16945] loop6: detected capacity change from 0 to 7
[  825.172246][T16945] Dev loop6: unable to read RDB block 7
[  825.218451][ T8048] glorious 0003:258A:0036.001C: item fetching failed at offset 0/2
[  825.226887][T16945]  loop6: unable to read partition table
[  825.238996][T16945] loop6: partition table beyond EOD, truncated
[  825.250408][ T8048] glorious 0003:258A:0036.001C: probe with driver glorious failed with error -22
[  825.265328][T16945] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  825.313781][T16902] bridge0: port 2(bridge_slave_1) entered blocking state
[  825.330973][T16902] bridge0: port 2(bridge_slave_1) entered disabled state
[  825.362763][T16902] bridge_slave_1: entered allmulticast mode
[  825.406189][T16902] bridge_slave_1: entered promiscuous mode
[  825.423942][ T8526] usb 7-1: USB disconnect, device number 55
[  825.794114][ T8048] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  825.964352][ T8048] usb 2-1: device descriptor read/64, error -71
[  825.984151][ T8528] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  826.116113][ T3568] bridge_slave_1: left allmulticast mode
[  826.121827][ T3568] bridge_slave_1: left promiscuous mode
[  826.127676][ T8528] usb 1-1: device descriptor read/64, error -71
[  826.137761][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state
[  826.204227][ T8048] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  826.211916][ T3568] bridge_slave_0: left allmulticast mode
[  826.224687][ T3568] bridge_slave_0: left promiscuous mode
[  826.248915][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state
[  826.352412][ T8048] usb 2-1: device descriptor read/64, error -71
[  826.374328][ T8528] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  826.471097][ T8048] usb usb2-port1: attempt power cycle
[  826.497283][ T3568] bond3 (unregistering): (slave ip6erspan0): Releasing active interface
[  826.526173][ T8528] usb 1-1: device descriptor read/64, error -71
[  826.638497][ T8528] usb usb1-port1: attempt power cycle
[  826.786851][ T5868] Bluetooth: hci5: command tx timeout
[  826.814114][ T8048] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  826.848844][ T8048] usb 2-1: device descriptor read/8, error -71
[  826.984137][ T8528] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  827.012499][ T8528] usb 1-1: device descriptor read/8, error -71
[  827.094204][ T8048] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  827.123864][ T8048] usb 2-1: device descriptor read/8, error -71
[  827.237371][ T8048] usb usb2-port1: unable to enumerate USB device
[  827.254942][ T8528] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  827.285304][ T8528] usb 1-1: device descriptor read/8, error -71
[  827.298013][ T3568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  827.310038][ T3568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  827.324990][ T3568] bond0 (unregistering): Released all slaves
[  827.373529][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  827.384662][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  827.404276][    T9] usb 4-1: can't read configurations, error -71
[  827.414705][ T8528] usb usb1-port1: unable to enumerate USB device
[  827.600776][ T3568] team0: Port device bond1 removed
[  827.609037][ T3568] bond1 (unregistering): Released all slaves
[  827.650544][T16967] input: syz1 as /devices/virtual/input/input79
[  827.828042][ T3568] bond2 (unregistering): Released all slaves
[  828.010917][ T3568] bond3 (unregistering): Released all slaves
[  828.208531][ T3568] team0: Port device bond4 removed
[  828.217118][ T3568] bond4 (unregistering): Released all slaves
[  828.419718][ T3568] bond5 (unregistering): Released all slaves
[  828.839917][ T3568] team0: Port device bond6 removed
[  828.848185][ T3568] bond6 (unregistering): Released all slaves
[  828.854343][ T5868] Bluetooth: hci5: command tx timeout
[  829.196090][ T3568] team0: Port device bond7 removed
[  829.225705][ T3568] bond7 (unregistering): Released all slaves
[  829.364142][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  829.421781][ T3568] bond8 (unregistering): Released all slaves
[  829.535394][    T9] usb 4-1: Using ep0 maxpacket: 16
[  829.553911][    T9] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  829.568088][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  829.627261][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  829.637152][ T3568] team0: Port device bond9 removed
[  829.643238][ T3568] bond9 (unregistering): Released all slaves
[  829.659218][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.668272][    T9] usb 4-1: Product: syz
[  829.674256][    T9] usb 4-1: Manufacturer: syz
[  829.682187][    T9] usb 4-1: SerialNumber: syz
[  829.863465][ T3568] bond10 (unregistering): Released all slaves
[  830.026562][ T3568] team0: Port device bond11 removed
[  830.032922][ T3568] bond11 (unregistering): Released all slaves
[  830.187716][ T3568] team0: Port device bond12 removed
[  830.194549][ T3568] bond12 (unregistering): Released all slaves
[  830.395195][ T3568] team0: Port device bond13 removed
[  830.401724][ T3568] bond13 (unregistering): Released all slaves
[  830.575488][ T3568] team0: Port device bond14 removed
[  830.582364][ T3568] bond14 (unregistering): Released all slaves
[  830.605952][T16902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  830.726472][T16902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  830.762581][    T9] usb 4-1: 0:2 : does not exist
[  830.776670][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  830.837063][    T9] usb 4-1: USB disconnect, device number 39
[  830.853003][ T3568] tipc: Left network mode
[  830.918020][T16902] team0: Port device team_slave_0 added
[  830.940707][ T5868] Bluetooth: hci5: command tx timeout
[  831.049456][T16902] team0: Port device team_slave_1 added
[  831.502436][T16902] batman_adv: batadv0: Adding interface: batadv_slave_0
[  831.502455][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  831.502481][T16902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  831.511802][T16994] bridge2: the hash_elasticity option has been deprecated and is always 16
[  831.513640][T16902] batman_adv: batadv0: Adding interface: batadv_slave_1
[  831.513658][T16902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  831.513680][T16902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  831.725785][ T3568] hsr_slave_0: left promiscuous mode
[  831.756502][ T3568] hsr_slave_1: left promiscuous mode
[  831.769349][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_0
[  831.792216][ T3568] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.864113][    T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  832.002759][ T3568] pim6reg (unregistering): left allmulticast mode
[  832.119738][    T9] usb 7-1: Using ep0 maxpacket: 32
[  832.171243][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  832.183718][    T9] usb 7-1: config 5 has an invalid interface number: 196 but max is 0
[  832.192177][    T9] usb 7-1: config 5 has no interface number 0
[  832.198321][    T9] usb 7-1: config 5 interface 196 has no altsetting 0
[  832.209189][    T9] usb 7-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=18.36
[  832.226101][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.258363][    T9] usb 7-1: Product: syz
[  832.262701][    T9] usb 7-1: Manufacturer: syz
[  832.268546][    T9] usb 7-1: SerialNumber: syz
[  832.335345][T17024] block nbd0: Attempted send on invalid socket
[  832.349687][T17024] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  832.536947][    T9] upd78f0730 7-1:5.196: upd78f0730 converter detected
[  832.596049][    T9] usb 7-1: upd78f0730 converter now attached to ttyUSB0
[  832.632198][    T9] usb 7-1: USB disconnect, device number 56
[  832.723823][    T9] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  832.765288][    T9] upd78f0730 7-1:5.196: device disconnected
[  833.266784][ T3568] team0 (unregistering): Port device team_slave_1 removed
[  833.401288][T17034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.436225][T17034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.507186][ T3568] team0 (unregistering): Port device team_slave_0 removed
[  833.664099][ T8526] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  834.020833][ T8526] usb 1-1: Using ep0 maxpacket: 8
[  834.028020][ T8526] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  834.038598][ T8526] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  834.050615][ T8526] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  834.122376][ T8526] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  834.139357][ T8526] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  834.162828][ T8526] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  834.188533][    T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  834.232364][ T8526] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  834.384705][ T8526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.387402][    T9] usb 7-1: config 8 has an invalid interface number: 53 but max is 1
[  834.405473][    T9] usb 7-1: config 8 has an invalid interface number: 158 but max is 1
[  834.417072][ T8526] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  834.432741][    T9] usb 7-1: config 8 has no interface number 0
[  834.445226][    T9] usb 7-1: config 8 has no interface number 1
[  834.473923][    T9] usb 7-1: config 8 interface 53 altsetting 5 endpoint 0xD has an invalid bInterval 129, changing to 7
[  834.550970][    T9] usb 7-1: config 8 interface 53 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  834.586641][    T9] usb 7-1: config 8 interface 158 altsetting 7 endpoint 0x4 has invalid maxpacket 1552, setting to 64
[  834.616693][T17037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.628294][    T9] usb 7-1: config 8 interface 53 has no altsetting 0
[  834.631980][T17037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.635102][    T9] usb 7-1: config 8 interface 158 has no altsetting 0
[  834.659570][T17037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.682100][    T9] usb 7-1: New USB device found, idVendor=19d2, idProduct=ff4b, bcdDevice=df.95
[  834.691593][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  834.700351][    T9] usb 7-1: Product: syz
[  834.708918][    T9] usb 7-1: Manufacturer: ᪰⿇鄓舀뎥蹂ëＢ덞頉艫嫂ɞ쾀१䄆똗嘻
[  834.738613][T17037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.759557][T17037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.778910][T17037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.779231][    T9] usb 7-1: SerialNumber: syz
[  834.801647][T17037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.834538][T17037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.926139][   T10] usb 1-1: USB disconnect, device number 37
[  835.178941][T17053] input: syz1 as /devices/virtual/input/input80
[  835.539025][T16902] hsr_slave_0: entered promiscuous mode
[  835.546722][T16902] hsr_slave_1: entered promiscuous mode
[  835.553718][T16902] debugfs: 'hsr0' already exists in 'hsr'
[  835.562157][T16902] Cannot create hsr debugfs directory
[  836.223728][T17063] input: syz1 as /devices/virtual/input/input81
[  836.262561][ T3568] IPVS: stop unused estimator thread 0...
