last executing test programs:

5m3.495252963s ago: executing program 2 (id=211):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x5608, 0x3)
r1 = syz_open_dev$sg(&(0x7f0000000280), 0xa5b, 0x10000)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x50)
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
syz_emit_ethernet(0xd0, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000805020217bfebe9840ee6aa63ea5502b0473c5ecb7a96e921d940abad73f483c755debdad1de62ac210e519ab4f3c424f93c7f86365dd6ee75562377f63d2628a80f642fc9d1f1ebc76dc4e5fea3b8c66974df12689ee19a1131f5e15b0533e884dbee8dbacd3d8447942d0bd678c465c46c082296b6cfce7836fb4fc049f3f7aa7e80828a2cdedeffd591b4b881c8aa0b723815606198a474fce620862b3ea4ff4871a8f5d20819326a54c8ca97f938d988204e33e3712530d50bc551e40937ef1966a"], 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0x4cf4, 0x3010, 0x3, 0xac}, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc07e, 0x200, 0x2, 0xc1})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x400, 0x400, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x17, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r2}, 0x38)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="0828bdbf8aec45916800330042"], 0x2c}, 0x1, 0x0, 0x0, 0x24005050}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYRESOCT=r8], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

5m3.016184484s ago: executing program 2 (id=214):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x12, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @timestamp={0xd, 0x0, 0x0, 0x1, 0x8, 0x2, 0xeff, 0x4}}}, 0xfdef)

5m2.77562848s ago: executing program 2 (id=215):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRES16=r2], 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_usb_connect(0x3, 0xd57, &(0x7f0000001100)=ANY=[@ANYRESOCT, @ANYBLOB="b6673fa45ea0805e56f859f80226d72c8f63816514f413d818491ebb6a7cadb997c0530c9ef34ad439049a6ae58477eb562e792274153cdbd4070e0b2bf16f20e1898c1259ca96a2ed1a0505163bce2fd889cc6f97ed95fc34b641b7bc55f45d28229c589d900b35cd6b8baab8160beb830d4aa98e1b0da12f94880aac3a6acb5862e6bf0fe52f3eb8db8cd1da506ed6ee225636d824f7bb28141228f9f16ba5809f78291f1b2c53e0b8cc43b08c1e1581d605f523287b6f1e51142e041222594803055fc0608f378f60a812792fe678ad1dad18e74a3c6feb031a5e8301c09b2d9d33d7156b186d0837355520c63f7e142b07df6b81f7897b9135e086fc54f01bda7878c141da0a1ac7e47b84b97822e4cca3508f3e207712f1dae51d75bc065e479445d524f6ccf83e09807ba64320b554a8b5b74d57f65e7fe5dac4e8d09589703b69db9db145cfb8d6324797601ed294419487b8a12a964157bc9eeaa855b8e91a02630687e0c8fb7133120180c3d85153a79a330689c4af93884c86f45c398d70a5eec9990ff0a758efcc33f2dbc09f69f2a9e6db0ec59cafd046af2a521aaf0eff0eed0f2ec570159a5db450c798ed03f0d2c93372600e18c63a835532d050ccf78e182ec1b25ba25c825c5582b055f99dabacc888dcf87c1458226d763a6f8c76a5d7b4bfaf3b325dbd4a83bfe46509acd028ce7f9a0c0b132abe8de173c77b4084e948c3b38939e10da10b026811f9bdf86bb42c386e54af1ef0b65fcef71e12997d7501a9178a81dd0ed80719b04d7107a7a1227b90264c717bd7e298694c6663fbc0bbe9ed6221b4eace9200cb50ec6ccfd997564e3f9b31f5fc17851239a0350817f722ef3a59e2751638b93a4f2ef776df9f29e7b7dbafc0ba18832b5ef29be407408d5e1a790dc4724b8ab3afe5bb2aa56e17feb383e13c54d3644cb1c3bc3f89c928caa1c50b15df03dbe61fa5eca3e944e40627d1f0521278ea3445a181defe01deecb8d0dd466ed8401afa5b129bba5d553b654e96ec28ade496140983dbeb806469c95765c7f85b9991a5659a9d93ddd4c1642c4f29ef035f5c8e29c8fc7baf376750bc9f49d30eb779bd9e69ff596714c7b73ef330fb54066e71ba1e88a2448de080cede0468647d7c10065dd5ec6005c3760e829da906a54d8863dd2015a959b1e64613b0f9eb0ea048b7e85b843b4d1fcee81e09dbe96d7844122d46d9f35f3acac354aa18e1e42962c9df557f2ae9fcd558cf9e7c747f4d7f2453ed42d7de33673382f2e16f6d2ce11540f3db65bf7238df61dd59fcbbc51d8a826c707426ed31fa1b415a2767a6e1387c5d691f0a7f873fafb46b97edf5e982ac7484b24056393ad37016eaca3edce0d48867c2b172740556d1a2a865b0c0e825ababaa05ad2a318288c8e84c4e88bdef5fe9b01d133910068f19130ba790b452aacb584de95bc1e09ff187f0624c61f2fc6fdcbd502d8a3ff47ca45f83704cb797c00bc2b623399b49b3aba9ff0b1d66e6107f3c0af5d9f04b7aa3d409f2b6de12959c9c38213458065d8d6baefa588bac9fb0b665c41005a0916db389e0cca1301e37c58600db892a0c44fb66363c7de2731261b3eae8b40b0ae6d8033bfb4654562941737eb266a8a69625cdbf86ccf40fbe670480d9ae59d579d9b992451000afc5532194edc9306f5ac70cb28a595b03c7c2668962f01759df3aa146164093558c0e44d969b5c6ec24d13c24e0f98b14ad99f731e9fa8d889916283077c5dbc8f421cbeb81cac91c2d5c14957b13ca19c2a9b8300b6ed75b2c35fe1145fd7828117bbed94525e593f5f92b4c7d583ceeaf5f75bb4b14f318dcbc3603ce3ff1fd4ec875200bd0aecdbcbf59df83e772f516462705ba26c3f69841be088ef8516774e806615ba0e9a71334796f8d5371ef6a5d0064705e4809bceaf9d8c255075bd71706216459d9af48e670284accfa9833ff7dc5f40c857e12b26d2054c4202601f2e281c8ed1d708763e90999d133b45bedb882005010ae4be3ae319ca7e19e696f4d4b9389a745e41a21717aa0943cfce4210ab3f6a51adcd30c1fe0d1334f63018d2ade0c08f93d089c6a256bc0bd3e89e49da808313b6c71506178cd3b63f2e1002ab3dcdcfdf6c6f73d716aa04188675aaa4d5e24c5d8f37a9f17e8843e40b0dab34b4dc8fec3d317368da36797339002fe89f9917c80ebe3aef8f1dcee2f0699af8ebc2adde31a9816d756a6b4aec03c7b77dc7357336c7f42042f931cfbc371598743efac43e6ca7cf7eee1018488221768ebbafcb3bbc52ec1371eca3d54b9c145104fd0fa1e375acbbec5e3182744906159d57d0fcc57bce0e18d065ae922b7603ebf302812be8b873bd59f630be8bb721467c14491559fe7ab67cf50930eecda07ad9e19fadd07bc48479154cf345e50341a15f86efaed12abbecc0182e5fc94dd02ea16430a489cc24545b116eb75deea16efd2404498b07ac2e9ffb207970350aec7613a30d72d6ddcf9caf761d9d90db256d6af593c4e71196594aafc47747ece7f8de5a504f973ec4b01a6393ca363a6a83864192d7721f8f4a6786a6bb44fe6b54ebd10c3a784058a88263783aa1c45c4f30b4b10dbb31e9bd67aacbe4540f9a0b34702fb55ce4956c6b3f37cc75e9e1be241f80f797017f37c4361673d4d7eaff6de074286fe26ce29b20f04d638282c8c3022059abcbc14ab8e4750611026923c69abdaa452d7a34c82efdddd23355772e61a4d83d8a34a886a6d435b5bbc7bf5be00e2f3589bd12d51f87e4b23106a8813d29f5cc3a41ea95af198b829e363fb689645ba0d44f1cb7e48da09195c159c84645f0dbce946389398b462fc5a9d52bb49dd69e42e1ed6b73508e713fffaab0f6bcd7f0f0b46691842f56381529670f820d4dce3ae154ab5b4af3d1999ab52990486d62cc34f4c8ed01849ab5ce4b1d5cf3f9938de377d8a151274e58b52279e1e8890e2e7f86b8951eb5f86193b8beb49bc7a7cf4a6033024fa1c6905d1932ee71ae4d90c8906a0663fc9905d62eef97886b3e1074a847e42ea61cecafe9bd98c003463ed55d4c3619ec000160b462547f95b41716bd4e709bf2cd5675afebcabaf09376fd366bddc7620ccd0783e3c62123b65da28d2aa81d52e16576f36bbecc21a1222d825e6123d8f9af30b88bf6e9d5e22a6bd46eeeb52f28ea7f3305225772647139fdbee35a818c84984275b0fec9ae25c4c51214f0ac8cabd9f2ea75b3089d1b37fb1e5a4100f95b118f488162816c6a160159d7793297e964a046be533809bafaf982fb2488c4004b0ef5de2a0481b7274663804af02609a2e24f56d7fb95b22deea8422196322adec8c58764cf56ddcb2efcc632af911ddf0eae427982e94e18950ff779878ebe892b73932e08dd0250d3040dd0aa2703896c70827f0a7acd5adc3eeeaf63a478418bcab9c33843aed757c0c460cba06c40a17923522ad7adc47e581a54fff26751ba101b8017e528d35865a3aa4d5bfe8b2ba374cdc825258576b3412bf23adc54d4e3efe73c040e14c8a35ebe976b7c7803caac4085a1b36524b8e3e4d631920e45cdc2cc9cafeeb5f21cbcb13cc4d20bb6b42a892c43e2de4b6be64ab658546b35d2f8a4e8924a2e0d0aa64ef3320ff392cc62873ebbae54aba063630bd0de292b39ab0a040c48d7b2ee10abb62e855a03453bcef5d3261ab08feed66ab5dfdecea6ed3d764e779f996208d0a2c621c58fbf825f55c01b445cb32c1c6ab4ba74de80bb8037bdcaa2c3e05aeb5b212963b2bbbbf090d501f729c005826b5ff54e96c9647c02886e45338d8015edcc699abb7da332d166b3258fecdf8a693d4414ff5614eb09fa120e0770a7bc2b804f80849891b9cdb8adc94d6ed9a04343321d7ab32bdffbd8a9ddcd6ae1f748dedac6127da3e32d6ad95b60fecd3ace98dc30da583a42049cb860b39554d6b22cb731fa0088c360139d1511dfe41ece09cc65ef8ce54e4f89f66008f379493c1bdf47d6e4af1a461abfcc8c7e3e8f38a272b88f99a64869592782b38a55928be640012e4d812d7e75363696964892284ac6d7cfc434057d2b97eb3cc5709b63169fc2c94459e5ca817672bde3a309c9fdd7b10e112203bbbfd61c9e342c6eb444296abb8ce3e399f2b8b435cf14e3bf5b6c286980d5c08247fc586aaa0b05a87502e79dfda16001c4b65ced85af165818ab226032d27289af31e222561f8f1b770c52b341cf97c45812a71dfeea2f4ada196af427c69a96d00980cd4b3f83d746dcae9e0d22265ab933860cbc0a55abb1106680cc30ec36cc32311c256f98eb2ae97dba0daa6519a26126c8ddfa44c9197e7152059090a898e6f58ac58a217abc94e809544aad73651f6d235a1f7b740860b42bb6cbeb2e442f887fdb2cc5eab51a76733bea3bea2cce4c4b976f2bd41df485def11a1dcd5d2b3853435775670a468d8bea4d60595ff9e347231026f3b771c5a5b1e9428804bf837d6432a64bd9f17a8d709850bf6a0471bd0197283f826d44946686e7ffd2ca6ba2466acb0244b57f7da54fdb93a862ace8497075cb8843d18e7b2b17ae89644fbef65641ec89de3ae1e282383294e39e955e727a33c5fbeae36ed207558efad69768da4550744dcc26a018577fa8d72350d2ddaad3cc956368027934bec8fe67039cc1f812055bdbd423ff0252f9f1c21dfbbfc8d63f3fe8d3cee8b45f3bb068a7608a15d5189a0309e3cf6e49565234546465cd64bcda1f9b253446862d32ecd80541584a5ece7321dfa9f94607af80874d15eb6ec6f5f4cead7deec8928d81e1906e11488b4ffe9657b48a215a724d183762158f3360260a71388cea4fb002d6c06c5c32c2ff58ba54dc2f6d47d13bf1bbe36b48be82710423b901b9e6fcc80c12a4131e7f839b821594056d26195101eae88305c91c7543a1aaccf73b939f7268d4d38c5b4b1d15e860e5a924fc223351f0204fc43aec4c13f64de808b181c2b1bd26ce6d30b777c7526bfa0e433095ac4c9990cc9ca75d0c60aaaf6bf131dd6bd8761fe6b4236109628af96515ebecb2b31a00cd37cc0ea69688b194dc14282d7acb4fd281e32a9366bd0c61e2de57919fd4ffee839e2ad07e563e42e71f7f83e84d14315b681ccd5b8effc9a34f98d25afd196ab55f4f62cbd0c58838cbb5e6d601064834aff27912979139c9465fdbe5373ac6fc920426e86d1318500d129268dcc2141b698a451ebbf1f9bce35ce63be054a3872b0f763ffa738cc051171e71de205324f5acfe6fa32e8823385f7b4e88211305628cac335162986e7c9469605f9d5c46a86f8111f41cf12edab2829fd89b0e20e0df0f3ae8fa58a8798665f83bfa314ec86ce464a5b7fc8a6e9359e9fcb93ba1c52e0ebf423eb479f586f0775ede464c1a4cacd804430218e97b5dd1940e63c832ae8c2111045da4c4e243049f93eef819be90eec92d952361729aa7be913bcd75520caabc4bf7488a3731d6e0494dbaaa3e4337fdff057637e24d3ecc09b9a4b36a95f20a47fe20b6dc6ada7cf2753689734e652ecab75a46b765bfac403621087eeb2d61c3519260a6e9f1ca4fd4da0675c38531b3654ca471886fcd99ac23b69ebe8ba4d934d684e89e4e863f2326a90ab96f85f2231d579e3d09d0951657f3a32aed2835bc0a14c8cd9c970361019bba412664bbd4d576b3f67eef82fd825119a81e0c33ccf3f5ab2edec2ab9a56db45bb3e9820cb94aa3569d140ea7cb252fc25e62e9ca4b48681376cf86c4cd723eab"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})

5m0.671515704s ago: executing program 2 (id=228):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000f70000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x68, 0x10, 0x10, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0x6, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r11, r11, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
r12 = socket$unix(0x1, 0x1, 0x0)
writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000440)="0d2e61e3d4a6135b47c987f039d7bfd6d3d84e8b2ff183c80b4926d4835863d2e7111189c5f43cad1bee180ea17b2616a9323f85fa67a70764c42016335ef0684ef9379e60e3654011c8b74680f79cbc2dfbec012d59bb279670b2e2b3a33be72fe6c7dfa257b554d0c240a22b68935e6eb1051580bb77784dc48fc06bbadbcb9e841ffc557424e9179c11ec07431ad64a9116cfba23c1cf1f5642f6d666cbb9", 0xa0}, {&(0x7f0000000500)="e78fa165e2237a1ccbf86fa4cf6123c7d6d39f3288e635255d120483c6556e60dbee", 0x22}, {&(0x7f0000000540)}, {&(0x7f0000000640)="1b7f0cb7ce700cd2582fd1c833ae954c6052a16b526a573a68edf8f9e2a02ac1e2c1b27c5b0ac3e87d0cd06fc555885aabd336fbe35530c52136cec33f4da6f7fc93a3d393894c420e588660949888b2c8d2d7189f430da10b601b729f1cdcc5a3319d4af8075d99093c3bbc0e5a15de2b46ec0cf212e482291d78aaba71eed069", 0x81}, {&(0x7f0000000700)="49796b363527e4db605b503a7d5c87cc65ed2a094eeb66dff0d38937f5cf7fb7156fdb732c3698cbe4376d4eedfe9bc2054210f42255d437616515adc5e4d68de995c3634d4cf2a2828c8517dfb01910b8af078e98be66681d50d93aacba80822230b366a337e950e09244e603bd56c4812b5d4af1d556a280ac7b2d2376c9468c9a2096669f83bc966c6b1d3b67658ca6a36caaba7be32cbd181e12e79ec94676ea67066e603c63022fd1ba4a19", 0xae}], 0x5)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

4m59.759740237s ago: executing program 2 (id=234):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2010, r0, 0x44e34000)
ftruncate(r0, 0x5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xfe5, &(0x7f0000001600)=""/4069, 0x40f00, 0x41}, 0x94)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="280000000000000029000000040000000001d70300000000040106c204000000000000000000000018"], 0x40}, 0x0)

4m59.569913338s ago: executing program 2 (id=235):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000000000180000000000000029000000370000006400000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000290000bb2400"], 0x80}, 0x0)

4m59.116281969s ago: executing program 32 (id=235):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000000000180000000000000029000000370000006400000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000290000bb2400"], 0x80}, 0x0)

11.667102432s ago: executing program 0 (id=1684):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000000000)=""/149, 0x95}, {0x0, 0xfffffffffffffdd7}, {0x0}, {0x0}, {&(0x7f0000004040)=""/143, 0x8f}], 0x5}, 0x9}], 0x1, 0x40002042, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0) (async)
sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0xffe3, 0x0}}], 0x400005c, 0x2400c8a0)

11.324101669s ago: executing program 0 (id=1686):
socket(0x2a, 0x803, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f8001324030602060304070300"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
socket(0x2, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
r9 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x1)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x10, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r11)

