last executing test programs:

6m20.477673074s ago: executing program 3 (id=514):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'veth1_to_hsr\x00', @random="0163014030d9"})
getpgid(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
close(r3)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000400))
getpid()
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003140)=""/4111, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000640)=0x5, 0x4)
waitid$P_PIDFD(0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x4, 0x6, 0x0, 0xfffffffffffffffd, 0x80000000, 0x8000000, 0x7fffffdfffffffff}, {0x0, 0x0, 0x3ff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001140)={0x40, 0x5, 0x73, "6f69d2fe7e4e7912714a4eadab05fd7117ce7403f2baf40283ad4585bfeafea05386343e07e1ac69d82bfe961a0836717ced23ab5d9dca63b028c50a8dc1e743ac7136de71c66c94434482ca622a2a70879b4543991b8bebe7f9c308b8144ff818efd2c002a5cfe05245d35d0f66fbfa8acf76"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001280)={0x20, 0x0, 0x8, {0x1a0, 0x20, [0xff0f]}}, &(0x7f00000012c0)={0x40, 0x7, 0x2}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x5f}, &(0x7f0000001340)={0x40, 0xb, 0x2, "c2a1"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001440)={0x40, 0x19, 0x2, "48b6"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x401}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0xf}})
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

6m16.967159205s ago: executing program 3 (id=518):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001})
writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1)
sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0)
unshare(0x62040200)
syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r6], 0x0)
syz_usb_connect$midi(0x3, 0x31, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x20, 0xf7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x51, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x9, 0x5, 0x9, {0x4}}}]}}}}}]}}, 0x0)

6m13.205031356s ago: executing program 3 (id=525):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00')
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0)
unshare(0xe060400)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00')
r3 = memfd_create(&(0x7f0000000080)='%\x00', 0x3)
fsetxattr$system_posix_acl(r3, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x24, 0x3)
unshare(0x2c060000)
ioctl$IOCTL_STATUS_ACCEL_DEV(r2, 0x40046103, &(0x7f0000000300)={0x3, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x1, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f671d8be1f6c41e1"})
r4 = gettid()
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040))
rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff})
socket(0x10, 0x803, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x33565348, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1)
r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0)
read(r6, &(0x7f0000000240)=""/123, 0x7b)

6m11.021460091s ago: executing program 3 (id=528):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'veth1_to_hsr\x00', @random="0163014030d9"})
getpgid(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
close(r3)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400))
getpid()
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003140)=""/4111, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000640)=0x5, 0x4)
waitid$P_PIDFD(0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x4, 0x6, 0x0, 0xfffffffffffffffd, 0x80000000, 0x8000000, 0x7fffffdfffffffff}, {0x0, 0x0, 0x3ff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x44, &(0x7f0000001140)={0x40, 0x5, 0x73, "6f69d2fe7e4e7912714a4eadab05fd7117ce7403f2baf40283ad4585bfeafea05386343e07e1ac69d82bfe961a0836717ced23ab5d9dca63b028c50a8dc1e743ac7136de71c66c94434482ca622a2a70879b4543991b8bebe7f9c308b8144ff818efd2c002a5cfe05245d35d0f66fbfa8acf76"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001280)={0x20, 0x0, 0x8, {0x1a0, 0x20, [0xff0f]}}, &(0x7f00000012c0)={0x40, 0x7, 0x2}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0x5f}, &(0x7f0000001340)={0x40, 0xb, 0x2, "c2a1"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x6}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001400)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001440)={0x40, 0x19, 0x2, "48b6"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x401}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0xf}})
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

6m8.109876737s ago: executing program 3 (id=533):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x20)
shutdown(r4, 0x0)
r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x40)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000e597d2cd02ac1414aa00000000fd580582de03d81789bcd8ea3614720ba9dd4b022c3e2b9a50"], 0x1c)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x1, 0x1, [@local]}, 0x14)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4000009d}]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000180))

6m3.881393423s ago: executing program 3 (id=537):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x110, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x15)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007", 0x29}], 0x1)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000140)={0x0, 0x5, 0x0}, 0x40000040)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket(0x15, 0x5, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x4, @remote, 0x8001, 0x1}, 0x20)

5m48.070045459s ago: executing program 32 (id=537):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x110, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x15)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007", 0x29}], 0x1)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000140)={0x0, 0x5, 0x0}, 0x40000040)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket(0x15, 0x5, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x4, @remote, 0x8001, 0x1}, 0x20)

4m26.565923709s ago: executing program 0 (id=696):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x20)
shutdown(r4, 0x0)
r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x40)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000e597d2cd02ac1414aa00000000fd580582de03d81789bcd8ea3614720ba9dd4b022c3e2b9a50"], 0x1c)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x1, 0x1, [@local]}, 0x14)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4000009d}]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000180))

