last executing test programs:

6m7.419335901s ago: executing program 0 (id=525):
r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
close(r0)
syz_usb_connect(0x2, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5f, 0xfc, 0x70, 0x20, 0x711, 0x210, 0xfdd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0xbe, 0x44, 0x8f, 0xff, [], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x9, 0xf, 0x5, [@generic={0x7, 0x5, "bdf74e3781"}]}}, {{0x9, 0x5, 0x8b, 0x3, 0x40, 0xe, 0x4b, 0x2}}]}}]}}]}}, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x6, {{0x2, 0x4e24, @private=0xa010100}}, 0x1, 0x8, [{{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e24, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e23, @private=0xa010100}}]}, 0x490)
openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000040)=0x6, 0x5, 0x4)
r1 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x80000)

6m6.156267191s ago: executing program 0 (id=531):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x800)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x247, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa0}}}}]}}]}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x24, 0x36, {0x36, 0x7, "ad6667e44bb2cd263ca19db35b64ef7517ef18a5c7f872b2a6ba743febfd81b6a5ceb58e9c8690a139a795dbb34c976e696cd965"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00')
syz_usb_control_io(r5, 0x0, 0x0) (async)
syz_usb_control_io(r5, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
socket(0x2, 0x3, 0xff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x547e, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x3, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0xc0cd4})
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
socket$phonet(0x23, 0x2, 0x1) (async)
r6 = socket$phonet(0x23, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0xff21)
sendto$phonet(r6, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x0, 0x1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64)

6m4.979796751s ago: executing program 0 (id=532):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket(0x1, 0x2, 0x0)
syz_usb_connect(0x2, 0x440, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000c1b2fd40861246206fc10000000109022e040108004000090450000eff040100"], 0x0)
select(0x52, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0xfffffffffffffffe, 0x10000000000, 0x4b06, 0x80000000, 0x3}, &(0x7f00000024c0)={0x9, 0x10000, 0x1, 0x3000000, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x2, 0x1}}, 0xffffffffffffffab)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r3=>r1, {0x1a}}, './file0\x00'})
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1)
sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4440f018}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004050)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0)
preadv2(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/229, 0xe5}], 0x1, 0xffff, 0x80, 0x48)
syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10)

6m3.732725342s ago: executing program 0 (id=536):
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001900010000002aa31212ad6eadc5000000000000e00000020000000000001a00000000006401010200100000000000000000000000000000000000000a0000008700000e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1e, 0x80004, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
r4 = dup3(r3, r2, 0x0)
recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x89e, 0x1, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0xc806, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000000240)='X', 0xfffffffffffffd9c, 0x4085, 0x0, 0xffa4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
ppoll(&(0x7f0000000140)=[{r6, 0x80}], 0x1, &(0x7f0000000200), 0x0, 0x0)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8009}, 'syz0\x00', 0x11})
ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
r10 = dup3(r9, r8, 0x0)
write$uinput_user_dev(r10, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000000400)={0xc, 0x4, {0x6, @struct={0x3, 0x9}, 0x0, 0x7fffffffffffffff, 0x1, 0x2, 0x3, 0x8, 0x40, @usage=0x5, 0x9978, 0x4326, [0x8, 0x5, 0xffffffffffffffff, 0x0, 0x10001, 0x5]}, {0x7, @struct={0x7f, 0xd}, 0x0, 0xa836, 0x4, 0x3, 0x8, 0x4, 0xc0, @struct={0x74c7da78, 0xf}, 0x8, 0x3, [0x1, 0x40, 0x401, 0x2, 0x3, 0x80000001]}, {0x7, @usage=0x4, 0x0, 0xcd6f, 0xffff, 0xa, 0x6, 0x3, 0xc1, @struct={0x1, 0x7}, 0x0, 0x25, [0x0, 0x0, 0x7, 0x9, 0x3, 0x8]}, {0x6d, 0x3}})
r11 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10)
sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)

6m3.61495356s ago: executing program 0 (id=537):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0xfffffffe, 0x4, {0x10}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xfffffff8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0x24044890)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040200000000", 0x15}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

6m3.524605866s ago: executing program 0 (id=538):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10)
recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/213, 0xd5}], 0x1, &(0x7f0000000300)=""/161, 0xa1}, 0x20)
bind$tipc(r1, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x3, {0x1}}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
shutdown(r2, 0x1)
shutdown(r2, 0xffffffffffffff80)
close(0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r5 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001080)="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", 0x303}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000340)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7", 0x9b}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000040)={0x3, 0xe92d, 0x30, &(0x7f0000000000)=""/48})

6m3.007641593s ago: executing program 2 (id=542):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000040000100fcff07000400000001000000040048800c0001800800040010800c00e2ff00000000000019000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r5, 0xeb)
connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
write$tun(r3, &(0x7f0000000440)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x30, 0x2c, 0x0, @local, @loopback, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}, 0x66)
r6 = dup(r2)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r8, &(0x7f000000d400)=[{{&(0x7f0000000240)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x80, 0x0}}], 0x1, 0x24044000)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

6m2.680547364s ago: executing program 2 (id=544):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0xdd, 0xc, &(0x7f0000000100)=""/12) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="980000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400df0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001040006"], 0x98}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000000050500000000000000000a0000003c0002802c00018014000300000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000400fc00000000000000000000000000000108000740000000002c00068014000500fe800000000000000000000000000031140004002001000000000000000000000000000100"/178], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) (async)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r4, &(0x7f0000003a80)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ba182c5d", 0x4}], 0x1}}], 0x2, 0x2400c0a2) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x406f417, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async)
bind$bt_hci(r7, &(0x7f0000000040), 0x6) (async)
write$bt_hci(r7, &(0x7f00000000c0)=ANY=[], 0x7) (async)
syz_usb_control_io(r1, 0x0, 0x0)

6m0.902842706s ago: executing program 2 (id=550):
time(&(0x7f0000000240)) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080140001004abee339084eeef16f162471f400000005000200020000000800030004ac0f"], 0x44}}, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, &(0x7f0000000040)={'\x00', 0x8, 0x0, 0x6}) (async)
getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002c0007012bbd7000ffdbdf25087c0000080073dd0cf7dd800800038004000180ae2deb84c0ba83a4c8d07f6fad24adf68685c2c7d745c9754825bcf46a7307a6f533034c11ed5d5115703cfcfcf61c96935958a60397cfd9a5c442c4297795179dc8435332178c904b139281edd41d82ccddb05f9060a6be812ccfd062e3d589ec854b73395bb7427156b27d6ebcba79063d14a3435c0b916531223f5abd8e7164248c3bf7027df77db52282e56e"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

6m0.624504933s ago: executing program 2 (id=552):
mprotect(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1000002)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x9, 0x4280)
r2 = dup(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
socket(0xa, 0x3, 0xff)
preadv(r3, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00')
socket$igmp(0x2, 0x3, 0x2)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0)
sendmsg$unix(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000001be39c8b94013b35f39e574de624ddcf614138b79ba8df5d298adb76f5f99315397bff674da983b12b879c3a231522d6ed4990602f5835f92486f6619c8e4753ebaa79c4b7fafdbe171a2ff3a019db1884ecd0d1ae5717c6a95ed8929fb1b1cb0be8377beb", @ANYRES32=r0, @ANYRES32=r0], 0x18, 0x24048010}, 0x20048041)

6m0.071016914s ago: executing program 2 (id=553):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @hoplimit={{0x14}}, @hopopts={{0x68, 0x29, 0x36, {0x5e, 0x9, '\x00', [@pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xff9c, [0x6e, 0x8, 0x87, 0x2]}}, @jumbo={0xc2, 0x4, 0xe7}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x8}}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0xd0}}], 0x1, 0x810) (async)
futex(0x0, 0x204, 0x2, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x60, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}})

6m0.067000553s ago: executing program 2 (id=556):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) (async)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x0, 0x6, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x0, 0x7fffffff, 0x0, 0x8, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000000})
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0) (async)
r1 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x0, 0x3, 0x8, 0xdf, 0x22d3, 0x2, 0x3, 0x8, 0x3, 0x1, 0x0, 0x5, 0x3ff, 0x6, 0x80000000, 0x3, 0x7, 0x5, 0x0, 0x800, 0xdc6, 0x8, 0x0, 0x2, 0x9, 0xeee, 0x0, 0xa3, 0x400, 0x1, 0x4]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40341, 0x0) (async)
r3 = socket(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000200)='>', 0x1}], 0x1, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x14, 0x84, 0x7, {[@rr={0x7, 0x3, 0x5a}]}}}], 0x30}, 0x44000) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="016f084600fd5e0400000000000000ce34edcecb4270250bc20000008490783fffff3eac1414aa00"/54, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff07000000000002d58838000391000000"], 0xfd6c) (async, rerun: 64)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000140)=0x4) (async, rerun: 64)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2080}, 0x2000) (async, rerun: 64)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10)

6m0.065336196s ago: executing program 32 (id=556):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) (async)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x0, 0x6, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x0, 0x7fffffff, 0x0, 0x8, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000000})
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0) (async)
r1 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x3, 0x0, 0x3, 0x8, 0xdf, 0x22d3, 0x2, 0x3, 0x8, 0x3, 0x1, 0x0, 0x5, 0x3ff, 0x6, 0x80000000, 0x3, 0x7, 0x5, 0x0, 0x800, 0xdc6, 0x8, 0x0, 0x2, 0x9, 0xeee, 0x0, 0xa3, 0x400, 0x1, 0x4]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40341, 0x0) (async)
r3 = socket(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f0000000ac0)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000200)='>', 0x1}], 0x1, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0x14, 0x84, 0x7, {[@rr={0x7, 0x3, 0x5a}]}}}], 0x30}, 0x44000) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="016f084600fd5e0400000000000000ce34edcecb4270250bc20000008490783fffff3eac1414aa00"/54, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff07000000000002d58838000391000000"], 0xfd6c) (async, rerun: 64)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64)
ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000140)=0x4) (async, rerun: 64)
sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2080}, 0x2000) (async, rerun: 64)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10)

5m48.506694047s ago: executing program 33 (id=538):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10)
recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/213, 0xd5}], 0x1, &(0x7f0000000300)=""/161, 0xa1}, 0x20)
bind$tipc(r1, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x3, {0x1}}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
shutdown(r2, 0x1)
shutdown(r2, 0xffffffffffffff80)
close(0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r5 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c)
sendmmsg$inet(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000001080)="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", 0x303}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000340)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7", 0x9b}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000040)={0x3, 0xe92d, 0x30, &(0x7f0000000000)=""/48})

1m25.583942004s ago: executing program 3 (id=1668):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) (async, rerun: 64)
r0 = socket$alg(0x26, 0x5, 0x0) (rerun: 64)
bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="2e00030020f7d8f003aad144c6098c28f6fe017282ed9d2f94f9be02771e87983e0d800520cd535ed5681f2b7301a3841ab0d86d623e826ea3c1811947d4717742106c0e8f7ac1516546a792a3706731394aeeea817f355b7c72eecb03c47fad224dac113d87415a34968166dc8e5729dab2ca1d5ce90be51274f13f8fe4215890c77bf42809d8980f328afd72ec3deba90e8d2e9c9c0a15ffcb1b873056fadd58ee1fae7252cc801b38d330ca0ad70302bbee0bc2c6581ca7bf9f0e04c1d632d7ccc8e961c0193f00"/214, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40c0080}, 0x8015)
sendmsg$xdp(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000180)="c3c24583f644d88e74a7388defdac05e49283a6a6c000bcf37df7964ad9b6bb4e7db5984408bea8dbde8999b940953565dea62f8", 0x34}, {&(0x7f00000006c0)="91d4b47d601a8959b10dd153543e5fb4c958d652d4be6c00d6bced6ded194f54e1cdcd6a14c9ca47fdfd98ca02c67da62f5d02f9037bd557432e3c875a537ed0da850f0e29ee547d8934f0cfc1c6f388aae1d7da478b35b6cd5970fa2ee0fa06b7b3bd3a3959", 0x66}, {&(0x7f0000000740)="3d79ce5459e039d3835d8edcd462a37e7bcd0b2260553f8b0ea6a82af40815606dbe01178dcaab62ec8d3d4b3064e466973bff216910dec0673bb5c0b0def6cf3e405bc1aa4bdf6430539441cd8b7fe87814a96985bc29abc735fbea2272d152342e1d9e2b6b38c1367b10a8446caf94693d0629442e11c43790468fd65f72ea764d4bb69e6ad3fb22b08dbe86b65853ea73b5aba4c9221e22a000d0476de9e99dd605006ef344134b819bfa496ff14075e2e65b4392be92d788a87f486f0d2400903207cfd2ad598e8c188172e01a578850a2850e369217f36bde75d2dee39182", 0xe1}, {&(0x7f0000000840)="39e3786d124ec314e778a039f3a6db209e95bd8f9a1ae738d3fafb1fd5c5a162e70084569b9743bbcfd93e244f90d7b10ca03503326e620260ad0610a2922273238a0add04d98ac770493cf386a019bd86353c7702480de819510e8e5fcd7be9c2f13d16b63d5df4aec5a65aa2b426e51d5f9651ad54d4ca0a3f6a0be68e7644625fc106773c6b9784451b74f49cfedc11724957c7c8725286dd6b2b18a4d0", 0x9f}, {&(0x7f0000000900)="20b2ade59710cab5bce428552d017b48860b66109003243dafff86752d023685644484b92bc8e535edeca8929ad0201a1a2baa52eac609f172f248647927081144d0a28918bf8808b547e09908d9b5416ff9d3d4dd6a7cc24bc0b47ff92dc3404ad5c01a03fc8be862134caca2f3c883927947d1c5ca50d3d8abd911e69cff9f1dc3eb8745deb73a70ad48538b3a620f10773ef194d6cc34e12e40e9117247853414892801598125df7641007e2f51912d76b068ae104b9b611b8a81239d2c9ad436b680edd40033382d90801bb7ea", 0xcf}, {&(0x7f0000000380)="7787a90f6dc11b90156f1d22b28c240297cb196c43b312b9d63f42848a418deb963752e17fccf57eaf2479ec419f54425d2909", 0x33}], 0x6, 0x0, 0x0, 0x8841}, 0x0)

1m25.55038665s ago: executing program 3 (id=1669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000006140)={0x2020}, 0x2020)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$isdn(r1, &(0x7f0000000240)={0x0, 0x9, "13fa267f8d4728fb1a3f644306b33e4427f7314368f109c6c2764502f29431ae7b2a80b3c074"}, 0x2e, 0x24000010, &(0x7f0000000280)={0x22, 0xd3, 0x1, 0x2, 0x1}, 0x6)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xd0, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xc000000000000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xef19}, {0xc, 0x90, 0x304}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000015}, 0x4040040)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0x55, 0x2, {'netdevsim', 0x0}}}, {0x12}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)

1m25.487849245s ago: executing program 3 (id=1670):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async)
modify_ldt$read(0x0, &(0x7f0000000980)=""/4096, 0x1000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_GET_API_VERSION(r1, 0xae03, 0x42) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007001a00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m25.392894781s ago: executing program 3 (id=1671):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00')
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000180001000000ffffffff000002e2ffff"], 0x1c}}, 0x0)
pidfd_send_signal(r1, 0xfffffffd, &(0x7f0000000040)={0xfffffffd, 0xb, 0xab8}, 0x0)
process_mrelease(r1, 0x0)

1m25.388935609s ago: executing program 3 (id=1672):
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x40000105, 0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="320e7bb18dff29d51137271b2c8231e9e40d2e7bb56322b03390fac78c2b1a354f35bc1328225e0a1ed6e3f411a48a53e9d34ceb7781a6fc9a2c31baefcb571a4434b48e4cfaaf1ebd3053828a0986777ca6c26a0336ffc41933594b775525df48ce100e67478ebcb59b3eeb15f372cd44a4739c1583c56907479f4cca62a7fb5d0303493f914b15ed3d7b209681a17557", 0x91}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab9", 0x62}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d981ed8c6cd18", 0x5a}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0", 0x62}, {&(0x7f0000000780)}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xd1, @empty, 0x6}}, 0x80, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324f7b7c228df3cb92ea034693b968820a7b5b7fa5e05f0f2c62ddc49c67c2acb2ce8544611c3ccea83ced512ac810cca79c6", 0x91}], 0x2, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x401}}], 0x18}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}], 0x4, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m25.158963408s ago: executing program 3 (id=1673):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
lsm_set_self_attr(0x67, &(0x7f0000000180)=ANY=[], 0x20, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041)
pipe2(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client}]}})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000c00)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000001200)=[@txtime={{0x18, 0x1, 0x3d, 0x872}}], 0x18}, 0x840)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0) (async)
r7 = syz_pidfd_open(r6, 0x0)
ioctl$FS_IOC_GETVERSION(r7, 0xc040ff0b, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) (async)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}})
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)

1m9.414861873s ago: executing program 34 (id=1673):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010007081000418e00000004fcff", 0x58}], 0x1)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
lsm_set_self_attr(0x67, &(0x7f0000000180)=ANY=[], 0x20, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041)
pipe2(&(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client}]}}) (async)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client}]}})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000c00)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000001200)=[@txtime={{0x18, 0x1, 0x3d, 0x872}}], 0x18}, 0x840)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0) (async)
r7 = syz_pidfd_open(r6, 0x0)
ioctl$FS_IOC_GETVERSION(r7, 0xc040ff0b, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) (async)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}})
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)

