last executing test programs:

2m34.495753342s ago: executing program 1 (id=14):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000600)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)='(\x00', &(0x7f0000000440)='(\'@\x96\x00']}, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffe, 0x6, 0xff, @scatter={0x0, 0x1200, 0x0}, &(0x7f00000000c0)='\b\x00\fj\bH', 0x0, 0x0, 0x0, 0x0, 0x0})

2m34.248623995s ago: executing program 1 (id=15):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setgroups(0x0, 0x0)
setregid(0xffffffffffffffff, r1)
socket$inet(0x2, 0x2, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="781100001100010000000000020000001d0000006411e3800800228004002b80080035"], 0x1178}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m33.955200565s ago: executing program 1 (id=16):
syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000018203010902680002010040000904000001020e0000052406"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x3, 0x6, 0x2, 0x8, @tick=0x100, {0x9, 0xf7}, {0xe, 0x3}, @result={0x5, 0x1}}, {0xc4, 0x88, 0xc6, 0x81, @time={0x1, 0x5}, {0x86, 0x8}, {0x2, 0x1}, @control={0xa8, 0x400, 0x7}}, {0x8b, 0x7, 0x64, 0x0, @tick=0x80000000, {0x7}, {0x7, 0xba}, @addr={0x1, 0x95}}, {0x1, 0x2, 0x2, 0x80, @time={0x4, 0x5}, {0x2, 0x5}, {0x9, 0x1}, @result={0xd8c, 0x5}}, {0x3, 0x7, 0x2, 0xf, @time={0xa, 0x5}, {0x8, 0xa}, {0x49, 0x3}, @note={0x8, 0x6, 0x1, 0x9, 0x8}}, {0x3, 0x70, 0x5, 0x98, @tick=0x7f, {0xe5, 0xf3}, {0x7, 0x78}, @ext={0x32, &(0x7f0000000000)="1001cf7950b0d8d99d1be44c645425e711cc5318775bf2fb10bf57c4ec0b60e496f039b20dcf863d629dae1e9eb31873dae1"}}, {0x8, 0x5, 0x4, 0x6, @tick=0x47, {0x2, 0x5}, {0x1, 0xb6}, @control={0x78, 0x7, 0x4}}, {0x2, 0xe8, 0xd8, 0x6, @tick=0x9, {0x81, 0x9}, {0x2, 0x5}, @addr={0x4, 0xd}}, {0x0, 0x2, 0x8, 0x80, @tick=0x7, {0x1, 0x7}, {0xb}, @control={0x5, 0x8}}], 0xfc)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x200})
ioctl(r0, 0x108b21, &(0x7f0000000040))

2m32.5125333s ago: executing program 1 (id=22):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
write(r1, &(0x7f0000000000)="2e000400", 0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe)
r2 = socket$netlink(0x10, 0x3, 0x0)
mlockall(0x7)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r3)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
mount(0x0, 0x0, 0x0, 0x901001, 0x0)
mount$bind(0x0, 0x0, 0x0, 0x800000, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRESOCT=r2, @ANYBLOB="58569dca7000fddbdf2588522ec30f0cd6b10fb55b14b0ec2617010400000000000002410000000c0013", @ANYRES16=r8], 0x28}}, 0x4008000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x248440, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60)
ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000084000040"])
sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r8, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x2004c8c5)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
syz_usb_connect$uac1(0x4, 0xdc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r8, @ANYRES8=0x0, @ANYRES16=r9], 0x0)
lseek(0xffffffffffffffff, 0x10000000007, 0x3)

2m31.482869806s ago: executing program 1 (id=29):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppoe(0x18, 0x1, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe, 0x3, "daec698a138e1829cf6e"}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x42}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x21dc}}, './file0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd014000008100080009"], 0x248}}, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r6, r6)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58)
r8 = accept$alg(r7, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0xe803)
accept4(r8, 0x0, 0x0, 0x80000)
mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2)
chdir(&(0x7f0000000140)='./bus\x00')
setpgid(0x0, r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES16=r3, @ANYBLOB="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", @ANYRES8], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10000014)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200028bd7000fbdbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000800005500fc03e21b368e0a4bd5013847a6000014000400cbee73a69cc696021851ff07ffff000030000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x40000)

2m31.109366437s ago: executing program 1 (id=32):
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x6) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, &(0x7f0000000080))
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r8 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
r9 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$BTRFS_IOC_RM_DEV(r9, 0x5411, 0x0)
write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xac, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0)
r10 = syz_clone(0x28049980, &(0x7f0000000240)="fa79b097da2aab7838d5613192450118c5c28e24a0ea226e23eff34b4d0a844959ec8ed8c037fec7f450ebfba6850d30a0c74d6c7ae82083c50eeaf1ddc4b6310723d9000766328a71000d6a940b51c69ca9d01d3a9eeb43aa15516ebc68fa811373ecfbdf25315bd5839c2498c04f3727b9db896837a3eee5d2c338aa113f0f9b7edda56b73e4522b1ab242a5df0ecf79b363ea5be9bce756e5f541adfd96f68000b86b7407bd9365451722aafe3bef945c09798d19478b5e3867e0e2bf97f6e377c7b13ef20524c2c4b6b29885ca48b5e0cb040000000000000005", 0xdc, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)="8befac7ec0c1fc19b592eea867526ba69b52cac6bdbe0821709b31127675b9cbd2759e0e5517ad64fd411db10fef8d4eb6fe2bea78b20dc3ece08539cd40b07d5cf43a0a21ff0bc5fd49b981e76f3e58e6953697555caaf089e77a660c30460fe0d730d27ae028732fcf1caaa8564d4f6f06dfac4821989aea11961a8b2ae4ce2e35fc872d11d40d7150e0afec69ec7dcb2f561e5fb34afb65e583edd9")
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r13=>0x0})
ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000880)) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x148, r12, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x7c, 0x1, 0x8, 0x40, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x2}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x3}, {0x1, 0x7}, {0x5, 0x4}, {0x4, 0xa}, {0x4, 0x9}, {0x6, 0x3}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0xa}, {0x3, 0x3}, {0x2, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x8}, {0x3, 0x9}, {0x7, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x6, 0x3}, {0x5}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x7, 0xa}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x23e3, 0x6, 0x9, 0x81, 0x4, 0x73, 0xc0, 0xa69]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xe, 0x0, 0xfff9, 0x0, 0x9, 0xe39]}}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xf}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xe4}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xe}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1}]}]}, 0x148}}, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1d0) (async)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x200000, &(0x7f0000000040)={[{@size={'size', 0x3d, [0x25]}}]}) (async)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r11, @ANYBLOB="000126bd7000fedbdf25090000000c0099000200000063000000110007002711609e78c22356af5e94bb8300000005000200000000000800070001000000040006000400060004002800400050800a000400be8d54d523ec000005000200030a000011000100f554ca45e02dc41a81abf93b430000063b372c00000011000700f84c1d6fe5e7f4f78babcdfbf60000000800090001ac0f00"/166], 0xb8}, 0x1, 0x0, 0x0, 0x51}, 0x4) (async)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r10, 0x0, 0x4004)
sendfile(r8, r8, &(0x7f0000000080), 0x7f03)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f0000000540)={0x10001, 0xc, 0x2})

2m15.946267333s ago: executing program 32 (id=32):
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x6) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, &(0x7f0000000080))
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r8 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
r9 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$BTRFS_IOC_RM_DEV(r9, 0x5411, 0x0)
write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xac, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3ff, 0x401}}, {0x0, 0x11}}}, 0xa0)
r10 = syz_clone(0x28049980, &(0x7f0000000240)="fa79b097da2aab7838d5613192450118c5c28e24a0ea226e23eff34b4d0a844959ec8ed8c037fec7f450ebfba6850d30a0c74d6c7ae82083c50eeaf1ddc4b6310723d9000766328a71000d6a940b51c69ca9d01d3a9eeb43aa15516ebc68fa811373ecfbdf25315bd5839c2498c04f3727b9db896837a3eee5d2c338aa113f0f9b7edda56b73e4522b1ab242a5df0ecf79b363ea5be9bce756e5f541adfd96f68000b86b7407bd9365451722aafe3bef945c09798d19478b5e3867e0e2bf97f6e377c7b13ef20524c2c4b6b29885ca48b5e0cb040000000000000005", 0xdc, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)="8befac7ec0c1fc19b592eea867526ba69b52cac6bdbe0821709b31127675b9cbd2759e0e5517ad64fd411db10fef8d4eb6fe2bea78b20dc3ece08539cd40b07d5cf43a0a21ff0bc5fd49b981e76f3e58e6953697555caaf089e77a660c30460fe0d730d27ae028732fcf1caaa8564d4f6f06dfac4821989aea11961a8b2ae4ce2e35fc872d11d40d7150e0afec69ec7dcb2f561e5fb34afb65e583edd9")
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) (async)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r13=>0x0})
ioctl$SNDRV_TIMER_IOCTL_INFO(r8, 0x80e85411, &(0x7f0000000880)) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x148, r12, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7}, @NL80211_ATTR_TX_RATES={0xb0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5, 0x7c, 0x1, 0x8, 0x40, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x5}, {0x3, 0x5}, {0x2}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x3}, {0x1, 0x7}, {0x5, 0x4}, {0x4, 0xa}, {0x4, 0x9}, {0x6, 0x3}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x2}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0xa}, {0x3, 0x3}, {0x2, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x8}, {0x3, 0x9}, {0x7, 0x3}, {0x4, 0x4}, {0x0, 0x9}, {0x6, 0x3}, {0x5}, {0x7, 0xa}, {0x0, 0x1}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x7}, {0x4, 0xa}, {0x5, 0x5}, {0x6, 0x6}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x7}, {0x7, 0xa}, {0x7, 0x4}, {0x5, 0x2}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x23e3, 0x6, 0x9, 0x81, 0x4, 0x73, 0xc0, 0xa69]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xe, 0x0, 0xfff9, 0x0, 0x9, 0xe39]}}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xf}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0xe4}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xe}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x1}]}]}, 0x148}}, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1d0) (async)
mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x200000, &(0x7f0000000040)={[{@size={'size', 0x3d, [0x25]}}]}) (async)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r11, @ANYBLOB="000126bd7000fedbdf25090000000c0099000200000063000000110007002711609e78c22356af5e94bb8300000005000200000000000800070001000000040006000400060004002800400050800a000400be8d54d523ec000005000200030a000011000100f554ca45e02dc41a81abf93b430000063b372c00000011000700f84c1d6fe5e7f4f78babcdfbf60000000800090001ac0f00"/166], 0xb8}, 0x1, 0x0, 0x0, 0x51}, 0x4) (async)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r10, 0x0, 0x4004)
sendfile(r8, r8, &(0x7f0000000080), 0x7f03)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f0000000540)={0x10001, 0xc, 0x2})

2m15.555663225s ago: executing program 3 (id=87):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdff306"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000240)=@x86={0x49, 0x3c, 0x5, 0x0, 0x401, 0x0, 0x4, 0x7f, 0xd, 0x6, 0x7, 0x2, 0x0, 0x40200, 0x7, 0x1, 0x5, 0xc, 0x9, '\x00', 0xf5, 0x208})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x1)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="8b5f47ee6f6b2684bced22a9cfb75fe0368d28a6b8e78d19aedf62a3084e1721213ae0baf603a3599d328130f6bdfd69e12a9c1d2dd7d21fc9cdd2072d5b0e6059fbcdc24da6de1bdb153ad26ff0fc720f5ca9b13ba01576561d3ceb7885740b01d72dbaef478b9cd201793a47585ab161e104dc631c12400d3142bb24178d67050b6744125ee31da47d98c9409fa34f18ee2c899b98361d8d4c36a0a6ff33a0f5cea1", 0xa3}], 0x1)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0)
migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc01000000020000000200000000000000000000000000000800"], 0xe0}}, 0x0)
r7 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe)
request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r7)

2m15.14813008s ago: executing program 3 (id=88):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000070a010400000000000000000200000063d3e7c19ca970bb823dde6b0c923000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="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", 0x424}], 0x2}, 0x0)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x931, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0xc040)
read(r0, &(0x7f00000000c0)=""/46, 0x2e)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETPERSIST(r0, 0x400454ce, 0xffffffffffffffff)

2m14.62545641s ago: executing program 3 (id=91):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x4c, 0x0, &(0x7f00000000c0)) (async)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000fcffffff0e000000000020004000"], 0x38)
close(r1) (async)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x1}, ["", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10008800}, 0x8090) (async)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)

2m14.460375636s ago: executing program 3 (id=93):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c7498, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'})
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000240), 0x0, 0x0}})
syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x0, 0xb2, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030ba1d5000000000000130000000c0009800800020000000000"], 0x20}}, 0x0)

2m14.146473074s ago: executing program 3 (id=96):
syz_usb_connect$uac1(0x2, 0xad, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0xe, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0x9], 0x4}, @mixer_unit={0x5, 0x24, 0x4, 0x2, 0x1}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x6]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x6a7, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x44, 0xe7, 0xf4, 0x0, 0x1199, 0x9002, 0xe998, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x695, 0x3, 0xfa, 0x8, 0x140, 0x10, [{{0x9, 0x4, 0x8e, 0x1, 0x5, 0x79, 0x86, 0x86, 0x3, [@hid_hid={0x9, 0x21, 0x9, 0x2, 0x1, {0x22, 0xc35}}], [{{0x9, 0x5, 0x8b, 0x10, 0x0, 0x40, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}, {{0x9, 0x5, 0xd, 0x1c, 0x40, 0x7, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0xfe98}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x1b, 0x8}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x5, 0x1e, 0x81}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x6, 0x1a, 0x4, [@generic={0xcb, 0x24, "eab35841e7ec144e125a4b9783f50d591132c527ccd0ad20bba222e081a144115456e72a1064144e29910bca90be05bdd1beab71829693d644dfff2c9be3ba0b0f6a7ff37a477eb8e6563060c8b47940dba28f8d2506758000890022509e7b431885468f4b8a834a06ee73762b9e1bb67d924a17a81d2be7d0ae3a61bc5fc447a74b7ef465bc10dfc26904e4583dd7f264221ce8d6c75de056556c1b1159cbc0ab5bc6e0f476f9f5217b076257f3872426d25fc47d3a9fc281fd34943cdd297e6c4cd399c4d4ef4038"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x40}]}}]}}, {{0x9, 0x4, 0x4, 0xf9, 0x6, 0x78, 0x71, 0x2c, 0x3b, [], [{{0x9, 0x5, 0x0, 0x10, 0x400, 0x6a, 0x45, 0x9}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x6, 0x8, 0x2, [@generic={0xc3, 0x22, "559f19402e57309596a01f725aabed72161c73d4bc1980ae1970717b852497c7995d0964edcbcb088c6f8f20b25215592f7c9b1e2fb16d9da146e3c47675c9921725d9ba3ebd9bef1f74df956b98c32ebd2a9429aea02f995e9240d4cdb1173fc4832760a738b0035b6196844b1c536ea19d3e92df7f9dacebf670ea91c358c7822479cbc50454acdda93d448f5f6595fe907e44f3643678d6cbf74ee25dcd6138e4d026d351287b85f3f143f622129e94132127d55b696564d49aed8603311c18"}, @generic={0x45, 0x23, "44e5aef593f260fd4dbe949266aa76935dc7a1262500d629d1e472203c7d6d840cb236b24b4f89316e3701631a019ea5bd21417706e0477dd41cdc2714699f053f905c"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0xd6, 0x20, 0x18}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0xab, 0x0, 0xf7, [@generic={0x2a, 0x2, "cba3d1e919b17faa252a9d81007cd605ac453305dd3e916d70b16c224f2e021adaeeb668eab291f7"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0xad4}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x40, 0x90, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xfd, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfffb}]}}]}}, {{0x9, 0x4, 0x85, 0xb2, 0xa, 0x40, 0xf0, 0x9a, 0x8, [@hid_hid={0x9, 0x21, 0xb, 0x9, 0x1, {0x22, 0x9b1}}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "9be2"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0x2, 0xf7}, [@ncm={0x6, 0x24, 0x1a, 0xc0df, 0x3381d9e3cc9915b1}, @mdlm_detail={0x93, 0x24, 0x13, 0x0, "82e033900abe6d6e540446c9edc87fe45db5ad7a52f9949965760f7900ae3b5cfb3968893824da55139cb49d7350931e2cf44c764fb91792077905805993efe6a6f743d879d344496258c411e4625c7d258396658f396d0804c255c2b9c2a9c6b23ea7139362884b335c3847a6ba89351baaeeb08958d30b2281e6982fe30afc3c93bc69d47343f2efa19ba341490f"}]}], [{{0x9, 0x5, 0x8, 0x4, 0x10, 0x8e, 0xfd, 0x0, [@generic={0xc5, 0x38, "ce5f70b1b1979d1d7c7b026b9ef053a07445b8d4f012ef5b4869324a688d5227be0ebbc170395489aaf7edf42042a9d79b26f925f3c4ceb699dd5ab78086cdefce5d4691b596a4ccdd9f6b2ff98811705a482085f0b24b36734e9b811ae5caef944dfcbbec0baf58912165dc32cc0ed8227ea768f960e88f64db476ab135f2cb5e2e9d8f44780a7ed9dc122b5237a4e0cac7bf122a93a077eca9d1c32752a84d5bdbb3dcd9ce538086c1dea9c3cfbe8d4c979c5858933d88b2e9b55db41eac66cf6821"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xfd, 0xca, 0x3, [@generic={0x7d, 0x30, "b8f28658804956ebe8fd96c7e8264f0a218990a9829b00b076688d603e48eab7dcc06e0bc6d729073066aea0a86c395076800523cdfa523e2e8f758d32c9ee3b165afabe40e95c5cda30f25dbc815b73c50e75c4cdc5bca4a093f1b68620abbae95c9e2d240304e4f91aecebdcf10d31b429395bc4a1edc4ca6397"}, @generic={0x72, 0x22, "bf8281ad95367950618022b4e589f5eaf177018a5bb314a49589d3c512f18ae9c580c7d2a46bd681fd5e0a5960d766633b6077ea62aafb4f1ce8010ecbf0ef9ab1efd28cab11892e2fd362ece5fcd058aa710a1a89850026917c6d939b4f9d52d105b1ca93c3b598d7e65989d0fe7dc6"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x7, 0x5, 0x1, [@generic={0x69, 0x23, "11540d38c2599defd0d4669bedcf8313ec5f29f21123466cdd84ee87d2d0a232054244e267703bfddc4aba3fd5fb653c9727c8f1ddb57bd86dac06e97dcce195fcd9562071c0b1cb9cd26354abcc8389f96d893320c829af6516337c9e54aa78203fec7ff00f3b"}, @generic={0x6d, 0x31, "b60accacd37e152d9b4e9cb055d9086963406da36da90a7092709530ebfc8b18a12be7f9cb065feb4dd1d1328230eb02681e745d66720a807bdf66daa8cd7539de2cf40e4bd90324b84a2d9830edf986790bd26ee3b94f88c3d00ff83152f910e1653265e32acffdce8955"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x80, 0x4, 0x71}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x7}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0x2, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x9}, @generic={0xe, 0x21, "a344c3f22c8673665b554779"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0xa2, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x53, 0x3}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0xe, 0x80, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x38, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x8}]}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x5, 0x5, 0x5}}, {{0x9, 0x5, 0xe, 0x1, 0xa878a2a0eb9a0447, 0x1, 0x3, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0xf9, 0x1000}]}}]}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x0, 0x8, 0x0, 0x9, 0x20, 0x6}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x427}}]})
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x40, 0x3, 0x40, {0x40, 0x8, "46faa93a175b7261773890bdeb2f118aa36e123aeac430d138d8ea0a134f443741e5c6953e83e501293fe4fc186366cac2f3fbbab53ee6c3c7e38c6d033d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f00000001c0)={0x0, 0xf, 0x40, {0x5, 0xf, 0x40, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x6, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x6, 0x7, 0x7ff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xff, 0x40, 0x2, 0xac}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b2129db61f21315c17e09c1bb249e0f5"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0xff, 0x4, 0x0, 0x2}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x90, 0x60, 0x1, 0x0, "52a53e18", "4746966f"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc, 0x18, 0x3, 0x4, 0x1, 0x3, 0x2}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000300)={0x40, 0x13, 0xa7, "bebdff38424944c7f5be1de4974333b1a99574123860c2d4a0e19f58967351bfee97e28289e9906f7494a207ffc14712b5b7be33dc965b9ff6ffc4d63aceda6614339d5f386d25abcd8ea762ffac1863ef592b7641404101d7a2efca7d25488bbcf8d605a9dbaaae4fdc51d47c3b09e62afe47347824c90aa0cc0411d5591cffc1b690e4cd8b0e7c60c7ec53d262c7b34b13bd1007178f94346e4791f929d3e62d2bd964f06beb"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9a}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x100, 0x8}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000580)={0x40, 0xb, 0x2, "37d0"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6db4}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, 'oH'}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0xc6}})