4m23.996329858s ago: executing program 0 (id=699):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x20)
shutdown(r4, 0x0)
r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x40)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000e597d2cd02ac1414aa00000000fd580582de03d81789bcd8ea3614720ba9dd4b022c3e2b9a50"], 0x1c)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x1, 0x1, [@local]}, 0x14)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4000009d}]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000180))

4m22.347358536s ago: executing program 0 (id=700):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
listen(0xffffffffffffffff, 0x20)
shutdown(0xffffffffffffffff, 0x0)
r4 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2})
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48)
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040)
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c000}, 0x40)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000e597d2cd02ac1414aa00000000fd580582de03d81789bcd8ea3614720ba9dd4b022c3e2b9a50"], 0x1c)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x1, 0x1, [@local]}, 0x14)
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4000009d}]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000180))

4m20.197221449s ago: executing program 0 (id=705):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r7 = socket$kcm(0x10, 0x2, 0x4)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001})
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1)
sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0)
unshare(0x62040200)
syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r7], 0x0)
syz_usb_connect$midi(0x3, 0x31, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x2, 0x20, 0xf7, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x51, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x9, 0x5, 0x9, {0x4}}}]}}}}}]}}, 0x0)

4m15.754897055s ago: executing program 0 (id=709):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
unshare(0x8000000)
r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
memfd_create(0x0, 0x3)
socket$tipc(0x1e, 0x5, 0x0)
add_key(&(0x7f0000000080)='big_key\x00', 0x0, &(0x7f00000000c0)="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", 0x5b1, 0xfffffffffffffffb)

4m11.509041987s ago: executing program 0 (id=714):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[], 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x15)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000140)={0x0, 0x5, 0x0}, 0x40000040)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000))
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = socket(0x15, 0x5, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0x4, @remote, 0x8001, 0x1}, 0x20)
getsockopt(r7, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000083, 0x0, 0x8000000000000001}]})

3m55.943956938s ago: executing program 33 (id=714):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x110, &(0x7f00000005c0)=ANY=[], 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x15)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
recvmsg(r5, &(0x7f0000000140)={0x0, 0x5, 0x0}, 0x40000040)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000000))
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r7 = socket(0x15, 0x5, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0x4, @remote, 0x8001, 0x1}, 0x20)
getsockopt(r7, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xc74)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000083, 0x0, 0x8000000000000001}]})

1m14.064029583s ago: executing program 2 (id=1299):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)=',#', 0x2)
r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}], 0x1, 0x0, 0x0, 0x24004050}], 0x1, 0x40800)
recvmsg(r5, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001514"], 0x18}}, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0)
write$binfmt_aout(r8, 0x0, 0xff2e)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r9, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0)

1m10.016504649s ago: executing program 2 (id=1308):
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x9, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x3b)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)

1m9.324747704s ago: executing program 2 (id=1311):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000240), 0x0)
r0 = socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
utimensat(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc)
r6 = syz_open_dev$dri(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[0x0], 0x0, 0x0, 0x0, 0x1})
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400)

1m5.723525546s ago: executing program 2 (id=1328):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
close(r6)
listen(r5, 0x20)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
shutdown(r5, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0)
socket(0x14, 0x1, 0x4)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r7, r7, 0x0, 0x200000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf25440000000800", @ANYRES32=r9, @ANYBLOB="0a001800030309000303000008000c000001"], 0x30}, 0x1, 0x0, 0x0, 0x400c045}, 0x20044080)
preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000080)=@ng={0x4, 0x13, "2ffe6da6ffa56fb925"}, 0xb, 0x0)

1m0.709030886s ago: executing program 2 (id=1364):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
ftruncate(r1, 0x2000000)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1f, 0x0, 0x1000000})

1m0.465218808s ago: executing program 2 (id=1369):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000)
syz_io_uring_setup(0x1229, &(0x7f0000000200)={0x0, 0x4f5a, 0x10100, 0x3, 0xffffffed, 0x0, r3}, &(0x7f00000000c0), 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

45.121879387s ago: executing program 34 (id=1369):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r3, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000)
syz_io_uring_setup(0x1229, &(0x7f0000000200)={0x0, 0x4f5a, 0x10100, 0x3, 0xffffffed, 0x0, r3}, &(0x7f00000000c0), 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

14.02101291s ago: executing program 6 (id=1587):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, 0x0, 0x0, 0x4000800)

13.876501359s ago: executing program 6 (id=1588):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x22040004)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r1=>0x0)
syz_pidfd_open(0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1)

12.864792329s ago: executing program 6 (id=1591):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close_range(r0, 0xffffffffffffffff, 0x0)

12.818320911s ago: executing program 6 (id=1593):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
ppoll(&(0x7f00000000c0)=[{r0, 0x3023}, {r1, 0x2440}], 0x2, 0x0, 0x0, 0x0)

12.667661299s ago: executing program 6 (id=1596):
r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x7df, 0x88000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563e, &(0x7f0000000100)={0x1, 0x2})