37.002145655s ago: executing program 4 (id=1937):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x200c2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x41)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = dup(r3)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000000)={0x2f, {0x0, 0x0, 0x10000007}})
syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a0010970800000083dc"], 0x0}, 0x0)
r5 = syz_usb_connect$uac1(0x4, 0xbf, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x3, 0x1, 0x3, 0x30, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x1, "244275391422"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x1, 0x4, 0x6}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x3, 0xf8, "da2436"}, @selector_unit={0x5, 0x24, 0x5, 0x1, 0xe}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x1, 0x4, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x1, 0x6, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0xc, 0x6b, 0xff, "b43ae2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0x0, 0xad, {0x7, 0x25, 0x1, 0x81, 0xc, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x9, 0x4, "1deacfe01c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1, 0xf1, 0x4c, {0x7, 0x25, 0x1, 0x0, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x9, 0x8, 0x2, 0x40, 0xd}, 0x22, &(0x7f0000000180)={0x5, 0xf, 0x22, 0x3, [@wireless={0xb, 0x10, 0x1, 0x0, 0x1, 0xe, 0x7, 0x9, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x32, 0x2, 0x81, 0xd, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0xb, 0x1}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc6e}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}, {0x4f, &(0x7f00000002c0)=@string={0x4f, 0x3, "6ada11b2fe3660576b31b2101d418497ec423e4f1591bb06ea9b4edbefca7b7e4361b40cfcb8bc7532d6b70309b609fc209023fcb9099e9173074a824561146b4cb3a41d4a5dacb1487903d472"}}]})
syz_usb_control_io$uac1(r5, &(0x7f0000000540)={0x14, &(0x7f00000003c0)={0x20, 0xf, 0xe9, {0xe9, 0xb, "51a1ffa822a0bb213e29e7792f37fb21a2ed0f55cba3e16fba881d2b9c8af785d196f08160c864aa58f8e9ac20afabae354ee3cd4b082caa7cec93952de0ac1290fb68e94dd1339eb2866d9c00f046b00293dd71af0a6588b7e48153536b3764891a575a62e8bf2a72fe71754aeb7d187e759e874dcc9269c1a5b3213eadd970c60fd6635a103b600b9452593819d013c509c98a33d157c296cac0bbf6c6dc72240afca0a5ddbf1f6e8caeb596e1a33a79d89e43834976b0578a38843359a2b6d77d7996dc9eff43fb04a87d3fcca4d105a1af7161193437d86cbf2826b74498c7b06df5cdc1b0"}}, &(0x7f00000004c0)={0x0, 0x3, 0x42, @string={0x42, 0x3, "75b3ca0c45848e6a1c3de1aa41b11affc6eb7fe1efb8f1f3cbb410b33365fc0b24f034ba1cdbdcf2dc8cda6c08a342f14e8b88d7372ab22d3f9b83fe68a195b1"}}}, &(0x7f0000000840)={0x44, &(0x7f0000000580)={0x40, 0x3, 0xe7, "af37ae0625b123f44579618828d25feb9d104d78fdaf9d1155787917909fa7d66b319921ee5b564ad23a3edde5b0ccc2b75839ffe153a0635d0ff8879af8cdc0504d85b3395a905745b5563745e0313f0aa467fe9b66ca0f444d8b835e2fff8df7957e0d2056efad5c949e26eaa222c75b1fcd9f00c21ecffa77043fd35ffa2e30d74ede8839771b78698f9a446da949344bfa8dbc0b4dec9f70ad1d83210e37e499c694160f67a661dca99bc0483375bcd1fb8db152587e5c648c719ed7229956386993ccf1e77720964168539d391572642b1c076f17cd32f640085c6f179eceb3d7faef6cb3"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x37}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000700)={0x20, 0x81, 0x1, "ae"}, &(0x7f0000000740)={0x20, 0x82, 0x1, 'q'}, &(0x7f0000000780)={0x20, 0x83, 0x2, "6b1d"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, "18"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "f8e4b2"}})

36.400857305s ago: executing program 4 (id=1940):
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109023b0001010080030904000bff02020000052406000005240000000d240f01000a0000000000000009058202200000008c090503020800000080"], 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000240))
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000048e000/0x2000)=nil, 0x2000}, 0x6})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf5c0400000008000c00", @ANYRES32=0x0, @ANYBLOB="17266fcef2a2df1998f6967957dc671ae15e3fe72143ea4b2328ff16192d31cae47b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r7 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x4, 0xc2a40)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000440)={0x0, 0x10, 0x7, 0xa54, 0x1, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x9, 0x1})
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f00000012c0)={&(0x7f0000000580)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xda8c}, {&(0x7f0000000340)=""/141, 0x8d}, &(0x7f0000000300)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f00000001c0)=""/14, 0xe}], 0x2, 0x1}}], 0x48, 0x4804}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="ab7a9984d10630c0d2ff15508492d3dcd62c1a3069a12c2f05a99da0", 0x1c}, {&(0x7f0000000640)="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", 0x1000}], 0x2}, 0x4048804)

33.324409986s ago: executing program 4 (id=1953):
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={0x0})

32.806715854s ago: executing program 4 (id=1959):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x4000, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r0 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_mreqn(r0, 0x6a, 0x0, 0x0, &(0x7f00000000c0))
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00')

32.77529297s ago: executing program 4 (id=1960):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
socket$unix(0x1, 0x2, 0x0) (async)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r2, 0x0, &(0x7f0000ae0000/0x1000)=nil, 0x1000, 0x80000000000000}) (async)
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r2, 0x0, &(0x7f0000000340)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000002080)={0x28, 0x2, r2, 0x0, &(0x7f0000002200)='t', 0x1, 0x81}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r2, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})
syz_usb_connect(0x5, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000300713e2009001c50236e0102030109021200010806505e0904bff3004e828e02d67c72b91c729a6f191cb02d7ca315dca9b27739e8b32b3c0060ab928eb92c0d6d2346015c35ae4cf9b87a4f756ddafa01eca5e8"], &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0}) (async)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000006c0)={0x28, 0x2, r2, 0x0, &(0x7f0000000680), 0x0, 0xe6e0}) (async, rerun: 32)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)}, {&(0x7f0000000380)}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba7792fbc8ceaff1c9d7ceba64850bf02eeae9c814fb4cdb5e0e9b836ea2cca20b60440969419d09b1a0bbfb1e25c9dc429446bc2ddb467d972c56938e24", 0xca}, {&(0x7f0000000140)}, {0x0}, {&(0x7f0000000300)="d4eb0cb9b5afe8a923", 0x9}], 0x6}}], 0x1, 0x40004) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
capset(0x0, &(0x7f0000000000)={0x9, 0x6, 0x5, 0x4, 0x1}) (async)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x80a0000, 0xdddd1000, 0xa, 0x0, 0x8, 0x8, 0x1, 0x2, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0x6, 0x0, 0x7, 0x2, 0x2, 0x0, 0x3, 0xe, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {0x5000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0xeeef0000, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {0x8080000, 0x5000, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0x0, 0xf9}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1, 0x100000000]}) (async, rerun: 32)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 32)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async)
ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000240)={0x18, r2, 0xb, 0xa650})

32.572122931s ago: executing program 4 (id=1961):
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x4000000, 0x200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x27)
ioctl$SG_BLKTRACETEARDOWN(r0, 0x5385, 0x1000000000000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fremovexattr(r2, &(0x7f0000000100)=@random={'security.', '\x00'})
quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0)

32.289632824s ago: executing program 35 (id=1961):
r0 = syz_open_dev$sg(&(0x7f0000000080), 0x4000000, 0x200)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x27)
ioctl$SG_BLKTRACETEARDOWN(r0, 0x5385, 0x1000000000000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fremovexattr(r2, &(0x7f0000000100)=@random={'security.', '\x00'})
quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0)

6.950157761s ago: executing program 7 (id=2061):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0)
mq_timedreceive(r0, 0x0, 0x0, 0x1000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='.', 0x1}], 0x1}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000280)=@arm64)
cachestat(r5, &(0x7f0000000180)={0x10007, 0x3}, &(0x7f00000002c0), 0x0)
r7 = gettid()
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
close(r8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000c00)={'wlan0\x00'})
mmap(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x4, 0x66032, 0xffffffffffffffff, 0x40000000)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8, 0xcea8, 0xffffffff}, 0x10)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=0x0}})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r10, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)

6.792725761s ago: executing program 7 (id=2062):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2d, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x11d, 0x484, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r2, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)

6.772509866s ago: executing program 6 (id=2063):
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000db168920402000d92ca9cca75ed16f1c2dd601020301090200"/44], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000004c0)=[{0x8000, 0x10, 0x0, 0x0}, {0x1, 0xb001, 0x0, 0x0}], 0x2})

6.734805893s ago: executing program 7 (id=2064):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="18", 0x1}], 0x1)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)

6.568059342s ago: executing program 7 (id=2066):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000), 0x4)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0xfffeffd1, 0x2, 0x1fb, 0x8113, 0x5, "04ff8affffe29da51d976d7f03080e000d00", 0x0, 0x201})
syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r3, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x4014)

3.760450593s ago: executing program 5 (id=2075):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x8f, 0x206, 0xfffffffd, 0x3, 0xb37, 0xfffffe2f, 0x8}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r2, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

3.723354019s ago: executing program 6 (id=2076):
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000004c0)=[{0x8000, 0x10, 0x0, 0x0}, {0x1, 0xb001, 0x0, 0x0}], 0x2})

3.551655656s ago: executing program 7 (id=2077):
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000004c0)=[{0x8000, 0x10, 0x0, 0x0}, {0x1, 0xb001, 0x0, 0x0}], 0x2}) (fail_nth: 3)

2.92146896s ago: executing program 5 (id=2078):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r0, 0x1, 0x70bd31, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfd}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8094}, 0x4048800)

2.848791194s ago: executing program 5 (id=2079):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0))
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e26, @multicast2}, 0x10)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0xffffffff)

2.778271569s ago: executing program 5 (id=2081):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xffffffff, 0x9, 0x0, 0x4, 0x200000000000, 0x2, 0x10000, 0x87a, 0x8000000000000, 0x80040000000002, 0xfffffffffffffff7, 0x9, 0x1, 0x1, 0x10000100000108ca, 0x400008005], 0x80a0000, 0x100c02})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

2.679924827s ago: executing program 5 (id=2082):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='y', 0x1, 0x4000, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f)
ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f00000002c0)={0x9000, 0xc000, 0x5, 0x1, 0x9})
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a0a0000000000000000000a0000030c00034000000000000000020900020073797a32000000000900010073797a3100000000140000001100010000000000000000000a00000a"], 0x60}, 0x1, 0x0, 0x0, 0x48082}, 0x48010)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000340)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[{}, {}, {}, {}], 0x0, 0x0, '\x00', 0x6, 0x4})
sendto$inet(r0, &(0x7f0000000140)="c2", 0x1, 0x40805, 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x16)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000380)={{0x0, 0x2}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r4, 0x5501)
write$input_event(r4, &(0x7f0000000fc0)={{0x0, 0xea60}, 0x16}, 0x18)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002080)=""/4096, 0xfc6a, 0x0, 0x0, 0xfffffda3}, &(0x7f0000000040)=0x40)

2.648134639s ago: executing program 5 (id=2084):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00')
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1ecd, 0x800011, 0x1, 0x6, 0xa, "84899df67b85d4e19a2d933ddaaa753e83f453"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000540)={0x6}, 0x1)
sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff)
r3 = fanotify_init(0x8, 0x400)
write$binfmt_elf64(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c462200007a"], 0x40)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x37, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="36f00fbb960000baf80c66b8fe12ce8066efbafc0cb8b993ef0f76aed4290f72e4fef30f09f30f0966b9800000c00f326635008000000f302e660f388224660fae3783e500", 0x45}], 0x1, 0x4e, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})

2.015440983s ago: executing program 6 (id=2085):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2)
sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2000, 0x50}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000890)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r1, r0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0x15, 0x4, "d76ea671"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000280)={0x40, 0x15, 0xf, "8b537dd929e83c6cbcc8d69e27c7f6"}, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000002540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfcff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfff}], 0x0, 0x0, 0x0})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000340)={0x0, <r10=>0x0}, &(0x7f00000002c0)=0xc)
mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f00000006c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r10, @ANYBLOB="2c005dff85cfaa00d5a5aa88ca9118d7ae5aa867c322ced6f770900f5b4bbdf45fee068bd3b9f574b071c70c6fedf77325fdea5b765b978740c3e423b506df43323e6a87a198b446b82686ffe4d5fe85a23608440c7c8dab27c867033ed6ca37548f92b28e66ebcfb0326da93ada557901b89209ad0c5c83d5459756fa6a5209"])

1.623363461s ago: executing program 1 (id=2089):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000002c0)={0x8f, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x1, 0x8, 0x0, &(0x7f0000000040)='J'}, {0x3, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x7fffffff, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x100, 0x0}, {0x4, 0x0, 0x80000000, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.456082753s ago: executing program 1 (id=2090):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x101, @private0, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000240)='B', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0xfffffffffffffffd, {0x0, 0xff}}, 0x18)
sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, r2, 0x13}, 0x18, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc894)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x200}, &(0x7f0000000100)=0x8)