[  836.354257][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  836.548105][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  836.692920][    T9] option 7-1:8.53: GSM modem (1-port) converter detected
[  836.763662][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  836.980587][   T10] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  837.005671][    T9] usb 7-1: USB disconnect, device number 57
[  837.024193][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.043629][    T9] option 7-1:8.53: device disconnected
[  837.059392][   T10] usb 2-1: config 0 descriptor??
[  837.302995][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  837.423713][T17079] 8021q: adding VLAN 0 to HW filter on device bond17
[  837.431037][    T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  837.443138][T17079] bond17: entered promiscuous mode
[  837.451527][T17079] team0: Port device bond17 added
[  837.460298][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  837.513184][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  837.607552][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  837.627219][T17085] loop6: detected capacity change from 0 to 7
[  837.645420][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  837.668046][ T6926] Dev loop6: unable to read RDB block 7
[  837.673676][ T6926]  loop6: unable to read partition table
[  837.675636][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  837.691716][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  837.693253][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  837.713177][    T9] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  837.724352][ T6926] loop6: partition table beyond EOD, truncated
[  837.728451][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.768015][T17085] Dev loop6: unable to read RDB block 7
[  837.775524][T17085]  loop6: unable to read partition table
[  837.783570][T17085] loop6: partition table beyond EOD, truncated
[  837.788045][    T9] usb 7-1: config 0 descriptor??
[  837.808965][T17085] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  837.819339][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  837.831311][    T9] em28xx 7-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  837.837123][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  837.859819][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  837.929989][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  838.001724][T17057] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3011'.
[  838.058332][T17073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  838.095274][T17073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  838.146449][ T8526] usb 7-1: USB disconnect, device number 58
[  838.331237][T16902] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  838.361231][T16902] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  838.391013][T16902] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  838.420691][T16902] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  838.607580][T16902] 8021q: adding VLAN 0 to HW filter on device bond0
[  838.635912][T16902] 8021q: adding VLAN 0 to HW filter on device team0
[  838.660383][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.667723][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  838.754310][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.761796][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state
[  839.016888][T16902] 8021q: adding VLAN 0 to HW filter on device batadv0
[  839.047229][T17123] input: syz1 as /devices/virtual/input/input82
[  839.482892][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  839.491999][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  839.523892][T17126] bond3 (unregistering): Released all slaves
[  839.539020][T17137] netlink: 'syz.3.3024': attribute type 4 has an invalid length.
[  839.651924][   T10] usb 2-1: USB disconnect, device number 18
[  839.663475][T16902] veth0_vlan: entered promiscuous mode
[  839.785214][T16902] veth1_vlan: entered promiscuous mode
[  839.800620][T17139] netlink: 'syz.3.3024': attribute type 4 has an invalid length.
[  840.651453][T16902] veth0_macvtap: entered promiscuous mode
[  840.686858][T16902] veth1_macvtap: entered promiscuous mode
[  840.742203][T16902] batman_adv: batadv0: Interface activated: batadv_slave_0
[  840.788295][T17154] loop6: detected capacity change from 0 to 7
[  840.832194][ T6926] Dev loop6: unable to read RDB block 7
[  840.848670][T16902] batman_adv: batadv0: Interface activated: batadv_slave_1
[  840.858400][ T6926]  loop6: unable to read partition table
[  840.901765][ T6926] loop6: partition table beyond EOD, truncated
[  840.928592][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.948924][T17154] Dev loop6: unable to read RDB block 7
[  840.963670][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  840.984553][T17154]  loop6: unable to read partition table
[  840.990431][T17154] loop6: partition table beyond EOD, truncated
[  841.007141][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  841.014427][T17154] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  841.041768][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  841.194518][ T8048] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  841.246328][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.265421][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.274855][ T8528] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  841.342351][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.376867][ T8048] usb 4-1: Using ep0 maxpacket: 8
[  841.379641][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.391360][ T8048] usb 4-1: unable to get BOS descriptor or descriptor too short
[  841.408954][ T8048] usb 4-1: config 4 has an invalid interface number: 30 but max is 0
[  841.425839][ T8528] usb 1-1: device descriptor read/64, error -71
[  841.438924][ T8048] usb 4-1: config 4 has no interface number 0
[  841.449662][ T8048] usb 4-1: config 4 interface 30 has no altsetting 0
[  841.472859][ T8048] usb 4-1: string descriptor 0 read error: -22
[  841.492641][ T8048] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  841.514575][ T8048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.557572][ T8048] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  841.576705][ T8048] dw2102: su3000_power_ctrl: 1, initialized 0
[  841.582849][ T8048] dvb-usb: bulk message failed: -22 (2/0)
[  841.610173][ T8048] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  841.651755][ T8048] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  841.670936][ T8048] usb 4-1: media controller created
[  841.681020][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  841.688055][ T8528] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  841.701984][ T8048] dw2102: i2c transfer failed.
[  841.713376][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  841.741532][ T8048] dw2102: i2c transfer failed.
[  841.754166][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  841.764504][ T8048] dw2102: i2c transfer failed.
[  841.769402][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  841.781345][ T8048] dw2102: i2c transfer failed.
[  841.787686][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  841.804168][ T8048] dw2102: i2c transfer failed.
[  841.809283][ T8048] dvb-usb: bulk message failed: -22 (6/0)
[  841.828948][ T8048] dw2102: i2c transfer failed.
[  841.834520][ T8528] usb 1-1: device descriptor read/64, error -71
[  841.850340][ T8048] dvb-usb: MAC address: 02:02:02:02:02:02
[  841.864585][T16357] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  841.880087][ T8048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  841.934583][ T8048] dvb-usb: bulk message failed: -22 (3/0)
[  841.945103][ T8528] usb usb1-port1: attempt power cycle
[  841.956169][ T8048] dw2102: command 0x0e transfer failed.
[  841.985540][ T8048] dvb-usb: bulk message failed: -22 (3/0)
[  841.991320][ T8048] dw2102: command 0x0e transfer failed.
[  842.004469][T16357] usb 5-1: device descriptor read/64, error -71
[  842.304657][ T8528] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  842.332688][ T8048] dvb-usb: bulk message failed: -22 (3/0)
[  842.347127][T16357] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  842.360408][ T8048] dw2102: command 0x0e transfer failed.
[  842.382669][T17187] loop8: detected capacity change from 0 to 8
[  842.391077][ T6926] Dev loop8: unable to read RDB block 8
[  842.398638][ T6926]  loop8: unable to read partition table
[  842.406073][ T6926] loop8: partition table beyond EOD, truncated
[  842.413563][T17187] Dev loop8: unable to read RDB block 8
[  842.423875][T17187]  loop8: unable to read partition table
[  842.429880][ T8528] usb 1-1: device descriptor read/8, error -71
[  842.430048][ T8048] dvb-usb: bulk message failed: -22 (3/0)
[  842.474054][ T8048] dw2102: command 0x0e transfer failed.
[  842.479647][ T8048] dvb-usb: bulk message failed: -22 (1/0)
[  842.497436][T17187] loop8: partition table beyond EOD, truncated
[  842.506186][T16357] usb 5-1: device descriptor read/64, error -71
[  842.530237][T17187] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  842.579941][ T8048] dw2102: command 0x51 transfer failed.
[  842.586177][ T8048] dvb-usb: bulk message failed: -22 (5/0)
[  842.592043][ T8048] dw2102: i2c probe for address 0x68 failed.
