last executing test programs:

6m41.198844174s ago: executing program 2 (id=583):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="fd3c34f687297c63c2ed81541b2fd0069ede3384d1510b67743c89856f53debfa70efe58c40fd9abc83bc715b9be5195951dc6e0ed6eac84eae8d2e170f3323d23605374391161394bf4f403f29fc05a3a17115bc2947ed04963c6e316d1cd73754bdb55632d2afd86d2aeee8b6eeecf280acbcfeaa282", 0x77}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0)
recvmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1}, 0x10102)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@delchain={0x43c, 0x65, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0x9}, {0xf, 0x8}, {0x0, 0xd}}, [@f_rsvp={{0x9}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0xb, 0x5, 0xf, 0xdb20, 0xb, 0xfffffff9, 0x854, 0x9, 0x2, 0x6, 0x7f55, 0x1, 0x1, 0x7, 0x6, 0x200, 0x6, 0x9, 0xffffffff, 0x1, 0x0, 0x8, 0x9, 0x7, 0x7ff, 0x9, 0x26b, 0x92, 0x2, 0x5, 0x101, 0x73c, 0x4, 0x4, 0x7ff, 0x1, 0x1ff, 0x80, 0x7, 0x6, 0x4, 0x6, 0x3, 0x4, 0x20000, 0x7, 0xf, 0x10001, 0x5, 0xc, 0xfffff001, 0x96, 0x3, 0x1, 0x4, 0x0, 0x621751b5, 0xbd99, 0x5, 0x81, 0x1, 0x2, 0x5, 0xb, 0xfff, 0x3, 0x9, 0xfffffffe, 0x3, 0x8001, 0x1, 0x2, 0x7, 0x8, 0xfffffff9, 0x5, 0xd, 0x2, 0x1000, 0x10001, 0x503, 0x4, 0x2, 0xfff, 0x30, 0x9, 0x4, 0x200, 0x4, 0x3, 0x2, 0x1, 0x6, 0xc0b8, 0x80000001, 0x8, 0x6, 0x4, 0x6, 0x2, 0x7, 0x3, 0xe2e, 0xd, 0x0, 0x80000000, 0x2ab, 0x16, 0x6, 0x3, 0x2, 0x4, 0x4, 0x3, 0x5, 0x9, 0x0, 0xffff, 0x9, 0x7, 0x5, 0x8001, 0x2, 0x4, 0x8, 0x81, 0x9, 0x0, 0x7fff, 0x2, 0x8, 0x4, 0x6, 0x7, 0x10001, 0x5, 0xb0f, 0x3, 0x7, 0x6, 0xfffffffd, 0x2, 0x7f, 0x9, 0x4, 0x7fff, 0x0, 0x2, 0x3, 0x2, 0x0, 0x5, 0x2, 0x42, 0x7ff, 0x7, 0x4, 0x2, 0x3, 0x5dd, 0xb3, 0x9, 0x182e6149, 0x72e, 0x8, 0x1, 0x0, 0x2, 0x4, 0x2, 0xffff8000, 0x2, 0xffff0001, 0x2, 0xe517, 0x2, 0x40, 0x7, 0x7, 0x200, 0x8, 0x4, 0xffffa81d, 0x81, 0x9b, 0xfffffffa, 0x1000, 0x9, 0xfffffff7, 0x6, 0xd05b, 0xfffffff9, 0x636, 0x14, 0xff, 0x7, 0x1000, 0x80000000, 0x5, 0x8914, 0x8355, 0x6, 0x1, 0x10000, 0x0, 0x1, 0x5, 0x4, 0x10000000, 0xf, 0xfff, 0x3, 0x401, 0x8001, 0x2, 0x7, 0x9, 0x7, 0x3ff, 0x7fff, 0x5, 0x72197875, 0x3, 0x100, 0x9, 0x2, 0x4, 0xf, 0x2, 0xb2b1, 0x3ff, 0x1, 0x10, 0x1ff, 0x2, 0x3, 0x0, 0x139, 0x8, 0x4c2, 0xfe3c, 0xfffffffd, 0x7, 0xc, 0x2, 0x8000, 0x400, 0x4442, 0x8, 0xfffffffe, 0x10001, 0x1, 0xe4c4, 0x137, 0x200]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
fsetxattr$security_capability(r6, &(0x7f0000000280), 0x0, 0x0, 0x0)
r7 = open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x4)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2})
open$dir(&(0x7f0000000040)='./file0\x00', 0x81, 0x28)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000000)=0x10014, 0x4)
ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000440)={0x1, 0x200, 0x4, 0x10, 0xfffffffc, 0x94})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0xa26b1a4fb20b8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

6m41.007884696s ago: executing program 2 (id=584):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
read$FUSE(r0, &(0x7f0000001980)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18}, 0x18)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, r5, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, r6, r7, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0)
getdents64(r3, &(0x7f0000000280)=""/73, 0x49)
r8 = geteuid()
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x101c, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r1, @ANYBLOB="2c67726fdea74e8b643d", @ANYRESDEC=r7, @ANYBLOB=',blksize=0x0000000000000600,default_permissions,euid>', @ANYRESDEC=r8, @ANYBLOB="2c736d61636b66736861743d647b7bd42c00", @ANYRES16=r8])
clock_settime(0xfffffffb, &(0x7f0000000140))
r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x6703)
ioctl$I2C_RDWR(r9, 0x707, &(0x7f00000015c0)={&(0x7f0000001580)=[{0x1, 0x4200, 0x0, 0x0}, {0x1ff, 0xa800, 0x0, 0x0}], 0x2})

6m40.247799484s ago: executing program 2 (id=589):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r2, 0x0)
listen(r1, 0x0)
read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020)

6m39.912042768s ago: executing program 2 (id=591):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000200), 0x3, 0x143e42)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x10, 0x7, 0x0, 0x0, 0x14, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000001000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac193400", "f4bd0000008019000e000000000000f400", [0x6, 0x2000000000001]}})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000001c0)=0xffffbf7f)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, &(0x7f0000000300)=[@cpuid={0x14, 0x18, {0x2}}, @cpuid={0x14, 0x18, {0x7, 0x1}}, @uexit={0x0, 0x18, 0xfffffffffffffff8}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x14, 0x18, {0x4, 0xbb5}}, @wr_crn={0x46, 0x20, {0x8, 0x10001}}, @uexit={0x0, 0x18, 0x2}, @wrmsr={0x1e, 0x20, {0xbc3, 0x1}}, @cpuid={0x14, 0x18, {0x4, 0x5}}, @code={0xa, 0x48, {"0f22a165440f00da470f2046660f388008430f225266470f38176bc5b9c20d00000f32b9800000c00f3235001000000f300f01c3470f07"}}], 0x130})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r5, 0x5420, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ptrace(0x10, r3)
ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0)
connect$bt_l2cap(r2, 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000050000000000000005000000040000000800000000000000020000000000000076dcffffffffffff030000000000000000000000000000000000000000000000042600000000000000000000000000000000000000000000070000000000000007000000000000000000000000000000000000000000000085100000000000000000000000000000ffffffffffffffff00000000000000000200000000000000000000000000000000000000000000000800000000000000000000000000000009000000000000000100000000000000090000000000000000000000000000000000000000000000000a000000000000000000000000000001000000000000000700000000000000070000000000000000000000000000000000000000000000000200000000000000000000000000000200000000000000020000000000000004000000000000000000000000000000000000000000000009030000000000000000000000000000a9030000000000007000000000002471934d2e100000230600000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000010000000000000000000000000000000000000000000000000000000000000001000000000000000000"])
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0)
setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f00000004c0)=0x2, 0x4)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="bfc03b3ff6c7b989ef732d34bcbc0102030109021b00017705200109046d0201f32d160b091dc6fae64e55fb308fd1a3b262ab62d45b82cb359388929831b8c1f254015eac2c7d589d3d9dd518aa692e0192dfec116a88758b876094abfa870c14e07f4b0ea8152d88d49329f07ada0785021043bddd84b6d013d0f11f79b8e11b2d46b75c58f7526ed34f3089712ad17f74063b306e4c19ff84e790ae72f89056328800d6115b09821020fdedd1e0655090af2abcc8d61981165531ffc38d1f5c70ca9318"], &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0})

6m39.0802342s ago: executing program 2 (id=595):
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x200000000000000)

6m38.784221681s ago: executing program 2 (id=596):
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0x1000, 0xeeef0000, 0xdddd0000, 0xb000], 0xdb, 0xc})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x7f, 0x1, 0xf, '\x00', 0x3})
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000540)=[@rdmsr={0x32, 0x18, {0xa50}}, @cpuid={0x14, 0x18, {0x2, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @rdmsr={0x32, 0x18, {0x1b2}}, @wr_crn={0x46, 0x20, {0x2, 0x4}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x14, 0x18, {0x7, 0x3}}, @wrmsr={0x1e, 0x20, {0xa97, 0x7}}, @rdmsr={0x32, 0x18, {0x90c}}, @uexit={0x0, 0x18, 0xa}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x1000}, @code={0xa, 0x65, {"66ba420066edc423d948fc00f31bcd6466440f3880520166ba4200ecc744240000000100c744240200000000c7442406000000000f0114248f0978c7cd66baf80cb8288d2f84ef66bafc0ced2e410f22d30f01c5"}}, @uexit={0x0, 0x18, 0xbd}, @code={0xa, 0x6d, {"48b8cdaa639353386a400f23d00f21f835300000010f23f8440f01c53e0f79731f66baa100b00aee470f01c8410fae96cc2f00003e0fc729c4836502da74c4c2c9979c130800000066baf80cb858b73280ef66bafc0cb8b62d0000ef"}}, @wrmsr={0x1e, 0x20, {0x210, 0x2}}, @wr_crn={0x46, 0x20, {0x1, 0x2}}, @code={0xa, 0x62, {"3647802900b9d00a00000f32260f01ca3636642e440fd59d050000001500980000440f01c42e66470f38800a48b802000000000000000f23d00f21f8353000000e0f23f866b89e000f00d0363ef20f01f1"}}, @cpuid={0x14, 0x18, {0x9, 0xfffffff8}}, @rdmsr={0x32, 0x18, {0xd90}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffff91ea}}, @cpuid={0x14, 0x18, {0x9, 0xd4fa}}, @wrmsr={0x1e, 0x20, {0x257, 0x1}}, @wrmsr={0x1e, 0x20, {0xa8b}}, @code={0xa, 0x54, {"3e400f01c28f08608e6f0df02e470f1514bd0000000036f3460f8a090000004a0fc79a49ef8bec66bad10466ed650fc730b8010000000f01d90f01cac4a3b57c75f900"}}, @uexit={0x0, 0x18, 0x10}, @uexit={0x0, 0x18, 0x3}], 0x408})
ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000001500))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
io_pgetevents(0x0, 0x80055, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"])
r2 = openat$kvm(0xffffff9c, &(0x7f0000000400), 0x80801, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000500)={0x34, r6, 0x205, 0x800000, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x78}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000"])
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000440)})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
getpeername(r5, &(0x7f00000002c0)=@generic, &(0x7f0000000180)=0x80)

6m38.542924225s ago: executing program 32 (id=596):
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0x1000, 0xeeef0000, 0xdddd0000, 0xb000], 0xdb, 0xc})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@arm64={0x7f, 0x1, 0xf, '\x00', 0x3})
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000540)=[@rdmsr={0x32, 0x18, {0xa50}}, @cpuid={0x14, 0x18, {0x2, 0x6}}, @wr_crn={0x46, 0x20, {0x0, 0x2}}, @rdmsr={0x32, 0x18, {0x1b2}}, @wr_crn={0x46, 0x20, {0x2, 0x4}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x14, 0x18, {0x7, 0x3}}, @wrmsr={0x1e, 0x20, {0xa97, 0x7}}, @rdmsr={0x32, 0x18, {0x90c}}, @uexit={0x0, 0x18, 0xa}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x1000}, @code={0xa, 0x65, {"66ba420066edc423d948fc00f31bcd6466440f3880520166ba4200ecc744240000000100c744240200000000c7442406000000000f0114248f0978c7cd66baf80cb8288d2f84ef66bafc0ced2e410f22d30f01c5"}}, @uexit={0x0, 0x18, 0xbd}, @code={0xa, 0x6d, {"48b8cdaa639353386a400f23d00f21f835300000010f23f8440f01c53e0f79731f66baa100b00aee470f01c8410fae96cc2f00003e0fc729c4836502da74c4c2c9979c130800000066baf80cb858b73280ef66bafc0cb8b62d0000ef"}}, @wrmsr={0x1e, 0x20, {0x210, 0x2}}, @wr_crn={0x46, 0x20, {0x1, 0x2}}, @code={0xa, 0x62, {"3647802900b9d00a00000f32260f01ca3636642e440fd59d050000001500980000440f01c42e66470f38800a48b802000000000000000f23d00f21f8353000000e0f23f866b89e000f00d0363ef20f01f1"}}, @cpuid={0x14, 0x18, {0x9, 0xfffffff8}}, @rdmsr={0x32, 0x18, {0xd90}}, @wr_crn={0x46, 0x20, {0x3, 0xffffffffffff91ea}}, @cpuid={0x14, 0x18, {0x9, 0xd4fa}}, @wrmsr={0x1e, 0x20, {0x257, 0x1}}, @wrmsr={0x1e, 0x20, {0xa8b}}, @code={0xa, 0x54, {"3e400f01c28f08608e6f0df02e470f1514bd0000000036f3460f8a090000004a0fc79a49ef8bec66bad10466ed650fc730b8010000000f01d90f01cac4a3b57c75f900"}}, @uexit={0x0, 0x18, 0x10}, @uexit={0x0, 0x18, 0x3}], 0x408})
ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000001500))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
io_pgetevents(0x0, 0x80055, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"])
r2 = openat$kvm(0xffffff9c, &(0x7f0000000400), 0x80801, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000500)={0x34, r6, 0x205, 0x800000, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x78}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008040}, 0x48810)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000"])
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000440)})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
getpeername(r5, &(0x7f00000002c0)=@generic, &(0x7f0000000180)=0x80)

4m54.192150279s ago: executing program 3 (id=1173):
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc003, 0x83, 0x5, 0x0, 0x0, 0x3, 0xd, 0xb9, 0x2, 0xe, 0x5, 0x204}, {0x41, 0x1, 0x4, 0x45, 0x0, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x80, 0x3, 0x18, 0x5, 0x80, 0x4, 0xff, 0x2, 0xec, 0x70, 0x4, 0x5, 0xfffffffffffff612}], 0x3})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7ffffffffffff, 0x400000005, 0x0, 0xb, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x131182})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
socket(0x29, 0x6, 0x80000014)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$radio(0x0, 0x0, 0x2)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)={0x0, 0x28, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, 0xffffffffffffffff, 0x57789000)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x20, r1, 0x0, 0x0)
ptrace$cont(0x1f, r1, 0xf07, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x8000000000000001, 0x2)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))

4m52.599350304s ago: executing program 3 (id=1179):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002", @ANYRES32=r0, @ANYRES64=r0], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0)
lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x73, 0x53, ""/83}, &(0x7f00000000c0)=0x73, 0x1)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308000000"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
lsm_get_self_attr(0x66, &(0x7f0000000200)={0x0, 0x0, 0xfd, 0xdd, ""/221}, &(0x7f0000000180)=0xfd, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0600be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0x0, 0x0)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000140)='g')
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x8)
syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0107030109022400020000000009046f0000aad823000904"], 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0xffffffff, 0x3, 0x900}})
openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20400}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m50.620254243s ago: executing program 3 (id=1187):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1)
pivot_root(0x0, 0x0)

4m47.952044014s ago: executing program 3 (id=1197):
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, 0x0)
close(r1)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x274, &(0x7f0000000280)={[{0x80, 0x4e00, "d542bdc1dafaf359527ff1935521dbd58f4308784e8de7c0e6163b308253f303d44932299956e05eaecb9912b39f0da1fa5f8b18942e1486894331839c3835aa028603f25ec2a0894eb325590ed49ed9a758e32432ad7e98c1e43c1f1ff1aac8468ec09a7b601172bc598635e9e4cb65cbbb561d675c2677a891d0546aff7011"}, {0xf8, 0x4e00, "35b6569a7cbe913a79322512944cdc73aae543d5a79bb9ad0f1e6ac7c558c38b843de09b038cfcb2f1f8623fc608447d125aebcd98f0a5e069119df5cb2d960e24aa78760f2042cb382a32913e1673da23127e06865da0f43dc95b3be39f50d3513d64cd845b7e735ce29fe548034c54f85dc4ed37de04d533825312b44fe15858fd9dcd0ff4b4e9031fdf83702b2a705a30114169d52759737f89fd5023d8a3a09f4107b5c1912496410d14e5d08e61e623c5b7931665e2db934c6eccd2ccab9783782642b3cb210c45d098aefd3e8716641f220d7d84120e51660843288619eb3764a302e6b2790df0d47ee7579a41e310cb2d1d035347"}, {}, {0xea, 0x4e00, "0d23baf0cf2a3998c2d6559b9344e1ccf71580998cced11ecf8d3c8cd62c35f262c1c6521ec64818abf841ab6aaa3fe787ebda8b15e788ff5ba4c5070e23dbbea9070efc5cb68ce12a2e2e1942c1f560beb1fa3d154281c9a1a43ba96aabb1f77acde3fd1b19f70000d6a11c39c240d9cea04c3b4592ec3e67f4a73f8eb6921c641fddaad74214bbe2bc9a683b864d42cd29df554a17dc1c3c8e5826cf3d85a01754b32cafda9494b58280bf66ade98c75160ee9573000d319adb665a24f821c0e5f7ca44efefee50bfb21c9bc31b56aae4f7308a23eb1d093e44c429bba513e19833ffb48f05f127c60"}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x0, 0x3, 0x3c, {0x3c, 0x24, "18d168a7bb1ab3aa5d87b77165e4b1857ea11ce910faeb7512fe4ac687255cc0bb2b5efb2093f68574b06a54c8136481d2c5f654d2c7e05fc444"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000640)={0x20, 0x11, 0x33, "9589b325d40e2fab06ffa57a0f3fc4644703ed8ff278f0e2e4068c5bb966e80069b26df1e262626e6797ad9264c86f17fc0a4f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m46.533705328s ago: executing program 3 (id=1203):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc0100000000000000000000000000000a010100"/46, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a0001070000000000000000480003006465666c61"], 0x144}}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="56022dbd7000dbdf252100000009001f0070687931000000000a0001007770616e30000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4m44.932062329s ago: executing program 3 (id=1214):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$dri(0x0, 0x1, 0x2100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r7=>0x0})
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r7}, 0xc)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r7}, 0xc)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
write(r1, &(0x7f0000000000)="ed", 0x1)
readv(r2, &(0x7f0000000600)=[{0x0, 0x59}], 0x10000000000003cd)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000001080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1020)

4m29.818790591s ago: executing program 33 (id=1214):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000100))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$dri(0x0, 0x1, 0x2100)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r7=>0x0})
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r7}, 0xc)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, r7}, 0xc)
write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
write(r1, &(0x7f0000000000)="ed", 0x1)
readv(r2, &(0x7f0000000600)=[{0x0, 0x59}], 0x10000000000003cd)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
write$UHID_INPUT(r9, &(0x7f0000001080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1020)

2m44.688729015s ago: executing program 0 (id=2044):
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r3, 0x0, 0x0)
readahead(r0, 0x5, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000040))
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r8)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000de90ca84d2d6cd0e6ec99055145c54d5bdcd459f6cb32b37992a883f523e8a5f28ab248afe977c4d3c2753c6df2adee80d3ef619595961ec7ae460f6509285d0585da7bd59f31a031f630200d1f00a4a9c65cff3a53ba05b4ebd0078b31dd427fe60090fd04cc688c2551e5538a3956c6648712bcfbfbd38a5d79c057e7f7b51ed686605cec3", @ANYRES16=r9, @ANYBLOB="0500000000000000000022000000"], 0x14}}, 0x4000000)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2m43.827977382s ago: executing program 0 (id=2046):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a31000000000800054000000004"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

2m43.570590568s ago: executing program 0 (id=2049):
ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000140)={0x2, 0x6})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r1, 0xc004510e)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000340)={{0x3, 0x0, 0x80, {0x5000, 0x100000, 0x3}}, "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", "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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r5 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = userfaultfd(0x1)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004011}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xd42}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x24040880}, 0x0)
ioctl$UFFDIO_WRITEPROTECT(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r10 = fcntl$dupfd(r8, 0x0, r8)
ioctl$UFFDIO_CONTINUE(r10, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_CAP_PMU_CAPABILITY(r10, 0x4068aea3, &(0x7f00000023c0)={0xd4, 0x0, 0xfffffffffffffffe})