8.685952977s ago: executing program 0 (id=1690):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
unshare(0x62040200)
unshare(0x20000000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) (async, rerun: 32)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (rerun: 32)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r2 = socket$inet6(0xa, 0x2, 0x5) (rerun: 32)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @mcast2, 0x80}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x0, 0x0) (async)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r4, &(0x7f00000002c0)=ANY=[], 0x33) (async)
sendfile(r4, r3, 0x0, 0x10000) (async, rerun: 64)
connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async, rerun: 64)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x101000, 0x44)
syz_open_dev$hiddev(0x0, 0x4, 0x20000)
syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000b927d2870000000000"], 0x0}, 0x0) (async, rerun: 64)
syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000300)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x2})

7.899696034s ago: executing program 5 (id=1691):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x5608, 0x3)
r1 = syz_open_dev$sg(&(0x7f0000000280), 0xa5b, 0x10000)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x50)
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
syz_emit_ethernet(0xd0, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000805020217bfebe9840ee6aa63ea5502b0473c5ecb7a96e921d940abad73f483c755debdad1de62ac210e519ab4f3c424f93c7f86365dd6ee75562377f63d2628a80f642fc9d1f1ebc76dc4e5fea3b8c66974df12689ee19a1131f5e15b0533e884dbee8dbacd3d8447942d0bd678c465c46c082296b6cfce7836fb4fc049f3f7aa7e80828a2cdedeffd591b4b881c8aa0b723815606198a474fce620862b3ea4ff4871a8f5d20819326a54c8ca97f938d988204e33e3712530d50bc551e40937ef1966a"], 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0x4cf4, 0x3010, 0x3, 0xac}, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc07e, 0x200, 0x2, 0xc1})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x400, 0x400, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x17, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r2}, 0x38)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="0828bdbf8aec45916800330042"], 0x2c}, 0x1, 0x0, 0x0, 0x24005050}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

7.64630186s ago: executing program 3 (id=1692):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c009900050000006d00000008005700ffffff7f080027000200000005001801300000000800a00080000000050019010700000008002600cc030000050019010f0000000800570000020000080057005a8e00000800570010000000"], 0x78}, 0x1, 0x0, 0x0, 0x4848}, 0x8000) (async, rerun: 32)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0)
close(r5) (async, rerun: 64)
r6 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 64)
syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) (async)
setreuid(0xffffffffffffffff, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)=ANY=[@ANYBLOB="780000001600010027bd7000ffdbdf250a3888ff", @ANYRES32, @ANYBLOB="08000900060000001400010000000000000000000000000000000001"], 0x78}, 0x1, 0xba01, 0x0, 0x44045}, 0x4048)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
r8 = io_uring_setup(0x8cc, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x200008, 0x372})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50)
io_uring_enter(r8, 0x2219, 0x7721, 0x33, 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x9, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480b1}, 0x6008000) (async, rerun: 32)
r11 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x800) (async)
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000140)={0xb0000018})

7.222135661s ago: executing program 5 (id=1694):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_open_dev$ttys(0xc, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x4)
unshare(0x6e000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0)
inotify_init1(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
r4 = gettid()
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0)

7.151469808s ago: executing program 3 (id=1696):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
mprotect(&(0x7f000057d000/0x2000)=nil, 0x2000, 0x4)
close(0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01f4000005000000fd09", @ANYBLOB='\x00'/15, @ANYRES32=<r4=>0x0, @ANYRES32=<r5=>0xffffffffffffffff, @ANYBLOB='\x00'/14], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x5a, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r3, @ANYRESHEX, @ANYRES32=r5, @ANYRESHEX=r4, @ANYRES8], 0x14}, 0x1, 0x0, 0x0, 0x40448d3}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00'})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003001000", 0x10}], 0x2)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800)
syz_usb_connect$uac1(0x0, 0x9f, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x808, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x6, 0xc0, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x26}, [@selector_unit={0xa, 0x24, 0x5, 0x4, 0x4, "9f3580c4e6"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x6, 0x3, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x4, 0x1, [0x2], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x46, 0xe6, 0xf7, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x3, 0x9}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x3, 0x0, 0xd4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x6, 0x5, {0x7, 0x25, 0x1, 0xc, 0xf2, 0x1}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})

6.979906712s ago: executing program 4 (id=1697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0)

6.742877195s ago: executing program 4 (id=1699):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40800, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0xfffffffffffffffc, 0x2a, 0xb0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001080)="bb2ebe55ae62", 0x0, 0x1, 0x34, 0x22, 0x0})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={"f03b08f4", 0x1, 0xe5, 0x8, 0x6, 0x5, "24aa35e3a3375bb2e30296b9eb5a3f", "0a1a5e47", "0db63dc1", "8509d2ae", ["38a8c5e0c2c366bff49aa214", "666dba761ec05291e1f00833", "346a131536842685d5057d88", "12df4d32c71e2f1066e0b1ff"]})
syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0xd, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES16], 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = eventfd2(0x2, 0x801)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r9})
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x0, r9, 0x15})
read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0xffffff8f)

6.414877605s ago: executing program 0 (id=1700):
socket(0x2a, 0x803, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x8480, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f8001324030602060304070300"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
socket(0x2, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
r9 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x1)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x10, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r11)

5.119876902s ago: executing program 5 (id=1703):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0xfffffffe, 0xfffffffd, 0xfffffffe}, {0x9, 0x3}, {0x1, 0x0, 0x30000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100, 0x2, 0x1})
pipe(0x0)

4.860008313s ago: executing program 5 (id=1704):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x5608, 0x3)
r1 = syz_open_dev$sg(&(0x7f0000000280), 0xa5b, 0x10000)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x50)
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
syz_emit_ethernet(0xd0, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000805020217bfebe9840ee6aa63ea5502b0473c5ecb7a96e921d940abad73f483c755debdad1de62ac210e519ab4f3c424f93c7f86365dd6ee75562377f63d2628a80f642fc9d1f1ebc76dc4e5fea3b8c66974df12689ee19a1131f5e15b0533e884dbee8dbacd3d8447942d0bd678c465c46c082296b6cfce7836fb4fc049f3f7aa7e80828a2cdedeffd591b4b881c8aa0b723815606198a474fce620862b3ea4ff4871a8f5d20819326a54c8ca97f938d988204e33e3712530d50bc551e40937ef1966a"], 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0x4cf4, 0x3010, 0x3, 0xac}, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc07e, 0x200, 0x2, 0xc1})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x400, 0x400, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x17, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r2}, 0x38)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="0828bdbf8aec45916800330042"], 0x2c}, 0x1, 0x0, 0x0, 0x24005050}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

4.17184596s ago: executing program 5 (id=1705):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000180)={0x0})
getsockopt$inet6_opts(r1, 0x29, 0x1, 0x0, &(0x7f0000000600))
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x3, 0xb, 0x81, 0x10, 0x7fffffffffffffff, 0x2, 0x2, 0x1}, &(0x7f0000000100)={0x8, 0x2, 0xf3, 0x0, 0x6, 0x7fffffffffffffff, 0xd, 0x100000000}, &(0x7f00000001c0)={0x6, 0x3, 0x7, 0x0, 0x0, 0x81, 0x200, 0x5}, &(0x7f0000000200), &(0x7f00000002c0)={&(0x7f0000000240)={[0x800000000000]}, 0x8})
ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000000))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fanotify_mark(0xffffffffffffffff, 0x101, 0x8000011, r5, 0x0)
ftruncate(r4, 0x6000004)
accept$inet(r4, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x5, 0x8, 0x0, 0x9, 0x7, 0xd, 0x1, 0x1, 0x10, 0xd, 0x4, 0x0, 0xfffff800, 0x10, 0x2, 0x7, 0xae, 0xf, '\x00', 0x5, 0x8})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x4000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
dup(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

4.028039213s ago: executing program 0 (id=1706):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1193, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x0, 0x1a4})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="680000000201010100000000000000000400000708000840000001ff0800034000002002440001802c00bb3f14000300fe8000000000000000000000000000bb14000400fc01000106000340000000000c000280050001"], 0x68}, 0x1, 0x0, 0x0, 0x14000001}, 0x24000000)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7080000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990041000000600000000800270002000000080026009a03"], 0x40}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x5, r8}, 0x38)
fchdir(r7)
ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x7})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000005040), 0x2, 0x0)
ioctl$RTC_ALM_SET(r9, 0x40247007, &(0x7f0000005080)={0x6, 0x29, 0xa, 0x11, 0x7, 0xfffffffc, 0x4, 0x44})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000bb1003001400128009000100766574680000000004000280"], 0x34}}, 0x24008000)

3.281670091s ago: executing program 3 (id=1707):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00"], 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3)
sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x20000000)
getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000680))
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000))
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, 0xffffffffffffffff, 0x0)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
setresuid(0xee00, 0xee01, 0xee01)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)

3.128090606s ago: executing program 1 (id=1708):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(0x0, r3)
sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x20000000)
getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000680))
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000))
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, 0xffffffffffffffff, 0x0)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
setresuid(0xee00, 0xee01, 0xee01)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)

3.067083785s ago: executing program 4 (id=1709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d79300000000000000000000014000400766574"], 0x54}}, 0x0)

2.879408386s ago: executing program 4 (id=1710):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000000)="f080dad6c436a5290b2902d183bb1e974d4fec8d", 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x13}, 0x17)
r1 = socket(0x3, 0x804, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003680)=ANY=[@ANYBLOB="24000000160001f6ffffff00010000000200000010002280040008"], 0x24}}, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x8)
syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200020000000000000800450000740000000000018878ac1e0001ac1414aa05009078e0000000460000000000000000110000ffffffffac141400070300070300443c00030a01012f00000000e0ee49000001000000007f00000100000200ac1414aa000000000000000000000000ac14140000000000ffffffff00000000000000a28a2f50b482aad9d62cbd24ea8df0d319776d089916aa50d2a6de0010dea2296f00e8a27fec6297012b6894f9943e095b5ccf3f7417e5cd04c4b152e395d0e0a81b953543bb99025fb2d9f412c757b7d8c946afc62b6c9a75c6152ccc840c3b0e740529475bceb7d86358a53abcc0"], 0x0)

2.741390367s ago: executing program 4 (id=1711):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804)
io_uring_setup(0x4ab4, &(0x7f0000000040)={0x0, 0x2421, 0x1c080, 0x1, 0x2bf})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=ANY=[@ANYBLOB="cc0000001b0001002bbd7000fddbdf2500000000000000000000000000000001ac1414390000000000000000000000050200a0a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000007000000000000000600000000000000020000000000000007000000000000000e00000000000000a604000000000000060000000000000002000000000000000000000000000000f4fffffffffffffff2ffffffffffffff790a0000b26b6e00010101010000000005000000000000000a0010000000000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r2 = socket(0x1d, 0x80802, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r2)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)="e0", 0x1}], 0x1)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000100)=ANY=[@ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x12c, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2.393038922s ago: executing program 1 (id=1712):
personality(0x400000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, 0x0)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000340)={[{0x1231, 0x8, 0x0, 0x1, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8, 0x6}], 0x8})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)

1.888988564s ago: executing program 3 (id=1713):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000cc0)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="40120a"], 0x0, 0x0}) (async)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x0, 0x10, 0x5, "9e7bd311ea"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0x20, 0x81, 0x2, "a4ca"}, &(0x7f0000000300)={0x20, 0x82, 0x3, "c20679"}, &(0x7f0000000340)={0x20, 0x83, 0x1, "eb"}, 0x0, &(0x7f00000003c0)={0x20, 0x85, 0x3, "f40107"}})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000006c0)={0x48, 0x17, 0x0, 0x0, 0x1000, 0x2000}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f0000000840)={0x0, 0x1, 0x5, "cfb35b9f4d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.77523944s ago: executing program 1 (id=1714):
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)='syz0\x00', 0x4000, &(0x7f0000000080)={@align=0x8, {0x8, 0x0, 0x9, 0x7}}, 0xa, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xff}) (async)
ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000200)={&(0x7f0000000180)=[{0x3, 0x0, 0x3, 0x2, 0x3, 0xfffffffffffffffb, 0x8, 0x4}, {0x0, 0x0, 0x6, 0x3, 0x7, 0xb, 0x7fffffffffffffff, 0xffffffffffffffff}], 0x2, 0x38, 0x1})
r2 = accept(r0, &(0x7f0000000240)=@nl=@proc, &(0x7f00000002c0)=0x80)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1e4, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x5a}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x6}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x2}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x209ab96c8f439ef3}], @NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x6}, {0x0, 0x9}, {}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x4}, {0x5, 0x8}, {0x6, 0x9}, {0x3, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x7, 0xa}, {0x6, 0x4}, {0x1, 0x4}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x3}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0x6}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x4}, {0x7, 0x3}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x6c, 0x9, 0x30, 0xc, 0x3, 0x1b, 0x30, 0x4, 0x6, 0x30, 0x36, 0x5e, 0x48, 0x60, 0x6, 0x36, 0xc, 0x16, 0x4, 0x1b, 0x2, 0x2, 0xc, 0x1]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5e5f, 0x3, 0x8, 0x2, 0x1, 0x6, 0xda]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x6, 0x8, 0x1000, 0x7fff, 0x4, 0x7]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x7}, {0x5, 0x2}, {0x1, 0x8}, {0x1}, {0x4, 0xa}, {0x7}, {}, {0x0, 0x6}, {0x1, 0x4}, {0x1}, {0x6, 0x8}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x3, 0x5}, {0x2, 0xa}, {0x7, 0x2}, {0x5, 0x4}, {0x4, 0x9}, {0x2, 0x4}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x9}, {0x7}, {0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x2}, {0x2, 0x6}, {0x4, 0x4}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x9}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x9}, {0x3, 0x4}, {0x4, 0x8}, {0x3, 0xa}, {0x5}, {0x0, 0x4}, {0x6, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x7}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0x2}, {0x4, 0x9}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0xc4, 0x5, 0x9, 0x3031, 0x6, 0x4]}}]}]}]}, 0x1e4}}, 0x0)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/binder0\x00')
setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000640)=0x1, 0x4) (async)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000700)={0x1, 0x2, {0x56, 0x1000, 0x1, {0x2, 0x6}, {0x4, 0xffff}, @period={0x5c, 0x1, 0xd23, 0x828f, 0x3ff, {0x6, 0x1, 0x82}, 0x2, &(0x7f0000000680)=[0x6, 0x9d3]}}, {0x56, 0xffff, 0x39, {0x6, 0x5}, {0x2, 0xc9ed}, @period={0x5c, 0x6, 0x1, 0x7ff, 0x1, {0x4, 0x1, 0x8, 0x8}, 0x3, &(0x7f00000006c0)=[0x4, 0x8, 0x51ec]}}}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
read$alg(r1, &(0x7f0000000780)=""/91, 0x5b) (async)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000800)=@usbdevfs_disconnect={0x2}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1)
sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x188, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x712}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1cc1dbc6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc0000000}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x507}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffdea}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4bf7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8ac}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async)
r6 = syz_open_dev$mouse(&(0x7f0000000b00), 0x2, 0x90000)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000b40)={0x5, 0x0, 0x4000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async)
r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400000, 0x0)
splice(r0, &(0x7f0000000b80)=0x2, r7, &(0x7f0000000c00)=0x9, 0xfffffffffffffff8, 0x3)
name_to_handle_at(r1, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)=@FILEID_BTRFS_WITHOUT_PARENT={0x28, 0x4e, {0x2, 0x2, 0x50, 0x9, 0xf0d}}, &(0x7f0000000cc0), 0x1200) (async)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000d00)={0x6, 0x0, 0x9, 0x3, 0x1}) (async)
setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000d40)=@fragment={0x2, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x65}, 0x8) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000d80)={'bridge_slave_0\x00', <r8=>0x0}) (async)
socket$inet6(0xa, 0xa, 0xb)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000e00), r0)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r9, 0x310, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040080)
bind$tipc(r6, &(0x7f0000000f00)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000f80)={'wg2\x00', <r10=>0x0})
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x68288120}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xd4, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2a}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8004}, 0x20044011)

1.663751535s ago: executing program 1 (id=1715):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r0, 0x5608, 0x3)
r1 = syz_open_dev$sg(&(0x7f0000000280), 0xa5b, 0x10000)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x50)
syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
syz_emit_ethernet(0xd0, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000805020217bfebe9840ee6aa63ea5502b0473c5ecb7a96e921d940abad73f483c755debdad1de62ac210e519ab4f3c424f93c7f86365dd6ee75562377f63d2628a80f642fc9d1f1ebc76dc4e5fea3b8c66974df12689ee19a1131f5e15b0533e884dbee8dbacd3d8447942d0bd678c465c46c082296b6cfce7836fb4fc049f3f7aa7e80828a2cdedeffd591b4b881c8aa0b723815606198a474fce620862b3ea4ff4871a8f5d20819326a54c8ca97f938d988204e33e3712530d50bc551e40937ef1966a"], 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0x4cf4, 0x3010, 0x3, 0xac}, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc07e, 0x200, 0x2, 0xc1})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x400, 0x400, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x17, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r2}, 0x38)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10040, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="0828bdbf8aec45916800330042"], 0x2c}, 0x1, 0x0, 0x0, 0x24005050}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

1.287330362s ago: executing program 1 (id=1716):
socket(0x2a, 0x803, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f8001324030602060304070300"], 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
socket(0x2, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
r9 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x1)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x10, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r11)