1.375105672s ago: executing program 1 (id=2091):
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x40000105, 0x0, 0x0})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="320e7bb18dff29d51137271b2c8231e9e40d2e7bb56322b03390fac78c2b1a354f35bc1328225e0a1ed6e3f411a48a53e9d34ceb7781a6fc9a2c31baefcb571a4434b48e4cfaaf1ebd3053828a0986777ca6c26a0336ffc41933594b775525df48ce100e67478ebcb59b3eeb15f372cd44a4739c1583c56907479f4cca62a7fb5d0303493f914b15ed3d7b209681a17557", 0x91}, {&(0x7f0000000880)="7035778905c2358b3ff9b75d1a3f836c8eb517894eeff6c3ee08f90b36b40ab65fe12942de6e899ac1c72c2b26cab39a23e073567e8b4f311f6f0ee91f1c21aaa91ec103706d8b0bb468babe142dc2fe14205b8b103eddb7dc4859df7a5435fb0ab9", 0x62}, {&(0x7f00000002c0)="7c1a2d6c68f2b19af5ad5b3fbc13c1398f392d4e4912a47fd97c06e88e711432b971d95d781d72632d1369d5bc4db51e6dedbc9dd35219282a22db679e0734d6f64f608f7db61ee9dcba4b43f11d902fb9ba9566c7f94f39dbcae20665c5e1172a2ea6060acb92714a17ee6714dc06068795e0892d041d8c2f3559", 0x7b}, {&(0x7f0000000540)="08368fefde39d21623e23a9dd67b0c95a48022b4f407396964e4d1d2bcf1a7c71f16681007b08c6061a5a2e2aa144f9f9f3834323ffac830e41ec7ebe29248a7850257cedaaa8a54b1d65005dbd8fe4e86fc625d98", 0x55}, {&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8696ea6a8eaf61db2fb466ad55972df50c67b8963976381a454b9763bfe1fe54c638f5d86e693734e2ee396eca7782d29c9d912eb34a80d30164b03624bf7d276c30426acfdfee3bb5a6242f7dc67863bdb918115b0cbc9", 0xc4}, {&(0x7f0000000780)}, {&(0x7f0000000b40)="2aa89dcc6d20cf5a732764f89bf238658cba80614e317b8304dae54c36f6e447b2b6cc36779a2bc14605bdf8b1beccc5fde0f08e0363a89d728c719de27252ce4ddb980418e0a63877d1df377f63b485e06bcee092556dc841358902ec2c010d4a462bf625f1ebd1b56b45aaf5340b9298d866fae9ec13b1c4b5736e8e98b0f07466b5d9685ec2c7300d1f36371d565f1a439e", 0x93}], 0x7, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xa0}}], 0x78}}, {{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xd1, @empty, 0x6}}, 0x80, &(0x7f0000001300)=[{0x0}, {&(0x7f0000001240)="a6c35211e07d8c6557bae5cd476df01e40836fb0ada526bb413a3567aaab7e09f43db2a1893f2b5842ae62be0d1e6c70b3f94826886507196fed408623df4a8e1034e20380638cc24e692107357b9daf238d7e0a4774053e302b14068fd9e324f7b7c228df3cb92ea034693b968820a7b5b7fa5e05f0f2c62ddc49c67c2acb2ce8544611c3ccea83ced512ac810cca79c6", 0x91}], 0x2, &(0x7f0000001340)=[@timestamping={{0x14, 0x1, 0x25, 0x401}}], 0x18}}, {{&(0x7f0000001380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x0}}], 0x4, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=ANY=[], 0x570}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.189671426s ago: executing program 1 (id=2092):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r2 = socket(0x2a, 0x80b, 0x6)
io_setup(0x7, &(0x7f0000000140)=<r3=>0x0)
r4 = eventfd(0x5)
r5 = eventfd2(0x0, 0x80800)
io_submit(r3, 0x4, &(0x7f0000000580)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f0000000180)="09f92b6cd75e0c94161c506304c31addecd06bdb417de1a9a42f16494133863c4a42331bb9a72396c813faa679de09acc4b3059b8fe56175f4e5f962c1a19e94fadde3f1cf951dfebdf018b5009f1f03c39513f17b0374dd0f26783f76fd85e6215560e7880ab3905b7e557ddd331baf52f08c18db93a273eba363f8154b1fbef34379d85a49b36b64df67537363d5a920c3620e9bb8d6af4c486cc22924468687d227e55e1e6bf2f6ff33936ea38513e1af0a834074bece964c2ab100066b8ec77bd68b3870698773e89793ecb266daebc68a81e95b41ae8a732ecfbe3cd4f93ad08cd9e2", 0xe5, 0x6, 0x0, 0x1, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000002c0)="bdf1d2a7fbe5e21b89e4139d8ef17c64177ed6aad2aae067192a21a254defef8bd1f25e59bacf2f978c754784fa87a0843587082c4e4b6c6184efe2cf1a48e1e68cb88e9d857a4e10f397d7412a5a8b4bd5e27e27ef59d2e1fb34afad98fb42bfd936c90f56fbc29f8a83c944f809e766f955aa3", 0x74, 0x4, 0x0, 0x0, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000380)="3368840764c7eba0173273755f6b5e9a22826021f78aae463f53bf4d2260d2fd75f2b9aa9afe3665c45354ed5b964d67f7cfe659a2afa683be4be22d0a3e1ab442ae3c364ab55d784f43c22950c7fcae32c5eb37bd77be8c2f3ae6741b8cf5c29bb276a1c2d8d54636997d766fd93e16d18de7e031e11f16854621984182b4fcbaaadbe4906ea2dfc69d3889d23fae07f5be52716df01592fc0c30d4118bc0d9f8e063497c8c491c74b51d", 0xab, 0xc, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000480)="0358086962a2d7b1e8580285390554f7cf9838b448a6132dd75bb5cbfe8706306ec34bfe6345e0e9783e2c3e21d641a38c35d51e0fd9e07db414909b02343d1c1462e31c687e4a4d23c750f87775b525d30d9aeda75b8a727d4166d9ab57bfa5250e796589d82729fd0e1ff85b03afa696a5eb1b68ace29169b5dc65001261192f2c4ae8f1e6f2c8d60affd180eea784b9cd0aa16f8c35a6743c966280fa0c1bfd15aa6f6832e90058623663c0ff2dcf956aa50fefd4c1", 0xb7, 0x6, 0x0, 0x1}])
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000005c0))
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000600)=<r6=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f00000006c0)={{r2}, r6, 0x12, @inherit={0x50, &(0x7f0000000640)={0x1, 0x1, 0x7e65, 0x5, {0x2, 0x800000, 0x6, 0xfff, 0x6}, [0x9]}}, @subvolid=0x5})
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000016c0)=0xa029, 0x4)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001700), 0x202000, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000001740), &(0x7f0000001780)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0))
syz_emit_vhci(&(0x7f0000001800)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000001840)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
bind$phonet(r9, &(0x7f0000001880)={0x23, 0x9, 0x8, 0xf}, 0x10)
sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044004)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000019c0)={<r10=>0x0, @in6={{0xa, 0x4e21, 0xd83f, @empty, 0x5bc}}, 0xe, 0xfff8}, &(0x7f0000001a80)=0x90)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000001ac0)={r10, 0x8001, 0x10}, 0xc)
ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x4)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001b00)='wg0\x00', 0x4)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r11, &(0x7f0000001b40)={0xa, 0x4e22, 0x2, @mcast1}, 0x1c)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f0000001b80)={r10, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, &(0x7f0000001c40)=0x84)
socket$kcm(0x29, 0x7, 0x0)

1.024082779s ago: executing program 1 (id=2093):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000980)={0x34, 0x0, [{0x1, 0x0, &(0x7f0000000080)=""/185}, {0xb000, 0x0, &(0x7f0000000140)=""/121}, {0x70000, 0x0, &(0x7f0000000000)=""/44}, {0xddd9b000, 0x0, &(0x7f0000000800)=""/149}, {0xeeee0000, 0x0, &(0x7f00000008c0)=""/147}]})
r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @vbi={0x0, 0x0, 0x59455247}})

1.012288733s ago: executing program 1 (id=2094):
syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000004c0)=[{0x1900, 0x10, 0x0, 0x0}, {0x1, 0xb001, 0x0, 0x0}], 0x2})

490.1021ms ago: executing program 7 (id=2095):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0) (async, rerun: 64)
syz_usb_connect(0x4, 0x24, &(0x7f0000001a40)=ANY=[], 0x0) (rerun: 64)
r1 = syz_usb_connect$cdc_ncm(0x2, 0x198, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x186, 0x2, 0x1, 0x6, 0x90, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "473311db9a"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0xf, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x18}, [@mdlm={0x15, 0x24, 0x12, 0xc}, @dmm={0x7, 0x24, 0x14, 0xe, 0x2}, @mdlm_detail={0x104, 0x24, 0x13, 0x5d, "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"}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0xd, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x43, 0x10, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x2, 0x4}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x9, 0x3, 0xb, 0x20}, 0x1c2, &(0x7f0000000640)={0x5, 0xf, 0x1c2, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x9d}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b6f60a74000ffcb2085745fbdb986476"}, @generic={0xce, 0x10, 0x0, "73c450c7aefa6c8b223b518f26b5483ef7683c902997523aec464642cde773dcdbcdada4edec997c22cc108aab5610a75bee05fe023099c9f5c1caee205cdb7aae4fceabc37ff8fda0a20682c4d5e667ca1ee91d5015739bcd9d4679faa27cd3c012b2ccd33897e691ba7afef41316e790d2a6ff65ec6c6e919c86d6907ae087e56afb0c67352318228e1a987b9e41f4253318f0b766bedb9eec16da9e2e8c44a9facc98c3c44a83adf4f555fc5c291d537e2f936d88216210986f2179290e59e70d7758f254ab9786c931"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x30707f12425db9bf, 0xb9, 0x8, 0x4003, 0x90}, @generic={0xbb, 0x10, 0x1, "e035f77875dc6f3f13c8c7ed0bda742493acc619c48fa54216ba54097c414a80a97b3e3307eb3b0872daac6482449731faf5a3b505cfda84ed1880e45b46c1c1768e79fae9e7217c79466dc4d7144117d1bfc8a9f18b6d3a58de11aeb071a0c12239583b5573cc5615dad14b9ed31b2d5be27fa3f4b4b1f9258ac25be9948f4176d8bb7f3aa0b06491946dcadfa1050029fcb123cd18068cfca7fcbad5d91c59f6d4fb3755f32db9606fbe149c62e75e4d8d1250880ddd0c"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x16, 0x6, 0x2, 0x1}]}, 0x7, [{0x41, &(0x7f0000000300)=@string={0x41, 0x3, "afcef93b964fe5382d56ed3652e2da113136c56688f5c14bff30854c60cc69bd104798004bdee4e5b09d48814b3ae7bd638fb11a669080d65d2c5d62f9b3a9"}}, {0x2a, &(0x7f0000000380)=@string={0x2a, 0x3, "3bde5f8312fce8ac907624a77b5dfe9a9f87238a7340c08a9e8974b0cb14d67cf6b9fe7eae2c6581"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x80c}}, {0x27, &(0x7f0000000500)=@string={0x27, 0x3, "db9904ab940ac22f2fffabe9a6a529390def940211dcdc893c40de2765427332ddd42b5a33"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x427}}]})
syz_usb_disconnect(r1) (async, rerun: 32)
ioctl$EVIOCRMFF(r0, 0x5501, 0x0) (rerun: 32)

137.144465ms ago: executing program 6 (id=2096):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0), 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x8f, 0x206, 0xfffffffd, 0x3, 0xb37, 0xfffffe2f, 0x8}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r2, 0x5)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
close_range(r2, 0xffffffffffffffff, 0x0)

87.453395ms ago: executing program 6 (id=2097):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r0, 0x1, 0x70bd31, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfd}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc8094}, 0x4048800)

0s ago: executing program 6 (id=2098):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x76)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000040), 0x10)
sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0x2, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f0000004540)=ANY=[@ANYBLOB="10d4df25"], 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830)
bind$alg(r1, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x54)
clock_adjtime(0x0, &(0x7f0000000000)={0x66b9, 0x100000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x2486, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ff0000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f0000000000)="366626f30f10e80f35f3af66baf80c32e5ef66bafc0c66ed0f20d835080000000f22d8b805000000b971006d0410211021d967660fdb19c7442400f0000000f282f00fb099400d0000c744240600000000c74424007e000000c744240200800000c7442406000000000f011c24c744240000400000c744240200000000660f3881a5003800000f011c240f01c4", 0x8d}], 0x1, 0x17, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