2m40.159142053s ago: executing program 0 (id=2060):
mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='binder\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000206010200000000006000000000000005000500000000000900020073797a3100000000100003006269746d61703a706f72740014000780080008400000004406000400000000000500010007000000050004"], 0x5c}}, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
r2 = socket(0xa, 0x2400000001, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x1, 0x3, @mcast2, 0x10000000}}}, 0x88)
getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000000080)=0x90)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000040))
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000002740)={'mpc624\x00', [0x4f27, 0x6, 0x2, 0x3, 0x5, 0xcc5, 0xf, 0x6, 0xa, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x1, 0x0, 0x0, 0x0, 0x1a449, 0x3ff, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x1003c, 0xd0, 0x2, 0x1, 0xfce]})

2m39.823560623s ago: executing program 0 (id=2062):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000796000/0x4000)=nil, 0x4000}, 0x1})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xf)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0xb0)
writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @loopback}})
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r5, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x0, 0x2)
r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r7, &(0x7f0000000840)=ANY=[], 0xffdd)
flock(r6, 0x1)
flock(r6, 0x2)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil})
ioctl$SNDCTL_TMR_METRONOME(r6, 0x40045407)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, 0x0)

2m39.451991152s ago: executing program 0 (id=2064):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x138}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd})
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008e02"])
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x5}, @cpuid={0x14, 0x18, {0x9, 0x1}}, @wr_crn={0x46, 0x20, {0x4, 0x5}}, @cpuid={0x14, 0x18, {0xeb4, 0x3}}, @wr_crn={0x46, 0x20, {0x8, 0x800}}, @code={0xa, 0x5f, {"450f08c421e172f7093e6645debbf77f00008f297c804b00c441fbf0ba0000c0fe6747d03866baf80cb8661a6186ef66bafc0cecc4a155ec3626440f01cf66baf80cb860ddb780ef66bafc0c66ed"}}, @cpuid={0x14, 0x18, {0xb5f0, 0x8}}, @cpuid={0x14, 0x18, {0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x5}}, @rdmsr={0x32, 0x18, {0x85b}}, @rdmsr={0x32, 0x18, {0x9fc}}], 0x167})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r5=>r0, 0x8, 0x534, 0xa787})
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$NBD_SET_TIMEOUT(r7, 0x127b, 0x0)
getsockopt$netlink(r6, 0x10e, 0xb, 0x0, &(0x7f0000000040))
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)

2m23.821116046s ago: executing program 34 (id=2064):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x138}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd})
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x29)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008e02"])
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000180)=[@uexit={0x0, 0x18, 0x5}, @cpuid={0x14, 0x18, {0x9, 0x1}}, @wr_crn={0x46, 0x20, {0x4, 0x5}}, @cpuid={0x14, 0x18, {0xeb4, 0x3}}, @wr_crn={0x46, 0x20, {0x8, 0x800}}, @code={0xa, 0x5f, {"450f08c421e172f7093e6645debbf77f00008f297c804b00c441fbf0ba0000c0fe6747d03866baf80cb8661a6186ef66bafc0cecc4a155ec3626440f01cf66baf80cb860ddb780ef66bafc0c66ed"}}, @cpuid={0x14, 0x18, {0xb5f0, 0x8}}, @cpuid={0x14, 0x18, {0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x5}}, @rdmsr={0x32, 0x18, {0x85b}}, @rdmsr={0x32, 0x18, {0x9fc}}], 0x167})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r5=>r0, 0x8, 0x534, 0xa787})
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$NBD_SET_TIMEOUT(r7, 0x127b, 0x0)
getsockopt$netlink(r6, 0x10e, 0xb, 0x0, &(0x7f0000000040))
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0)

2m17.64815313s ago: executing program 4 (id=2146):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180008ac0f", @ANYRESDEC=r0], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180008ac0f", @ANYRESDEC=r0], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2m17.530788899s ago: executing program 4 (id=2148):
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000240)={[{0x5, 0xc003, 0x83, 0x5, 0x0, 0x0, 0x3, 0xd, 0xb9, 0x2, 0xe, 0x5, 0x204}, {0x41, 0x1, 0x4, 0x45, 0x0, 0xff, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x80, 0x3, 0x18, 0x5, 0x80, 0x4, 0xff, 0x2, 0xec, 0x70, 0x4, 0x5, 0xfffffffffffff612}], 0x3})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7ffffffffffff, 0x400000005, 0x0, 0xb, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x131182})
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)={0x0, 0x28, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
ptrace$cont(0x1f, 0x0, 0xf07, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x8000000000000001, 0x2)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))

2m16.889426259s ago: executing program 4 (id=2150):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

2m16.62527024s ago: executing program 4 (id=2151):
madvise(&(0x7f0000382000/0x1000)=nil, 0x1000, 0x1)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xc)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000040)="008d7acda0", 0x0, 0x0, 0x0, 0x0, 0x0})
mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380)

2m16.468108756s ago: executing program 4 (id=2152):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa80002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000ff02"])

2m16.235712233s ago: executing program 4 (id=2153):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c1f02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000180905810300020000000904010000020d000009040101"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000a00020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x4, &(0x7f0000000440)=[{0x0, 0x0, 0xd, 0x9}, {0x9, 0x1, 0x8, 0x7}, {0x1, 0x0, 0x8, 0x7}, {0x8, 0xd, 0x4, 0x2}]})
syz_emit_vhci(&(0x7f0000000900)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x4, 0xa8, {0xa8, 0xb, "bb5511a6736fb92f01840676c7508b686371e75a8d6ba9a1df434c6e3729d48e2a4a8f44ebc96186478acbcd262dd2728f09023d0e9b79fb00259b1de8780e483683e149b7e093e003ec22ce878995c696ec6d4b962b1c5112663b6d09395ef845b5d46ac7027d4a96c3007194b2a231e9a2982dfd49d4b8625f501cb71e45927cc16ce6e74c5171ac425647a659862f504dec876bfeff52d4b0eacbba4d0e1d421cca86788a"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="4000a900000086af81c3893aaa769790abeecd904622f8d9c44681e1cef0f37de0417aab8d305b9c094fb45e1bf38bf91c5222a06020fa6a5100bb2de89c3e6ba98d4a1709cdb64cddf5294820fc8cf2dccf8e0a12d88974c6ea3a0c015ef1327b776a63fe5920e2b5923294967688809b3c338ff401f7b5b432f8977613cb34d6320d29d1e82a9e74ff562fc1ce0117d8f5bcd8134f1ca2519fe25edf53b6f052076779e58ec2868e13bafe8b6888"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0xfff}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "0223103e91c280fed9f05b7a9ea6d2a5c287d0820193fb8c6d5e04fecc7b7ded0c1b316a97c63c29865b2409b67ce8"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xa, 0xb, 0x2, 0xe6f0, 0x6, 0xac4a, 0xc, 0x4, 0xb, 0x2, 0x7ff, 0x6}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0xfeb95ef11164c478, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0x400}}, './file0\x00'})

2m15.910913714s ago: executing program 35 (id=2153):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c1f02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000180905810300020000000904010000020d000009040101"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000a00020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x4, &(0x7f0000000440)=[{0x0, 0x0, 0xd, 0x9}, {0x9, 0x1, 0x8, 0x7}, {0x1, 0x0, 0x8, 0x7}, {0x8, 0xd, 0x4, 0x2}]})
syz_emit_vhci(&(0x7f0000000900)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x0, 0x4, 0xa8, {0xa8, 0xb, "bb5511a6736fb92f01840676c7508b686371e75a8d6ba9a1df434c6e3729d48e2a4a8f44ebc96186478acbcd262dd2728f09023d0e9b79fb00259b1de8780e483683e149b7e093e003ec22ce878995c696ec6d4b962b1c5112663b6d09395ef845b5d46ac7027d4a96c3007194b2a231e9a2982dfd49d4b8625f501cb71e45927cc16ce6e74c5171ac425647a659862f504dec876bfeff52d4b0eacbba4d0e1d421cca86788a"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="4000a900000086af81c3893aaa769790abeecd904622f8d9c44681e1cef0f37de0417aab8d305b9c094fb45e1bf38bf91c5222a06020fa6a5100bb2de89c3e6ba98d4a1709cdb64cddf5294820fc8cf2dccf8e0a12d88974c6ea3a0c015ef1327b776a63fe5920e2b5923294967688809b3c338ff401f7b5b432f8977613cb34d6320d29d1e82a9e74ff562fc1ce0117d8f5bcd8134f1ca2519fe25edf53b6f052076779e58ec2868e13bafe8b6888"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0xfff}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "0223103e91c280fed9f05b7a9ea6d2a5c287d0820193fb8c6d5e04fecc7b7ded0c1b316a97c63c29865b2409b67ce8"}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0xa, 0xb, 0x2, 0xe6f0, 0x6, 0xac4a, 0xc, 0x4, 0xb, 0x2, 0x7ff, 0x6}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000040)={'sit0\x00', 0x0})
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0xfeb95ef11164c478, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2, {0x400}}, './file0\x00'})

6.07209108s ago: executing program 7 (id=2761):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r5 = socket(0x2, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={0xffffffffffffffff, r6, 0x0, 0xba, &(0x7f0000000140)="d1e9d7a39bf60650ddb7dd45e714ed74b105462e77b775500e99160ee6d03bcbad38719d351f17530e30421f175958687e057edaa9d4cf0e9de5ea731b2569b555b45e3a2d54de34c068f5adfcbc98b53b2f06bd2be2197469da0db7d4a0412883cb1f596dfd4a9e15efdd31373df8ea1bb8ee5adf2b3732d7298960386246c71a33dc115a6f5742ceaea61b283e91991ec03922a613d74d9bb583cab3bcfe2e59fe9379b2ca373ea3cffe05af78d1482869a85ad00fc7843a39", 0x5, 0x6, 0xdf, 0xccc7, 0x9, 0x1, 0x1, 'syz0\x00'})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x7, 0x3, 0x804, 0xb, 0xf, 0x800011fffc, 0x4000000000009, 0x0, 0xb35, 0x8000000000000083, 0x2, 0x0, 0x101, 0x3, 0x1], 0xffff1000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000080)=@x86={0x6, 0x5, 0x2, 0x0, 0x7, 0x5, 0x0, 0x9, 0x8, 0x5, 0x7, 0x9, 0x0, 0x5, 0xce02, 0xe7, 0x0, 0x7, 0x7, '\x00', 0x9, 0x8f})
ioctl$KVM_RUN(r7, 0xae80, 0x0)

5.127428039s ago: executing program 7 (id=2766):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0xfffff801, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x34b5, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0x1d8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_open_dev$radio(&(0x7f00000004c0), 0x2, 0x2)
ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000500)={0x2, "8ad11c74233261c07f5f0200238e7246938e5801cc3dcafe826eea7d3c137c03"})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050003"], 0x7c}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001140)={0x1d16, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x6, "40c72b29f95919"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002140)={r7, r8, "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", "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"})
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r11 = dup(r10)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3f2dd7e9ff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b997b530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

4.878778744s ago: executing program 1 (id=2768):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0xff)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x6, 0x7fffffffffffffff, 0x0, 0x0, 0x1, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200", [0x8]}})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

4.431418028s ago: executing program 7 (id=2771):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004", 0x37}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a1180015000600149b000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="44010000100001000000000800000000fc01000000000a010100"/45, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d"], 0x144}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'})
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe)
socket$can_bcm(0x1d, 0x2, 0x2)
r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregset(0x4205, r5, 0x201, &(0x7f0000000000)={0x0})
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05022dbd7000fcdbdf252100000009001f0070687931000400000a0013007770616e30000000193de4e016e35696a977a88ec3f5b024574e"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80))
signalfd4(r6, &(0x7f0000000000), 0x8, 0x800)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000640)="0f01c26526360fa54e0066b9180b00000f32baf80c66b8b4d7208666efbafc0c66ed660f3a407c2d46b8ff0e8ed80fc0fa660f38815900f20f0866b9800000c00f326635000800000f30", 0x4a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000440)={0x6, 0x8, 0x2, {0x9, @win={{0x3, 0xd, 0x3d, 0xd9e}, 0x3, 0x7, &(0x7f0000000540)={{0xb4, 0x81, 0x1, 0xffff4a01}, &(0x7f0000000400)={{0xb17, 0x99, 0x8001}, &(0x7f0000000380)={{0x8, 0x1, 0x5, 0x3}}}}, 0x2, &(0x7f0000000580)="60f8c0017a2448bb3455b263c9", 0x2}}, 0x1ff})

3.867859249s ago: executing program 1 (id=2774):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc4702, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
fcntl$dupfd(r0, 0x0, r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100a1201000"})
r2 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_cache\x00')
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ftruncate(r3, 0x81)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000001c0)=0x2, 0x4)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40080)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0xfffffffffffffeb6)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r5, 0x1}, 0x8)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '%-}/%/^*%\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4)

3.752215881s ago: executing program 7 (id=2775):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)={0x0, 0x28, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
ptrace$cont(0x1f, 0x0, 0xf07, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x8000000000000001, 0x2)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))

3.661845806s ago: executing program 1 (id=2777):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.552828841s ago: executing program 1 (id=2778):
ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000140)={0x2, 0x6})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"])
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0xd, [{{0x9, 0x4, 0x0, 0x57, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3, 0x9, 0x75}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x5, 0x2}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xf8, 0x4, 0x0, 0xff, 0x7}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x89, 0x0, 0x80, 0xf927, 0x1}]}, 0x4, [{0xe1, &(0x7f0000000180)=@string={0xe1, 0x3, "d6e9189d97a2914c9403d13c56ef536c0754ff73839b5d2e6fb82944731fd95a265f6b26967c1b61c5833957078806a8e3faf5d0bdf66505108dc0190685f09a902289b08e4ad38faf9fcedf19dd6fa115f6b9769b3258a37f94005b2fc8d6bed7fc976e2554ce3db3d4c0af4cde624ab5eb8ebf9abf9ec34d5d11b2e064bdaa7227582a1802750fed1e420852434e91d1a8951398a5fc520cb101bbfb130dcf4c744e51b5a342ced2a842c6a85be54b17e11bca333a139335a2cfbafcabf69a72458ce14a42ca2dbad750fd39541a5f4c60fb8a78422120658006af53244e"}}, {0xff, &(0x7f0000000340)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x430}}, {0xef, &(0x7f0000000440)=@string={0xef, 0x3, "41928d4fe0eed516f9f2f3bdf8a456dcfd2feaf254c00fa81449124db109b6a803119dcb147b2c9c98a47f404185cff7ff191f7e3d4d035e81506ac0d7179718181bfd7801c27ff960431a776f8543bf41a0acd897406d86776f91f4ab25479596c4a904d3e80ee659fb91c693d3c33eb114eccb6848e659742a93a9a295f6858eee8f3e6e4a909c2d270103325de0b2ff541914338388777c6d859cd154ebb2c9f6adcf0859d505a07196cbd5df208af358c994835849fe31109397f38047de90d6921c589b270eebd0140faf5c3371a4a863ac1991689c9a14835dc2daf5c0e4464faa069528f4697bdd1a0f"}}]})
syz_usb_control_io$printer(r4, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x40, 0xe, 0x47, {0x47, 0x9, "a6b030895916420a013370b8337c6a57de35fd8ea15cb03a4a654ba796ffc777fe1ec4d745d8a0d7f0c4de7d4c61453f5978be0e48c1afed712979eec20b6f40a747fc5273"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, &(0x7f0000000940)={0x34, &(0x7f00000006c0)={0x20, 0xa, 0xad, "dd77f2550d4de65529a5d395e033290330d4e6f64edd21fb0515e943af1af12afb09292744bf2075605b999514a370188bc91b8757de6c69cc5c3effb7cdc091c91d00bf0865c66a384c84d386405732f39e97c23bb5c688a4f4b4d6fa3722dcfa753df917e0f270a5a0c8db8c53a64280a932431699028c0d31a2af8bbaca7683f16993662c48009d1240c9cd3febb62a0dffd8ea96d923a688ea2b6e48650959bb027d1fef19836b2f74657b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xe}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000800)={0x20, 0x0, 0x8b, {0x89, "6e3e44d8ebec0d02ea6823b8e27b94341e4f85982bbcd3de01ada6a104510871e8811e5b93dd68de5ec503adf33bf784e88ce0f70e2cbeabac174f109c41be4e15bf4ef3937940567f546ec3bce2ee7b45997e009420f567ab19fbd155426b395f736b89ffcbe50f6e5c5f4809736b9419dac8429222414242372238e055f9d92f1be09ecf885d2703"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0x5}})
syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_usb_ep_write(r3, 0x81, 0x55, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b337")

2.795068171s ago: executing program 5 (id=2781):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]})
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x47425247}})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170900000000000000000100000008000900ffffffff06000000ffff070000000000060002000100000008000a0004000000"], 0x3c}}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x1, 0x2, 0xd104c})

2.629921101s ago: executing program 5 (id=2783):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x800000000000000)

2.525309295s ago: executing program 5 (id=2784):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100376dff110e8048968dd930102030109021200016abfd0060904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1400000013000100000000000000000007"], 0x14}], 0x1}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_io_uring_setup(0x275b, &(0x7f00000008c0)={0x0, 0x21d7, 0x40, 0x0, 0x2ad}, 0x0, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0))
read$dsp(r4, &(0x7f0000000300)=""/79, 0x4f)
ioctl$KVM_CAP_X2APIC_API(r3, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x3})
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000180)={0x5000, 0x6000, 0x2, 0x1, 0x75})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1b, &(0x7f0000000580)=0x2, 0x4)
syz_usb_connect$cdc_ncm(0x2, 0xa7, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x2, 0x1, 0xc, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "0730458f"}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x5bf, 0x2, 0xa000, 0x4}, {0x6, 0x24, 0x1a, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x3, 0x7, 0x0, 0x0, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x478c}, @network_terminal={0x7, 0x24, 0xa, 0x10, 0x5, 0x1, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x101, 0x86, 0x40}, @obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xb, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x80, 0x1}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0x9, 0x3, 0x8, 0x8, 0x9}, 0x35, &(0x7f0000000600)=ANY=[@ANYBLOB="050f3500040b1003020600094012000907100206bdff030a100302012304339ba5d4777d8402000114100a008200000000000900000000003fc0000035fc5a0e27d8d1edc92b95866db10458147ba48b56af92ebe2d86d98302007711775417efd5cdd536ea12838cdeb76d4d56b4162007973ac4d5f5915"], 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2009}}]})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0xe, 0x7a, {0x7a, 0x21, "356dea82c36dfbcdcc34c6a1d09297fc1e9fafc724150f8533e0497cfcac1607b7c3c64b6ddc603886d047d73419754c40a63f326f558353d012bb26dd970d1cea448a4c2fa4ded2087b91ba657ae943252f059bba47c012da8bf671439bb905f9ab0c9c63377ecfc76e69816afcaad41fee2d821a6afbbb"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x0, 0x13, 0xe5, "b353b44e71cafdc963ba7ee35e89f2c29ecee08fad24c0a7fc2beaccc6f1e86c35152304d128871088627cc991944e264b56c67e95b09ce4da03ea6891f88f07788935edd1e750ff0b242f9ea437d13cc93884175a5592ec68c7d32c6416344648586e183f849ce6d2bd3e5e08f2ae3550396fe0334272e92ebb14088d8bc65a1e9e3112a2475fc0a066f86ef0f1d241a773b5d48f78db0f5b31a9e46d9ae8509c19d9ea00c933d1e6b2f851ba2435391e9af8b45ef09e7fa7904144ca00d16e0991c3811ebb5a3761420c23d174a6b8c788a6209af82a75cbfcf8032c815ce526c18090c3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}})

981.466061ms ago: executing program 6 (id=2790):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]})
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x47425247}})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170900000000000000000100000008000900ffffffff06000000ffff070000000000060002000100000008000a0004000000"], 0x3c}}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x1, 0x2, 0xd104c})

838.897447ms ago: executing program 6 (id=2791):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000700)={'pcl730\x00', [0x8, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x2, 0x1, 0x0, 0x6, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x10, 0x395, 0x8000008b, 0xfffffffe, 0xb, 0xfffffff5, 0x4, 0x3, 0x4, 0x2f000000, 0x7, 0x2, 0xdffffffa]})

764.542445ms ago: executing program 5 (id=2792):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000000)=0xff)
socket$alg(0x26, 0x5, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x2000, {0x0, 0x0, 0x0, 0x6, 0x7fffffffffffffff, 0x0, 0x0, 0x1, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200", [0x8]}})

736.540232ms ago: executing program 6 (id=2793):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38)
r1 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x85)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f00000001c0))

619.6422ms ago: executing program 5 (id=2794):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc4702, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
fcntl$dupfd(r0, 0x0, r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100a1201000"})
r2 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rt_cache\x00')
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ftruncate(r3, 0x81)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000001c0)=0x2, 0x4)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40080)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0xfffffffffffffeb6)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r5, 0x1}, 0x8)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2adc0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_COMMENT={0xe, 0x1a, '%-}/%/^*%\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4)

491.404404ms ago: executing program 5 (id=2795):
r0 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x7f, 0x0, 0x3, [], [0x0, 0xfffffffc, 0x9], [0x0, 0x9, 0x2], [0xffffffffffffffff, 0x0, 0x7fff, 0xfffffffffffffffd]})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000140)={r2})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x8, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x5, {0x5, 0x23, "ff7dbd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