12.557805304s ago: executing program 6 (id=1597):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200"], 0x50)
r0 = socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f0000000040), 0x4)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=<r3=>0x0)
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
syz_io_uring_setup(0x4ad8, &(0x7f0000000300)={0x0, 0x9824, 0x20, 0xffffffff, 0x145}, 0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0)
syz_io_uring_setup(0x1229, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000000))
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, 0x0, &(0x7f00000002c0)=0x14)

6.697458946s ago: executing program 7 (id=1625):
r0 = semget(0x3, 0x2, 0x202)
semctl$IPC_RMID(r0, 0x0, 0x0)

6.268357715s ago: executing program 7 (id=1627):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0)
syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9, 0x80000000}, 0x0, 0x0)
close(0x3)

6.166509505s ago: executing program 1 (id=1628):
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)="2ea48f0f4befca4594", 0x9}}, 0x4850)
close(0x3)

5.817760821s ago: executing program 1 (id=1630):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x2008c014)

4.752287235s ago: executing program 5 (id=1631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040))
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fchown(r5, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x8, &(0x7f0000000280)=[{0x5, 0x1, 0xc1, 0x9}, {0x7, 0x9, 0x2, 0x4}, {0x0, 0x4, 0x0, 0xfffff705}, {0x1, 0x7, 0x8, 0xfebc1bd}, {0xffff, 0x15, 0xe, 0x6}, {0x3, 0x1, 0x0, 0x8}, {0x5, 0x8f, 0x97, 0x9}, {0x8, 0x7, 0xd, 0x9}]}, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000b14200029bd7000ffdbdf2508003f00000000020800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044000)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
ftruncate(r7, 0x2000000)
fcntl$addseals(r7, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x1f, 0x0, 0x1000000})

4.484586657s ago: executing program 5 (id=1632):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x48c0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x11, 0x4)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0)

4.373319882s ago: executing program 5 (id=1633):
syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x43, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_netfilter(0x10, 0x3, 0xc)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0)

3.945111652s ago: executing program 4 (id=1634):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0x1}], 0x1}}], 0x1, 0x4000800)

3.799917536s ago: executing program 4 (id=1635):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003200)={0x0, <r1=>0x0, "267d395b1318515ce4e7f66ef02fbee0029734b4cfaafa2702e95c1a9a728091c9311656b8480b0d12268ec39d439fee927c07384abd0b9bb9d2ffad6aaa788e02e9ea8c299da004c4b0ef272dac0f011c3f4c7ded41bed2310f756df27af9cb6c0fa43b6340c33491db058631379473d32bd10ca11424be249141073765368ad40eea122c6c8023a1bd58fc3c77162bde0dd8d47e7d090618c4b8b5442da3bc292c21e2d660fd562219a53269c620a3f666e39bf289abbd981474c1637c06e2919ee0b29a316765b4ca55639ec4ed8d394997ce5e677cffe2a70a2a586f435e0bcb892caaffad43c456b9f5d27c6c5ca335a1f9efe4580e16299bf272b1fe39", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000000c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {r1}, {}, {}, {0x0, <r2=>0x0}, {0x0, <r3=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r5=>0x0}, {}, {<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {0x0, <r7=>0x0}, {}, {}, {}, {}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}, {}, {}, {}, {}, {}, {<r10=>0x0, <r11=>0x0}], 0x0, "fc7c37c78dba72"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000010c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0xb1, "cf637f009e94ac"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000020c0)={r7, r12, "bbbae8a0f443da337930165c90ab4d2bd2f65ce0405aaffdc21fb05e76955832dbf6079f4266c425b815157302860220aa9d9c84d0a7abe94b133bcca480ef9b4c45353f249013af5a787b077b4320a23b73b1d0707cb0819f3b557e8bf1adc07ea466152f7db8641b6bb49a88aee7a0d2c8b773c997979fa08062ecd0b69f3e9de35320f2721978e3d999747cbf4046984113f54d5bcf80bbddba3786698950465c5882bd51d0b0c3ee772cad0ae55b6a0eb8b4329c770d84b2bc04fcaafbc225d49b6c52008bcfaed939109748ff02636093f8ee09bee66bf209c9da143b16e3da170f78d2d27bda2a7c61076a99efb97a15e22569024be8dd8e95610b80de", "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"})
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r13 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
connect$unix(r14, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r15, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r14, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(r0, r0, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
sendmsg$inet(r17, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r16, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
sendmsg$inet(r19, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r20=>0xffffffffffffffff})
close_range(r20, 0xffffffffffffffff, 0x2)
dup3(r16, r20, 0x80000)

3.736441663s ago: executing program 1 (id=1636):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x37, &(0x7f0000000040)=0x3, 0x4)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0303f0000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="d3e30f41ca0c976bbc37d3d04caa0597e41a60e4f5d01ca1"], 0x1c}}, 0x0)
write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000140), 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000340)=0xc)