1.250697941s ago: executing program 4 (id=1717):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r3 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0)
mprotect(&(0x7f000057d000/0x2000)=nil, 0x2000, 0x4)
close(0xffffffffffffffff)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01f4000005000000fd09", @ANYBLOB='\x00'/15, @ANYRES32=<r5=>0x0, @ANYRES32=<r6=>0xffffffffffffffff, @ANYBLOB='\x00'/14], 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x5a, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRESHEX, @ANYRES32=r6, @ANYRESHEX=r5, @ANYRES8], 0x14}, 0x1, 0x0, 0x0, 0x40448d3}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00'})
writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003001000", 0x10}], 0x2)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800)
syz_usb_connect$uac1(0x0, 0x9f, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x808, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x6, 0xc0, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x26}, [@selector_unit={0xa, 0x24, 0x5, 0x4, 0x4, "9f3580c4e6"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x6, 0x3, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x4, 0x1, [0x2], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x46, 0xe6, 0xf7, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x3, 0x9}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x3, 0x0, 0xd4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x2, 0x6, 0x5, {0x7, 0x25, 0x1, 0xc, 0xf2, 0x1}}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})

890.09498ms ago: executing program 5 (id=1718):
r0 = socket(0x200000000000011, 0x2, 0xd)
r1 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x87a8}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r2)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000085}, 0x40)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x2, 0xfeae, 0x19ef, 0x6, 0x19ef, 0x3, 0x9, 0x27ff, 0x2800, 0x2, 0x2bb6, 0x0, 0x8, {0x80008, 0xffffffff}, 0x1, 0x9}})
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0xb)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4})
syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_G_AUDOUT(r6, 0x80345631, &(0x7f0000000540))
ioctl$FE_SET_PROPERTY(r7, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000440)=[{0x12, '\x00', @st={0x4, [{0x3, @svalue=0x6}, {0x2, @svalue=0x7fffffff}, {0x1, @uvalue=0x200000007fffffff}, {0x1, @uvalue=0x560}]}, 0x4}, {0x2, '\x00', @st={0x4, [{0x2, @uvalue=0x101}, {0x1, @uvalue=0x40}, {0x2, @uvalue=0x2}, {0x0, @svalue=0x7}]}, 0x9}, {0x22, '\x00', @st={0x4, [{0x2, @svalue=0x4}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @uvalue=0x3}, {0x1, @svalue=0x4f}]}, 0xe6}]})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000400))
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000600)=0x6)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x2324e5)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1c, 0xe, &(0x7f00000025c0)=ANY=[@ANYRESOCT=r10], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, 0x0)

775.542429ms ago: executing program 0 (id=1719):
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000240)=[{0xe, 0x81, 0x0, 0xfd, @tick=0x1, {0x10, 0x49}, {0xe}, @result={0x6, 0x5}}], 0x1c)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x4, 0x7fffffff, 0x36, 0x0, 0x11})
io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000140))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000ffff7f000001ac1414aa00000000fe000000000000000000000000040000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x50c0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x38, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)

484.012478ms ago: executing program 3 (id=1720):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d79300000000000000000000014000400766574"], 0x54}}, 0x0)

303.673356ms ago: executing program 1 (id=1721):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04c20700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0xaf9, 0x5, 0x0, 'queue1\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
epoll_create1(0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000040)={0x0, 0x3, 0x0, {0x0, 0x1}, 0x52, 0x10009})
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702)
ioctl$USBDEVFS_CONNECTINFO(r3, 0x80045505, &(0x7f0000002a40))
sync_file_range(r1, 0x8, 0x0, 0x0)
syz_usb_connect$midi(0x6, 0x75, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x1, 0x20, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x5, [@midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x10, 0x2, [{0x9, 0x1}, {0x9, 0x4f}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x1, 0x3}, @midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x0, 0x0, [], 0x6}, @midi_out_jack={0x15, 0x24, 0x3, 0x1, 0xf, 0x7, [{0x8, 0x3}, {0x2, 0x3}, {0xb, 0x6}, {0x0, 0x4}, {0xc, 0xfa}, {0x4, 0x2}, {0x7, 0x5}], 0x5}, @midi_out_jack={0xf, 0x24, 0x3, 0x3, 0xb0, 0x4, [{0x7, 0x7}, {0x1, 0x3}, {0x0, 0xee}, {0xf7, 0xf7}], 0x1}, @midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x3, 0x0, [], 0x2}], [{{0x9, 0x5, 0x0, 0x8, 0x71b3957bf19efc27, 0x40, 0x6, 0x4, {0x5, 0x25, 0x1, 0x1, "9c"}}}]}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x5, 0xa, 0x3, 0x8, 0x6}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "5c499644353a41d07eca251615329472"}]}, 0xa, [{0x3f, &(0x7f0000000240)=@string={0x3f, 0x3, "502a5cf481500c81cdc53db231ee4bae78ff5d2c3a2ad09d00f5249a857b1d6bf9388bd8ae23d0c9793877c154f562744337ac0ced2e867b8dbb16641c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x280a}}, {0xea, &(0x7f0000000300)=@string={0xea, 0x3, "1cd03521da47fa8f6ee10991a827a604b97f83e8e2a85b151a3eed2885abf30f27655f80e1816e4c52525fa1522a96720f0734b4e70769429f5928a7a8b8556679dd355b4b4a74d62c33853bb8c25a406a32f29a74126b3bde1e6bac0d46da9e5ea7dee5b7f48a9fb08092f0dd79aa741c2267020c3dba61a9d156bc426d235379d3ef6e6c4251617557f57eda190bb51eea91b528698704f1c312c227905b0c90ec5fe5dc7e9ba3aca8a40e43a8c4fe9578166e15216fa78d3a103fd64b57c1a96b524b1ef4f7c5c1c833b03c74df010eb395312fe50881584916b2e1c267ce7a2a3fa74786591a"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x5, &(0x7f0000000500)=@string={0x5, 0x3, "0bd088"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41c}}]})
bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002222000000960c221761f3bdd527c6dc32040000a0"], 0x0}, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_GET_REQUEST_TABLE(r5, 0x2275, &(0x7f00000018c0))
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x7, 0x1, 0x1, 0xb, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x76, 0x7}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x5, 0x1, 0x0, 0x20, 0x65}, 0x4b, &(0x7f0000000680)={0x5, 0xf, 0x4b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "4a9a1d0fe003aa64a0335245dca3a961"}, @generic={0x2b, 0x10, 0xf0d5829b5f33fd56, "a4b44d2fb8032b22e0d2e07b281c96e4d6f2ff7ad2037f3eaa1db388a07971dccb186095021c120d"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x4, 0x200}]}, 0x1, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x414}}]})
syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000000800)={0x20, 0x0, 0x36, {0x36, 0xe, "7c4f89dc6c3c7a28a8fa3bc7ee56070004a3619ecd8dde05b65fa0896b1171bb6cb32e4c75a9825f4c85365295ad9725b43e4cb9"}}, &(0x7f0000000840)={0x0, 0x3, 0xca, @string={0xca, 0x3, "ce141900115791108ebe6ddcd6f379f8b7587401fcecd2c9f50aca7f378f9776cea34a98c605a40b6545df51b5159d299e060e2bc0f24212f40e9eba20ac8082600d18f90f8e4b0e22e1d510bcf90cc685de5dbcde001f9233847089555e7c2adba2702dd852398d58d960c4810abbec96fc4705e4465f81d4d038e2baa61a90aa1b5e73ba64f7126446c293703850c051418565a8168284384c36e9560e1717e94ac66f7ee06e9d1415572b04afeb1da6c5e504c552b1d7314e37a39fa47e08aab60ca5c490eaa5"}}, &(0x7f0000000940)={0x0, 0xf, 0x16f, {0x5, 0xf, 0x16f, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x58, 0x4, 0xa, 0x1, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x255, 0xf, 0x1, [0xff0180, 0xff0000, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "0df4da180f15d5c718b05f4715573b93"}, @generic={0x6d, 0x10, 0x3, "67718c4aa0f99939bba51b9278858cd2347d0a26cd8a574eb47660aa98938e3ad7fb5bc38c8695b8c6b1424aad6472e468c5013e8debd961cbb26231c1771787555e43040b92c4093b080df4ed4eb648b12edbe2fe82d5a2841ad057b53a222b388a411a83a6f459dbc8"}, @generic={0xbf, 0x10, 0xa, "ee474cb5fa39d3e721370cb9005f90c4acfe4ab769a1dd21f1f29318aa20c2b7ded5555219d176e95ae42ce7060176c1f349fc91dce2c7a2bd528865b5fd1305b87fd8d457f1e043c2a0ee1c09a2aca8e735b66ed56c03ce774a9fe8625fe4b5de8efb356dcef8fd9e880be6ec7ebb6cef88fb33e21ca644b5486601097b04e968e6fcd1f84a120d0532a91fa39334f48753c00d0f9408df1fe1faf80efecce7a91be117c83d84546c213684ead2b286331fc3f7295d5ce03753edab"}]}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf5, 0x0, 0x1, 0x2, "5370b8be", "5053aa9b"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x7, 0x6, 0x8e, 0x401, 0x37}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000b80)={0x20, 0x13, 0x4f, "5d26980c073cbf399038ba91f14d95791bbb1661a0b3684d9fd161312cbf78eebb8dc072f9dfb77baead9604195438196197c8053c93ee6d664d3d2db65323b11f5648cc19e1545875aea662e26b37"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x80}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x48}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "a674"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e80)={0x40, 0x19, 0x2, 'K~'}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000f80)={0x40, 0x21, 0x1}})

0s ago: executing program 3 (id=1722):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000100)=0x8)
close_range(r0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(0x0, r3)
sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}}, 0x14}}, 0x20000000)
getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000680))
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000))
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, 0xffffffffffffffff, 0x0)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
setresuid(0xee00, 0xee01, 0xee01)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)

kernel console output (not intermixed with test programs):