2m13.835957355s ago: executing program 3 (id=97):
syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xca, 0x9b, 0xd4, 0x10, 0x1199, 0xb000, 0xa898, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x2, 0x0, 0x17, 0xb5, 0x1b}}]}}]}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

2m13.318883187s ago: executing program 33 (id=97):
syz_usb_connect(0x4, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xca, 0x9b, 0xd4, 0x10, 0x1199, 0xb000, 0xa898, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x2, 0x0, 0x17, 0xb5, 0x1b}}]}}]}}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

2m3.945581294s ago: executing program 2 (id=115):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x28, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x18, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

2m3.696222941s ago: executing program 2 (id=109):
syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000b5c13240432cf81699090800000000dda36ce6"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000b5c13240432cf81699090800000000dda36ce6"], 0x0)
syz_usb_connect$cdc_ncm(0x5, 0xca, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xcf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x2, 0x1, 0x4, 0x50, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "0691b605"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1bda, 0xf, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x4}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x26, 0xff}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm_detail={0x4c, 0x24, 0x13, 0x9, "e16b599f4dddb33504688d65968252968fc91461b99b162a3a48e887292e6a3436482c6dc07e6dbdc486ade00d907bcc8423cbf8b481f8647d6aebe11f8bada9bffbd83f7419696c"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x5, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x55, 0x9, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x2, 0xf4, 0x2}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x5, 0x6, 0x1, 0x40, 0x3}, 0x3a, &(0x7f0000000140)={0x5, 0xf, 0x3a, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xfb, 0x7, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "c4c00f474aeb9eb5fd93300f20a96654"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "12f33dd4e28a91b5549d6a9bf8fcfd51"}]}, 0x2, [{0x101, &(0x7f0000000180)=@string={0x101, 0x3, "e55b64a59fe6fff694a235ec3050f5cde1003f74d4b580811f36443ef051d679e241d70776ed40dcc2dda9f5e2bd22e0609a3ebf49a35db5b7ec1265fc025a1eb9292feac43bf4e051722dbf46994674b95caa82bb0cb223d8eb2916ec7fe0bc0fb62b957a015aa8fd89df378f2421cdb07ca5501d126c79023bcc0321452848b43f486db929aad6ad986972fbead5a15c1d710f4a4fade394cf2fa64d8810d4c9f5aa2c0f6876039ab8246a1726bd3524a69cf34213dfd85bf814911eb8e3f0043c58fffe1709294b9b52cd32dd7ea0baf96869fb12ddad837518afba5b0c0dd095937ad244e641bfa8b316b2606caefed0d4499ba8472fd89d578ec52e2b"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)

2m0.526228109s ago: executing program 2 (id=122):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x0, 0x189)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000000)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x1fff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x1, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
r4 = socket$kcm(0x2, 0x2, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000810000000004aa002300000088f7623195eac36fffdda2a3eef55b05dad4897af24ce64d18e2e85ef9158d57d83344689b72672cf242af1aca960a0b4f4b9f152898f862a4e0dc5e349d7e8f446bb7897b63e6cbe4c821be5fa4d6b4aed7839fd2cf6dc5f4e32c21ab2efaf68eecd457a867bda32b86319c55111e734b876fa0ede95550cb6039fd165398f01cf057a29345b7e34ce793e72f4c8a010861edce402fabd2afb30d87d9779478cfc10f535c4ab313d2646f6ff01f386f1695047a04e8d9217994b2f6ef771bb6aee3ab18a47265137e4aabd56b11b36cf7d8fb135099946ec20b4f"], 0x1e)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40)
r5 = socket$netlink(0x10, 0x3, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$overlay(0x0, &(0x7f0000000140)='./file1/file0\x00', &(0x7f00000002c0), 0x18004, &(0x7f0000000800)={[{@xino_off}, {@xino_on}, {@redirect_dir_off}, {@xino_on}], [{@uid_lt}, {@fsmagic={'fsmagic', 0x3d, 0xf6d9}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x34, 0x30, 0x61, 0x39, 0x63, 0x5b, 0x64], 0x2d, [0x51, 0x64, 0x36, 0x66], 0x2d, [0x39, 0x36, 0x35, 0x39], 0x2d, [0x37, 0x61, 0x34, 0x65], 0x2d, [0x36, 0x61, 0x36, 0x18, 0x37, 0x34, 0x66, 0x37]}}}, {@smackfstransmute}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/kvm\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}, {@obj_type={'obj_type', 0x3d, ':/'}}, {@subj_role={'subj_role', 0x3d, '\\#*][/'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0xfffffffffffffd40}, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x8, 0x3})
r6 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000180)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x1d, "fee8a2ab78fc979fd1e00d96072800001ea89de2b7fb0000e60080d2780000000000fffffffffffffff70000000000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90bf8b1c000000001600000000effb00", [0x8, 0x2]}})

1m59.987142969s ago: executing program 2 (id=129):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
syz_usb_connect(0x2, 0x24, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x7e, 0xdf, 0xf1, 0x10, 0x4e8, 0x6889, 0x93dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6a, 0xbf, 0xd0, 0x6, [{{0x9, 0x4, 0x8, 0x1, 0x0, 0xff, 0x3, 0x6b, 0x93}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x7000000)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) (async)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd})
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e)
setpgid(0x0, r0) (async)
setpgid(0x0, r0)
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
gettid() (async)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async)
process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

1m58.930955076s ago: executing program 2 (id=132):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)="c92dcd673de1421750e8da98fc9393fd753ddedd6c4cc59d", 0x18}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040844)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000380)={0x14, r3, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x141}, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="bc2f1d2bff93"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x5, 0xc8, 0xf, 0x100}}}, 0x9)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x90)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

1m58.562381083s ago: executing program 0 (id=134):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="0f03000018002551075c0165ff0ffc02802000030004000500e1000cee0203001a000000", 0x33a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB="6e0500000065676174652c6661766f722a20c57429518fe000039cf0077dd744b6cb25c42ae8f0"])

1m58.399245535s ago: executing program 2 (id=135):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x5}, 0x6, 0x42, &(0x7f0000000080)="45d60bbcc5740265bce9847951a2407e2f70c12f7feff73dd9e95389dcd38f5d989042e8196b0d9f76", 0x29, 0x2, 0x4243, 0x0, 0x5, 0x3dc7, &(0x7f00000000c0)="0581ea8f109f03d3027ee4998b7c19f6e37f5893a02098696b603a807ef53e2fc61387ca2cf1f24bbdebe6951400081cedfe7f02cc482803a0212a260e80752ca758abc9b30aa9c824e3450b4d848a62d8b4d691df72b405a24c20876a21fdf8c86f8a"})
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDENABIO(r1, 0x4b36)

1m57.950212239s ago: executing program 34 (id=135):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x5}, 0x6, 0x42, &(0x7f0000000080)="45d60bbcc5740265bce9847951a2407e2f70c12f7feff73dd9e95389dcd38f5d989042e8196b0d9f76", 0x29, 0x2, 0x4243, 0x0, 0x5, 0x3dc7, &(0x7f00000000c0)="0581ea8f109f03d3027ee4998b7c19f6e37f5893a02098696b603a807ef53e2fc61387ca2cf1f24bbdebe6951400081cedfe7f02cc482803a0212a260e80752ca758abc9b30aa9c824e3450b4d848a62d8b4d691df72b405a24c20876a21fdf8c86f8a"})
r1 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDENABIO(r1, 0x4b36)

1m57.936528814s ago: executing program 0 (id=137):
setresgid(0xee00, 0xee01, 0x0)
syz_open_dev$sg(0x0, 0x4, 0x214002)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x1f)
r2 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
sendmsg$nl_route_sched_retired(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x781, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xb, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)=ANY=[@ANYBLOB="0200000001000600000000000ecf05000000000008000300", @ANYRES32=0x0, @ANYBLOB="10000300000000002000070000000000"], 0x2c, 0x1)
setreuid(0xffffffffffffffff, 0xee01)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

1m56.970424678s ago: executing program 0 (id=141):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211"], 0x68}}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x18, 0x140b, 0x321, 0x70bd2c, 0x25cfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0080f4}, 0x840)

1m56.344242694s ago: executing program 0 (id=147):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async, rerun: 32)
r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) (rerun: 32)
r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async, rerun: 64)
r3 = add_key$user(&(0x7f0000006400), &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000006900)='\x00', 0x18, 0xfffffffffffffffe) (rerun: 64)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote}, &(0x7f0000000080)=0xc)

1m56.043196928s ago: executing program 0 (id=149):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f00000008c0)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000800)=[{&(0x7f00000000c0)="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", 0xff}, {&(0x7f00000001c0)="da5754d41e9f05ea3ce97ebb48e5ac530221a1ffd7b811e47349113a93c37e58014b8bc364b513a1583e18ceeb59fa4fae7de49f19c3fe0dc646aeccfe9cda80a16c5a4b77b154153360895d51b03ce99e3ad99897359540ec29bc0c0a0f40f32cd842e08e5b8e4f0514c960605da2a45272257532990c412d962c0b6652d9c0f1c3a7b4ccf6a066c5949062e51fa759b0402724d934e6b875fa6b01b81bd44aa3670234dafbee7baa293cfa0dd7d9ea3d2cc3902a3b45f0370ec1a750caa7fc2bd4444a00", 0xc5}, {&(0x7f00000002c0)="f4ae7a1f1ddd013c94fb0752b681a1cefa537640587b71aec6b05f657197eb20e868fe97cc8447db45240ceed1cccc7d1648f04cd3ded09bc6e65b45d2b01c8060c4acc0b0550a9282aec39e404f3a42b3584fc51faa8c72c6f7975c6c1b3332b638a3848bee34f49f940c53cf007e34b4a7b5c38f271fbb76173c72cf9186ab5b7e8672f455adae45d2c0813fdb936de861c7065d272f3a19fda923b0c42f6173614e913d3f77c886294311ca3df2e73c45d8e841297a287ef87608546965ee2c74457111b9ce5149f98dbe4647ca78e1cbbf80", 0xd4}, {&(0x7f00000003c0)="306262388b61959db351d57bdd03d2eb4b5a4001fd9cd66bdd3dfd997490e5fd3d3cefe32835caa371b5f437a6fe3d7f3cd644605b0e60b460072e920401682eda391539fbf0c31072a62ed0011ff89c605a8a4b184b6e301d68fc504f17f5114a4c4adda75daa2416e8e22fd100e07fb050cae0546e222379ec06881f7079c6caa91c62e01c9179cff435bedc917dc840e5c60ee268892d66be5c3b8aa7bbaebedabb0f8f6d56cea39455152600a9684ae0ea1646e52b918cb091897ecee91a87059aa7df2144c6", 0xc8}, {&(0x7f00000004c0)="1d0feb097a315cbafd80dbc2a8a2aa859be155bb97791312eda7c7ddde4b255413c3423c7928a5629890cc53762b34db40430dec3a6fbea445056f9a5dfed86b28113068de676b3bfad0c1f6d68adc0ee185ed44c518249c208f582a2571f2065ef9d2328a4f", 0x66}, {&(0x7f0000000540)="15c2420cd008e1009ef9d8fe70007ef92c51aec77af498907823a8c1de1b6139132fd77c856d1230891cf4433fc75dbe26143aeada46a5f65d27f0e04e7610db07e2a29a5b24a98a809ca8ddab859515e07c7ef618276626a6fd72b55ac6b16f1962bd60", 0x64}, {&(0x7f00000005c0)="761658022c8ff0442c7f7953aa16cfbcf3080eee97f3e2e6aae15b39d4e5ec85a2e904d1442e303c2fe9f701abf2515c513ad4d87b9d36c838e82e5c867a28a72c3cb9787b4129f316699c0ef55edb4d0a26d089af370d2065bca8461292f3db18a3eb61f7ef3fe2d46821", 0x6b}, {&(0x7f0000000640)="aabb4e3599bb9a7f427f2684e00208455f9f72863860a3f765145eaa94f05749eb2aa01ec4640c4c4168aeeacc4b1161b6caef9f234c5a0948256ab97e273039454d521157c729486a8e3c3f741c26a845b318bd6decd9234054ec9ba8cd8ace5be8f0335b083f9d7fc85a5afc801827d8e0198743252e1c3d593911d2851450505c5088be1be4b3f0e5f0234131defd46ba6b280f2b4def7000ac60dc723006a2f36c950ff46286193b5d78eda9701312200c0afd1f39e43ec08e078c804fbdc71b57a3c9848295f910909e0b1a7b98f9da", 0xd2}, {&(0x7f0000000740)="9aa324ba99a9547aa82b7bafe683bdb982b9610837d67ef3c975b3bb16d8b1e27e488af21dafd21376eaa7e80902184c53abd8da5528b993b3deaf64333a1c1eb342a019e95e47c9a6d360ac7daf5e90b391ffb16295396d3c9301cf870cf6da5cdd205e2e0f76c8ab9737b6ca8d31db9c74006be1b6360df5536514859060fd9136e8ecb093abdad21aff146ec448254b53445f3a24ad917e5766dc3c6edd772120643aa058b38521f10a2e36d9ebbace74dd7d", 0xb4}], 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000000000001a0200000000000000000000001c000000000000000000000007000059f80022e400890b5c00000000000000"], 0x38}, 0x4080) (async)
r1 = gettid() (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) (async)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000a40)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000a80)={&(0x7f00000009c0)=[0x0], 0x1, r3})
rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0))
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000900)=""/11, &(0x7f0000000940)=0xb) (async)
tkill(r1, 0x1b) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000b40)={&(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa})
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x0)

1m55.91030575s ago: executing program 0 (id=150):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x400, 0xffff7fff, 0xa31, 0xffffffff, 0x1, "aba8b5828b1b57af9a2b44f4321aece3b7bdfe"})
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = dup(r1)
write$FUSE_BMAP(r3, 0x0, 0x0)
ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0))
poll(&(0x7f0000000080)=[{r0, 0x2404}], 0x1, 0xb77)

1m40.756899764s ago: executing program 35 (id=150):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x400, 0xffff7fff, 0xa31, 0xffffffff, 0x1, "aba8b5828b1b57af9a2b44f4321aece3b7bdfe"})
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = dup(r1)
write$FUSE_BMAP(r3, 0x0, 0x0)
ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f00000000c0))
poll(&(0x7f0000000080)=[{r0, 0x2404}], 0x1, 0xb77)

1m0.556343968s ago: executing program 6 (id=371):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x1000009, 0x16831, 0xffffffffffffffff, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000100)={0x0, 0x8000007, 0x1})
socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x2)
pipe2(&(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = socket(0x28, 0x2, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r1, 0x78)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
r6 = accept4$unix(r4, 0x0, 0x0, 0x80800)
recvfrom$unix(r6, &(0x7f0000000140)=""/246, 0xf6, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
read$FUSE(r3, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x2020)
r8 = getpgid(0xffffffffffffffff)
r9 = epoll_create1(0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f00000002c0), &(0x7f0000000280)=0x4)
kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r3, &(0x7f0000000080)={r9, r3, 0x3})
socket$igmp6(0xa, 0x3, 0x2)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r10], 0xc4}}, 0x0)

1m0.41907911s ago: executing program 6 (id=372):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x0, "e0a1fead62099ba2df509c9f9f7f0f6d1b6b499b356af8cccfe7a1a5b5193a27", <r1=>0xffffffffffffffff})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket(0x18, 0x0, 0x0)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) (async, rerun: 32)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x8102, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x38}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfb}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x95f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xabd}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (rerun: 32)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)) (async)
ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{}, {}]})
r4 = accept$unix(r2, &(0x7f0000000100), &(0x7f0000000080)=0x6e)
getpeername$unix(r4, &(0x7f0000000240)=@abs, &(0x7f0000000400)=0x6e) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) (async, rerun: 32)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES64=r5, @ANYRESHEX=r0, @ANYBLOB="01002bbd7000fedbdf25010000000c00060000000000000000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x48c4)

1m0.365379194s ago: executing program 6 (id=373):
r0 = fanotify_init(0x18, 0x1000)
r1 = memfd_create(&(0x7f0000000080)='-B\xd5\x9appp\xf0\x00\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x11\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1)
fcntl$dupfd(r0, 0x0, r1)
r2 = dup(r1)
fanotify_mark(r0, 0x1, 0x8000000, r2, 0x0)
ftruncate(r2, 0x6)

1m0.297878864s ago: executing program 6 (id=374):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup\x00', 0x100, 0x1)
recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000940)=@caif=@dbg, 0x80, &(0x7f00000019c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x81b5a75}, {{&(0x7f0000001a00)=@nl=@proc, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001a80)}, {&(0x7f0000001ac0)=""/201, 0xc9}, {&(0x7f0000001bc0)=""/174, 0xae}, {&(0x7f0000001c80)=""/225, 0xe1}, {&(0x7f0000001d80)=""/200, 0xc8}, {&(0x7f0000001e80)=""/144, 0x90}, {&(0x7f0000001f40)=""/4096, 0x1000}], 0x7, &(0x7f0000002fc0)=""/77, 0x4d}, 0x1000}, {{&(0x7f0000003040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003100)=[{&(0x7f00000030c0)=""/5, 0x5}], 0x1, &(0x7f0000003140)=""/244, 0xf4}, 0x7}, {{&(0x7f0000003240), 0x80, &(0x7f00000046c0)=[{&(0x7f00000032c0)=""/55, 0x37}, {&(0x7f0000003300)=""/15, 0xf}, {&(0x7f0000003340)=""/172, 0xac}, {&(0x7f0000003400)=""/212, 0xd4}, {&(0x7f0000003500)=""/191, 0xbf}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/242, 0xf2}], 0x7, &(0x7f0000004740)=""/83, 0x53}}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000047c0)=""/68, 0x44}, {&(0x7f0000004840)=""/40, 0x28}, {&(0x7f0000004880)=""/51, 0x33}, {&(0x7f00000048c0)=""/23, 0x17}, {&(0x7f0000004900)=""/81, 0x51}], 0x5, &(0x7f0000004a00)=""/231, 0xe7}, 0xb28}, {{&(0x7f0000004b00)=@hci, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004b80)}], 0x1, &(0x7f0000004c00)=""/232, 0xe8}, 0x6}], 0x6, 0x40012101, &(0x7f0000004e80)={0x0, 0x989680})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01080000ffed080003000000000000000000", @ANYRES32=r3, @ANYBLOB="28005080110001004ac7e3f40500000000000000000000000500020006000000080003000bac0f00"], 0x44}}, 0x24004000)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000240), 0x6, 0x13f000)
ioctl$VIDIOC_DQEVENT(r5, 0x80885659, &(0x7f0000000280))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x40, 0x1, 0x2, 0x8, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x62, 0x0, 0x8, 0x2b, 0x0, @local, @multicast2}}}})
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000340)={0x9, 0xb1a1, 0x18, 0x2, 0x5})
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x1c)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x6}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x50}, 0x1, 0x0, 0x0, 0x44001}, 0x10)
syz_usb_connect$cdc_ecm(0x1, 0xbc, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x1, 0x1, 0x4, 0x0, 0xee, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1e, {{0x5}, {0x5, 0x24, 0x0, 0x8267}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x320, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @mdlm_detail={0x53, 0x24, 0x13, 0x2, "232a9f343854cf1f5855577a60ef131f0e7d80f15ef5dbf1a969283331c7449c8a895b0965d7883a25fb88028671707bc26e5bb27d051b693ec6dc19edf11eb8477a59b279f69c7b28e52b70e8948e"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x80, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x9, 0x100}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x238, 0x9, 0x7, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x3f, 0x6, 0x1}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x5, 0x4, 0x5, 0x8, 0xc}, 0x76, &(0x7f00000004c0)={0x5, 0xf, 0x76, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "9201a9bbdce0259d1793769ff611031e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0xff, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x1, 0x2, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x2, 0x62, 0x7, 0x1}, @generic={0x37, 0x10, 0x2, "f75e472c8e90ead5355a7052129634e42e0f781d5ca12f34a201b4100c47dd57e2e0725282bf16c78f663d467f5d37035e6dc1b2"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xe, 0x5}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x813}}, {0xe5, &(0x7f00000007c0)=@string={0xe5, 0x3, "29eb031d269ed87f91f6c782bc5b8c94157485edfe4e6c13fe586ca390efb5d054f38f44299d80e64f5bca9bae7b9ffffd571bfafd57d57445c4ebc9e84406b180f2733b41d287a0c335c15cb41d47d97202680115653397216f5327ba12d142d6ce59edb0f7944595a40747251b63ee36042300d044d1fe4f2a43e8f0908271817c5a87bcd3aca496975bed602f771c8405f306004d6e032e0f3a45bd263b2162d1ff235ca3e744ffe62914471b07a5cae842e9507ab69f2baa4fd9a71ca2aff953b64cce48ee87dd4d5743aae4a13eb9befe0a1ae7958202536be3f9c4f23bd835ea"}}, {0xa4, &(0x7f00000005c0)=@string={0xa4, 0x3, "75ca3a87aea3da15011f94868ff283b40bfca86277d47e477c7e28dfed9271252573ae6786e5019bd390e791e1d3f951b522c4b0e03b5a353ba91b41d5ab13eec6be9878a70d67d4c3947da9af2cc1b0c73da6487c1ed0ee86b5d7cd73cbfa04e1c3bc029e62e6fd8bc7e0f3349c4680b39410de13960b6530b5228bc83a6bd6c1d6042a8e88e1da9361330bc59ab69338223b34a0025a4cb4078f2d33c2b300261a"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x404}}]})