3.320188671s ago: executing program 5 (id=1637):
r0 = io_uring_setup(0x46e9, &(0x7f00000000c0)={0x0, 0x1f8d, 0x400, 0x2, 0x3e2})
openat$mice(0xffffffffffffff9c, 0x0, 0x2000)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000019140)=ANY=[@ANYBLOB="1201000000000040ac0538024000010203010902240601010000000904000000030102"], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.992541499s ago: executing program 7 (id=1638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840)

2.916630862s ago: executing program 1 (id=1639):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/30, 0x1e)
close_range(r0, 0xffffffffffffffff, 0x0)

2.750399383s ago: executing program 7 (id=1640):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0x7)

1.932855523s ago: executing program 7 (id=1641):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60081, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x26, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0f0700000000fcffffff0c0000000800", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000000)={0x8, 0x0, [{0x6, 0xffffffff, 0x5, 0xffffff8c, 0x1000000, 0x6, 0x3}, {0x1, 0x4000004, 0x0, 0x8, 0x4aed, 0x1, 0x6}, {0x7, 0x8, 0x1, 0x80000000, 0x4, 0x8005, 0x31}, {0x80000019, 0xe5f, 0x6, 0x8, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2ab, 0x1, 0x3ff, 0x3, 0x5, 0x400}, {0xc0000000, 0x6, 0x4, 0x7, 0x400003, 0x40000005, 0xe0000}, {0x2, 0x2, 0x3f91c194927b8e21, 0xfffffff7, 0xfffffff9, 0xff, 0x6}, {0x6, 0x3, 0x0, 0x6, 0x8, 0x2, 0x2}]})

1.634832175s ago: executing program 5 (id=1642):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xf0}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040))
unshare(0x6020400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fchown(r3, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x8, &(0x7f0000000280)=[{0x5, 0x1, 0xc1, 0x9}, {0x7, 0x9, 0x2, 0x4}, {0x0, 0x4, 0x0, 0xfffff705}, {0x1, 0x7, 0x8, 0xfebc1bd}, {0xffff, 0x15, 0xe, 0x6}, {0x3, 0x1, 0x0, 0x8}, {0x5, 0x8f, 0x97, 0x9}, {0x8, 0x7, 0xd, 0x9}]}, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000b14200029bd7000ffdbdf2508003f00000000020800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20044000)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
ftruncate(r5, 0x2000000)
fcntl$addseals(r5, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x1f, 0x0, 0x1000000})

1.62808114s ago: executing program 4 (id=1643):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x48c0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x11, 0x4)
recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0)

1.453523096s ago: executing program 4 (id=1644):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1.424656225s ago: executing program 1 (id=1645):
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x4000800)

1.167942322s ago: executing program 4 (id=1646):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x4c2}, {{0x2}, {0xf0ffff, 0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x2008c014)

1.028060794s ago: executing program 1 (id=1647):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfe, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xa, 0x8, 0x0, 0xf, 0x10, 0x1, 0x6, 0x2, 0x8, 0x0, 0x7, 0xfd, 0x2, 0x7, 0x8b, 0x6], 0x3, [0xc, 0x0, 0x7fff, 0x2002, 0x8, 0x4, 0x6, 0xd03, 0xae, 0x2, 0xb, 0x1, 0x6, 0x6, 0xd, 0x100], [0xf06f, 0x5, 0xffff, 0xfff5, 0x9, 0x5, 0x3, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4, 0xfffe]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)

953.707908ms ago: executing program 5 (id=1648):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getrlimit(0x1d, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0)
r2 = socket$inet(0x2, 0x5, 0x9)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000004c0)=0x8a5b)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000480))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}})
r5 = socket$kcm(0xa, 0x922000000003, 0x11)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC(r6, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c)
setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0xfffff679, 0x6, 0x5, 0x1, 0x6, "b0cfc518474653f921e31ed71453439c21edd0", 0xfffffffa, 0xc})
sendmsg$kcm(r5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)=""/265, 0x1a, 0x109, 0x1}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000007580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x84, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xb, 0xc, "bd19e459749a73"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_USERDATA={0x39, 0xc, "deccae22ef5ae0730bdeeba8f783ee1a82b46ff97de652013a64806d4d3582871a970a835c2fe2e36285a4077d8ac64752caadedae"}]}, @NFT_MSG_NEWTABLE={0x68, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x15c, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x58, 0x6, "f772fd7b397b4d7e1e14790a236282a9776a21e9fe64bbd92c1e244d3f40843f99dbed425072cc6582bfb215d9ed0d0d67a8d39e9ac3535f0875e8161201146e5c1450fec952fe3cdc8b33b8e289720b1950c593"}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "1e42ccf58f311837fb3fbab3052baeb907b65958ddd2d5e33e89200b66a898e0f1797fa3945fe54cc114"}, @NFTA_TABLE_USERDATA={0xab, 0x6, "50ed890d5502148443e176e8eee9925a59d1558f60e403615d41a6ce30b72abd6558fe5188aa39f5b8871dc553d26b357e195546760336f1a7448936c0c944d5cc67cf64bc8e26c289e360016771af19b91565182cf830b75078b2d3dbb2da56fea474db3356d518727bb94dd7d853f68e6d2bccbbec657f4cb175f007ca2d291cd3882179dd127bffcbe214c7bc01099e58fc1684f334075b1537d41a855cd4fc1505d73914e2"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x300}, 0x1, 0x0, 0x0, 0x8880}, 0x800)