][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  340.366254][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  340.381411][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.437880][ T5707] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  340.468113][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[  340.480264][ T5721] dvb-usb: error while querying for an remote control event.
[  340.597878][ T5707] usb 4-1: Using ep0 maxpacket: 16
[  340.608320][   T24] usb 5-1: GET_CAPABILITIES returned 0
[  340.620521][   T24] usbtmc 5-1:16.0: can't read capabilities
[  340.621996][ T5707] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  340.657824][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[  340.663573][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.694590][ T5721] dvb-usb: error while querying for an remote control event.
[  340.702721][ T5707] usb 4-1: Product: syz
[  340.717357][ T5707] usb 4-1: Manufacturer: syz
[  340.726875][ T5707] usb 4-1: SerialNumber: syz
[  340.761094][ T5707] usb 4-1: config 0 descriptor??
[  340.843154][    C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  340.868152][T10197] usbtmc 5-1:16.0: Unable to send data, error -71
[  340.878559][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  340.887581][   T24] dvb-usb: error while querying for an remote control event.
[  341.057922][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[  341.068662][ T5721] dvb-usb: error while querying for an remote control event.
[  341.157954][   T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  341.195568][ T5707] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  341.237825][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[  341.246499][ T5721] dvb-usb: error while querying for an remote control event.
[  341.266430][ T5707] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  341.300746][ T5707] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  341.317803][   T24] usb 2-1: Using ep0 maxpacket: 16
[  341.317882][ T5707] usb 4-1: media controller created
[  341.341317][   T24] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  341.369854][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  341.387478][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  341.417016][ T5707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  341.417532][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.433754][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[  341.448891][ T5721] dvb-usb: error while querying for an remote control event.
[  341.486571][   T24] usb 2-1: config 0 descriptor??
[  341.500624][ T5707] zl10353_read_register: readreg error (reg=127, ret==0)
[  341.520888][ T5707] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  341.538624][ T5707] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  341.571217][ T5707] usb 4-1: USB disconnect, device number 54
[  341.617931][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[  341.632972][ T5721] dvb-usb: error while querying for an remote control event.
[  341.723438][ T5707] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  341.807895][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[  341.828630][ T5721] dvb-usb: error while querying for an remote control event.
[  341.946224][T10205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.961613][T10205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.987337][   T24] hid_parser_main: 17 callbacks suppressed
[  341.987364][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.001956][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[  342.008384][ T5721] dvb-usb: error while querying for an remote control event.
[  342.015930][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.024621][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.039249][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.054991][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.071029][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.095171][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.107825][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.115271][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.122905][   T24] logitech 0003:046D:C50C.0017: unknown main item tag 0x0
[  342.174171][   T24] logitech 0003:046D:C50C.0017: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0
[  342.185685][ T5721] dvb-usb: bulk message failed: -22 (1/0)
[  342.199544][ T5721] dvb-usb: error while querying for an remote control event.
[  342.245255][T10212] netlink: 'syz.3.1323': attribute type 1 has an invalid length.
[  342.247066][   T24] usb 2-1: USB disconnect, device number 59
[  342.368199][ T8537] dvb-usb: bulk message failed: -22 (1/0)
[  342.376398][T10212] bond3: entered promiscuous mode
[  342.385310][T10213] fido_id[10213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  342.401442][ T8537] dvb-usb: error while querying for an remote control event.
[  342.415164][T10212] 8021q: adding VLAN 0 to HW filter on device bond3
[  342.437650][ T5694] usb 1-1: USB disconnect, device number 66
[  342.542670][T10219] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1325'.
[  342.558763][ T5694] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  342.570917][T10219] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1325'.
[  342.581371][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1325'.
[  342.662673][   T24] usb 5-1: USB disconnect, device number 60
[  343.029042][T10240] geneve3: entered promiscuous mode
[  343.034461][T10240] geneve3: entered allmulticast mode
[  343.176275][T10245] loop5: detected capacity change from 0 to 7
[  343.191261][T10245] Dev loop5: unable to read RDB block 7
[  343.197262][T10245]  loop5: unable to read partition table
[  343.204249][T10245] loop5: partition table beyond EOD, truncated
[  343.219642][T10245] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  343.248135][ T5694] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  343.418508][ T5694] usb 6-1: Using ep0 maxpacket: 16
[  343.438291][ T5694] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  343.457650][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.480586][ T5694] usb 6-1: Product: syz
[  343.486916][T10251] loop5: detected capacity change from 0 to 7
[  343.496219][ T5694] usb 6-1: Manufacturer: syz
[  343.503851][ T5694] usb 6-1: SerialNumber: syz
[  343.510193][T10251] Dev loop5: unable to read RDB block 7
[  343.524470][T10251]  loop5: unable to read partition table
[  343.533338][ T5694] usb 6-1: config 0 descriptor??
[  343.546305][T10251] loop5: partition table beyond EOD, truncated
[  343.558142][T10251] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  343.586707][T10249] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1337'.
[  343.659174][T10249] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1337'.
[  343.978797][ T5694] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  343.996279][T10259] netlink: 'syz.3.1342': attribute type 1 has an invalid length.
[  344.022705][ T5694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  344.053826][ T5694] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  344.055071][T10259] bond4: entered promiscuous mode
[  344.069083][T10259] 8021q: adding VLAN 0 to HW filter on device bond4
[  344.080563][ T5694] usb 6-1: media controller created
[  344.165447][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  344.341338][ T5694] zl10353_read_register: readreg error (reg=127, ret==0)
[  344.364555][ T5694] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  344.406602][ T5694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  344.452808][ T5694] usb 6-1: USB disconnect, device number 67
[  344.572694][ T5694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  344.574804][T10274] geneve3: entered promiscuous mode
[  344.600575][T10274] geneve3: entered allmulticast mode
[  344.667783][ T5707] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  344.747161][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'.
[  344.818136][ T5707] usb 5-1: device descriptor read/64, error -71
[  345.077812][ T5707] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  345.127949][ T5714] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  345.237855][ T5707] usb 5-1: device descriptor read/64, error -71
[  345.284267][T10287] netlink: 'syz.5.1350': attribute type 9 has an invalid length.
[  345.292553][T10287] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.1350'.
[  345.297898][ T5714] usb 4-1: Using ep0 maxpacket: 16
[  345.329648][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  345.358418][ T5707] usb usb5-port1: attempt power cycle
[  345.364456][ T5714] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  345.383574][ T5714] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  345.406876][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.445338][ T5714] usb 4-1: config 0 descriptor??
[  345.733943][ T5707] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  345.787209][ T5707] usb 5-1: device descriptor read/8, error -71
[  345.869474][T10297] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1352'.
[  345.882542][T10297] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1352'.
[  346.038106][ T5707] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  346.069209][ T5707] usb 5-1: device descriptor read/8, error -71
[  346.093469][T10306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'.
[  346.180576][T10306] fuse: Unknown parameter 'fd0x000000000000000a'
[  346.190349][ T5707] usb usb5-port1: unable to enumerate USB device
[  347.077938][ T5707] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  347.207815][   T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  347.247980][ T5707] usb 6-1: Using ep0 maxpacket: 32
[  347.263356][ T5707] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  347.282540][ T5707] usb 6-1: config 0 has no interface number 0
[  347.295150][ T5707] usb 6-1: config 0 interface 132 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  347.316560][ T5707] usb 6-1: config 0 interface 132 has no altsetting 0
[  347.336165][ T5707] usb 6-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75
[  347.357559][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.366592][ T5707] usb 6-1: Product: syz
[  347.370958][ T5707] usb 6-1: Manufacturer: syz
[  347.376040][ T5707] usb 6-1: SerialNumber: syz
[  347.378791][   T24] usb 1-1: Using ep0 maxpacket: 16
[  347.385275][ T5707] usb 6-1: config 0 descriptor??
[  347.400834][ T5707] cdc_subset 6-1:0.132: probe with driver cdc_subset failed with error -22
[  347.404280][   T24] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  347.442794][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.452585][   T24] usb 1-1: Product: syz
[  347.456831][   T24] usb 1-1: Manufacturer: syz
[  347.471211][   T24] usb 1-1: SerialNumber: syz
[  347.495069][   T24] usb 1-1: config 0 descriptor??
[  347.508137][ T5721] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  347.598667][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.609143][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.667876][ T5721] usb 5-1: Using ep0 maxpacket: 8
[  347.676393][ T5721] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  347.684942][ T5721] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  347.696533][ T5721] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  347.697788][ T5707] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  347.706979][ T5721] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  347.729560][ T5721] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  347.740699][ T5721] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  347.754329][ T5721] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  347.763469][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.860108][ T5707] usb 2-1: config 0 has no interfaces?
[  347.866556][ T8538] usb 4-1: USB disconnect, device number 55
[  347.868808][ T5707] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  347.892485][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.907785][ T5707] usb 2-1: Product: syz
[  347.918874][ T5707] usb 2-1: Manufacturer: syz
[  347.923653][ T5707] usb 2-1: SerialNumber: syz
[  347.933188][ T5707] usb 2-1: config 0 descriptor??
[  347.946217][   T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  347.966112][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  347.984032][   T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  347.995364][ T5721] usb 5-1: usb_control_msg returned -32
[  348.001524][ T5721] usbtmc 5-1:16.0: can't read capabilities
[  348.007842][   T24] usb 1-1: media controller created
[  348.031951][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  348.149998][   T24] zl10353_read_register: readreg error (reg=127, ret==0)
[  348.168278][   T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  348.177440][ T8538] usb 2-1: USB disconnect, device number 60
[  348.204525][   T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  348.244075][   T24] usb 1-1: USB disconnect, device number 67
[  348.313129][   T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  348.489475][T10315] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1358' sets config #3
[  348.502829][   T24] usb 6-1: USB disconnect, device number 68
[  348.543862][ T5707] usb 5-1: USB disconnect, device number 65
[  349.038454][ T5707] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  349.198268][ T5714] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  349.232541][ T5707] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  349.255501][ T5707] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  349.275005][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.295449][ T5707] usb 5-1: config 0 descriptor??
[  349.320076][ T5707] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  349.387856][ T5714] usb 2-1: Using ep0 maxpacket: 32
[  349.396518][ T5714] usb 2-1: config 91 has an invalid interface number: 231 but max is 0
[  349.412870][ T5714] usb 2-1: config 91 has no interface number 0
[  349.425730][ T5714] usb 2-1: config 91 interface 231 has no altsetting 0
[  349.440630][ T5714] usb 2-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=4c.9c
[  349.459160][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.473399][ T5714] usb 2-1: Product: syz
[  349.478139][ T5714] usb 2-1: Manufacturer: syz
[  349.483144][ T5714] usb 2-1: SerialNumber: syz
[  349.574094][   T24] usb 5-1: USB disconnect, device number 66
[  349.710807][ T5714] ums-cypress 2-1:91.231: USB Mass Storage device detected
[  349.819967][ T5714] usb 2-1: USB disconnect, device number 61
[  349.859556][T10360] netlink: 'syz.0.1372': attribute type 1 has an invalid length.
[  349.895910][T10360] bond4: entered promiscuous mode
[  349.901872][T10360] 8021q: adding VLAN 0 to HW filter on device bond4
[  350.101362][T10367] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1374'.
[  350.114698][T10367] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1374'.
[  350.467856][ T5714] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  350.637832][ T5714] usb 5-1: Using ep0 maxpacket: 16
[  350.648440][ T5714] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  350.662529][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.670927][ T5714] usb 5-1: Product: syz
[  350.675204][ T5714] usb 5-1: Manufacturer: syz
[  350.679962][ T5714] usb 5-1: SerialNumber: syz
[  350.687176][ T5714] usb 5-1: config 0 descriptor??
[  351.107855][ T5714] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  351.124205][ T5714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  351.148561][ T5714] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  351.156648][ T5714] usb 5-1: media controller created
[  351.176608][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  351.211166][T10373] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  351.222634][T10373] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  351.237901][T10373] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  351.254530][T10373] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  351.278162][T10373] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  351.321754][ T5714] zl10353_read_register: readreg error (reg=127, ret==0)
[  351.339037][ T5714] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  351.360599][ T5714] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  351.391885][ T5714] usb 5-1: USB disconnect, device number 67
[  351.532817][ T5714] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  351.547825][ T8538] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  351.719674][ T8538] usb 2-1: config 0 has no interfaces?
[  351.746114][ T8538] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  351.770249][ T8538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.788248][T10404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1382'.
[  351.800332][ T8538] usb 2-1: Product: syz
[  351.808239][ T8538] usb 2-1: Manufacturer: syz
[  351.816512][ T8538] usb 2-1: SerialNumber: syz
[  351.824518][ T8538] usb 2-1: config 0 descriptor??
[  351.901585][T10406] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  352.044516][ T5714] usb 2-1: USB disconnect, device number 62
[  352.123471][T10414] geneve2: entered promiscuous mode
[  352.138422][T10414] geneve2: entered allmulticast mode
[  352.411013][T10421] raw_sendmsg: syz.0.1387 forgot to set AF_INET. Fix it!
[  352.418988][T10420] geneve2: entered promiscuous mode
[  352.429355][T10420] geneve2: entered allmulticast mode
[  352.497019][T10421] bond5 (unregistering): Released all slaves
[  352.547979][ T5640] Bluetooth: hci1: command 0x0419 tx timeout
[  353.089144][ T5714] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  353.261484][ T5714] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  353.272001][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout
[  353.278165][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout
[  353.279199][ T5645] Bluetooth: hci2: command 0x0c1a tx timeout
[  353.295430][ T5714] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  353.304880][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.314225][ T5714] usb 2-1: Product: syz
[  353.319439][ T5714] usb 2-1: Manufacturer: syz
[  353.324334][ T5714] usb 2-1: SerialNumber: syz
[  353.346398][ T5714] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  353.355365][ T5645] Bluetooth: hci4: command 0x0c1a tx timeout
[  353.560201][ T5714] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  353.585201][ T5714] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  353.599186][   T24] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  353.607869][ T5714] usb 2-1: media controller created
[  353.646205][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  353.770717][   T24] usb 6-1: Using ep0 maxpacket: 16
[  353.783256][   T24] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  353.799404][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.816062][   T24] usb 6-1: Product: syz
[  353.822951][   T24] usb 6-1: Manufacturer: syz
[  353.829647][   T24] usb 6-1: SerialNumber: syz
[  353.840063][ T5645] Bluetooth: hci3: Invalid handle: 0x3600 > 0x0eff
[  353.855884][   T24] usb 6-1: config 0 descriptor??
[  353.872484][ T5714] usb 2-1: USB disconnect, device number 63
[  353.896992][T10438] syz.0.1393 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  354.186800][T10451] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1397'.
[  354.323491][   T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  354.373329][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  354.394857][   T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  354.403610][   T24] usb 6-1: media controller created
[  354.431835][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  354.529789][   T24] zl10353_read_register: readreg error (reg=127, ret==0)
[  354.549662][   T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  354.559944][ T5714] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  354.570472][   T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  354.595663][   T24] usb 6-1: USB disconnect, device number 69
[  354.678377][   T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  354.749431][ T5714] usb 1-1: config 0 has no interfaces?
[  354.757424][ T5714] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  354.766900][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.775896][ T5714] usb 1-1: Product: syz
[  354.780787][ T5714] usb 1-1: Manufacturer: syz
[  354.785753][ T5714] usb 1-1: SerialNumber: syz
[  354.799365][ T5714] usb 1-1: config 0 descriptor??
[  355.053449][ T5714] usb 1-1: USB disconnect, device number 68
[  355.571302][T10484] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.631797][T10488] geneve2: entered promiscuous mode
[  355.644066][T10488] geneve2: entered allmulticast mode
[  355.704033][T10484] syzkaller0: entered promiscuous mode
[  355.723594][T10484] syzkaller0: entered allmulticast mode
[  356.074886][T10484] tipc: Resetting bearer <eth:syzkaller0>
[  356.118319][T10483] tipc: Resetting bearer <eth:syzkaller0>
[  356.184449][ T5714] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  356.224310][T10483] tipc: Disabling bearer <eth:syzkaller0>
[  356.342331][ T5714] usb 1-1: Using ep0 maxpacket: 16
[  356.370926][ T5714] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  356.409457][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.440248][ T5714] usb 1-1: Product: syz
[  356.456736][ T5714] usb 1-1: Manufacturer: syz
[  356.471312][ T5714] usb 1-1: SerialNumber: syz
[  356.516986][ T5714] usb 1-1: config 0 descriptor??
[  356.695397][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'.
[  356.706124][T10518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1418'.
[  356.732461][T10518] vlan3: entered allmulticast mode
[  356.739426][T10518] macvlan1: entered allmulticast mode
[  356.753992][T10518] veth1_vlan: entered allmulticast mode
[  356.983740][ T5714] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  357.011875][ T5714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  357.037469][ T5714] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  357.052625][ T5714] usb 1-1: media controller created
[  357.119213][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  357.237624][T10544] loop5: detected capacity change from 0 to 7
[  357.242153][T10544] Dev loop5: unable to read RDB block 7
[  357.242195][T10544]  loop5: unable to read partition table
[  357.242368][T10544] loop5: partition table beyond EOD, truncated
[  357.242385][T10544] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  357.257892][ T5714] zl10353_read_register: readreg error (reg=127, ret==0)
[  357.257957][ T5714] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  357.257973][ T5714] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  357.280231][ T5714] usb 1-1: USB disconnect, device number 69
[  357.416542][ T5714] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  357.703996][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'.
[  357.861728][T10554] team0: Port device team_slave_0 removed
[  357.998575][ T5714] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  358.169890][ T5714] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.180808][ T5714] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  358.191859][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.212633][ T5714] usb 6-1: config 0 descriptor??
[  358.230486][   T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  358.242416][ T5714] pwc: Askey VC010 type 2 USB webcam detected.