[  842.624212][ T8048] dvb-usb: bulk message failed: -22 (5/0)
[  842.624898][T16357] usb usb5-port1: attempt power cycle
[  842.654748][ T8048] dw2102: i2c probe for address 0x69 failed.
[  842.675177][ T8528] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  842.695265][ T8528] usb 1-1: device descriptor read/8, error -71
[  842.703825][ T8048] dvb-usb: bulk message failed: -22 (5/0)
[  842.763827][ T8048] dw2102: i2c probe for address 0x6a failed.
[  842.799030][ T8048] dw2102: probing for demodulator failed. Is the external power switched on?
[  842.809156][ T8528] usb usb1-port1: unable to enumerate USB device
[  842.879482][ T8048] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  843.020163][T16357] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  843.060598][T16357] usb 5-1: device descriptor read/8, error -71
[  843.067224][ T8048] rc_core: IR keymap rc-tt-1500 not found
[  843.269223][ T8048] Registered IR keymap rc-empty
[  843.278715][ T8048] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  843.314139][T16357] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  843.351542][ T8048] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input83
[  843.371212][T16357] usb 5-1: device descriptor read/8, error -71
[  843.480522][ T8048] dvb-usb: schedule remote query interval to 250 msecs.
[  843.496493][T16357] usb usb5-port1: unable to enumerate USB device
[  843.504288][ T8048] dw2102: su3000_power_ctrl: 0, initialized 1
[  843.506239][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  843.510455][ T8048] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  843.522553][ T5872] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  843.531992][ T8048] usb 4-1: USB disconnect, device number 40
[  843.536572][ T5872] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  843.570699][ T5872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  843.580994][ T5872] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  844.031639][ T8048] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  844.554160][ T8526] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  844.689776][T17203] __nla_validate_parse: 58 callbacks suppressed
[  844.689789][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3038'.
[  844.774103][ T8526] usb 1-1: Using ep0 maxpacket: 16
[  844.862098][T17205] 8021q: adding VLAN 0 to HW filter on device bond1
[  844.884864][T17205] team0: Port device bond1 added
[  845.156208][T17196] chnl_net:caif_netlink_parms(): no params data found
[  845.404366][ T8528] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  845.411309][T17196] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.419511][T17196] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.427366][T17196] bridge_slave_0: entered allmulticast mode
[  845.436095][T17196] bridge_slave_0: entered promiscuous mode
[  845.446131][T17196] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.453843][T17196] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.461904][T17196] bridge_slave_1: entered allmulticast mode
[  845.470955][T17196] bridge_slave_1: entered promiscuous mode
[  845.526102][T17196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  845.541555][T17196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  845.584513][ T8528] usb 4-1: Using ep0 maxpacket: 8
[  845.662477][ T5872] Bluetooth: hci2: command tx timeout
[  845.664102][ T8528] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  845.680877][ T8528] usb 4-1: config 0 has no interface number 0
[  845.687605][ T8528] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  845.729947][T17196] team0: Port device team_slave_0 added
[  845.734269][ T8528] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  845.740042][T17196] team0: Port device team_slave_1 added
[  845.794067][T16357] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  845.800469][ T8528] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  845.820368][ T8528] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  845.840027][ T8528] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  845.924146][T16357] usb 5-1: device descriptor read/64, error -71
[  845.933891][T17196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  845.961380][ T8528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  845.988634][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  846.036348][ T8528] usb 4-1: config 0 descriptor??
[  846.079534][ T8528] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  846.088141][T17196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.113563][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3042'.
[  846.169454][T17225] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3042'.
[  846.179472][T16357] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  846.318162][ T8528] usb 4-1: USB disconnect, device number 41
[  846.318233][    C0] ldusb 4-1:0.55: usb_submit_urb failed (-19)
[  846.331670][T16357] usb 5-1: device descriptor read/64, error -71
[  846.444305][T16357] usb usb5-port1: attempt power cycle
[  846.542893][T17196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  846.550228][T17196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  846.577145][T17196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  846.582151][ T8528] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  846.594931][T17213] ldusb: No device or device unplugged -19
[  846.689612][T17196] hsr_slave_0: entered promiscuous mode
[  846.698291][T17196] hsr_slave_1: entered promiscuous mode
[  846.708232][T17196] debugfs: 'hsr0' already exists in 'hsr'
[  846.716778][T17196] Cannot create hsr debugfs directory
[  846.794683][T16357] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  846.816426][T16357] usb 5-1: device descriptor read/8, error -71
[  847.007961][T17196] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 57945 - 0
[  847.064301][T16357] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  847.084686][T16357] usb 5-1: device descriptor read/8, error -71
[  847.117401][T17196] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 57945 - 0
[  847.180172][T17233] loop8: detected capacity change from 0 to 8
[  847.189447][T17233] Dev loop8: unable to read RDB block 8
[  847.198699][T16357] usb usb5-port1: unable to enumerate USB device
[  847.200585][T17233]  loop8: unable to read partition table
[  847.211629][T17233] loop8: partition table beyond EOD, truncated
[  847.221067][T17233] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  847.251917][T17196] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 57945 - 0
[  847.340170][T17196] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 57945 - 0
[  847.498786][T17196] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  847.512242][T17196] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  847.529769][T17196] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  847.541158][T17196] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  847.584125][T16357] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  847.632813][ T8526] usb 1-1: unable to get BOS descriptor or descriptor too short
[  847.654703][ T8526] usb 1-1: unable to read config index 0 descriptor/start: -71
[  847.665532][ T8526] usb 1-1: can't read configurations, error -71
[  847.731754][T17196] 8021q: adding VLAN 0 to HW filter on device bond0
[  847.734392][ T5872] Bluetooth: hci2: command tx timeout
[  847.764288][T16357] usb 4-1: Using ep0 maxpacket: 8
[  847.770983][T17196] 8021q: adding VLAN 0 to HW filter on device team0
[  847.780135][T16357] usb 4-1: unable to get BOS descriptor or descriptor too short
[  847.790212][T12114] bridge0: port 1(bridge_slave_0) entered blocking state
[  847.797426][T12114] bridge0: port 1(bridge_slave_0) entered forwarding state
[  847.882815][T16357] usb 4-1: config 4 has an invalid interface number: 30 but max is 0
[  847.893286][T16357] usb 4-1: config 4 has no interface number 0
[  847.907601][T12114] bridge0: port 2(bridge_slave_1) entered blocking state
[  847.914822][T12114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  847.965726][T17246] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  848.044203][T16357] usb 4-1: config 4 interface 30 has no altsetting 0
[  848.077663][T16357] usb 4-1: string descriptor 0 read error: -22
[  848.085274][T16357] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  848.102465][T16357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.133328][T16357] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  848.210747][T16357] dw2102: su3000_power_ctrl: 1, initialized 0
[  848.222279][T16357] dvb-usb: bulk message failed: -22 (2/0)
[  848.229222][T17196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  848.335188][ T8048] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  848.354631][T16357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  848.380721][T16357] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  848.409805][T17196] veth0_vlan: entered promiscuous mode
[  848.433414][T16357] usb 4-1: media controller created
[  848.502102][T16357] dvb-usb: bulk message failed: -22 (6/0)
[  848.508957][T16357] dw2102: i2c transfer failed.
[  848.513917][T16357] dvb-usb: bulk message failed: -22 (6/0)
[  848.514113][ T8048] usb 7-1: Using ep0 maxpacket: 32
[  848.535975][T17196] veth1_vlan: entered promiscuous mode
[  848.545558][T17251] netlink: 'syz.3.3045': attribute type 1 has an invalid length.
[  848.567942][ T8048] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  848.581674][ T8048] usb 7-1: config 0 has no interface number 0
[  848.583880][T16357] dw2102: i2c transfer failed.
[  848.676952][ T8048] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  848.686439][ T8048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.696098][ T8048] usb 7-1: Product: syz
[  848.697026][T16357] dvb-usb: bulk message failed: -22 (6/0)
[  848.700375][ T8048] usb 7-1: Manufacturer: syz
[  848.711015][ T8048] usb 7-1: SerialNumber: syz
[  848.742478][T16357] dw2102: i2c transfer failed.
[  848.749589][T16357] dvb-usb: bulk message failed: -22 (6/0)
[  848.755951][T16357] dw2102: i2c transfer failed.
[  848.760739][T16357] dvb-usb: bulk message failed: -22 (6/0)
[  848.762045][ T8048] usb 7-1: config 0 descriptor??
[  848.766998][T16357] dw2102: i2c transfer failed.
[  848.776771][T16357] dvb-usb: bulk message failed: -22 (6/0)
[  848.782589][T16357] dw2102: i2c transfer failed.