cket: 32
[  527.392488][ T5863] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  527.400665][ T5863] usb 2-1: config 0 has no interface number 0
[  527.408764][ T5863] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  527.417862][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.426149][ T5863] usb 2-1: Product: syz
[  527.430317][ T5863] usb 2-1: Manufacturer: syz
[  527.434892][ T5863] usb 2-1: SerialNumber: syz
[  527.442579][ T5863] usb 2-1: config 0 descriptor??
[  527.457497][ T5863] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  527.475850][ T5863] dw2102: su3000_power_ctrl: 1, initialized 0
[  527.481965][ T5863] dvb-usb: bulk message failed: -22 (2/0)
[  527.500781][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  527.516137][ T5863] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  527.525728][ T5863] usb 2-1: media controller created
[  527.530944][ T5863] dvb-usb: bulk message failed: -22 (6/0)
[  527.536921][ T5863] dw2102: i2c transfer failed.
[  527.541712][ T5863] dvb-usb: bulk message failed: -22 (6/0)
[  527.547542][ T5863] dw2102: i2c transfer failed.
[  527.552322][ T5863] dvb-usb: bulk message failed: -22 (6/0)
[  527.558370][ T5863] dw2102: i2c transfer failed.
[  527.563666][ T5863] dvb-usb: bulk message failed: -22 (6/0)
[  527.581823][ T5863] dw2102: i2c transfer failed.
[  527.587750][ T5863] dvb-usb: bulk message failed: -22 (6/0)
[  527.593508][ T5863] dw2102: i2c transfer failed.
[  527.598452][ T5863] dvb-usb: bulk message failed: -22 (6/0)
[  527.604178][ T5863] dw2102: i2c transfer failed.
[  527.614475][ T5863] dvb-usb: MAC address: 02:02:02:02:02:02
[  527.634651][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  527.662119][ T5863] dvb-usb: bulk message failed: -22 (3/0)
[  527.668867][ T5863] dw2102: command 0x0e transfer failed.
[  527.674465][ T5863] dvb-usb: bulk message failed: -22 (3/0)
[  527.680377][ T5863] dw2102: command 0x0e transfer failed.
[  527.968608][    T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  527.995749][ T5863] dvb-usb: bulk message failed: -22 (3/0)
[  528.001480][ T5863] dw2102: command 0x0e transfer failed.
[  528.007072][ T5863] dvb-usb: bulk message failed: -22 (3/0)
[  528.012794][ T5863] dw2102: command 0x0e transfer failed.
[  528.018472][ T5863] dvb-usb: bulk message failed: -22 (1/0)
[  528.024196][ T5863] dw2102: command 0x51 transfer failed.
[  528.050323][ T5863] DVB: Unable to find symbol ds3000_attach()
[  528.056522][ T5863] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  528.115827][ T5863] rc_core: IR keymap rc-su3000 not found
[  528.121635][ T5863] Registered IR keymap rc-empty
[  528.131044][ T5863] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  528.141955][    T9] usb 6-1: Using ep0 maxpacket: 8
[  528.148703][    T9] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2
[  528.158755][ T5863] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input83
[  528.170331][    T9] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  528.182504][    T9] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  528.192902][ T5863] dvb-usb: schedule remote query interval to 150 msecs.
[  528.200540][ T5863] dw2102: su3000_power_ctrl: 0, initialized 1
[  528.209040][ T5863] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  528.220213][    T9] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  528.229363][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.268645][ T5863] usb 2-1: USB disconnect, device number 87
[  528.372923][ T5863] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  528.472232][    T9] usb 6-1: string descriptor 0 read error: -71
[  528.575867][    T9] usb 6-1: USB disconnect, device number 42
[  528.825732][ T5903] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  528.915795][    T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  528.975763][ T5903] usb 2-1: Using ep0 maxpacket: 16
[  528.986925][ T5903] usb 2-1: config 8 has an invalid interface number: 206 but max is 0
[  528.995111][ T5903] usb 2-1: config 8 has no interface number 0
[  529.001730][ T5903] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  529.014791][ T5903] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  529.029102][ T5903] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  529.065880][    T9] usb 7-1: Using ep0 maxpacket: 32
[  529.067963][ T5903] usb 2-1: config 8 interface 206 has no altsetting 0
[  529.089713][    T9] usb 7-1: config 0 has an invalid interface number: 20 but max is 0
[  529.091682][ T5903] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  529.110794][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.111244][    T9] usb 7-1: config 0 has no interface number 0
[  529.120098][ T5903] usb 2-1: Product: syz
[  529.129946][ T5903] usb 2-1: Manufacturer: syz
[  529.134570][ T5903] usb 2-1: SerialNumber: syz
[  529.146095][    T9] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  529.161331][    T9] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  529.176082][    T9] usb 7-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  529.193218][    T9] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  529.202483][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.210607][    T9] usb 7-1: Product: syz
[  529.214954][    T9] usb 7-1: Manufacturer: syz
[  529.219643][    T9] usb 7-1: SerialNumber: syz
[  529.227382][    T9] usb 7-1: config 0 descriptor??
[  529.233177][T12943] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  529.242377][    T9] ums-sddr09 7-1:0.20: USB Mass Storage device detected
[  529.297415][    T9] ums-sddr09 7-1:0.20: probe with driver ums-sddr09 failed with error -22
[  529.425734][ T5921] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  529.450126][T12943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.460967][T12943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.483013][   T24] usb 7-1: USB disconnect, device number 23
[  529.575738][ T5921] usb 6-1: Using ep0 maxpacket: 8
[  529.584729][ T5921] usb 6-1: config 1 has an invalid interface number: 4 but max is 2
[  529.599485][ T5921] usb 6-1: config 1 has no interface number 1
[  529.609021][ T5921] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  529.622061][ T5921] usb 6-1: config 1 interface 4 has no altsetting 0
[  529.633760][ T5921] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  529.644576][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.653649][ T5921] usb 6-1: Product: syz
[  529.658294][ T5921] usb 6-1: Manufacturer: syz
[  529.662969][ T5921] usb 6-1: SerialNumber: syz
[  529.766640][ T5903] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected
[  529.781347][ T5903] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  529.800048][ T5903] usb 2-1: USB disconnect, device number 88
[  529.813638][ T5903] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  529.826414][ T5903] garmin_gps 2-1:8.206: device disconnected
[  529.884032][ T5921] usb 6-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  529.893134][ T5921] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  529.918881][ T5921] hub 6-1:1.4: Invalid hub with more than one config or interface
[  529.927267][ T5921] hub 6-1:1.4: probe with driver hub failed with error -22
[  529.943611][ T5921] usb 6-1: USB disconnect, device number 43
[  530.238056][T12961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  530.249150][T12961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  530.725732][ T5921] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  530.840653][    T9] usb 5-1: USB disconnect, device number 14
[  530.876268][ T5921] usb 6-1: Using ep0 maxpacket: 32
[  530.883673][ T5921] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  530.900244][ T5903] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  530.907885][ T5921] usb 6-1: config 0 has no interface number 0
[  530.914043][ T5921] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  530.946119][ T5921] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  530.955188][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.963942][ T5921] usb 6-1: Product: syz
[  530.979829][ T5921] usb 6-1: Manufacturer: syz
[  530.984471][ T5921] usb 6-1: SerialNumber: syz
[  530.999724][ T5921] usb 6-1: config 0 descriptor??
[  531.007770][T12971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  531.048670][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff8880772dc000 (16)(netdevsim3) start
[  531.052066][ T8092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.086783][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff8880772dc000 (12)(netdevsim3) end
[  531.111185][ T5903] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  531.121608][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.145748][ T5903] usb 2-1: Product: syz
[  531.149965][ T5903] usb 2-1: Manufacturer: syz
[  531.154593][ T5903] usb 2-1: SerialNumber: syz
[  531.171878][ T5903] usb 2-1: config 0 descriptor??
[  531.222696][T12971] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  531.237809][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff8880772d8000 (13)(netdevsim2) start
[  531.239644][ T8092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.255946][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff8880772d8000 (8)(netdevsim2) end
[  531.362522][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88802ff1c000 (16)(netdevsim1) start
[  531.364181][ T8092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.410414][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88802ff1c000 (10)(netdevsim1) end
[  531.489500][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  531.499537][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  531.512279][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  531.524516][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  531.532988][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  531.588569][T12985] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1964'.
[  531.600104][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88802ff18000 (13)(netdevsim0) start
[  531.602837][ T5903] usb 2-1: Firmware: major: 184, minor: 96, hardware type: UNKNOWN (37)
[  531.624386][ T8092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.636071][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88802ff18000 (8)(netdevsim0) end
[  531.655915][ T5921] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  531.667124][ T5921] asix 6-1:0.188: probe with driver asix failed with error -61
[  531.719273][T12982] vxcan1 speed is unknown, defaulting to 1000
[  531.819964][T12975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.869919][T12975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.899333][ T5903] usb 2-1: failed to fetch extended address, random address set
[  531.929714][ T8092] bridge_slave_1: left allmulticast mode
[  531.935395][ T8092] bridge_slave_1: left promiscuous mode
[  531.941281][ T5903] usb 2-1: atusb_probe: initialization failed, error = -524
[  531.961049][ T8092] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.970784][ T5903] atusb 2-1:0.0: probe with driver atusb failed with error -524
[  531.992169][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1966'.
[  532.017215][ T5903] usb 2-1: USB disconnect, device number 89
[  532.026669][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1966'.
[  532.037984][ T8092] bridge_slave_0: left allmulticast mode
[  532.045315][ T8092] bridge_slave_0: left promiscuous mode
[  532.054334][ T8092] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.265893][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88807df38000 (13)(ip6gretap0) start
[  532.283243][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88807df38000 (7)(ip6gretap0) end
[  532.391557][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88805967a000 (12)(erspan0) start
[  532.429504][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88805967a000 (5)(erspan0) end
[  532.465745][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88806b9aa000 (5)(gretap0) start
[  532.505660][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88806b9aa000 (5)(gretap0) end
[  532.555917][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88802a526000 (7)(geneve1) start
[  532.614894][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88802a526000 (5)(geneve1) end
[  532.632181][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88806bb6e000 (5)(geneve0) start
[  532.649339][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88806bb6e000 (5)(geneve0) end
[  532.678781][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88801150c000 (8)(bridge0) start
[  532.695984][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88801150c000 (8)(bridge0) end
[  532.840268][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88807c0c0000 (43)(bond0) start
[  532.857931][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88807c0c0000 (39)(bond0) end
[  532.858223][ T8092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.886971][ T8092] bond0 (unregistering): Released all slaves
[  532.905710][ T5903] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  532.982228][ T8092] tipc: Left network mode
[  533.070373][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff8880509a0000 (16)(wlan1) start
[  533.087399][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff8880509a0000 (16)(wlan1) end
[  533.118509][ T5903] usb 2-1: Using ep0 maxpacket: 32
[  533.129371][ T5903] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  533.145775][ T5903] usb 2-1: config 0 has no interface number 0
[  533.155386][ T5903] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  533.165161][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.173466][ T5903] usb 2-1: Product: syz
[  533.178473][ T5903] usb 2-1: Manufacturer: syz
[  533.183076][ T5903] usb 2-1: SerialNumber: syz
[  533.191533][ T5903] usb 2-1: config 0 descriptor??
[  533.221806][ T5903] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  533.241023][ T5903] dw2102: su3000_power_ctrl: 1, initialized 0
[  533.252739][ T5903] dvb-usb: bulk message failed: -22 (2/0)
[  533.274414][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  533.286802][ T3070] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88807ded0000 (12)(wlan0) start
[  533.307407][ T3070] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (16)(vxcan1) cookie=ffff88807ded0000 (4)(wlan0) end
[  533.321102][T12982] chnl_net:caif_netlink_parms(): no params data found
[  533.324685][ T5903] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  533.345352][ T5903] usb 2-1: media controller created
[  533.350652][ T5903] dvb-usb: bulk message failed: -22 (6/0)
[  533.357968][ T5903] dw2102: i2c transfer failed.
[  533.362806][ T5903] dvb-usb: bulk message failed: -22 (6/0)
[  533.368706][ T5903] dw2102: i2c transfer failed.
[  533.373497][ T5903] dvb-usb: bulk message failed: -22 (6/0)
[  533.379531][ T5903] dw2102: i2c transfer failed.
[  533.386895][ T5903] dvb-usb: bulk message failed: -22 (6/0)
[  533.392879][ T5903] dw2102: i2c transfer failed.
[  533.401999][T13010] dvb-usb: bulk message failed: -22 (3/0)
[  533.408405][T13010] dw2102: i2c transfer failed.
[  533.413331][ T5903] dvb-usb: bulk message failed: -22 (6/0)
[  533.422985][ T5903] dw2102: i2c transfer failed.
[  533.468513][ T5903] dvb-usb: bulk message failed: -22 (6/0)
[  533.500822][ T5903] dw2102: i2c transfer failed.
[  533.516227][ T5903] dvb-usb: MAC address: 02:02:02:02:02:02
[  533.541506][ T5863] usb 6-1: USB disconnect, device number 44
[  533.563575][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  533.572829][ T5824] Bluetooth: hci2: command tx timeout
[  533.719366][ T5903] dvb-usb: bulk message failed: -22 (3/0)
[  533.725125][ T5903] dw2102: command 0x0e transfer failed.
[  533.746167][ T5903] dvb-usb: bulk message failed: -22 (3/0)
[  533.746566][ T5815] usb 7-1: new full-speed USB device number 24 using dummy_hcd
[  533.772512][ T5903] dw2102: command 0x0e transfer failed.
[  533.929530][ T8092] hsr_slave_0: left promiscuous mode
[  533.951125][ T5815] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE4, changing to 0x84
[  533.962856][ T8092] hsr_slave_1: left promiscuous mode
[  533.968266][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 95, setting to 64
[  533.968318][ T5815] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  533.968339][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.009599][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  534.040556][ T5815] usb 7-1: config 0 descriptor??
[  534.046029][ T8092] batman_adv: batadv0: Removing interface: batadv_slave_0
[  534.054376][ T5824] Bluetooth: hci4: SCO packet for unknown connection handle 200
[  534.066587][T13021] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  534.100752][ T8092] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  534.105539][ T5903] dvb-usb: bulk message failed: -22 (3/0)
[  534.114218][ T5903] dw2102: command 0x0e transfer failed.
[  534.125892][ T5903] dvb-usb: bulk message failed: -22 (3/0)
[  534.135690][ T5903] dw2102: command 0x0e transfer failed.
[  534.152185][ T5903] dvb-usb: bulk message failed: -22 (1/0)
[  534.155637][ T8092] batman_adv: batadv0: Removing interface: batadv_slave_1
[  534.161566][ T5903] dw2102: command 0x51 transfer failed.
[  534.251991][ T8092] veth1_macvtap: left promiscuous mode
[  534.257649][ T8092] veth0_macvtap: left promiscuous mode
[  534.263453][ T8092] veth1_vlan: left promiscuous mode
[  534.268955][ T8092] veth0_vlan: left promiscuous mode
[  534.283366][ T5903] DVB: Unable to find symbol ds3000_attach()
[  534.300844][ T5903] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  534.301478][ T5815] ath6kl: Failed to submit usb control message: -71
[  534.359983][ T5815] ath6kl: unable to send the bmi data to the device: -71
[  534.379311][ T5815] ath6kl: Unable to send get target info: -71
[  534.395718][ T5903] rc_core: IR keymap rc-su3000 not found
[  534.411341][ T5903] Registered IR keymap rc-empty
[  534.412269][ T5815] ath6kl: Failed to init ath6kl core: -71
[  534.428683][ T5903] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  534.438617][ T5815] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  534.464207][ T5903] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input84
[  534.484639][ T5903] dvb-usb: schedule remote query interval to 150 msecs.
[  534.488336][ T5815] usb 7-1: USB disconnect, device number 24
[  534.503182][ T5903] dw2102: su3000_power_ctrl: 0, initialized 1
[  534.509890][ T5903] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  534.541632][ T5903] usb 2-1: USB disconnect, device number 90
[  534.550404][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807b5e6000 (13)(macsec0) start
[  534.568676][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807b5e6000 (10)(macsec0) end
[  534.601266][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807d500000 (7)(macvtap0) start
[  534.626833][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807d500000 (7)(macvtap0) end
[  534.646677][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888022fdc000 (14)(veth0_macvtap) start
[  534.658486][ T5903] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  534.680579][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888022fdc000 (9)(veth0_macvtap) end
[  534.704111][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888022fde000 (14)(veth1_macvtap) start
[  534.725738][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888022fde000 (11)(veth1_macvtap) end
[  534.744864][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888078f42000 (13)(ipvlan1) start
[  534.764372][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888078f42000 (9)(ipvlan1) end
[  534.784176][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880299dc000 (12)(ipvlan0) start
[  534.804196][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880299dc000 (7)(ipvlan0) end
[  534.831555][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888021704000 (12)(macvlan1) start
[  534.849994][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888021704000 (7)(macvlan1) end
[  534.874316][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888059e44000 (12)(macvlan0) start
[  534.902948][ T3535] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888059e44000 (7)(macvlan0) end
[  534.946898][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888078b82000 (13)(vlan1) start
[  534.968293][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888078b82000 (8)(vlan1) end
[  534.969358][T13054] sctp: [Deprecated]: syz.6.1974 (pid 13054) Use of struct sctp_assoc_value in delayed_ack socket option.
[  534.969358][T13054] Use struct sctp_sack_info instead
[  535.014368][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88805cae0000 (8)(vlan0) start
[  535.046588][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88805cae0000 (8)(vlan0) end
[  535.085006][   T29] audit: type=1400 audit(1767838792.484:26): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13058 comm="syz.6.1975"
[  535.105175][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880780a4000 (15)(veth0_vlan) start
[  535.122615][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880780a4000 (10)(veth0_vlan) end
[  535.169049][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880780a6000 (15)(veth1_vlan) start
[  535.189597][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880780a6000 (10)(veth1_vlan) end
[  535.235970][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88803351c000 (6)(virt_wifi0) start
[  535.263059][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88803351c000 (6)(virt_wifi0) end
[  535.322866][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031b42000 (6)(veth0_virt_wifi) start
[  535.353325][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031b42000 (6)(veth0_virt_wifi) end
[  535.372569][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031b44000 (6)(veth1_virt_wifi) start
[  535.394681][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031b44000 (6)(veth1_virt_wifi) end
[  535.418574][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031952000 (5)(hsr0) start
[  535.437726][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031952000 (5)(hsr0) end
[  535.454752][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888058486000 (4)(hsr_slave_1) start
[  535.472109][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888058486000 (4)(hsr_slave_1) end
[  535.489728][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888078698000 (7)(veth1_to_hsr) start
[  535.509315][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888078698000 (7)(veth1_to_hsr) end
[  535.526425][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807ada6000 (5)(hsr_slave_0) start