57.160642566s ago: executing program 6 (id=395):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8915, &(0x7f0000000000)={'ip6erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000097643e5eca160215b51e01020301090212000105000000090497000047a07e00"], 0x0)

56.823331601s ago: executing program 6 (id=398):
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "fb0c6b63cee52d7a0002000000d7060ca024b5e02f51f081ef3dc9a202c28a6c2136ee57579935077f5c181e8d11bcf0523c8879230f4a00", 0x20}, 0x48, 0xfffffffffffffffd)
keyctl$read(0xb, r0, 0x0, 0x0) (async)
keyctl$read(0xb, r0, 0x0, 0x0)

56.458698872s ago: executing program 36 (id=398):
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "fb0c6b63cee52d7a0002000000d7060ca024b5e02f51f081ef3dc9a202c28a6c2136ee57579935077f5c181e8d11bcf0523c8879230f4a00", 0x20}, 0x48, 0xfffffffffffffffd)
keyctl$read(0xb, r0, 0x0, 0x0) (async)
keyctl$read(0xb, r0, 0x0, 0x0)

4.851070897s ago: executing program 4 (id=654):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
r1 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x1}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="002106000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.684726483s ago: executing program 7 (id=655):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x8}}, './file0\x00'})
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) (async)
getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) (async)
ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil})
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r5)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
unshare(0x28020480)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x6, 0xff, 0x2, 0x7a}, {0x8, 0xf, 0xc, 0x8}, {0xf, 0xc, 0x2, 0x3}, {0x1ff, 0x48, 0x5, 0x800}, {0x9, 0xf, 0x9, 0x6}, {0x8, 0x63, 0x8, 0x40}, {0x1, 0x5, 0x6, 0x7}, {0x7ff, 0x89, 0x58, 0x80000000}, {0x9, 0x8, 0x2, 0xcf}]}, 0x10) (async)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x6, 0xff, 0x2, 0x7a}, {0x8, 0xf, 0xc, 0x8}, {0xf, 0xc, 0x2, 0x3}, {0x1ff, 0x48, 0x5, 0x800}, {0x9, 0xf, 0x9, 0x6}, {0x8, 0x63, 0x8, 0x40}, {0x1, 0x5, 0x6, 0x7}, {0x7ff, 0x89, 0x58, 0x80000000}, {0x9, 0x8, 0x2, 0xcf}]}, 0x10)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x7, 0x5})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) (async)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000900)={0x20, 0x0, 0x1, "18"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r7, &(0x7f00000003c0)={0x14, &(0x7f0000000340)={0xe8271f2f34c09b5c, 0x2, 0x16, {0x16, 0x3, "635c347770b0e38eac93ca3726f1bfa64b6cb3d1"}}, &(0x7f00000005c0)={0x0, 0x3, 0x33, @string={0x33, 0x3, "9f12f9382f1d2fcc2c9061efebcac159fec08d8bfc094f0ae5b62d4c23c46b948f2aa62db9beee35611135a2b9897a10a1"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x40, 0x5, 0x19, "ef9a241868eeebe38b65b654ed9fa6771a7b3c0bb4136aa5a8"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x400}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "f99e96495d82aee1a229181d8fc1b5acc5c6a24f8ccfca2ebd2cdcff71eb4351a7232ea6a64432c67836fb96f41a22"}})

4.282998314s ago: executing program 5 (id=656):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0x0, 0x0, r2)
sendmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20, 0x1}}], 0x1, 0x4000) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000100)={0x28, 0x5e28c9284b792c2b, r5, 0x0, &(0x7f00000000c0)="00a40a7800", 0x5}) (async)
ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r5, r5, 0x1000, 0x5, 0x9})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0xb2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4001}) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r6, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30c7f5260e010000feffead3fe11df25017c00000400428010000180090010a36d3a2660d4a6fe49b0a580aa5373ad5500000004000232af76aae22e1980"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
socket$packet(0x11, 0x3, 0x300)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) (async)
syz_clone(0x800, 0x0, 0xfffffffffffffe71, 0x0, 0x0, 0x0) (async, rerun: 64)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) (async)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.025276957s ago: executing program 7 (id=657):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819)
sendto$inet6(r1, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x0, 0xa, 0x5, {0xfffffffffffffdf4, 0xd, "000100"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.42169431s ago: executing program 5 (id=658):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
clock_gettime(0x7, &(0x7f0000000140))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1200, 0x2, 0x1}, 0x18, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f00000002c0)=0xcedc)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r4, 0x111, 0x1, 0x0, &(0x7f0000000080))
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000100)={0x1, 0x100004}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000240)={0x11, 0xf, r8, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r9 = accept4$alg(r5, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000880)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r9, &(0x7f0000000080)='=', 0x11}])
ioctl$TIOCEXCL(r0, 0x540c)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x8, 0x1, 0x6, 0x3f, 0x1a, "3eccd25569e20900"})

3.366187837s ago: executing program 4 (id=659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x20, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140), &(0x7f00000001c0)=0x4) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x810) (async)
wait4(r4, 0x0, 0x4000000a, 0x0) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', <r7=>0x0, 0x80, 0x8000, 0x2, 0xc6, {{0x1c, 0x4, 0x0, 0x28, 0x70, 0x67, 0x0, 0x8, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp={0x44, 0xc, 0x63, 0x0, 0x2, [0x9, 0x2]}, @generic={0x44, 0x9, "1181806d01be99"}, @rr={0x7, 0x7, 0x85, [@loopback]}, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0xf, [{@broadcast, 0x1}, {@private=0xa010102}]}, @lsrr={0x83, 0x7, 0xc1, [@empty]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0xe, "d5dccb92ea42c2c6ac2e0c63"}, {0x2, 0x3, 'A'}, {0x6, 0xe, "c79bc6bcccb4a97944843f76"}]}]}}}}}) (async)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r9=>0x0})
setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4)
sendmsg$can_raw(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r9}, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=@canfd={{}, 0x2e, 0x0, 0x0, 0x0, "4e4e488e419039dda425818c34de45852abd1372621b404219373c9a72cdb611ef256a70bf66c39d7082f2809cbc3da9bb3c86e0c5e53cff15d561c53fe9ae3a"}, 0x48}}, 0x1) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@ipv4={""/10, ""/2, @private}, <r10=>0x0}, &(0x7f0000000540)=0x14) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=<r11=>0x0, &(0x7f00000005c0)=0x4) (async, rerun: 32)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000600)={@remote, <r12=>0x0}, &(0x7f0000000640)=0x14) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', <r13=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={<r14=>0x0, @multicast1, @loopback}, &(0x7f0000000700)=0xc)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x144, r6, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x1}, 0x4000885)
syz_pidfd_open(r4, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r15=>0x0}) (async)
r16 = socket$pppl2tp(0x18, 0x1, 0x1)
arch_prctl$ARCH_SET_GS(0x1001, 0x0)
ioctl$SIOCSIFMTU(r16, 0x8922, &(0x7f0000000040)={'veth1_macvtap\x00', 0x81})
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf04000000c7fbdbdf33124607b53d000300", @ANYRES32=r15, @ANYBLOB="0a00060008021100000100000c004300f8fffffff5ffffff0600b500f9000000"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x0)

2.92304434s ago: executing program 4 (id=660):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={<r4=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x2, r4})
r6 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000000)=0x3, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff824}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0)
close(r7)
ioctl(r6, 0x8916, &(0x7f0000000000))
ioctl(r6, 0x8936, &(0x7f0000000000))
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008091}, 0x41)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x28}}, 0x0)

2.57672804s ago: executing program 4 (id=661):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xd80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x928})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x2, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0))
write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000e", 0x19)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x105682, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
write$proc_mixer(r3, &(0x7f0000000340)=ANY=[], 0x8c)
close(r3)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r5 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00')
read$FUSE(r5, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r4, @ANYBLOB="05"], 0x0)

2.142921655s ago: executing program 8 (id=663):
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x6)
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="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", 0x111}], 0x2, 0x0, 0x0, 0x7a000000}, 0x488b5)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@generic={0x2, 0x3, 0xa6cb})
r2 = socket$isdn_base(0x22, 0x3, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000140)=0x3, 0x4)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00')
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0xf00, 0x0)
fanotify_mark(r7, 0x1, 0x10001011, r6, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x189)
read$FUSE(r7, &(0x7f00000024c0)={0x2020}, 0x2020)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r6, &(0x7f00000004c0)='./file0\x00', 0x2)
msgget$private(0x0, 0x40)
r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
read$FUSE(r8, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
capset(&(0x7f00000000c0)={0x20080522, r9}, &(0x7f0000000140)={0x400, 0x9, 0x2, 0x10000, 0x4, 0x101})
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4)
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x7}, 0x0)
r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000002580)={{0x3, 0x2, 0x5, 0x8, 'syz0\x00', 0x5}, 0x0, 0x40, 0x9, r9, 0x7, 0xff, 'syz1\x00', &(0x7f0000000240)=['/dev/cuse\x00', '/dev/cuse\x00', '.^\xbf.+/}\x00', '\x00', '2@', '/dev/cuse\x00', '/dev/infiniband/rdma_cm\x00'], 0x41})
write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0}}, 0x18)
bind$isdn_base(r2, &(0x7f0000000000)={0x22, 0x5, 0x1, 0xef, 0x1}, 0x6)

2.042153608s ago: executing program 5 (id=664):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x6)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000003c0)="280320000a00140000007ef506be00000000000000008100000000143baa111f1f858ce632f47042195e", 0x2a, 0x404c010, &(0x7f0000000000)={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7f, 0x7, 0xe1, 0x8, 0xaf0, 0x6731, 0x51bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x70, 0x0, [{{0x9, 0x4, 0xc9, 0x3, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001400)={0x44, &(0x7f00000011c0)={0x20, 0xc, 0x4, "6d6d3aa8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608"], 0x0)

1.888895248s ago: executing program 8 (id=665):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x4426c1, 0xa8)
fcntl$setlease(r0, 0x400, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x20000, 0x0)
fcntl$getflags(r1, 0xb)

1.746641273s ago: executing program 8 (id=666):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x38, r1, 0x1, 0x400000, 0x4, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000880) (async)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0}) (async)
close(0xffffffffffffffff)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) (async, rerun: 64)
r3 = socket(0x18, 0x6, 0x1) (rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0}) (async)
r6 = socket$netlink(0x10, 0x3, 0x0) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x44, &(0x7f0000000080)={0x2, 0x3, 0x17, 0xff81}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) (async)
mkdirat$cgroup(r7, &(0x7f0000000280)='syz1\x00', 0x1ff) (async, rerun: 64)
r9 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x400) (async, rerun: 64)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r11=>0x0})
bind$can_raw(r10, &(0x7f00000001c0)={0x1d, r11}, 0x10)
sendmsg$can_raw(r9, &(0x7f00000004c0)={&(0x7f0000000400)={0x1d, r11}, 0x10, &(0x7f0000000480)={&(0x7f0000000440)=@can={{0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "88b5d0fa950b5f9c"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x44191) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bdf000fcdbdf25040000000800090002"], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async, rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002301040028bd7000ffdba2e04558554dc825eb20"], 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_START_AP(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r13, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r14, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001800090200008b22bebb03ad33dcd7dc9ab0c36000000000000002000000040000001400f200fc00"], 0x2c}}, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffd}) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2})

1.566686675s ago: executing program 8 (id=667):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
r1 = getuid()
fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x4c0, 0x5f, 0x101, 0x0, 0x25dfdbff, "", [@nested={0x4b0, 0x50, 0x0, 0x1, [@nested={0x428, 0x87, 0x0, 0x1, [@nested={0x422, 0x148, 0x0, 0x1, [@nested={0x155, 0x107, 0x0, 0x1, [@generic="4ab664b9e4b576a84c6f9936cc7b094508a4f4258bcf2fd0f4cebcbdd8654cf668056f330235387d9b95e0a12343798cc0a54b4b473c5233fe4628973b3172b2558d28077c184b6ca946e5577f39bd56041374948cccb6af9880b2596f7e337c37e0a61d17171423ea3e2417ca2a0ff9d6b95613f207d429bf96eefe62c2413040d12043fd3016d83d53", @typed={0x8, 0x121, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@local}, @generic="5a2fd13ba6378f3c247d00cdef8c40a1688ddb94ea21931a888c3b28a6135a32d52737dededa3c34270c5ea7620a8bb5b4fea1e784780a2caab37476825247e3767c4630e0fbefab1f44383971175960cf7af034e8d3057f669643d23490444f91e2a72d909d793104cafe617e2ac29cf37b34bc2943fe82377395c7d12e76ff1cfe723e4ad751afcd3c84cb03957a37aab32a4423e71007121e2d05d5172885b14d1c82094cbd83ba8dacee70d37a1c2ed64c", @typed={0x4, 0x49}]}, @typed={0x14, 0xa5, 0x0, 0x0, @ipv6=@local}, @nested={0x85, 0x80, 0x0, 0x1, [@generic="97763be47a95595d94bbc0034dfb5f688a16592f313c302329f5cc1fe87473f18a182e716bfe85e6706bce236333087fb877be042d7ad55ca37cb426b730ece8b10ff1ee219c62ae64fcccaae5a46351e8e7f565b250c38b", @nested={0x4, 0x58}, @nested={0x4, 0x2}, @generic="1ecc00fee68971b61c0725de3618ccf9602bf096f2", @nested={0x4, 0x122}, @nested={0x4, 0xb1}, @nested={0x4, 0xe9}]}, @nested={0x14, 0xec, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @uid=r2}, @typed={0x6, 0x26, 0x0, 0x0, @str='.\x00'}]}, @generic="cb8b1e04a7315c1fb24c3de936d599a749ac17378ae54aed68becbd1c138ccb58e823d787bb393c8e9ed3907bd60d9ad062cac94e1b7e7c3d4b03444b1c5b0f5ac7cb86927cd61094caaa94ba4a3fe8780f10da1582049e287b7dae7d0e94eab51dee54e1eea4b7351222ef2bca5ac9413a5e83873edbf84b4807746ac2d186d5665a244c40418c226c61ba9ac69e61946de4b52be6b76704e9d3ba41d19aedb9908f2cec2586e61ed078581138cc59f9749079dde86589c46269b21daf11a8c69b8d0e97f3a", @nested={0x14d, 0x12e, 0x0, 0x1, [@generic="3460cb9624293564ec2da1446fa402405ced15120131c43429a577cc6301394a5b9cf50005f81f68277060f4353cf9c458464b4493715b3009336383de3a6052f0331d31781d248b88c0888466e4ce771acd051df5a19303eeb9d13fded3bc871290a3384415057043547be4943bb31a1d675cd4159a2020105fa8616b1fe2672dece032b7de30714b", @generic="2d04229c52c8020f7bedb32dc76b49259dea833100a6b5618658cbb8884f51616c9860a148a0fd0418b3e5bda869d623e58d3fd916364e1d463491c4a1901cd5b43caa1154d176e234747b181100c19562015138deb77368604f0ea3e82f7888914a7ced6beec66e4d01f8765fad70261699e823c8da1a874a4cf85c6e7604d6b91d4e010ef876ea6324281cee5ee4bd4b9483385829e6753df2c8b72dd4bc81da42f80476806315efc23b1f1e0ed5be4e5ec36d", @typed={0x8, 0xdc, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0xf4}]}]}]}, @generic="47e3b9708db25322e01bdc6b7f694fe1beb0ebfeaeb8aba7698c5de50637fbdb7cd6ce33317694ca210f9e118ce2cc7bc8ab42b979233442dcb2ebfa85274d92617080ae72d77583845f590c3c72084a6d930695c3fbd26fdd89ae827d55240034e97f185635d504e7ec283dd9bda165aaac4aaacc4e2f456e458f8ea3dd746bdb1b0e0e"]}]}, 0x4c0}], 0x1}, 0x0)

1.476938637s ago: executing program 7 (id=668):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x6, 0x8000, 0x0, 0x6f, 0xc}, &(0x7f00000004c0)=0x14) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="016f080001000000000014000000633de8ed00140600fc010000000000000000000000000000fe8000000000000000000000000000aa4e204e21", @ANYRES32=0x41424344, @ANYRES64=r0, @ANYBLOB="00000000000049f5"], 0x4a) (rerun: 32)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0) (async)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r5, r5, 0x0, 0x200000) (async)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async)
io_setup(0x5, &(0x7f0000000e80)=<r8=>0x0)
syz_io_uring_setup(0x4, &(0x7f0000000580), &(0x7f0000000080), 0x0) (async)
r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80200028}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x50, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x68}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) (async, rerun: 32)
io_submit(r8, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r9, &(0x7f0000000080)="8c", 0x1}]) (rerun: 32)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) (async)
chdir(&(0x7f0000000240)='./file0\x00') (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x80242, 0x90)

1.403263379s ago: executing program 8 (id=669):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a40, 0x18)
copy_file_range(r1, 0x0, r1, 0x0, 0xfffffffffffffffe, 0x0) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000002000)=@conn_svc_rsp={0x0, 0x0, 0x0, "538f6e45", {0x3, 0x106, 0x0, 0x6, 0x2, 0xff, 0x1}})

1.194210954s ago: executing program 5 (id=670):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
close(0x3)
r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x29, 0x46, {0x46, 0x0, "ff7da3cb6b3cc99d08fe6e37ca23f28535b399e9fea8608ad69a03d51f73dc564def6fb9721aff85327e874846fdf67e822249eaa07ab758bbf5e6cc13a6438bbcd644ee"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r2, 0x1, 0x0)
fchdir(r4)
socket$kcm(0x10, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x1a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44)
r7 = socket$kcm(0xa, 0x2, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e1d, 0x3, 0xcd}}, 0x44)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88)
r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]})