[  848.787614][T16357] dvb-usb: MAC address: 02:02:02:02:02:02
[  848.848839][ T8048] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  848.865718][ T8048] usb 7-1: selecting invalid altsetting 1
[  848.871634][ T8048] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  848.899827][T17249] bond7: entered promiscuous mode
[  848.905957][T17249] bond7: entered allmulticast mode
[  848.919426][ T8048] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  848.943713][T16357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  848.980034][T16357] dvb-usb: bulk message failed: -22 (3/0)
[  848.980055][ T8048] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  848.997774][T17249] 8021q: adding VLAN 0 to HW filter on device bond7
[  849.005065][T16357] dw2102: command 0x0e transfer failed.
[  849.008613][ T8048] usb 7-1: media controller created
[  849.010711][T16357] dvb-usb: bulk message failed: -22 (3/0)
[  849.031002][T16357] dw2102: command 0x0e transfer failed.
[  849.073877][T17250] 8021q: adding VLAN 0 to HW filter on device bond8
[  849.085925][T17250] bond8: entered promiscuous mode
[  849.101627][T17250] bond8: entered allmulticast mode
[  849.111074][T17250] bond7: (slave bond8): Enslaving as a backup interface with a down link
[  849.151728][ T8048] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  849.191627][T17196] veth0_macvtap: entered promiscuous mode
[  849.209676][T17196] veth1_macvtap: entered promiscuous mode
[  849.237892][T17196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  849.351780][T16357] dvb-usb: bulk message failed: -22 (3/0)
[  849.369415][T16357] dw2102: command 0x0e transfer failed.
[  849.384023][T16357] dvb-usb: bulk message failed: -22 (3/0)
[  849.389947][T16357] dw2102: command 0x0e transfer failed.
[  849.397490][T17196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  849.407059][T16357] dvb-usb: bulk message failed: -22 (1/0)
[  849.413700][T16357] dw2102: command 0x51 transfer failed.
[  849.426609][T16357] dvb-usb: bulk message failed: -22 (5/0)
[  849.433068][T16357] dw2102: i2c probe for address 0x68 failed.
[  849.444475][T16357] dvb-usb: bulk message failed: -22 (5/0)
[  849.454921][ T1016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  849.461423][T16357] dw2102: i2c probe for address 0x69 failed.
[  849.470206][T16357] dvb-usb: bulk message failed: -22 (5/0)
[  849.476102][T16357] dw2102: i2c probe for address 0x6a failed.
[  849.535338][T16357] dw2102: probing for demodulator failed. Is the external power switched on?
[  849.554605][T17265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  849.565893][T17265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  849.582752][T16357] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  849.588406][ T1016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  849.665982][ T1016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  849.680315][ T1016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  849.784251][T16357] rc_core: IR keymap rc-tt-1500 not found
[  849.808434][T16357] Registered IR keymap rc-empty
[  849.814270][ T5872] Bluetooth: hci2: command tx timeout
[  849.833042][T17270] loop8: detected capacity change from 0 to 8
[  849.886985][T16357] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  849.895669][T17270] Dev loop8: unable to read RDB block 8
[  849.912265][T17270]  loop8: unable to read partition table
[  849.944634][T17270] loop8: partition table beyond EOD, truncated
[  849.955680][T16357] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input84
[  849.968492][T17270] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  849.990135][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.019120][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.034204][T16357] dvb-usb: schedule remote query interval to 250 msecs.
[  850.057587][T16357] dw2102: su3000_power_ctrl: 0, initialized 1
[  850.095034][T16357] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  850.164951][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  850.208572][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  850.297494][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  850.304177][    T9] dw2102: i2c transfer failed.
[  850.327416][T17277] netlink: 'syz.0.3054': attribute type 72 has an invalid length.
[  850.365011][T17277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3054'.
[  850.376990][ T8048] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  850.384308][T16357] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  850.414491][ T5863] usb 4-1: USB disconnect, device number 42
[  850.426483][ T8048] zl10353_read_register: readreg error (reg=127, ret==-110)
[  850.534124][T16357] usb 5-1: Using ep0 maxpacket: 32
[  850.545574][T16357] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  850.617077][T16357] usb 5-1: config 0 has no interface number 0
[  850.669104][T16357] usb 5-1: config 0 interface 89 has no altsetting 0
[  850.794612][T16357] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  850.803891][T17282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3056'.
[  850.813163][T16357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.813190][T16357] usb 5-1: Product: syz
[  850.813205][T16357] usb 5-1: Manufacturer: syz
[  850.813218][T16357] usb 5-1: SerialNumber: syz
[  850.837692][T15011] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  850.838871][T16357] usb 5-1: config 0 descriptor??
[  850.854350][T16357] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  850.878025][T16357] em28xx 5-1:0.89: Video interface 89 found: bulk
[  851.029009][T15011] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  851.044291][T15011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.076596][T15011] usb 2-1: Product: syz
[  851.090744][T15011] usb 2-1: Manufacturer: syz
[  851.101030][T15011] usb 2-1: SerialNumber: syz
[  851.120405][T15011] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  851.140769][ T8048] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  851.149933][ T8526] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  851.322827][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  851.335192][ T8526] usb 1-1: Using ep0 maxpacket: 16
[  851.349819][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  851.357338][ T8526] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  851.377161][ T8526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  851.388304][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  851.396281][ T8526] usb 1-1: config 0 has no interface number 0
[  851.403615][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  851.416280][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  851.445398][ T8526] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  851.494084][T17287] ptrace attach of "./syz-executor exec"[17196] was attempted by "./syz-executor exec"[17287]
[  851.524311][ T8526] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.676147][T16357] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  851.712415][T17287] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  851.759054][ T8526] usb 1-1: Product: syz
[  851.769258][ T8526] usb 1-1: Manufacturer: syz
[  851.782576][T17287] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  851.794643][T16357] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  851.802744][T16357] em28xx 5-1:0.89: board has no eeprom
[  851.808468][ T8526] usb 1-1: SerialNumber: syz
[  851.906335][T17284] usb 7-1: USB disconnect, device number 59
[  851.917646][ T5868] Bluetooth: hci2: command tx timeout
[  851.924154][ T5863] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  851.968527][T17287] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  851.987179][ T8526] usb 1-1: config 0 descriptor??
[  852.016058][ T8526] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22
[  852.164562][T16357] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  852.248460][ T8048] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  852.264971][T16357] em28xx 5-1:0.89: analog set to bulk mode.
[  852.265058][ T8048] ath9k_htc: Failed to initialize the device
[  852.304264][   T10] em28xx 5-1:0.89: Registering V4L2 extension
[  852.393257][T16357] usb 5-1: USB disconnect, device number 28
[  852.457952][T17309] [U] .��h��0F�wZ,��i�qg���ҏV2��sO��
[  852.470344][T17309] [U] ���`w*��B�BOLhU�
[  852.471571][    T9] usb 1-1: USB disconnect, device number 44
[  852.474879][T17309] [U] w$�n�|��#��%o.z\��̧mР��w
[  852.507139][ T8048] usb 2-1: ath9k_htc: USB layer deinitialized
[  852.512470][T16357] em28xx 5-1:0.89: Disconnecting em28xx
[  852.614277][T17309] [U] ���R{ꫢ� S���
[  852.623723][   T10] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  852.647858][   T10] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  852.674596][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3059'.
[  852.720574][   T10] em28xx 5-1:0.89: No AC97 audio processor
[  852.736383][T17312] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  852.782769][   T10] usb 5-1: Decoder not found
[  852.789406][   T10] em28xx 5-1:0.89: failed to create media graph
[  852.805468][   T10] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  852.822292][   T10] em28xx 5-1:0.89: Registering snapshot button...
[  852.920782][   T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input85
[  853.045243][T17318] loop8: detected capacity change from 0 to 8
[  853.065471][ T5919] Dev loop8: unable to read RDB block 8
[  853.078847][ T5919]  loop8: unable to read partition table
[  853.093741][   T10] em28xx 5-1:0.89: Remote control support is not available for this card.
[  853.093869][ T5919] loop8: partition table beyond EOD, 
[  853.131794][T16357] em28xx 5-1:0.89: Closing input extension
[  853.138112][ T5919] truncated
[  853.166905][T16357] em28xx 5-1:0.89: Deregistering snapshot button
[  853.179347][T17318] Dev loop8: unable to read RDB block 8
[  853.186148][T17310] [U] 
[  853.252021][T17318]  loop8: unable to read partition table
[  853.262685][T16357] em28xx 5-1:0.89: Freeing device
[  853.434583][ T6926] udevd[6926]: setting mode of /dev/bus/usb/005/028 to 020664 failed: No such file or directory
[  853.444516][T17318] loop8: partition table beyond EOD, truncated
[  853.454374][T17318] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  853.504469][ T6926] udevd[6926]: setting owner of /dev/bus/usb/005/028 to uid=0, gid=0 failed: No such file or directory
[  853.576686][ T5868] Bluetooth: hci0: command tx timeout
[  853.599967][T17321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3063'.