407.947063ms ago: executing program 1 (id=2796):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0xfffff801, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x34b5, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0x1d8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_open_dev$radio(&(0x7f00000004c0), 0x2, 0x2)
ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000500)={0x2, "8ad11c74233261c07f5f0200238e7246938e5801cc3dcafe826eea7d3c137c03"})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050003"], 0x7c}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001140)={0x1d16, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}], 0x6, "40c72b29f95919"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002140)={r7, r8, "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", "a4602d6895746476e05163a10f1e36854d79d73293fffc833d4f42a9e37d4c8c4331b40210ee40555c9b670a8cdff91dc1e3c2af98a6bb562bc19735ded1b77e65f0d164de99c39d20c3dd7d5d2e5119b9566dbeedab840c028cbcfa50361fd79beb9cff9d43b4c7bc38d678bf11a631475057b96564cd039427adefe3472e29c32cee978a6358774d0994bc0c14fb706c0bd7157183a006e2629460d650f34060ca4d106df1bb0fac01b1d3e06c11427b5c04ae257091e63507d2dfeff782a1707ca4aae7d6a9f87538465e9af92500e8190da867a61a4e9b89b4c809e812621c75c7bdd96ff768d456bd14156d74f2ae1b2593a320243fd9a7be13674d7ad7272a57b9aa134d6720b572f6f709cdaad6fa3251e04b23558bd44c81736231ff2ddb830278c61904cad0662284f5ddd9bb7d0fad0150b66c7f55f481de5666db43c22f351499923d1ae59fea393990af890f2e3124d25f09912c5107608f712d836b63374f235a427a124d9a1666b1e06f7d4604e34c23ac68f318bf92454dbffcdf3489e77675bb769087834ec88bb1b2127bf15788b07fc80a5144d9b6d53b6c8e8dc90655f12bee787ef316f76fb0fa8a5909b3a6d1c38c2066ed8e0254da4ecfca63a7e459f950aa021d1f4ef9af74a5aee5381550b922223570767bcb5817cb2e0439acf2b15e82389ea4ebd135526052ab6740d49ab1af1973c64d9541449673d9130dfa1da5acdc011ea06dd2b8e6718058e7bf74dc31df9ab4988c62c57d5d9aef8d09edc8e78ad5322a308d0b76a2d4a21a957c6072ad086bd1b8c4b7ec0591c5794e8d213da708a891ee7cdaa5c182e8afda44a4b99eb552f3d0340fb777c3a688493f5af5cd61269615bfa75b9ef6364ca79792bdbc311862f2f511247f56f223a17f48d0fea49e8b630fa3be8fcd30a2cda17c0dc566540646f1a28377598a1a26d042a687ae722bcf8e91d94d7a758a61f3b7aa72ce2a35cf0a9c968af74c676e8efb629926fe35339b2aa68930c775e7ed20fe9ae5654e78bcdb633c3849908c9dc3b7df428571ec3763eee09f87dab2d514f2e20eee982b31ffa071bf9c224f809c6282fae0d790119e4845984aa5f33024788cccf9a042de4e5d91585701e035ad228f7994d998747bd326c5400adba5767caf94bd458c4d02d2337b43998269d21d86c375dfc366e0dd80a8b2e9b82734df510f56236915a6315f6c963616faf916af96be209ea62f4208580fc9ddd514a77641c35795429a2a5d17bd50507168f8df4026f63bae7220d280a6a99021d53c51dcfa0566a6d1d3f3a466c2e0e8861bf7ff9fe5b5d000d0b59b2cea23b8fd94ade73ee45853faf4119c9ed0cddc0604458834db153f88e29b6d437014d78214212b6c4cf4307b5f2f71a63c305e7da881e8aef0002acf565493c0f90f55a814fbb9f85aac58c6f1b8e7f57805a04d92e6f9065e4826bb59a924666ee6dba1024f11fc35b1dee169acec7ca39e43db2695ac1af34fb683fc43c96da7bb0257e39305f55f31af3fa9d7607133bb3927af1b547f8f7adfad557e9abb18343418ec914c100b2107fd53b794b5ad075dd411e16fb0c4f521fc17b1b75355aaf22cd9b1632f4b8263238ddcf8e519b6a6bc9f7da96bf3e4a1b93cfe003152ccb1e415004a12dfbaf39b77b297f9f436b15e7d45fa6de981414c9355dc53410684a125d04af36f1ac48777935b2475297eadcaf5d37d54a3ffae99eb48e845675f99c2365deb27d0276307388e91e5ef5ca780b8c0b7cf5b97ee0b2c5f1374deac6c430ed6eef5e2a2ad47b0dfaee7ca52fb30c36ee4c8e83e32136c2d71566cbd4bc060102ed569e4bd4551f68bd4fde13e3a294e4630d1dc846b9973616491bf42760cfbfa92b02a1ac0348d59fa447eba37251877e197959e20495f3a2409d02c0abd0aecabc07a801e151bbd0b99d0979be67223a01cc05042eb0139a8dd2bd560dedb10f2a2437f8d7008b9348b5815bc52453dc7bffd364a531d02c0be2d236c333beef841e774edb8429ab4bc9fcf6ad9762ad5459ad01b206481b21c6b91b08c9c1dd6fe2873ac00eb13693c009a50bb8f6a9116490790d0a324014b3e26240cb92b13973e2a0cb0a89839b7cf5779035c5327d543473587df372106c499f85db3c51e762d6be2af9221f35c64c86342aebba4c5e27262e3ddc9d29fc7e6a91701533c1be33343b00afd3f3372c2904895ec4414f1c758b394679fab7ff66066959a3b614d3bb4dc40b092c30f68c35fbbecfabd7f816f54f5866950ed93b6f01d7224395d8756073ed83fc457621303c36835d17bd42a427b8aa3e73ad3e7ade3a7d57ffd29fc2f68a5d8ecb9526b0cf9ce5fa92640c356ddb07537e23ba9c248a46f77ffa70eaac451befae6dc3ec0b3ca69d8ee3df287745bcee8d48b60b6ea814bdd43ee87afd511880ff07d73203c6013f8fb3f25635441be5c68d94bb4ebdaedf53ad6e488b5bcdba807dda3cd77ad0fb4507b290de1fb64eb9be558c3153b0e1a71bbfacd81d46ed36542dff2cb9d465fc2c0c1bf02d32878fd8a99ae351ed6694c5a06bd0753f3514c92dc7d9555f63cca7c1e8b984f659ecd34f8ee33bdbd6b77f800e6447a56fc5200af201d65f5d350586713efb48f3f2f52769a4eb0ce9c6ac7324f03dc51bc4b1d5625d4e65b636b71f384799544fd1017c3243198d21a8ec12521cd5087852675fc35f31478b10468c27091cd36972e305f67078b7e8ac3e77450b0d8f5f4f11a60c139293c04151ff16ee4e95a8e27f09a49ad5e8ae4580c520d457ff49e807072d3da8b9e0b2d86da89e97eefb3e5515b4e302e03577888af2e1d88cc1671242c91f1b29aeb2c8429018b767a08cb7311debb70eef7283d336ca796b703ba05becfedeb81a9eb8cdb5e4e33f1d96416ce7b10a19c6ed26ec0acd26b0f28124e462919c7341f70dd2aa9e2099e3277709e95a8a8ec3567d72dc724d20735f6463855415a9200b3ad80e01d66811b964b5d63e53bdb233e3207fa35e310f30793952555f276b00ecdaa0f19d57b19a3f535587811013f96af21fd82b8c9b6bfa160591076acc3e1e675ba886dfc077b86db91d02e75c5ecb844022123904500f28f1a530148fe0c333b6ad71a28e287a80a7e345e639a8b6c26304724aeb2f13af35db1e33006b8824fce98e8672e72671d567aaf0a9b342ab5422ec16ba806515e541d90d829973cdf8dde92bfaf511ae67436612a99933b2eee52497060e50934c5a82548dc341bc5a7c7767f8c8f1bbca85139c8c597733cb16fd743e256d8360bdb239a97aef7d215ee90c878015e03310407bc6ef65465df65bdb1a50f1a3d1642b85d3db090e40fc289bda21a4e094e91507503bbad7a01b58b39e75d753d28002c9a9ee3fff109ce5d5b0e7ea141cb432c5bc30a148bb2630c27c8ac7f72cbad6f4dcbbbb43bba4de75796ebb78f9416cde224bbe2cdba34df6a4e072aa6f8f6c602c61e54cb34b7b062bf98768cddca229db3c53e823e4629d67400decedf6490c1cf0b7ff09fc58b21bec9b45f25f683fdbec8dda31c1e1f6d8da36e9c116af3610e04f79b471065599ad865b965e09c1a9b100b8c8f66d386b1cab2dc209d726540b884a913d8add898507f52e2233309a1e986290a27bb15fffd01ee9733ef45f64b71fc25305e8a2934b127663ade7a13205e25ef9dbba63a9c2eeff5e49ef2e8f32056f055e0c57c1921f9f98730af867ae3fc8ca57a8c78a8d91df73913f96190970bc935a6659efd2cf04dca9c9b6d0ca4acc475de856e5dc4ca5b93784ccca035be6dbb013f9e394b141a749aa4b4a3e87c5f8c551d4ddc240dd1efa9ce95d23bc2ea20b6fa0099648d8c34d2e940f8254e0018c8a46a532e9ce2cf41d3ac80704e9b14c2427969353646f066cf577e2d7d72588e42e1602a0d6f9ba347dfa53d982b8a1a27e9137f006c40e0b94dc648fabc6aa0aa598c68800c66299a26ce4c7564a98eb50e59d531117e010df1acdfb4f138865fc9d344dd04c55439c1233855c1f28ee987661b5769473e8a7a2000b42be79b07917b920644f61208114fffec04825c6bf85582a225560e388524210fa83ac641ab864ee6a11ecf0de3a1408bc30224061c9365826e3101d890d4cd487ba07888bc773337cc7164344965dfb99b543e5687cd60f5cf624fe742210614232a6da74eb9776257d3d1d7554587f73ee84af7379be5729e2165ad89434d3d77765a9d5876d78d8eb8cf70cc40ea2f1c5e74d6220c95f9e00e2b04dec00c22b1a83b8aeff8dc01e4b63e328b0cbae7ca5aaf242e99efbf243d7dc703c172f7cd0af5692f13ba78f73242a6d7a2927db16dcd6043cf19454b2f04dc6065518bbc8d8003b6ec27b495a13fd018709c7f7a7c5a45297d3269d388c312019fc75573e1601b8df6032cc25ca84c8e71bc47c5904036e0f734f8e6e011ae191ddc8e52d7090e36aa31a24098bc4ef009cd35e856125e922ad9310ad42770f66aca4ab27e1723041d81fdb65e76f72302d1f378d92ba2bc6e9e9971abeb7854a78bcf5757fb78f2b5bd55d96d5438da6377f76a04f0eac16fb270e9888257523841139db975c2a011b9ddabb11ac63d204e16721edcf99a856725572a533c7d71ecaea5fae3e234e7d7f08c585af7a4137f79ddb3e7dac43a0df7757e5bf3d5748819741f77fc0053a6c1aecd0b139a3f845d188305f50394a146acc91c839ffdf09395791238b3716cfc158c02b05dd0b4eca07ed0f96ceb236ea5fc70964f45ed0fd709bf3ba5538ba10576cfa2b73f37f3df8e08492f0df6706da316f613d76b79b2653b99c34877415f0f7a387c66934038e08d17670bdb422041a5adfad0bebe6d6eb5db31d607def65e0ee9942fbf8c3d41689e8a1f75eb44f4e9f01824b7fdda14e1bc1d4f74e29083b3fdc853938f51b4c2f3cd7558e2abe8a5da5cfc73203130459b701056538fb99566f992c40515c1bf91550594280fad89ab9b0b69c9b7eba69870cebc3396bc5e9ca15d2b8703e3516bb094dca653dc3f9d18aa27a3a34b5a36933b9c65ca4756b0385c6bc702be17af98e6c544e2147a9556e77cfcd472215e6cda212fff7b3ae8c38a2c0df109503444496b4c0b4190e07169f26694dc09bff249ed0725e32efba3092db869872eeed59412afde833ed3642a3704fed5f8375dea85eea3af4aed98a6541ce680c67f69dc8ec27063ecdb9dcef14fcdb9e343048fbf71e46012be1e9750393bc7b4de596340db67b97010885b84336d9d5df6948d4b3748ec417762d46c7c8e1a4ac1b452485ac3a131cd1ba4e2e6665ac2f89efe18987b673796e42a315b76448ed8c54a416028b7298cd0c4dc76832de5c4afd7024a8685a4adae6d"})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x200000035, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3f2dd7e9ff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b997b530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

391.153172ms ago: executing program 6 (id=2797):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0xfff0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

282.378385ms ago: executing program 6 (id=2798):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x2000000, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0)

145.011853ms ago: executing program 6 (id=2799):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3, 0x0, 0x9}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]})
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x47425247}})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="170900000000000000000100000008000900ffffffff06000000ffff070000000000060002000100000008000a0004000000"], 0x3c}}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x1, 0x2, 0xd104c})

143.89689ms ago: executing program 7 (id=2800):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8932, &(0x7f0000000000)={'dummy0\x00'})
r1 = getpgrp(0x0)
wait4(r1, 0x0, 0x20000000, 0x0)

52.180312ms ago: executing program 1 (id=2801):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0xfff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

0s ago: executing program 7 (id=2802):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$kcm(0x10, 0x9, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4090, 0xffa}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000000880)=""/207, 0xcf}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000001c40)=""/67, 0x43}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000000200)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xb}, 0x40016002)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x44084)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0xa02402, &(0x7f0000000400)={[{@verity_require}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]})
chdir(&(0x7f00000000c0)='./bus\x00')
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
chdir(&(0x7f0000000080)='./bus\x00')
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000001100)={0xa, 0x3, 0x0, @loopback, 0xfffffffe}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback, 0x2000000}, 0xa)
socket$xdp(0x2c, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6)
sendto$inet6(r2, &(0x7f0000000140)="54b357e308a8faaa33954ae4498f38eb7df169c4a4890b365945f34ea3682749dca7d9ab5caf081da94d984ad9cb795e431d012cee6b95335bee2ff6c31661263b1160cf8b7baa25f26e1693c03318c9f398a53757c9e5eb7286652eecb69aee145c3d0fb84820c2aa4c8265cd7176a6cdea2e93360398f1ee", 0x79, 0x40001, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200), 0x4)
listen(r3, 0xfff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TCFLSH(r5, 0x400455c8, 0x2)
ioctl$TIOCSETD(r5, 0x5412, &(0x7f00000003c0)=0xffffffbf)
accept4(r3, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000100)=0x80, 0x800)
ioctl$int_in(0xffffffffffffffff, 0x2c5e4a6978efb90b, &(0x7f00000001c0)=0x10001)
shutdown(r2, 0x2)

kernel console output (not intermixed with test programs):