692.344382ms ago: executing program 4 (id=1649):
syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000440)=[{0x5, 0x2029, 0x0, 0x0}], 0x1})

0s ago: executing program 7 (id=1650):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x37, &(0x7f0000000040)=0x3, 0x4)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0303f0000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="d3e30f41ca0c976bbc37d3d04caa0597e41a60e4f5d01ca1"], 0x1c}}, 0x0)
write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000140), 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402)
getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000340)=0xc)

kernel console output (not intermixed with test programs):

9][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.382242][    T9] usb 7-1: Product: syz
[  631.431639][    T9] usb 7-1: Manufacturer: syz
[  631.467552][T10064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.795'.
[  631.479979][    T9] usb 7-1: SerialNumber: syz
[  631.561872][T10057] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  632.226573][ T5724] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  632.422985][ T5724] usb 5-1: Using ep0 maxpacket: 16
[  632.476666][ T5724] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  632.549273][ T5724] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  632.617148][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.678065][ T5724] usb 5-1: Product: syz
[  632.722857][ T5724] usb 5-1: Manufacturer: syz
[  632.767562][ T5724] usb 5-1: SerialNumber: syz
[  632.822063][T10074] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  632.905944][ T5702] usb 6-1: selecting invalid altsetting 1
[  633.288517][ T5702] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  633.396837][ T5702] usb 6-1: USB disconnect, device number 14
[  633.651215][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  634.244087][    T9] usb 7-1: selecting invalid altsetting 1
[  634.549478][    T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  634.592531][    T9] usb 7-1: USB disconnect, device number 4
[  634.679145][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  635.971949][ T5724] usb 5-1: selecting invalid altsetting 1
[  636.089950][T10093] binder: 10089:10093 ioctl c0306201 0 returned -14
[  636.251624][ T5724] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  636.270376][ T5724] usb 5-1: USB disconnect, device number 45
[  636.371000][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  637.212098][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.813'.
[  637.245213][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.5.813'.
[  638.053974][ T5702] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  638.245162][ T5702] usb 6-1: Using ep0 maxpacket: 16
[  638.274545][ T5702] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  638.383845][ T5702] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  638.402978][ T5724] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  638.422546][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.463232][ T5702] usb 6-1: Product: syz
[  638.487425][ T5702] usb 6-1: Manufacturer: syz
[  638.515610][ T5702] usb 6-1: SerialNumber: syz
[  638.554877][ T5724] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  638.565816][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.601016][T10137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  638.610366][ T5724] usb 7-1: config 0 descriptor??
[  639.061512][ T5724] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0f
[  639.093632][ T5724] hackrf 7-1:0.0: Could not detect board
[  639.118372][ T5724] hackrf 7-1:0.0: probe with driver hackrf failed with error -71
[  639.168237][ T5724] usb 7-1: USB disconnect, device number 5
[  640.039635][T10156] input: syz0 as /devices/virtual/input/input5
[  640.677030][ T5702] usb 6-1: selecting invalid altsetting 1
[  640.823426][ T5702] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  640.841332][ T5702] usb 6-1: USB disconnect, device number 15
[  640.888385][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  641.012954][    T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  641.182848][    T9] usb 5-1: Using ep0 maxpacket: 32
[  641.196869][    T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  641.213264][    T9] usb 5-1: config 0 has no interface number 0
[  641.232636][    T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  641.244077][    T9] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  641.254818][    T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  641.267560][    T9] usb 5-1: config 0 interface 196 has no altsetting 0
[  641.281491][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  641.291379][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.300359][    T9] usb 5-1: Product: syz
[  641.305745][    T9] usb 5-1: Manufacturer: syz
[  641.310746][    T9] usb 5-1: SerialNumber: syz
[  641.359804][    T9] usb 5-1: config 0 descriptor??
[  641.374996][T10168] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  641.813122][    T9] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  641.857768][    T9] ipheth 5-1:0.196: probe with driver ipheth failed with error -22
[  643.588860][T10219] process 'syz.5.845' launched './file2' with NULL argv: empty string added
[  643.805894][ T5728] usb 5-1: USB disconnect, device number 46
[  644.575824][   T10] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  644.743959][   T10] usb 5-1: Using ep0 maxpacket: 16
[  644.764755][   T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  644.796030][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  644.823708][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  644.846721][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  644.860347][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.871500][   T10] usb 5-1: Product: syz
[  644.877835][   T10] usb 5-1: Manufacturer: syz
[  644.882623][   T10] usb 5-1: SerialNumber: syz
[  645.912501][   T10] usb 5-1: 0:2 : does not exist
[  646.132885][ T5728] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  646.375416][ T5728] usb 6-1: Using ep0 maxpacket: 8
[  646.407512][ T5728] usb 6-1: unable to get BOS descriptor or descriptor too short