[  853.871163][T17326] netlink: 'syz.0.3064': attribute type 2 has an invalid length.
[  853.929508][T17326] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3064'.
[  854.044316][T17284] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  854.185069][T16357] usb 2-1: USB disconnect, device number 19
[  854.265184][T17331] netlink: 'syz.4.3065': attribute type 72 has an invalid length.
[  854.273027][T17331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3065'.
[  854.354249][ T8048] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  854.445815][T17340] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3067'.
[  854.546374][ T1016] bond3 (unregistering): (slave ip6erspan0): Releasing active interface
[  855.654308][ T5868] Bluetooth: hci0: command tx timeout
[  855.925980][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  856.058392][ T1016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  856.068361][ T1016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  856.078934][ T1016] bond0 (unregistering): (slave team0): Releasing backup interface
[  856.088975][ T1016] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  856.094714][   T10] usb 2-1: Using ep0 maxpacket: 16
[  856.106189][ T1016] bond0 (unregistering): Released all slaves
[  856.283776][ T1016] bond1 (unregistering): Released all slaves
[  856.462478][ T1016] bond2 (unregistering): left promiscuous mode
[  856.469748][ T1016] team0: Port device bond2 removed
[  856.476367][ T1016] bond2 (unregistering): Released all slaves
[  856.656611][ T1016] bond3 (unregistering): Released all slaves
[  856.833140][ T1016] bond4 (unregistering): left promiscuous mode
[  856.841039][ T1016] team0: Port device bond4 removed
[  856.848032][ T1016] bond4 (unregistering): Released all slaves
[  857.028799][ T1016] bond5 (unregistering): left promiscuous mode
[  857.037701][ T1016] team0: Port device bond5 removed
[  857.044558][ T1016] bond5 (unregistering): Released all slaves
[  857.221785][ T1016] bond6 (unregistering): left promiscuous mode
[  857.231311][ T1016] team0: Port device bond6 removed
[  857.238455][ T1016] bond6 (unregistering): Released all slaves
[  857.436018][ T1016] bond7 (unregistering): (slave bond8): Releasing backup interface
[  857.444765][ T1016] bond8 (unregistering): left promiscuous mode
[  857.450974][ T1016] bond8 (unregistering): left allmulticast mode
[  857.457982][ T1016] bond7 (unregistering): Released all slaves
[  857.643207][ T1016] bond8 (unregistering): Released all slaves
[  857.660320][T17345] IPVS: Unknown mcast interface: dvmrp0
[  857.707898][T17291] chnl_net:caif_netlink_parms(): no params data found
[  857.735432][ T5868] Bluetooth: hci0: command tx timeout
[  857.905520][ T1016] : left promiscuous mode
[  858.133015][T17375] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  858.144404][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3072'.
[  858.615311][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3074'.
[  858.677208][T17385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3074'.
[  858.844688][T17380] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3073'.
[  859.089823][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  859.139339][T17389] loop8: detected capacity change from 0 to 8
[  859.194256][T17284] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[  859.243464][   T10] usb 2-1: no configurations
[  859.292496][T17389] Dev loop8: unable to read RDB block 8
[  859.304829][   T10] usb 2-1: can't read configurations, error -22
[  859.424109][T17389]  loop8: unable to read partition table
[  859.430054][T17389] loop8: partition table beyond EOD, truncated
[  859.436410][T17389] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  859.758459][T17291] bridge0: port 1(bridge_slave_0) entered blocking state
[  859.808695][T17291] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.816227][ T5868] Bluetooth: hci0: command tx timeout
[  859.826620][T17291] bridge_slave_0: entered allmulticast mode
[  859.893376][T17291] bridge_slave_0: entered promiscuous mode
[  860.034166][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  860.072593][T17291] bridge0: port 2(bridge_slave_1) entered blocking state
[  860.115957][T17291] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.157072][T17291] bridge_slave_1: entered allmulticast mode
[  860.179929][T17291] bridge_slave_1: entered promiscuous mode
[  860.194316][   T10] usb 2-1: Using ep0 maxpacket: 8
[  860.204595][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  860.232964][   T10] usb 2-1: config 4 has an invalid interface number: 30 but max is 0
[  860.272497][   T10] usb 2-1: config 4 has no interface number 0
[  860.302083][   T10] usb 2-1: config 4 interface 30 has no altsetting 0
[  860.330889][   T10] usb 2-1: string descriptor 0 read error: -22
[  860.543626][T17403] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  860.602017][   T10] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  860.644162][ T5922] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  860.708871][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.824473][ T5922] usb 1-1: Using ep0 maxpacket: 16
[  860.906044][   T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  860.955666][   T10] dw2102: su3000_power_ctrl: 1, initialized 0
[  860.967549][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  861.032876][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  861.079247][   T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  861.095620][   T10] usb 2-1: media controller created
[  861.102321][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  861.109573][   T10] dw2102: i2c transfer failed.
[  861.114790][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  861.120639][   T10] dw2102: i2c transfer failed.
[  861.125790][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  861.131648][   T10] dw2102: i2c transfer failed.
[  861.281633][ T1016] hsr_slave_0: left promiscuous mode
[  861.327885][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  861.350360][ T1016] hsr_slave_1: left promiscuous mode
[  861.371675][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_0
[  861.443371][   T10] dw2102: i2c transfer failed.
[  861.455317][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_1
[  861.482250][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  861.509967][   T10] dw2102: i2c transfer failed.
[  861.538184][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  861.558661][   T10] dw2102: i2c transfer failed.
[  861.610336][   T10] dvb-usb: MAC address: 02:02:02:02:02:02
[  861.721240][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  861.754474][ T1016] pim6reg (unregistering): left allmulticast mode
[  861.907561][T17413] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3079'.
[  861.938786][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  861.958510][   T10] dw2102: command 0x0e transfer failed.
[  861.968268][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  861.977068][   T10] dw2102: command 0x0e transfer failed.
[  862.397816][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  862.419912][   T10] dw2102: command 0x0e transfer failed.
[  862.577441][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  862.599778][   T10] dw2102: command 0x0e transfer failed.
[  862.618268][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  862.648484][   T10] dw2102: command 0x51 transfer failed.
[  862.667303][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  862.828801][T17284] usb 7-1: unable to get BOS descriptor or descriptor too short
[  862.867948][T17284] usb 7-1: unable to read config index 0 descriptor/start: -71
[  862.913605][T17284] usb 7-1: can't read configurations, error -71
[  862.997718][   T10] dw2102: i2c probe for address 0x68 failed.
[  863.095996][T17424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3081'.
[  863.116853][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  863.162534][   T10] dw2102: i2c probe for address 0x69 failed.
[  863.217092][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  863.237996][   T10] dw2102: i2c probe for address 0x6a failed.
[  863.268985][   T10] dw2102: probing for demodulator failed. Is the external power switched on?
[  863.313761][   T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  863.474151][   T10] rc_core: IR keymap rc-tt-1500 not found
[  863.487569][   T10] Registered IR keymap rc-empty
[  863.503691][   T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  863.564243][T17284] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[  863.582763][   T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input87
[  863.626410][   T10] dvb-usb: schedule remote query interval to 250 msecs.
[  863.655482][   T10] dw2102: su3000_power_ctrl: 0, initialized 1
[  863.665131][   T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  863.679628][   T10] usb 2-1: USB disconnect, device number 21
[  863.724224][T17284] usb 7-1: Using ep0 maxpacket: 16
[  863.750330][T17284] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  863.779103][   T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  863.841142][T17284] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  863.858880][T17284] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  863.903095][T17284] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  863.913515][T17284] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.966823][T17284] usb 7-1: config 0 descriptor??