ig 0 has 0 interfaces, different from the descriptor's value: 1
[  514.361777][   T43] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  514.371150][   T24] usb 6-1: Using ep0 maxpacket: 8
[  514.377595][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.391412][   T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  514.400658][ T7004] usb 8-1: Using ep0 maxpacket: 8
[  514.406634][   T43] usb 7-1: config 0 descriptor??
[  514.415344][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.427178][ T7004] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  514.439980][   T24] usb 6-1: Product: syz
[  514.445045][   T24] usb 6-1: Manufacturer: syz
[  514.449838][ T7004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.458104][   T43] m920x_read = error: -19
[  514.462500][   T43] dvb-usb: error -19 while querying for an remote control event.
[  514.475392][ T7004] usb 8-1: Product: syz
[  514.479583][ T7004] usb 8-1: Manufacturer: syz
[  514.484183][ T7004] usb 8-1: SerialNumber: syz
[  514.488920][   T24] usb 6-1: SerialNumber: syz
[  514.496515][   T24] usb 6-1: config 0 descriptor??
[  514.510984][ T7004] usb 8-1: config 0 descriptor??
[  514.570534][T13597] kvm: pic: non byte write
[  514.577627][T13597] kvm: pic: non byte write
[  514.656505][   T43] m920x_read = error: -19
[  514.664519][   T43] dvb-usb: error -19 while querying for an remote control event.
[  514.711528][   T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  514.729263][ T7004] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  514.835398][   T43] m920x_read = error: -19
[  514.840491][   T43] dvb-usb: error -19 while querying for an remote control event.
[  515.010690][   T43] m920x_read = error: -19
[  515.015119][   T43] dvb-usb: error -19 while querying for an remote control event.
[  515.177625][   T43] m920x_read = error: -19
[  515.182519][   T43] dvb-usb: error -19 while querying for an remote control event.
[  515.348923][   T43] m920x_read = error: -19
[  515.353688][   T43] dvb-usb: error -19 while querying for an remote control event.
[  515.522714][   T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  515.543859][   T43] m920x_read = error: -19
[  515.558276][   T43] dvb-usb: error -19 while querying for an remote control event.
[  515.566551][   T24] usb 6-1: USB disconnect, device number 81
[  515.636274][ T5954] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  515.735453][   T43] m920x_read = error: -19
[  515.739870][   T43] dvb-usb: error -19 while querying for an remote control event.
[  515.754800][ T7004] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  515.779489][ T7004] usb 8-1: USB disconnect, device number 40
[  515.815376][ T5954] usb 2-1: Using ep0 maxpacket: 32
[  515.824583][ T5954] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  515.835307][ T5954] usb 2-1: config 0 has no interface number 0
[  515.841435][ T5954] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  515.855869][ T5954] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  515.867631][ T5954] usb 2-1: config 0 interface 126 has no altsetting 0
[  515.879540][ T5954] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  515.890226][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.898297][ T5954] usb 2-1: Product: syz
[  515.902462][ T5954] usb 2-1: Manufacturer: syz
[  515.907149][ T5954] usb 2-1: SerialNumber: syz
[  515.914246][ T5954] usb 2-1: config 0 descriptor??
[  515.919985][T13604] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  515.927581][   T43] m920x_read = error: -19
[  515.927894][T13604] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  515.931951][   T43] dvb-usb: error -19 while querying for an remote control event.
[  516.105509][   T43] m920x_read = error: -19
[  516.109902][   T43] dvb-usb: error -19 while querying for an remote control event.
[  516.155687][ T5954] ir_usb 2-1:0.126: IR Dongle converter detected
[  516.167463][ T5954] usb 2-1: IRDA class descriptor not found, device not bound
[  516.187540][ T5954] usb 2-1: USB disconnect, device number 18
[  516.275935][ T7004] m920x_read = error: -19
[  516.280344][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  516.455360][ T7004] m920x_read = error: -19
[  516.459749][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  516.485333][   T43] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  516.635278][   T43] usb 6-1: device descriptor read/64, error -71
[  516.645349][ T7004] m920x_read = error: -19
[  516.649754][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  516.816606][ T7004] m920x_read = error: -19
[  516.821019][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  516.885413][   T43] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  516.985397][ T7004] m920x_read = error: -19
[  516.990336][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  517.001289][T13624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2522'.
[  517.015639][   T43] usb 6-1: device descriptor read/64, error -71
[  517.131228][   T43] usb usb6-port1: attempt power cycle
[  517.157083][ T7004] m920x_read = error: -19
[  517.168428][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  517.335977][ T7004] m920x_read = error: -19
[  517.340369][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  517.485397][   T43] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  517.505357][ T7004] m920x_read = error: -19
[  517.509761][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  517.519511][   T43] usb 6-1: device descriptor read/8, error -71
[  517.678017][ T7004] m920x_read = error: -19
[  517.682687][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  517.765666][   T43] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  517.787575][   T43] usb 6-1: device descriptor read/8, error -71
[  517.788174][ T5936] usb 7-1: USB disconnect, device number 36
[  517.845626][T12420] m920x_read = error: -19
[  517.850019][T12420] dvb-usb: error -19 while querying for an remote control event.
[  517.897115][   T43] usb usb6-port1: unable to enumerate USB device
[  518.025360][   T43] m920x_read = error: -19
[  518.031240][   T43] dvb-usb: error -19 while querying for an remote control event.
[  518.155539][ T5936] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[  518.207743][T12420] m920x_read = error: -19
[  518.212827][T12420] dvb-usb: error -19 while querying for an remote control event.
[  518.316424][ T5936] usb 8-1: Using ep0 maxpacket: 32
[  518.323249][ T5936] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  518.332504][ T5936] usb 8-1: config 0 has no interface number 0
[  518.340547][ T5936] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.351795][ T5936] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.361613][ T5936] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  518.371034][ T5936] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.377677][T12420] m920x_read = error: -19
[  518.383507][ T5936] usb 8-1: config 0 descriptor??
[  518.388526][T12420] dvb-usb: error -19 while querying for an remote control event.
[  518.435346][   T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  518.555361][T12420] m920x_read = error: -19
[  518.559853][T12420] dvb-usb: error -19 while querying for an remote control event.
[  518.597200][   T43] usb 2-1: Using ep0 maxpacket: 8
[  518.606941][   T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  518.616645][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.624667][   T43] usb 2-1: Product: syz
[  518.629353][   T43] usb 2-1: Manufacturer: syz
[  518.635286][   T43] usb 2-1: SerialNumber: syz
[  518.651668][   T43] usb 2-1: config 0 descriptor??
[  518.697858][T13648] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2532'.
[  518.725689][ T7004] m920x_read = error: -19
[  518.730113][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  518.869427][   T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  518.895449][ T7004] m920x_read = error: -19
[  518.900164][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  519.015001][ T5936] uclogic 0003:28BD:0094.0018: pen parameters not found
[  519.022047][ T5936] uclogic 0003:28BD:0094.0018: interface is invalid, ignoring
[  519.071981][ T7004] m920x_read = error: -19
[  519.077051][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  519.233911][T13635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.245334][T13635] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.246324][T12420] m920x_read = error: -19
[  519.265038][T12420] dvb-usb: error -19 while querying for an remote control event.
[  519.330215][ T1211] usb 8-1: USB disconnect, device number 41
[  519.345266][ T7004] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  519.445370][T12420] m920x_read = error: -19
[  519.449814][T12420] dvb-usb: error -19 while querying for an remote control event.
[  519.495495][ T7004] usb 7-1: Using ep0 maxpacket: 8
[  519.503140][ T7004] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  519.513576][ T7004] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  519.522798][ T7004] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  519.531953][ T7004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.542546][ T7004] usb 7-1: config 0 descriptor??
[  519.626158][ T7004] m920x_read = error: -19
[  519.630538][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  519.796482][T12420] m920x_read = error: -19
[  519.801076][T12420] dvb-usb: error -19 while querying for an remote control event.
[  519.886998][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2536'.
[  519.908640][   T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  519.926917][   T43] usb 2-1: USB disconnect, device number 19
[  519.967310][ T7004] m920x_read = error: -19
[  519.972458][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  520.146316][   T43] m920x_read = error: -19
[  520.152472][   T43] dvb-usb: error -19 while querying for an remote control event.
[  520.315615][   T43] m920x_read = error: -19
[  520.320003][   T43] dvb-usb: error -19 while querying for an remote control event.
[  520.360901][T13673] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2541'.
[  520.495587][   T43] m920x_read = error: -19
[  520.515226][   T43] dvb-usb: error -19 while querying for an remote control event.
[  520.539575][T13681] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2543'.
[  520.676378][   T43] m920x_read = error: -19
[  520.681954][   T43] dvb-usb: error -19 while querying for an remote control event.
[  520.845324][ T7004] m920x_read = error: -19
[  520.849696][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  521.026764][ T7004] m920x_read = error: -19
[  521.031150][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  521.196447][ T7004] m920x_read = error: -19
[  521.204561][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  521.387075][ T7004] m920x_read = error: -19
[  521.391572][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  521.495507][ T1211] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  521.567040][ T7004] m920x_read = error: -19
[  521.571424][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  521.688120][ T1211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  521.699144][ T1211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  521.708972][ T1211] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  521.723808][ T1211] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  521.733092][ T1211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.735544][   T43] m920x_read = error: -19
[  521.744291][ T1211] usb 8-1: config 0 descriptor??
[  521.750654][   T43] dvb-usb: error -19 while querying for an remote control event.
[  521.889915][ T7004] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  521.915385][   T24] m920x_read = error: -19
[  521.920990][   T24] dvb-usb: error -19 while querying for an remote control event.
[  522.047309][ T7004] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.057813][ T7004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  522.069121][ T7004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  522.078908][ T7004] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  522.091956][   T24] m920x_read = error: -19
[  522.096583][   T24] dvb-usb: error -19 while querying for an remote control event.
[  522.105300][ T7004] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  522.114440][ T7004] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  522.123292][ T7004] usb 2-1: Manufacturer: syz
[  522.130714][ T7004] usb 2-1: config 0 descriptor??
[  522.170826][ T1211] plantronics 0003:047F:FFFF.0019: item fetching failed at offset 12/15
[  522.180453][ T1211] plantronics 0003:047F:FFFF.0019: parse failed
[  522.188708][ T1211] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22
[  522.255728][   T24] m920x_read = error: -19
[  522.260164][   T24] dvb-usb: error -19 while querying for an remote control event.
[  522.386184][ T7004] rc_core: IR keymap rc-hauppauge not found
[  522.392324][ T7004] Registered IR keymap rc-empty
[  522.398520][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.419050][   T24] usb 8-1: USB disconnect, device number 42
[  522.425522][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.437523][   T43] m920x_read = error: -19
[  522.441899][   T43] dvb-usb: error -19 while querying for an remote control event.
[  522.467132][ T7004] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1
[  522.482362][ T7004] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input45
[  522.501236][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.525326][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.545390][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.565356][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.585357][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.605368][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.612843][   T43] m920x_read = error: -19
[  522.618112][   T43] dvb-usb: error -19 while querying for an remote control event.
[  522.645390][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.665328][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.685335][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.705459][ T7004] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  522.727542][ T7004] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  522.737767][ T7004] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  522.785358][ T7004] m920x_read = error: -19
[  522.789755][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  522.877284][ T1211] usb 2-1: USB disconnect, device number 20
[  522.947649][ T5954] usb 7-1: USB disconnect, device number 37
[  522.958348][ T7004] m920x_read = error: -19
[  522.974570][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  523.050890][T13710] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2552'.
[  523.159837][ T7004] m920x_read = error: -19
[  523.166691][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  523.275511][ T5936] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[  523.325352][ T7004] m920x_read = error: -19
[  523.329748][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  523.425292][ T5936] usb 8-1: Using ep0 maxpacket: 8
[  523.447234][ T5936] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  523.464739][ T5936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.474735][ T5936] usb 8-1: Product: syz
[  523.479859][ T5936] usb 8-1: Manufacturer: syz
[  523.484489][ T5936] usb 8-1: SerialNumber: syz
[  523.492079][ T5936] usb 8-1: config 0 descriptor??
[  523.495525][   T43] m920x_read = error: -19
[  523.505129][   T43] dvb-usb: error -19 while querying for an remote control event.
[  523.671641][   T43] m920x_read = error: -19
[  523.677982][   T43] dvb-usb: error -19 while querying for an remote control event.
[  523.686217][ T7004] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  523.714828][ T5936] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  523.845533][   T24] m920x_read = error: -19
[  523.849936][ T7004] usb 2-1: Using ep0 maxpacket: 8
[  523.855071][   T24] dvb-usb: error -19 while querying for an remote control event.
[  523.869414][ T7004] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  523.878752][ T7004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.887313][ T7004] usb 2-1: Product: syz
[  523.891508][ T7004] usb 2-1: Manufacturer: syz
[  523.897395][ T7004] usb 2-1: SerialNumber: syz
[  523.904759][ T7004] usb 2-1: config 0 descriptor??
[  524.017909][   T43] m920x_read = error: -19
[  524.022332][   T43] dvb-usb: error -19 while querying for an remote control event.
[  524.195309][   T43] m920x_read = error: -19
[  524.199773][   T43] dvb-usb: error -19 while querying for an remote control event.
[  524.333139][ T7004] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71
[  524.348173][ T7004] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  524.367666][   T43] m920x_read = error: -19
[  524.372056][   T43] dvb-usb: error -19 while querying for an remote control event.
[  524.387188][ T7004] usb 2-1: USB disconnect, device number 21
[  524.555994][ T7004] m920x_read = error: -19
[  524.560498][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  524.723523][ T5936] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  524.726635][ T7004] m920x_read = error: -19
[  524.738337][ T5936] usb 8-1: USB disconnect, device number 43
[  524.744392][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  524.905356][   T43] m920x_read = error: -19
[  524.909895][   T43] dvb-usb: error -19 while querying for an remote control event.
[  524.947813][ T1211] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  525.008781][T13740] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2562'.
[  525.077607][   T24] m920x_read = error: -19
[  525.082067][   T24] dvb-usb: error -19 while querying for an remote control event.
[  525.115677][ T1211] usb 2-1: Using ep0 maxpacket: 8
[  525.126909][ T1211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  525.141832][ T1211] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  525.152543][ T1211] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  525.169919][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.181133][ T1211] usb 2-1: config 0 descriptor??
[  525.236517][  T125] block nbd0: Possible stuck request ffff888025387000: control (read@0,1024B). Runtime 150 seconds
[  525.247529][  T125] block nbd0: Possible stuck request ffff8880253871c0: control (read@1024,1024B). Runtime 150 seconds
[  525.258701][   T24] m920x_read = error: -19
[  525.263148][   T24] dvb-usb: error -19 while querying for an remote control event.
[  525.271026][  T125] block nbd0: Possible stuck request ffff888025387380: control (read@2048,1024B). Runtime 150 seconds
[  525.285044][  T125] block nbd0: Possible stuck request ffff888025387540: control (read@3072,1024B). Runtime 150 seconds
[  525.456965][   T24] m920x_read = error: -19
[  525.461780][   T24] dvb-usb: error -19 while querying for an remote control event.
[  525.625394][   T24] m920x_read = error: -19
[  525.629893][   T24] dvb-usb: error -19 while querying for an remote control event.
[  525.795583][ T7004] m920x_read = error: -19
[  525.800047][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  525.915272][   T24] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  525.965494][   T43] m920x_read = error: -19
[  525.969891][   T43] dvb-usb: error -19 while querying for an remote control event.
[  526.099328][   T24] usb 6-1: config 0 has an invalid interface number: 49 but max is 0
[  526.108548][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.119995][   T24] usb 6-1: config 0 has no interface number 0
[  526.126780][   T24] usb 6-1: too many endpoints for config 0 interface 49 altsetting 50: 56, using maximum allowed: 30
[  526.137807][ T7004] m920x_read = error: -19
[  526.142167][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  526.150001][   T24] usb 6-1: config 0 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56
[  526.163459][   T24] usb 6-1: config 0 interface 49 has no altsetting 0
[  526.170378][   T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df
[  526.179766][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.193462][   T24] usb 6-1: config 0 descriptor??
[  526.325388][ T7004] m920x_read = error: -19
[  526.331765][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  526.495510][ T7004] m920x_read = error: -19
[  526.499964][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  526.702473][   T24] usb 6-1: string descriptor 0 read error: -71
[  526.709372][   T43] m920x_read = error: -19
[  526.713747][   T43] dvb-usb: error -19 while querying for an remote control event.
[  526.734555][   T24] usb 6-1: USB disconnect, device number 86
[  526.885425][   T43] m920x_read = error: -19
[  526.889787][   T43] dvb-usb: error -19 while querying for an remote control event.
[  526.925320][ T7004] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  526.985290][ T1211] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  527.055454][   T24] m920x_read = error: -19
[  527.059859][   T24] dvb-usb: error -19 while querying for an remote control event.
[  527.085419][ T7004] usb 7-1: Using ep0 maxpacket: 16
[  527.093194][ T7004] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  527.103887][ T7004] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  527.115063][ T7004] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  527.124293][ T7004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.132356][ T7004] usb 7-1: Product: syz
[  527.136827][ T7004] usb 7-1: Manufacturer: syz
[  527.142000][ T7004] usb 7-1: SerialNumber: syz
[  527.145260][ T1211] usb 8-1: Using ep0 maxpacket: 8
[  527.164082][ T1211] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  527.173307][ T1211] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.181507][ T1211] usb 8-1: Product: syz
[  527.185786][ T1211] usb 8-1: Manufacturer: syz
[  527.190390][ T1211] usb 8-1: SerialNumber: syz
[  527.201063][ T1211] usb 8-1: config 0 descriptor??
[  527.225843][   T24] m920x_read = error: -19
[  527.230263][   T24] dvb-usb: error -19 while querying for an remote control event.
[  527.324292][T13792] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2576'.
[  527.395444][   T24] m920x_read = error: -19
[  527.400078][   T24] dvb-usb: error -19 while querying for an remote control event.
[  527.415490][ T1211] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  527.575965][   T24] m920x_read = error: -19
[  527.580406][   T24] dvb-usb: error -19 while querying for an remote control event.
[  527.711881][ T7004] usb 7-1: 0:2 : does not exist
[  527.724872][ T7004] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5)
[  527.738692][ T7004] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[  527.746555][T12420] m920x_read = error: -19
[  527.750904][T12420] dvb-usb: error -19 while querying for an remote control event.
[  527.764523][ T7004] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[  527.777400][ T7004] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[  527.804015][ T7004] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5)
[  527.820238][ T7004] usb 7-1: USB disconnect, device number 38
[  527.844198][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  527.867926][   T24] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  527.915333][T12420] m920x_read = error: -19
[  527.919753][T12420] dvb-usb: error -19 while querying for an remote control event.
[  528.026847][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  528.037580][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  528.046551][   T24] usb 6-1: config 1 has no interface number 0
[  528.052755][   T24] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.064577][   T24] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  528.073811][   T24] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  528.086924][ T7004] m920x_read = error: -19
[  528.091305][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  528.101819][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  528.111119][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.125223][   T24] usb 6-1: Product: syz
[  528.129420][   T24] usb 6-1: Manufacturer: syz
[  528.134019][   T24] usb 6-1: SerialNumber: syz
[  528.255355][ T7004] m920x_read = error: -19
[  528.259875][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  528.426323][ T7004] m920x_read = error: -19
[  528.430297][ T1211] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  528.434141][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  528.446500][ T1211] usb 8-1: USB disconnect, device number 44
[  528.591827][ T5954] usb 2-1: USB disconnect, device number 22
[  528.629322][ T7004] m920x_read = error: -19
[  528.633745][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  528.795640][ T7004] m920x_read = error: -19
[  528.800051][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  528.954152][   T24] cdc_ncm 6-1:1.1: bind() failure
[  528.970001][ T7004] m920x_read = error: -19
[  528.974403][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  529.175425][T12420] m920x_read = error: -19
[  529.180100][T12420] dvb-usb: error -19 while querying for an remote control event.
[  529.267244][T13825] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2586'.
[  529.358704][T12420] m920x_read = error: -19
[  529.363363][T12420] dvb-usb: error -19 while querying for an remote control event.
[  529.375339][ T7004] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  529.419857][ T1211] usb 6-1: USB disconnect, device number 87
[  529.525578][T12420] m920x_read = error: -19
[  529.530109][T12420] dvb-usb: error -19 while querying for an remote control event.
[  529.545459][ T7004] usb 7-1: Using ep0 maxpacket: 32
[  529.554981][ T7004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.568431][ T7004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.585672][ T7004] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  529.603241][ T7004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.626340][ T7004] usb 7-1: config 0 descriptor??