973.86229ms ago: executing program 7 (id=671):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x4800)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0x10, 0x7)
accept$inet(r1, &(0x7f0000000080), &(0x7f00000001c0)=0x10) (async)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000240)="ba4100ec66b8010000000f23c00f21f8663502000b000f23f864650f3265666766f36fbaf80c66b8b039978666efbafc0c66b8ce7f000066efb800008ee00f327de8660f3881ba69320f78ec", 0x4c}], 0x1, 0x12, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="66baa00066b80bbe66efc4e179f7f38fe860ecf50ac4e1ed6d73d1ea3d00000075008206ad0f01c99a650000004100b92b020000b80a160000ba000000000f30c4e17a12d3", 0x45}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

806.894209ms ago: executing program 4 (id=672):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a0010000000400bb80060ec97000fc83b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async)
writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) (async)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x6, 0x8, 0x2}) (async)
r4 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$sock(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x20008044) (async)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x1, 0x8001, 0x3})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x123100) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
fchdir(0xffffffffffffffff) (async)
setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f00000000c0)=0xffffffff, 0x4)

506.181035ms ago: executing program 7 (id=673):
r0 = socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x280549c, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES32=r2])
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x60400, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x109)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x80001, 0x0) (async)
socket$nl_audit(0x10, 0x3, 0x9) (async)
socket(0x10, 0x3, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
close(r8) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
write$binfmt_misc(r7, &(0x7f00000002c0), 0x15) (async)
splice(r6, 0x0, r8, 0x0, 0x19404, 0x0) (async)
sendmsg$FOU_CMD_GET(r3, 0x0, 0x20040080)

442.667016ms ago: executing program 4 (id=674):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0xc048aec8, &(0x7f0000000140)={0x6, 0x2db, 0x0, 0x0})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @local}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf8, 0x1, 0x2019}}}, 0x7)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$bt_hci(r6, 0x0, 0x1, &(0x7f00000015c0)=""/4096, &(0x7f0000000180)=0x1000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', <r7=>0x0, 0x29, 0xf7, 0x9, 0xfffffffc, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000440)={'sit0\x00', <r8=>0x0, 0x7800, 0x10, 0x3, 0x8, {{0x1d, 0x4, 0x3, 0x3a, 0x74, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x10, 0x74, 0x0, 0x4, [0x3, 0x7, 0x5]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x15, [@broadcast, @local, @rand_addr=0x64010102, @local]}, @ssrr={0x89, 0x3, 0xc0}, @end, @end, @ssrr={0x89, 0x17, 0x5, [@local, @remote, @empty, @remote, @remote]}, @timestamp={0x44, 0x1c, 0xcf, 0x0, 0x3, [0x4, 0x2, 0x9de, 0xbe20, 0x9, 0x3]}]}}}}})
socket$packet(0x11, 0x2, 0x300)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x7c, r5, 0xe9715da55d7fa39, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2400c851}, 0x40)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0x8)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3)
sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88ffa5e4", @ANYRES16=r10, @ANYBLOB="000329bd7000fbdbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044c04}, 0x811)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r11 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r12 = fanotify_init(0xf00, 0x1)
fanotify_mark(r12, 0x105, 0x40009975, r11, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000e, 0x10, r11, 0x3d7c2000)
close_range(r12, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0xae, 0x7a, 0x32, 0x8, 0x5c6, 0x9212, 0x9128, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0xf8, 0x9, 0x0, 0x8, [{{0x9, 0x4, 0x3, 0x7, 0x0, 0xb6, 0x9f, 0xe0, 0x9}}, {{0x9, 0x4, 0xbe, 0xff, 0x0, 0x2b, 0xde, 0x7d}}, {{0x9, 0x4, 0x6f, 0x8, 0x0, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0})

442.102398ms ago: executing program 5 (id=675):
r0 = socket$kcm(0x11, 0xa, 0x300) (async, rerun: 64)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}) (rerun: 64)
sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, 0xe)
shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) (rerun: 32)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000006400)={r4, 0x9}, &(0x7f0000006440)=0x8)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2400) (async)
bind$bt_sco(r2, &(0x7f0000000580)={0x1f, @none}, 0x8) (async, rerun: 32)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000), 0x4) (async, rerun: 32)
prlimit64(0x0, 0xb, &(0x7f0000000240)={0x7, 0x6}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x20, r6, 0x60b, 0x70bd2b, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x0)
recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002400)=""/4098, 0xd5e}], 0x3a}, 0x0)

202.987885ms ago: executing program 7 (id=676):
r0 = timerfd_create(0x1, 0x80800)
ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0xff)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x2, 0x1, 0x1}, 0xff}, 0x18)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0x1411, 0x1, 0x70bd2d}, 0x10}}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f"], 0x56})
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40810}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x1c0, 0x13, 0x100, 0x70bd2d, 0x25dfdbfc, {0x2b, 0x40, 0xf4, 0x80, {0x4e24, 0x4e23, [0xd, 0xda52, 0x6, 0x401], [0x2, 0x47, 0x6e5b, 0x2], 0x0, [0x6, 0x8f1]}, 0x3, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "021e1b5582764691f2d74a7f76e34de0923b3308812f10c815c33ec8e330796774185518a5f4ac191d769772995abd082204d1f227ef054c841162314ff36f5b8c7b97225250fe27f7f658266424833ba5597f7451d0df39e744c57f0f1242254e9811256b3cd71827bb2d7e4526958999d8c5197607cd0ae365e35769c593a3e2c0171f384462da90e6d2037e742afac092c58d28dc625f60b2db39014d7cf8"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "1794c2d4b7cb00b97d8415187f6c8fa1297820c2201130a302aedd70fe4ad5b27627657232f548635bb37c84aafb73d775e6d364089584fa219473e8cfe5ac8aff76d5d201d61a6af2ec0033a52f567727ac79dd2325f12dcf501e085acb2dc12037528ae515f28c3bd09afc5086adc132aa9491f6a2e87fd9f38a3dc2e5664524f15935d26423c1171197b0732461adf1d4b0b98718b0b0bd363336018b3c2f4bd287457ce188f37a6f9925b756df745736908c9e95d8f683b29fa3a7d088a5f622e32bb0d2fbbc9a36"}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000080)=0x2, 0x12)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x31, 0x0, 0x5, 0x4b}})
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f00000000c0)={0x3})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x5}, 0x31)
migrate_pages(0xffffffffffffffff, 0x1, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003080)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x6, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x4001c00)
accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x80000)
syz_open_dev$audion(&(0x7f00000001c0), 0x1ff, 0xa0202)

51.617202ms ago: executing program 5 (id=677):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000d85000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000d84000/0x2000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68)
syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000d85000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000d84000/0x2000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) (async)
syz_io_uring_setup(0x5b14, &(0x7f0000000040)={0x0, 0xf527, 0x4000, 0x1, 0x323}, 0x0, 0x0) (async)

0s ago: executing program 8 (id=678):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
r2 = socket(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000640)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2}, @l2cap_cid_le_signaling={{}, @l2cap_conn_param_update_rsp={{}, {0x873}}}}, 0xffffffffffffffe4)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
socket$pppl2tp(0x18, 0x1, 0x1)
shutdown(r2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x4ea2, 0x9, @mcast1, 0x8}}, 0x0, 0x5, [{{0xa, 0x4e21, 0x3, @loopback, 0x2}}, {{0xa, 0x4e20, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, {{0xa, 0x4e24, 0x91, @local, 0x8}}, {{0xa, 0x4e20, 0xffffffff, @remote}}, {{0xa, 0x4e23, 0xde, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}}]}, 0x310)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