[  358.411404][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  358.445574][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  358.472876][   T24] usb 4-1: New USB device found, idVendor=097d, idProduct=0000, bcdDevice= 0.00
[  358.495297][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.526236][   T24] usb 4-1: config 0 descriptor??
[  358.668906][ T5714] pwc: recv_control_msg error -32 req 02 val 2b00
[  358.685526][ T5714] pwc: recv_control_msg error -32 req 02 val 2700
[  358.703962][ T5714] pwc: recv_control_msg error -32 req 02 val 2c00
[  358.721617][ T5714] pwc: recv_control_msg error -32 req 04 val 1000
[  358.734909][ T5714] pwc: recv_control_msg error -32 req 04 val 1300
[  358.751777][ T5714] pwc: recv_control_msg error -32 req 04 val 1400
[  358.766854][ T5714] pwc: recv_control_msg error -32 req 02 val 2000
[  358.784137][ T5714] pwc: recv_control_msg error -32 req 02 val 2100
[  358.802928][ T5714] pwc: recv_control_msg error -32 req 04 val 1500
[  358.825675][ T5714] pwc: recv_control_msg error -32 req 02 val 2500
[  358.841385][ T5714] pwc: recv_control_msg error -32 req 02 val 2400
[  358.857345][ T5714] pwc: recv_control_msg error -32 req 02 val 2600
[  358.873492][ T5714] pwc: recv_control_msg error -32 req 02 val 2900
[  358.887879][ T5707] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  358.899820][ T5714] pwc: recv_control_msg error -32 req 02 val 2800
[  358.952427][   T24] hid_parser_main: 26 callbacks suppressed
[  358.952455][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  358.982002][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  359.004367][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  359.024197][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  359.042856][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  359.057851][ T5707] usb 2-1: Using ep0 maxpacket: 8
[  359.065191][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  359.082798][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  359.096511][ T5707] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  359.098736][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  359.127413][ T5714] pwc: recv_control_msg error -71 req 04 val 1200
[  359.140080][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  359.149539][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.161237][   T24] hid-generic 0003:097D:0000.0018: unknown main item tag 0x0
[  359.164507][ T5714] pwc: Registered as video103.
[  359.184072][ T5707] usb 2-1: Product: syz
[  359.199571][ T5707] usb 2-1: Manufacturer: syz
[  359.206614][ T5714] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input39
[  359.219389][ T5707] usb 2-1: SerialNumber: syz
[  359.239541][   T24] hid-generic 0003:097D:0000.0018: hidraw0: USB HID v7f.fd Device [HID 097d:0000] on usb-dummy_hcd.3-1/input0
[  359.275394][ T5707] usb 2-1: config 0 descriptor??
[  359.293572][ T5714] usb 6-1: USB disconnect, device number 70
[  359.305055][ T5707] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  359.321818][   T24] usb 4-1: USB disconnect, device number 56
[  359.470772][T10586] fido_id[10586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  359.903219][ T5707] gspca_sonixj: reg_r err -32
[  359.903277][ T5707] sonixj 2-1:0.0: probe with driver sonixj failed with error -32
[  360.228335][ T8538] usb 2-1: USB disconnect, device number 64
[  360.315163][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.337361][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.408469][ T5721] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  360.577838][ T5721] usb 5-1: Using ep0 maxpacket: 16
[  360.591184][ T5721] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  360.601228][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.609838][ T5721] usb 5-1: Product: syz
[  360.614365][ T5721] usb 5-1: Manufacturer: syz
[  360.619332][ T8538] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  360.627858][ T5721] usb 5-1: SerialNumber: syz
[  360.635212][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  360.635229][   T29] audit: type=1326 audit(1779776577.978:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  360.673970][   T29] audit: type=1326 audit(1779776577.978:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  360.687787][ T5707] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  360.699750][ T5721] usb 5-1: config 0 descriptor??
[  360.723800][   T29] audit: type=1326 audit(1779776577.978:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  360.749335][   T29] audit: type=1326 audit(1779776577.978:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  360.776701][   T29] audit: type=1326 audit(1779776577.978:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  360.801552][ T8538] usb 2-1: Using ep0 maxpacket: 16
[  360.809393][ T8538] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  360.819992][ T8538] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  360.829923][   T29] audit: type=1326 audit(1779776577.978:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  360.859842][ T8538] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  360.869662][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.869896][ T8538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.882045][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.889567][   T29] audit: type=1326 audit(1779776578.028:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  360.915592][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  360.925927][ T8538] usb 2-1: Product: syz
[  360.946128][ T8538] usb 2-1: Manufacturer: syz
[  360.951837][ T5707] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  360.952250][ T8538] usb 2-1: SerialNumber: syz
[  360.961605][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.966720][   T29] audit: type=1326 audit(1779776578.028:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  360.979333][ T5707] usb 4-1: config 0 descriptor??
[  361.001552][   T29] audit: type=1326 audit(1779776578.028:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  361.031430][   T29] audit: type=1326 audit(1779776578.028:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10616 comm="syz.0.1446" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  361.061238][ T8538] usb 2-1: 0:2 : does not exist
[  361.154407][ T5721] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  361.167223][ T5721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  361.186095][ T5721] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  361.196260][ T5721] usb 5-1: media controller created
[  361.221072][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  361.272829][ T8538] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  361.343844][ T8538] usb 2-1: USB disconnect, device number 65
[  361.382221][ T5721] zl10353_read_register: readreg error (reg=127, ret==0)
[  361.404330][ T5721] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  361.455206][ T5721] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  361.552985][ T5721] usb 5-1: USB disconnect, device number 68
[  361.579086][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  361.630314][ T5707] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  361.731783][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  361.753072][ T5707] usb 4-1: USB disconnect, device number 57
[  362.002450][ T5721] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  362.089141][T10634] geneve3: entered promiscuous mode
[  362.127205][T10634] geneve3: entered allmulticast mode
[  362.155303][T10632] fido_id[10632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  362.548421][ T8537] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  362.689797][ T5714] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  362.711903][ T8537] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  362.727870][ T5707] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  362.742826][ T8537] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  362.772753][ T8537] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  362.792477][ T8537] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.804525][ T8537] usb 1-1: Product: syz
[  362.808798][ T8537] usb 1-1: Manufacturer: syz
[  362.814172][ T8537] usb 1-1: SerialNumber: syz
[  362.859973][ T5714] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  362.903329][ T5707] usb 4-1: Using ep0 maxpacket: 16
[  362.910168][ T5714] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  362.929982][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.945554][ T5714] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  362.965264][ T5707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.975716][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  362.984075][ T5707] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  362.997326][ T5714] usb 5-1: SerialNumber: syz
[  363.008089][ T5707] usb 4-1: New USB device found, idVendor=045e, idProduct=07c2, bcdDevice= 0.00
[  363.020751][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.047177][ T5707] usb 4-1: config 0 descriptor??
[  363.106441][T10638] hma(sha224): entered promiscuous mode
[  363.131336][ T8537] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  363.160167][ T8537] usb 1-1: unit 6 not found!
[  363.226491][T10637] netlink: 'syz.4.1451': attribute type 1 has an invalid length.
[  363.344990][ T5714] usb 5-1: 0:2 : does not exist
[  363.406886][ T8537] usb 1-1: USB disconnect, device number 70
[  363.573963][T10647] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1454' sets config #0
[  363.577083][ T5714] usb 5-1: USB disconnect, device number 69
[  363.692363][ T5707] hid-generic 0003:045E:07C2.001A: unbalanced collection at end of report description
[  363.715351][ T5707] hid-generic 0003:045E:07C2.001A: probe with driver hid-generic failed with error -22
[  363.756545][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  363.910690][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.942512][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.030757][T10664] fuse: Unknown parameter 'ÔĘëæ³Î÷bqD÷Ñ&£5
j–ä>BØ�¿º·¥"n÷œßÜdhÙù‹j@à%¿#éâ
]ÿËcá!ð»;yv¹gV7:õ/™Ð‚H5
MÄ�^‘Úeå«<0x0000000000000003'
[  364.046210][T10665] fuse: Unknown parameter 'ÔĘëæ³Î÷bqD÷Ñ&£5
j–ä>BØ�¿º·¥"n÷œßÜdhÙù‹j@à%¿#éâ
]ÿËcá!ð»;yv¹gV7:õ/™Ð‚H5
MÄ�^‘Úeå«<0x0000000000000003'
[  364.552683][T10678] capability: warning: `syz.5.1462' uses deprecated v2 capabilities in a way that may be insecure
[  364.671326][ T5714] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  364.837938][ T5714] usb 5-1: Using ep0 maxpacket: 16
[  364.849132][ T5714] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  364.867821][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.887764][ T5714] usb 5-1: Product: syz
[  364.892031][ T5714] usb 5-1: Manufacturer: syz
[  364.896806][ T5714] usb 5-1: SerialNumber: syz
[  364.917059][ T5714] usb 5-1: config 0 descriptor??
[  365.345972][T10680] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1463'.
[  365.366011][ T5714] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  365.385921][T10680] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1463'.
[  365.387012][ T5714] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  365.408518][ T5714] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  365.424825][ T5714] usb 5-1: media controller created
[  365.430750][T10682] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1464'.
[  365.441680][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1463'.
[  365.473226][T10682] IPv6: Can't replace route, no match found
[  365.474428][ T5714] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  365.543625][ T8538] usb 4-1: USB disconnect, device number 58
[  365.591101][ T5714] zl10353_read_register: readreg error (reg=127, ret==0)
[  365.624422][ T5714] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  365.652542][ T5714] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  365.683759][T10688] netlink: 'syz.3.1466': attribute type 11 has an invalid length.
[  365.701415][ T5714] usb 5-1: USB disconnect, device number 70
[  365.758118][ T8537] usb 6-1: new low-speed USB device number 71 using dummy_hcd
[  365.784559][T10692] loop5: detected capacity change from 0 to 7
[  365.795667][T10692] Dev loop5: unable to read RDB block 7
[  365.802118][T10692]  loop5: unable to read partition table
[  365.808514][T10692] loop5: partition table beyond EOD, truncated
[  365.810472][ T5714] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  365.824594][T10692] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  365.929468][ T8537] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  365.942632][ T8537] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  365.954374][ T8537] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  365.979058][ T8537] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  365.990242][ T8537] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.004799][ T8537] usb 6-1: config 0 descriptor??
[  366.017463][T10685] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  366.037809][ T8538] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  366.046382][T10696] geneve3: entered promiscuous mode
[  366.057874][T10696] geneve3: entered allmulticast mode
[  366.097807][ T5707] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  366.168117][ T8538] usb 1-1: device descriptor read/64, error -71
[  366.257863][ T5707] usb 4-1: Using ep0 maxpacket: 32
[  366.265230][ T5707] usb 4-1: config index 0 descriptor too short (expected 6701, got 45)
[  366.282711][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  366.309696][ T5707] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.337132][ T5707] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.357758][ T5707] usb 4-1: config 0 interface 0 has no altsetting 0
[  366.364536][ T5707] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d
[  366.376873][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.393420][ T5707] usb 4-1: config 0 descriptor??
[  366.430792][ T8538] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  366.472551][ T8537] hid_parser_main: 232 callbacks suppressed
[  366.472578][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.504451][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.519748][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.537443][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.545728][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.554227][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.575579][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.586357][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.597449][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.605288][ T8537] logitech 0003:046D:C294.001B: unknown main item tag 0x0
[  366.617859][ T8538] usb 1-1: device descriptor read/64, error -71
[  366.631552][ T8537] logitech 0003:046D:C294.001B: hidraw0: USB HID v0.01 Device [HID 046d:c294] on usb-dummy_hcd.5-1/input0
[  366.648071][ T8537] logitech 0003:046D:C294.001B: no inputs found
[  366.686932][ T8537] usb 6-1: USB disconnect, device number 71
[  366.728482][ T8538] usb usb1-port1: attempt power cycle
[  366.788811][T10709] fido_id[10709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  366.840974][ T5707] logitech 0003:046D:CA03.001C: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0
[  366.876821][ T5707] logitech 0003:046D:CA03.001C: no inputs found
[  366.916581][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'.
[  366.993798][T10712] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13)
[  367.000794][T10712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  367.020282][T10712] vhci_hcd vhci_hcd.0: Device attached
[  367.044517][T10711] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  367.051186][T10711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  367.087123][T10711] vhci_hcd vhci_hcd.0: Device attached
[  367.093111][ T8538] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  367.119401][ T8538] usb 1-1: device descriptor read/8, error -71
[  367.188687][ T5707] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  367.269027][ T5714] usb 41-2: new low-speed USB device number 2 using vhci_hcd
[  367.341187][ T5707] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.358527][ T8538] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  367.377390][ T5707] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  367.398786][ T8538] usb 1-1: device descriptor read/8, error -71
[  367.400884][ T5707] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  367.439974][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  367.462191][ T5707] usb 5-1: SerialNumber: syz
[  367.541434][ T8538] usb usb1-port1: unable to enumerate USB device
[  367.639047][T10733] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1478'.
[  367.668003][T10733] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1478'.
[  367.685970][T10733] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1478'.
[  367.694270][ T5707] usb 5-1: 0:2 : does not exist
[  367.707091][T10715] vhci_hcd: connection reset by peer
[  367.724458][T10716] vhci_hcd: connection closed
[  367.738886][   T48] vhci_hcd vhci_hcd.4: stop threads
[  367.786713][   T48] vhci_hcd vhci_hcd.4: release socket
[  367.812805][   T48] vhci_hcd vhci_hcd.4: disconnect device
[  367.829460][   T48] vhci_hcd vhci_hcd.4: stop threads
[  367.844399][   T48] vhci_hcd vhci_hcd.4: release socket
[  367.863186][   T48] vhci_hcd vhci_hcd.4: disconnect device
[  367.883341][T10735] netlink: 'syz.5.1479': attribute type 11 has an invalid length.
[  367.889971][ T5707] usb 5-1: USB disconnect, device number 71
[  367.958473][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  368.059000][T10737] loop5: detected capacity change from 0 to 7
[  368.099569][T10737] Dev loop5: unable to read RDB block 7
[  368.105708][T10737]  loop5: unable to read partition table
[  368.115840][ T5707] usb 4-1: USB disconnect, device number 59
[  368.122451][T10737] loop5: partition table beyond EOD, truncated
[  368.137924][T10737] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  368.160517][T10658] syz.1.1456 (10658) used greatest stack depth: 19040 bytes left
[  368.265066][T10741] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1483'.
[  368.279902][T10741] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1483'.
[  368.318510][ T5694] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  368.356018][T10747] vim2m vim2m.0: vidioc_s_fmt queue busy
[  368.487770][ T5694] usb 6-1: Using ep0 maxpacket: 16
[  368.498579][ T5694] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  368.509266][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.517464][ T5694] usb 6-1: Product: syz
[  368.521854][ T5694] usb 6-1: Manufacturer: syz
[  368.526704][ T5694] usb 6-1: SerialNumber: syz
[  368.537291][ T5694] usb 6-1: config 0 descriptor??
[  368.587882][ T8538] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  368.757910][ T8538] usb 5-1: Using ep0 maxpacket: 32
[  368.765128][ T8538] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  368.774963][ T8538] usb 5-1: config 0 has no interface number 0
[  368.789508][ T8538] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  368.811994][ T8538] usb 5-1: config 0 interface 85 has no altsetting 0
[  368.817938][ T5707] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  368.822163][ T8538] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  368.835996][ T8538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.844559][ T8538] usb 5-1: Product: syz
[  368.848860][ T8538] usb 5-1: Manufacturer: syz
[  368.853614][ T8538] usb 5-1: SerialNumber: syz
[  368.872261][ T8538] usb 5-1: config 0 descriptor??
[  368.960141][ T5694] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  368.973854][ T5694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  368.988168][ T5694] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  369.001207][ T5707] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=ca.8e
[  369.011101][ T5694] usb 6-1: media controller created
[  369.020972][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.045507][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  369.063892][ T5707] pwc: Logitech QuickCam Zoom USB webcam detected.
[  369.080421][ T8538] appletouch 5-1:0.85: Failed to read mode from device.
[  369.104705][ T8538] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  369.152967][ T8538] usb 5-1: USB disconnect, device number 72
[  369.176033][ T5694] zl10353_read_register: readreg error (reg=127, ret==0)
[  369.203419][ T5694] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  369.232936][ T5694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  369.265022][ T5694] usb 6-1: USB disconnect, device number 72
[  369.278591][T10771] netlink: 'syz.4.1491': attribute type 11 has an invalid length.
[  369.390445][ T5694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  369.838965][ T8538] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  370.002077][ T8538] usb 5-1: config 0 has no interfaces?
[  370.014262][ T8538] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  370.036676][ T8538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.069294][ T8538] usb 5-1: Product: syz
[  370.077807][ T8538] usb 5-1: Manufacturer: syz
[  370.088043][ T8538] usb 5-1: SerialNumber: syz
[  370.101103][ T8538] usb 5-1: config 0 descriptor??
[  370.317843][ T5694] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  370.345675][    T9] usb 5-1: USB disconnect, device number 73
[  370.479629][ T5694] usb 1-1: Using ep0 maxpacket: 16
[  370.488943][ T5694] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.499819][ T5694] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  370.509581][ T5694] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  370.520098][ T5694] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.547620][ T5694] usb 1-1: config 0 descriptor??
[  371.346736][T10801] __nla_validate_parse: 6 callbacks suppressed
[  371.346819][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1500'.
[  371.490565][T10801] fuse: Unknown parameter 'fd0x000000000000000a'
[  371.585655][ T5707] pwc: Failed to set LED on/off time (-71)
[  371.614387][ T5707] pwc: send_video_command error -71
[  371.620783][ T5707] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  371.642416][ T5707] Philips webcam 4-1:127.0: probe with driver Philips webcam failed with error -71
[  371.706308][ T5707] usb 4-1: USB disconnect, device number 60
[  371.979023][T10813] tipc: Can't bind to reserved service type 0
[  372.057780][ T5694] usb 6-1: new full-speed USB device number 73 using dummy_hcd
[  372.219803][ T5694] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  372.249046][ T5694] usb 6-1: config 0 has no interface number 0
[  372.274235][ T5694] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  372.311336][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.339444][ T5694] usb 6-1: Product: syz
[  372.353225][ T5694] usb 6-1: Manufacturer: syz
[  372.374762][ T5694] usb 6-1: SerialNumber: syz
[  372.380018][ T5714] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  372.413993][ T5694] usb 6-1: config 0 descriptor??
[  372.448652][ T5694] usb 6-1: selecting invalid altsetting 1
[  372.493192][ T5694] dvb_ttusb_budget: ttusb_init_controller: error
[  372.509836][ T5694] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  372.628501][ T8538] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  372.703922][ T5694] DVB: Unable to find symbol stv0299_attach()
[  372.809113][ T8538] usb 4-1: Using ep0 maxpacket: 16
[  372.834128][ T8538] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  372.856783][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.882160][ T8538] usb 4-1: Product: syz