[  529.695865][   T43] m920x_read = error: -19
[  529.700251][   T43] dvb-usb: error -19 while querying for an remote control event.
[  529.865459][   T24] m920x_read = error: -19
[  529.870041][   T24] dvb-usb: error -19 while querying for an remote control event.
[  529.885566][ T1211] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  529.975631][T12420] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[  530.035628][ T5986] m920x_read = error: -19
[  530.040065][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  530.052750][ T7004] ft260 0003:0403:6030.001A: item fetching failed at offset 0/2
[  530.058050][ T1211] usb 2-1: Using ep0 maxpacket: 8
[  530.061630][ T7004] ft260 0003:0403:6030.001A: failed to parse HID
[  530.072010][ T7004] ft260 0003:0403:6030.001A: probe with driver ft260 failed with error -22
[  530.072015][ T1211] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  530.072035][ T1211] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  530.104399][ T1211] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  530.114627][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.125291][T12420] usb 8-1: Using ep0 maxpacket: 16
[  530.125906][ T1211] usb 2-1: config 0 descriptor??
[  530.140406][T12420] usb 8-1: unable to get BOS descriptor or descriptor too short
[  530.152215][T12420] usb 8-1: config 1 interface 0 has no altsetting 0
[  530.161789][T12420] usb 8-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[  530.172123][T12420] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.180311][T12420] usb 8-1: Product: syz
[  530.184668][T12420] usb 8-1: Manufacturer: syz
[  530.189827][T12420] usb 8-1: SerialNumber: syz
[  530.207844][ T7004] m920x_read = error: -19
[  530.213003][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  530.339884][ T7004] usb 7-1: USB disconnect, device number 39
[  530.375315][ T5986] m920x_read = error: -19
[  530.379805][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  530.428693][T12420] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input47
[  530.443927][ T5218] bcm5974 8-1:1.0: could not read from device
[  530.472413][T12420] usb 8-1: USB disconnect, device number 45
[  530.545608][ T7004] m920x_read = error: -19
[  530.549990][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  530.565724][   T43] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  530.715944][T12420] m920x_read = error: -19
[  530.720449][   T43] usb 6-1: Using ep0 maxpacket: 8
[  530.726416][T12420] dvb-usb: error -19 while querying for an remote control event.
[  530.738265][   T43] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  530.747413][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.755671][   T43] usb 6-1: Product: syz
[  530.759851][   T43] usb 6-1: Manufacturer: syz
[  530.764436][   T43] usb 6-1: SerialNumber: syz
[  530.771729][   T43] usb 6-1: config 0 descriptor??
[  530.885434][T12420] m920x_read = error: -19
[  530.889792][T12420] dvb-usb: error -19 while querying for an remote control event.
[  530.996326][   T43] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  531.065477][T12420] m920x_read = error: -19
[  531.070310][T12420] dvb-usb: error -19 while querying for an remote control event.
[  531.257721][T12420] m920x_read = error: -19
[  531.262425][T12420] dvb-usb: error -19 while querying for an remote control event.
[  531.425882][T12420] m920x_read = error: -19
[  531.430369][T12420] dvb-usb: error -19 while querying for an remote control event.
[  531.476635][T13857] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2598'.
[  531.625333][T12420] m920x_read = error: -19
[  531.629761][T12420] dvb-usb: error -19 while querying for an remote control event.
[  531.805576][T12420] m920x_read = error: -19
[  531.810132][T12420] dvb-usb: error -19 while querying for an remote control event.
[  531.955627][ T1211] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  531.959243][T13866] loop6: detected capacity change from 0 to 2560
[  531.970919][T13866] buffer_io_error: 40 callbacks suppressed
[  531.970937][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  531.984888][ T5986] m920x_read = error: -19
[  531.984917][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  531.989345][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  532.006025][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  532.006900][   T43] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  532.013969][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  532.039138][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  532.047448][   T43] usb 6-1: USB disconnect, device number 88
[  532.051165][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  532.068973][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  532.077833][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  532.088176][T13866] ldm_validate_partition_table(): Disk read failed.
[  532.094940][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  532.103353][T13866] Buffer I/O error on dev loop6, logical block 0, async page read
[  532.111568][T13866] Dev loop6: unable to read RDB block 0
[  532.119166][T13866]  loop6: unable to read partition table
[  532.125125][T13866] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  532.125900][ T1211] usb 7-1: Using ep0 maxpacket: 16
[  532.145397][T12420] m920x_read = error: -19
[  532.149773][T12420] dvb-usb: error -19 while querying for an remote control event.
[  532.175498][ T1211] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  532.191402][ T1211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  532.203302][ T1211] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  532.216403][ T1211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57608, setting to 1024
[  532.236360][ T1211] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  532.246825][ T1211] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  532.264519][ T1211] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  532.283396][ T1211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  532.291763][ T1211] usb 7-1: SerialNumber: syz
[  532.311641][T13862] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  532.331537][ T1211] cdc_acm 7-1:1.0: Control and data interfaces are not separated!
[  532.335372][   T43] m920x_read = error: -19
[  532.344120][   T43] dvb-usb: error -19 while querying for an remote control event.
[  532.363648][ T1211] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12
[  532.505315][   T43] m920x_read = error: -19
[  532.512975][   T43] dvb-usb: error -19 while querying for an remote control event.
[  532.548499][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.559858][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.601925][T12420] usb 7-1: USB disconnect, device number 40
[  532.685425][ T7004] m920x_read = error: -19
[  532.689847][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  532.755261][ T5986] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[  532.825351][   T43] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  532.856171][T12420] m920x_read = error: -19
[  532.860554][T12420] dvb-usb: error -19 while querying for an remote control event.
[  532.907063][ T5986] usb 8-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  532.916498][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.928439][ T5986] usb 8-1: config 0 descriptor??
[  532.985370][   T43] usb 6-1: Using ep0 maxpacket: 32
[  532.991323][   T43] usb 6-1: too many configurations: 17, using maximum allowed: 8
[  533.000221][   T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  533.008411][   T43] usb 6-1: config 0 has no interface number 0
[  533.015854][   T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  533.023933][   T43] usb 6-1: config 0 has no interface number 0
[  533.030323][T12420] m920x_read = error: -19
[  533.035067][T12420] dvb-usb: error -19 while querying for an remote control event.
[  533.044887][   T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  533.052978][   T43] usb 6-1: config 0 has no interface number 0
[  533.060573][   T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  533.068826][   T43] usb 6-1: config 0 has no interface number 0
[  533.078748][   T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  533.087824][   T43] usb 6-1: config 0 has no interface number 0
[  533.095025][   T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  533.103455][   T43] usb 6-1: config 0 has no interface number 0
[  533.116060][   T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  533.124931][   T43] usb 6-1: config 0 has no interface number 0
[  533.140374][   T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  533.161269][   T43] usb 6-1: config 0 has no interface number 0
[  533.180290][   T43] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  533.195083][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.203798][T12420] m920x_read = error: -19
[  533.208307][T12420] dvb-usb: error -19 while querying for an remote control event.
[  533.217263][   T43] usb 6-1: Product: syz
[  533.221460][   T43] usb 6-1: Manufacturer: syz
[  533.226612][   T43] usb 6-1: SerialNumber: syz
[  533.234670][   T43] usb 6-1: config 0 descriptor??
[  533.242653][   T43] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz)
[  533.341804][ T5986] hid (null): report_id 0 is invalid
[  533.385345][T12420] m920x_read = error: -19
[  533.390390][T12420] dvb-usb: error -19 while querying for an remote control event.
[  533.442186][   T43] etas_es58x 6-1:0.2: could not parse product info: '424242424242'
[  533.492575][T13882] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2607'.
[  533.569560][ T5986] usb 8-1: string descriptor 0 read error: -71
[  533.577097][   T43] m920x_read = error: -19
[  533.601523][   T43] dvb-usb: error -19 while querying for an remote control event.
[  533.615362][ T5986] uclogic 0003:5543:3031.001B: failed retrieving string descriptor #200: -71
[  533.628927][ T1211] usb 2-1: USB disconnect, device number 23
[  533.638250][ T5986] uclogic 0003:5543:3031.001B: failed retrieving pen parameters: -71
[  533.648141][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.672218][ T5986] uclogic 0003:5543:3031.001B: failed probing pen v2 parameters: -71
[  533.676612][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.690730][ T5986] uclogic 0003:5543:3031.001B: failed probing parameters: -71
[  533.718272][ T5986] uclogic 0003:5543:3031.001B: probe with driver uclogic failed with error -71
[  533.753796][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.765591][ T5986] usb 8-1: USB disconnect, device number 46
[  533.768409][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.816069][   T43] m920x_read = error: -19
[  533.820469][   T43] dvb-usb: error -19 while querying for an remote control event.
[  533.986158][ T5986] m920x_read = error: -19
[  533.990646][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  534.155362][ T5986] m920x_read = error: -19
[  534.161667][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  534.258717][ T1211] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  534.266609][    C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000.
[  534.266660][    C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  534.266678][    C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG
[  534.266765][    C1] etas_es58x 6-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000.
[  534.266803][    C1] etas_es58x 6-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  534.266820][    C1] etas_es58x 6-1:0.2: es58x_split_urb() returned error -EBADMSG
[  534.267120][ T5528] etas_es58x 6-1:0.2 can1: bit-timing not yet defined
[  534.335861][   T43] m920x_read = error: -19
[  534.340262][   T43] dvb-usb: error -19 while querying for an remote control event.
[  534.435544][ T1211] usb 7-1: Using ep0 maxpacket: 16
[  534.444621][ T1211] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  534.454191][ T1211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.462345][ T1211] usb 7-1: Product: syz
[  534.470032][ T1211] usb 7-1: Manufacturer: syz
[  534.474663][ T1211] usb 7-1: SerialNumber: syz
[  534.484222][ T1211] usb 7-1: config 0 descriptor??
[  534.500179][ T1211] usb-storage 7-1:0.0: USB Mass Storage device detected
[  534.505479][   T43] m920x_read = error: -19
[  534.516263][   T43] dvb-usb: error -19 while querying for an remote control event.
[  534.525331][   T10] usb 8-1: new high-speed USB device number 47 using dummy_hcd
[  534.536912][ T1211] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1
[  534.549717][ T1211] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  534.549717][ T1211]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  534.675854][ T5986] m920x_read = error: -19
[  534.680251][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  534.700222][T13898] /dev/nullb0: Can't open blockdev
[  534.707259][T13898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.709019][T13914] /dev/nullb0: Can't open blockdev
[  534.717807][   T10] usb 8-1: Using ep0 maxpacket: 16
[  534.727006][T13898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.739846][ T5986] usb 7-1: USB disconnect, device number 41
[  534.740735][   T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  534.761900][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  534.780086][   T10] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  534.789416][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.799532][   T10] usb 8-1: Product: syz
[  534.803695][   T10] usb 8-1: Manufacturer: syz
[  534.805283][   T43] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  534.811037][   T10] usb 8-1: SerialNumber: syz
[  534.826767][   T10] usb 8-1: config 0 descriptor??
[  534.845429][   T24] m920x_read = error: -19
[  534.851275][   T24] dvb-usb: error -19 while querying for an remote control event.
[  534.977887][   T43] usb 2-1: Using ep0 maxpacket: 8
[  534.989468][   T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  534.999100][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.007384][   T43] usb 2-1: Product: syz
[  535.011703][   T43] usb 2-1: Manufacturer: syz
[  535.016540][ T5986] m920x_read = error: -19
[  535.020932][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  535.029297][   T43] usb 2-1: SerialNumber: syz
[  535.037881][   T43] usb 2-1: config 0 descriptor??
[  535.046829][   T10] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input48
[  535.062840][    C1] usb 8-1: pegasus_irq - nonzero urb status received: -71
[  535.071484][    C1] usb 8-1: pegasus_irq - nonzero urb status received: -71
[  535.073500][   T10] usb 8-1: USB disconnect, device number 47
[  535.078635][    C1] usb 8-1: pegasus_irq - usb_submit_urb failed with result -19
[  535.078951][ T5218] usb 8-1: control msg error: -71
[  535.195401][ T5986] m920x_read = error: -19
[  535.204091][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  535.247372][   T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  535.365823][ T5986] m920x_read = error: -19
[  535.370651][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  535.396194][ T5528] etas_es58x 6-1:0.2: es58x_free_urbs: Timeout, some TX urbs still remain
[  535.405698][    C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT
[  535.415394][    C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -ENOENT
[  535.423037][ T5528] etas_es58x 6-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL
[  535.433203][    C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  535.433647][   T10] usb 6-1: USB disconnect, device number 89
[  535.442468][    C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  535.442553][    C1] etas_es58x 6-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  535.481197][   T10] etas_es58x 6-1:0.2: Disconnecting syz syz
[  535.535866][   T24] m920x_read = error: -19
[  535.551326][   T24] dvb-usb: error -19 while querying for an remote control event.
[  535.723223][   T24] m920x_read = error: -19
[  535.729515][T13926] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2617'.
[  535.733280][   T24] dvb-usb: error -19 while querying for an remote control event.
[  535.906900][   T24] m920x_read = error: -19
[  535.911343][   T24] dvb-usb: error -19 while querying for an remote control event.
[  536.055426][   T10] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  536.095971][   T24] m920x_read = error: -19
[  536.100381][   T24] dvb-usb: error -19 while querying for an remote control event.
[  536.225370][   T10] usb 6-1: Using ep0 maxpacket: 8
[  536.236412][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  536.251664][   T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  536.263683][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  536.280713][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.286063][T12420] m920x_read = error: -19
[  536.292612][   T10] usb 6-1: config 0 descriptor??
[  536.304157][T12420] dvb-usb: error -19 while querying for an remote control event.
[  536.324016][   T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  536.364028][   T43] usb 2-1: USB disconnect, device number 24
[  536.396812][ T5936] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  536.407369][   T24] usb 8-1: new high-speed USB device number 48 using dummy_hcd
[  536.475753][ T5986] m920x_read = error: -19
[  536.482671][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  536.566757][   T24] usb 8-1: Using ep0 maxpacket: 32
[  536.574182][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  536.587611][   T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  536.593492][ T5936] usb 7-1: config 0 has an invalid interface number: 74 but max is 1
[  536.598121][   T24] usb 8-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  536.598149][   T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.625657][   T24] usb 8-1: config 0 descriptor??
[  536.639992][ T5936] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  536.650786][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  536.660160][ T5936] usb 7-1: config 0 has no interface number 0
[  536.668157][ T5936] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0xE has an invalid bInterval 100, changing to 10
[  536.674123][   T43] m920x_read = error: -19
[  536.679520][ T5936] usb 7-1: config 0 interface 74 altsetting 0 endpoint 0xE has invalid maxpacket 9984, setting to 1024
[  536.679550][ T5936] usb 7-1: config 0 interface 74 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  536.682400][ T5936] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  536.690149][   T43] dvb-usb: error -19 while querying for an remote control event.
[  536.707927][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.707954][ T5936] usb 7-1: Product: syz
[  536.707969][ T5936] usb 7-1: Manufacturer: syz
[  536.707984][ T5936] usb 7-1: SerialNumber: syz
[  536.716958][ T5936] usb 7-1: config 0 descriptor??
[  536.768003][T13933] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  536.887984][   T43] m920x_read = error: -19
[  536.905326][   T43] dvb-usb: error -19 while querying for an remote control event.
[  537.016834][ T5936] cypress_m8 7-1:0.74: HID->COM RS232 Adapter converter detected
[  537.026970][ T5936] cyphidcom ttyUSB0: required endpoint is missing
[  537.065473][   T43] m920x_read = error: -19
[  537.071719][ T5936] usb 7-1: USB disconnect, device number 42
[  537.083066][ T5936] cypress_m8 7-1:0.74: device disconnected
[  537.088973][   T43] dvb-usb: error -19 while querying for an remote control event.
[  537.091970][   T24] hid_parser_main: 35 callbacks suppressed
[  537.091990][   T24] aquacomputer_d5next 0003:0C70:F0B6.001C: unknown main item tag 0x2
[  537.126459][   T24] aquacomputer_d5next 0003:0C70:F0B6.001C: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.7-1/input0
[  537.246315][   T24] m920x_read = error: -19
[  537.250706][   T24] dvb-usb: error -19 while querying for an remote control event.
[  537.279800][   T24] usb 8-1: USB disconnect, device number 48
[  537.425325][ T5986] m920x_read = error: -19
[  537.429721][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  537.595346][   T43] m920x_read = error: -19
[  537.600046][   T43] dvb-usb: error -19 while querying for an remote control event.
[  537.755458][ T5936] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  537.765357][   T43] m920x_read = error: -19
[  537.769743][   T43] dvb-usb: error -19 while querying for an remote control event.
[  537.925371][ T5936] usb 2-1: Using ep0 maxpacket: 32
[  537.937137][   T43] m920x_read = error: -19
[  537.941526][   T43] dvb-usb: error -19 while querying for an remote control event.
[  537.949119][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  537.975257][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  538.001316][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  538.025758][ T5936] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  538.055327][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.069899][ T5936] usb 2-1: config 0 descriptor??
[  538.125357][   T43] m920x_read = error: -19
[  538.129751][   T43] dvb-usb: error -19 while querying for an remote control event.
[  538.266690][T14000] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2628'.
[  538.284762][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.308948][   T43] m920x_read = error: -19
[  538.313336][   T43] dvb-usb: error -19 while querying for an remote control event.
[  538.331186][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.340355][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.340810][T14002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.351973][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.365939][T14002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.371162][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.379729][T14002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.392884][T14002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.406617][T14002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.420161][T14002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.424966][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.432598][T14002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.450356][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.459552][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.470839][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.479923][T14003] netlink: 'syz.1.2621': attribute type 83 has an invalid length.
[  538.490531][   T43] m920x_read = error: -19
[  538.495785][   T43] dvb-usb: error -19 while querying for an remote control event.
[  538.502840][T14002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.550465][T14002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.578972][T14002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.634408][ T5936] usbhid 2-1:0.0: can't add hid device: -71
[  538.642355][ T5936] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  538.664658][ T5936] usb 2-1: USB disconnect, device number 25
[  538.676316][ T5986] m920x_read = error: -19
[  538.680709][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  538.775689][   T43] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  538.858143][ T5986] m920x_read = error: -19
[  538.863744][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  538.925302][   T43] usb 7-1: Using ep0 maxpacket: 8
[  538.933561][   T43] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  538.942862][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.951166][   T43] usb 7-1: Product: syz
[  538.955417][   T43] usb 7-1: Manufacturer: syz
[  538.960019][   T43] usb 7-1: SerialNumber: syz
[  538.971278][   T43] usb 7-1: config 0 descriptor??
[  539.025824][ T7004] m920x_read = error: -19
[  539.031772][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  539.182056][   T43] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  539.202147][ T7004] m920x_read = error: -19
[  539.207077][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  539.209602][T14023] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20004
[  539.265407][ T5986] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  539.365603][ T7004] m920x_read = error: -19
[  539.370105][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  539.415344][ T5986] usb 2-1: Using ep0 maxpacket: 32
[  539.423072][ T5986] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  539.432259][ T5986] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  539.443397][ T5986] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  539.454606][ T5986] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  539.468053][ T5986] usb 2-1: config 0 interface 0 has no altsetting 0
[  539.478022][ T5986] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  539.487191][ T5986] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  539.495713][ T5986] usb 2-1: Product: syz
[  539.499900][ T5986] usb 2-1: Manufacturer: syz
[  539.504498][ T5986] usb 2-1: SerialNumber: syz
[  539.512395][ T5986] usb 2-1: config 0 descriptor??
[  539.520307][ T5986] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  539.534025][ T5986] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  539.542869][ T7004] m920x_read = error: -19
[  539.549119][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  539.699454][ T7004] usb 6-1: USB disconnect, device number 90
[  539.726435][   T24] m920x_read = error: -19
[  539.731743][   T24] dvb-usb: error -19 while querying for an remote control event.
[  539.791265][T14029] program syz.5.2637 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  539.916352][ T7004] m920x_read = error: -19
[  539.920801][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  539.929436][T14032] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2638'.
[  540.095397][ T7004] m920x_read = error: -19
[  540.100172][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  540.115083][T14039] ieee802154 phy0 wpan0: encryption failed: -22
[  540.202961][   T43] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  540.224505][   T43] usb 7-1: USB disconnect, device number 43
[  540.233703][T14041] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2641'.