rations, error -22
[  196.333606][ T7984] netlink: 'syz.7.408': attribute type 6 has an invalid length.
[  196.458746][ T5929] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  196.495982][ T5929] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 99
[  196.512477][ T5929] usb 6-1: can't read configurations, error -22
[  196.534683][ T5929] usb usb6-port1: unable to enumerate USB device
[  196.709307][   T12] team0 (unregistering): Port device team_slave_1 removed
[  196.764516][   T12] team0 (unregistering): Port device team_slave_0 removed
[  197.721479][ T7989] netlink: 'syz.7.409': attribute type 21 has an invalid length.
[  197.837362][ T7934] chnl_net:caif_netlink_parms(): no params data found
[  198.053421][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.412'.
[  198.074974][ T7999] cifs: Unknown parameter ''
[  198.116370][ T5871] Bluetooth: hci2: command tx timeout
[  198.186051][    T9] usb 5-1: device descriptor read/64, error -71
[  198.226124][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.233373][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.255272][ T7934] bridge_slave_0: entered allmulticast mode
[  198.266229][ T7934] bridge_slave_0: entered promiscuous mode
[  198.287966][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.303236][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.311933][ T7934] bridge_slave_1: entered allmulticast mode
[  198.325620][ T7934] bridge_slave_1: entered promiscuous mode
[  198.412122][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.432383][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  198.441955][    T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  198.497630][ T7934] team0: Port device team_slave_0 added
[  198.511749][ T7934] team0: Port device team_slave_1 added
[  198.516594][ T5929] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  198.608661][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  198.635307][    T9] usb 5-1: can't read configurations, error -61
[  198.659880][ T5929] usb 8-1: device descriptor read/64, error -71
[  198.660331][    T9] usb usb5-port1: attempt power cycle
[  198.681316][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.694859][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.730016][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.778303][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.785303][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.815834][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.937061][ T5929] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  198.942204][ T7934] hsr_slave_0: entered promiscuous mode
[  198.957442][ T7934] hsr_slave_1: entered promiscuous mode
[  198.964537][ T7934] debugfs: 'hsr0' already exists in 'hsr'
[  198.976555][ T7934] Cannot create hsr debugfs directory
[  199.026260][    T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  199.050470][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  199.059468][    T9] usb 5-1: can't read configurations, error -61
[  199.065798][ T8025] block nbd5: Attempted send on invalid socket
[  199.076181][ T5929] usb 8-1: device descriptor read/64, error -71
[  199.085518][ T8025] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  199.114994][ T8025] FAT-fs (nbd5): unable to read boot sector
[  199.190700][ T5929] usb usb8-port1: attempt power cycle
[  199.208373][    T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  199.260450][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  199.277915][    T9] usb 5-1: can't read configurations, error -61
[  199.310285][    T9] usb usb5-port1: unable to enumerate USB device
[  199.387066][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.417'.
[  199.461798][ T7934] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  199.485273][ T7934] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  199.510954][ T7934] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  199.543804][ T5929] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  199.559349][ T7934] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  199.566883][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  199.573231][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  199.589634][ T5929] usb 8-1: device descriptor read/8, error -71
[  199.740994][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.774141][ T7934] 8021q: adding VLAN 0 to HW filter on device team0
[  199.786318][ T5951] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  199.790763][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.801127][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.830828][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.838052][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.853185][ T5929] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  199.878370][ T5929] usb 8-1: device descriptor read/8, error -71
[  199.948487][ T5951] usb 6-1: Using ep0 maxpacket: 16
[  199.964565][ T5951] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  199.984094][ T5951] usb 6-1: config 0 has no interface number 0
[  199.989135][ T5929] usb usb8-port1: unable to enumerate USB device
[  199.991318][ T5951] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  200.039206][ T5951] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  200.052704][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.076178][ T5951] usb 6-1: Product: syz
[  200.080412][ T5951] usb 6-1: Manufacturer: syz
[  200.095402][ T5951] usb 6-1: SerialNumber: syz
[  200.117837][ T5951] usb 6-1: config 0 descriptor??
[  200.201652][ T5871] Bluetooth: hci2: command tx timeout
[  200.295585][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.640283][ T7934] veth0_vlan: entered promiscuous mode
[  200.652573][ T7934] veth1_vlan: entered promiscuous mode
[  200.685357][ T7934] veth0_macvtap: entered promiscuous mode
[  200.696195][ T7934] veth1_macvtap: entered promiscuous mode
[  200.722919][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  200.739753][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  200.753507][ T5951] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71
[  200.770119][   T50] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  200.790468][   T50] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  200.819464][ T5951] usb 6-1: USB disconnect, device number 42
[  200.859940][   T50] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.872194][   T50] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  200.959251][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.974082][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.016963][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.024940][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.176387][ T5929] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  201.233494][ T8075] syzkaller1: entered promiscuous mode
[  201.240068][ T8075] syzkaller1: entered allmulticast mode
[  201.254785][ T8075] syzkaller1: left promiscuous mode
[  201.260251][ T8075] syzkaller1: left allmulticast mode
[  201.352946][ T5929] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  201.379458][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.396111][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.408389][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  201.423965][ T5929] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  201.435581][ T5929] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  201.455975][ T5929] usb 5-1: Manufacturer: syz
[  201.466450][ T5929] usb 5-1: config 0 descriptor??
[  201.510394][ T8081] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.423'.
[  201.520970][ T8081] openvswitch: netlink: Message has 512 unknown bytes.
[  201.532595][ T8081] nfs: Deprecated parameter 'intr'
[  201.586349][ T5951] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  201.617970][ T5873] Process accounting resumed
[  201.653751][ T8083] Process accounting resumed
[  201.756070][ T5951] usb 8-1: Using ep0 maxpacket: 16
[  201.763045][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.774075][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.783978][ T5951] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  201.793239][ T5951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.807346][ T5951] usb 8-1: config 0 descriptor??
[  201.893804][ T5929] appleir 0003:05AC:8243.000D: unknown main item tag 0x0
[  201.912394][ T5929] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  201.951084][ T5873] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  202.138314][ T5873] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  202.147066][ T5873] usb 6-1: config 0 has no interface number 0
[  202.153675][ T5873] usb 6-1: config 0 interface 122 has no altsetting 0
[  202.167806][ T5873] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  202.177373][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.185443][ T5873] usb 6-1: Product: syz
[  202.191237][ T5873] usb 6-1: Manufacturer: syz
[  202.201838][ T5873] usb 6-1: SerialNumber: syz
[  202.210275][ T5873] usb 6-1: config 0 descriptor??
[  202.234886][ T5951] input: HID 041e:3100 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:041E:3100.000E/input/input11
[  202.279068][ T5871] Bluetooth: hci2: command tx timeout
[  202.313448][ T5951] creative-sb0540 0003:041E:3100.000E: input,hidraw1: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.7-1/input0
[  202.425454][  T984] usb 6-1: USB disconnect, device number 43
[  202.436703][ T5951] usb 8-1: USB disconnect, device number 27
[  202.829273][ T8093] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.906364][ T8095] ntfs3(loop8): try to read out of volume at offset 0x0
[  203.046493][ T8097] block device autoloading is deprecated and will be removed.
[  203.336337][ T5951] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  203.496067][ T5951] usb 8-1: Using ep0 maxpacket: 16
[  203.503052][ T5951] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  203.516367][ T5951] usb 8-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00
[  203.525459][ T5951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.540394][ T5951] usb 8-1: config 0 descriptor??
[  203.596826][   T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  203.656050][  T984] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  203.746182][   T24] usb 6-1: Using ep0 maxpacket: 8
[  203.766620][   T24] usb 6-1: config 3 has an invalid interface number: 45 but max is 0
[  203.774788][   T24] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  203.815985][   T24] usb 6-1: config 3 has no interface number 0
[  203.822179][   T24] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  203.856998][  T984] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  203.873275][   T24] usb 6-1: config 3 interface 45 has no altsetting 0
[  203.880606][  T984] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  203.898846][   T24] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  203.913356][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.946196][  T984] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  203.956199][   T24] usb 6-1: Product: syz
[  203.960414][   T24] usb 6-1: Manufacturer: syz
[  203.965033][   T24] usb 6-1: SerialNumber: syz
[  203.969758][  T984] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.986198][  T984] usb 9-1: Product: ৸珑쫽ઘ톈넘⿓욙仳簨퉇敗朻对쿺䈱㜻脈ଚ⤏鄢싖䇿켛᷈痍ᾼ㫇
[  204.011171][  T984] usb 9-1: Manufacturer: 첊ⵦ起쀻瘢됿羏᠊㠇플ꃳ䕢誗껑[힧뷿쇃ḍ♷ᥐ┭칛蟟ڞ㚗Ҡ
[  204.017703][ T5952] usb 5-1: USB disconnect, device number 46
[  204.055929][  T984] usb 9-1: SerialNumber: 茡妍촺橫樣뼤볏볥肭䒱죨ࢶꏾ㠕멅鋲Ꝧꅈ⎠疄↞쾡텫䙛㲚鍷닦엜−鲔⼧鲰꩜怿毺렺瞇น
[  204.256349][   T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  204.341418][   T24] usb 6-1: USB disconnect, device number 44
[  204.419451][ T6151] udevd[6151]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.443219][ T5951] usb 8-1: USB disconnect, device number 28
[  204.518377][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.558175][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.685405][  T984] cdc_ncm 9-1:1.0: bind() failure
[  204.706718][  T984] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  204.713683][  T984] cdc_ncm 9-1:1.1: bind() failure
[  204.732241][  T984] usb 9-1: USB disconnect, device number 2
[  205.046202][ T5952] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  205.086025][   T43] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  205.218126][ T5952] usb 5-1: config 0 interface 0 has no altsetting 0
[  205.229338][ T5952] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  205.236607][   T43] usb 6-1: Using ep0 maxpacket: 32
[  205.243840][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.253683][ T5952] usb 5-1: Product: syz
[  205.258152][   T43] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  205.258182][   T43] usb 6-1: config 0 has no interface number 0
[  205.260877][   T43] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  205.284284][  T984] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  205.295032][ T5952] usb 5-1: Manufacturer: syz
[  205.312120][ T5952] usb 5-1: SerialNumber: syz
[  205.312261][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.325773][   T43] usb 6-1: Product: syz
[  205.329344][ T5952] usb 5-1: config 0 descriptor??
[  205.336793][   T43] usb 6-1: Manufacturer: syz
[  205.341482][   T43] usb 6-1: SerialNumber: syz
[  205.341540][ T5952] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state.
[  205.356185][   T43] usb 6-1: config 0 descriptor??
[  205.369098][   T43] smsc95xx v2.0.0
[  205.378966][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  205.410800][ T5952] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049)
[  205.428707][ T5952] usb 5-1: media controller created
[  205.456370][  T984] usb 8-1: Using ep0 maxpacket: 8
[  205.465200][  T984] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  205.474077][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  205.483944][  T984] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  205.483977][  T984] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  205.484030][  T984] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  205.484056][  T984] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  205.484103][  T984] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  205.484128][  T984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.570650][ T8119] tmpfs: Unknown parameter 'usrquota0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.570650][ T8119] 0
[  205.628049][ T8128] vivid-002: kernel_thread() failed
[  205.776186][   T43] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  205.796412][  T984] usb 8-1: usb_control_msg returned -32
[  205.806082][  T984] usbtmc 8-1:16.0: can't read capabilities
[  205.815943][   T43] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  206.212039][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.226620][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.307115][ T5952] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049'
[  206.396385][ T5952] rc_core: IR keymap rc-twinhan1027 not found
[  206.402697][ T5952] Registered IR keymap rc-empty
[  206.413294][ T5952] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  206.436821][ T5952] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input12
[  206.454148][ T5952] dvb-usb: schedule remote query interval to 150 msecs.
[  206.465724][ T5952] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected.
[  206.476681][ T5952] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  206.499757][ T5952] usb 5-1: USB disconnect, device number 47
[  206.625132][ T5873] m920x_read = error: -19
[  206.631461][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  206.648844][   T43] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  206.658614][ T8121] netlink: 'syz.5.438': attribute type 10 has an invalid length.
[  206.666569][   T43] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32
[  206.671666][ T8121] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  206.716494][ T5873] usb 6-1: USB disconnect, device number 45
[  206.798782][ T5952] m920x_read = error: -19
[  206.803193][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  206.836065][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  206.968762][ T5873] m920x_read = error: -19
[  206.973175][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  206.989486][   T24] usb 9-1: no configurations
[  206.995029][   T24] usb 9-1: can't read configurations, error -22
[  207.137099][ T5873] m920x_read = error: -19
[  207.137393][   T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  207.146367][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  207.307787][   T24] usb 9-1: no configurations
[  207.312458][   T24] usb 9-1: can't read configurations, error -22
[  207.321926][   T24] usb usb9-port1: attempt power cycle
[  207.326581][ T5951] m920x_read = error: -19
[  207.332309][ T5951] dvb-usb: error -19 while querying for an remote control event.
[  207.408885][ T8179] fuse: Bad value for 'fd'
[  207.506134][ T5952] m920x_read = error: -19
[  207.510607][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  207.522166][ T8182] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526
[  207.531685][ T8182] netlink: 132 bytes leftover after parsing attributes in process `syz.5.453'.
[  207.545507][ T8182] netlink: 140 bytes leftover after parsing attributes in process `syz.5.453'.
[  207.556729][ T5873] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  207.667257][   T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  207.688052][ T5952] m920x_read = error: -19
[  207.692220][   T24] usb 9-1: no configurations
[  207.692448][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  207.707458][   T24] usb 9-1: can't read configurations, error -22
[  207.709375][ T5873] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  207.724867][ T5873] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  207.736719][ T5873] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  207.749401][ T5873] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  207.759844][ T5873] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  207.775703][ T5873] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  207.787199][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.795284][ T5873] usb 5-1: Product: syz
[  207.799598][ T5873] usb 5-1: Manufacturer: syz
[  207.804218][ T5873] usb 5-1: SerialNumber: syz
[  207.821070][ T5873] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[  207.835236][ T5873] imon 5-1:155.0: unable to initialize intf0, err -90
[  207.836401][   T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  207.842220][ T5873] imon:imon_probe: failed to initialize context!
[  207.842240][ T5873] imon 5-1:155.0: unable to register, err -19
[  207.866080][ T5873] m920x_read = error: -19
[  207.885388][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  207.898169][   T24] usb 9-1: no configurations
[  207.903167][   T24] usb 9-1: can't read configurations, error -22
[  207.915274][   T24] usb usb9-port1: unable to enumerate USB device
[  208.085807][ T5873] m920x_read = error: -19
[  208.091391][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  208.105437][ T8192] netlink: 'syz.5.456': attribute type 11 has an invalid length.
[  208.121257][ T8192] netlink: 168 bytes leftover after parsing attributes in process `syz.5.456'.
[  208.170461][ T5873] usb 8-1: USB disconnect, device number 29
[  208.180617][   T24] usb 5-1: USB disconnect, device number 48
[  208.251446][ T8197] netlink: 256 bytes leftover after parsing attributes in process `syz.7.457'.
[  208.269173][ T5952] m920x_read = error: -19
[  208.273588][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  208.289515][ T8196] netlink: 180 bytes leftover after parsing attributes in process `syz.7.457'.
[  208.337139][   T43] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  208.446233][ T5873] m920x_read = error: -19
[  208.450648][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  208.622940][   T43] usb 6-1: Using ep0 maxpacket: 8
[  208.637739][ T5873] m920x_read = error: -19
[  208.643620][   T43] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.655605][   T43] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.674377][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  208.678438][   T43] usb 6-1: config 0 interface 0 has no altsetting 0
[  208.710289][   T43] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  208.739995][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.778146][   T43] usb 6-1: config 0 descriptor??
[  208.866359][ T5952] m920x_read = error: -19
[  208.891885][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  209.000361][   T43] ntrig 0003:1B96:0004.0010: unknown main item tag 0x0
[  209.026666][   T43] ntrig 0003:1B96:0004.0010: unknown main item tag 0x0
[  209.051900][   T43] ntrig 0003:1B96:0004.0010: unknown main item tag 0x0
[  209.067660][ T5952] m920x_read = error: -19
[  209.072066][   T43] ntrig 0003:1B96:0004.0010: unknown main item tag 0x0
[  209.072070][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  209.072107][   T43] ntrig 0003:1B96:0004.0010: unknown main item tag 0x0
[  209.108245][   T43] ntrig 0003:1B96:0004.0010: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.5-1/input0
[  209.266702][ T5952] m920x_read = error: -19
[  209.271116][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  209.456146][ T5952] m920x_read = error: -19
[  209.464156][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  209.535995][   T43] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  209.631780][ T5952] m920x_read = error: -19
[  209.640361][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  209.742580][ T8245] fuse: Unknown parameter ''
[  209.789180][   T43] usb 5-1: Using ep0 maxpacket: 16
[  209.809792][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.831111][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.841044][ T5952] m920x_read = error: -19
[  209.841073][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  209.854915][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.906512][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.947299][   T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  209.973397][   T43] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  210.008086][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.008796][ T5952] m920x_read = error: -19
[  210.025806][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  210.044527][   T43] usb 5-1: config 0 descriptor??
[  210.098552][ T5951] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  210.199631][ T5952] m920x_read = error: -19
[  210.212144][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  210.266026][ T5951] usb 9-1: Using ep0 maxpacket: 8
[  210.277600][ T5951] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  210.300522][ T5951] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  210.333295][ T5951] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  210.374737][ T5951] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  210.394324][ T5951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.410373][ T5873] m920x_read = error: -19
[  210.415043][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  210.484745][ T5951] hub 9-1:1.0: bad descriptor, ignoring hub
[  210.499316][   T43] hid-multitouch 0003:0457:07DA.0011: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0
[  210.530467][ T5951] hub 9-1:1.0: probe with driver hub failed with error -5
[  210.568155][ T5951] cdc_wdm 9-1:1.0: skipping garbage
[  210.600887][ T5951] cdc_wdm 9-1:1.0: skipping garbage
[  210.621915][ T5951] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  210.651485][ T5952] m920x_read = error: -19
[  210.678752][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  210.701328][ T5951] usb 9-1: USB disconnect, device number 7
[  210.701884][ T5929] usb 5-1: USB disconnect, device number 49
[  210.765149][ T8270] fido_id[8270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  210.866374][   T43] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  210.886336][ T5952] m920x_read = error: -19
[  210.896417][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  211.030226][   T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.043105][   T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.056965][ T5951] m920x_read = error: -19
[  211.061266][   T43] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  211.061356][ T5951] dvb-usb: error -19 while querying for an remote control event.
[  211.083598][   T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.100083][   T43] usb 8-1: config 0 descriptor??
[  211.135071][ T5922] usb 6-1: USB disconnect, device number 46
[  211.280635][ T5951] m920x_read = error: -19
[  211.285044][ T5951] dvb-usb: error -19 while querying for an remote control event.
[  211.402961][ T8291] netlink: 100 bytes leftover after parsing attributes in process `syz.4.473'.
[  211.416156][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.8.472'.
[  211.496304][ T5951] m920x_read = error: -19
[  211.500871][ T5951] dvb-usb: error -19 while querying for an remote control event.
[  211.541607][   T43] usbhid 8-1:0.0: can't add hid device: -71
[  211.566417][   T43] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  211.613533][   T43] usb 8-1: USB disconnect, device number 30
[  211.706368][ T5873] m920x_read = error: -19
[  211.710782][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  211.877538][ T8310] 9pnet_fd: Insufficient options for proto=fd
[  211.906758][ T5951] m920x_read = error: -19
[  211.911162][ T5951] dvb-usb: error -19 while querying for an remote control event.
[  212.010095][ T8302] netlink: 'syz.4.475': attribute type 142 has an invalid length.
[  212.030714][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.076484][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.080655][    T9] m920x_read = error: -19
[  212.097723][    T9] dvb-usb: error -19 while querying for an remote control event.
[  212.106194][ T5873] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  212.246303][ T5873] usb 9-1: device descriptor read/64, error -71
[  212.256029][   T43] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  212.276182][    T9] m920x_read = error: -19
[  212.280621][    T9] dvb-usb: error -19 while querying for an remote control event.
[  212.357551][ T5929] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  212.408077][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.426024][   T43] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  212.446152][ T5951] m920x_read = error: -19
[  212.454995][ T5951] dvb-usb: error -19 while querying for an remote control event.
[  212.456660][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.487116][   T43] usb 6-1: config 0 descriptor??
[  212.500073][ T5873] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  212.541013][ T5929] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  212.554798][ T5929] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  212.575334][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.595514][ T5929] usb 5-1: Product: syz
[  212.601933][ T5929] usb 5-1: Manufacturer: syz
[  212.618009][ T5929] usb 5-1: SerialNumber: syz
[  212.626174][    T9] usb 8-1: new full-speed USB device number 31 using dummy_hcd
[  212.636069][ T5951] m920x_read = error: -19
[  212.640456][ T5951] dvb-usb: error -19 while querying for an remote control event.
[  212.666314][ T5873] usb 9-1: device descriptor read/64, error -71
[  212.715785][   T43] usbhid 6-1:0.0: can't add hid device: -71
[  212.732582][   T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  212.766856][   T43] usb 6-1: USB disconnect, device number 47
[  212.792000][ T5873] usb usb9-port1: attempt power cycle
[  212.814393][    T9] usb 8-1: device descriptor read/64, error -71
[  212.847019][ T5952] m920x_read = error: -19
[  212.851430][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  212.888045][ T5929] comedi comedi5: Wrong number of endpoints
[  212.904571][ T5929] ni6501 5-1:5.0: driver 'ni6501' failed to auto-configure device.
[  212.940905][ T5929] usb 5-1: USB disconnect, device number 50
[  213.036486][ T8087] m920x_read = error: -19
[  213.040901][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  213.076500][    T9] usb 8-1: new full-speed USB device number 32 using dummy_hcd
[  213.145997][ T5873] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  213.168731][ T5873] usb 9-1: device descriptor read/8, error -71
[  213.206096][ T8087] m920x_read = error: -19
[  213.215969][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  213.223858][    T9] usb 8-1: device descriptor read/64, error -71
[  213.356247][    T9] usb usb8-port1: attempt power cycle