[  535.544108][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807ada6000 (5)(hsr_slave_0) end
[  535.565917][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880243b6000 (8)(veth0_to_hsr) start
[  535.583445][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880243b6000 (8)(veth0_to_hsr) end
[  535.600913][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88805c882000 (13)(batadv_slave_1) start
[  535.618625][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88805c882000 (8)(batadv_slave_1) end
[  535.635727][   T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  535.644150][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88805c884000 (14)(veth1_to_batadv) start
[  535.661904][ T5824] Bluetooth: hci2: command tx timeout
[  535.668125][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88805c884000 (8)(veth1_to_batadv) end
[  535.694692][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807a04c000 (13)(batadv_slave_0) start
[  535.712332][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807a04c000 (8)(batadv_slave_0) end
[  535.730421][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807a04e000 (13)(veth0_to_batadv) start
[  535.748108][ T9608] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807a04e000 (8)(veth0_to_batadv) end
[  535.767386][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807d0fe000 (13)(team_slave_1) start
[  535.784693][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807d0fe000 (13)(team_slave_1) end
[  535.785265][ T8092] team0 (unregistering): Port device team_slave_1 removed
[  535.809011][   T24] usb 7-1: Using ep0 maxpacket: 32
[  535.818212][   T24] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  535.826886][   T24] usb 7-1: config 0 has no interface number 0
[  535.833066][   T24] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  535.845646][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880309ac000 (13)(veth1_to_team) start
[  535.864642][   T24] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  535.876083][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880309ac000 (8)(veth1_to_team) end
[  535.895060][ T8092] team0 (unregistering): Port device team_slave_0 removed
[  535.899664][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88806bcfe000 (15)(team_slave_0) start
[  535.921745][   T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88806bcfe000 (10)(team_slave_0) end
[  535.921919][   T24] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  535.949212][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.957474][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888029c1c000 (8)(veth0_to_team) start
[  535.976385][   T24] usb 7-1: Product: syz
[  535.980631][   T24] usb 7-1: Manufacturer: syz
[  535.985260][   T24] usb 7-1: SerialNumber: syz
[  535.990076][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888029c1c000 (8)(veth0_to_team) end
[  536.012792][   T24] usb 7-1: config 0 descriptor??
[  536.012990][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031a3e000 (4)(bond_slave_1) start
[  536.028007][   T24] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  536.044932][   T24] em28xx 7-1:0.132: Video interface 132 found: isoc
[  536.047014][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031a3e000 (4)(bond_slave_1) end
[  536.080092][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031a3c000 (12)(veth1_to_bond) start
[  536.097749][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff888031a3c000 (7)(veth1_to_bond) end
[  536.115108][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880314e6000 (11)(bond_slave_0) start
[  536.132782][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880314e6000 (4)(bond_slave_0) end
[  536.158895][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880314e4000 (12)(veth0_to_bond) start
[  536.176467][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880314e4000 (7)(veth0_to_bond) end
[  536.194594][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807a06e000 (12)(bridge_slave_1) start
[  536.212281][ T1134] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807a06e000 (5)(bridge_slave_1) end
[  536.229428][T13063] fuse: Bad value for 'fd'
[  536.247074][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807ca68000 (13)(veth1_to_bridge) start
[  536.264703][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807ca68000 (8)(veth1_to_bridge) end
[  536.282260][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880352f6000 (12)(bridge_slave_0) start
[  536.310250][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880352f6000 (5)(bridge_slave_0) end
[  536.328028][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880352f2000 (13)(veth0_to_bridge) start
[  536.345749][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff8880352f2000 (8)(veth0_to_bridge) end
[  536.401971][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807bb00000 (13)(veth1) start
[  536.418854][ T1042] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807bb00000 (8)(veth1) end
[  536.451900][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807bb02000 (13)(veth0) start
[  536.469003][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) rdma_ndev=ffff8880771c8000 (17)(vxcan1) cookie=ffff88807bb02000 (8)(veth0) end
[  536.489447][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (13)(syz2) start
[  536.504356][ T8170] smc: removing ib device syz2
[  536.778646][T12982] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.786231][T12982] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.793583][T12982] bridge_slave_0: entered allmulticast mode
[  536.808665][T12982] bridge_slave_0: entered promiscuous mode
[  536.847435][T12982] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.854640][    T9] vxcan1 speed is unknown, defaulting to 1000
[  536.865713][    T9] syz2: Port: 1 Link DOWN
[  536.874886][T12982] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.893101][T12982] bridge_slave_1: entered allmulticast mode
[  536.931732][T12982] bridge_slave_1: entered promiscuous mode
[  537.111666][T12982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  537.130379][T12982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  537.156054][   T24] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[  537.225942][ T5903] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  537.255665][ T5921] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  537.265431][T12982] team0: Port device team_slave_0 added
[  537.272737][   T24] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  537.283634][   T24] em28xx 7-1:0.132: board has no eeprom
[  537.297650][T12982] team0: Port device team_slave_1 added
[  537.346566][   T24] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  537.361802][   T24] em28xx 7-1:0.132: analog set to isoc mode.
[  537.368258][ T2151] em28xx 7-1:0.132: Registering V4L2 extension
[  537.382636][T12982] batman_adv: batadv0: Adding interface: batadv_slave_0
[  537.408343][ T5903] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  537.418706][ T5921] usb 2-1: Using ep0 maxpacket: 32
[  537.430237][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  537.438338][ T5921] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  537.476217][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.490392][ T5921] usb 2-1: config 0 has no interface number 0
[  537.521223][ T5903] usb 6-1: config 0 descriptor??
[  537.522430][T12982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  537.549122][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  537.569103][ T5921] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  537.573882][T12982] batman_adv: batadv0: Adding interface: batadv_slave_1
[  537.591298][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  537.602414][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  537.635889][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.643991][ T5921] usb 2-1: Product: syz
[  537.651189][T12982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.669139][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  537.705644][ T5921] usb 2-1: Manufacturer: syz
[  537.710317][ T5921] usb 2-1: SerialNumber: syz
[  537.715542][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  537.735798][ T5824] Bluetooth: hci2: command tx timeout
[  537.793110][ T5921] usb 2-1: config 0 descriptor??
[  537.856428][ T5921] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  537.892154][ T5921] dw2102: su3000_power_ctrl: 1, initialized 0
[  537.903775][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0x84 (error=-5)
[  537.925745][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  537.938679][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0x86 (error=-5)
[  537.952145][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  537.959884][T12982] hsr_slave_0: entered promiscuous mode
[  537.965498][ T5903] ath6kl: Unsupported hardware version: 0x0
[  537.989814][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0x94 (error=-5)
[  537.989885][T12982] hsr_slave_1: entered promiscuous mode
[  538.001301][ T5921] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  538.026545][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0x96 (error=-5)
[  538.035893][ T5903] ath6kl: Failed to init ath6kl core: -22
[  538.043002][ T5903] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22
[  538.055982][ T5921] usb 2-1: media controller created
[  538.056888][T12982] debugfs: 'hsr0' already exists in 'hsr'
[  538.073150][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  538.079341][T13068] em28xx 7-1:0.132: failed to trigger read from i2c address 0x0 (error=-5)
[  538.091946][T12982] Cannot create hsr debugfs directory
[  538.095168][ T5921] dw2102: i2c transfer failed.
[  538.112839][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  538.144033][ T5921] dw2102: i2c transfer failed.
[  538.163616][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  538.190512][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5)
[  538.202519][ T5921] dw2102: i2c transfer failed.
[  538.209154][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  538.215533][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5)
[  538.232257][ T5921] dw2102: i2c transfer failed.
[  538.247478][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5)
[  538.258714][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  538.266489][ T5921] dw2102: i2c transfer failed.
[  538.274536][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5)
[  538.283758][ T5921] dvb-usb: bulk message failed: -22 (6/0)
[  538.295023][ T2151] em28xx 7-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5)
[  538.311543][ T5921] dw2102: i2c transfer failed.
[  538.325996][ T5921] dvb-usb: MAC address: 02:02:02:02:02:02
[  538.335482][ T2151] em28xx 7-1:0.132: Config register raw data: 0xfffffffb
[  538.360392][ T5903] usb 6-1: USB disconnect, device number 45
[  538.366936][ T2151] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[  538.393351][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  538.402090][ T2151] em28xx 7-1:0.132: No AC97 audio processor
[  538.433831][ T2151] usb 7-1: Decoder not found
[  538.467324][ T2151] em28xx 7-1:0.132: failed to create media graph
[  538.488375][ T2151] em28xx 7-1:0.132: V4L2 device video103 deregistered
[  538.515931][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  538.531499][ T5921] dw2102: command 0x0e transfer failed.
[  538.538169][   T24] usb 7-1: USB disconnect, device number 25
[  538.555440][ T2151] em28xx 7-1:0.132: Remote control support is not available for this card.
[  538.578257][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  538.584027][ T5921] dw2102: command 0x0e transfer failed.
[  538.593799][   T24] em28xx 7-1:0.132: Disconnecting em28xx
[  538.602397][   T24] em28xx 7-1:0.132: Closing input extension
[  538.654484][   T24] em28xx 7-1:0.132: Freeing device
[  538.848359][ T8170] infiniband: Removed from hash: ib_dev=ffff888025634000 (0)(syz2) ndev=ffff8880771c8000 (4)(vxcan1)
[  538.902411][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  538.935974][ T5921] dw2102: command 0x0e transfer failed.
[  538.941560][ T5921] dvb-usb: bulk message failed: -22 (3/0)
[  538.984715][ T5921] dw2102: command 0x0e transfer failed.
[  538.995640][ T5921] dvb-usb: bulk message failed: -22 (1/0)
[  539.001387][ T5921] dw2102: command 0x51 transfer failed.
[  539.036119][   T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  539.123813][ T5921] DVB: Unable to find symbol ds3000_attach()
[  539.155627][ T5921] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  539.248666][   T24] usb 7-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  539.288585][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  539.313948][T12982] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  539.341188][   T24] usb 7-1: Product: syz
[  539.345424][   T24] usb 7-1: Manufacturer: syz
[  539.364145][T12982] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  539.365667][ T5921] rc_core: IR keymap rc-su3000 not found
[  539.376583][   T24] usb 7-1: SerialNumber: syz
[  539.391240][ T5921] Registered IR keymap rc-empty
[  539.393692][ T8170] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888025634000 (0)(syz2) end
[  539.397765][   T24] usb 7-1: config 0 descriptor??
[  539.424014][ T5921] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  539.426645][T12982] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  539.444491][   T24] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  539.460140][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  539.470419][ T5921] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input85
[  539.473265][T12982] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  539.496122][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  539.517505][ T5921] dvb-usb: schedule remote query interval to 150 msecs.
[  539.536189][ T5921] dw2102: su3000_power_ctrl: 0, initialized 1
[  539.542785][   T24] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  539.556719][ T5921] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  539.575884][   T24] usb 7-1: media controller created
[  539.608750][ T5921] usb 2-1: USB disconnect, device number 91
[  539.634100][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  539.731968][ T8092] IPVS: stop unused estimator thread 0...
[  539.739856][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  539.750152][ T5921] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  539.805679][ T5824] Bluetooth: hci2: command tx timeout
[  539.849394][T12982] 8021q: adding VLAN 0 to HW filter on device bond0
[  539.865125][   T24] DVB: Unable to find symbol mt352_attach()
[  539.871437][   T24] dvb-usb: bulk message failed: -22 (5/0)
[  539.889386][   T24] zl10353_read_register: readreg error (reg=127, ret==-121)
[  539.899821][T12982] 8021q: adding VLAN 0 to HW filter on device team0
[  539.915876][   T24] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  539.962818][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state
[  539.970060][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state
[  540.012327][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.019558][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state
[  540.057790][   T24] rc_core: IR keymap rc-dvico-mce not found
[  540.063724][   T24] Registered IR keymap rc-empty
[  540.092971][   T24] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  540.116976][   T24] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input86
[  540.139047][   T24] dvb-usb: schedule remote query interval to 100 msecs.
[  540.148127][   T24] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  540.226878][   T24] usb 7-1: USB disconnect, device number 26
[  540.346111][   T24] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  540.505742][ T5815] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  540.666774][ T5815] usb 6-1: device descriptor read/64, error -71
[  540.701284][T12982] 8021q: adding VLAN 0 to HW filter on device batadv0
[  540.825697][   T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  540.865716][ T5905] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  540.997238][   T24] usb 2-1: Using ep0 maxpacket: 32
[  541.004327][   T24] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  541.013156][   T24] usb 2-1: config 0 has no interface number 0
[  541.026225][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  541.031374][T12982] veth0_vlan: entered promiscuous mode
[  541.038469][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.041136][ T5905] usb 7-1: Using ep0 maxpacket: 32
[  541.049705][   T24] usb 2-1: Product: syz
[  541.058588][   T24] usb 2-1: Manufacturer: syz
[  541.062009][ T5905] usb 7-1: config 0 has an invalid interface number: 76 but max is 0
[  541.065788][   T24] usb 2-1: SerialNumber: syz
[  541.080149][T12982] veth1_vlan: entered promiscuous mode
[  541.085912][ T5905] usb 7-1: config 0 has no interface number 0
[  541.087081][   T24] usb 2-1: config 0 descriptor??
[  541.096395][ T5905] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  541.111178][   T24] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  541.112628][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.128793][ T5905] usb 7-1: Product: syz
[  541.133106][   T24] dw2102: su3000_power_ctrl: 1, initialized 0
[  541.133151][ T5905] usb 7-1: Manufacturer: syz
[  541.144717][ T5905] usb 7-1: SerialNumber: syz
[  541.157490][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  541.175112][ T5905] usb 7-1: config 0 descriptor??
[  541.182090][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  541.202800][ T5905] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  541.204282][   T24] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  541.223380][ T5905] dw2102: su3000_power_ctrl: 1, initialized 0
[  541.224562][T12982] veth0_macvtap: entered promiscuous mode
[  541.237617][ T5905] dvb-usb: bulk message failed: -22 (2/0)
[  541.254460][   T24] usb 2-1: media controller created
[  541.256533][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  541.261451][T12982] veth1_macvtap: entered promiscuous mode
[  541.274866][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  541.275531][ T5905] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  541.281893][   T24] dw2102: i2c transfer failed.
[  541.293333][ T5905] usb 7-1: media controller created
[  541.317116][T13142] dvb-usb: bulk message failed: -22 (3/0)
[  541.323024][T13142] dw2102: i2c transfer failed.
[  541.329276][ T5905] dvb-usb: bulk message failed: -22 (6/0)
[  541.333959][T12982] batman_adv: batadv0: Interface activated: batadv_slave_0
[  541.348266][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  541.358163][   T24] dw2102: i2c transfer failed.
[  541.366025][ T5905] dw2102: i2c transfer failed.
[  541.370837][ T5905] dvb-usb: bulk message failed: -22 (6/0)
[  541.373270][T12982] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.384358][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  541.391042][ T5905] dw2102: i2c transfer failed.
[  541.393403][   T24] dw2102: i2c transfer failed.
[  541.403776][ T5905] dvb-usb: bulk message failed: -22 (6/0)
[  541.414733][ T1134] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.415932][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  541.430341][   T24] dw2102: i2c transfer failed.
[  541.433773][ T5905] dw2102: i2c transfer failed.
[  541.435130][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  541.445055][ T1134] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.461108][   T24] dw2102: i2c transfer failed.
[  541.461574][ T5905] dvb-usb: bulk message failed: -22 (6/0)
[  541.475304][ T1134] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.484162][T13145] dvb-usb: bulk message failed: -22 (3/0)
[  541.484185][T13145] dw2102: i2c transfer failed.
[  541.489939][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  541.493651][ T5905] dw2102: i2c transfer failed.
[  541.506194][   T24] dw2102: i2c transfer failed.
[  541.506215][   T24] dvb-usb: MAC address: 02:02:02:02:02:02
[  541.520518][ T1134] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.530861][ T5905] dvb-usb: bulk message failed: -22 (6/0)
[  541.537065][ T5905] dw2102: i2c transfer failed.
[  541.543018][ T5905] dvb-usb: bulk message failed: -22 (6/0)
[  541.549987][ T5905] dw2102: i2c transfer failed.
[  541.552332][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  541.554937][ T5905] dvb-usb: MAC address: 02:02:02:02:02:02
[  541.641244][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  541.654848][   T24] dw2102: command 0x0e transfer failed.
[  541.660156][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  541.664995][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  541.678174][ T8170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.691397][   T24] dw2102: command 0x0e transfer failed.
[  541.698008][ T5905] dvb-usb: bulk message failed: -22 (3/0)
[  541.699845][ T8170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.705156][ T5905] dw2102: command 0x0e transfer failed.
[  541.720463][ T5905] dvb-usb: bulk message failed: -22 (3/0)
[  541.729420][ T5905] dw2102: command 0x0e transfer failed.
[  541.742140][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  541.751515][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  541.970244][T13178] ./bus: Can't lookup blockdev
[  541.988670][T13180] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  542.006198][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  542.011965][   T24] dw2102: command 0x0e transfer failed.
[  542.044467][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  542.056078][   T24] dw2102: command 0x0e transfer failed.
[  542.063886][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  542.066397][ T5905] dvb-usb: bulk message failed: -22 (3/0)
[  542.077713][ T5905] dw2102: command 0x0e transfer failed.
[  542.083379][ T5905] dvb-usb: bulk message failed: -22 (3/0)
[  542.090790][ T5905] dw2102: command 0x0e transfer failed.
[  542.091285][   T24] dw2102: command 0x51 transfer failed.
[  542.104116][ T5905] dvb-usb: bulk message failed: -22 (1/0)
[  542.118341][ T5905] dw2102: command 0x51 transfer failed.
[  542.174163][   T24] DVB: Unable to find symbol ds3000_attach()
[  542.178764][ T5905] DVB: Unable to find symbol ds3000_attach()
[  542.190521][ T5905] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  542.200326][   T24] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  542.276058][   T24] rc_core: IR keymap rc-su3000 not found
[  542.281709][   T24] Registered IR keymap rc-empty