[  540.267861][ T7004] m920x_read = error: -19
[  540.280655][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  540.297695][   T24] usb 2-1: USB disconnect, device number 26
[  540.312372][   T24] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  540.465357][   T43] m920x_read = error: -19
[  540.469759][   T43] dvb-usb: error -19 while querying for an remote control event.
[  540.635952][   T43] m920x_read = error: -19
[  540.640532][   T43] dvb-usb: error -19 while querying for an remote control event.
[  540.805350][ T7004] m920x_read = error: -19
[  540.818476][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  540.969672][T14055] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2647'.
[  540.985398][ T7004] m920x_read = error: -19
[  540.990078][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  541.045430][ T1211] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  541.157589][ T7004] m920x_read = error: -19
[  541.161975][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  541.206426][ T1211] usb 7-1: Using ep0 maxpacket: 8
[  541.222837][ T1211] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.238779][ T1211] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  541.248849][ T1211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.258823][T14068] FAULT_INJECTION: forcing a failure.
[  541.258823][T14068] name failslab, interval 1, probability 0, space 0, times 0
[  541.276258][T14068] CPU: 1 UID: 0 PID: 14068 Comm: syz.7.2650 Not tainted syzkaller #0 PREEMPT(full) 
[  541.276284][T14068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  541.276296][T14068] Call Trace:
[  541.276304][T14068]  <TASK>
[  541.276312][T14068]  dump_stack_lvl+0x189/0x250
[  541.276344][T14068]  ? __pfx____ratelimit+0x10/0x10
[  541.276367][T14068]  ? __pfx_dump_stack_lvl+0x10/0x10
[  541.276392][T14068]  ? __pfx__printk+0x10/0x10
[  541.276421][T14068]  ? __pfx___might_resched+0x10/0x10
[  541.276441][T14068]  ? fs_reclaim_acquire+0x7d/0x100
[  541.276467][T14068]  should_fail_ex+0x414/0x560
[  541.276493][T14068]  should_failslab+0xa8/0x100
[  541.276515][T14068]  kmem_cache_alloc_noprof+0x74/0x6e0
[  541.276542][T14068]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  541.276572][T14068]  __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  541.276609][T14068]  mmu_topup_memory_caches+0x21/0x170
[  541.276635][T14068]  kvm_mmu_load+0x9d/0x2300
[  541.276656][T14068]  ? queue_delayed_work_on+0x1f7/0x280
[  541.276683][T14068]  ? kvm_end_pvclock_update+0x2c4/0x3b0
[  541.276703][T14068]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  541.276725][T14068]  ? kvm_apic_has_interrupt+0x744/0x770
[  541.276741][T14068]  ? vmx_flush_tlb_guest+0x27a/0x4c0
[  541.276777][T14068]  vcpu_run+0x48a8/0x7020
[  541.276875][T14068]  ? __pfx_vcpu_run+0x10/0x10
[  541.276900][T14068]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  541.276928][T14068]  ? rcu_is_watching+0x15/0xb0
[  541.276954][T14068]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  541.276978][T14068]  ? __mutex_trylock_common+0x153/0x260
[  541.277003][T14068]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  541.277022][T14068]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  541.277043][T14068]  ? rcu_is_watching+0x15/0xb0
[  541.277064][T14068]  ? trace_contention_end+0x39/0x120
[  541.277085][T14068]  ? look_up_lock_class+0x74/0x170
[  541.277110][T14068]  ? register_lock_class+0x51/0x320
[  541.277142][T14068]  ? __lock_acquire+0xab9/0xd20
[  541.277192][T14068]  kvm_vcpu_ioctl+0x95c/0xe90
[  541.277216][T14068]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  541.277258][T14068]  ? __fget_files+0x2a/0x420
[  541.277285][T14068]  ? __fget_files+0x3a0/0x420
[  541.277305][T14068]  ? __fget_files+0x2a/0x420
[  541.277330][T14068]  ? bpf_lsm_file_ioctl+0x9/0x20
[  541.277354][T14068]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  541.277371][T14068]  __se_sys_ioctl+0xfc/0x170
[  541.277393][T14068]  do_syscall_64+0xfa/0xfa0
[  541.277414][T14068]  ? lockdep_hardirqs_on+0x9c/0x150
[  541.277436][T14068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.277453][T14068]  ? clear_bhb_loop+0x60/0xb0
[  541.277475][T14068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.277493][T14068] RIP: 0033:0x7f62df78ebe9
[  541.277509][T14068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  541.277524][T14068] RSP: 002b:00007f62e05e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  541.277545][T14068] RAX: ffffffffffffffda RBX: 00007f62df9c6090 RCX: 00007f62df78ebe9
[  541.277558][T14068] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  541.277569][T14068] RBP: 00007f62e05e3090 R08: 0000000000000000 R09: 0000000000000000
[  541.277581][T14068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  541.277592][T14068] R13: 00007f62df9c6128 R14: 00007f62df9c6090 R15: 00007ffcfac69f78
[  541.277626][T14068]  </TASK>
[  541.279888][ T1211] usb 7-1: config 0 descriptor??
[  541.345359][ T7004] m920x_read = error: -19
[  541.347169][   T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  541.352977][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  541.362869][ T1211] gspca_main: vc032x-2.14.0 probing 046d:0892
[  541.525542][ T7004] m920x_read = error: -19
[  541.562942][ T1211] gspca_vc032x: reg_r err -32
[  541.584111][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  541.605235][ T1211] vc032x 7-1:0.0: probe with driver vc032x failed with error -32
[  541.671425][   T10] usb 2-1: Using ep0 maxpacket: 32
[  541.678716][   T10] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  541.687704][   T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  541.701508][   T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  541.717870][   T10] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  541.738193][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  541.759876][   T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  541.769193][   T10] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  541.775387][   T24] m920x_read = error: -19
[  541.781886][   T10] usb 2-1: Product: syz
[  541.787588][   T10] usb 2-1: Manufacturer: syz
[  541.792321][   T10] usb 2-1: SerialNumber: syz
[  541.808541][   T10] usb 2-1: config 0 descriptor??
[  541.809851][   T24] dvb-usb: error -19 while querying for an remote control event.
[  541.836381][   T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  541.860221][   T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  541.985304][   T43] m920x_read = error: -19
[  541.990604][   T43] dvb-usb: error -19 while querying for an remote control event.
[  542.075342][   T24] usb 8-1: new high-speed USB device number 49 using dummy_hcd
[  542.125306][ T7004] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  542.155407][   T43] m920x_read = error: -19
[  542.159790][   T43] dvb-usb: error -19 while querying for an remote control event.
[  542.225264][   T24] usb 8-1: Using ep0 maxpacket: 8
[  542.233741][   T24] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  542.243031][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.251056][   T24] usb 8-1: Product: syz
[  542.255429][   T24] usb 8-1: Manufacturer: syz
[  542.260225][   T24] usb 8-1: SerialNumber: syz
[  542.266834][   T24] usb 8-1: config 0 descriptor??
[  542.275297][ T7004] usb 6-1: Using ep0 maxpacket: 16
[  542.282216][ T7004] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  542.292463][ T7004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  542.304586][ T7004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11
[  542.316585][ T7004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024
[  542.329556][   T43] m920x_read = error: -19
[  542.334044][   T43] dvb-usb: error -19 while querying for an remote control event.
[  542.341939][ T7004] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  542.356512][ T7004] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  542.365749][ T7004] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  542.373767][ T7004] usb 6-1: Manufacturer: syz
[  542.381031][ T7004] usb 6-1: config 0 descriptor??
[  542.477296][   T24] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  542.505322][   T43] m920x_read = error: -19
[  542.509810][   T43] dvb-usb: error -19 while querying for an remote control event.
[  542.675786][   T43] m920x_read = error: -19
[  542.680235][   T43] dvb-usb: error -19 while querying for an remote control event.
[  542.714043][T14081] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  542.855426][ T5986] m920x_read = error: -19
[  542.861402][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  542.905331][ T7004] rc_core: IR keymap rc-hauppauge not found
[  542.911747][ T7004] Registered IR keymap rc-empty
[  542.919393][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  542.946004][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  542.966729][ T7004] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1
[  542.982634][ T7004] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input49
[  543.002708][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.025391][ T5986] m920x_read = error: -19
[  543.030036][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  543.038037][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.056062][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.075634][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.095594][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.115781][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.135555][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.155600][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.175567][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.195483][ T5986] m920x_read = error: -19
[  543.200157][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  543.209445][ T7004] mceusb 6-1:0.0: Error: mce write urb status = -71
[  543.237879][ T7004] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  543.246132][ T7004] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  543.259263][ T7004] usb 6-1: USB disconnect, device number 91
[  543.367420][ T5986] m920x_read = error: -19
[  543.371860][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  543.504790][   T24] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  543.537945][   T24] usb 8-1: USB disconnect, device number 49
[  543.557670][ T7004] m920x_read = error: -19
[  543.567622][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  543.694398][T14097] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2657'.
[  543.745344][   T24] m920x_read = error: -19
[  543.752429][   T24] dvb-usb: error -19 while querying for an remote control event.
[  543.925504][   T24] m920x_read = error: -19
[  543.929970][   T24] dvb-usb: error -19 while querying for an remote control event.
[  544.096458][   T24] m920x_read = error: -19
[  544.097617][   T10] usb 2-1: USB disconnect, device number 27
[  544.101162][   T24] dvb-usb: error -19 while querying for an remote control event.
[  544.111882][   T10] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  544.159376][T14102] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2659'.
[  544.265415][   T24] m920x_read = error: -19
[  544.273538][   T24] dvb-usb: error -19 while querying for an remote control event.
[  544.436225][   T24] m920x_read = error: -19
[  544.440641][   T24] dvb-usb: error -19 while querying for an remote control event.
[  544.470052][T14115] cgroup: No subsys list or none specified
[  544.503127][ T1211] usb 7-1: USB disconnect, device number 44
[  544.522213][T14112] FAULT_INJECTION: forcing a failure.
[  544.522213][T14112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  544.560525][T14112] CPU: 0 UID: 0 PID: 14112 Comm: syz.1.2663 Not tainted syzkaller #0 PREEMPT(full) 
[  544.560551][T14112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  544.560561][T14112] Call Trace:
[  544.560569][T14112]  <TASK>
[  544.560578][T14112]  dump_stack_lvl+0x189/0x250
[  544.560608][T14112]  ? __pfx____ratelimit+0x10/0x10
[  544.560631][T14112]  ? __pfx_dump_stack_lvl+0x10/0x10
[  544.560655][T14112]  ? __pfx__printk+0x10/0x10
[  544.560691][T14112]  should_fail_ex+0x414/0x560
[  544.560717][T14112]  _copy_to_user+0x31/0xb0
[  544.560736][T14112]  simple_read_from_buffer+0xe1/0x170
[  544.560763][T14112]  proc_fail_nth_read+0x1b3/0x220
[  544.560792][T14112]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  544.560819][T14112]  ? rw_verify_area+0x2a6/0x4d0
[  544.560836][T14112]  ? __lock_acquire+0xab9/0xd20
[  544.560852][T14112]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  544.560878][T14112]  vfs_read+0x200/0xa30
[  544.560896][T14112]  ? fdget_pos+0x247/0x320
[  544.560921][T14112]  ? __pfx___mutex_lock+0x10/0x10
[  544.560945][T14112]  ? __pfx_vfs_read+0x10/0x10
[  544.560965][T14112]  ? __fget_files+0x2a/0x420
[  544.560991][T14112]  ? __fget_files+0x3a0/0x420
[  544.561010][T14112]  ? __fget_files+0x2a/0x420
[  544.561040][T14112]  ksys_read+0x145/0x250
[  544.561057][T14112]  ? __fget_files+0x2a/0x420
[  544.561085][T14112]  ? __pfx_ksys_read+0x10/0x10
[  544.561108][T14112]  ? do_syscall_64+0xbe/0xfa0
[  544.561134][T14112]  do_syscall_64+0xfa/0xfa0
[  544.561154][T14112]  ? lockdep_hardirqs_on+0x9c/0x150
[  544.561176][T14112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.561194][T14112]  ? clear_bhb_loop+0x60/0xb0
[  544.561215][T14112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.561232][T14112] RIP: 0033:0x7f5bb318d5fc
[  544.561249][T14112] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  544.561264][T14112] RSP: 002b:00007f5bb13f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  544.561283][T14112] RAX: ffffffffffffffda RBX: 00007f5bb33c5fa0 RCX: 00007f5bb318d5fc
[  544.561296][T14112] RDX: 000000000000000f RSI: 00007f5bb13f60a0 RDI: 0000000000000007
[  544.561308][T14112] RBP: 00007f5bb13f6090 R08: 0000000000000000 R09: 0000000000000000
[  544.561319][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.561329][T14112] R13: 00007f5bb33c6038 R14: 00007f5bb33c5fa0 R15: 00007ffc74bd8ea8
[  544.561361][T14112]  </TASK>
[  544.803274][   T24] m920x_read = error: -19
[  544.811046][   T24] dvb-usb: error -19 while querying for an remote control event.
[  544.975526][   T24] m920x_read = error: -19
[  544.979916][   T24] dvb-usb: error -19 while querying for an remote control event.
[  545.077634][   T30] audit: type=1326 audit(1757431243.481:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14128 comm="syz.1.2668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bb318ebe9 code=0x0
[  545.145544][   T24] m920x_read = error: -19
[  545.149984][   T24] dvb-usb: error -19 while querying for an remote control event.
[  545.166741][ T1211] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  545.337143][ T1211] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.347522][ T1211] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  545.355744][   T43] m920x_read = error: -19
[  545.359155][ T1211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.362088][   T43] dvb-usb: error -19 while querying for an remote control event.
[  545.386199][ T1211] usb 7-1: config 0 descriptor??
[  545.403563][ T1211] pwc: Askey VC010 type 2 USB webcam detected.
[  545.515254][   T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  545.545358][ T7004] m920x_read = error: -19
[  545.549742][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  545.645245][   T24] usb 2-1: device descriptor read/64, error -71
[  545.655435][   T43] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  545.716032][ T7004] m920x_read = error: -19
[  545.720418][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  545.785300][   T43] usb 6-1: device descriptor read/64, error -71
[  545.800234][ T1211] pwc: recv_control_msg error -32 req 02 val 2b00
[  545.807624][ T1211] pwc: recv_control_msg error -32 req 02 val 2700
[  545.815478][ T1211] pwc: recv_control_msg error -32 req 02 val 2c00
[  545.834643][ T1211] pwc: recv_control_msg error -71 req 04 val 1000
[  545.842744][ T1211] pwc: recv_control_msg error -71 req 04 val 1300
[  545.866661][ T1211] pwc: recv_control_msg error -71 req 04 val 1400
[  545.873692][ T1211] pwc: recv_control_msg error -71 req 02 val 2000
[  545.885958][   T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  545.890732][ T1211] pwc: recv_control_msg error -71 req 02 val 2100
[  545.899335][ T7004] m920x_read = error: -19
[  545.904339][ T1211] pwc: recv_control_msg error -71 req 04 val 1500
[  545.906005][ T1211] pwc: recv_control_msg error -71 req 02 val 2500
[  545.924366][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  545.924857][T14142] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2673'.
[  545.945038][ T1211] pwc: recv_control_msg error -71 req 02 val 2400
[  545.952196][ T1211] pwc: recv_control_msg error -71 req 02 val 2600
[  545.959533][ T1211] pwc: recv_control_msg error -71 req 02 val 2900
[  545.972049][ T1211] pwc: recv_control_msg error -71 req 02 val 2800
[  545.983493][ T1211] pwc: recv_control_msg error -71 req 04 val 1100
[  545.992357][ T1211] pwc: recv_control_msg error -71 req 04 val 1200
[  546.001873][ T1211] pwc: Registered as video103.
[  546.013215][ T1211] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input50
[  546.058011][   T24] usb 2-1: device descriptor read/64, error -71
[  546.064502][   T43] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  546.065827][ T1211] usb 7-1: USB disconnect, device number 45
[  546.085635][ T7004] m920x_read = error: -19
[  546.090053][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  546.185921][   T24] usb usb2-port1: attempt power cycle
[  546.228753][   T43] usb 6-1: device descriptor read/64, error -71
[  546.265424][ T5986] m920x_read = error: -19
[  546.275211][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  546.343728][T14147] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2674'.
[  546.353928][   T43] usb usb6-port1: attempt power cycle
[  546.364154][T14147] picdev_read: 2 callbacks suppressed
[  546.364166][T14147] kvm: pic: non byte read
[  546.374532][T14147] kvm: pic: non byte read
[  546.445464][ T5986] m920x_read = error: -19
[  546.455338][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  546.535334][   T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  546.579497][   T24] usb 2-1: device descriptor read/8, error -71
[  546.616122][ T7004] m920x_read = error: -19
[  546.620654][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  546.705491][   T43] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  546.725528][ T5986] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[  546.733612][   T43] usb 6-1: device descriptor read/8, error -71
[  546.785355][ T7004] m920x_read = error: -19
[  546.789848][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  546.825277][   T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  546.845511][   T10] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  546.852511][   T24] usb 2-1: device descriptor read/8, error -71
[  546.885633][ T5986] usb 8-1: Using ep0 maxpacket: 8
[  546.892181][ T5986] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  546.902452][ T5986] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  546.911795][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.922784][ T5986] usb 8-1: config 0 descriptor??
[  546.936862][ T5986] gspca_main: vc032x-2.14.0 probing 046d:0892
[  546.955400][ T7004] m920x_read = error: -19
[  546.959812][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  546.968191][   T24] usb usb2-port1: unable to enumerate USB device
[  546.975714][   T43] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  546.996205][   T43] usb 6-1: device descriptor read/8, error -71
[  547.005977][   T10] usb 7-1: Using ep0 maxpacket: 32
[  547.013026][   T10] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  547.023872][   T10] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  547.035055][   T10] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  547.049370][   T10] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  547.062856][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  547.072833][   T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  547.081999][   T10] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  547.090631][   T10] usb 7-1: Product: syz
[  547.094801][   T10] usb 7-1: Manufacturer: syz
[  547.099631][   T10] usb 7-1: SerialNumber: syz
[  547.105579][   T43] usb usb6-port1: unable to enumerate USB device
[  547.107300][   T10] usb 7-1: config 0 descriptor??
[  547.121548][   T10] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  547.133573][   T10] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  547.133665][ T5986] gspca_vc032x: reg_r err -32
[  547.147016][   T43] m920x_read = error: -19
[  547.151768][   T43] dvb-usb: error -19 while querying for an remote control event.
[  547.162063][ T5986] vc032x 8-1:0.0: probe with driver vc032x failed with error -32
[  547.325309][ T5986] m920x_read = error: -19
[  547.329708][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  547.495737][ T5986] m920x_read = error: -19
[  547.500275][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  547.675601][ T5986] m920x_read = error: -19
[  547.680083][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  547.847666][ T5986] m920x_read = error: -19
[  547.852141][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  548.016175][ T5986] m920x_read = error: -19
[  548.020566][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  548.185383][   T24] m920x_read = error: -19
[  548.189803][   T24] dvb-usb: error -19 while querying for an remote control event.
[  548.355339][ T5986] m920x_read = error: -19
[  548.359737][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  548.525307][   T24] m920x_read = error: -19
[  548.531004][   T24] dvb-usb: error -19 while querying for an remote control event.
[  548.715279][   T24] m920x_read = error: -19
[  548.719677][   T24] dvb-usb: error -19 while querying for an remote control event.
[  548.773385][T14175] validate_nla: 24 callbacks suppressed
[  548.773405][T14175] netlink: 'syz.1.2682': attribute type 10 has an invalid length.
[  548.791568][T14175] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2682'.
[  548.895266][   T24] m920x_read = error: -19
[  548.899804][   T24] dvb-usb: error -19 while querying for an remote control event.
[  549.040238][T14178] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2683'.
[  549.075617][   T24] m920x_read = error: -19
[  549.080292][   T24] dvb-usb: error -19 while querying for an remote control event.
[  549.255340][   T24] m920x_read = error: -19
[  549.260417][   T24] dvb-usb: error -19 while querying for an remote control event.
[  549.425369][   T24] m920x_read = error: -19
[  549.432062][   T24] dvb-usb: error -19 while querying for an remote control event.
[  549.506519][T14191] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  549.575695][   T10] usb 7-1: USB disconnect, device number 46
[  549.581743][    C0] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  549.600115][   T10] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  549.615451][   T24] m920x_read = error: -19
[  549.619974][   T24] dvb-usb: error -19 while querying for an remote control event.
[  549.725801][ T5908] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[  549.756510][T14200] netlink: 14436 bytes leftover after parsing attributes in process `syz.6.2691'.
[  549.766640][T14200] openvswitch: netlink: Missing key (keys=40, expected=80)
[  549.795336][   T24] m920x_read = error: -19
[  549.799723][   T24] dvb-usb: error -19 while querying for an remote control event.
[  549.897991][ T5908] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  549.907360][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.919088][ T5908] usb 2-1: config 0 descriptor??
[  549.955420][ T1211] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  549.975587][   T43] m920x_read = error: -19
[  549.980050][   T43] dvb-usb: error -19 while querying for an remote control event.
[  549.995830][   T43] usb 8-1: USB disconnect, device number 50
[  550.076436][   T24] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  550.115444][ T1211] usb 6-1: device descriptor read/64, error -71
[  550.129827][ T5908] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  550.146172][ T5986] m920x_read = error: -19
[  550.150619][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  550.235391][   T24] usb 7-1: Using ep0 maxpacket: 16
[  550.242973][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  550.253379][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  550.264474][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  550.274259][   T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  550.284306][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  550.299405][   T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  550.308594][   T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  550.316833][ T5986] m920x_read = error: -19
[  550.321230][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  550.329331][   T24] usb 7-1: Manufacturer: syz
[  550.337197][   T24] usb 7-1: config 0 descriptor??
[  550.395420][ T1211] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  550.496389][ T5986] m920x_read = error: -19
[  550.500919][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  550.525506][ T1211] usb 6-1: device descriptor read/64, error -71
[  550.605317][   T24] rc_core: IR keymap rc-hauppauge not found
[  550.611358][   T24] Registered IR keymap rc-empty
[  550.620339][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.645477][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.646246][ T1211] usb usb6-port1: attempt power cycle
[  550.668957][ T5986] m920x_read = error: -19
[  550.673491][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  550.688454][   T24] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1
[  550.705399][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1/input51