[  864.038804][ T1016] team_slave_1 (unregistering): left promiscuous mode
[  864.049171][ T1016] team0 (unregistering): Port device team_slave_1 removed
[  864.120289][ T1016] team_slave_0 (unregistering): left promiscuous mode
[  864.130864][ T1016] team0 (unregistering): Port device team_slave_0 removed
[  864.182247][T17284] hid_parser_main: 33 callbacks suppressed
[  864.182268][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.195693][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.202945][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.210340][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.564086][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.574155][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.581417][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.601191][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.614149][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.621413][T17284] microsoft 0003:045E:07DA.001D: unknown main item tag 0x3
[  864.700467][T17284] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.001D/input/input88
[  864.788184][T17284] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  864.838178][T17284] usb 7-1: USB disconnect, device number 61
[  864.992895][T17440] fido_id[17440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  865.178217][T17291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  865.230258][T17291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  865.277448][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short
[  865.324170][ T5922] usb 1-1: unable to read config index 0 descriptor/start: -71
[  865.337422][T17284] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  865.347863][ T5922] usb 1-1: can't read configurations, error -71
[  865.435748][T17291] team0: Port device team_slave_0 added
[  865.453099][T17291] team0: Port device team_slave_1 added
[  865.529969][T17284] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  865.546557][T17284] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  865.580059][T17284] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  865.599449][T17284] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  865.611782][T17284] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  865.625530][T17284] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  865.639202][T17291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  865.674694][T17284] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  865.684974][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  865.693417][T17284] usb 7-1: Product: syz
[  865.713306][T17284] usb 7-1: Manufacturer: syz
[  865.735366][T17284] cdc_wdm 7-1:1.0: skipping garbage
[  865.749165][T17284] cdc_wdm 7-1:1.0: skipping garbage
[  865.762307][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.790159][T17284] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  865.808482][T17284] cdc_wdm 7-1:1.0: Unknown control protocol
[  866.145169][    T9] usb 2-1: Using ep0 maxpacket: 32
[  866.153282][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  866.163876][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  866.187881][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  866.197603][T17291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  866.208461][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.222777][    T9] usb 2-1: Product: syz
[  866.236662][    T9] usb 2-1: Manufacturer: syz
[  866.264913][T17291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  866.265743][T17284] usb 7-1: USB disconnect, device number 62
[  866.271881][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  866.314544][    T9] usb 2-1: SerialNumber: syz
[  866.325395][T17291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  866.341031][    T9] usb 2-1: config 0 descriptor??
[  866.371995][ T1016] IPVS: stop unused estimator thread 0...
[  866.754350][ T5863] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  866.771413][T17291] hsr_slave_0: entered promiscuous mode
[  866.827168][T17291] hsr_slave_1: entered promiscuous mode
[  866.914198][ T5863] usb 1-1: Using ep0 maxpacket: 32
[  866.933495][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  866.950731][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  866.986121][ T5863] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  867.020506][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.024199][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  867.070828][ T5863] usb 1-1: config 0 descriptor??
[  867.305674][ T5863] usbhid 1-1:0.0: can't add hid device: -32
[  867.371804][ T5863] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  867.378057][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3091'.
[  867.411898][T17471] netlink: 'syz.6.3090': attribute type 5 has an invalid length.
[  867.435236][T17471] bridge0: port 3(macsec0) entered blocking state
[  867.443754][T17471] bridge0: port 3(macsec0) entered disabled state
[  867.458213][T17471] macsec0: entered allmulticast mode
[  867.463716][T17471] veth1_macvtap: entered allmulticast mode
[  867.497944][T17471] macsec0: entered promiscuous mode
[  867.508963][T17471] bridge0: port 3(macsec0) entered blocking state
[  867.516191][T17471] bridge0: port 3(macsec0) entered forwarding state
[  867.581914][T17470] bridge0: entered promiscuous mode
[  867.644429][T17470] macsec1: entered allmulticast mode
[  867.664093][T17470] bridge0: entered allmulticast mode
[  867.674506][T17470] bridge0: port 3(macsec1) entered blocking state
[  867.804235][T17470] bridge0: port 3(macsec1) entered disabled state
[  867.866630][T17470] bridge0: left allmulticast mode
[  867.871936][T17470] bridge0: left promiscuous mode
[  868.022882][ T5922] usb 1-1: USB disconnect, device number 47
[  868.422292][T17491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3096'.
[  868.544267][ T5922] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[  868.704387][ T5922] usb 7-1: Using ep0 maxpacket: 16
[  868.714123][ T5922] usb 7-1: config 0 has an invalid interface number: 115 but max is 0
[  868.725891][ T5922] usb 7-1: config 0 has no interface number 0
[  868.750299][ T5922] usb 7-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  868.802573][ T5922] usb 7-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping
[  869.020717][T17291] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  869.036850][ T5922] usb 7-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f
[  869.046327][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.054180][ T5863] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  869.055325][ T5922] usb 7-1: Product: syz
[  869.099083][ T5922] usb 7-1: Manufacturer: syz
[  869.103842][ T5922] usb 7-1: SerialNumber: syz
[  869.114459][T17291] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  869.136372][T17291] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  869.145453][ T5922] usb 7-1: config 0 descriptor??
[  869.252836][ T8048] usb 2-1: USB disconnect, device number 22
[  869.264118][ T5863] usb 1-1: Using ep0 maxpacket: 16
[  869.371889][T17291] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  869.377436][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  869.464313][T16357] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  869.512106][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  869.569885][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  869.612562][ T5863] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  869.665635][T17486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  869.676021][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.712007][T16357] usb 5-1: config 8 has an invalid interface number: 53 but max is 1
[  869.730289][ T5863] usb 1-1: config 0 descriptor??
[  869.851046][T16357] usb 5-1: config 8 has an invalid interface number: 158 but max is 1
[  869.948138][T16357] usb 5-1: config 8 has no interface number 0
[  869.993752][T16357] usb 5-1: config 8 has no interface number 1
[  870.057317][T16357] usb 5-1: config 8 interface 53 altsetting 5 endpoint 0xD has an invalid bInterval 129, changing to 7
[  870.180468][T16357] usb 5-1: config 8 interface 53 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  870.220373][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  870.229095][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  870.256337][T17291] 8021q: adding VLAN 0 to HW filter on device bond0
[  870.329662][T17291] 8021q: adding VLAN 0 to HW filter on device team0
[  870.481755][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.488919][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  870.552406][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.559593][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  870.608904][T16357] usb 5-1: config 8 interface 158 altsetting 7 endpoint 0x4 has invalid maxpacket 1552, setting to 64
[  870.774653][T16357] usb 5-1: config 8 interface 53 has no altsetting 0
[  870.820210][T17291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.828898][T16357] usb 5-1: config 8 interface 158 has no altsetting 0
[  870.908369][T17291] veth0_vlan: entered promiscuous mode
[  870.964705][T16357] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff4b, bcdDevice=df.95
[  870.981817][T16357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.001247][T16357] usb 5-1: Product: syz
[  871.010527][T16357] usb 5-1: Manufacturer: ᪰⿇鄓舀뎥蹂ëＢ덞頉艫嫂ɞ쾀१䄆똗嘻
[  871.035997][T16357] usb 5-1: SerialNumber: syz
[  871.083366][T17291] veth1_vlan: entered promiscuous mode
[  871.180612][T17291] veth0_macvtap: entered promiscuous mode
[  871.198590][T17291] veth1_macvtap: entered promiscuous mode
[  871.235071][    T9] usb 7-1: USB disconnect, device number 63
[  871.508619][T17291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  871.657989][T17291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  871.697800][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  871.729811][ T1113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  871.761243][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  871.789644][ T1113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  871.823862][T17534] loop8: detected capacity change from 0 to 8
[  871.835740][T17534] Dev loop8: unable to read RDB block 8
[  871.854441][T17534]  loop8: unable to read partition table
[  871.883455][T17534] loop8: partition table beyond EOD, truncated
[  871.950783][T17534] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  872.020273][T12114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  872.083582][T12114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  872.213074][ T5863] usbhid 1-1:0.0: can't add hid device: -71
[  872.221434][ T5863] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  872.280991][ T5863] usb 1-1: USB disconnect, device number 48
[  872.364729][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  872.410076][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  872.441668][T17543] fuse: Bad value for 'user_id'
[  872.469663][T17543] fuse: Bad value for 'user_id'
[  872.703424][T16357] option 5-1:8.53: GSM modem (1-port) converter detected
[  872.743086][T17549] tipc: Can't bind to reserved service type 1
[  872.813342][T16357] usb 5-1: USB disconnect, device number 29
[  872.867561][T17559] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3106'.
[  872.869768][T16357] option 5-1:8.53: device disconnected
[  873.334207][ T5922] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  873.566760][ T5922] usb 4-1: Using ep0 maxpacket: 16
[  873.754111][   T10] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[  874.084328][   T10] usb 7-1: Using ep0 maxpacket: 16
[  874.179944][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  874.244048][   T10] usb 7-1: config 0 has no interfaces?
[  874.308523][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  874.328954][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.356242][   T10] usb 7-1: config 0 descriptor??