[  213.406224][ T5952] m920x_read = error: -19
[  213.410664][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  213.418776][ T5873] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  213.471211][ T5873] usb 9-1: device descriptor read/8, error -71
[  213.549263][ T5929] usb 6-1: new low-speed USB device number 48 using dummy_hcd
[  213.592934][ T5873] usb usb9-port1: unable to enumerate USB device
[  213.613787][ T5873] m920x_read = error: -19
[  213.624508][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  213.706149][    T9] usb 8-1: new full-speed USB device number 33 using dummy_hcd
[  213.719659][ T5929] usb 6-1: unable to get BOS descriptor or descriptor too short
[  213.729117][ T5929] usb 6-1: config 7 has an invalid interface number: 67 but max is 0
[  213.738161][ T5929] usb 6-1: config 7 has no interface number 0
[  213.747043][    T9] usb 8-1: device descriptor read/8, error -71
[  213.758762][ T5929] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  213.768221][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.776575][ T5929] usb 6-1: Product: 㯑
[  213.816087][ T8087] m920x_read = error: -19
[  213.822333][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  213.928000][ T5873] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  213.996156][ T8087] m920x_read = error: -19
[  214.000582][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  214.008878][    T9] usb 8-1: new full-speed USB device number 34 using dummy_hcd
[  214.037537][    T9] usb 8-1: device descriptor read/8, error -71
[  214.098155][ T5873] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.115914][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  214.130332][ T5873] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  214.139773][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  214.149255][ T5873] usb 5-1: SerialNumber: syz
[  214.154243][    T9] usb usb8-port1: unable to enumerate USB device
[  214.176118][    T9] m920x_read = error: -19
[  214.180922][    T9] dvb-usb: error -19 while querying for an remote control event.
[  214.287404][ T5929] usb 6-1: USB disconnect, device number 48
[  214.347056][    T9] m920x_read = error: -19
[  214.351491][    T9] dvb-usb: error -19 while querying for an remote control event.
[  214.390742][ T5873] usb 5-1: 0:2 : does not exist
[  214.426495][ T5873] usb 5-1: USB disconnect, device number 51
[  214.469163][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  214.556099][ T8087] m920x_read = error: -19
[  214.560498][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  214.726713][ T5873] m920x_read = error: -19
[  214.731283][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  214.896256][ T8087] m920x_read = error: -19
[  214.901949][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  215.077080][    T9] m920x_read = error: -19
[  215.081495][    T9] dvb-usb: error -19 while querying for an remote control event.
[  215.246499][ T5873] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  215.251411][  T984] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  215.255155][    T9] m920x_read = error: -19
[  215.279010][    T9] dvb-usb: error -19 while querying for an remote control event.
[  215.396229][  T984] usb 5-1: device descriptor read/64, error -71
[  215.426135][ T5873] usb 9-1: Using ep0 maxpacket: 16
[  215.439710][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  215.466050][ T5873] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  215.486501][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  215.497169][ T8087] m920x_read = error: -19
[  215.501547][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  215.519712][ T5873] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  215.565365][ T5873] usb 9-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97
[  215.575119][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.590027][ T5873] usb 9-1: Product: syz
[  215.594250][ T5873] usb 9-1: Manufacturer: syz
[  215.599434][ T5873] usb 9-1: SerialNumber: syz
[  215.615350][ T5873] usb 9-1: config 0 descriptor??
[  215.625553][ T5873] omninet 9-1:0.0: ZyXEL - omni.net usb converter detected
[  215.646627][  T984] usb 5-1: new full-speed USB device number 53 using dummy_hcd
[  215.661763][ T5873] usb 9-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[  215.716182][ T5873] m920x_read = error: -19
[  215.732064][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  215.817665][  T984] usb 5-1: device descriptor read/64, error -71
[  215.905652][ T5873] usb 9-1: USB disconnect, device number 12
[  215.919290][ T8087] m920x_read = error: -19
[  215.930620][ T5873] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[  215.939507][  T984] usb usb5-port1: attempt power cycle
[  215.944177][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  215.975449][ T5873] omninet 9-1:0.0: device disconnected
[  216.127878][ T8087] m920x_read = error: -19
[  216.132289][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  216.206052][   T43] usb 8-1: new full-speed USB device number 35 using dummy_hcd
[  216.296669][  T984] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  216.306620][ T5873] m920x_read = error: -19
[  216.316371][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  216.328111][  T984] usb 5-1: device descriptor read/8, error -71
[  216.368707][   T43] usb 8-1: unable to get BOS descriptor or descriptor too short
[  216.378390][   T43] usb 8-1: not running at top speed; connect to a high speed hub
[  216.387573][   T43] usb 8-1: config 4 has an invalid interface number: 201 but max is 0
[  216.396199][   T43] usb 8-1: config 4 has no interface number 0
[  216.402454][   T43] usb 8-1: config 4 interface 201 has no altsetting 0
[  216.412302][   T43] usb 8-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=c0.e3
[  216.434445][   T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.466211][   T43] usb 8-1: Product: syz
[  216.470445][   T43] usb 8-1: Manufacturer: syz
[  216.478254][   T43] usb 8-1: SerialNumber: syz
[  216.495988][ T5873] m920x_read = error: -19
[  216.509688][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  216.533988][   T30] audit: type=1326 audit(1757327566.924:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8427 comm="syz.5.498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafa5b8ebe9 code=0x0
[  216.577571][  T984] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  216.606824][  T984] usb 5-1: device descriptor read/8, error -71
[  216.686432][ T5873] m920x_read = error: -19
[  216.690840][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  216.716349][  T984] usb usb5-port1: unable to enumerate USB device
[  216.858620][ T5873] m920x_read = error: -19
[  216.863221][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  217.029604][ T8087] m920x_read = error: -19
[  217.034007][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  217.116103][ T5873] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  217.200388][ T8087] m920x_read = error: -19
[  217.204830][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  217.267966][ T5873] usb 9-1: too many configurations: 151, using maximum allowed: 8
[  217.290733][ T5873] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  217.300294][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  217.308776][ T5873] usb 9-1: Product: syz
[  217.312976][ T5873] usb 9-1: Manufacturer: syz
[  217.317750][ T5873] usb 9-1: SerialNumber: syz
[  217.336611][ T5873] usb 9-1: config 0 descriptor??
[  217.366042][ T8087] m920x_read = error: -19
[  217.371209][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  217.424233][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.450059][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.457353][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.481402][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.540067][    T9] m920x_read = error: -19
[  217.546480][    T9] dvb-usb: error -19 while querying for an remote control event.
[  217.561898][ T5873] usb 9-1: bad CDC descriptors
[  217.595586][ T5873] usb 9-1: USB disconnect, device number 13
[  217.726233][    T9] m920x_read = error: -19
[  217.730639][    T9] dvb-usb: error -19 while querying for an remote control event.
[  217.896323][ T5873] m920x_read = error: -19
[  217.900730][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  217.919799][ T5929] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  218.067702][ T8087] m920x_read = error: -19
[  218.072147][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  218.076185][ T5929] usb 6-1: device descriptor read/64, error -71
[  218.256320][ T8087] m920x_read = error: -19
[  218.260721][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  218.346616][ T5929] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  218.376040][ T5873] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  218.428218][    T9] m920x_read = error: -19
[  218.432660][    T9] dvb-usb: error -19 while querying for an remote control event.
[  218.496279][ T5929] usb 6-1: device descriptor read/64, error -71
[  218.526492][ T5873] usb 9-1: Using ep0 maxpacket: 8
[  218.533469][ T5873] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  218.546955][ T5873] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.559989][ T8087] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  218.567954][ T5873] usb 9-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  218.578055][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.589206][ T5873] usb 9-1: config 0 descriptor??
[  218.596114][    T9] m920x_read = error: -19
[  218.605558][    T9] dvb-usb: error -19 while querying for an remote control event.
[  218.620187][ T5929] usb usb6-port1: attempt power cycle
[  218.726000][ T8087] usb 5-1: Using ep0 maxpacket: 32
[  218.732900][ T8087] usb 5-1: config 0 has an invalid interface number: 152 but max is 0
[  218.741487][ T8087] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.751936][ T8087] usb 5-1: config 0 has no interface number 0
[  218.759548][ T8087] usb 5-1: config 0 interface 152 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  218.769637][    T9] m920x_read = error: -19
[  218.774083][ T8087] usb 5-1: config 0 interface 152 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11
[  218.787454][    T9] dvb-usb: error -19 while querying for an remote control event.
[  218.795292][ T8087] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 6.d2
[  218.808929][ T8087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.820841][ T8087] usb 5-1: config 0 descriptor??
[  218.837568][ T8087] s2255 5-1:0.152: Could not find bulk-in endpoint
[  218.844252][ T8087] Sensoray 2255 driver load failed: 0xfffffff4
[  218.850697][ T8087] s2255 5-1:0.152: probe with driver s2255 failed with error -12
[  218.923615][   T43] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:4.201/input/input13
[  218.947000][ T8087] m920x_read = error: -19
[  218.958573][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  218.960667][ T5220] bcm5974 8-1:4.201: could not read from device
[  218.979671][ T5929] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  218.995149][   T43] usb 8-1: USB disconnect, device number 35
[  219.014736][ T5220] bcm5974 8-1:4.201: could not read from device
[  219.025727][ T5220] bcm5974 8-1:4.201: could not read from device
[  219.037313][ T8450] netlink: 'syz.4.506': attribute type 10 has an invalid length.
[  219.046891][ T5929] usb 6-1: device descriptor read/8, error -71
[  219.058843][ T8450] netlink: 40 bytes leftover after parsing attributes in process `syz.4.506'.
[  219.058884][ T8450] batadv0: entered allmulticast mode
[  219.059748][ T8450] bridge0: port 3(batadv0) entered blocking state
[  219.065288][ T8450] bridge0: port 3(batadv0) entered disabled state
[  219.088530][ T8446] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  219.099042][ T8450] batadv0: entered promiscuous mode
[  219.126884][ T8087] m920x_read = error: -19
[  219.129938][ T8450] bridge0: port 3(batadv0) entered blocking state
[  219.131270][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  219.137889][ T8450] bridge0: port 3(batadv0) entered forwarding state
[  219.153539][ T5873] monterey 0003:0566:3004.0012: report_id 1108778202 is invalid
[  219.181127][ T5873] monterey 0003:0566:3004.0012: item 0 4 1 8 parsing failed
[  219.195000][ T5922] usb 5-1: USB disconnect, device number 56
[  219.204199][ T5873] monterey 0003:0566:3004.0012: probe with driver monterey failed with error -22
[  219.296410][ T5929] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  219.317379][ T5929] usb 6-1: device descriptor read/8, error -71
[  219.329235][   T43] usb 9-1: USB disconnect, device number 14
[  219.356063][ T5873] m920x_read = error: -19
[  219.360543][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  219.376985][ T3555] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  219.387067][ T3555] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  219.427997][ T5929] usb usb6-port1: unable to enumerate USB device
[  219.526151][ T5873] m920x_read = error: -19
[  219.530569][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  219.707874][ T5873] m920x_read = error: -19
[  219.712466][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  219.876861][ T5873] m920x_read = error: -19
[  219.883063][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  220.056107][ T8087] m920x_read = error: -19
[  220.062933][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  220.236357][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  220.333058][ T8087] m920x_read = error: -19
[  220.376134][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  220.473151][ T8478] netlink: 'syz.7.513': attribute type 4 has an invalid length.
[  220.487822][ T8478] netlink: 152 bytes leftover after parsing attributes in process `syz.7.513'.
[  220.505465][ T8478] : renamed from bond0 (while UP)
[  220.556174][ T5873] m920x_read = error: -19
[  220.560572][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  220.592050][ T8482] tmpfs: Unknown parameter '��������18446744073709551615��������'
[  220.663156][ T5929] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  220.726025][  T984] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  220.752104][ T8087] m920x_read = error: -19
[  220.760251][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  220.817387][ T5929] usb 9-1: device descriptor read/64, error -71
[  220.893163][  T984] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  220.903575][  T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.912073][  T984] usb 5-1: Product: syz
[  220.918037][  T984] usb 5-1: Manufacturer: syz
[  220.923167][  T984] usb 5-1: SerialNumber: syz
[  220.937684][ T5873] m920x_read = error: -19
[  220.943608][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  220.993980][ T8490] bridge0: port 3(batadv0) entered blocking state
[  221.004973][ T8490] bridge0: port 3(batadv0) entered disabled state
[  221.012411][ T8490] batadv0: entered allmulticast mode
[  221.029725][ T8490] batadv0: entered promiscuous mode
[  221.040331][ T8490] bridge0: port 3(batadv0) entered blocking state
[  221.047238][ T8490] bridge0: port 3(batadv0) entered forwarding state
[  221.063212][ T8490] batadv0: left allmulticast mode
[  221.068594][ T8490] batadv0: left promiscuous mode
[  221.068726][ T5929] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  221.073869][ T8490] bridge0: port 3(batadv0) entered disabled state
[  221.088334][ T8087] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  221.116400][ T5873] m920x_read = error: -19
[  221.120806][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  221.150548][  T984] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  221.183392][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.7.519'.
[  221.185357][  T984] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  221.196024][ T8494] nbd: illegal input index -1900544
[  221.206730][ T5929] usb 9-1: device descriptor read/64, error -71
[  221.215048][  T984] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  221.236610][  T984] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  221.253664][ T8087] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.256312][  T984] usb 5-1: USB disconnect, device number 57
[  221.279319][ T8087] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  221.292388][ T5873] m920x_read = error: -19
[  221.304201][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  221.316470][ T5929] usb usb9-port1: attempt power cycle
[  221.324543][ T8087] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  221.343557][ T8087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.371423][ T8087] usb 6-1: config 0 descriptor??
[  221.477883][    T9] m920x_read = error: -19
[  221.482329][    T9] dvb-usb: error -19 while querying for an remote control event.
[  221.648740][    T9] m920x_read = error: -19
[  221.655989][ T5929] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  221.657169][    T9] dvb-usb: error -19 while querying for an remote control event.
[  221.666081][  T984] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  221.696612][ T5929] usb 9-1: device descriptor read/8, error -71
[  221.805222][ T8087] ortek 0003:1223:3F07.0013: unknown main item tag 0x6
[  221.821578][ T8087] ortek 0003:1223:3F07.0013: report_id 29495 is invalid
[  221.828999][ T5952] m920x_read = error: -19
[  221.834909][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  221.841029][  T984] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  221.843392][ T8087] ortek 0003:1223:3F07.0013: item 0 2 1 8 parsing failed
[  221.860933][ T8087] ortek 0003:1223:3F07.0013: probe with driver ortek failed with error -22
[  221.866132][  T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.896151][  T984] usb 5-1: Product: syz
[  221.900372][  T984] usb 5-1: Manufacturer: syz
[  221.905035][  T984] usb 5-1: SerialNumber: syz
[  221.936087][ T5929] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  221.966994][ T5929] usb 9-1: device descriptor read/8, error -71
[  222.005143][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.014479][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.026227][ T5952] m920x_read = error: -19
[  222.030677][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  222.044207][   T43] usb 6-1: USB disconnect, device number 53
[  222.079667][ T5929] usb usb9-port1: unable to enumerate USB device
[  222.216116][ T5952] m920x_read = error: -19
[  222.220549][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  222.349264][  T984] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  222.388473][ T5952] m920x_read = error: -19
[  222.392972][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  222.395981][  T984] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  222.447408][  T984] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  222.468193][  T984] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  222.489901][  T984] usb 5-1: USB disconnect, device number 58
[  222.576208][ T5952] m920x_read = error: -19
[  222.580651][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  222.686146][ T8087] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  222.756600][ T5952] m920x_read = error: -19
[  222.761017][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  222.816084][  T984] usb 5-1: new low-speed USB device number 59 using dummy_hcd
[  222.876237][ T8087] usb 8-1: Using ep0 maxpacket: 8
[  222.890846][ T8087] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  222.908417][ T8087] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.926539][ T5952] m920x_read = error: -19
[  222.935787][ T8087] pvrusb2: Hardware description: Terratec Grabster AV400
[  222.945981][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  222.953865][ T8087] pvrusb2: **********
[  222.959932][ T8087] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  222.972051][ T8087] pvrusb2: Important functionality might not be entirely working.
[  222.980187][ T8087] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  222.988099][  T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  222.994439][ T8087] pvrusb2: **********
[  223.004203][  T984] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  223.017176][  T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.033513][  T984] usb 5-1: config 0 descriptor??
[  223.041531][ T8507] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  223.106253][ T5952] m920x_read = error: -19
[  223.110683][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  223.130121][ T2346] pvrusb2: Invalid write control endpoint
[  223.176041][ T5929] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  223.199748][ T2346] pvrusb2: Invalid write control endpoint
[  223.208101][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  223.217677][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  223.226459][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  223.236889][ T2346] pvrusb2: Device being rendered inoperable
[  223.244986][ T2346] cx25840 3-0044: Unable to detect h/w, assuming cx23887
[  223.253977][ T2346] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  223.270799][ T2346] pvrusb2: Attached sub-driver cx25840
[  223.276721][ T5952] m920x_read = error: -19
[  223.281235][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  223.291506][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  223.292294][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  223.326143][ T5929] usb 6-1: Using ep0 maxpacket: 32
[  223.349613][ T5929] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  223.364629][ T5929] usb 6-1: config 0 has no interface number 0
[  223.377733][ T5929] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  223.387520][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.395600][ T5929] usb 6-1: Product: syz
[  223.401567][ T5929] usb 6-1: Manufacturer: syz
[  223.406394][ T5929] usb 6-1: SerialNumber: syz
[  223.415468][ T5952] usb 8-1: USB disconnect, device number 36
[  223.439678][ T5929] usb 6-1: config 0 descriptor??
[  223.459889][ T8087] m920x_read = error: -19
[  223.474331][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  223.484639][ T5929] radio-si470x 6-1:0.35: could not find interrupt in endpoint
[  223.501331][  T984] samsung 0003:0419:0001.0014: reserved main item tag 0xd
[  223.521074][ T5929] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5
[  223.532425][  T984] samsung 0003:0419:0001.0014: item fetching failed at offset 4/5
[  223.558357][  T984] samsung 0003:0419:0001.0014: parse failed
[  223.564483][  T984] samsung 0003:0419:0001.0014: probe with driver samsung failed with error -22
[  223.658589][ T5929] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  223.680458][ T8087] m920x_read = error: -19
[  223.685161][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  223.712170][   T43] usb 5-1: USB disconnect, device number 59
[  223.856066][ T8087] m920x_read = error: -19
[  223.860460][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  223.873382][ T5929] radio-raremono 6-1:0.35: V4L2 device registered as radio48
[  223.886043][  T984] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  224.028949][ T8087] m920x_read = error: -19
[  224.033365][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  224.046235][  T984] usb 9-1: Using ep0 maxpacket: 8
[  224.053513][  T984] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.069356][  T984] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.082910][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.091524][  T984] usb 9-1: config 0 interface 0 has no altsetting 0
[  224.098558][  T984] usb 9-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  224.103933][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.107931][  T984] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.137151][  T984] usb 9-1: config 0 descriptor??
[  224.196979][ T8087] m920x_read = error: -19
[  224.201388][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  224.335996][ T5873] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  224.374593][ T8087] m920x_read = error: -19
[  224.381924][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  224.498284][ T5873] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.509673][ T5873] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.525990][ T5873] usb 8-1: config 0 interface 0 has no altsetting 0
[  224.532665][ T5873] usb 8-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  224.544332][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.555613][ T5873] usb 8-1: config 0 descriptor??
[  224.555656][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.560885][ T5952] m920x_read = error: -19
[  224.576764][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.587035][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  224.594865][  T984] usbhid 9-1:0.0: can't add hid device: -71
[  224.612965][  T984] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  224.628173][  T984] usb 9-1: USB disconnect, device number 19
[  224.636235][   T43] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  224.756256][ T5952] m920x_read = error: -19
[  224.760736][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  224.796145][   T43] usb 5-1: Using ep0 maxpacket: 8
[  224.802054][   T43] usb 5-1: no configurations
[  224.807584][   T43] usb 5-1: can't read configurations, error -22
[  224.927526][ T5952] m920x_read = error: -19
[  224.932057][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  224.936247][   T43] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  225.106115][ T5873] m920x_read = error: -19
[  225.110525][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  225.120603][   T43] usb 5-1: Using ep0 maxpacket: 8
[  225.128024][   T43] usb 5-1: no configurations
[  225.137910][   T43] usb 5-1: can't read configurations, error -22
[  225.155238][   T43] usb usb5-port1: attempt power cycle
[  225.180210][ T8541] could not allocate digest TFM handle nhpoly1305-neon
[  225.214706][ T5952] usb 8-1: USB disconnect, device number 37
[  225.296215][ T5873] m920x_read = error: -19
[  225.300616][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  225.466090][ T5952] m920x_read = error: -19
[  225.470709][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  225.506099][   T43] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  225.550070][   T43] usb 5-1: Using ep0 maxpacket: 8
[  225.561516][   T43] usb 5-1: no configurations
[  225.566821][   T43] usb 5-1: can't read configurations, error -22
[  225.636737][ T5952] m920x_read = error: -19
[  225.642944][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  225.696071][   T43] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  225.717145][   T43] usb 5-1: Using ep0 maxpacket: 8
[  225.722876][   T43] usb 5-1: no configurations
[  225.729090][   T43] usb 5-1: can't read configurations, error -22
[  225.738164][   T43] usb usb5-port1: unable to enumerate USB device
[  225.804832][ T8550] tmpfs: User quota block hardlimit too large.
[  225.811861][ T5952] m920x_read = error: -19
[  225.816929][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  225.976150][ T5873] m920x_read = error: -19
[  225.980558][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  226.146369][ T5873] m920x_read = error: -19
[  226.150781][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  226.196545][ T5952] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  226.316186][ T5873] m920x_read = error: -19
[  226.320596][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  226.355999][ T5952] usb 8-1: Using ep0 maxpacket: 8
[  226.370655][ T5952] usb 8-1: config 0 has an invalid interface number: 31 but max is 0
[  226.403096][ T5952] usb 8-1: config 0 has no interface number 0
[  226.440779][ T5952] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  226.457526][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.465629][ T5952] usb 8-1: Product: syz
[  226.484222][ T5952] usb 8-1: Manufacturer: syz
[  226.496078][ T8087] m920x_read = error: -19
[  226.500475][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  226.517453][ T5952] usb 8-1: SerialNumber: syz
[  226.534170][ T5952] usb 8-1: config 0 descriptor??
[  226.690571][ T8087] m920x_read = error: -19
[  226.695109][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  226.795269][ T5952] usb 8-1: Found UVC 0.04 device syz (046d:08c3)
[  226.807617][   T43] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  226.851223][ T5952] usb 8-1: No valid video chain found.
[  226.857723][ T8087] m920x_read = error: -19
[  226.862116][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  226.880812][ T5952] usb 8-1: USB disconnect, device number 38
[  226.909590][ T5929] IPVS: starting estimator thread 0...
[  226.970480][   T43] usb 9-1: Using ep0 maxpacket: 32