[  372.894352][ T8538] usb 4-1: Manufacturer: syz
[  372.896256][ T5694] DVB: Unable to find symbol tda8083_attach()
[  372.914782][ T8538] usb 4-1: SerialNumber: syz
[  372.925541][ T5694] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  372.935020][ T8538] usb 4-1: config 0 descriptor??
[  372.975998][ T5694] usb 6-1: USB disconnect, device number 73
[  373.149222][ T8537] usb 1-1: USB disconnect, device number 75
[  373.409771][ T8538] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  373.436578][ T8538] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  373.456784][ T8538] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  373.474659][ T8538] usb 4-1: media controller created
[  373.522405][ T8538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  373.643347][ T8538] zl10353_read_register: readreg error (reg=127, ret==0)
[  373.656646][ T8538] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  373.672008][ T8538] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  373.742808][ T8538] usb 4-1: USB disconnect, device number 61
[  373.853528][ T8538] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  374.357535][T10841] geneve3: entered promiscuous mode
[  374.369518][T10841] geneve3: entered allmulticast mode
[  375.438814][   T29] kauditd_printk_skb: 716 callbacks suppressed
[  375.438844][   T29] audit: type=1326 audit(1779776592.788:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10865 comm="syz.1.1519" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc1c99ce59 code=0x0
[  375.515027][T10869] syzkaller0: entered promiscuous mode
[  375.529234][T10869] syzkaller0: entered allmulticast mode
[  375.593150][T10876] vlan2: entered promiscuous mode
[  376.276008][T10872] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  376.285222][T10872] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  376.291506][T10872] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  376.324080][T10872] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  376.336377][T10872] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  376.621909][ T5694] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  376.772585][T10895] loop5: detected capacity change from 0 to 7
[  376.783492][T10895] Dev loop5: unable to read RDB block 7
[  376.789302][T10895]  loop5: unable to read partition table
[  376.795392][T10895] loop5: partition table beyond EOD, truncated
[  376.798069][ T5694] usb 6-1: Using ep0 maxpacket: 16
[  376.807102][T10895] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  376.839894][ T5694] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  376.884512][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.906200][ T5694] usb 6-1: Product: syz
[  376.921874][ T5694] usb 6-1: Manufacturer: syz
[  376.928251][ T5694] usb 6-1: SerialNumber: syz
[  376.962461][ T5694] usb 6-1: config 0 descriptor??
[  377.158865][T10905] input: syz1 as /devices/virtual/input/input41
[  377.165262][T10905] input: failed to attach handler leds to device input41, error: -6
[  377.535710][ T5694] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  377.569852][ T5694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  377.597870][ T5645] Bluetooth: hci1: command 0x0419 tx timeout
[  377.614516][ T5694] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  377.624643][ T5694] usb 6-1: media controller created
[  377.665511][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  377.910233][ T8538] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  378.117907][ T8538] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  378.150477][ T8538] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  378.176626][ T8538] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  378.203972][ T8538] usb 2-1: config 0 interface 0 has no altsetting 0
[  378.242282][ T8538] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  378.249886][ T5694] zl10353_read_register: readreg error (reg=127, ret==0)
[  378.251883][ T8538] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  378.262774][ T5694] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  378.270427][ T8538] usb 2-1: config 0 interface 0 has no altsetting 0
[  378.286842][ T5694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  378.306997][ T8538] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  378.314682][ T5645] Bluetooth: hci0: command 0x0c1a tx timeout
[  378.318072][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout
[  378.346660][ T8538] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  378.358444][ T8538] usb 2-1: config 0 interface 0 has no altsetting 0
[  378.366522][ T8538] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  378.390167][ T5640] Bluetooth: hci4: command 0x0c1a tx timeout
[  378.390392][ T5645] Bluetooth: hci3: command 0x0c1a tx timeout
[  378.396611][ T8538] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  378.447762][ T8538] usb 2-1: config 0 interface 0 has no altsetting 0
[  378.497398][ T8538] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  378.506694][ T8538] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  378.518157][ T8538] usb 2-1: config 0 interface 0 has no altsetting 0
[  378.550494][ T8538] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  378.559620][ T8538] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  378.570820][ T8538] usb 2-1: config 0 interface 0 has no altsetting 0
[  378.601171][ T8538] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  378.610874][ T8538] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  378.622757][ T8538] usb 2-1: config 0 interface 0 has no altsetting 0
[  378.653170][ T8538] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  378.674906][ T8538] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  378.686717][ T8538] usb 2-1: config 0 interface 0 has no altsetting 0
[  378.711035][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  378.727802][ T5694] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  378.735231][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  378.743684][ T8538] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  378.753488][ T8538] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  378.762127][ T8538] usb 2-1: Product: syz
[  378.766340][ T8538] usb 2-1: Manufacturer: syz
[  378.783404][ T8538] usb 2-1: SerialNumber: syz
[  378.808278][ T8538] usb 2-1: config 0 descriptor??
[  378.831860][ T8538] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  378.868242][ T5694] usb 5-1: device descriptor read/64, error -71
[  379.117940][ T5694] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  379.170889][    C1] usb 2-1: yurex_control_callback - control failed: -2
[  379.268882][ T5694] usb 5-1: device descriptor read/64, error -71
[  379.382627][ T5694] usb usb5-port1: attempt power cycle
[  379.727815][ T5694] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  379.765858][ T5694] usb 5-1: device descriptor read/8, error -71
[  379.860541][ T5707] usb 6-1: USB disconnect, device number 74
[  379.966506][ T5707] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  380.018932][ T5694] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  380.051197][ T5694] usb 5-1: device descriptor read/8, error -71
[  380.170332][ T5694] usb usb5-port1: unable to enumerate USB device
[  380.262023][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1536'.
[  380.309684][T10939] geneve2: entered promiscuous mode
[  380.324198][T10939] geneve2: entered allmulticast mode
[  380.391964][T10942] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  381.099686][T10937] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  381.111566][T10937] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  381.119905][T10937] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  381.128215][T10937] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  381.138797][T10937] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  381.152440][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.168969][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.910145][ T5721] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  381.999175][T10967] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1543'.
[  382.022561][T10967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.064107][T10967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.080750][ T5721] usb 6-1: unable to get BOS descriptor or descriptor too short
[  382.106244][ T5721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  382.141988][ T5721] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  382.182463][ T5721] usb 6-1: string descriptor 0 read error: -22
[  382.216305][ T5721] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  382.236685][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.331307][ T5721] usb 6-1: selecting invalid altsetting 1
[  382.365679][ T5721] usb 6-1: unit 3 not found!
[  382.389467][ T5645] Bluetooth: hci1: command 0x0419 tx timeout
[  382.431940][T10980] geneve3: entered promiscuous mode
[  382.439326][T10980] geneve3: entered allmulticast mode
[  382.514815][ T5721] usb 6-1: unit 0 not found!
[  382.721349][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.735246][ T5721] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  382.751697][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.838863][T10971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.866964][T10971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.903958][ T5721] usb 6-1: USB disconnect, device number 75
[  383.188099][ T5645] Bluetooth: hci4: command 0x0c1a tx timeout
[  383.194333][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout
[  383.194404][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout
[  383.206656][ T5631] Bluetooth: hci0: command 0x0c1a tx timeout
[  383.874534][T10992] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  383.892042][T10992] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  383.913330][T10992] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  383.948894][T10992] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  383.985092][T10992] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  384.326188][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1560'.
[  384.731151][T11024] geneve3: entered promiscuous mode
[  384.736628][T11024] geneve3: entered allmulticast mode
[  384.793211][T11025] batman_adv: batadv0: Adding interface: dummy0
[  384.801001][T11025] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.831745][T11025] batman_adv: batadv0: Interface activated: dummy0
[  384.929059][ T5721] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  384.943697][T11034] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1567'.
[  385.096163][T11039] vlan2: entered promiscuous mode
[  385.108089][ T5721] usb 6-1: Using ep0 maxpacket: 16
[  385.117442][ T5721] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.132286][ T5721] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  385.150747][ T5721] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  385.172062][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.205565][ T5721] usb 6-1: config 0 descriptor??
[  385.340828][   T29] audit: type=1326 audit(1779776602.688:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11047 comm="syz.4.1571" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae3799ce59 code=0x0
[  385.851701][T11036] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  385.863911][T11036] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  385.874726][T11036] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  385.881554][T11036] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  385.888691][T11036] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  386.094568][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1573'.
[  386.356483][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.369190][ T5707] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  386.389054][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.445473][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  386.469962][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.548422][ T5707] usb 4-1: Using ep0 maxpacket: 16
[  386.564257][ T5707] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.582387][ T5707] usb 4-1: config 0 interface 0 has no altsetting 0
[  386.596380][ T5707] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  386.615323][ T5707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.648585][ T5707] usb 4-1: config 0 descriptor??
[  386.917821][ T5721] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  387.088937][ T5721] usb 1-1: Using ep0 maxpacket: 32
[  387.107483][ T5707] hid_parser_main: 33 callbacks suppressed
[  387.107507][ T5707] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0
[  387.121030][ T5631] Bluetooth: hci1: command 0x0419 tx timeout
[  387.133972][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short
[  387.149129][ T5707] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0
[  387.156327][ T5707] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0
[  387.165921][ T5707] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0
[  387.173446][ T5707] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0
[  387.182015][ T5707] mcp2221 0003:04D8:00DD.001D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  387.198626][ T5721] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  387.269578][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.285295][    C0] usb 4-1: input irq status -75 received
[  387.297817][ T5721] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  387.320739][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.327720][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.362306][T11074] input: syz0 as /devices/virtual/input/input42
[  387.370169][ T5721] usb 1-1: Product: syz
[  387.388342][ T5721] usb 1-1: Manufacturer: syz
[  387.405767][ T5721] usb 1-1: SerialNumber: syz
[  387.424483][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.454908][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.617996][ T8538] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  387.657287][ T8537] usb 4-1: USB disconnect, device number 62
[  387.689872][ T5721] usb 1-1: Invalid number of CPorts: 0
[  387.715257][ T5721] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22
[  387.794091][ T5721] usb 6-1: USB disconnect, device number 76
[  387.837862][ T8538] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  387.878070][ T8538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  387.906909][ T8538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  387.918728][ T5631] Bluetooth: hci4: command 0x0c1a tx timeout
[  387.924038][ T8538] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  387.925071][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout
[  387.938271][ T5645] Bluetooth: hci0: command 0x0c1a tx timeout
[  387.944399][ T5631] Bluetooth: hci2: command 0x0c1a tx timeout
[  387.964051][ T5694] usb 1-1: USB disconnect, device number 76
[  388.013705][ T8538] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  388.029340][ T8538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.042441][ T8538] usb 5-1: config 0 descriptor??
[  388.495119][ T8538] plantronics 0003:047F:FFFF.001E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  388.556852][T11090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1582'.
[  388.717516][T11076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.758475][T11076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.847768][ T5694] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  388.891689][T11094] vlan2: entered promiscuous mode
[  389.023947][ T5694] usb 4-1: Using ep0 maxpacket: 16
[  389.034934][ T5694] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  389.057884][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.068016][ T5694] usb 4-1: Product: syz
[  389.078862][ T5694] usb 4-1: Manufacturer: syz
[  389.087769][ T5694] usb 4-1: SerialNumber: syz
[  389.103006][ T5694] usb 4-1: config 0 descriptor??
[  389.117543][ T5694] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  389.559566][T11093] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  389.567558][T11093] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  389.576746][T11093] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  389.595359][T11093] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  389.619275][T11093] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  389.891189][T11109] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1587'.
[  389.942951][T11090] netlink: 'syz.3.1582': attribute type 5 has an invalid length.
[  389.975627][ T5694] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71
[  390.007408][ T5694] usb 4-1: USB disconnect, device number 63
[  390.455542][T11118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  390.666116][ T8538] usb 5-1: USB disconnect, device number 78
[  390.867992][T11084] Bluetooth: hci1: command 0x0419 tx timeout
[  391.288799][ T5694] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  391.459387][ T5694] usb 5-1: Using ep0 maxpacket: 16
[  391.477295][ T5694] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  391.500046][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.517864][ T5694] usb 5-1: Product: syz
[  391.526435][ T5694] usb 5-1: Manufacturer: syz
[  391.535034][ T5694] usb 5-1: SerialNumber: syz
[  391.550678][ T5694] usb 5-1: config 0 descriptor??
[  391.587801][T11084] Bluetooth: hci0: command 0x0c1a tx timeout
[  391.588076][ T5640] Bluetooth: hci2: command 0x0c1a tx timeout
[  391.668084][ T5640] Bluetooth: hci4: command 0x0c1a tx timeout
[  391.668095][T11084] Bluetooth: hci3: command 0x0c1a tx timeout
[  392.005200][ T5694] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  392.021813][ T5694] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  392.032403][ T5694] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  392.043679][ T5694] usb 5-1: media controller created
[  392.068062][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  392.271378][T11141] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  392.279183][T11141] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  392.285371][T11141] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  392.291874][T11141] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  392.298183][T11141] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  392.339267][ T5694] zl10353_read_register: readreg error (reg=127, ret==0)
[  392.358119][ T5694] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  392.381088][ T5694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  392.423396][ T5694] usb 5-1: USB disconnect, device number 79
[  392.536981][T11153] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1602'.
[  392.548637][ T5714] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  392.560486][ T5694] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  392.578225][    T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  392.728417][    T9] usb 4-1: device descriptor read/64, error -71
[  392.735086][ T5714] usb 1-1: Using ep0 maxpacket: 16
[  392.751745][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.771348][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.781906][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  392.822603][ T5714] usb 1-1: New USB device found, idVendor=045e, idProduct=07c2, bcdDevice= 0.00
[  392.847027][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.870842][ T5714] usb 1-1: config 0 descriptor??
[  392.997853][    T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  393.147744][    T9] usb 4-1: device descriptor read/64, error -71
[  393.268402][    T9] usb usb4-port1: attempt power cycle
[  393.302482][   T29] audit: type=1326 audit(1779776610.648:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  393.376233][T11148] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1600' sets config #0
[  393.403051][   T29] audit: type=1326 audit(1779776610.648:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  393.480200][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.495021][   T29] audit: type=1326 audit(1779776610.648:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  393.519697][ T5640] Bluetooth: hci1: command 0x0419 tx timeout
[  393.533619][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.551796][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.591964][   T29] audit: type=1326 audit(1779776610.648:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  393.618055][ T5694] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[  393.638368][    T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  393.663148][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.675920][T11148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.698501][T11148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.699512][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.715130][    T9] usb 4-1: device descriptor read/8, error -71
[  393.716547][   T29] audit: type=1326 audit(1779776610.648:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  393.810376][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.820025][ T5694] usb 5-1: config 12 has an invalid interface number: 248 but max is 1
[  393.832126][ T5694] usb 5-1: config 12 has an invalid interface number: 39 but max is 1
[  393.848662][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.867141][ T5694] usb 5-1: config 12 has no interface number 0
[  393.873735][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.877789][   T29] audit: type=1326 audit(1779776610.648:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  393.889268][ T5694] usb 5-1: config 12 has no interface number 1
[  393.925946][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.947450][ T5714] hid-generic 0003:045E:07C2.001F: unknown main item tag 0x0
[  393.956338][   T29] audit: type=1326 audit(1779776610.688:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  393.996404][ T5714] hid-generic 0003:045E:07C2.001F: unbalanced collection at end of report description
[  394.011427][ T5694] usb 5-1: config 12 interface 248 has no altsetting 0
[  394.037819][    T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  394.051500][ T5714] hid-generic 0003:045E:07C2.001F: probe with driver hid-generic failed with error -22
[  394.062913][ T5694] usb 5-1: config 12 interface 39 has no altsetting 0
[  394.082344][   T29] audit: type=1326 audit(1779776610.688:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  394.118202][    T9] usb 4-1: device descriptor read/8, error -71
[  394.138381][ T5694] usb 5-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=16.aa
[  394.151736][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.167982][   T29] audit: type=1326 audit(1779776610.688:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  394.192790][ T5694] usb 5-1: Product: syz
[  394.202956][ T5694] usb 5-1: Manufacturer: syz
[  394.213091][ T5694] usb 5-1: SerialNumber: syz
[  394.239004][    T9] usb usb4-port1: unable to enumerate USB device
[  394.275257][   T29] audit: type=1326 audit(1779776610.688:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.0.1600" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5bd9ce59 code=0x7ffc0000
[  394.313100][ T5640] Bluetooth: hci3: command 0x0c1a tx timeout
[  394.320807][ T5640] Bluetooth: hci4: command 0x0c1a tx timeout
[  394.327081][ T5640] Bluetooth: hci0: command 0x0c1a tx timeout
[  394.336238][T11084] Bluetooth: hci2: command 0x0c1a tx timeout
[  395.125352][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1605'.
[  395.197094][ T8538] usb 1-1: USB disconnect, device number 77
[  395.931293][T11176] geneve2: entered promiscuous mode