[  874.721365][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.731097][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  874.761676][T17586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.771759][T17586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.008923][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  875.021516][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  875.034192][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  875.063417][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  875.073594][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  875.395197][T17602] input: syz1 as /devices/virtual/input/input89
[  875.959005][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short
[  875.978415][ T5922] usb 4-1: unable to read config index 0 descriptor/start: -71
[  875.998742][ T5922] usb 4-1: can't read configurations, error -71
[  876.241524][T17609] input: syz1 as /devices/virtual/input/input90
[  876.512392][T17613] loop8: detected capacity change from 0 to 8
[  876.562443][ T6926] Dev loop8: unable to read RDB block 8
[  876.598423][ T6926]  loop8: unable to read partition table
[  876.610299][ T6926] loop8: partition table beyond EOD, truncated
[  876.637381][T17613] Dev loop8: unable to read RDB block 8
[  876.731118][T17613]  loop8: unable to read partition table
[  876.754580][T17613] loop8: partition table beyond EOD, truncated
[  876.794209][T17613] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  877.184215][ T5872] Bluetooth: hci3: command tx timeout
[  877.193104][    T9] usb 7-1: USB disconnect, device number 64
[  877.486316][T17596] chnl_net:caif_netlink_parms(): no params data found
[  877.514337][ T5922] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  877.603266][T17636] fuse: Unknown parameter ''
[  877.779017][ T5922] usb 5-1: config 8 has an invalid interface number: 53 but max is 1
[  877.798280][ T5922] usb 5-1: config 8 has an invalid interface number: 158 but max is 1
[  877.844084][ T5922] usb 5-1: config 8 has no interface number 0
[  877.850212][ T5922] usb 5-1: config 8 has no interface number 1
[  877.922480][ T5922] usb 5-1: config 8 interface 53 altsetting 5 endpoint 0xD has an invalid bInterval 129, changing to 7
[  878.010866][ T5922] usb 5-1: config 8 interface 53 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  878.041029][   T36] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  878.084453][ T5922] usb 5-1: config 8 interface 158 altsetting 7 endpoint 0x4 has invalid maxpacket 1552, setting to 64
[  878.153464][   T36] team0: Port device netdevsim0 removed
[  878.159953][ T5922] usb 5-1: config 8 interface 53 has no altsetting 0
[  878.424513][ T5922] usb 5-1: config 8 interface 158 has no altsetting 0
[  878.623052][ T5922] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff4b, bcdDevice=df.95
[  878.634255][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.722880][ T5922] usb 5-1: Product: syz
[  878.908115][ T5922] usb 5-1: Manufacturer: ᪰⿇鄓舀뎥蹂ëＢ덞頉艫嫂ɞ쾀१䄆똗嘻
[  878.918527][ T5922] usb 5-1: SerialNumber: syz
[  879.093404][T17596] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.103552][T17596] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.130929][T17596] bridge_slave_0: entered allmulticast mode
[  879.166322][T17596] bridge_slave_0: entered promiscuous mode
[  879.245327][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3120'.
[  879.254932][T17655] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  879.262593][T17655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  879.273755][ T5872] Bluetooth: hci3: command tx timeout
[  879.291922][T17596] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.321954][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3122'.
[  879.346698][T17656] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3122'.
[  879.369764][T17596] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.382359][T17596] bridge_slave_1: entered allmulticast mode
[  879.405652][T17596] bridge_slave_1: entered promiscuous mode
[  879.424208][T17653] vlan0: entered promiscuous mode
[  879.430451][T17653] vlan0: entered allmulticast mode
[  879.439632][T17655] trusted_key: encrypted_key: insufficient parameters specified
[  879.527519][T17653] veth0_vlan: entered allmulticast mode
[  879.922422][T17596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.100081][T17596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  880.260064][T17596] team0: Port device team_slave_0 added
[  880.817221][T17596] team0: Port device team_slave_1 added
[  880.873417][   T36] bridge_slave_1: left allmulticast mode
[  880.904200][   T36] bridge_slave_1: left promiscuous mode
[  880.911261][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.944144][ T5863] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[  880.981930][ T5922] option 5-1:8.53: GSM modem (1-port) converter detected
[  881.124065][ T5863] usb 7-1: device descriptor read/64, error -71
[  881.127812][   T36] bridge_slave_0: left allmulticast mode
[  881.263500][   T36] bridge_slave_0: left promiscuous mode
[  881.263694][ T5922] usb 5-1: USB disconnect, device number 30
[  881.282127][ T5922] option 5-1:8.53: device disconnected
[  881.282271][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.340340][ T5872] Bluetooth: hci3: command tx timeout
[  881.411864][ T5863] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[  881.554114][ T5863] usb 7-1: device descriptor read/64, error -71
[  881.565833][   T36] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  881.697503][ T5863] usb usb7-port1: attempt power cycle
[  881.744135][ T5922] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  881.984376][ T5922] usb 5-1: Using ep0 maxpacket: 32
[  882.052548][T16357] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  882.122997][ T5922] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  882.136689][ T5863] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[  882.175098][T17684] usb usb8: usbfs: process 17684 (syz.1.3130) did not claim interface 0 before use
[  882.216945][ T5863] usb 7-1: device descriptor read/8, error -71
[  882.239701][T16357] usb 4-1: Using ep0 maxpacket: 16
[  882.253733][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.263647][ T5922] usb 5-1: Product: syz
[  882.270682][T16357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  882.288607][T16357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  882.302909][ T5922] usb 5-1: Manufacturer: syz
[  882.337600][ T5922] usb 5-1: SerialNumber: syz
[  882.357765][T16357] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  882.399756][ T5922] usb 5-1: config 0 descriptor??
[  882.432136][ T5922] gspca_main: sunplus-2.14.0 probing 055f:c230
[  882.440562][T16357] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  882.454202][T16357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.464918][ T5863] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[  882.473428][T16357] usb 4-1: config 0 descriptor??
[  882.490658][ T5863] usb 7-1: device descriptor read/8, error -71
[  882.625788][ T5863] usb usb7-port1: unable to enumerate USB device
[  882.732628][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  882.771312][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  882.846148][   T36] bond0 (unregistering): (slave veth3): Releasing backup interface
[  882.865545][   T36] bond0 (unregistering): Released all slaves
[  883.142783][T17689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  883.195174][T17689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  883.410168][   T36] bond1 (unregistering): Released all slaves
[  883.424646][ T5872] Bluetooth: hci3: command tx timeout
[  883.511688][T17284] usb 5-1: USB disconnect, device number 31
[  883.758494][   T36] bond2 (unregistering): Released all slaves
[  884.026505][   T36] bond3 (unregistering): left promiscuous mode
[  884.043304][   T36] team0: Port device bond3 removed
[  884.051860][   T36] bond3 (unregistering): Released all slaves
[  884.287235][   T36] bond4 (unregistering): left promiscuous mode
[  884.298652][   T36] team0: Port device bond4 removed
[  884.310479][   T36] bond4 (unregistering): Released all slaves
[  884.521522][   T36] bond5 (unregistering): left promiscuous mode
[  884.530161][   T36] team0: Port device bond5 removed
[  884.538061][   T36] bond5 (unregistering): Released all slaves
[  884.749691][T16357] usbhid 4-1:0.0: can't add hid device: -71
[  884.756109][T16357] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  884.787611][T16357] usb 4-1: USB disconnect, device number 45
[  884.801153][   T36] bond6 (unregistering): Released all slaves
[  885.071325][   T36] bond7 (unregistering): Released all slaves
[  885.342700][   T36] bond8 (unregistering): Released all slaves
[  885.474107][T16357] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  885.552579][   T36] bond9 (unregistering): left promiscuous mode
[  885.561855][   T36] team0: Port device bond9 removed
[  885.568342][   T36] bond9 (unregistering): Released all slaves
[  885.684642][T16357] usb 4-1: config 8 has an invalid interface number: 53 but max is 1
[  885.692782][T16357] usb 4-1: config 8 has an invalid interface number: 158 but max is 1
[  885.701532][T16357] usb 4-1: config 8 has no interface number 0
[  885.707972][T16357] usb 4-1: config 8 has no interface number 1
[  885.727246][T16357] usb 4-1: config 8 interface 53 altsetting 5 endpoint 0xD has an invalid bInterval 129, changing to 7
[  885.751162][T16357] usb 4-1: config 8 interface 53 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  885.776862][T16357] usb 4-1: config 8 interface 158 altsetting 7 endpoint 0x4 has invalid maxpacket 1552, setting to 64
[  885.789124][T16357] usb 4-1: config 8 interface 53 has no altsetting 0
[  885.819547][T16357] usb 4-1: config 8 interface 158 has no altsetting 0
[  885.872118][T16357] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff4b, bcdDevice=df.95
[  885.872679][   T36] bond10 (unregistering): left promiscuous mode
[  885.881421][T16357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.881446][T16357] usb 4-1: Product: syz
[  885.881459][T16357] usb 4-1: Manufacturer: ᪰⿇鄓舀뎥蹂ëＢ덞頉艫嫂ɞ쾀१䄆똗嘻
[  885.881474][T16357] usb 4-1: SerialNumber: syz
[  885.927740][   T36] team0: Port device bond10 removed
[  885.940536][   T36] bond10 (unregistering): Released all slaves
[  885.960312][   T36] bond11 (unregistering): Released all slaves
[  886.217952][   T36] bond12 (unregistering): left promiscuous mode
[  886.226051][   T36] team0: Port device bond12 removed
[  886.233613][   T36] bond12 (unregistering): Released all slaves
[  886.439058][   T36] bond13 (unregistering): left promiscuous mode
[  886.446549][   T36] team0: Port device bond13 removed
[  886.453306][   T36] bond13 (unregistering): Released all slaves
[  886.670758][   T36] bond14 (unregistering): left promiscuous mode
[  886.678524][   T36] team0: Port device bond14 removed
[  886.685809][   T36] bond14 (unregistering): Released all slaves
[  886.888951][   T36] bond15 (unregistering): left promiscuous mode
[  886.897370][   T36] team0: Port device bond15 removed
[  886.903847][   T36] bond15 (unregistering): Released all slaves
[  887.091730][   T36] bond16 (unregistering): left promiscuous mode
[  887.100433][   T36] team0: Port device bond16 removed
[  887.107377][   T36] bond16 (unregistering): Released all slaves
[  887.301687][   T36] bond17 (unregistering): left promiscuous mode
[  887.309478][   T36] team0: Port device bond17 removed
[  887.317245][   T36] bond17 (unregistering): Released all slaves
[  887.351217][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3131'.