[  646.437481][ T5728] usb 6-1: config 4 has an invalid interface number: 147 but max is 0
[  646.500023][ T5728] usb 6-1: config 4 has an invalid descriptor of length 20, skipping remainder of the config
[  646.549056][ T5728] usb 6-1: config 4 has no interface number 0
[  646.570050][   T10] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1)
[  646.592096][ T5728] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  646.633124][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.660082][ T5728] usb 6-1: Product: syz
[  646.679717][ T5728] usb 6-1: Manufacturer: syz
[  646.717333][ T5728] usb 6-1: SerialNumber: syz
[  646.742393][   T10] usb 5-1: USB disconnect, device number 47
[  647.028933][ T5728] uvcvideo 6-1:4.147: Found multiple Units with ID 6
[  647.048683][ T5728] uvcvideo 6-1:4.147: Found UVC 0.02 device syz (04f2:b746)
[  647.068661][ T5728] uvcvideo 6-1:4.147: No valid video chain found.
[  647.098791][ T5728] usb 6-1: USB disconnect, device number 16
[  648.203730][  T807] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  648.326567][ T5728] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  648.375446][  T807] usb 2-1: Using ep0 maxpacket: 16
[  648.395146][  T807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  648.418310][  T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  648.433400][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.5.876'.
[  648.447710][  T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  648.458267][  T807] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  648.471377][  T807] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  648.486799][ T5728] usb 5-1: Using ep0 maxpacket: 32
[  648.496688][ T5728] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  648.507058][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  648.519538][  T807] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  648.532671][ T5728] usb 5-1: config 0 has no interface number 0
[  648.541285][  T807] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  648.549821][ T5728] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0
[  648.561074][  T807] usb 2-1: Manufacturer: syz
[  648.566362][ T5728] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  648.587729][  T807] usb 2-1: config 0 descriptor??
[  648.620571][ T5728] usb 5-1: config 0 interface 184 has no altsetting 0
[  648.641941][ T5728] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  648.658009][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.675870][ T5728] usb 5-1: Product: syz
[  648.681706][ T5728] usb 5-1: Manufacturer: syz
[  648.688709][ T5728] usb 5-1: SerialNumber: syz
[  648.707225][ T5728] usb 5-1: config 0 descriptor??
[  648.719040][ T5728] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  648.735421][ T5728] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  648.840334][T10304] syz.6.878 uses obsolete (PF_INET,SOCK_PACKET)
[  649.004068][  T807] rc_core: IR keymap rc-hauppauge not found
[  649.016688][  T807] Registered IR keymap rc-empty
[  649.024179][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  649.067753][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  649.382456][T10318] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  649.390239][T10318] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  649.433124][ T5728] IPVS: starting estimator thread 0...
[  649.544895][T10320] IPVS: using max 24 ests per chain, 57600 per kthread
[  649.672298][  T807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  649.725245][  T807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6
[  649.811816][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  649.858414][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  649.904230][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  649.934875][ T5704] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  649.942951][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  649.992927][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  650.023123][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  650.063321][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  650.102922][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  650.116617][ T5704] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  650.132927][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  650.157372][ T5704] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  650.163371][  T807] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  650.196405][ T5704] usb 7-1: config 1 interface 0 has no altsetting 0
[  650.216982][ T5704] usb 7-1: string descriptor 0 read error: -22
[  650.221161][  T807] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  650.233000][ T5704] usb 7-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40
[  650.242185][  T807] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  650.261361][  T807] usb 2-1: USB disconnect, device number 37
[  650.274153][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.883177][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  650.914400][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  650.938468][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  650.959312][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  650.988593][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  651.016217][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  651.042883][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  651.063033][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  651.092842][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  651.106241][ T5704] glorious 0003:258A:0033.0001: unknown main item tag 0x0
[  651.132706][ T5704] glorious 0003:258A:0033.0001: unexpected long global item
[  651.150149][ T5704] glorious 0003:258A:0033.0001: probe with driver glorious failed with error -22
[  651.197934][ T5704] usb 7-1: USB disconnect, device number 6
[  651.639661][ T5704] usb 5-1: USB disconnect, device number 48
[  651.742157][T10341] usb usb9: usbfs: process 10341 (syz.6.888) did not claim interface 0 before use
[  652.332963][ T5704] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  652.523788][ T5704] usb 7-1: Using ep0 maxpacket: 8