[  395.973052][T11176] geneve2: entered allmulticast mode
[  396.262229][ T5694] usb 5-1: USB disconnect, device number 80
[  396.757821][ T8538] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  396.931170][ T8538] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  396.953404][ T8538] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  396.965833][ T8538] usb 1-1: config 0 interface 0 has no altsetting 0
[  396.976547][ T8538] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  396.986579][ T8538] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  396.995826][ T8538] usb 1-1: Product: syz
[  397.000740][ T8538] usb 1-1: Manufacturer: syz
[  397.005649][ T8538] usb 1-1: SerialNumber: syz
[  397.015605][ T8538] usb 1-1: config 0 descriptor??
[  397.039174][T11185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  397.053295][ T8538] usb 1-1: selecting invalid altsetting 0
[  397.097627][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1616'.
[  397.282282][ T5694] usb 1-1: USB disconnect, device number 78
[  397.704062][T11215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.216042][T11220] geneve2: entered promiscuous mode
[  398.226469][T11220] geneve2: entered allmulticast mode
[  400.097788][ T8550] usb 5-1: new full-speed USB device number 81 using dummy_hcd
[  400.247935][ T5694] usb 6-1: new full-speed USB device number 77 using dummy_hcd
[  400.277290][ T8550] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.302715][ T8550] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  400.325995][ T8550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.342394][ T8550] usb 5-1: Product: syz
[  400.351213][ T8550] usb 5-1: Manufacturer: syz
[  400.361202][ T8550] usb 5-1: SerialNumber: syz
[  400.379281][ T8550] usb 5-1: config 0 descriptor??
[  400.410243][ T8550] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  400.435224][ T5694] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  400.447192][ T8550] dvb-usb: bulk message failed: -22 (3/0)
[  400.468584][ T5694] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  400.497250][ T8550] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  400.512612][ T5694] usb 6-1: config 0 interface 0 has no altsetting 0
[  400.534283][ T8550] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  400.558543][ T5694] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  400.582446][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  400.592910][ T8550] usb 5-1: media controller created
[  400.617793][ T5694] usb 6-1: Product: syz
[  400.627306][ T8550] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  400.644654][ T5694] usb 6-1: Manufacturer: syz
[  400.673027][ T5694] usb 6-1: SerialNumber: syz
[  400.695198][ T5694] usb 6-1: config 0 descriptor??
[  400.696148][T11259] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  400.719295][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  400.730672][ T5694] usb 6-1: selecting invalid altsetting 0
[  400.736315][ T8550] dvb-usb: bulk message failed: -22 (6/0)
[  400.736442][ T8550] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  400.736596][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  400.755119][ T8550] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input44
[  400.777502][ T8550] dvb-usb: schedule remote query interval to 150 msecs.
[  400.777567][ T8550] dvb-usb: bulk message failed: -22 (3/0)
[  400.793795][ T8550] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  400.883203][T11264] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1635' sets config #3
[  400.927887][ T8550] dvb-usb: bulk message failed: -22 (1/0)
[  400.927936][ T8550] dvb-usb: error while querying for an remote control event.
[  401.087813][ T8550] dvb-usb: bulk message failed: -22 (1/0)
[  401.087852][ T8550] dvb-usb: error while querying for an remote control event.
[  401.121007][ T5694] usb 6-1: USB disconnect, device number 77
[  401.264026][ T8550] dvb-usb: bulk message failed: -22 (1/0)
[  401.264068][ T8550] dvb-usb: error while querying for an remote control event.
[  401.315022][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  401.360606][ T8538] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  401.374511][T11269] geneve2: entered promiscuous mode
[  401.374530][T11269] geneve2: entered allmulticast mode
[  401.430014][ T8550] dvb-usb: bulk message failed: -22 (1/0)
[  401.430055][ T8550] dvb-usb: error while querying for an remote control event.
[  401.517835][ T8538] usb 4-1: Using ep0 maxpacket: 8
[  401.520842][ T8538] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0
[  401.590042][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  401.617206][ T5694] dvb-usb: error while querying for an remote control event.
[  401.673236][ T8538] usb 4-1: config 0 interface 0 has no altsetting 0
[  401.726653][ T8538] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  401.763729][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.789677][ T8538] usb 4-1: Product: syz
[  401.794177][ T8538] usb 4-1: Manufacturer: syz
[  401.805023][ T8538] usb 4-1: SerialNumber: syz
[  401.808716][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  401.816794][ T5694] dvb-usb: error while querying for an remote control event.
[  401.820996][ T8538] usb 4-1: config 0 descriptor??
[  401.880123][ T8538] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  401.889207][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'.
[  401.905967][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1639'.
[  402.037809][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  402.044866][ T5694] dvb-usb: error while querying for an remote control event.
[  402.062764][ T8538] snd_usb_toneport 4-1:0.0: cannot get proper max packet size
[  402.076491][T11278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.086709][ T8538] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  402.095558][ T5721] usb 6-1: new full-speed USB device number 78 using dummy_hcd
[  402.114032][ T8538] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  402.165027][T11278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.189880][T11282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1641'.
[  402.258603][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  402.260195][ T5721] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  402.299715][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.300170][ T5694] dvb-usb: error while querying for an remote control event.
[  402.342875][ T5721] usb 6-1: config 0 descriptor??
[  402.441474][ T5694] usb 4-1: USB disconnect, device number 68
[  402.528778][ T8550] dvb-usb: bulk message failed: -22 (1/0)
[  402.537265][ T8550] dvb-usb: error while querying for an remote control event.
[  402.566400][ T5721] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  402.727848][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  402.733548][T11287] batman_adv: batadv0: Adding interface: dummy0
[  402.752900][ T5694] dvb-usb: error while querying for an remote control event.
[  402.756751][T11287] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.815616][ T5721] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  402.833727][T11287] batman_adv: batadv0: Interface activated: dummy0
[  402.852411][ T5721] [drm] Initialized udl on minor 2
[  402.994964][T11288] batadv0: mtu less than device minimum
[  402.998012][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  403.013098][T11288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.025898][T11288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.037090][T11288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.048384][T11288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.061000][T11288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.072198][T11288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.083958][T11288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.095269][T11288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.106428][T11288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.136825][ T5694] dvb-usb: error while querying for an remote control event.
[  403.197745][ T5721] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  403.207194][ T5721] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  403.218020][ T8538] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  403.239852][ T8538] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  403.250535][ T5721] usb 6-1: USB disconnect, device number 78
[  403.271957][ T8538] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  403.280170][T11291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  403.347964][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  403.369711][T11291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  403.371830][ T5694] dvb-usb: error while querying for an remote control event.
[  403.456535][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'.
[  403.466804][T11291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1643'.
[  403.504903][T11293] ipvlan2: entered allmulticast mode
[  403.591885][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  403.614754][ T5694] dvb-usb: error while querying for an remote control event.
[  403.624582][ T8550] usb 5-1: USB disconnect, device number 81
[  403.785893][ T8550] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  403.865005][T11307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  404.060952][T11311] geneve2: entered promiscuous mode
[  404.060979][T11311] geneve2: entered allmulticast mode
[  404.297914][ T5721] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[  404.489929][ T5721] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  404.544149][ T5721] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  404.566877][ T5721] usb 1-1: config 0 interface 0 has no altsetting 0
[  404.587589][ T5721] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  404.619790][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  404.644668][ T5721] usb 1-1: Product: syz
[  404.671313][ T5721] usb 1-1: Manufacturer: syz
[  404.686674][ T5721] usb 1-1: SerialNumber: syz
[  404.715016][ T5721] usb 1-1: config 0 descriptor??
[  404.739560][T11309] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  404.768238][ T8550] usb 6-1: new full-speed USB device number 79 using dummy_hcd
[  404.814287][ T5721] usb 1-1: selecting invalid altsetting 0
[  405.005955][ T8550] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  405.103273][ T8550] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  405.139451][ T8550] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.172582][ T8550] usb 6-1: Product: syz
[  405.188292][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1652'.
[  405.206395][ T8550] usb 6-1: Manufacturer: syz
[  405.233883][ T8550] usb 6-1: SerialNumber: syz
[  405.308443][ T5721] usb 1-1: USB disconnect, device number 79
[  405.309023][ T8550] usb 6-1: config 0 descriptor??
[  405.551364][ T8550] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  405.584513][ T7295] udevd[7295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  405.640789][ T8550] dvb-usb: bulk message failed: -22 (3/0)
[  405.720873][ T8550] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  405.799993][T11322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.812886][ T8550] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  405.858244][ T8550] usb 6-1: media controller created
[  405.880187][ T8550] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  405.942630][T11322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  406.084585][ T8550] dvb-usb: bulk message failed: -22 (6/0)
[  406.198190][ T8550] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  406.267627][ T8550] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input45
[  406.323487][ T8550] dvb-usb: schedule remote query interval to 150 msecs.
[  406.357969][ T8550] dvb-usb: bulk message failed: -22 (3/0)
[  406.397805][ T8550] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  406.429937][   T29] kauditd_printk_skb: 315 callbacks suppressed
[  406.429959][   T29] audit: type=1326 audit(1779776623.778:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.1.1656" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc1c99ce59 code=0x0
[  406.519250][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  406.532414][ T5694] dvb-usb: error while querying for an remote control event.
[  406.767779][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  406.784746][ T5694] dvb-usb: error while querying for an remote control event.
[  407.019501][ T8550] dvb-usb: bulk message failed: -22 (1/0)
[  407.036580][ T8550] dvb-usb: error while querying for an remote control event.
[  407.199331][T11350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  407.227859][ T8550] dvb-usb: bulk message failed: -22 (1/0)
[  407.255875][ T8550] dvb-usb: error while querying for an remote control event.
[  407.267912][ T5694] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  407.459107][ T8550] dvb-usb: bulk message failed: -22 (1/0)
[  407.467907][ T8550] dvb-usb: error while querying for an remote control event.
[  407.481705][ T5694] usb 1-1: config 0 has no interfaces?
[  407.495642][ T5694] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  407.507438][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.535149][ T5694] usb 1-1: Product: syz
[  407.552275][ T5694] usb 1-1: Manufacturer: syz
[  407.563953][ T5694] usb 1-1: SerialNumber: syz
[  407.605986][ T5694] usb 1-1: config 0 descriptor??
[  407.648791][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  407.663588][ T5694] dvb-usb: error while querying for an remote control event.
[  407.840001][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  407.871914][ T5694] dvb-usb: error while querying for an remote control event.
[  407.935762][ T5694] usb 1-1: USB disconnect, device number 80
[  408.058035][ T8550] dvb-usb: bulk message failed: -22 (1/0)
[  408.071922][ T8550] dvb-usb: error while querying for an remote control event.
[  408.252572][T11362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.257915][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  408.305114][    T9] dvb-usb: error while querying for an remote control event.
[  408.344411][T11362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.466159][T11359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1663'.
[  408.497872][ T5694] dvb-usb: bulk message failed: -22 (1/0)
[  408.509968][ T5694] dvb-usb: error while querying for an remote control event.
[  408.531439][ T5694] usb 6-1: USB disconnect, device number 79
[  408.700907][ T8550] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  408.774087][T11367] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1666'.
[  408.793011][ T5694] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  408.896341][ T8550] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  408.929131][ T8550] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  408.947858][ T8550] usb 4-1: config 0 interface 0 has no altsetting 0
[  408.965210][ T8550] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  408.990915][ T8550] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  409.037733][ T8550] usb 4-1: Product: syz
[  409.050649][ T8550] usb 4-1: Manufacturer: syz
[  409.062036][ T8550] usb 4-1: SerialNumber: syz
[  409.103177][ T8550] usb 4-1: config 0 descriptor??
[  409.126558][T11364] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  409.165023][ T8550] usb 4-1: selecting invalid altsetting 0
[  409.494861][ T8550] usb 4-1: USB disconnect, device number 69
[  409.905810][T11386] netlink: 'syz.3.1670': attribute type 6 has an invalid length.
[  409.927623][T11385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  410.657877][ T8550] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  410.748122][ T5694] usb 6-1: new low-speed USB device number 80 using dummy_hcd
[  410.842677][ T8550] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  410.861607][T11410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1679'.
[  410.871466][ T8550] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  410.891926][ T8550] usb 1-1: Product: syz
[  410.904614][ T8550] usb 1-1: Manufacturer: syz
[  410.921768][ T5694] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  410.930140][ T8550] usb 1-1: SerialNumber: syz
[  410.946439][ T8550] usb 1-1: config 0 descriptor??
[  410.951897][ T5694] usb 6-1: config 0 has no interface number 0
[  410.966181][ T5694] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  410.997136][T11415] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=135226468 (270452936 ns) > initial count (206080398 ns). Using initial count to start timer.
[  411.028186][ T5694] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  411.037627][T11415] netlink: 'syz.4.1678': attribute type 10 has an invalid length.
[  411.052930][ T5694] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  411.070947][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.105325][ T5694] usb 6-1: config 0 descriptor??
[  411.121101][T11380] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  411.138610][ T5694] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  411.161139][ T5721] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  411.230418][T11415] team0: Port device geneve0 added
[  411.325942][T11421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.337256][T11421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.380986][ T5721] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB
[  411.389725][ T5694] usb 6-1: USB disconnect, device number 80
[  411.414294][ T5721] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64
[  411.465358][ T5721] usb 4-1: config 0 interface 0 has no altsetting 0
[  411.489271][ T5721] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  411.518576][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  411.539851][ T5721] usb 4-1: Product: syz
[  411.551236][ T8550] usb 1-1: USB disconnect, device number 81
[  411.552046][ T5721] usb 4-1: Manufacturer: syz
[  411.563163][ T5721] usb 4-1: SerialNumber: syz
[  411.591543][ T5721] usb 4-1: config 0 descriptor??
[  411.608168][T11412] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  411.663327][ T5721] usb 4-1: selecting invalid altsetting 0
[  411.885042][ T5721] usb 4-1: USB disconnect, device number 70
[  412.355870][T11440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  412.637874][ T5694] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  412.645577][ T8550] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  412.819627][ T5694] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  412.879296][ T5694] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  412.888713][ T8550] usb 6-1: Using ep0 maxpacket: 8
[  412.903105][ T8550] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  412.919248][ T5694] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  412.930473][ T8550] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  412.992144][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.002542][ T8550] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  413.014978][ T5694] usb 1-1: Product: syz
[  413.098981][ T5694] usb 1-1: Manufacturer: syz
[  413.112068][ T8550] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024
[  413.127766][ T5694] usb 1-1: SerialNumber: syz
[  413.168294][ T8550] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  413.216891][ T8550] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  413.277868][ T8550] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  413.354600][ T8550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.376319][T11438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1686'.
[  413.703090][ T8550] usb 6-1: GET_CAPABILITIES returned 0
[  413.782703][ T8550] usbtmc 6-1:16.0: can't read capabilities
[  414.181036][ T5694] usb 1-1: unit 4 not found!
[  414.394638][ T5694] usb 1-1: USB disconnect, device number 82
[  415.543662][ T5694] usb 6-1: USB disconnect, device number 81
[  415.815174][T11470] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1691'.
[  416.314994][T11479] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1693'.
[  416.443783][T11485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.454301][T11485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.650342][T11491] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1697'.
[  416.772164][T11493] FAULT_INJECTION: forcing a failure.
[  416.772164][T11493] name failslab, interval 1, probability 0, space 0, times 0
[  416.805356][ T8538] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  416.814659][T11493] CPU: 0 UID: 0 PID: 11493 Comm: syz.1.1698 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  416.814697][T11493] Tainted: [L]=SOFTLOCKUP
[  416.814705][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  416.814717][T11493] Call Trace:
[  416.814727][T11493]  <TASK>
[  416.814735][T11493]  dump_stack_lvl+0xe8/0x150
[  416.814767][T11493]  should_fail_ex+0x412/0x560
[  416.814802][T11493]  should_failslab+0xa8/0x100
[  416.814834][T11493]  ? skb_clone+0x212/0x3a0
[  416.814856][T11493]  kmem_cache_alloc_noprof+0x87/0x650
[  416.814883][T11493]  ? __netlink_lookup+0xc6/0x8b0
[  416.814911][T11493]  skb_clone+0x212/0x3a0
[  416.814936][T11493]  __netlink_deliver_tap+0x404/0x850
[  416.814979][T11493]  ? netlink_deliver_tap+0x2e/0x1b0
[  416.815009][T11493]  netlink_deliver_tap+0x19c/0x1b0
[  416.815039][T11493]  netlink_unicast+0x730/0x8e0
[  416.815077][T11493]  netlink_sendmsg+0x813/0xb40
[  416.815106][T11493]  ? __pfx_netlink_sendmsg+0x10/0x10
[  416.815138][T11493]  ? aa_sock_msg_perm+0xf1/0x1b0
[  416.815167][T11493]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  416.815199][T11493]  ____sys_sendmsg+0x972/0x9f0
[  416.815219][T11493]  ? __might_fault+0xaf/0x130
[  416.815252][T11493]  ? __pfx_____sys_sendmsg+0x10/0x10
[  416.815293][T11493]  ? import_iovec+0x73/0xa0
[  416.815335][T11493]  ___sys_sendmsg+0x2a5/0x360
[  416.815355][T11493]  ? __lock_acquire+0x6b5/0x2cf0
[  416.815384][T11493]  ? __pfx____sys_sendmsg+0x10/0x10
[  416.815444][T11493]  ? __fget_files+0x2a/0x420
[  416.815468][T11493]  ? __fget_files+0x3a0/0x420
[  416.815504][T11493]  __x64_sys_sendmsg+0x1bd/0x2a0
[  416.815528][T11493]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  416.815559][T11493]  ? __pfx_ksys_write+0x10/0x10
[  416.815598][T11493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.815620][T11493]  do_syscall_64+0x15f/0x560
[  416.815640][T11493]  ? trace_irq_disable+0x3b/0x140
[  416.815672][T11493]  ? clear_bhb_loop+0x40/0x90
[  416.815698][T11493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.815724][T11493] RIP: 0033:0x7fdc1c99ce59
[  416.815746][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.815762][T11493] RSP: 002b:00007fdc1d804028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  416.815785][T11493] RAX: ffffffffffffffda RBX: 00007fdc1cc15fa0 RCX: 00007fdc1c99ce59
[  416.815800][T11493] RDX: 0000000000008004 RSI: 0000200000000040 RDI: 0000000000000006
[  416.815814][T11493] RBP: 00007fdc1d804090 R08: 0000000000000000 R09: 0000000000000000
[  416.815827][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.815839][T11493] R13: 00007fdc1cc16038 R14: 00007fdc1cc15fa0 R15: 00007fdc1cd3fa48
[  416.815874][T11493]  </TASK>
[  416.878069][ T8537] usb 4-1: new full-speed USB device number 71 using dummy_hcd
[  417.234787][T11501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.245540][T11501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.281450][ T8538] usb 6-1: config 0 has no interfaces?
[  417.290751][ T8538] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  417.311341][ T8538] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.343042][ T8538] usb 6-1: Product: syz