[  887.422890][T17702] syzkaller0: entered promiscuous mode
[  887.436762][T17702] syzkaller0: entered allmulticast mode
[  887.484367][T17596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  887.491348][T17596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  887.560668][T17596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  887.660163][T17596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  887.842113][T17596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  888.019846][T17596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  888.054286][    T9] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[  888.194647][    T9] usb 7-1: device descriptor read/64, error -71
[  888.506882][ T8524] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  888.515504][    T9] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[  888.680144][T16357] option 4-1:8.53: GSM modem (1-port) converter detected
[  888.706151][    T9] usb 7-1: device descriptor read/64, error -71
[  888.734064][ T8524] usb 2-1: Using ep0 maxpacket: 8
[  888.740278][T16357] usb 4-1: USB disconnect, device number 46
[  888.754339][ T8524] usb 2-1: unable to get BOS descriptor or descriptor too short
[  888.799798][ T8524] usb 2-1: config 4 has an invalid interface number: 30 but max is 0
[  888.808377][T16357] option 4-1:8.53: device disconnected
[  888.834718][    T9] usb usb7-port1: attempt power cycle
[  888.856114][ T8524] usb 2-1: config 4 has no interface number 0
[  888.862253][ T8524] usb 2-1: config 4 interface 30 has no altsetting 0
[  888.921955][ T8524] usb 2-1: string descriptor 0 read error: -22
[  888.929024][ T8524] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  888.958853][ T8524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.996289][ T8524] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  889.019506][T17596] hsr_slave_0: entered promiscuous mode
[  889.034837][ T8524] dw2102: su3000_power_ctrl: 1, initialized 0
[  889.077327][T17596] hsr_slave_1: entered promiscuous mode
[  889.082742][ T8524] dvb-usb: bulk message failed: -22 (2/0)
[  889.099435][T17596] debugfs: 'hsr0' already exists in 'hsr'
[  889.130726][ T8524] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  889.157324][ T8524] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  889.160510][T17596] Cannot create hsr debugfs directory
[  889.184466][ T8524] usb 2-1: media controller created
[  889.198636][T17724] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI
[  889.210558][T17724] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[  889.218971][T17724] CPU: 0 UID: 0 PID: 17724 Comm: syz.1.3137 Not tainted syzkaller #0 PREEMPT(full) 
[  889.228349][T17724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  889.238417][T17724] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040
[  889.244478][T17724] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 8d 1b 3c fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42
[  889.264110][T17724] RSP: 0018:ffffc9000b477aa8 EFLAGS: 00010202
[  889.270181][T17724] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003
[  889.278142][T17724] RDX: ffffffff87e70f35 RSI: ffffffff8f0d52f0 RDI: 0000000000001900
[  889.286118][T17724] RBP: 0000000000000000 R08: ffff888020aa8000 R09: 0000000000000002
[  889.294087][T17724] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000
[  889.302056][T17724] R13: 1ffff1100b0bfe90 R14: 0000000000000003 R15: ffff8880585ff488
[  889.310034][T17724] FS:  00007f28ff3b46c0(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000
[  889.318977][T17724] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  889.325557][T17724] CR2: 000000110c364c35 CR3: 0000000032090000 CR4: 00000000003526f0
[  889.333525][T17724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144
[  889.341574][T17724] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  889.349569][T17724] Call Trace:
[  889.352842][T17724]  <TASK>
[  889.355769][T17724]  __i2c_transfer+0x871/0x2170
[  889.360527][T17724]  ? lockdep_hardirqs_on+0x9c/0x150
[  889.365730][T17724]  ? __pfx___i2c_transfer+0x10/0x10
[  889.370932][T17724]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  889.376307][T17724]  ? i2c_transfer+0x120/0x3a0
[  889.380996][T17724]  i2c_transfer+0x25b/0x3a0
[  889.385688][T17724]  ? __pfx_i2c_transfer+0x10/0x10
[  889.390761][T17724]  ? _copy_from_user+0x94/0xb0
[  889.395530][T17724]  i2cdev_ioctl_rdwr+0x460/0x740
[  889.400466][T17724]  i2cdev_ioctl+0x64b/0x7f0
[  889.404955][T17724]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  889.409967][T17724]  ? __fget_files+0x3a0/0x420
[  889.414636][T17724]  ? __fget_files+0x2a/0x420
[  889.419212][T17724]  ? bpf_lsm_file_ioctl+0x9/0x20
[  889.424137][T17724]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  889.429234][T17724]  __se_sys_ioctl+0xfc/0x170
[  889.433814][T17724]  do_syscall_64+0xfa/0x3b0
[  889.438314][T17724]  ? lockdep_hardirqs_on+0x9c/0x150
[  889.443496][T17724]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.449547][T17724]  ? clear_bhb_loop+0x60/0xb0
[  889.454214][T17724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  889.460091][T17724] RIP: 0033:0x7f28fe58ec29
[  889.464497][T17724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  889.484095][T17724] RSP: 002b:00007f28ff3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  889.492502][T17724] RAX: ffffffffffffffda RBX: 00007f28fe7d5fa0 RCX: 00007f28fe58ec29
[  889.500550][T17724] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000004
[  889.508509][T17724] RBP: 00007f28fe611e41 R08: 0000000000000000 R09: 0000000000000000
[  889.516466][T17724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  889.524424][T17724] R13: 00007f28fe7d6038 R14: 00007f28fe7d5fa0 R15: 00007f28fe8ffa28
[  889.532386][T17724]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  889.535408][T17724] Modules linked in:
[  889.540312][T17724] ---[ end trace 0000000000000000 ]---
[  889.574278][    T9] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[  889.582074][T17724] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040
[  889.621272][T17724] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 8d 1b 3c fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42
[  889.746965][   T36] hsr_slave_0: left promiscuous mode
[  889.773162][T17724] RSP: 0018:ffffc9000b477aa8 EFLAGS: 00010202
[  889.780528][   T36] hsr_slave_1: left promiscuous mode
[  889.814304][T17724] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003
[  889.834068][T17724] RDX: ffffffff87e70f35 RSI: ffffffff8f0d52f0 RDI: 0000000000001900
[  889.939489][T17724] RBP: 0000000000000000 R08: ffff888020aa8000 R09: 0000000000000002
[  889.994317][T17724] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000
[  890.005843][T17724] R13: 1ffff1100b0bfe90 R14: 0000000000000003 R15: ffff8880585ff488
[  890.013903][T17724] FS:  00007f28ff3b46c0(0000) GS:ffff888125c13000(0000) knlGS:0000000000000000
[  890.124037][T17724] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  890.130695][T17724] CR2: 00002000003ec030 CR3: 0000000032090000 CR4: 00000000003526f0
[  890.173271][   T36] pim6reg (unregistering): left allmulticast mode
[  890.246805][T17724] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144
[  890.304020][T17724] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  890.312074][T17724] Kernel panic - not syncing: Fatal exception
[  890.318406][T17724] Kernel Offset: disabled
[  890.322716][T17724] Rebooting in 86400 seconds..