[  652.541054][ T5704] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  652.571497][ T5704] usb 7-1: config 0 has no interface number 0
[  652.592420][ T5704] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  652.634504][ T5704] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  652.672304][ T5704] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  652.722499][ T5704] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  652.776499][ T5704] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  652.792965][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.816098][ T5704] usb 7-1: config 0 descriptor??
[  652.870355][ T5704] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  653.469576][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.508733][T10355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  653.519705][T10355] block device autoloading is deprecated and will be removed.
[  653.531182][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.928968][ T5704] usb 7-1: USB disconnect, device number 7
[  653.930125][    C1] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  654.013936][ T5704] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  654.020763][T10347] ldusb: No device or device unplugged -19
[  654.128482][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.901'.
[  654.691888][T10391] binder: 10390:10391 ioctl c0306201 0 returned -14
[  654.807903][T10392] binder: 10383:10392 ioctl c0306201 0 returned -14
[  654.861629][T10389] binder: BINDER_SET_CONTEXT_MGR already set
[  654.869844][T10389] binder: 10383:10389 ioctl 4018620d 80000100 returned -16
[  655.649153][T10400] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  656.262889][ T5704] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  656.454441][ T5704] usb 6-1: Using ep0 maxpacket: 32
[  656.465924][ T5704] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  656.484657][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.508867][ T5704] usb 6-1: Product: syz
[  656.538180][ T5704] usb 6-1: Manufacturer: syz
[  656.549411][ T5704] usb 6-1: SerialNumber: syz
[  656.569694][ T5704] usb 6-1: config 0 descriptor??
[  656.589137][ T5704] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  656.608717][ T5704] dvb-usb: bulk message failed: -22 (4/0)
[  656.636271][ T5704] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  656.661503][ T5704] dvb-usb: bulk message failed: -22 (5/0)
[  656.679376][ T5704] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  656.747418][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  656.779745][ T5704] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  656.805730][ T5704] usb 6-1: media controller created
[  656.883482][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  657.045040][ T5704] usb 6-1: selecting invalid altsetting 3
[  657.061120][ T5704] ttusb2: set interface to alts=3 failed
[  657.208958][ T5704] DVB: Unable to find symbol tda10086_attach()
[  657.242734][ T5704] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  657.273924][ T5704] dvb-usb: bulk message failed: -22 (4/0)
[  657.285220][ T5704] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  657.313024][ T5704] dvb-usb: bulk message failed: -22 (5/0)
[  657.320386][ T5704] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  657.343202][ T5704] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  657.695657][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.913'.
[  657.752747][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.913'.
[  657.885590][T10416] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present
[  658.651138][T10432] vcan0: tx address claim with different name
[  659.277172][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.925'.
[  659.288363][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.925'.
[  659.395414][    T9] usb 3-1: new low-speed USB device number 50 using dummy_hcd
[  659.567273][    T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  659.612571][    T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  659.664608][ T5728] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  659.685864][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  659.699760][ T5702] usb 6-1: USB disconnect, device number 17
[  659.718570][    T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  659.765140][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.816458][    T9] usb 3-1: config 0 descriptor??
[  659.853162][T10442] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  659.897544][ T5728] usb 7-1: Using ep0 maxpacket: 16
[  659.934639][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  660.032247][ T5728] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  660.106016][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.129053][ T5728] usb 7-1: Product: syz
[  660.139880][ T5728] usb 7-1: Manufacturer: syz
[  660.167868][ T5728] usb 7-1: SerialNumber: syz
[  660.210361][T10446] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  660.343245][T10450] binder: 10449:10450 ioctl c0306201 80000080 returned -14
[  660.355124][    T9] hid_parser_main: 245 callbacks suppressed
[  660.355148][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.401139][T10450] binder: 10449:10450 ioctl c0306201 800003c0 returned -14
[  660.429922][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.464030][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.500148][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.536452][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.576303][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.616439][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.652670][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.697103][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.732585][    T9] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0
[  660.746881][T10452] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  660.903150][    T9] holtek_mouse 0003:04D9:A04A.0002: hidraw0: USB HID v0.08 Device [HID 04d9:a04a] on usb-dummy_hcd.2-1/input0
[  661.038348][    T9] usb 3-1: USB disconnect, device number 50