[  542.292891][   T24] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  542.299549][ T5905] rc_core: IR keymap rc-su3000 not found
[  542.319755][ T5905] Registered IR keymap rc-empty
[  542.320971][   T24] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input87
[  542.335888][ T5905] rc rc1: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc1
[  542.358187][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  542.358510][ T5905] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc1/input88
[  542.382161][ T5905] dvb-usb: schedule remote query interval to 150 msecs.
[  542.387639][   T24] dw2102: su3000_power_ctrl: 0, initialized 1
[  542.391410][ T5905] dw2102: su3000_power_ctrl: 0, initialized 1
[  542.402638][   T24] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  542.402953][ T5905] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  542.428429][   T24] usb 2-1: USB disconnect, device number 92
[  542.430238][T13193] bond0: entered promiscuous mode
[  542.440807][T13193] bond_slave_0: entered promiscuous mode
[  542.448972][T13193] bond_slave_1: entered promiscuous mode
[  542.462643][T13193] syz_tun: entered promiscuous mode
[  542.465424][ T5905] usb 7-1: USB disconnect, device number 27
[  542.520118][   T24] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  542.572509][ T5905] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  542.845888][   T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  542.895858][ T5905] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  543.005797][   T24] usb 2-1: Using ep0 maxpacket: 16
[  543.014774][   T24] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  543.024094][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.032507][   T24] usb 2-1: Product: syz
[  543.036894][   T24] usb 2-1: Manufacturer: syz
[  543.041500][   T24] usb 2-1: SerialNumber: syz
[  543.048121][   T24] usb 2-1: config 0 descriptor??
[  543.059026][ T5905] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  543.069644][ T5905] usb 7-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[  543.079154][ T5905] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  543.092689][ T5905] usb 7-1: config 220 interface 0 has no altsetting 0
[  543.099856][ T5905] usb 7-1: config 220 interface 1 has no altsetting 0
[  543.109263][ T5905] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  543.119053][ T5918] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  543.126737][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.134741][ T5905] usb 7-1: Product: syz
[  543.140186][ T5905] usb 7-1: Manufacturer: syz
[  543.144794][ T5905] usb 7-1: SerialNumber: syz
[  543.265812][   T24] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  543.285550][   T24] usb 2-1: USB disconnect, device number 93
[  543.298027][ T5918] usb 6-1: Using ep0 maxpacket: 32
[  543.305059][ T5918] usb 6-1: config 0 has an invalid interface number: 76 but max is 0
[  543.313563][ T5918] usb 6-1: config 0 has no interface number 0
[  543.323218][ T5918] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  543.333511][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.342218][ T5918] usb 6-1: Product: syz
[  543.346560][ T5918] usb 6-1: Manufacturer: syz
[  543.351204][ T5918] usb 6-1: SerialNumber: syz
[  543.359870][ T5918] usb 6-1: config 0 descriptor??
[  543.369588][ T5918] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  543.378652][ T5918] dw2102: su3000_power_ctrl: 1, initialized 0
[  543.384772][ T5918] dvb-usb: bulk message failed: -22 (2/0)
[  543.387661][T13189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.402073][T13189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.404912][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  543.426930][ T5905] uvcvideo 7-1:220.0: probe with driver uvcvideo failed with error -22
[  543.436403][ T5918] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  543.448644][ T5918] usb 6-1: media controller created
[  543.455406][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  543.461686][ T5905] usb 7-1: USB disconnect, device number 28
[  543.468156][ T5918] dw2102: i2c transfer failed.
[  543.472978][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  543.481699][ T5918] dw2102: i2c transfer failed.
[  543.489741][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  543.495984][ T5918] dw2102: i2c transfer failed.
[  543.500765][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  543.506619][ T5918] dw2102: i2c transfer failed.
[  543.511401][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  543.518732][ T5918] dw2102: i2c transfer failed.
[  543.523529][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  543.529657][ T5918] dw2102: i2c transfer failed.
[  543.534427][ T5918] dvb-usb: MAC address: 02:02:02:02:02:02
[  543.548174][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  543.563955][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  543.572781][ T5918] dw2102: command 0x0e transfer failed.
[  543.578613][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  543.584373][ T5918] dw2102: command 0x0e transfer failed.
[  543.816713][T13203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2002'.
[  543.826019][T13203] tipc: Invalid UDP bearer configuration
[  543.826054][T13203] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  543.842807][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2002'.
[  543.905806][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  543.913154][ T5918] dw2102: command 0x0e transfer failed.
[  543.921557][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  543.927639][ T5918] dw2102: command 0x0e transfer failed.
[  543.933208][ T5918] dvb-usb: bulk message failed: -22 (1/0)
[  543.956168][ T5918] dw2102: command 0x51 transfer failed.
[  543.964458][T13201] dvb-usb: bulk message failed: -22 (4/0)
[  543.983537][T13201] dw2102: i2c transfer failed.
[  544.048829][ T5918] DVB: Unable to find symbol ds3000_attach()
[  544.054888][ T5918] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  544.116500][ T5918] rc_core: IR keymap rc-su3000 not found
[  544.122198][ T5918] Registered IR keymap rc-empty
[  544.129791][ T5918] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  544.142122][ T5918] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input89
[  544.154907][ T5918] dvb-usb: schedule remote query interval to 150 msecs.
[  544.161924][ T5918] dw2102: su3000_power_ctrl: 0, initialized 1
[  544.168049][ T5918] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  544.181517][ T5918] usb 6-1: USB disconnect, device number 48
[  544.241519][ T5918] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  544.255838][   T24] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[  544.437363][   T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  544.448896][   T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  544.460050][   T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  544.469166][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.480004][T13213] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  544.487599][T13213] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  544.497785][   T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  544.748341][T13213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.757818][T13213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.775398][    T9] usb 7-1: USB disconnect, device number 29
[  544.845901][ T5918] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  544.955727][ T5905] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  545.000837][ T5918] usb 6-1: Using ep0 maxpacket: 32
[  545.014849][ T5918] usb 6-1: config 0 has an invalid interface number: 76 but max is 0
[  545.025231][ T5918] usb 6-1: config 0 has no interface number 0
[  545.040043][ T5918] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  545.051269][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.059312][ T5918] usb 6-1: Product: syz
[  545.063499][ T5918] usb 6-1: Manufacturer: syz
[  545.068166][ T5918] usb 6-1: SerialNumber: syz
[  545.074724][ T5918] usb 6-1: config 0 descriptor??
[  545.082550][ T5918] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  545.091638][ T5905] usb 2-1: device descriptor read/64, error -71
[  545.098161][ T5918] dw2102: su3000_power_ctrl: 1, initialized 0
[  545.104235][ T5918] dvb-usb: bulk message failed: -22 (2/0)
[  545.112373][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  545.123038][ T5918] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  545.132673][ T5918] usb 6-1: media controller created
[  545.137958][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  545.143700][ T5918] dw2102: i2c transfer failed.
[  545.148609][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  545.154338][ T5918] dw2102: i2c transfer failed.
[  545.159165][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  545.164891][ T5918] dw2102: i2c transfer failed.
[  545.170292][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  545.176122][ T5918] dw2102: i2c transfer failed.
[  545.180931][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  545.186731][ T5918] dw2102: i2c transfer failed.
[  545.191596][ T5918] dvb-usb: bulk message failed: -22 (6/0)
[  545.197352][ T5918] dw2102: i2c transfer failed.
[  545.202117][ T5918] dvb-usb: MAC address: 02:02:02:02:02:02
[  545.215111][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  545.233056][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  545.238980][ T5918] dw2102: command 0x0e transfer failed.
[  545.244515][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  545.251106][ T5918] dw2102: command 0x0e transfer failed.
[  545.346233][ T5905] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  545.487934][ T5905] usb 2-1: device descriptor read/64, error -71
[  545.567963][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  545.567980][ T5918] dw2102: command 0x0e transfer failed.
[  545.567987][ T5918] dvb-usb: bulk message failed: -22 (3/0)
[  545.567995][ T5918] dw2102: command 0x0e transfer failed.
[  545.568000][ T5918] dvb-usb: bulk message failed: -22 (1/0)
[  545.568008][ T5918] dw2102: command 0x51 transfer failed.
[  545.568068][T13216] dvb-usb: bulk message failed: -22 (3/0)
[  545.568084][T13216] dw2102: i2c transfer failed.
[  545.593495][ T5918] DVB: Unable to find symbol ds3000_attach()
[  545.593510][ T5918] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  545.596271][ T5905] usb usb2-port1: attempt power cycle
[  545.612008][T13233] netlink: 'syz.6.2011': attribute type 10 has an invalid length.
[  545.652030][ T5918] rc_core: IR keymap rc-su3000 not found
[  545.652052][ T5918] Registered IR keymap rc-empty
[  545.653319][ T5918] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  545.658622][ T5918] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input90
[  545.672707][ T5918] dvb-usb: schedule remote query interval to 150 msecs.
[  545.672735][ T5918] dw2102: su3000_power_ctrl: 0, initialized 1
[  545.672748][ T5918] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  545.685359][ T5918] usb 6-1: USB disconnect, device number 49
[  545.772619][ T5918] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  545.935671][ T5905] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  545.941626][T13233] team0 (unregistering): Port device team_slave_0 removed
[  545.955497][T13233] team0 (unregistering): Port device team_slave_1 removed
[  545.968503][ T5905] usb 2-1: device descriptor read/8, error -71
[  546.205785][ T5905] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  546.226281][ T5905] usb 2-1: device descriptor read/8, error -71
[  546.295742][ T5918] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  546.336932][ T5905] usb usb2-port1: unable to enumerate USB device
[  546.435772][ T5815] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  546.455755][ T5918] usb 7-1: Using ep0 maxpacket: 8
[  546.462666][ T5918] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  546.472688][ T5918] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  546.482705][ T5918] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  546.493294][ T5918] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  546.507180][ T5918] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  546.516665][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.595708][ T5815] usb 6-1: Using ep0 maxpacket: 32
[  546.602592][ T5815] usb 6-1: config 0 has an invalid interface number: 76 but max is 0
[  546.611521][ T5815] usb 6-1: config 0 has no interface number 0
[  546.622069][ T5815] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  546.631509][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.639785][ T5815] usb 6-1: Product: syz
[  546.644174][ T5815] usb 6-1: Manufacturer: syz
[  546.648855][ T5815] usb 6-1: SerialNumber: syz
[  546.655948][ T5815] usb 6-1: config 0 descriptor??
[  546.667784][ T5815] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  546.676725][ T5815] dw2102: su3000_power_ctrl: 1, initialized 0
[  546.682844][ T5815] dvb-usb: bulk message failed: -22 (2/0)
[  546.691657][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  546.701668][ T5815] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  546.711287][ T5815] usb 6-1: media controller created
[  546.716555][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  546.722323][ T5815] dw2102: i2c transfer failed.
[  546.727255][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  546.733047][ T5815] dw2102: i2c transfer failed.
[  546.737946][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  546.740993][T13237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.744736][ T5815] dw2102: i2c transfer failed.
[  546.757776][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  546.763552][ T5815] dw2102: i2c transfer failed.
[  546.764169][T13237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.779618][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  546.787156][ T5815] dw2102: i2c transfer failed.
[  546.792111][ T5918] usb 7-1: usb_control_msg returned -71
[  546.798217][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  546.803933][ T5815] dw2102: i2c transfer failed.
[  546.809651][ T5918] usbtmc 7-1:16.0: can't read capabilities
[  546.815620][ T5815] dvb-usb: MAC address: 02:02:02:02:02:02
[  546.833108][ T5918] usb 7-1: USB disconnect, device number 30
[  546.844865][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  546.864797][T13239] dvb-usb: bulk message failed: -22 (4/0)
[  546.871168][T13239] dw2102: i2c transfer failed.
[  546.883368][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  546.891512][ T5815] dw2102: command 0x0e transfer failed.
[  546.897602][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  546.904135][ T5815] dw2102: command 0x0e transfer failed.
[  547.215689][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  547.221568][ T5815] dw2102: command 0x0e transfer failed.
[  547.228175][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  547.233996][ T5815] dw2102: command 0x0e transfer failed.
[  547.239690][ T5815] dvb-usb: bulk message failed: -22 (1/0)
[  547.245452][ T5815] dw2102: command 0x51 transfer failed.
[  547.270648][ T5815] DVB: Unable to find symbol ds3000_attach()
[  547.276699][ T5815] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  547.346143][ T5815] rc_core: IR keymap rc-su3000 not found
[  547.351826][ T5815] Registered IR keymap rc-empty
[  547.358593][ T5815] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  547.371715][ T5815] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input91
[  547.397247][ T5815] dvb-usb: schedule remote query interval to 150 msecs.
[  547.418271][ T5815] dw2102: su3000_power_ctrl: 0, initialized 1
[  547.424834][ T5815] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  547.448956][ T5815] usb 6-1: USB disconnect, device number 50
[  547.561357][ T5815] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  547.662020][T13254] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2018'.
[  547.777691][T13259] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2020'.
[  547.842722][T13262] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  547.859465][T13262] exFAT-fs (nullb0): invalid boot record signature
[  547.866582][T13262] exFAT-fs (nullb0): failed to read boot sector
[  547.872828][T13262] exFAT-fs (nullb0): failed to recognize exfat type
[  547.885868][ T5815] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  548.056161][ T5815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.079010][ T5815] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  548.112425][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.136358][ T5815] usb 6-1: config 0 descriptor??
[  548.149622][ T5815] usb 6-1: bad CDC descriptors
[  548.335693][ T5815] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  548.344705][T13273] netlink: 'syz.1.2024': attribute type 1 has an invalid length.
[  548.352792][T13273] netlink: 476 bytes leftover after parsing attributes in process `syz.1.2024'.
[  548.362356][T13273] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2024'.
[  548.495657][ T5815] usb 7-1: Using ep0 maxpacket: 32
[  548.503771][ T5815] usb 7-1: config 0 has an invalid interface number: 76 but max is 0
[  548.513658][ T5815] usb 7-1: config 0 has no interface number 0
[  548.531993][ T5815] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  548.541660][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.551937][ T5815] usb 7-1: Product: syz
[  548.556203][ T5815] usb 7-1: Manufacturer: syz
[  548.560823][ T5815] usb 7-1: SerialNumber: syz
[  548.567327][ T5815] usb 7-1: config 0 descriptor??
[  548.580026][ T5815] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  548.589025][ T5815] dw2102: su3000_power_ctrl: 1, initialized 0
[  548.595129][ T5815] dvb-usb: bulk message failed: -22 (2/0)
[  548.603525][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  548.613597][ T5815] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  548.623067][ T5815] usb 7-1: media controller created
[  548.628341][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  548.634064][ T5815] dw2102: i2c transfer failed.
[  548.639058][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  548.644816][ T5815] dw2102: i2c transfer failed.
[  548.649666][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  548.655392][ T5815] dw2102: i2c transfer failed.
[  548.663029][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  548.668805][ T5815] dw2102: i2c transfer failed.
[  548.673586][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  548.679384][ T5815] dw2102: i2c transfer failed.
[  548.684166][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  548.690331][ T5815] dw2102: i2c transfer failed.
[  548.695136][ T5815] dvb-usb: MAC address: 02:02:02:02:02:02
[  548.733081][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  548.752488][ T5921] usb 6-1: USB disconnect, device number 51
[  548.780406][T13266] dvb-usb: bulk message failed: -22 (4/0)
[  548.788985][T13266] dw2102: i2c transfer failed.
[  548.793991][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  548.801775][ T5815] dw2102: command 0x0e transfer failed.
[  548.807522][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  548.813359][ T5815] dw2102: command 0x0e transfer failed.
[  549.087611][ T5918] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  549.125699][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  549.131493][ T5815] dw2102: command 0x0e transfer failed.
[  549.137862][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  549.144070][ T5815] dw2102: command 0x0e transfer failed.
[  549.149710][ T5815] dvb-usb: bulk message failed: -22 (1/0)
[  549.155454][ T5815] dw2102: command 0x51 transfer failed.
[  549.181103][ T5815] DVB: Unable to find symbol ds3000_attach()
[  549.187175][ T5815] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  549.246043][ T5815] rc_core: IR keymap rc-su3000 not found
[  549.251900][ T5815] Registered IR keymap rc-empty
[  549.262781][ T5815] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  549.277548][ T5815] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input92
[  549.291556][ T5918] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  549.300729][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.310311][ T5815] dvb-usb: schedule remote query interval to 150 msecs.
[  549.326950][ T5918] usb 2-1: Product: syz
[  549.331507][ T5918] usb 2-1: Manufacturer: syz
[  549.336340][ T5815] dw2102: su3000_power_ctrl: 0, initialized 1
[  549.343573][ T5815] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  549.354212][ T5918] usb 2-1: SerialNumber: syz
[  549.370512][ T5815] usb 7-1: USB disconnect, device number 31
[  549.454067][ T5815] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  549.555725][ T5921] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  549.709858][ T5921] usb 6-1: unable to get BOS descriptor or descriptor too short
[  549.718242][ T5921] usb 6-1: not running at top speed; connect to a high speed hub
[  549.727426][ T5921] usb 6-1: config 129 has an invalid interface number: 28 but max is 0
[  549.735802][ T5921] usb 6-1: config 129 has no interface number 0
[  549.743522][ T5921] usb 6-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  549.756130][ T5921] usb 6-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64
[  549.768850][ T5921] usb 6-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  549.769261][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  549.782332][ T5921] usb 6-1: config 129 interface 28 has no altsetting 0
[  549.785123][ T5921] usb 6-1: string descriptor 0 read error: -22
[  549.796510][ T5815] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  549.803383][ T5921] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57
[  549.808541][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  549.815469][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.849756][T13291] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  549.859859][ T5921] etas_es58x 6-1:129.28: Starting (null) (null) (Serial Number (null))
[  549.869412][ T5921] etas_es58x 6-1:129.28: could not retrieve the product info string
[  549.966451][ T5815] usb 7-1: Using ep0 maxpacket: 8
[  549.982083][ T5815] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  549.991728][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  550.000547][ T5815] usb 7-1: Product: syz
[  550.005039][ T5815] usb 7-1: Manufacturer: syz
[  550.010411][ T5815] usb 7-1: SerialNumber: syz
[  550.019925][ T5815] usb 7-1: config 0 descriptor??
[  550.040147][ T5815] gspca_main: sq905-2.14.0 probing 2770:9120