[  226.978292][   T43] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  226.986810][   T43] usb 9-1: config 0 has no interface number 0
[  226.997774][   T43] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  227.007125][   T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.015158][   T43] usb 9-1: Product: syz
[  227.019663][ T8591] IPVS: using max 24 ests per chain, 57600 per kthread
[  227.027129][   T43] usb 9-1: Manufacturer: syz
[  227.031844][   T43] usb 9-1: SerialNumber: syz
[  227.043963][   T43] usb 9-1: config 0 descriptor??
[  227.056152][ T8087] m920x_read = error: -19
[  227.060549][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  227.084206][   T43] smsc95xx v2.0.0
[  227.164710][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.174135][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.236070][ T5952] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  227.245030][    T9] m920x_read = error: -19
[  227.249861][    T9] dvb-usb: error -19 while querying for an remote control event.
[  227.406050][ T5952] usb 8-1: Using ep0 maxpacket: 32
[  227.416121][ T8087] m920x_read = error: -19
[  227.420599][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  227.433601][ T5952] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[  227.444362][ T5952] usb 8-1: config 0 has no interface number 0
[  227.450843][ T5952] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  227.461094][ T5952] usb 8-1: config 0 interface 196 has no altsetting 0
[  227.481585][   T43] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  227.481813][ T5952] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  227.494948][   T43] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  227.503070][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.534757][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.536272][ T5952] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.560234][ T5952] usb 8-1: Product: syz
[  227.564473][ T5952] usb 8-1: Manufacturer: syz
[  227.573599][ T5952] usb 8-1: SerialNumber: syz
[  227.581030][ T5952] usb 8-1: config 0 descriptor??
[  227.586193][ T8087] m920x_read = error: -19
[  227.590576][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  227.599291][ T8590] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  227.768769][ T8087] m920x_read = error: -19
[  227.773318][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  227.786753][ T5929] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  227.788007][ T8602] netlink: 24 bytes leftover after parsing attributes in process `syz.5.548'.
[  227.946096][ T8087] m920x_read = error: -19
[  227.950545][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  227.962878][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  227.974530][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4
[  227.985744][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023
[  228.012601][ T5929] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  228.022848][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.031019][ T5929] usb 5-1: Product: syz
[  228.035255][ T5929] usb 5-1: Manufacturer: syz
[  228.040385][ T5929] usb 5-1: SerialNumber: syz
[  228.044244][ T8602] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  228.053824][ T8602] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  228.059985][ T5929] usb 5-1: config 0 descriptor??
[  228.071644][ T5929] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0201
[  228.092452][ T8602] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  228.103392][ T8602] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  228.114273][ T8602] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  228.124904][ T8602] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  228.132014][ T8087] m920x_read = error: -19
[  228.138040][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  228.142674][ T8602] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  228.159916][ T8602] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  228.166820][ T8602] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  228.174654][ T8602] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  228.212715][ T5952] ipheth 8-1:0.196: ipheth_enable_ncm: usb_control_msg: -71
[  228.245031][ T5952] ipheth 8-1:0.196: Apple iPhone USB Ethernet device attached
[  228.271232][ T5952] usb 8-1: USB disconnect, device number 39
[  228.307662][ T5929] usb 5-1: USB disconnect, device number 64
[  228.323658][ T8087] m920x_read = error: -19
[  228.348333][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  228.397802][ T5952] ipheth 8-1:0.196: Apple iPhone USB Ethernet now disconnected
[  228.540080][ T8087] m920x_read = error: -19
[  228.544604][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  228.579382][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.588362][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.706104][ T5952] m920x_read = error: -19
[  228.710507][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  228.876100][ T8087] m920x_read = error: -19
[  228.882191][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  229.068414][ T8087] m920x_read = error: -19
[  229.072861][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  229.086574][ T5952] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  229.199365][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.211433][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.225739][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.236819][    T9] m920x_read = error: -19
[  229.241606][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.245308][ T5952] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  229.260691][    T9] dvb-usb: error -19 while querying for an remote control event.
[  229.263587][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.277199][ T5952] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.285851][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.292185][ T5952] usb 8-1: config 0 descriptor??
[  229.356054][ T8087] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  229.436126][    T9] m920x_read = error: -19
[  229.440680][    T9] dvb-usb: error -19 while querying for an remote control event.
[  229.486102][ T8087] usb 5-1: device descriptor read/64, error -71
[  229.580757][   T43] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  229.604326][   T43] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[  229.616697][    T9] m920x_read = error: -19
[  229.621111][    T9] dvb-usb: error -19 while querying for an remote control event.
[  229.646607][   T43] usb 9-1: USB disconnect, device number 20
[  229.726392][ T8087] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  229.786145][    T9] m920x_read = error: -19
[  229.790555][    T9] dvb-usb: error -19 while querying for an remote control event.
[  229.876246][ T8087] usb 5-1: device descriptor read/64, error -71
[  229.920467][ T5952] usb 8-1: Cannot set autoneg
[  229.930433][ T5952] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  229.947549][ T5952] usb 8-1: USB disconnect, device number 40
[  229.959199][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout
[  229.961309][    T9] m920x_read = error: -19
[  229.966644][   T43] usb 9-1: new full-speed USB device number 21 using dummy_hcd
[  229.971502][    T9] dvb-usb: error -19 while querying for an remote control event.
[  229.991592][ T8087] usb usb5-port1: attempt power cycle
[  229.998433][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.008177][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.116134][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout
[  230.122510][   T43] usb 9-1: device descriptor read/64, error -71
[  230.166607][ T5952] m920x_read = error: -19
[  230.172153][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  230.196131][ T5871] Bluetooth: hci2: command 0x0c1a tx timeout
[  230.196143][ T5866] Bluetooth: hci3: command 0x0c1a tx timeout
[  230.337381][ T5952] m920x_read = error: -19
[  230.341759][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  230.352556][ T8087] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  230.366104][   T43] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  230.378531][ T8087] usb 5-1: device descriptor read/8, error -71
[  230.496655][   T43] usb 9-1: device descriptor read/64, error -71
[  230.516156][ T5952] m920x_read = error: -19
[  230.531105][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  230.559819][ T8633] netlink: 'syz.7.559': attribute type 16 has an invalid length.
[  230.567834][ T8633] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.559'.
[  230.606840][   T43] usb usb9-port1: attempt power cycle
[  230.616428][ T8087] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  230.658697][ T8087] usb 5-1: device descriptor read/8, error -71
[  230.706719][ T5952] m920x_read = error: -19
[  230.711124][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  230.766510][ T8087] usb usb5-port1: unable to enumerate USB device
[  230.827558][ T8643] netlink: 176 bytes leftover after parsing attributes in process `syz.7.561'.
[  230.890970][ T8087] m920x_read = error: -19
[  230.895568][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  230.946033][   T43] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[  230.966655][   T43] usb 9-1: device descriptor read/8, error -71
[  231.056601][ T5952] m920x_read = error: -19
[  231.061036][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  231.206032][   T43] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[  231.226216][ T8087] m920x_read = error: -19
[  231.226878][   T43] usb 9-1: device descriptor read/8, error -71
[  231.230613][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  231.357179][   T43] usb usb9-port1: unable to enumerate USB device
[  231.386976][ T8087] m920x_read = error: -19
[  231.391427][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  231.559237][ T8087] m920x_read = error: -19
[  231.563650][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  231.726114][ T8087] m920x_read = error: -19
[  231.730705][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  231.896004][ T8087] m920x_read = error: -19
[  231.902097][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  232.046267][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout
[  232.076190][ T8087] m920x_read = error: -19
[  232.080612][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  232.138004][ T8654] trusted_key: encrypted_key: insufficient parameters specified
[  232.198782][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout
[  232.226753][   T43] usb 8-1: new full-speed USB device number 41 using dummy_hcd
[  232.246036][ T8087] m920x_read = error: -19
[  232.250440][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  232.276112][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout
[  232.276181][ T5866] Bluetooth: hci2: command 0x0c1a tx timeout
[  232.374212][ T8663] syzkaller1: entered promiscuous mode
[  232.385075][ T8663] syzkaller1: entered allmulticast mode
[  232.393543][   T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  232.404816][   T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[  232.415841][   T43] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  232.416990][ T5952] m920x_read = error: -19
[  232.425732][   T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.447229][   T43] usb 8-1: config 0 descriptor??
[  232.451164][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  232.461150][ T8652] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22
[  232.574438][ T8669] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  232.616163][ T5952] m920x_read = error: -19
[  232.620576][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  232.677774][ T8652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.702215][ T8652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.740395][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.784581][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.786052][    T9] m920x_read = error: -19
[  232.802283][    T9] dvb-usb: error -19 while querying for an remote control event.
[  232.843382][   T43] ath6kl: Failed to submit usb control message: -71
[  232.871696][   T43] ath6kl: unable to send the bmi data to the device: -71
[  232.895955][   T43] ath6kl: Unable to send get target info: -71
[  232.916262][   T43] ath6kl: Failed to init ath6kl core: -71
[  232.920500][ T8683] netlink: 'syz.7.574': attribute type 83 has an invalid length.
[  232.923497][   T43] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71
[  232.978718][ T5952] m920x_read = error: -19
[  232.985948][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  232.987178][   T43] usb 8-1: USB disconnect, device number 41
[  233.067539][    T9] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  233.086913][ T8687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.098393][ T8687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.144061][ T8690] fuse: Bad value for 'fd'
[  233.178140][ T5952] m920x_read = error: -19
[  233.182667][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  233.230138][    T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  233.241422][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.249666][    T9] usb 9-1: Product: syz
[  233.254274][    T9] usb 9-1: Manufacturer: syz
[  233.259027][    T9] usb 9-1: SerialNumber: syz
[  233.278557][    T9] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  233.304355][ T8087] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  233.346077][    T9] m920x_read = error: -19
[  233.350528][    T9] dvb-usb: error -19 while querying for an remote control event.
[  233.516452][ T5952] m920x_read = error: -19
[  233.520930][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  233.656063][    T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  233.694632][ T5952] m920x_read = error: -19
[  233.700298][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.711705][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  233.719845][  T984] usb 9-1: USB disconnect, device number 25
[  233.743772][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.771173][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.783383][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.842191][    T9] usb 5-1: Using ep0 maxpacket: 32
[  233.863595][    T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  233.883446][    T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  233.903647][ T5952] m920x_read = error: -19
[  233.908498][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.919047][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  233.935582][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  233.953348][    T9] usb 5-1: config 1 has no interface number 0
[  233.960760][ T8702] loop2: detected capacity change from 0 to 7
[  233.962984][    T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  233.972682][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  233.985968][    C1] buffer_io_error: 29 callbacks suppressed
[  233.985984][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  233.999816][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.008209][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.017424][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  234.025593][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.034865][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  234.042484][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  234.044444][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.058404][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  234.069784][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.079015][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  234.088276][ T5952] m920x_read = error: -19
[  234.088586][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.092805][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  234.102036][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  234.118867][ T5866] Bluetooth: hci4: command 0x0c1a tx timeout
[  234.121955][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.134078][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  234.143231][ T8702] ldm_validate_partition_table(): Disk read failed.
[  234.150435][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.159657][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  234.169722][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.178921][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  234.190245][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  234.199458][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  234.207681][ T8702] Dev loop2: unable to read RDB block 0
[  234.214447][ T8702]  loop2: unable to read partition table
[  234.220450][ T8702] loop2: partition table beyond EOD, truncated
[  234.233852][ T8702] loop_reread_partitions: partition scan of loop2 (�������g�C�j̖�P=��!MX���	���%��`�搘ȵ4FLQk݊5) failed (rc=-5)
[  234.257249][    T9] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[  234.268765][ T5952] m920x_read = error: -19
[  234.273221][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  234.281781][    T9] snd_usb_pod 5-1:1.1: invalid control EP
[  234.288648][    T9] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  234.295604][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  234.303572][    T9] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22
[  234.313729][ T5235] ldm_validate_partition_table(): Disk read failed.
[  234.343100][ T5235] Dev loop2: unable to read RDB block 0
[  234.350337][ T5235]  loop2: unable to read partition table
[  234.358915][ T5866] Bluetooth: hci2: command 0x0c1a tx timeout
[  234.365216][ T8087] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  234.378824][ T8087] ath9k_htc: Failed to initialize the device
[  234.385204][ T5235] loop2: partition table beyond EOD, truncated
[  234.392554][  T984] usb 9-1: ath9k_htc: USB layer deinitialized
[  234.403138][ T8706] netlink: 14 bytes leftover after parsing attributes in process `syz.8.583'.
[  234.413353][ T8706] hsr_slave_0: left promiscuous mode
[  234.434780][ T8706] hsr_slave_1: left promiscuous mode
[  234.445998][    T9] m920x_read = error: -19
[  234.450387][    T9] dvb-usb: error -19 while querying for an remote control event.
[  234.472280][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.486284][    T9] usb 5-1: USB disconnect, device number 69
[  234.503676][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.521746][ T8708] trusted_key: syz.5.584 sent an empty control message without MSG_MORE.
[  234.629040][ T5952] m920x_read = error: -19
[  234.643884][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  234.655643][ T8711] can0: slcan on ttyprintk.
[  234.807190][ T8711] can0 (unregistered): slcan off ttyprintk.
[  234.826191][ T5952] m920x_read = error: -19
[  234.830599][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  234.904300][ T8722] fuse: Bad value for 'user_id'
[  234.911827][ T8722] fuse: Bad value for 'user_id'
[  234.921926][ T8722] netlink: 28 bytes leftover after parsing attributes in process `syz.7.588'.
[  235.016295][ T8087] m920x_read = error: -19
[  235.020705][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  235.096123][    T9] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  235.196256][ T5952] m920x_read = error: -19
[  235.200670][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  235.204576][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.238468][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.260726][    T9] usb 9-1: Using ep0 maxpacket: 32
[  235.272057][    T9] usb 9-1: config 0 has an invalid interface number: 37 but max is 0
[  235.283895][    T9] usb 9-1: config 0 has no interface number 0
[  235.294573][    T9] usb 9-1: config 0 interface 37 has no altsetting 0
[  235.308886][    T9] usb 9-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f
[  235.325621][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.341161][    T9] usb 9-1: Product: syz
[  235.345403][    T9] usb 9-1: Manufacturer: syz
[  235.352270][    T9] usb 9-1: SerialNumber: syz
[  235.364034][    T9] usb 9-1: config 0 descriptor??
[  235.374556][    T9] rtl8150 9-1:0.37: couldn't find required endpoints
[  235.386029][ T5952] m920x_read = error: -19
[  235.392109][    T9] rtl8150 9-1:0.37: probe with driver rtl8150 failed with error -5
[  235.405936][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  235.466593][ T5929] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  235.576203][    T9] m920x_read = error: -19
[  235.582957][    T9] dvb-usb: error -19 while querying for an remote control event.
[  235.594374][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.609393][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.616917][ T5929] usb 5-1: device descriptor read/64, error -71
[  235.668047][    T9] usb 9-1: USB disconnect, device number 26
[  235.767763][ T5952] m920x_read = error: -19
[  235.772834][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  235.796193][  T984] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  235.866299][ T5929] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  235.936051][    T9] m920x_read = error: -19
[  235.941311][    T9] dvb-usb: error -19 while querying for an remote control event.
[  235.969838][  T984] usb 8-1: Using ep0 maxpacket: 8
[  235.978573][  T984] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.998932][  T984] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  236.018915][  T984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.027508][ T5929] usb 5-1: device descriptor read/64, error -71
[  236.055956][  T984] usb 8-1: config 0 descriptor??
[  236.068059][  T984] gspca_main: vc032x-2.14.0 probing 046d:0892
[  236.129792][    T9] m920x_read = error: -19
[  236.138233][    T9] dvb-usb: error -19 while querying for an remote control event.
[  236.147228][ T5929] usb usb5-port1: attempt power cycle
[  236.311024][    T9] m920x_read = error: -19
[  236.322638][    T9] dvb-usb: error -19 while querying for an remote control event.
[  236.496472][    T9] m920x_read = error: -19
[  236.497159][ T5929] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  236.503163][    T9] dvb-usb: error -19 while querying for an remote control event.
[  236.530279][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.5.598'.
[  236.537809][ T5929] usb 5-1: device descriptor read/8, error -71
[  236.746037][    T9] m920x_read = error: -19
[  236.750448][    T9] dvb-usb: error -19 while querying for an remote control event.
[  236.806153][ T5929] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  236.841812][ T5929] usb 5-1: device descriptor read/8, error -71
[  236.857526][ T8796] netlink: 'syz.8.601': attribute type 12 has an invalid length.
[  236.869926][ T8796] netlink: 9472 bytes leftover after parsing attributes in process `syz.8.601'.
[  236.935000][   T10] m920x_read = error: -19
[  236.939581][   T10] dvb-usb: error -19 while querying for an remote control event.
[  236.965538][ T5929] usb usb5-port1: unable to enumerate USB device
[  236.984107][ T8799] netlink: 'syz.5.602': attribute type 3 has an invalid length.
[  237.108691][    T9] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  237.122519][   T10] m920x_read = error: -19
[  237.130215][   T10] dvb-usb: error -19 while querying for an remote control event.
[  237.274846][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.287107][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.296114][   T10] m920x_read = error: -19
[  237.300655][   T10] dvb-usb: error -19 while querying for an remote control event.
[  237.310112][    T9] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[  237.320150][    T9] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  237.324373][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.340491][    T9] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  237.342810][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.353757][    T9] usb 9-1: config 220 has no interface number 2
[  237.370540][  T984] gspca_vc032x: reg_w err -71
[  237.373142][    T9] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  237.375341][  T984] vc032x 8-1:0.0: probe with driver vc032x failed with error -71
[  237.395073][    T9] usb 9-1: config 220 interface 0 has no altsetting 0
[  237.401273][  T984] usb 8-1: USB disconnect, device number 42
[  237.412816][    T9] usb 9-1: config 220 interface 76 has no altsetting 0
[  237.421948][    T9] usb 9-1: config 220 interface 1 has no altsetting 0
[  237.432615][    T9] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  237.444763][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.453845][    T9] usb 9-1: Product: syz
[  237.459218][    T9] usb 9-1: Manufacturer: syz
[  237.463872][    T9] usb 9-1: SerialNumber: syz
[  237.468780][ T5873] m920x_read = error: -19
[  237.473320][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  237.656774][ T5873] m920x_read = error: -19
[  237.661219][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  237.697110][    T9] usb 9-1: Found UVC 7.01 device syz (8086:0b07)
[  237.703662][    T9] usb 9-1: No valid video chain found.
[  237.709357][    T9] usb 9-1: selecting invalid altsetting 0
[  237.730550][    T9] usb 9-1: selecting invalid altsetting 0
[  237.736514][    T9] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[  237.749027][    T9] usb 9-1: USB disconnect, device number 27
[  237.826207][ T5873] m920x_read = error: -19
[  237.844035][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  238.016832][    T9] m920x_read = error: -19
[  238.032836][    T9] dvb-usb: error -19 while querying for an remote control event.
[  238.210203][ T8822] netlink: 'syz.5.610': attribute type 4 has an invalid length.
[  238.220110][ T5873] m920x_read = error: -19
[  238.238132][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  238.381659][ T8828] binder: 8825:8828 ioctl 82307202 200000006fc0 returned -22
[  238.418723][ T5873] m920x_read = error: -19
[  238.430819][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  238.544398][ T8837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.554388][ T8837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.581385][ T8837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.592681][ T8838] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  238.612139][ T8837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.620146][ T8838] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  238.633988][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.5.616'.
[  238.645740][ T5873] m920x_read = error: -19
[  238.650379][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  238.696075][  T984] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  238.774365][ T5866] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15
[  238.781861][ T5866] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  238.816826][ T5873] m920x_read = error: -19
[  238.821231][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  238.880028][  T984] usb 5-1: config 7 has an invalid interface number: 16 but max is 3
[  238.891783][  T984] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  238.914573][  T984] usb 5-1: config 7 has an invalid interface number: 252 but max is 3
[  238.924966][  T984] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[  238.937657][  T984] usb 5-1: config 7 has an invalid interface number: 105 but max is 3
[  238.949206][  T984] usb 5-1: config 7 has an invalid interface number: 217 but max is 3
[  238.961815][  T984] usb 5-1: config 7 has an invalid interface number: 134 but max is 3
[  238.979431][  T984] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  238.991206][  T984] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping
[  238.996550][ T5873] m920x_read = error: -19
[  239.002501][  T984] usb 5-1: config 7 has 5 interfaces, different from the descriptor's value: 4
[  239.013975][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  239.025443][  T984] usb 5-1: config 7 has no interface number 0
[  239.041336][  T984] usb 5-1: config 7 has no interface number 1
[  239.049269][  T984] usb 5-1: config 7 has no interface number 2
[  239.055421][  T984] usb 5-1: config 7 has no interface number 3
[  239.069554][  T984] usb 5-1: config 7 has no interface number 4
[  239.075833][  T984] usb 5-1: config 7 interface 16 altsetting 8 endpoint 0xC has an invalid bInterval 127, changing to 10
[  239.092913][  T984] usb 5-1: config 7 interface 16 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  239.104352][  T984] usb 5-1: config 7 interface 16 altsetting 8 endpoint 0xF has an invalid bInterval 44, changing to 9