[  417.350662][ T8537] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  417.367519][ T8538] usb 6-1: Manufacturer: syz
[  417.378083][ T8538] usb 6-1: SerialNumber: syz
[  417.391940][ T8538] usb 6-1: config 0 descriptor??
[  417.427428][ T8537] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  417.440162][ T8537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.455243][ T8537] usb 4-1: Product: syz
[  417.495391][ T8537] usb 4-1: Manufacturer: syz
[  417.517819][ T5721] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  417.540703][ T8537] usb 4-1: SerialNumber: syz
[  417.580567][ T8537] usb 4-1: config 0 descriptor??
[  417.617191][ T8537] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  417.641187][ T8537] dvb-usb: bulk message failed: -22 (3/0)
[  417.657858][ T8550] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  417.673928][ T5694] usb 6-1: USB disconnect, device number 82
[  417.720014][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.731101][ T8537] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  417.745125][ T5721] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  417.773220][ T8537] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  417.795294][ T5721] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  417.819650][ T8550] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  417.834553][ T8537] usb 4-1: media controller created
[  417.840657][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.857128][ T8537] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  417.867291][ T5721] usb 1-1: Product: syz
[  417.874436][ T8550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  417.877703][ T5721] usb 1-1: Manufacturer: syz
[  417.890433][T11488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.915481][ T8550] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  417.930527][ T8537] dvb-usb: bulk message failed: -22 (6/0)
[  417.946953][ T8550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  417.959487][ T8550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  417.959596][ T8537] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  417.972742][ T8550] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  417.981485][ T5721] usb 1-1: SerialNumber: syz
[  417.992060][T11488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.007561][ T8550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.039758][ T8537] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46
[  418.055561][ T8550] usb 5-1: Product: syz
[  418.075420][T11509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1702'.
[  418.088260][ T8550] usb 5-1: Manufacturer: syz
[  418.090284][ T8537] dvb-usb: schedule remote query interval to 150 msecs.
[  418.099987][ T8550] usb 5-1: SerialNumber: syz
[  418.119680][ T8550] usb 5-1: config 0 descriptor??
[  418.145629][T11509] fuse: Unknown parameter 'fd0x000000000000000a'
[  418.156286][ T8550] iguanair 5-1:0.0: probe with driver iguanair failed with error -12
[  418.203726][ T8537] dvb-usb: bulk message failed: -22 (3/0)
[  418.231724][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'.
[  418.245156][ T8537] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  418.358257][ T8537] dvb-usb: bulk message failed: -22 (1/0)
[  418.365428][ T8537] dvb-usb: error while querying for an remote control event.
[  418.584863][ T8537] dvb-usb: bulk message failed: -22 (1/0)
[  418.602424][ T8537] dvb-usb: error while querying for an remote control event.
[  418.790085][ T5721] usb 1-1: unit 4 not found!
[  418.857869][ T8537] dvb-usb: bulk message failed: -22 (1/0)
[  418.877319][ T8537] dvb-usb: error while querying for an remote control event.
[  418.886910][T11515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1704'.
[  419.036769][ T5721] usb 1-1: USB disconnect, device number 83
[  419.078875][ T8561] dvb-usb: bulk message failed: -22 (1/0)
[  419.096125][ T8561] dvb-usb: error while querying for an remote control event.
[  419.288085][ T8561] dvb-usb: bulk message failed: -22 (1/0)
[  419.309831][ T8561] dvb-usb: error while querying for an remote control event.
[  419.497942][ T8561] dvb-usb: bulk message failed: -22 (1/0)
[  419.513619][ T8561] dvb-usb: error while querying for an remote control event.
[  419.699234][ T8561] dvb-usb: bulk message failed: -22 (1/0)
[  419.705633][ T8561] dvb-usb: error while querying for an remote control event.
[  419.897748][ T8561] dvb-usb: bulk message failed: -22 (1/0)
[  419.915368][ T8561] dvb-usb: error while querying for an remote control event.
[  419.927781][ T8550] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  420.077894][ T8550] usb 1-1: device descriptor read/64, error -71
[  420.109312][ T8561] dvb-usb: bulk message failed: -22 (1/0)
[  420.125354][ T8561] dvb-usb: error while querying for an remote control event.
[  420.186026][ T5694] usb 5-1: USB disconnect, device number 82
[  420.188499][ T8561] usb 4-1: USB disconnect, device number 71
[  420.337831][ T8550] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  420.411407][ T8561] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  420.488220][ T8550] usb 1-1: device descriptor read/64, error -71
[  420.533611][T11531] netlink: 'syz.4.1709': attribute type 11 has an invalid length.
[  420.563661][T11531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1709'.
[  420.628646][ T8550] usb usb1-port1: attempt power cycle
[  420.811432][ T8561] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[  420.981448][ T8561] usb 4-1: config 0 has an invalid descriptor of length 80, skipping remainder of the config
[  420.987784][ T8550] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  420.992053][ T8561] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  421.017824][ T8561] usb 4-1: config 0 interface 0 has no altsetting 0
[  421.031873][ T8561] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  421.038425][ T8550] usb 1-1: device descriptor read/8, error -71
[  421.044033][ T8561] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  421.058090][ T8561] usb 4-1: Product: syz
[  421.067431][ T8561] usb 4-1: Manufacturer: syz
[  421.081867][ T8561] usb 4-1: SerialNumber: syz
[  421.099894][ T8561] usb 4-1: config 0 descriptor??
[  421.230749][ T8561] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  421.294829][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.297797][ T8550] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  421.378675][ T8550] usb 1-1: device descriptor read/8, error -71
[  421.472976][ T8561] usb 4-1: USB disconnect, device number 72
[  421.511126][ T8550] usb usb1-port1: unable to enumerate USB device
[  421.927915][T11551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1715'.
[  421.997899][ T8561] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  422.008851][T11551] kvm: kvm [11550]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  422.020967][T11551] kvm: kvm [11550]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  422.177854][ T8561] usb 4-1: Using ep0 maxpacket: 16
[  422.193737][ T8561] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  422.230519][ T8561] usb 4-1: config 1 has no interface number 0
[  422.265083][ T8561] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  422.301001][ T8561] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  422.313463][T11554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  422.323573][ T8561] usb 4-1: config 1 interface 105 has no altsetting 0
[  422.331144][T11554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  422.345773][ T8561] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  422.360701][T11554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1716'.
[  422.371014][ T8561] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  422.399992][ T8561] usb 4-1: Product: syz
[  422.413458][ T8561] usb 4-1: Manufacturer: syz
[  422.427614][ T8561] usb 4-1: SerialNumber: syz
[  422.446049][T11544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  422.457962][T11544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  422.880885][T11544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  422.893568][T11544] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  422.909978][T11568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1719'.
[  422.925295][T11568] fuse: Unknown parameter 'fd0x000000000000000a'
[  422.990924][ T8561] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  423.017835][ T8550] usb 6-1: new full-speed USB device number 83 using dummy_hcd
[  423.036525][ T8561] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  423.051648][ T5714] usb 5-1: new full-speed USB device number 83 using dummy_hcd
[  423.052981][ T8561] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  423.150656][T11572] netlink: 'syz.3.1720': attribute type 11 has an invalid length.
[  423.167809][T11572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1720'.
[  423.231420][ T8550] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  423.279081][ T8550] usb 6-1: config 0 has no interface number 0
[  423.300889][ T5714] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  423.314659][ T8561] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, aa:66:02:39:2e:32
[  423.332629][ T8550] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  423.361441][ T8550] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  423.363882][ T8561] usb 4-1: USB disconnect, device number 73
[  423.387709][T11574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.423287][ T8550] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  423.434321][ T5714] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  423.463272][T11574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.473574][ T8561] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  423.509474][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.527326][ T8550] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  423.552699][ T5714] usb 5-1: Product: syz
[  423.563396][ T8550] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  423.578481][ T5714] usb 5-1: Manufacturer: syz
[  423.600794][   T29] audit: type=1326 audit(1779776640.948:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  423.641101][ T5714] usb 5-1: SerialNumber: syz
[  423.641485][T11574] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1721' sets config #0
[  423.659247][ T8550] usb 6-1: Product: syz
[  423.693228][ T8550] usb 6-1: SerialNumber: syz
[  423.716747][   T29] audit: type=1326 audit(1779776640.978:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  423.717873][ T5714] usb 5-1: config 0 descriptor??
[  423.751252][ T8550] usb 6-1: config 0 descriptor??
[  423.782312][ T8550] cm109 6-1:0.8: invalid payload size 0, expected 4
[  423.784690][ T8561] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  423.832411][ T8550] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input48
[  423.854768][ T8561] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  423.875114][   T29] audit: type=1326 audit(1779776640.978:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  423.914241][ T8561] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  423.972563][   T29] audit: type=1326 audit(1779776640.978:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  424.019459][ T5714] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  424.019525][ T5714] dvb-usb: bulk message failed: -22 (3/0)
[  424.020138][   T29] audit: type=1326 audit(1779776640.978:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  424.020223][   T29] audit: type=1326 audit(1779776640.978:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  424.020277][   T29] audit: type=1326 audit(1779776640.978:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  424.020354][   T29] audit: type=1326 audit(1779776640.978:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  424.020402][   T29] audit: type=1326 audit(1779776640.978:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  424.020445][   T29] audit: type=1326 audit(1779776640.978:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11573 comm="syz.1.1721" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1c99ce59 code=0x7ffc0000
[  424.022046][T11574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  424.022536][T11574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.024401][ T8550] ------------[ cut here ]------------
[  424.024528][ T8550] URB ffff88802aea6f00 submitted while active
[  424.024545][ T8550] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: kworker/0:8/8550
[  424.024587][ T8550] Modules linked in:
[  424.024675][ T8550] CPU: 0 UID: 0 PID: 8550 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.024705][ T8550] Tainted: [L]=SOFTLOCKUP
[  424.024716][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  424.024731][ T8550] Workqueue: usb_hub_wq hub_event
[  424.024762][ T8550] RIP: 0010:usb_submit_urb+0x7e/0x18b0
[  424.024817][ T8550] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 07 12 f4 fa 49 83 3e 00 74 40 e8 3c cd 88 fa 48 8d 3d c5 5c 01 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 21 cd 88 fa eb 05 e8 1a cd
[  424.024838][ T8550] RSP: 0018:ffffc900053beb30 EFLAGS: 00010283
[  424.024860][ T8550] RAX: ffffffff873ce8c4 RBX: ffff88802aea6f00 RCX: 0000000000100000
[  424.024879][ T8550] RDX: ffffc9001b8ed000 RSI: ffff88802aea6f00 RDI: ffffffff903e4590
[  424.024896][ T8550] RBP: 000000000000000f R08: ffffffff9030dbf7 R09: 1ffffffff2061b7e
[  424.024913][ T8550] R10: dffffc0000000000 R11: fffffbfff2061b7f R12: 0000000000000cc0
[  424.024958][ T8550] R13: ffff88807634c048 R14: ffff88802aea6f08 R15: dffffc0000000000
[  424.024976][ T8550] FS:  0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000
[  424.024995][ T8550] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.025011][ T8550] CR2: 0000200000110030 CR3: 0000000029352000 CR4: 00000000003526f0
[  424.025033][ T8550] Call Trace:
[  424.025044][ T8550]  <TASK>
[  424.025055][ T8550]  ? lockdep_hardirqs_on+0x7a/0x110
[  424.025109][ T8550]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  424.025143][ T8550]  ? __pm_runtime_resume+0x129/0x180
[  424.025179][ T8550]  cm109_input_open+0x1fb/0x480
[  424.025211][ T8550]  input_open_device+0x1f8/0x3b0
[  424.025280][ T8550]  kbd_connect+0xf6/0x150
[  424.025308][ T8550]  input_register_device+0xce0/0x1140
[  424.025352][ T8550]  cm109_usb_probe+0x1190/0x1690
[  424.025433][ T8550]  usb_probe_interface+0x659/0xc70
[  424.025479][ T8550]  ? __pfx_usb_probe_interface+0x10/0x10
[  424.025514][ T8550]  really_probe+0x267/0xaf0
[  424.025580][ T8550]  __driver_probe_device+0x1ef/0x380
[  424.025614][ T8550]  driver_probe_device+0x4f/0x240
[  424.025647][ T8550]  __device_attach_driver+0x279/0x430
[  424.025709][ T8550]  bus_for_each_drv+0x258/0x2f0
[  424.025734][ T8550]  ? __pfx___device_attach_driver+0x10/0x10
[  424.025764][ T8550]  ? __pfx_bus_for_each_drv+0x10/0x10
[  424.025788][ T8550]  ? lockdep_hardirqs_on+0x7a/0x110
[  424.025810][ T8550]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  424.025901][ T8550]  __device_attach+0x2c5/0x450
[  424.025936][ T8550]  ? __pfx___device_attach+0x10/0x10
[  424.025970][ T8550]  ? _raw_spin_unlock+0x28/0x50
[  424.026037][ T8550]  device_initial_probe+0xa1/0xd0
[  424.026071][ T8550]  bus_probe_device+0x12a/0x220
[  424.026102][ T8550]  device_add+0x7e9/0xbb0
[  424.026134][ T8550]  usb_set_configuration+0x1a87/0x2110
[  424.026230][ T8550]  usb_generic_driver_probe+0x8d/0x150
[  424.026266][ T8550]  usb_probe_device+0x1c4/0x3b0
[  424.026302][ T8550]  ? __pfx_usb_probe_device+0x10/0x10
[  424.026360][ T8550]  really_probe+0x267/0xaf0
[  424.026402][ T8550]  __driver_probe_device+0x1ef/0x380
[  424.026437][ T8550]  driver_probe_device+0x4f/0x240
[  424.026510][ T8550]  __device_attach_driver+0x279/0x430
[  424.026551][ T8550]  bus_for_each_drv+0x258/0x2f0
[  424.026578][ T8550]  ? __pfx___device_attach_driver+0x10/0x10
[  424.026611][ T8550]  ? __pfx_bus_for_each_drv+0x10/0x10
[  424.026668][ T8550]  ? lockdep_hardirqs_on+0x7a/0x110
[  424.026694][ T8550]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  424.026734][ T8550]  __device_attach+0x2c5/0x450
[  424.026768][ T8550]  ? __pfx___device_attach+0x10/0x10
[  424.026834][ T8550]  ? _raw_spin_unlock+0x28/0x50
[  424.026873][ T8550]  device_initial_probe+0xa1/0xd0
[  424.026905][ T8550]  bus_probe_device+0x12a/0x220
[  424.026936][ T8550]  device_add+0x7e9/0xbb0
[  424.027002][ T8550]  usb_new_device+0xa08/0x16f0
[  424.027046][ T8550]  ? __pfx_usb_new_device+0x10/0x10
[  424.027076][ T8550]  ? _raw_spin_unlock_irq+0x23/0x50
[  424.027139][ T8550]  hub_event+0x2a1c/0x4f30
[  424.027166][ T8550]  ? do_raw_spin_unlock+0xf5/0x210
[  424.027287][ T8550]  ? __pfx_hub_event+0x10/0x10
[  424.027320][ T8550]  ? process_scheduled_works+0xa70/0x1860
[  424.027356][ T8550]  ? process_scheduled_works+0xa70/0x1860
[  424.027381][ T8550]  ? process_scheduled_works+0xa70/0x1860
[  424.027439][ T8550]  process_scheduled_works+0xb5d/0x1860
[  424.027513][ T8550]  ? __pfx_process_scheduled_works+0x10/0x10
[  424.027574][ T8550]  ? assign_work+0x3d5/0x5e0
[  424.027608][ T8550]  worker_thread+0xa53/0xfc0
[  424.027785][ T8550]  kthread+0x389/0x470
[  424.027818][ T8550]  ? __pfx_worker_thread+0x10/0x10
[  424.027842][ T8550]  ? __pfx_kthread+0x10/0x10
[  424.027876][ T8550]  ret_from_fork+0x514/0xb70
[  424.027907][ T8550]  ? __pfx_ret_from_fork+0x10/0x10
[  424.027931][ T8550]  ? __switch_to+0xc79/0x1410
[  424.027969][ T8550]  ? __pfx_kthread+0x10/0x10
[  424.028002][ T8550]  ret_from_fork_asm+0x1a/0x30
[  424.028055][ T8550]  </TASK>
[  424.028069][ T8550] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  424.028088][ T8550] CPU: 0 UID: 0 PID: 8550 Comm: kworker/0:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.028116][ T8550] Tainted: [L]=SOFTLOCKUP
[  424.028126][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  424.028141][ T8550] Workqueue: usb_hub_wq hub_event
[  424.028170][ T8550] Call Trace:
[  424.028180][ T8550]  <TASK>
[  424.028189][ T8550]  vpanic+0x56c/0xa60
[  424.028215][ T8550]  ? __pfx__printk+0x10/0x10
[  424.028245][ T8550]  ? __pfx_vpanic+0x10/0x10
[  424.028267][ T8550]  ? is_bpf_text_address+0x292/0x2b0
[  424.028292][ T8550]  ? is_bpf_text_address+0x26/0x2b0
[  424.028325][ T8550]  panic+0xc5/0xd0
[  424.028352][ T8550]  ? __pfx_panic+0x10/0x10
[  424.028389][ T8550]  ? ret_from_fork_asm+0x1a/0x30
[  424.028423][ T8550]  __warn+0x315/0x4c0
[  424.028447][ T8550]  ? usb_submit_urb+0x7b/0x18b0
[  424.028473][ T8550]  ? usb_submit_urb+0x7b/0x18b0
[  424.028497][ T8550]  __report_bug+0x29a/0x540
[  424.028549][ T8550]  ? usb_submit_urb+0x7b/0x18b0
[  424.028574][ T8550]  ? __pfx___report_bug+0x10/0x10
[  424.028606][ T8550]  ? __mutex_trylock_common+0x158/0x260
[  424.028649][ T8550]  ? preempt_schedule_thunk+0x16/0x30
[  424.028690][ T8550]  report_bug_entry+0x19a/0x290
[  424.028726][ T8550]  ? usb_submit_urb+0x7e/0x18b0
[  424.028748][ T8550]  ? usb_submit_urb+0x83/0x18b0
[  424.028770][ T8550]  handle_bug+0xce/0x200
[  424.028799][ T8550]  exc_invalid_op+0x1a/0x50
[  424.028825][ T8550]  asm_exc_invalid_op+0x1a/0x20
[  424.028847][ T8550] RIP: 0010:usb_submit_urb+0x7e/0x18b0
[  424.028873][ T8550] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 07 12 f4 fa 49 83 3e 00 74 40 e8 3c cd 88 fa 48 8d 3d c5 5c 01 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 21 cd 88 fa eb 05 e8 1a cd
[  424.028891][ T8550] RSP: 0018:ffffc900053beb30 EFLAGS: 00010283
[  424.028911][ T8550] RAX: ffffffff873ce8c4 RBX: ffff88802aea6f00 RCX: 0000000000100000
[  424.028928][ T8550] RDX: ffffc9001b8ed000 RSI: ffff88802aea6f00 RDI: ffffffff903e4590
[  424.028945][ T8550] RBP: 000000000000000f R08: ffffffff9030dbf7 R09: 1ffffffff2061b7e
[  424.028961][ T8550] R10: dffffc0000000000 R11: fffffbfff2061b7f R12: 0000000000000cc0
[  424.028977][ T8550] R13: ffff88807634c048 R14: ffff88802aea6f08 R15: dffffc0000000000
[  424.029004][ T8550]  ? usb_submit_urb+0x74/0x18b0
[  424.029037][ T8550]  ? lockdep_hardirqs_on+0x7a/0x110
[  424.029059][ T8550]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  424.029094][ T8550]  ? __pm_runtime_resume+0x129/0x180
[  424.029131][ T8550]  cm109_input_open+0x1fb/0x480
[  424.029161][ T8550]  input_open_device+0x1f8/0x3b0
[  424.029200][ T8550]  kbd_connect+0xf6/0x150
[  424.029232][ T8550]  input_register_device+0xce0/0x1140
[  424.029277][ T8550]  cm109_usb_probe+0x1190/0x1690
[  424.029330][ T8550]  usb_probe_interface+0x659/0xc70
[  424.029378][ T8550]  ? __pfx_usb_probe_interface+0x10/0x10
[  424.029406][ T8550]  really_probe+0x267/0xaf0
[  424.029446][ T8550]  __driver_probe_device+0x1ef/0x380
[  424.029481][ T8550]  driver_probe_device+0x4f/0x240
[  424.029526][ T8550]  __device_attach_driver+0x279/0x430
[  424.029561][ T8550]  bus_for_each_drv+0x258/0x2f0
[  424.029586][ T8550]  ? __pfx___device_attach_driver+0x10/0x10
[  424.029619][ T8550]  ? __pfx_bus_for_each_drv+0x10/0x10
[  424.029645][ T8550]  ? lockdep_hardirqs_on+0x7a/0x110
[  424.029668][ T8550]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  424.029706][ T8550]  __device_attach+0x2c5/0x450
[  424.029740][ T8550]  ? __pfx___device_attach+0x10/0x10
[  424.029773][ T8550]  ? _raw_spin_unlock+0x28/0x50
[  424.029811][ T8550]  device_initial_probe+0xa1/0xd0
[  424.029843][ T8550]  bus_probe_device+0x12a/0x220
[  424.029871][ T8550]  device_add+0x7e9/0xbb0
[  424.029904][ T8550]  usb_set_configuration+0x1a87/0x2110
[  424.029967][ T8550]  usb_generic_driver_probe+0x8d/0x150
[  424.029999][ T8550]  usb_probe_device+0x1c4/0x3b0
[  424.030030][ T8550]  ? __pfx_usb_probe_device+0x10/0x10
[  424.030059][ T8550]  really_probe+0x267/0xaf0
[  424.030100][ T8550]  __driver_probe_device+0x1ef/0x380
[  424.030134][ T8550]  driver_probe_device+0x4f/0x240
[  424.030166][ T8550]  __device_attach_driver+0x279/0x430
[  424.030203][ T8550]  bus_for_each_drv+0x258/0x2f0
[  424.030229][ T8550]  ? __pfx___device_attach_driver+0x10/0x10
[  424.030258][ T8550]  ? __pfx_bus_for_each_drv+0x10/0x10
[  424.030283][ T8550]  ? lockdep_hardirqs_on+0x7a/0x110
[  424.030306][ T8550]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  424.030345][ T8550]  __device_attach+0x2c5/0x450
[  424.030379][ T8550]  ? __pfx___device_attach+0x10/0x10
[  424.030411][ T8550]  ? _raw_spin_unlock+0x28/0x50
[  424.030449][ T8550]  device_initial_probe+0xa1/0xd0
[  424.030482][ T8550]  bus_probe_device+0x12a/0x220
[  424.030521][ T8550]  device_add+0x7e9/0xbb0
[  424.030556][ T8550]  usb_new_device+0xa08/0x16f0
[  424.030596][ T8550]  ? __pfx_usb_new_device+0x10/0x10
[  424.030627][ T8550]  ? _raw_spin_unlock_irq+0x23/0x50
[  424.030661][ T8550]  hub_event+0x2a1c/0x4f30
[  424.030688][ T8550]  ? do_raw_spin_unlock+0xf5/0x210
[  424.030779][ T8550]  ? __pfx_hub_event+0x10/0x10
[  424.030809][ T8550]  ? process_scheduled_works+0xa70/0x1860
[  424.030842][ T8550]  ? process_scheduled_works+0xa70/0x1860
[  424.030867][ T8550]  ? process_scheduled_works+0xa70/0x1860
[  424.030892][ T8550]  process_scheduled_works+0xb5d/0x1860
[  424.030956][ T8550]  ? __pfx_process_scheduled_works+0x10/0x10
[  424.030990][ T8550]  ? assign_work+0x3d5/0x5e0
[  424.031020][ T8550]  worker_thread+0xa53/0xfc0
[  424.031076][ T8550]  kthread+0x389/0x470
[  424.031109][ T8550]  ? __pfx_worker_thread+0x10/0x10
[  424.031132][ T8550]  ? __pfx_kthread+0x10/0x10
[  424.031164][ T8550]  ret_from_fork+0x514/0xb70
[  424.031192][ T8550]  ? __pfx_ret_from_fork+0x10/0x10
[  424.031217][ T8550]  ? __switch_to+0xc79/0x1410
[  424.031253][ T8550]  ? __pfx_kthread+0x10/0x10
[  424.031283][ T8550]  ret_from_fork_asm+0x1a/0x30
[  424.031330][ T8550]  </TASK>
[  424.031497][ T8550] Kernel Offset: disabled