[  550.073546][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.083852][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.094152][ T5921] usb 6-1: USB disconnect, device number 52
[  550.102337][ T5921] etas_es58x 6-1:129.28: Disconnecting (null) (null)
[  550.236277][T13293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.248353][T13293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.258633][T13293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.267927][T13293] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.294640][ T5815] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  550.303239][ T5815] sq905 7-1:0.0: probe with driver sq905 failed with error -71
[  550.325235][ T5815] usb 7-1: USB disconnect, device number 32
[  550.434021][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.443332][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.674775][T13316] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2032'.
[  550.889513][T13316] smc: removing net device bond0 with user defined pnetid SYZ2
[  550.918181][T13316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  550.933933][T13316] bond_slave_0: left promiscuous mode
[  550.952750][T13316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  550.962207][T13316] bond_slave_1: left promiscuous mode
[  550.982556][T13316] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  550.992202][T13316] syz_tun: left promiscuous mode
[  551.003941][T13316] bond0 (unregistering): Released all slaves
[  551.060209][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  551.147184][ T5815] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  551.306115][ T5815] usb 7-1: Using ep0 maxpacket: 32
[  551.327267][ T5815] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.339078][ T5815] usb 7-1: config 0 interface 0 has no altsetting 0
[  551.354127][ T5815] usb 7-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  551.376071][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.438394][ T5815] usb 7-1: config 0 descriptor??
[  551.497930][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  551.546892][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  551.575807][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  551.592063][ T5918] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  551.603565][ T5918] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  551.626586][ T5918] usb 2-1: USB disconnect, device number 98
[  551.695743][   T36] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  551.856227][   T36] usb 6-1: Using ep0 maxpacket: 32
[  551.869258][   T36] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[  551.871910][ T5815] waltop 0003:172F:0034.0023: item fetching failed at offset 5/6
[  551.887474][ T5815] waltop 0003:172F:0034.0023: probe with driver waltop failed with error -22
[  551.889338][   T36] usb 6-1: config 0 has no interface number 0
[  551.915809][   T36] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  551.936014][   T36] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  551.958322][   T36] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  551.975676][   T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.991440][   T36] usb 6-1: Product: syz
[  551.996083][   T36] usb 6-1: Manufacturer: syz
[  552.000699][   T36] usb 6-1: SerialNumber: syz
[  552.016897][   T36] usb 6-1: config 0 descriptor??
[  552.022650][T13339] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  552.033166][T13339] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  552.070395][   T36] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 8e:79:d9:02:41:ac
[  552.077561][T13324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.132530][T13324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.176002][ T5905] usb 7-1: USB disconnect, device number 33
[  552.455682][   T36] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  552.625834][   T36] usb 2-1: Using ep0 maxpacket: 32
[  552.635683][   T36] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  552.651605][   T36] usb 2-1: config 0 has no interface number 0
[  552.676666][   T36] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  552.699155][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.719974][   T36] usb 2-1: Product: syz
[  552.724274][   T36] usb 2-1: Manufacturer: syz
[  552.729473][   T36] usb 2-1: SerialNumber: syz
[  552.749626][   T36] usb 2-1: config 0 descriptor??
[  552.765002][   T36] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  552.786854][   T36] dw2102: su3000_power_ctrl: 1, initialized 0
[  552.800788][   T36] dvb-usb: bulk message failed: -22 (2/0)
[  552.818393][   T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  552.833214][   T36] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  552.853858][T13370] kvm: kvm [13369]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x4
[  552.859129][   T36] usb 2-1: media controller created
[  552.879195][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  552.885075][   T36] dw2102: i2c transfer failed.
[  552.890025][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  552.897957][   T36] dw2102: i2c transfer failed.
[  552.902838][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  552.909913][   T36] dw2102: i2c transfer failed.
[  552.922288][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  552.941898][   T36] dw2102: i2c transfer failed.
[  552.956907][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  552.996014][   T36] dw2102: i2c transfer failed.
[  553.001007][T13354] dvb-usb: bulk message failed: -22 (3/0)
[  553.013591][T13354] dw2102: i2c transfer failed.
[  553.019252][T13354] dvb-usb: bulk message failed: -22 (4/0)
[  553.025080][T13354] dw2102: i2c transfer failed.
[  553.031432][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  553.043592][   T36] dw2102: i2c transfer failed.
[  553.052806][   T36] dvb-usb: MAC address: 02:02:02:02:02:02
[  553.074661][   T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  553.106027][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  553.111785][   T36] dw2102: command 0x0e transfer failed.
[  553.120180][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  553.126309][   T36] dw2102: command 0x0e transfer failed.
[  553.205665][ T5815] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  553.355638][ T5815] usb 7-1: Using ep0 maxpacket: 32
[  553.363952][ T5815] usb 7-1: config 0 has an invalid interface number: 76 but max is 0
[  553.372868][ T5815] usb 7-1: config 0 has no interface number 0
[  553.383316][ T5815] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  553.393075][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.403670][ T5815] usb 7-1: Product: syz
[  553.411448][ T5815] usb 7-1: Manufacturer: syz
[  553.416691][ T5815] usb 7-1: SerialNumber: syz
[  553.426156][ T5815] usb 7-1: config 0 descriptor??
[  553.435677][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  553.439445][ T5815] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  553.446666][   T36] dw2102: command 0x0e transfer failed.
[  553.451146][ T5815] dw2102: su3000_power_ctrl: 1, initialized 0
[  553.462491][ T5815] dvb-usb: bulk message failed: -22 (2/0)
[  553.468786][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  553.473395][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  553.484210][   T36] dw2102: command 0x0e transfer failed.
[  553.485130][ T5815] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  553.490201][   T36] dvb-usb: bulk message failed: -22 (1/0)
[  553.502316][ T5815] usb 7-1: media controller created
[  553.512897][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  553.521413][ T5815] dw2102: i2c transfer failed.
[  553.525545][   T36] dw2102: command 0x51 transfer failed.
[  553.533937][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  553.563361][ T5815] dw2102: i2c transfer failed.
[  553.582952][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  553.584826][   T36] DVB: Unable to find symbol ds3000_attach()
[  553.604142][ T5815] dw2102: i2c transfer failed.
[  553.605709][   T36] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  553.618196][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  553.624522][ T5815] dw2102: i2c transfer failed.
[  553.631677][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  553.638801][T13374] FAULT_INJECTION: forcing a failure.
[  553.638801][T13374] name failslab, interval 1, probability 0, space 0, times 1
[  553.660534][ T5815] dw2102: i2c transfer failed.
[  553.669198][T13374] CPU: 0 UID: 0 PID: 13374 Comm: syz.6.2042 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.669226][T13374] Tainted: [L]=SOFTLOCKUP
[  553.669233][T13374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  553.669246][T13374] Call Trace:
[  553.669254][T13374]  <TASK>
[  553.669262][T13374]  dump_stack_lvl+0xe8/0x150
[  553.669288][T13374]  should_fail_ex+0x414/0x560
[  553.669318][T13374]  should_failslab+0xa8/0x100
[  553.669342][T13374]  __kmalloc_noprof+0xdf/0x800
[  553.669378][T13374]  ? kfree+0x4d/0x660
[  553.669398][T13374]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  553.669429][T13374]  tomoyo_realpath_from_path+0xe3/0x5d0
[  553.669454][T13374]  ? tomoyo_domain+0xd8/0x130
[  553.669482][T13374]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  553.669502][T13374]  tomoyo_path_number_perm+0x1e8/0x5a0
[  553.669526][T13374]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  553.669546][T13374]  ? __lock_acquire+0x6b6/0x2cf0
[  553.669583][T13374]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  553.669618][T13374]  ? __fget_files+0x2a/0x420
[  553.669643][T13374]  ? __fget_files+0x2a/0x420
[  553.669663][T13374]  ? __fget_files+0x3a0/0x420
[  553.669683][T13374]  ? __fget_files+0x2a/0x420
[  553.669707][T13374]  security_file_ioctl+0xcb/0x2d0
[  553.669728][T13374]  __se_sys_ioctl+0x47/0x170
[  553.669746][T13374]  do_syscall_64+0xec/0xf80
[  553.669760][T13374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.669776][T13374]  ? trace_irq_disable+0x37/0x100
[  553.669793][T13374]  ? clear_bhb_loop+0x40/0x90
[  553.669814][T13374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.669831][T13374] RIP: 0033:0x7feab858f749
[  553.669860][T13374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  553.669874][T13374] RSP: 002b:00007feab93dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  553.669894][T13374] RAX: ffffffffffffffda RBX: 00007feab87e5fa0 RCX: 00007feab858f749
[  553.669907][T13374] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004
[  553.669917][T13374] RBP: 00007feab93dc090 R08: 0000000000000000 R09: 0000000000000000
[  553.669927][T13374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  553.669936][T13374] R13: 00007feab87e6038 R14: 00007feab87e5fa0 R15: 00007ffcf30828e8
[  553.669962][T13374]  </TASK>
[  553.669969][T13374] ERROR: Out of memory at tomoyo_realpath_from_path.
[  553.735869][   T36] rc_core: IR keymap rc-su3000 not found
[  553.749597][ T5815] dvb-usb: bulk message failed: -22 (6/0)
[  553.764422][   T36] Registered IR keymap rc-empty
[  553.779522][T13374] dvb-usb: bulk message failed: -22 (3/0)
[  553.779541][T13374] dw2102: i2c transfer failed.
[  553.779551][T13374] dvb-usb: bulk message failed: -22 (4/0)
[  553.779564][T13374] dw2102: i2c transfer failed.
[  553.780898][ T5815] dw2102: i2c transfer failed.
[  553.814191][   T36] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  553.820672][   T36] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input93
[  553.826697][ T5815] dvb-usb: MAC address: 02:02:02:02:02:02
[  553.838334][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  553.887902][   T36] dvb-usb: schedule remote query interval to 150 msecs.
[  553.929235][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  553.973702][   T36] dw2102: su3000_power_ctrl: 0, initialized 1
[  553.982017][ T5815] dw2102: command 0x0e transfer failed.
[  554.000099][   T36] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  554.001397][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  554.025801][   T36] usb 2-1: USB disconnect, device number 99
[  554.053066][ T5815] dw2102: command 0x0e transfer failed.
[  554.150692][   T36] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  554.384489][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  554.390637][ T5815] dw2102: command 0x0e transfer failed.
[  554.398067][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[  554.405061][ T5815] dw2102: command 0x0e transfer failed.
[  554.421853][ T5815] dvb-usb: bulk message failed: -22 (1/0)
[  554.435828][ T5815] dw2102: command 0x51 transfer failed.
[  554.445306][ T5918] usb 6-1: USB disconnect, device number 53
[  554.456091][   T36] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  554.478013][ T5918] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  554.564105][ T5815] DVB: Unable to find symbol ds3000_attach()
[  554.570455][ T5815] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  554.616663][   T36] usb 2-1: Using ep0 maxpacket: 32
[  554.627022][   T36] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  554.635130][   T36] usb 2-1: config 0 has no interface number 0
[  554.691236][   T36] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  554.711995][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.728218][ T5815] rc_core: IR keymap rc-su3000 not found
[  554.733098][   T36] usb 2-1: Product: syz
[  554.745305][   T36] usb 2-1: Manufacturer: syz
[  554.747933][ T5815] Registered IR keymap rc-empty
[  554.765007][   T36] usb 2-1: SerialNumber: syz
[  554.771987][ T5815] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  554.788026][   T36] usb 2-1: config 0 descriptor??
[  554.792683][ T5815] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input94
[  554.829575][   T36] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  554.860229][ T5815] dvb-usb: schedule remote query interval to 150 msecs.
[  554.860226][   T36] dw2102: su3000_power_ctrl: 1, initialized 0
[  554.860251][   T36] dvb-usb: bulk message failed: -22 (2/0)
[  554.878296][ T5815] dw2102: su3000_power_ctrl: 0, initialized 1
[  554.885469][ T5815] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  554.900876][   T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  554.926190][ T5815] usb 7-1: USB disconnect, device number 34
[  554.956398][   T36] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  554.998968][   T36] usb 2-1: media controller created
[  555.012285][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  555.028342][   T36] dw2102: i2c transfer failed.
[  555.047038][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  555.048688][ T5815] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  555.052795][   T36] dw2102: i2c transfer failed.
[  555.052822][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  555.052838][   T36] dw2102: i2c transfer failed.
[  555.176604][T13397] dvb-usb: bulk message failed: -22 (3/0)
[  555.182610][T13397] dw2102: i2c transfer failed.
[  555.199390][T13397] dvb-usb: bulk message failed: -22 (4/0)
[  555.213147][T13397] dw2102: i2c transfer failed.
[  555.242068][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  555.248237][   T36] dw2102: i2c transfer failed.
[  555.271051][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  555.277896][   T36] dw2102: i2c transfer failed.
[  555.282772][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  555.289452][   T36] dw2102: i2c transfer failed.
[  555.294319][   T36] dvb-usb: MAC address: 02:02:02:02:02:02
[  555.328396][   T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  555.378143][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  555.383922][   T36] dw2102: command 0x0e transfer failed.
[  555.405761][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  555.406486][ T5815] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  555.411516][   T36] dw2102: command 0x0e transfer failed.
[  555.596141][ T5815] usb 7-1: Using ep0 maxpacket: 8
[  555.603129][ T5815] usb 7-1: config index 0 descriptor too short (expected 5924, got 36)
[  555.612271][ T5815] usb 7-1: config 250 has an invalid interface number: 228 but max is -1
[  555.620968][ T5815] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0
[  555.630391][ T5815] usb 7-1: config 250 has no interface number 0
[  555.636915][ T5815] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  555.649409][ T5815] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  555.661178][ T5815] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  555.671774][ T5815] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  555.682338][ T5815] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  555.696321][ T5815] usb 7-1: config 250 interface 228 has no altsetting 0
[  555.705502][ T5815] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  555.705702][   T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  555.715165][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  555.722627][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  555.739935][   T36] dw2102: command 0x0e transfer failed.
[  555.751564][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  555.757735][   T36] dw2102: command 0x0e transfer failed.
[  555.760682][ T5815] usb 7-1: Product: syz
[  555.767832][ T5815] usb 7-1: SerialNumber: syz
[  555.787474][ T5815] hub 7-1:250.228: bad descriptor, ignoring hub
[  555.802211][ T5815] hub 7-1:250.228: probe with driver hub failed with error -5
[  555.810077][   T36] dvb-usb: bulk message failed: -22 (1/0)
[  555.810095][   T36] dw2102: command 0x51 transfer failed.
[  555.882490][   T36] DVB: Unable to find symbol ds3000_attach()
[  555.889081][   T36] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  555.925706][   T24] usb 6-1: Using ep0 maxpacket: 32
[  555.932537][   T24] usb 6-1: config 0 has an invalid interface number: 76 but max is 0
[  555.943837][   T24] usb 6-1: config 0 has no interface number 0
[  555.952836][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  555.964816][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.973117][   T24] usb 6-1: Product: syz
[  555.977578][   T24] usb 6-1: Manufacturer: syz
[  555.982388][   T24] usb 6-1: SerialNumber: syz
[  555.985354][ T5815] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  555.989880][   T36] rc_core: IR keymap rc-su3000 not found
[  556.017572][   T24] usb 6-1: config 0 descriptor??
[  556.022769][   T36] Registered IR keymap rc-empty
[  556.039951][   T24] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  556.050107][   T36] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  556.064490][   T24] dw2102: su3000_power_ctrl: 1, initialized 0
[  556.073955][   T36] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input95
[  556.087759][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  556.097710][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  556.109804][   T24] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  556.119684][   T36] dvb-usb: schedule remote query interval to 150 msecs.
[  556.126814][   T36] dw2102: su3000_power_ctrl: 0, initialized 1
[  556.144049][   T24] usb 6-1: media controller created
[  556.149484][   T36] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  556.160130][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  556.167838][   T24] dw2102: i2c transfer failed.
[  556.172642][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  556.194871][   T36] usb 2-1: USB disconnect, device number 100
[  556.213402][   T24] dw2102: i2c transfer failed.
[  556.218339][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  556.224916][   T24] dw2102: i2c transfer failed.
[  556.243934][T13456] dvb-usb: bulk message failed: -22 (3/0)
[  556.257280][T13456] dw2102: i2c transfer failed.
[  556.265731][T13456] dvb-usb: bulk message failed: -22 (4/0)
[  556.271650][T13456] dw2102: i2c transfer failed.
[  556.287729][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  556.311002][   T24] dw2102: i2c transfer failed.
[  556.326976][   T36] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  556.337540][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  556.343274][   T24] dw2102: i2c transfer failed.
[  556.368208][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  556.373977][   T24] dw2102: i2c transfer failed.
[  556.385422][   T24] dvb-usb: MAC address: 02:02:02:02:02:02
[  556.429864][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  556.455325][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  556.467781][   T24] dw2102: command 0x0e transfer failed.
[  556.473715][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  556.485870][   T24] dw2102: command 0x0e transfer failed.
[  556.566581][ T2151] usb 7-1: USB disconnect, device number 35
[  556.584208][ T2151] usblp0: removed
[  556.674899][T13489] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.2060'.
[  556.692423][T13489] input: syz1 as /devices/virtual/input/input96
[  556.696030][   T36] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  556.721154][T13491] netlink: 'syz.7.2061': attribute type 3 has an invalid length.
[  556.798007][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  556.809064][   T24] dw2102: command 0x0e transfer failed.
[  556.846225][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  556.865665][   T24] dw2102: command 0x0e transfer failed.
[  556.871245][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  556.880367][   T36] usb 2-1: Using ep0 maxpacket: 32
[  556.892125][   T36] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  556.900638][T13498] [U] 
[  556.904337][   T24] dw2102: command 0x51 transfer failed.
[  556.913393][   T36] usb 2-1: config 0 has no interface number 0
[  556.937833][   T36] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  556.955748][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.964651][   T36] usb 2-1: Product: syz
[  556.987074][   T36] usb 2-1: Manufacturer: syz
[  556.991719][   T36] usb 2-1: SerialNumber: syz
[  557.007063][   T24] DVB: Unable to find symbol ds3000_attach()
[  557.016984][   T24] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  557.031689][   T36] usb 2-1: config 0 descriptor??
[  557.041043][   T36] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  557.051580][   T36] dw2102: su3000_power_ctrl: 1, initialized 0
[  557.057751][   T36] dvb-usb: bulk message failed: -22 (2/0)
[  557.071673][   T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  557.089983][   T36] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  557.099459][   T36] usb 2-1: media controller created
[  557.104661][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  557.105667][ T5918] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  557.113068][   T36] dw2102: i2c transfer failed.