[  550.721582][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.745352][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.765429][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.785401][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.805339][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.825337][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.845296][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.855291][ T5986] m920x_read = error: -19
[  550.859682][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  550.867588][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.898245][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.915426][   T10] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[  550.925362][   T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  550.948776][   T24] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  550.957981][   T24] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  551.005450][ T1211] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  551.026757][ T1211] usb 6-1: device descriptor read/8, error -71
[  551.035423][   T24] m920x_read = error: -19
[  551.040378][   T24] dvb-usb: error -19 while querying for an remote control event.
[  551.065697][   T10] usb 8-1: device descriptor read/64, error -71
[  551.084920][   T24] usb 7-1: USB disconnect, device number 47
[  551.205850][ T7004] m920x_read = error: -19
[  551.210246][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  551.295478][ T1211] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  551.315977][   T10] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[  551.324032][ T1211] usb 6-1: device descriptor read/8, error -71
[  551.375689][   T24] m920x_read = error: -19
[  551.380106][   T24] dvb-usb: error -19 while querying for an remote control event.
[  551.436186][ T1211] usb usb6-port1: unable to enumerate USB device
[  551.455301][   T10] usb 8-1: device descriptor read/64, error -71
[  551.545723][   T24] m920x_read = error: -19
[  551.550147][   T24] dvb-usb: error -19 while querying for an remote control event.
[  551.565789][   T10] usb usb8-port1: attempt power cycle
[  551.715360][   T24] m920x_read = error: -19
[  551.719955][   T24] dvb-usb: error -19 while querying for an remote control event.
[  551.885730][   T24] m920x_read = error: -19
[  551.890136][   T24] dvb-usb: error -19 while querying for an remote control event.
[  551.905336][   T10] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[  551.927000][   T10] usb 8-1: device descriptor read/8, error -71
[  552.055278][   T24] m920x_read = error: -19
[  552.059656][   T24] dvb-usb: error -19 while querying for an remote control event.
[  552.195556][   T10] usb 8-1: new high-speed USB device number 54 using dummy_hcd
[  552.225341][   T24] m920x_read = error: -19
[  552.229962][   T24] dvb-usb: error -19 while querying for an remote control event.
[  552.241179][   T10] usb 8-1: device descriptor read/8, error -71
[  552.365679][   T10] usb usb8-port1: unable to enumerate USB device
[  552.395567][   T24] m920x_read = error: -19
[  552.399953][   T24] dvb-usb: error -19 while querying for an remote control event.
[  552.575338][   T24] m920x_read = error: -19
[  552.579728][   T24] dvb-usb: error -19 while querying for an remote control event.
[  552.611440][ T5908] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  552.628941][ T5908] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  552.642689][ T5908] asix 2-1:0.0: probe with driver asix failed with error -71
[  552.653880][ T5908] usb 2-1: USB disconnect, device number 32
[  552.746175][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2701'.
[  552.759434][ T5986] m920x_read = error: -19
[  552.763863][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  552.771990][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2701'.
[  552.781632][T14225] netlink: 33 bytes leftover after parsing attributes in process `syz.5.2701'.
[  552.791655][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2701'.
[  552.800919][T14225] netlink: 33 bytes leftover after parsing attributes in process `syz.5.2701'.
[  552.809782][T14226] loop6: detected capacity change from 0 to 524287999
[  552.818201][T14226] buffer_io_error: 11 callbacks suppressed
[  552.818218][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.832571][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.840974][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.849839][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.857975][   T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  552.858803][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.919720][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.927926][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.936013][ T5986] m920x_read = error: -19
[  552.940399][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  552.949446][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.957454][T14226] ldm_validate_partition_table(): Disk read failed.
[  552.964378][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.972575][T14226] Buffer I/O error on dev loop6, logical block 0, async page read
[  552.981229][T14226] Dev loop6: unable to read RDB block 0
[  552.987524][T14226]  loop6: unable to read partition table
[  552.993368][T14226] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  553.004184][ T5881] ldm_validate_partition_table(): Disk read failed.
[  553.017116][ T5881] Dev loop6: unable to read RDB block 0
[  553.023227][ T5881]  loop6: unable to read partition table
[  553.030914][T14225] ldm_validate_partition_table(): Disk read failed.
[  553.044621][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.051470][T14225] Dev loop6: unable to read RDB block 0
[  553.056884][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.073586][T14225]  loop6: unable to read partition table
[  553.075594][   T24] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  553.090024][T14225] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  553.092423][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.115339][ T5986] m920x_read = error: -19
[  553.119878][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  553.136994][   T24] usb 7-1: config 0 descriptor??
[  553.295453][ T5986] m920x_read = error: -19
[  553.299895][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  553.302678][T14233] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2704'.
[  553.403821][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2705'.
[  553.475889][ T5986] m920x_read = error: -19
[  553.480310][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  553.561013][   T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0
[  553.569175][   T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0
[  553.577697][   T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0
[  553.584747][   T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0
[  553.591873][   T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0
[  553.603420][   T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0
[  553.613408][   T24] cypress 0003:04B4:DE61.001D: unknown main item tag 0x0
[  553.629134][   T24] cypress 0003:04B4:DE61.001D: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.6-1/input0
[  553.649873][   T24] m920x_read = error: -19
[  553.654261][   T24] dvb-usb: error -19 while querying for an remote control event.
[  553.771788][ T5908] usb 7-1: USB disconnect, device number 48
[  553.826041][   T24] m920x_read = error: -19
[  553.830516][   T24] dvb-usb: error -19 while querying for an remote control event.
[  553.880015][T14246] __nla_validate_parse: 2 callbacks suppressed
[  553.880033][T14246] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2709'.
[  553.901690][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2709'.
[  554.022592][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2712'.
[  554.025333][   T24] m920x_read = error: -19
[  554.048024][   T24] dvb-usb: error -19 while querying for an remote control event.
[  554.114718][T14261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  554.238985][   T24] m920x_read = error: -19
[  554.243925][   T24] dvb-usb: error -19 while querying for an remote control event.
[  554.392784][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2717'.
[  554.412646][T14271] binder: 14270:14271 ioctl c0306201 200000000080 returned -14
[  554.416827][ T5986] m920x_read = error: -19
[  554.438119][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  554.595472][ T5986] m920x_read = error: -19
[  554.599963][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  554.681959][T14284] binder_alloc: 14283: binder_alloc_buf, no vma
[  554.765404][ T7004] m920x_read = error: -19
[  554.769795][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  554.779781][T14286] Invalid option length (1048467) for dns_resolver key
[  554.876435][T14292] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2726'.
[  554.917038][ T5986] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[  554.945282][   T24] m920x_read = error: -19
[  554.950241][   T24] dvb-usb: error -19 while querying for an remote control event.
[  555.075558][ T5986] usb 8-1: Using ep0 maxpacket: 32
[  555.086944][ T5986] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  555.099281][ T5986] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  555.111769][ T5986] usb 8-1: config 0 interface 0 has no altsetting 0
[  555.122393][ T5986] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  555.132489][   T24] m920x_read = error: -19
[  555.137102][   T24] dvb-usb: error -19 while querying for an remote control event.
[  555.145067][ T5986] usb 8-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  555.153550][ T5986] usb 8-1: Product: syz
[  555.157799][ T5986] usb 8-1: Manufacturer: syz
[  555.162436][ T5986] usb 8-1: SerialNumber: syz
[  555.170879][ T5986] usb 8-1: config 0 descriptor??
[  555.196141][ T1211] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  555.232930][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2731'.
[  555.242586][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2731'.
[  555.254344][T14306] netlink: 33 bytes leftover after parsing attributes in process `syz.6.2731'.
[  555.268151][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2731'.
[  555.277495][T14306] netlink: 33 bytes leftover after parsing attributes in process `syz.6.2731'.
[  555.297370][   T24] m920x_read = error: -19
[  555.302790][   T24] dvb-usb: error -19 while querying for an remote control event.
[  555.322714][  T125] block nbd0: Possible stuck request ffff888025387000: control (read@0,1024B). Runtime 180 seconds
[  555.333830][  T125] block nbd0: Possible stuck request ffff8880253871c0: control (read@1024,1024B). Runtime 180 seconds
[  555.337765][T14306] loop6: detected capacity change from 0 to 524287999
[  555.344926][  T125] block nbd0: Possible stuck request ffff888025387380: control (read@2048,1024B). Runtime 180 seconds
[  555.362808][  T125] block nbd0: Possible stuck request ffff888025387540: control (read@3072,1024B). Runtime 180 seconds
[  555.378107][ T1211] usb 2-1: Using ep0 maxpacket: 8
[  555.381406][T14306] ldm_validate_partition_table(): Disk read failed.
[  555.390681][T14306] Dev loop6: unable to read RDB block 0
[  555.391203][ T1211] usb 2-1: config 148 has an invalid interface number: 46 but max is 0
[  555.396995][T14306]  loop6: unable to read partition table
[  555.418030][T14306] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  555.438409][ T1211] usb 2-1: config 148 has no interface number 0
[  555.444735][ T1211] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=30.8d
[  555.464168][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.465555][   T24] m920x_read = error: -19
[  555.478398][T14309] ldm_validate_partition_table(): Disk read failed.
[  555.494245][   T24] dvb-usb: error -19 while querying for an remote control event.
[  555.501821][T14309] Dev loop6: unable to read RDB block 0
[  555.513736][T14309]  loop6: unable to read partition table
[  555.523263][T14309] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  555.567909][ T5233] ldm_validate_partition_table(): Disk read failed.
[  555.580008][ T5233] Dev loop6: unable to read RDB block 0
[  555.586547][ T5233]  loop6: unable to read partition table
[  555.615415][ T5986] gs_usb 8-1:0.0: Configuring for 1 interfaces
[  555.659930][T14313] binder: 14312:14313 ioctl c0306201 200000000080 returned -14
[  555.668015][   T24] m920x_read = error: -19
[  555.672491][   T24] dvb-usb: error -19 while querying for an remote control event.
[  555.695304][ T1211] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state.
[  555.722003][ T1211] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  555.740789][ T1211] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design)
[  555.760703][ T1211] usb 2-1: media controller created
[  555.798734][ T1211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  555.817539][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.827902][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.845317][   T24] m920x_read = error: -19
[  555.849821][   T24] dvb-usb: error -19 while querying for an remote control event.
[  555.970670][ T1211] DVB: Unable to find symbol dib7000p_attach()
[  555.983137][ T1211] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design'
[  556.045387][   T43] m920x_read = error: -19
[  556.049934][   T43] dvb-usb: error -19 while querying for an remote control event.
[  556.063899][ T5986] gs_usb 8-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  556.075364][ T1211] rc_core: IR keymap rc-dib0700-rc5 not found
[  556.076918][ T5986] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71
[  556.099844][ T5986] usb 8-1: USB disconnect, device number 55
[  556.101883][ T1211] Registered IR keymap rc-empty
[  556.128986][ T1211] dvb-usb: could not initialize remote control.
[  556.141666][ T1211] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected.
[  556.215371][   T43] m920x_read = error: -19
[  556.219774][   T43] dvb-usb: error -19 while querying for an remote control event.
[  556.385369][   T43] m920x_read = error: -19
[  556.389798][   T43] dvb-usb: error -19 while querying for an remote control event.
[  556.445404][   T43] usb 2-1: USB disconnect, device number 33
[  556.482722][   T43] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected.
[  556.555385][ T5986] m920x_read = error: -19
[  556.559812][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  556.725382][ T5986] m920x_read = error: -19
[  556.744234][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  556.895395][   T43] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  556.925445][ T5986] m920x_read = error: -19
[  556.934721][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  557.012692][T14341] FAULT_INJECTION: forcing a failure.
[  557.012692][T14341] name failslab, interval 1, probability 0, space 0, times 0
[  557.029803][T14341] CPU: 0 UID: 0 PID: 14341 Comm: syz.6.2742 Not tainted syzkaller #0 PREEMPT(full) 
[  557.029829][T14341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  557.029840][T14341] Call Trace:
[  557.029848][T14341]  <TASK>
[  557.029857][T14341]  dump_stack_lvl+0x189/0x250
[  557.029893][T14341]  ? __pfx____ratelimit+0x10/0x10
[  557.029916][T14341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  557.029940][T14341]  ? __pfx__printk+0x10/0x10
[  557.029969][T14341]  ? __pfx___might_resched+0x10/0x10
[  557.029987][T14341]  ? fs_reclaim_acquire+0x7d/0x100
[  557.030011][T14341]  should_fail_ex+0x414/0x560
[  557.030037][T14341]  should_failslab+0xa8/0x100
[  557.030058][T14341]  kmem_cache_alloc_noprof+0x74/0x6e0
[  557.030084][T14341]  ? exc_page_fault+0xab/0x100
[  557.030103][T14341]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  557.030133][T14341]  __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  557.030169][T14341]  mmu_topup_memory_caches+0x21/0x170
[  557.030195][T14341]  kvm_mmu_load+0x9d/0x2300
[  557.030220][T14341]  ? kvm_lapic_sync_to_vapic+0x61f/0x830
[  557.030246][T14341]  ? __pfx_kvm_lapic_sync_to_vapic+0x10/0x10
[  557.030269][T14341]  ? vmx_update_cr8_intercept+0x151/0x340
[  557.030294][T14341]  vcpu_run+0x48a8/0x7020
[  557.030390][T14341]  ? __pfx_vcpu_run+0x10/0x10
[  557.030415][T14341]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  557.030442][T14341]  ? rcu_is_watching+0x15/0xb0
[  557.030467][T14341]  kvm_arch_vcpu_ioctl_run+0xfc9/0x1940
[  557.030491][T14341]  ? __mutex_trylock_common+0x153/0x260
[  557.030516][T14341]  ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940
[  557.030535][T14341]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  557.030556][T14341]  ? rcu_is_watching+0x15/0xb0
[  557.030576][T14341]  ? trace_contention_end+0x39/0x120
[  557.030597][T14341]  ? look_up_lock_class+0x74/0x170
[  557.030620][T14341]  ? register_lock_class+0x51/0x320
[  557.030644][T14341]  ? __lock_acquire+0xab9/0xd20
[  557.030695][T14341]  kvm_vcpu_ioctl+0x95c/0xe90
[  557.030718][T14341]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  557.030758][T14341]  ? __fget_files+0x2a/0x420
[  557.030785][T14341]  ? __fget_files+0x3a0/0x420
[  557.030803][T14341]  ? __fget_files+0x2a/0x420
[  557.030827][T14341]  ? bpf_lsm_file_ioctl+0x9/0x20
[  557.030852][T14341]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  557.030876][T14341]  __se_sys_ioctl+0xfc/0x170
[  557.030898][T14341]  do_syscall_64+0xfa/0xfa0
[  557.030920][T14341]  ? lockdep_hardirqs_on+0x9c/0x150
[  557.030942][T14341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.030960][T14341]  ? clear_bhb_loop+0x60/0xb0
[  557.030982][T14341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.031000][T14341] RIP: 0033:0x7fec74b8ebe9
[  557.031016][T14341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  557.031031][T14341] RSP: 002b:00007fec759d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  557.031052][T14341] RAX: ffffffffffffffda RBX: 00007fec74dc5fa0 RCX: 00007fec74b8ebe9
[  557.031065][T14341] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  557.031075][T14341] RBP: 00007fec759d4090 R08: 0000000000000000 R09: 0000000000000000
[  557.031085][T14341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  557.031095][T14341] R13: 00007fec74dc6038 R14: 00007fec74dc5fa0 R15: 00007fff5a43ae58
[  557.031125][T14341]  </TASK>
[  557.354646][   T43] usb 6-1: Using ep0 maxpacket: 32
[  557.360118][ T5986] m920x_read = error: -19
[  557.364623][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  557.394027][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  557.422914][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  557.465404][   T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  557.490959][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  557.525692][ T7004] m920x_read = error: -19
[  557.531364][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  557.544557][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  557.580072][   T43] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  557.605781][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.613838][   T43] usb 6-1: Product: syz
[  557.618253][   T43] usb 6-1: Manufacturer: syz
[  557.622946][   T43] usb 6-1: SerialNumber: syz
[  557.630620][   T43] usb 6-1: config 0 descriptor??
[  557.641756][   T43] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input53
[  557.655534][ T1211] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  557.727429][ T7004] m920x_read = error: -19
[  557.731822][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  557.809679][ T1211] usb 2-1: config 4 has no interfaces?
[  557.820454][ T1211] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=d4.13
[  557.843371][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.866587][ T1211] usb 2-1: Product: syz
[  557.870799][ T1211] usb 2-1: Manufacturer: syz
[  557.881279][ T7004] usb 6-1: USB disconnect, device number 100
[  557.901172][ T1211] usb 2-1: SerialNumber: syz
[  557.917016][ T5986] m920x_read = error: -19
[  557.921409][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  558.112991][ T5986] m920x_read = error: -19
[  558.113018][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  558.119596][ T1211] usb 2-1: USB disconnect, device number 34
[  558.267353][ T7004] m920x_read = error: -19
[  558.283218][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  558.453767][ T5986] m920x_read = error: -19
[  558.462333][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  558.645263][   T43] m920x_read = error: -19
[  558.652328][   T43] dvb-usb: error -19 while querying for an remote control event.
[  558.745523][ T5908] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  558.757192][T14389] netlink: 'syz.1.2759': attribute type 12 has an invalid length.
[  558.827731][T14396] loop2: detected capacity change from 0 to 7
[  558.840069][ T5881] Dev loop2: unable to read RDB block 7
[  558.847032][   T24] m920x_read = error: -19
[  558.852510][ T5881]  loop2: AHDI p1 p2 p3
[  558.855099][   T24] dvb-usb: error -19 while querying for an remote control event.
[  558.856801][ T5881] loop2: partition table partially beyond EOD, truncated
[  558.857469][ T5881] loop2: p1 start 1601398130 is beyond EOD, truncated
[  558.878836][ T5881] loop2: p2 start 1702059890 is beyond EOD, truncated
[  558.891728][T14396] Dev loop2: unable to read RDB block 7
[  558.898563][T14396]  loop2: AHDI p1 p2 p3
[  558.902749][T14396] loop2: partition table partially beyond EOD, truncated
[  558.910528][T14396] loop2: p1 start 1601398130 is beyond EOD, truncated
[  558.915717][ T5908] usb 6-1: Using ep0 maxpacket: 32
[  558.917482][T14396] loop2: p2 start 1702059890 is beyond EOD, truncated
[  558.929154][ T5908] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  558.949092][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.965396][   T43] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  558.977788][ T5908] usb 6-1: config 0 descriptor??
[  559.015289][   T24] m920x_read = error: -19
[  559.019723][   T24] dvb-usb: error -19 while querying for an remote control event.
[  559.125230][   T43] usb 7-1: Using ep0 maxpacket: 32
[  559.132915][   T43] usb 7-1: config 0 has an invalid interface number: 219 but max is 0
[  559.142597][   T43] usb 7-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config
[  559.162887][   T43] usb 7-1: config 0 has no interface number 0
[  559.171128][   T43] usb 7-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  559.185586][   T24] m920x_read = error: -19
[  559.190521][   T24] dvb-usb: error -19 while querying for an remote control event.
[  559.198830][   T43] usb 7-1: config 0 interface 219 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  559.214069][   T43] usb 7-1: config 0 interface 219 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  559.214655][ T5908] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  559.224294][   T43] usb 7-1: config 0 interface 219 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  559.227176][   T43] usb 7-1: New USB device found, idVendor=257a, idProduct=261f, bcdDevice= 8.ee
[  559.241959][T14403] __nla_validate_parse: 4 callbacks suppressed
[  559.241978][T14403] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2765'.
[  559.244306][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.262455][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'.
[  559.269716][   T43] usb 7-1: Product: syz
[  559.277994][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  559.292020][   T43] usb 7-1: Manufacturer: syz
[  559.307931][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  559.316351][ T5908] usb 6-1: media controller created
[  559.326605][   T43] usb 7-1: SerialNumber: syz
[  559.341676][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  559.352918][   T43] usb 7-1: config 0 descriptor??
[  559.365283][   T24] m920x_read = error: -19
[  559.369714][   T24] dvb-usb: error -19 while querying for an remote control event.
[  559.472535][ T5908] DVB: Unable to find symbol dib7000p_attach()
[  559.480050][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  559.550856][   T24] m920x_read = error: -19
[  559.566462][   T24] dvb-usb: error -19 while querying for an remote control event.
[  559.606210][ T5908] rc_core: IR keymap rc-dib0700-rc5 not found
[  559.613822][ T5908] Registered IR keymap rc-empty
[  559.643219][ T5908] dvb-usb: could not initialize remote control.
[  559.651848][ T5908] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  559.756102][   T24] m920x_read = error: -19
[  559.773562][   T24] dvb-usb: error -19 while querying for an remote control event.
[  559.899148][T14417] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2766'.
[  559.948933][ T7004] m920x_read = error: -19
[  559.985323][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  560.000509][   T43] hub 7-1:0.219: bad descriptor, ignoring hub
[  560.022777][   T43] hub 7-1:0.219: probe with driver hub failed with error -5
[  560.044112][   T43] option 7-1:0.219: GSM modem (1-port) converter detected
[  560.104221][   T43] usb 7-1: USB disconnect, device number 49
[  560.139983][ T5908] usb 6-1: USB disconnect, device number 101
[  560.154967][   T43] option 7-1:0.219: device disconnected
[  560.161617][ T7004] m920x_read = error: -19
[  560.172203][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  560.280311][ T5908] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  560.518274][T14424] loop6: detected capacity change from 0 to 524287999
[  560.526326][ T7004] m920x_read = error: -19
[  560.531974][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  560.546759][T14424] buffer_io_error: 89 callbacks suppressed
[  560.546776][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.561022][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.572340][T14433] C: renamed from team_slave_0 (while UP)
[  560.585371][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.611339][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.619376][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.628244][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.631333][T14433] netlink: 'syz.7.2771': attribute type 4 has an invalid length.