[  239.115717][ T5929] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  239.128977][  T984] usb 5-1: config 7 interface 16 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  239.143382][  T984] usb 5-1: config 7 interface 16 altsetting 8 has a duplicate endpoint with address 0xD, skipping
[  239.161413][  T984] usb 5-1: config 7 interface 16 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64
[  239.173594][  T984] usb 5-1: config 7 interface 252 altsetting 11 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  239.184479][ T5873] m920x_read = error: -19
[  239.194083][  T984] usb 5-1: config 7 interface 252 altsetting 11 has a duplicate endpoint with address 0xD, skipping
[  239.196106][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  239.221365][  T984] usb 5-1: config 7 interface 252 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  239.266070][  T984] usb 5-1: too many endpoints for config 7 interface 105 altsetting 238: 224, using maximum allowed: 30
[  239.296015][ T5929] usb 9-1: Using ep0 maxpacket: 16
[  239.304291][  T984] usb 5-1: config 7 interface 105 altsetting 238 has a duplicate endpoint with address 0xA, skipping
[  239.321242][ T5929] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  239.334197][  T984] usb 5-1: config 7 interface 105 altsetting 238 has a duplicate endpoint with address 0xF, skipping
[  239.348940][ T5929] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  239.358483][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.374214][ T5929] usb 9-1: Product: syz
[  239.379110][  T984] usb 5-1: config 7 interface 105 altsetting 238 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  239.395954][ T5929] usb 9-1: Manufacturer: syz
[  239.396182][   T10] m920x_read = error: -19
[  239.400663][ T5929] usb 9-1: SerialNumber: syz
[  239.425228][   T10] dvb-usb: error -19 while querying for an remote control event.
[  239.425607][  T984] usb 5-1: config 7 interface 105 altsetting 238 bulk endpoint 0x3 has invalid maxpacket 8
[  239.446859][  T984] usb 5-1: config 7 interface 105 altsetting 238 has an invalid descriptor for endpoint zero, skipping
[  239.459332][ T5929] usb 9-1: config 0 descriptor??
[  239.464562][  T984] usb 5-1: config 7 interface 105 altsetting 238 has an invalid descriptor for endpoint zero, skipping
[  239.479861][ T5929] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  239.496045][ T5929] em28xx 9-1:0.0: DVB interface 0 found: bulk
[  239.512790][  T984] usb 5-1: config 7 interface 105 altsetting 238 has an invalid descriptor for endpoint zero, skipping
[  239.526033][  T984] usb 5-1: config 7 interface 105 altsetting 238 has a duplicate endpoint with address 0x9, skipping
[  239.537586][  T984] usb 5-1: config 7 interface 105 altsetting 238 has 8 endpoint descriptors, different from the interface descriptor's value: 224
[  239.537944][ T8865] netlink: 72 bytes leftover after parsing attributes in process `syz.7.625'.
[  239.551155][  T984] usb 5-1: config 7 interface 217 altsetting 244 endpoint 0x8 has an invalid bInterval 255, changing to 7
[  239.551205][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0x8A, skipping
[  239.551232][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[  239.551290][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0x7, skipping
[  239.551318][  T984] usb 5-1: config 7 interface 134 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  239.551348][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0xA, skipping
[  239.551375][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  239.551425][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0x3, skipping
[  239.551453][  T984] usb 5-1: config 7 interface 134 altsetting 7 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  239.551481][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  239.551506][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0x9, skipping
[  239.551531][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0x7, skipping
[  239.551581][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0xF, skipping
[  239.551606][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0xA, skipping
[  239.551632][  T984] usb 5-1: config 7 interface 134 altsetting 7 has a duplicate endpoint with address 0x82, skipping
[  239.551657][  T984] usb 5-1: config 7 interface 16 has no altsetting 0
[  239.551678][  T984] usb 5-1: config 7 interface 252 has no altsetting 0
[  239.551722][  T984] usb 5-1: config 7 interface 105 has no altsetting 0
[  239.551743][  T984] usb 5-1: config 7 interface 217 has no altsetting 0
[  239.551764][  T984] usb 5-1: config 7 interface 134 has no altsetting 0
[  239.555718][  T984] usb 5-1: New USB device found, idVendor=0403, idProduct=9e50, bcdDevice=a9.5e
[  239.606148][   T10] m920x_read = error: -19
[  239.606179][   T10] dvb-usb: error -19 while querying for an remote control event.
[  239.650287][ T8865] Set syz0 is full, maxelem 0 reached
[  239.667252][  T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.766213][   T10] m920x_read = error: -19
[  239.778290][  T984] usb 5-1: Product: š儵苼駨習얤禫鑘偿잏┼찍쉃⡲瓟㒰菴㌴齳鮺郁㬽䡲婢偸뻓늬㻠主鎺ٗ䜐ໄ痹렽赃꾭拤㷱覲샑案膭ሀ璋秡箓僽泭蜉᥺빰禹㙞咜艌瘜莫흋葦옉붻藍銄ힷ쳺糞܄症਋뛅䤑䢟ṑ䡥볢ꂂ큵㱂俕툧氼␖鲠棰▯齷ፒࠩ㪷⍴꾺
[  239.797147][   T10] dvb-usb: error -19 while querying for an remote control event.
[  239.805815][  T984] usb 5-1: Manufacturer: 松㋤ﲎ鶓훂跙၄薰崳聮ɓ迥䤠澳Ⲃ⇢踘嵗䩹↷稚ሲ蓇닑욌믕훺劀橙⍋햢禈豅嵚烈
[  239.860282][  T984] usb 5-1: SerialNumber: Л
[  239.865073][ T5929] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  239.945264][ T5929] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  239.955620][ T5929] em28xx 9-1:0.0: board has no eeprom
[  239.990235][ T8871] PID 8871 killed due to inadequate hugepage pool
[  240.001545][ T8871] PID 8871 killed due to inadequate hugepage pool
[  240.009115][ T8871] PID 8871 killed due to inadequate hugepage pool
[  240.016348][   T10] m920x_read = error: -19
[  240.020736][   T10] dvb-usb: error -19 while querying for an remote control event.
[  240.036286][ T5929] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  240.046181][ T5929] em28xx 9-1:0.0: dvb set to bulk mode.
[  240.053562][ T8873] PID 8873 killed due to inadequate hugepage pool
[  240.055084][   T43] em28xx 9-1:0.0: Binding DVB extension
[  240.084557][ T8873] PID 8873 killed due to inadequate hugepage pool
[  240.100077][ T5929] usb 9-1: USB disconnect, device number 28
[  240.128764][  T984] ftdi_sio 5-1:7.16: FTDI USB Serial Device converter detected
[  240.142021][ T8873] PID 8873 killed due to inadequate hugepage pool
[  240.152265][  T984] ftdi_sio ttyUSB0: unknown device type: 0xa95e
[  240.176136][ T5929] em28xx 9-1:0.0: Disconnecting em28xx
[  240.196146][   T10] m920x_read = error: -19
[  240.200713][   T10] dvb-usb: error -19 while querying for an remote control event.
[  240.225832][ T8875] PID 8875 killed due to inadequate hugepage pool
[  240.241551][   T43] em28xx 9-1:0.0: Registering input extension
[  240.251228][ T8875] PID 8875 killed due to inadequate hugepage pool
[  240.266362][ T5929] em28xx 9-1:0.0: Closing input extension
[  240.277699][  T984] ftdi_sio 5-1:7.252: FTDI USB Serial Device converter detected
[  240.328719][  T984] ftdi_sio ttyUSB1: unknown device type: 0xa95e
[  240.334442][ T8875] PID 8875 killed due to inadequate hugepage pool
[  240.357940][ T5929] em28xx 9-1:0.0: Freeing device
[  240.378177][  T984] ftdi_sio 5-1:7.105: FTDI USB Serial Device converter detected
[  240.396090][   T10] m920x_read = error: -19
[  240.400486][   T10] dvb-usb: error -19 while querying for an remote control event.
[  240.401262][  T984] ftdi_sio ttyUSB2: unknown device type: 0xa95e
[  240.452484][  T984] ftdi_sio 5-1:7.217: FTDI USB Serial Device converter detected
[  240.470041][  T984] ftdi_sio ttyUSB3: unknown device type: 0xa95e
[  240.498040][  T984] ftdi_sio 5-1:7.134: FTDI USB Serial Device converter detected
[  240.532254][  T984] ftdi_sio ttyUSB4: unknown device type: 0xa95e
[  240.569881][  T984] usb 5-1: USB disconnect, device number 74
[  240.576184][    T9] m920x_read = error: -19
[  240.582137][    T9] dvb-usb: error -19 while querying for an remote control event.
[  240.604062][  T984] ftdi_sio 5-1:7.16: device disconnected
[  240.654421][  T984] ftdi_sio 5-1:7.252: device disconnected
[  240.679367][  T984] ftdi_sio 5-1:7.105: device disconnected
[  240.708798][  T984] ftdi_sio 5-1:7.217: device disconnected
[  240.730772][  T984] ftdi_sio 5-1:7.134: device disconnected
[  240.786167][    T9] m920x_read = error: -19
[  240.790683][    T9] dvb-usb: error -19 while querying for an remote control event.
[  240.959165][    T9] m920x_read = error: -19
[  240.966726][    T9] dvb-usb: error -19 while querying for an remote control event.
[  241.006473][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.632'.
[  241.126344][    T9] m920x_read = error: -19
[  241.130901][    T9] dvb-usb: error -19 while querying for an remote control event.
[  241.186011][  T984] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  241.233617][ T8904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.252518][ T8904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.308750][   T10] m920x_read = error: -19
[  241.313202][   T10] dvb-usb: error -19 while querying for an remote control event.
[  241.356067][  T984] usb 5-1: Using ep0 maxpacket: 32
[  241.363684][  T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.374944][  T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.391838][  T984] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  241.409271][  T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.429287][  T984] usb 5-1: config 0 descriptor??
[  241.486163][   T10] m920x_read = error: -19
[  241.490572][   T10] dvb-usb: error -19 while querying for an remote control event.
[  241.498703][    T9] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[  241.648062][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  241.660444][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  241.676062][   T10] m920x_read = error: -19
[  241.680624][    T9] usb 8-1: Using ep0 maxpacket: 8
[  241.689157][   T10] dvb-usb: error -19 while querying for an remote control event.
[  241.766179][    T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  241.785683][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.794654][    T9] usb 8-1: Product: syz
[  241.820100][    T9] usb 8-1: Manufacturer: syz
[  241.840384][    T9] usb 8-1: SerialNumber: syz
[  241.877186][    T9] usb 8-1: config 0 descriptor??
[  241.882529][   T10] m920x_read = error: -19
[  241.896074][   T10] dvb-usb: error -19 while querying for an remote control event.
[  241.908931][    T9] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  241.914412][ T8907] overlay: ./file0 is not a directory
[  241.925107][  T984] kone 0003:1E7D:2CED.0016: collection stack underflow
[  241.947540][  T984] kone 0003:1E7D:2CED.0016: item 0 1 0 12 parsing failed
[  241.955734][  T984] kone 0003:1E7D:2CED.0016: parse failed
[  241.997196][  T984] kone 0003:1E7D:2CED.0016: probe with driver kone failed with error -22
[  242.086130][   T10] m920x_read = error: -19
[  242.093892][   T10] dvb-usb: error -19 while querying for an remote control event.
[  242.108677][    T9] gspca_sonixj: reg_w1 err -71
[  242.113735][    T9] sonixj 8-1:0.0: probe with driver sonixj failed with error -71
[  242.124802][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.136312][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.156762][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.169090][    T9] usb 8-1: USB disconnect, device number 43
[  242.196762][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.275464][  T984] usb 5-1: USB disconnect, device number 75
[  242.300543][   T10] m920x_read = error: -19
[  242.304949][   T10] dvb-usb: error -19 while querying for an remote control event.
[  242.477069][ T8915] dvmrp0: entered allmulticast mode
[  242.496031][    T9] m920x_read = error: -19
[  242.500433][    T9] dvb-usb: error -19 while querying for an remote control event.
[  242.686255][   T10] m920x_read = error: -19
[  242.690658][   T10] dvb-usb: error -19 while querying for an remote control event.
[  242.867821][   T10] m920x_read = error: -19
[  242.872234][   T10] dvb-usb: error -19 while querying for an remote control event.
[  242.886035][    T9] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  243.020356][ T8938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer.
[  243.056660][    T9] usb 5-1: Using ep0 maxpacket: 16
[  243.073362][   T10] m920x_read = error: -19
[  243.085579][   T10] dvb-usb: error -19 while querying for an remote control event.
[  243.106155][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.120577][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.136114][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  243.156034][    T9] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  243.165132][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.184503][    T9] usb 5-1: config 0 descriptor??
[  243.276554][   T10] m920x_read = error: -19
[  243.280999][   T10] dvb-usb: error -19 while querying for an remote control event.
[  243.365944][  T984] usb 8-1: new high-speed USB device number 44 using dummy_hcd
[  243.463044][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.649'.
[  243.491848][ T8945] netlink: 'syz.5.649': attribute type 10 has an invalid length.
[  243.492905][   T10] m920x_read = error: -19
[  243.511938][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.514603][   T10] dvb-usb: error -19 while querying for an remote control event.
[  243.520369][  T984] usb 8-1: Using ep0 maxpacket: 8
[  243.553766][ T8945] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.561084][ T8945] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.562136][  T984] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.588988][  T984] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  243.616820][ T8945] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  243.667308][  T984] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  243.692070][  T984] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.704176][   T10] m920x_read = error: -19
[  243.711124][   T10] dvb-usb: error -19 while querying for an remote control event.
[  243.720859][  T984] usb 8-1: Product: syz
[  243.722789][    T9] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  243.725062][  T984] usb 8-1: Manufacturer: syz
[  243.756395][    T9] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  243.768142][    T9] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  243.775299][    T9] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  243.782674][  T984] usb 8-1: SerialNumber: syz
[  243.782684][    T9] shield 0003:0955:7214.0017: unknown main item tag 0x0
[  243.793059][    T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input15
[  243.822633][ T8949] netlink: 132 bytes leftover after parsing attributes in process `syz.8.650'.
[  243.823659][  T984] usb 8-1: config 0 descriptor??
[  243.906089][ T5873] m920x_read = error: -19
[  243.910507][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  243.964570][    T9] shield 0003:0955:7214.0017: Registered Thunderstrike controller
[  243.991125][    T9] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  244.073916][ T5952] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  244.081154][ T8940] binder: 8939:8940 ioctl 40046205 0 returned -22
[  244.097030][    T9] usb 5-1: USB disconnect, device number 76
[  244.118479][ T5952] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  244.138627][ T8087] m920x_read = error: -19
[  244.155060][ T8087] dvb-usb: error -19 while querying for an remote control event.
[  244.171444][ T5952] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  244.193607][ T5952] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  244.296245][ T5873] usb 9-1: new low-speed USB device number 29 using dummy_hcd
[  244.330864][  T984] usb 8-1: USB disconnect, device number 44
[  244.336050][ T5952] m920x_read = error: -19
[  244.341176][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  244.388021][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.411269][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.436089][ T5873] usb 9-1: device descriptor read/64, error -71
[  244.514557][ T8965] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  244.541059][    T9] m920x_read = error: -19
[  244.545446][    T9] dvb-usb: error -19 while querying for an remote control event.
[  244.556372][ T8965] CIFS mount error: No usable UNC path provided in device string!
[  244.556372][ T8965] 
[  244.569226][ T8968] overlayfs: overlapping lowerdir path
[  244.575237][ T8965] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  244.686021][ T5873] usb 9-1: new low-speed USB device number 30 using dummy_hcd
[  244.716469][    T9] m920x_read = error: -19
[  244.725928][    T9] dvb-usb: error -19 while querying for an remote control event.
[  244.756195][   T43] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  244.816074][ T5873] usb 9-1: device descriptor read/64, error -71
[  244.896176][    T9] m920x_read = error: -19
[  244.900720][    T9] dvb-usb: error -19 while querying for an remote control event.
[  244.919043][   T43] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  244.927383][ T5873] usb usb9-port1: attempt power cycle
[  244.936089][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.965310][   T43] usb 5-1: config 0 descriptor??
[  245.066014][    T9] m920x_read = error: -19
[  245.070520][    T9] dvb-usb: error -19 while querying for an remote control event.
[  245.191888][   T43] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  245.236132][ T5952] m920x_read = error: -19
[  245.240571][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  245.286083][ T5873] usb 9-1: new low-speed USB device number 31 using dummy_hcd
[  245.326283][ T5873] usb 9-1: device descriptor read/8, error -71
[  245.393817][   T43] [drm:udl_init] *ERROR* Selecting channel failed
[  245.406113][    T9] m920x_read = error: -19
[  245.410598][    T9] dvb-usb: error -19 while querying for an remote control event.
[  245.451797][   T43] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  245.474534][   T43] [drm] Initialized udl on minor 2
[  245.495835][   T43] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  245.529907][   T43] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  245.566059][ T5873] usb 9-1: new low-speed USB device number 32 using dummy_hcd
[  245.573325][  T984] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  245.582921][   T43] usb 5-1: USB disconnect, device number 77
[  245.596229][ T5952] m920x_read = error: -19
[  245.600609][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  245.609584][  T984] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  245.624258][ T5873] usb 9-1: device descriptor read/8, error -71
[  245.747715][ T5873] usb usb9-port1: unable to enumerate USB device
[  245.776030][    T9] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[  245.806674][ T5873] m920x_read = error: -19
[  245.812140][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  245.943624][    T9] usb 8-1: Using ep0 maxpacket: 8
[  245.958206][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.986239][    T9] usb 8-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  245.995343][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.006171][ T5873] m920x_read = error: -19
[  246.010565][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  246.046994][    T9] usb 8-1: config 0 descriptor??
[  246.196088][ T5873] m920x_read = error: -19
[  246.200973][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  246.409921][ T5873] m920x_read = error: -19
[  246.414383][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  246.606613][ T5873] m920x_read = error: -19
[  246.619703][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  246.668564][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.660'.
[  246.801083][ T5873] m920x_read = error: -19
[  246.805509][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  246.869452][    T9] creative-sb0540 0003:041E:3100.0018: item fetching failed at offset 0/5
[  246.919335][    T9] creative-sb0540 0003:041E:3100.0018: parse failed
[  246.955101][ T9000] Falling back ldisc for ptm1.
[  246.964699][    T9] creative-sb0540 0003:041E:3100.0018: probe with driver creative-sb0540 failed with error -22
[  247.003072][   T30] audit: type=1326 audit(1757327597.394:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9001 comm="syz.8.662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef5038ebe9 code=0x0
[  247.009059][ T9000] ALSA: mixer_oss: invalid OSS volume ''
[  247.044244][   T10] m920x_read = error: -19
[  247.049821][   T10] dvb-usb: error -19 while querying for an remote control event.
[  247.100258][    T9] usb 8-1: USB disconnect, device number 45
[  247.236097][ T5873] m920x_read = error: -19
[  247.240600][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  247.338999][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.360247][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.378625][ T5952] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  247.407054][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.416075][    T9] m920x_read = error: -19
[  247.421635][    T9] dvb-usb: error -19 while querying for an remote control event.
[  247.448002][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.470047][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  247.496483][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  247.548784][ T5952] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.572970][ T5952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  247.595635][ T5952] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  247.605604][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  247.613828][    T9] m920x_read = error: -19
[  247.618458][    T9] dvb-usb: error -19 while querying for an remote control event.
[  247.628371][ T5952] usb 5-1: SerialNumber: syz
[  247.786010][    T9] m920x_read = error: -19
[  247.790457][    T9] dvb-usb: error -19 while querying for an remote control event.
[  247.856569][ T5952] usb 5-1: 0:2 : does not exist
[  247.861578][ T5952] usb 5-1: unit 16 not found!
[  247.910401][ T5952] usb 5-1: USB disconnect, device number 78
[  247.980825][    T9] m920x_read = error: -19
[  247.985320][    T9] dvb-usb: error -19 while querying for an remote control event.
[  248.012916][ T7247] udevd[7247]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.174938][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.188830][ T5952] m920x_read = error: -19
[  248.194955][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.195554][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  248.236097][ T5929] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  248.261482][ T9028] overlayfs: failed to resolve './file0': -2
[  248.376256][ T5952] m920x_read = error: -19
[  248.380666][ T5952] dvb-usb: error -19 while querying for an remote control event.
[  248.432896][ T5929] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  248.448041][ T5929] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.463755][ T5929] usb 9-1: Product: syz
[  248.488987][ T5929] usb 9-1: Manufacturer: syz
[  248.505381][ T5929] usb 9-1: SerialNumber: syz
[  248.538245][ T5929] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  248.560324][ T5873] m920x_read = error: -19
[  248.566032][  T984] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  248.711416][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  248.797964][ T5922] usb 9-1: USB disconnect, device number 33
[  248.910791][ T5873] m920x_read = error: -19
[  248.915216][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  248.976463][ T5866] Bluetooth: hci4: unexpected event for opcode 0x2019
[  249.116264][ T5873] m920x_read = error: -19
[  249.120775][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  249.331032][ T5873] m920x_read = error: -19
[  249.335448][ T5873] dvb-usb: error -19 while querying for an remote control event.
[  249.351329][ T9059] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
[  249.355253][ T5929] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  249.363371][ T9059] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  249.363408][ T9059] CPU: 0 UID: 0 PID: 9059 Comm: syz.5.677 Not tainted syzkaller #0 PREEMPT(full) 
[  249.363433][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  249.399342][ T9059] RIP: 0010:io_check_coalesce_buffer+0x354/0xb60
[  249.405808][ T9059] Code: f7 e8 30 69 62 fd 4c 89 74 24 28 48 8b 44 24 18 4c 8b 74 d8 08 49 8d 6e 08 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 ef e8 fe 68 62 fd 48 8b 6d 00 48 89 ee 48
[  249.425663][ T9059] RSP: 0018:ffffc9001cd47a38 EFLAGS: 00010202
[  249.431789][ T9059] RAX: 0000000000000001 RBX: 00000000000000a4 RCX: dffffc0000000000
[  249.439796][ T9059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888030b44520
[  249.447771][ T9059] RBP: 0000000000000008 R08: ffffea00013b8007 R09: 1ffffd4000277000
[  249.455833][ T9059] R10: dffffc0000000000 R11: fffff94000277001 R12: ffff888030b44520
[  249.463813][ T9059] R13: 00000000000000a5 R14: 0000000000000000 R15: ffffea00013b8000
[  249.471791][ T9059] FS:  00007fafa69736c0(0000) GS:ffff8881257ba000(0000) knlGS:0000000000000000
[  249.480809][ T9059] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  249.487396][ T9059] CR2: 00007fafa6951f98 CR3: 00000000756e6000 CR4: 00000000003526f0
[  249.495384][ T9059] Call Trace:
[  249.498669][ T9059]  <TASK>
[  249.501608][ T9059]  io_region_init_ptr+0xdb/0x350
[  249.506567][ T9059]  ? __pfx_io_region_init_ptr+0x10/0x10
[  249.512122][ T9059]  ? io_pin_pages+0xd4/0x1b0
[  249.516719][ T9059]  ? io_region_pin_pages+0xbe/0x190
[  249.521922][ T9059]  io_create_region+0x3a4/0x480
[  249.526784][ T9059]  io_allocate_scq_urings+0x2b0/0x870
[  249.532291][ T9059]  ? __pfx_io_allocate_scq_urings+0x10/0x10
[  249.538363][ T9059]  ? bpf_lsm_capable+0x9/0x20
[  249.543081][ T9059]  ? security_capable+0x7e/0x2e0
[  249.548047][ T9059]  io_uring_create+0x591/0xba0
[  249.552831][ T9059]  __se_sys_io_uring_setup+0x264/0x270
[  249.558307][ T9059]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  249.564308][ T9059]  ? do_syscall_64+0xbe/0xfa0
[  249.569008][ T9059]  do_syscall_64+0xfa/0xfa0
[  249.573515][ T9059]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.578720][ T9059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.584799][ T9059]  ? clear_bhb_loop+0x60/0xb0
[  249.589488][ T9059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.595404][ T9059] RIP: 0033:0x7fafa5b8ebe9
[  249.599835][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  249.619456][ T9059] RSP: 002b:00007fafa6972fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  249.627902][ T9059] RAX: ffffffffffffffda RBX: 00007fafa5dc5fa0 RCX: 00007fafa5b8ebe9
[  249.635908][ T9059] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000005b14
[  249.643884][ T9059] RBP: 0000200000000040 R08: 0000000000000000 R09: 0000000000000000
[  249.651853][ T9059] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  249.659831][ T9059] R13: 0000000000000000 R14: 0000000000005b14 R15: 0000000000000000
[  249.668077][ T9059]  </TASK>
[  249.671100][ T9059] Modules linked in:
[  249.675913][  T984] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  249.676189][ T9059] ---[ end trace 0000000000000000 ]---
[  249.683047][  T984] ath9k_htc: Failed to initialize the device
[  249.705953][ T5922] usb 9-1: ath9k_htc: USB layer deinitialized
[  249.713806][ T9059] RIP: 0010:io_check_coalesce_buffer+0x354/0xb60
[  249.716491][ T9061] Dead loop on virtual device ip6_vti0, fix it urgently!
[  249.721812][ T9059] Code: f7 e8 30 69 62 fd 4c 89 74 24 28 48 8b 44 24 18 4c 8b 74 d8 08 49 8d 6e 08 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 ef e8 fe 68 62 fd 48 8b 6d 00 48 89 ee 48
[  249.750079][ T9059] RSP: 0018:ffffc9001cd47a38 EFLAGS: 00010202
[  249.756557][ T9059] RAX: 0000000000000001 RBX: 00000000000000a4 RCX: dffffc0000000000
[  249.764909][ T9059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888030b44520
[  249.773333][ T9059] RBP: 0000000000000008 R08: ffffea00013b8007 R09: 1ffffd4000277000
[  249.781703][ T9059] R10: dffffc0000000000 R11: fffff94000277001 R12: ffff888030b44520
[  249.790061][ T9059] R13: 00000000000000a5 R14: 0000000000000000 R15: ffffea00013b8000
[  249.798958][ T9059] FS:  00007fafa69736c0(0000) GS:ffff8881257ba000(0000) knlGS:0000000000000000
[  249.808818][ T9059] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  249.815590][ T9059] CR2: 0000555556f78808 CR3: 00000000756e6000 CR4: 00000000003526f0
[  249.824210][ T9059] Kernel panic - not syncing: Fatal exception
[  249.830482][ T9059] Kernel Offset: disabled
[  249.834819][ T9059] Rebooting in 86400 seconds..