[  557.123122][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  557.130461][   T24] rc_core: IR keymap rc-su3000 not found
[  557.136198][   T36] dw2102: i2c transfer failed.
[  557.140986][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  557.146888][   T24] Registered IR keymap rc-empty
[  557.152524][   T24] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  557.164407][   T36] dw2102: i2c transfer failed.
[  557.169663][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  557.175463][   T36] dw2102: i2c transfer failed.
[  557.183686][   T24] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input97
[  557.195518][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  557.201473][   T36] dw2102: i2c transfer failed.
[  557.207055][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  557.214487][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  557.221693][   T24] dw2102: su3000_power_ctrl: 0, initialized 1
[  557.227847][   T36] dw2102: i2c transfer failed.
[  557.232622][   T36] dvb-usb: MAC address: 02:02:02:02:02:02
[  557.238462][   T24] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  557.240680][T13471] FAULT_INJECTION: forcing a failure.
[  557.240680][T13471] name failslab, interval 1, probability 0, space 0, times 0
[  557.264366][   T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  557.269318][T13471] CPU: 0 UID: 0 PID: 13471 Comm: syz.1.2054 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  557.269348][T13471] Tainted: [L]=SOFTLOCKUP
[  557.269354][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  557.269365][T13471] Call Trace:
[  557.269373][T13471]  <TASK>
[  557.269381][T13471]  dump_stack_lvl+0xe8/0x150
[  557.269406][T13471]  should_fail_ex+0x414/0x560
[  557.269434][T13471]  should_failslab+0xa8/0x100
[  557.269457][T13471]  __kmalloc_noprof+0xdf/0x800
[  557.269482][T13471]  ? tomoyo_encode+0x28b/0x550
[  557.269509][T13471]  tomoyo_encode+0x28b/0x550
[  557.269536][T13471]  tomoyo_realpath_from_path+0x58d/0x5d0
[  557.269569][T13471]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  557.269589][T13471]  tomoyo_path_number_perm+0x1e8/0x5a0
[  557.269612][T13471]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  557.269631][T13471]  ? __lock_acquire+0x6b6/0x2cf0
[  557.269668][T13471]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  557.269709][T13471]  ? __fget_files+0x2a/0x420
[  557.269733][T13471]  ? __fget_files+0x2a/0x420
[  557.269752][T13471]  ? __fget_files+0x3a0/0x420
[  557.269772][T13471]  ? __fget_files+0x2a/0x420
[  557.269796][T13471]  security_file_ioctl+0xcb/0x2d0
[  557.269817][T13471]  __se_sys_ioctl+0x47/0x170
[  557.269837][T13471]  do_syscall_64+0xec/0xf80
[  557.269853][T13471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.269869][T13471]  ? trace_irq_disable+0x37/0x100
[  557.269888][T13471]  ? clear_bhb_loop+0x40/0x90
[  557.269909][T13471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  557.269925][T13471] RIP: 0033:0x7f971c98f749
[  557.269942][T13471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  557.269957][T13471] RSP: 002b:00007f971d7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  557.269976][T13471] RAX: ffffffffffffffda RBX: 00007f971cbe5fa0 RCX: 00007f971c98f749
[  557.269988][T13471] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004
[  557.269999][T13471] RBP: 00007f971d7d7090 R08: 0000000000000000 R09: 0000000000000000
[  557.270010][T13471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  557.270020][T13471] R13: 00007f971cbe6038 R14: 00007f971cbe5fa0 R15: 00007fffae23b878
[  557.270047][T13471]  </TASK>
[  557.270129][T13471] ERROR: Out of memory at tomoyo_realpath_from_path.
[  557.274031][   T24] usb 6-1: USB disconnect, device number 54
[  557.285917][ T5918] usb 7-1: Using ep0 maxpacket: 32
[  557.329802][T13471] dvb-usb: bulk message failed: -22 (3/0)
[  557.342948][ T5918] usb 7-1: too many configurations: 209, using maximum allowed: 8
[  557.399684][T13471] dw2102: i2c transfer failed.
[  557.408255][ T5918] usb 7-1: unable to read config index 0 descriptor/start: -61
[  557.419382][T13471] dvb-usb: bulk message failed: -22 (4/0)
[  557.425667][ T5918] usb 7-1: can't read configurations, error -61
[  557.434081][T13471] dw2102: i2c transfer failed.
[  557.561504][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  557.572292][   T36] dw2102: command 0x0e transfer failed.
[  557.587175][ T5918] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  557.590664][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  557.601913][   T24] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  557.612436][   T36] dw2102: command 0x0e transfer failed.
[  557.737135][ T5918] usb 7-1: Using ep0 maxpacket: 32
[  557.742841][ T5918] usb 7-1: too many configurations: 209, using maximum allowed: 8
[  557.752527][ T5918] usb 7-1: unable to read config index 0 descriptor/start: -61
[  557.760392][ T5918] usb 7-1: can't read configurations, error -61
[  557.767384][ T5918] usb usb7-port1: attempt power cycle
[  557.925697][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  557.933467][   T36] dw2102: command 0x0e transfer failed.
[  557.939127][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  557.944864][   T36] dw2102: command 0x0e transfer failed.
[  557.950694][   T36] dvb-usb: bulk message failed: -22 (1/0)
[  557.957579][   T36] dw2102: command 0x51 transfer failed.
[  557.995286][   T36] DVB: Unable to find symbol ds3000_attach()
[  558.002699][   T36] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  558.075687][   T36] rc_core: IR keymap rc-su3000 not found
[  558.081434][   T36] Registered IR keymap rc-empty
[  558.087647][   T36] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  558.101626][   T36] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input98
[  558.105766][ T5918] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  558.136859][   T36] dvb-usb: schedule remote query interval to 150 msecs.
[  558.143888][   T36] dw2102: su3000_power_ctrl: 0, initialized 1
[  558.156600][ T5918] usb 7-1: Using ep0 maxpacket: 32
[  558.162700][ T5918] usb 7-1: too many configurations: 209, using maximum allowed: 8
[  558.170737][   T36] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  558.173650][   T36] usb 2-1: USB disconnect, device number 101
[  558.225208][ T5918] usb 7-1: unable to read config index 0 descriptor/start: -61
[  558.238975][ T5918] usb 7-1: can't read configurations, error -61
[  558.298838][   T36] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  558.375802][ T5918] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  558.396175][ T5918] usb 7-1: Using ep0 maxpacket: 32
[  558.402605][ T5918] usb 7-1: too many configurations: 209, using maximum allowed: 8
[  558.416145][ T5918] usb 7-1: unable to read config index 0 descriptor/start: -61
[  558.423895][ T5918] usb 7-1: can't read configurations, error -61
[  558.431446][ T5918] usb usb7-port1: unable to enumerate USB device
[  558.765764][ T5918] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  558.915645][ T5918] usb 6-1: Using ep0 maxpacket: 8
[  558.923182][ T5918] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  558.934226][ T5918] usb 6-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[  558.945938][ T5918] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  558.957627][ T5918] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  558.967610][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.975695][ T5918] usb 6-1: Product: syz
[  558.979870][ T5918] usb 6-1: Manufacturer: syz
[  558.984464][ T5918] usb 6-1: SerialNumber: syz
[  558.997263][ T5918] hso 6-1:6.0: Can't find BULK IN endpoint
[  559.069716][T13524] block nbd1: NBD_DISCONNECT
[  559.196020][T13522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.207764][T13522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  559.217776][   T36] usb 6-1: USB disconnect, device number 55
[  559.365817][ T2151] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  559.528249][ T2151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.539332][ T2151] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  559.548467][ T2151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.558584][ T2151] usb 2-1: config 0 descriptor??
[  559.970874][ T2151] cherry 0003:046A:0023.0024: bogus close delimiter
[  559.979995][ T2151] cherry 0003:046A:0023.0024: item 0 1 2 10 parsing failed
[  559.988005][ T2151] cherry 0003:046A:0023.0024: probe with driver cherry failed with error -22
[  560.175976][T13527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.186694][T13527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.197944][T13527] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2073'.
[  560.218666][T13527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.227691][T13527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.239108][ T5918] usb 2-1: USB disconnect, device number 102
[  560.245954][   T36] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  560.415809][   T36] usb 7-1: Using ep0 maxpacket: 32
[  560.423261][   T36] usb 7-1: config 0 has an invalid interface number: 76 but max is 0
[  560.431543][   T36] usb 7-1: config 0 has no interface number 0
[  560.439962][   T36] usb 7-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  560.449373][   T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.458165][   T36] usb 7-1: Product: syz
[  560.462364][   T36] usb 7-1: Manufacturer: syz
[  560.467085][   T36] usb 7-1: SerialNumber: syz
[  560.473720][   T36] usb 7-1: config 0 descriptor??
[  560.481414][   T36] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  560.491904][   T36] dw2102: su3000_power_ctrl: 1, initialized 0
[  560.498064][   T36] dvb-usb: bulk message failed: -22 (2/0)
[  560.505810][   T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  560.515764][   T36] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  560.524997][   T36] usb 7-1: media controller created
[  560.530736][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  560.539036][   T36] dw2102: i2c transfer failed.
[  560.544112][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  560.549921][   T36] dw2102: i2c transfer failed.
[  560.554858][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  560.560875][   T36] dw2102: i2c transfer failed.
[  560.565707][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  560.571435][   T36] dw2102: i2c transfer failed.
[  560.576293][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  560.582021][   T36] dw2102: i2c transfer failed.
[  560.587131][   T36] dvb-usb: bulk message failed: -22 (6/0)
[  560.594612][   T36] dw2102: i2c transfer failed.
[  560.599485][   T36] dvb-usb: MAC address: 02:02:02:02:02:02
[  560.613385][   T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  560.630503][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  560.636343][   T36] dw2102: command 0x0e transfer failed.
[  560.641900][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  560.647864][   T36] dw2102: command 0x0e transfer failed.
[  560.710280][T13542] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2079'.
[  560.885280][T13549] input: syz0 as /devices/virtual/input/input99
[  560.958209][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  560.966576][   T36] dw2102: command 0x0e transfer failed.
[  560.974795][   T36] dvb-usb: bulk message failed: -22 (3/0)
[  560.981208][   T36] dw2102: command 0x0e transfer failed.
[  560.987791][   T36] dvb-usb: bulk message failed: -22 (1/0)
[  560.993774][   T36] dw2102: command 0x51 transfer failed.
[  561.003705][T13536] dvb-usb: bulk message failed: -22 (3/0)
[  561.010171][T13536] dw2102: i2c transfer failed.
[  561.015075][T13536] dvb-usb: bulk message failed: -22 (4/0)
[  561.021125][T13536] dw2102: i2c transfer failed.
[  561.040533][   T36] DVB: Unable to find symbol ds3000_attach()
[  561.046718][   T36] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  561.115965][   T36] rc_core: IR keymap rc-su3000 not found
[  561.121766][   T36] Registered IR keymap rc-empty
[  561.128992][   T36] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  561.141665][   T36] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input100
[  561.154544][   T36] dvb-usb: schedule remote query interval to 150 msecs.
[  561.162014][   T36] dw2102: su3000_power_ctrl: 0, initialized 1
[  561.168829][   T36] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  561.182673][   T36] usb 7-1: USB disconnect, device number 40
[  561.237422][   T36] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  561.331170][ T5918] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  561.488705][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  561.500061][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.510402][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  561.523440][ T5918] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  561.532557][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.548855][ T5918] usb 6-1: config 0 descriptor??
[  561.622432][ T8092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  561.630504][ T8092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  561.878078][ T5905] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  561.963341][ T5918] logitech 0003:046D:C24F.0025: unknown main item tag 0x0
[  561.971190][ T5918] logitech 0003:046D:C24F.0025: unknown main item tag 0x0
[  561.982300][ T5918] logitech 0003:046D:C24F.0025: unknown main item tag 0x0
[  561.989725][ T5918] logitech 0003:046D:C24F.0025: unknown main item tag 0x0
[  562.001092][ T5918] logitech 0003:046D:C24F.0025: unknown main item tag 0x0
[  562.011826][ T5918] logitech 0003:046D:C24F.0025: unknown main item tag 0x0
[  562.019373][ T5918] logitech 0003:046D:C24F.0025: unknown main item tag 0x0
[  562.030518][ T5918] logitech 0003:046D:C24F.0025: hidraw0: USB HID v0.00 Device [HID 046d:c24f] on usb-dummy_hcd.5-1/input0
[  562.042066][ T5918] logitech 0003:046D:C24F.0025: no inputs found
[  562.057138][ T5905] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  562.069400][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.086683][ T5905] usb 7-1: config 0 descriptor??
[  562.102680][ T5905] cp210x 7-1:0.0: cp210x converter detected
[  562.155052][T13575] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd
[  562.163153][T13575] sctp: [Deprecated]: syz.1.2090 (pid 13575) Use of struct sctp_assoc_value in delayed_ack socket option.
[  562.163153][T13575] Use struct sctp_sack_info instead
[  562.500199][ T5905] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[  562.717686][ T5905] usb 7-1: cp210x converter now attached to ttyUSB0
[  562.825663][   T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  562.912252][T13560] tmpfs: Invalid uid '0x00000000ffffffff'
[  562.919137][   T36] usb 7-1: USB disconnect, device number 41
[  562.931611][   T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  562.943752][   T36] cp210x 7-1:0.0: device disconnected
[  562.977459][   T24] usb 2-1: Using ep0 maxpacket: 32
[  562.984481][   T24] usb 2-1: config 0 has an invalid interface number: 76 but max is 0
[  562.992863][   T24] usb 2-1: config 0 has no interface number 0
[  563.001728][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  563.011203][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.019393][   T24] usb 2-1: Product: syz
[  563.023615][   T24] usb 2-1: Manufacturer: syz
[  563.028501][   T24] usb 2-1: SerialNumber: syz
[  563.035097][   T24] usb 2-1: config 0 descriptor??
[  563.045268][   T24] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  563.055279][   T24] dw2102: su3000_power_ctrl: 1, initialized 0
[  563.061449][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  563.078037][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  563.090716][   T24] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  563.100265][   T24] usb 2-1: media controller created
[  563.105500][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  563.114296][   T24] dw2102: i2c transfer failed.
[  563.119966][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  563.125764][   T24] dw2102: i2c transfer failed.
[  563.131339][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  563.137840][   T24] dw2102: i2c transfer failed.
[  563.142634][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  563.148426][   T24] dw2102: i2c transfer failed.
[  563.154891][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  563.163927][   T24] dw2102: i2c transfer failed.
[  563.169303][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  563.195653][   T24] dw2102: i2c transfer failed.
[  563.200532][   T24] dvb-usb: MAC address: 02:02:02:02:02:02
[  563.213446][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  563.237262][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  563.243035][   T24] dw2102: command 0x0e transfer failed.
[  563.249166][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  563.256194][   T24] dw2102: command 0x0e transfer failed.
[  563.576413][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  563.582362][   T24] dw2102: command 0x0e transfer failed.
[  563.588626][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  563.594524][   T24] dw2102: command 0x0e transfer failed.
[  563.600210][   T24] dvb-usb: bulk message failed: -22 (1/0)
[  563.606039][   T24] dw2102: command 0x51 transfer failed.
[  563.611850][T13587] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI
[  563.623742][T13587] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[  563.632146][T13587] CPU: 0 UID: 0 PID: 13587 Comm: syz.1.2094 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  563.643079][T13587] Tainted: [L]=SOFTLOCKUP
[  563.647387][T13587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  563.657441][T13587] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0
[  563.663341][T13587] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 1d 40 60 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42
[  563.682941][T13587] RSP: 0018:ffffc9000d767bb0 EFLAGS: 00010202
[  563.689002][T13587] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003
[  563.696967][T13587] RDX: ffffffff87c78705 RSI: ffffffff8f2dc4d0 RDI: 0000000000001900
[  563.704922][T13587] RBP: 0000000000000000 R08: ffff8880298b5ac0 R09: 0000000000000002
[  563.712879][T13587] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000
[  563.720834][T13587] R13: 1ffff11028ced2f0 R14: 0000000000000002 R15: ffff888146769788
[  563.728796][T13587] FS:  00007f971d7d76c0(0000) GS:ffff8881259c0000(0000) knlGS:0000000000000000
[  563.737710][T13587] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  563.744365][T13587] CR2: 0000001b34223ffc CR3: 000000002a3de000 CR4: 00000000003526f0
[  563.752333][T13587] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  563.760286][T13587] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  563.768247][T13587] Call Trace:
[  563.771511][T13587]  <TASK>
[  563.774430][T13587]  __i2c_transfer+0x79a/0x1f00
[  563.779194][T13587]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  563.785007][T13587]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  563.790813][T13587]  ? i2c_transfer+0xc8/0x2d0
[  563.795406][T13587]  i2c_transfer+0x1cc/0x2d0
[  563.799896][T13587]  i2cdev_ioctl_rdwr+0x460/0x740
[  563.804825][T13587]  i2cdev_ioctl+0x64b/0x820
[  563.809317][T13587]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  563.814327][T13587]  ? __fget_files+0x3a0/0x420
[  563.818990][T13587]  ? __fget_files+0x2a/0x420
[  563.823567][T13587]  ? bpf_lsm_file_ioctl+0x9/0x20
[  563.828486][T13587]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  563.833493][T13587]  __se_sys_ioctl+0xfc/0x170
[  563.838068][T13587]  do_syscall_64+0xec/0xf80
[  563.842561][T13587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.848611][T13587]  ? trace_irq_disable+0x37/0x100
[  563.853622][T13587]  ? clear_bhb_loop+0x40/0x90
[  563.858295][T13587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.864170][T13587] RIP: 0033:0x7f971c98f749
[  563.868574][T13587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  563.888166][T13587] RSP: 002b:00007f971d7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  563.896571][T13587] RAX: ffffffffffffffda RBX: 00007f971cbe5fa0 RCX: 00007f971c98f749
[  563.904539][T13587] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004
[  563.912497][T13587] RBP: 00007f971ca13f91 R08: 0000000000000000 R09: 0000000000000000
[  563.920456][T13587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  563.928413][T13587] R13: 00007f971cbe6038 R14: 00007f971cbe5fa0 R15: 00007fffae23b878
[  563.936484][T13587]  </TASK>
[  563.939488][T13587] Modules linked in:
[  563.943969][T13587] ---[ end trace 0000000000000000 ]---
[  563.967818][T13587] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0
[  563.974032][T13587] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 1d 40 60 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42
[  563.983835][   T24] DVB: Unable to find symbol ds3000_attach()
[  564.014886][T13587] RSP: 0018:ffffc9000d767bb0 EFLAGS: 00010202
[  564.021186][T13587] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003
[  564.021309][   T24] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  564.029811][T13587] RDX: ffffffff87c78705 RSI: ffffffff8f2dc4d0 RDI: 0000000000001900
[  564.046795][T13587] RBP: 0000000000000000 R08: ffff8880298b5ac0 R09: 0000000000000002
[  564.054846][T13587] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000
[  564.062924][T13587] R13: 1ffff11028ced2f0 R14: 0000000000000002 R15: ffff888146769788
[  564.075609][T13587] FS:  00007f971d7d76c0(0000) GS:ffff8881259c0000(0000) knlGS:0000000000000000
[  564.088178][ T5905] usb 6-1: USB disconnect, device number 56
[  564.096166][   T24] rc_core: IR keymap rc-su3000 not found
[  564.102302][   T24] Registered IR keymap rc-empty
[  564.109417][   T24] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  564.115834][T13587] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  564.129180][   T24] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input101
[  564.142649][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  564.144836][T13587] CR2: 0000001b34223ffc CR3: 000000002a3de000 CR4: 00000000003526f0
[  564.152267][   T24] dw2102: su3000_power_ctrl: 0, initialized 1
[  564.157785][T13587] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  564.164210][   T24] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  564.176019][T13587] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  564.195016][T13587] Kernel panic - not syncing: Fatal exception
[  564.201542][T13587] Kernel Offset: disabled
[  564.205859][T13587] Rebooting in 86400 seconds..