[  560.636680][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.652889][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.660949][T14433] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2771'.
[  560.673395][T14424] ldm_validate_partition_table(): Disk read failed.
[  560.682478][T14433] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  560.682804][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.698425][ T7004] m920x_read = error: -19
[  560.698451][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  560.728087][T14424] Buffer I/O error on dev loop6, logical block 0, async page read
[  560.736393][T14424] Dev loop6: unable to read RDB block 0
[  560.742588][T14424]  loop6: unable to read partition table
[  560.748947][T14424] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  560.759616][ T5881] ldm_validate_partition_table(): Disk read failed.
[  560.769215][ T5881] Dev loop6: unable to read RDB block 0
[  560.776260][ T5881]  loop6: unable to read partition table
[  560.840827][T14425] ldm_validate_partition_table(): Disk read failed.
[  560.855459][ T7004] m920x_read = error: -19
[  560.869095][T14425] Dev loop6: unable to read RDB block 0
[  560.873313][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  560.881255][T14425]  loop6: unable to read partition table
[  560.891272][T14425] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  560.911105][ T5233] ldm_validate_partition_table(): Disk read failed.
[  560.924765][ T5233] Dev loop6: unable to read RDB block 0
[  560.939203][ T5233]  loop6: unable to read partition table
[  561.048380][ T7004] m920x_read = error: -19
[  561.078749][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  561.175434][ T5954] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  561.275732][ T7004] m920x_read = error: -19
[  561.280169][ T7004] dvb-usb: error -19 while querying for an remote control event.
[  561.336579][ T5954] usb 6-1: Using ep0 maxpacket: 32
[  561.350896][ T5954] usb 6-1: config 5 has an invalid interface number: 131 but max is 2
[  561.361403][ T5954] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  561.370305][ T5954] usb 6-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  561.379227][ T5954] usb 6-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config
[  561.389596][ T5954] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 3
[  561.398985][ T1211] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[  561.406711][ T5954] usb 6-1: config 5 has no interface number 0
[  561.412868][ T5954] usb 6-1: config 5 interface 131 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  561.427186][ T5954] usb 6-1: config 5 interface 131 has no altsetting 0
[  561.438373][ T5954] usb 6-1: New USB device found, idVendor=4971, idProduct=1012, bcdDevice=30.1b
[  561.448153][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.455342][   T43] m920x_read = error: -19
[  561.457757][ T5954] usb 6-1: Product: syz
[  561.461846][   T43] dvb-usb: error -19 while querying for an remote control event.
[  561.464632][ T5954] usb 6-1: Manufacturer: syz
[  561.464650][ T5954] usb 6-1: SerialNumber: syz
[  561.585241][ T1211] usb 8-1: Using ep0 maxpacket: 8
[  561.592604][ T1211] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.602990][ T1211] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  561.605251][ T7004] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  561.612136][ T1211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.631447][ T1211] usb 8-1: config 0 descriptor??
[  561.636045][   T43] m920x_read = error: -19
[  561.640613][ T1211] gspca_main: vc032x-2.14.0 probing 046d:0892
[  561.652489][   T43] dvb-usb: error -19 while querying for an remote control event.
[  561.705844][ T5954] usb-storage 6-1:5.131: USB Mass Storage device detected
[  561.737410][ T5954] usb-storage 6-1:5.131: Quirks match for vid 4971 pid 1012: 800000
[  561.757711][T14461] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2779'.
[  561.769903][ T7004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.780965][ T7004] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  561.799107][ T5954] usb 6-1: USB disconnect, device number 102
[  561.807963][ T7004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.826617][   T43] m920x_read = error: -19
[  561.831089][   T43] dvb-usb: error -19 while querying for an remote control event.
[  561.844473][ T1211] gspca_vc032x: reg_r err -32
[  561.850204][ T7004] usb 2-1: config 0 descriptor??
[  561.867939][ T1211] vc032x 8-1:0.0: probe with driver vc032x failed with error -32
[  562.023710][T14466] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2780'.
[  562.025895][   T43] m920x_read = error: -19
[  562.043920][   T43] dvb-usb: error -19 while querying for an remote control event.
[  562.132633][T14468] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2781'.
[  562.205439][   T43] m920x_read = error: -19
[  562.209912][   T43] dvb-usb: error -19 while querying for an remote control event.
[  562.280517][T14453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.294148][T14453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.375763][   T43] m920x_read = error: -19
[  562.380176][   T43] dvb-usb: error -19 while querying for an remote control event.
[  562.546450][   T43] m920x_read = error: -19
[  562.550878][   T43] dvb-usb: error -19 while querying for an remote control event.
[  562.585449][ T1211] usb 6-1: new full-speed USB device number 103 using dummy_hcd
[  562.726471][ T5986] m920x_read = error: -19
[  562.730897][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  562.751152][ T1211] usb 6-1: unable to get BOS descriptor or descriptor too short
[  562.759871][ T1211] usb 6-1: not running at top speed; connect to a high speed hub
[  562.773297][ T1211] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd
[  562.784714][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.794915][ T1211] usb 6-1: Product: syz
[  562.812812][ T1211] usb 6-1: Manufacturer: syz
[  562.826029][ T1211] usb 6-1: SerialNumber: syz
[  562.898890][ T5986] m920x_read = error: -19
[  562.904896][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  562.912813][T14484] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2787'.
[  563.006746][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  563.013530][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  563.077166][ T5986] m920x_read = error: -19
[  563.083564][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  563.131051][T14475] netlink: 'syz.5.2784': attribute type 1 has an invalid length.
[  563.139079][T14475] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2784'.
[  563.148423][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2784'.
[  563.222432][T14493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.231997][T14493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.249707][ T1211] kalmia 6-1:106.0: probe with driver kalmia failed with error -22
[  563.266176][   T43] m920x_read = error: -19
[  563.280879][   T43] dvb-usb: error -19 while querying for an remote control event.
[  563.331224][T14498] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5)
[  563.337770][T14498] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  563.347802][T14498] vhci_hcd vhci_hcd.0: Device attached
[  563.356593][T14499] vhci_hcd: connection closed
[  563.357572][   T62] vhci_hcd: stop threads
[  563.366767][   T62] vhci_hcd: release socket
[  563.371218][   T62] vhci_hcd: disconnect device
[  563.449706][   T43] m920x_read = error: -19
[  563.455219][   T43] dvb-usb: error -19 while querying for an remote control event.
[  563.507007][   T43] usb 6-1: USB disconnect, device number 103
[  563.615316][ T5986] m920x_read = error: -19
[  563.619916][ T5986] dvb-usb: error -19 while querying for an remote control event.
[  563.785284][   T43] m920x_read = error: -19
[  563.789761][   T43] dvb-usb: error -19 while querying for an remote control event.
[  563.955435][   T43] m920x_read = error: -19
[  563.959891][   T43] dvb-usb: error -19 while querying for an remote control event.
[  564.073433][T14506] comedi comedi3: pcl730: I/O port conflict (0x8,4)
[  564.081325][T14508] loop6: detected capacity change from 0 to 524287999
[  564.093622][ T5881] ldm_validate_partition_table(): Disk read failed.
[  564.102627][ T5881] Dev loop6: unable to read RDB block 0
[  564.110163][ T5881]  loop6: unable to read partition table
[  564.120818][T14508] ldm_validate_partition_table(): Disk read failed.
[  564.125329][   T43] m920x_read = error: -19
[  564.134388][   T43] dvb-usb: error -19 while querying for an remote control event.
[  564.138187][T14508] Dev loop6: unable to read RDB block 0
[  564.150148][T14508]  loop6: unable to read partition table
[  564.156366][T14508] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  564.295342][   T43] m920x_read = error: -19
[  564.300003][   T43] dvb-usb: error -19 while querying for an remote control event.
[  564.339534][ T7004] usbhid 2-1:0.0: can't add hid device: -71
[  564.368765][ T7004] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  564.383136][ T7004] usb 2-1: USB disconnect, device number 35
[  564.469681][T14520] __nla_validate_parse: 6 callbacks suppressed
[  564.469698][T14520] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2796'.
[  564.485293][   T43] m920x_read = error: -19
[  564.489651][   T43] dvb-usb: error -19 while querying for an remote control event.
[  564.657754][   T43] m920x_read = error: -19
[  564.662172][   T43] dvb-usb: error -19 while querying for an remote control event.
[  564.701956][ T1211] usb 8-1: USB disconnect, device number 56
[  564.723848][ T5954] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  564.826988][   T43] m920x_read = error: -19
[  564.831428][   T43] dvb-usb: error -19 while querying for an remote control event.
[  564.883116][T14531] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2799'.
[  564.892672][ T5954] usb 6-1: Using ep0 maxpacket: 16
[  564.903480][ T5954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.915650][   T31] INFO: task syz.0.2064:11943 blocked for more than 143 seconds.
[  564.923398][   T31]       Not tainted syzkaller #0
[  564.932977][ T5954] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  564.942562][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  564.953842][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.962347][   T31] task:syz.0.2064      state:D stack:27208 pid:11943 tgid:11942 ppid:5859   task_flags:0x400140 flags:0x00004004
[  564.977496][ T5954] usb 6-1: config 0 descriptor??
[  564.978189][   T31] Call Trace:
[  564.987702][   T31]  <TASK>
[  564.990860][   T31]  __schedule+0x1798/0x4cc0
[  564.995725][   T31]  ? vfs_open+0x3b/0x340
[  565.000300][   T31]  ? __lock_acquire+0xab9/0xd20
[  565.005755][   T31]  ? __lock_acquire+0xab9/0xd20
[  565.010897][   T31]  ? __pfx___schedule+0x10/0x10
[  565.016045][   T43] m920x_read = error: -19
[  565.016220][   T31]  ? schedule+0x91/0x360
[  565.020713][   T43] dvb-usb: error -19 while querying for an remote control event.
[  565.024666][   T31]  schedule+0x165/0x360
[  565.039458][   T31]  schedule_preempt_disabled+0x13/0x30
[  565.045092][   T31]  __mutex_lock+0x7e6/0x1350
[  565.049837][   T31]  ? __mutex_lock+0x5bb/0x1350
[  565.054659][   T31]  ? bdev_open+0xe0/0xd30
[  565.059088][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  565.064151][   T31]  ? wait_on_inode+0xc0/0x230
[  565.068890][   T31]  ? kobject_get_unless_zero+0x161/0x1f0
[  565.074654][   T31]  ? disk_block_events+0xab/0x120
[  565.078853][ T3007] Bluetooth: (null): Invalid header checksum
[  565.079732][   T31]  ? bdev_open+0xaf/0xd30
[  565.090074][   T31]  bdev_open+0xe0/0xd30
[  565.090482][ T3007] Bluetooth: (null): Invalid header checksum
[  565.094269][   T31]  blkdev_open+0x457/0x600
[  565.094298][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  565.109731][   T31]  do_dentry_open+0x953/0x13f0
[  565.114535][   T31]  vfs_open+0x3b/0x340
[  565.120309][   T31]  ? path_openat+0x2ecd/0x3830
[  565.125173][   T31]  path_openat+0x2ee5/0x3830
[  565.129811][   T31]  ? __pfx_path_openat+0x10/0x10
[  565.136111][   T31]  do_filp_open+0x1fa/0x410
[  565.140799][   T31]  ? __lock_acquire+0xab9/0xd20
[  565.148032][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  565.153110][   T31]  ? _raw_spin_unlock+0x28/0x50
[  565.158298][   T31]  ? alloc_fd+0x64c/0x6c0
[  565.162668][   T31]  do_sys_openat2+0x121/0x1c0
[  565.167408][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  565.172747][   T31]  ? exc_page_fault+0x82/0x100
[  565.177608][   T31]  ? do_user_addr_fault+0xc8a/0x1390
[  565.182966][   T31]  __x64_sys_openat+0x138/0x170
[  565.187907][   T31]  do_syscall_64+0xfa/0xfa0
[  565.188065][   T43] m920x_read = error: -19
[  565.192432][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.199213][ T1143] Bluetooth: (null): Invalid header checksum
[  565.202074][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.208770][   T43] dvb-usb: error -19 while querying for an remote control event.
[  565.224728][   T31]  ? clear_bhb_loop+0x60/0xb0
[  565.230741][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.238439][   T31] RIP: 0033:0x7fa15b78d550
[  565.242962][   T31] RSP: 002b:00007fa15c5c3b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  565.251551][   T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa15b78d550
[  565.259748][   T31] RDX: 0000000000000000 RSI: 00007fa15c5c3c10 RDI: 00000000ffffff9c
[  565.268058][   T31] RBP: 00007fa15c5c3c10 R08: 0000000000000000 R09: 002364626e2f7665
[  565.276315][   T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  565.284425][   T31] R13: 00007fa15b9c6038 R14: 00007fa15b9c5fa0 R15: 00007fff37d5da88
[  565.292565][   T31]  </TASK>
[  565.298721][   T31] 
[  565.298721][   T31] Showing all locks held in the system:
[  565.307363][ T3007] Bluetooth: (null): Invalid header checksum
[  565.308161][   T31] 1 lock held by khungtaskd/31:
[  565.318515][   T31]  #0: ffffffff8e53c560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  565.328640][   T31] 2 locks held by getty/5624:
[  565.333411][   T31]  #0: ffff8880342d50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  565.349277][   T31]  #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  565.360242][   T31] 1 lock held by udevd/5882:
[  565.365004][   T31]  #0: ffff888143ba0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  565.376096][   T31] 5 locks held by kworker/0:8/5954:
[  565.379078][   T43] m920x_read = error: -19
[  565.381614][   T31]  #0: ffff88801e297948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  565.399031][   T31]  #1: ffffc90004f07ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  565.400538][   T43] dvb-usb: error -19 while querying for an remote control event.
[  565.411688][   T31]  #2: ffff8881457e7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  565.411737][   T31]  #3: ffff8880317d6198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  565.411777][   T31]  #4: ffff8880745f8160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  565.411841][   T31] 1 lock held by syz.0.2064/11943:
[  565.411850][   T31]  #0: ffff888143ba0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  565.411901][   T31] 1 lock held by syz.6.2799/14531:
[  565.411973][   T31] 
[  565.411980][   T31] =============================================
[  565.411980][   T31] 
[  565.412006][   T31] NMI backtrace for cpu 0
[  565.412017][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  565.412032][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  565.412041][   T31] Call Trace:
[  565.412047][   T31]  <TASK>
[  565.412054][   T31]  dump_stack_lvl+0x189/0x250
[  565.412082][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  565.412101][   T31]  ? __pfx__printk+0x10/0x10
[  565.412127][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  565.412145][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  565.412161][   T31]  ? __pfx__printk+0x10/0x10
[  565.412181][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  565.412197][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  565.412214][   T31]  watchdog+0xf60/0xfa0
[  565.412231][   T31]  ? watchdog+0x1e2/0xfa0
[  565.412249][   T31]  kthread+0x711/0x8a0
[  565.412271][   T31]  ? __pfx_watchdog+0x10/0x10
[  565.412284][   T31]  ? __pfx_kthread+0x10/0x10
[  565.412303][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  565.412321][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.412336][   T31]  ? __pfx_kthread+0x10/0x10
[  565.412353][   T31]  ret_from_fork+0x47c/0x820
[  565.412369][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  565.412389][   T31]  ? __switch_to_asm+0x39/0x70
[  565.412401][   T31]  ? __switch_to_asm+0x33/0x70
[  565.412413][   T31]  ? __pfx_kthread+0x10/0x10
[  565.412431][   T31]  ret_from_fork_asm+0x1a/0x30
[  565.412460][   T31]  </TASK>
[  565.412510][   T31] Sending NMI from CPU 0 to CPUs 1:
[  565.412537][    C1] NMI backtrace for cpu 1
[  565.412551][    C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) 
[  565.412568][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  565.412579][    C1] Workqueue: events dvb_usb_read_remote_control
[  565.412598][    C1] RIP: 0010:__lock_acquire+0x50c/0xd20
[  565.412615][    C1] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 54 ec 50 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 30 93 8f 93 eb 40 83 3d bb 7b
[  565.412628][    C1] RSP: 0018:ffffc90000a083c8 EFLAGS: 00000007
[  565.412641][    C1] RAX: 0000000000000b90 RBX: 0000000000000002 RCX: 0000000000062b39
[  565.412652][    C1] RDX: 0000000000000003 RSI: 0000000000002000 RDI: ffff8880206e9e40
[  565.412663][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8173fd35
[  565.412673][    C1] R10: ffffc90000a08618 R11: ffffffff81ac7470 R12: 0000000000000003
[  565.412704][    C1] R13: 0000000000000001 R14: ffff8880206ea9e8 R15: ffff8880206ea9e0
[  565.412716][    C1] FS:  0000000000000000(0000) GS:ffff8881258b3000(0000) knlGS:0000000000000000
[  565.412729][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  565.412746][    C1] CR2: 000000110c3c5a7c CR3: 000000000e338000 CR4: 00000000003526f0
[  565.412761][    C1] Call Trace:
[  565.412767][    C1]  <IRQ>
[  565.412777][    C1]  ? unwind_next_frame+0xa5/0x2390
[  565.412797][    C1]  lock_acquire+0x120/0x360
[  565.412812][    C1]  ? unwind_next_frame+0xa5/0x2390
[  565.412832][    C1]  ? unwind_next_frame+0xa5/0x2390
[  565.412849][    C1]  ? worker_thread+0x8a0/0xda0
[  565.412866][    C1]  ? unwind_next_frame+0xa5/0x2390
[  565.412883][    C1]  unwind_next_frame+0xc2/0x2390
[  565.412900][    C1]  ? unwind_next_frame+0xa5/0x2390
[  565.412918][    C1]  ? unwind_next_frame+0xa5/0x2390
[  565.412937][    C1]  ? process_scheduled_works+0xae1/0x17b0
[  565.412956][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  565.412976][    C1]  arch_stack_walk+0x11c/0x150
[  565.412997][    C1]  ? worker_thread+0x8a0/0xda0
[  565.413014][    C1]  stack_trace_save+0x9c/0xe0
[  565.413032][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  565.413051][    C1]  ? stack_trace_save+0x9c/0xe0
[  565.413071][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  565.413091][    C1]  ? stack_depot_save_flags+0x40/0x860
[  565.413109][    C1]  kasan_save_track+0x3e/0x80
[  565.413123][    C1]  ? kasan_save_track+0x3e/0x80
[  565.413136][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  565.413150][    C1]  ? kmem_cache_alloc_node_noprof+0x433/0x710
[  565.413165][    C1]  ? kmalloc_reserve+0xbd/0x290
[  565.413184][    C1]  ? __alloc_skb+0x142/0x2d0
[  565.413203][    C1]  ? h5_link_control+0x57/0xe0
[  565.413221][    C1]  ? h5_timed_event+0x120/0x620
[  565.413239][    C1]  ? call_timer_fn+0x17b/0x5f0
[  565.413258][    C1]  ? __run_timer_base+0x61a/0x860
[  565.413277][    C1]  ? run_timer_softirq+0xb7/0x180
[  565.413290][    C1]  ? handle_softirqs+0x286/0x870
[  565.413306][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  565.413321][    C1]  ? irq_exit_rcu+0x9/0x30
[  565.413336][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  565.413355][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  565.413371][    C1]  ? vprintk_emit+0x49d/0x590
[  565.413388][    C1]  ? _printk+0xcf/0x120
[  565.413405][    C1]  ? dvb_usb_read_remote_control+0x13e/0x1a0
[  565.413420][    C1]  ? process_scheduled_works+0xae1/0x17b0
[  565.413436][    C1]  ? worker_thread+0x8a0/0xda0
[  565.413466][    C1]  __kasan_slab_alloc+0x6c/0x80
[  565.413483][    C1]  kmem_cache_alloc_node_noprof+0x433/0x710
[  565.413498][    C1]  ? kmalloc_reserve+0xbd/0x290
[  565.413516][    C1]  ? rcu_is_watching+0x15/0xb0
[  565.413535][    C1]  kmalloc_reserve+0xbd/0x290
[  565.413556][    C1]  __alloc_skb+0x142/0x2d0
[  565.413575][    C1]  h5_link_control+0x57/0xe0
[  565.413594][    C1]  h5_timed_event+0x120/0x620
[  565.413615][    C1]  ? call_timer_fn+0xbe/0x5f0
[  565.413630][    C1]  ? call_timer_fn+0xbe/0x5f0
[  565.413645][    C1]  ? __pfx_h5_timed_event+0x10/0x10
[  565.413668][    C1]  call_timer_fn+0x17b/0x5f0
[  565.413682][    C1]  ? __pfx_h5_timed_event+0x10/0x10
[  565.413701][    C1]  ? call_timer_fn+0xbe/0x5f0
[  565.413715][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  565.413733][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  565.413757][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.413776][    C1]  ? __pfx_h5_timed_event+0x10/0x10
[  565.413795][    C1]  __run_timer_base+0x61a/0x860
[  565.413815][    C1]  ? ktime_get+0x3e/0x1f0
[  565.413838][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  565.413857][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  565.413882][    C1]  run_timer_softirq+0xb7/0x180
[  565.413898][    C1]  handle_softirqs+0x286/0x870
[  565.413916][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  565.413934][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  565.413952][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  565.413973][    C1]  __irq_exit_rcu+0xca/0x1f0
[  565.413988][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  565.414008][    C1]  irq_exit_rcu+0x9/0x30
[  565.414024][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  565.414044][    C1]  </IRQ>
[  565.414049][    C1]  <TASK>
[  565.414055][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  565.414071][    C1] RIP: 0010:vprintk_emit+0x49d/0x590
[  565.414088][    C1] Code: 0f 84 34 ff ff ff e8 52 99 1f 00 fb eb 44 e8 4a 99 1f 00 e8 45 3f e9 09 4d 85 f6 74 94 e8 3b 99 1f 00 fb 48 c7 c7 80 05 53 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 6b 3b
[  565.414101][    C1] RSP: 0018:ffffc90000b37800 EFLAGS: 00000293
[  565.414114][    C1] RAX: ffffffff81a062d5 RBX: ffffffff81a0612e RCX: ffff8880206e9e40
[  565.414126][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e530580
[  565.414136][    C1] RBP: ffffc90000b37910 R08: ffffffff8fe50637 R09: 1ffffffff1fca0c6
[  565.414148][    C1] R10: dffffc0000000000 R11: fffffbfff1fca0c7 R12: 0000000000000000
[  565.414161][    C1] R13: 000000000000003e R14: 0000000000000200 R15: 1ffff92000166f04
[  565.414174][    C1]  ? vprintk_emit+0x2ee/0x590
[  565.414191][    C1]  ? vprintk_emit+0x495/0x590
[  565.414212][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  565.414237][    C1]  _printk+0xcf/0x120
[  565.414254][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.414274][    C1]  ? __pfx__printk+0x10/0x10
[  565.414297][    C1]  ? m920x_rc_core_query+0x43c/0x540
[  565.414315][    C1]  dvb_usb_read_remote_control+0x13e/0x1a0
[  565.414331][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  565.414348][    C1]  process_scheduled_works+0xae1/0x17b0
[  565.414376][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  565.414399][    C1]  worker_thread+0x8a0/0xda0
[  565.414426][    C1]  kthread+0x711/0x8a0
[  565.414447][    C1]  ? __pfx_worker_thread+0x10/0x10
[  565.414463][    C1]  ? __pfx_kthread+0x10/0x10
[  565.414482][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  565.414499][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.414516][    C1]  ? __pfx_kthread+0x10/0x10
[  565.414535][    C1]  ret_from_fork+0x47c/0x820
[  565.414552][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  565.414573][    C1]  ? __switch_to_asm+0x39/0x70
[  565.414587][    C1]  ? __switch_to_asm+0x33/0x70
[  565.414601][    C1]  ? __pfx_kthread+0x10/0x10
[  565.414620][    C1]  ret_from_fork_asm+0x1a/0x30
[  565.414641][    C1]  </TASK>
[  565.425522][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  565.425541][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  565.425562][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  565.425574][   T31] Call Trace:
[  565.425582][   T31]  <TASK>
[  565.425590][   T31]  dump_stack_lvl+0x99/0x250
[  565.425623][   T31]  ? __asan_memcpy+0x40/0x70
[  565.425649][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  565.425674][   T31]  ? __pfx__printk+0x10/0x10
[  565.425709][   T31]  vpanic+0x237/0x6d0
[  565.425730][   T31]  ? __pfx_vpanic+0x10/0x10
[  565.425750][   T31]  ? preempt_schedule_common+0x83/0xd0
[  565.425779][   T31]  panic+0xb9/0xc0
[  565.425798][   T31]  ? __pfx_panic+0x10/0x10
[  565.425819][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  565.425846][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  565.425868][   T31]  watchdog+0xf9f/0xfa0
[  565.425892][   T31]  ? watchdog+0x1e2/0xfa0
[  565.425915][   T31]  kthread+0x711/0x8a0
[  565.425942][   T31]  ? __pfx_watchdog+0x10/0x10
[  565.425958][   T31]  ? __pfx_kthread+0x10/0x10
[  565.425983][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  565.426011][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.426033][   T31]  ? __pfx_kthread+0x10/0x10
[  565.426056][   T31]  ret_from_fork+0x47c/0x820
[  565.426079][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  565.426106][   T31]  ? __switch_to_asm+0x39/0x70
[  565.426123][   T31]  ? __switch_to_asm+0x33/0x70
[  565.426139][   T31]  ? __pfx_kthread+0x10/0x10
[  565.426162][   T31]  ret_from_fork_asm+0x1a/0x30
[  565.426196][   T31]  </TASK>
[  565.431939][   T31] Kernel Offset: disabled