[  661.411565][ T9692] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  662.135084][ T5702] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  662.284955][ T5638] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  662.285511][T10467] dlm: plock device version mismatch: kernel (1.2.0), user (1.1048576.0)
[  662.293893][ T5638] Bluetooth: hci3: Injecting HCI hardware error event
[  662.304750][ T5638] Bluetooth: hci3: hardware error 0x00
[  662.807610][T10471] hsr0: entered promiscuous mode
[  662.852067][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'.
[  662.961887][ T5728] usb 7-1: selecting invalid altsetting 1
[  663.163220][ T5728] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  663.219447][ T5728] usb 7-1: USB disconnect, device number 8
[  663.288186][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  663.908720][T10474] QAT: Stopping all acceleration devices.
[  664.522868][ T5638] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  665.389671][T10507] binder: 10506:10507 ioctl c0306201 0 returned -14
[  665.420691][T10507] binder: 10506:10507 ioctl 4018620d 0 returned -22
[  666.574874][ T5702] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  666.734848][ T5702] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.745661][ T5702] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  666.759544][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.774777][ T5702] usb 6-1: config 0 descriptor??
[  666.785593][ T5702] pwc: Askey VC010 type 2 USB webcam detected.
[  667.188645][ T5702] pwc: recv_control_msg error -32 req 02 val 2b00
[  667.196765][ T5702] pwc: recv_control_msg error -32 req 02 val 2700
[  667.204698][ T5702] pwc: recv_control_msg error -32 req 02 val 2c00
[  667.216397][ T5702] pwc: recv_control_msg error -32 req 04 val 1000
[  667.225204][ T5702] pwc: recv_control_msg error -32 req 04 val 1300
[  667.232531][ T5702] pwc: recv_control_msg error -32 req 04 val 1400
[  667.253028][ T5702] pwc: recv_control_msg error -32 req 02 val 2000
[  667.271409][ T5702] pwc: recv_control_msg error -32 req 02 val 2100
[  667.281465][ T5702] pwc: recv_control_msg error -32 req 04 val 1500
[  667.293451][ T5702] pwc: recv_control_msg error -32 req 02 val 2500
[  667.301501][ T5702] pwc: recv_control_msg error -32 req 02 val 2400
[  667.433356][T10522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.952'.
[  667.523396][ T5702] pwc: recv_control_msg error -71 req 02 val 2900
[  667.546681][ T5702] pwc: recv_control_msg error -71 req 02 val 2800
[  667.559412][ T5702] pwc: recv_control_msg error -71 req 04 val 1100
[  667.570693][ T5702] pwc: recv_control_msg error -71 req 04 val 1200
[  667.622449][ T5702] pwc: Registered as video103.
[  667.632902][ T5724] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  667.651004][ T5702] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7
[  667.736448][ T5702] usb 6-1: USB disconnect, device number 18
[  667.802929][ T5724] usb 7-1: Using ep0 maxpacket: 32
[  667.828922][ T5724] usb 7-1: unable to get BOS descriptor or descriptor too short
[  667.868991][ T5724] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  667.905237][ T5724] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  667.919041][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.959422][ T5724] usb 7-1: Product: syz
[  667.984170][ T5724] usb 7-1: Manufacturer: syz
[  668.001762][ T5724] usb 7-1: SerialNumber: syz
[  670.669578][ T3312] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.960191][   T29] audit: type=1326 audit(1777638476.383:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  671.052193][   T29] audit: type=1326 audit(1777638476.383:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf717616b code=0x7ffc0000
[  671.117261][ T5724] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  671.157862][   T29] audit: type=1326 audit(1777638476.413:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  671.184894][ T5724] usb 7-1: found format II with max.bitrate = 13, frame size=0
[  671.211098][ T5724] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  671.271968][   T29] audit: type=1326 audit(1777638476.413:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  671.358056][   T29] audit: type=1326 audit(1777638476.423:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703f01c code=0x7ffc0000
[  671.416726][ T5724] usb 7-1: USB disconnect, device number 9
[  671.438699][   T29] audit: type=1326 audit(1777638476.423:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  671.515094][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  671.554494][   T29] audit: type=1326 audit(1777638476.423:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  671.656591][   T29] audit: type=1326 audit(1777638476.423:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703f01c code=0x7ffc0000
[  671.719021][   T29] audit: type=1326 audit(1777638476.423:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  671.769156][   T29] audit: type=1326 audit(1777638476.423:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.1.964" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000
[  672.032913][ T5724] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  672.214575][ T5724] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  672.232876][ T5724] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  672.251985][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.273739][ T5724] usb 7-1: config 0 descriptor??
[  672.294529][ T5724] pwc: Askey VC010 type 2 USB webcam detected.
[  672.708496][ T5724] pwc: recv_control_msg error -32 req 02 val 2b00
[  672.722316][ T5724] pwc: recv_control_msg error -32 req 02 val 2700
[  672.736577][ T5724] pwc: recv_control_msg error -32 req 02 val 2c00
[  672.750639][ T5724] pwc: recv_control_msg error -32 req 04 val 1000
[  672.768397][ T5724] pwc: recv_control_msg error -32 req 04 val 1300
[  672.780768][ T5724] pwc: recv_control_msg error -32 req 04 val 1400
[  672.794479][ T5724] pwc: recv_control_msg error -32 req 02 val 2000
[  672.813179][ T5724] pwc: recv_control_msg error -32 req 02 val 2100
[  672.828109][ T5724] pwc: recv_control_msg error -32 req 04 val 1500
[  672.841797][ T5724] pwc: recv_control_msg error -32 req 02 val 2500
[  672.856012][ T5724] pwc: recv_control_msg error -32 req 02 val 2400
[  672.870038][ T5724] pwc: recv_control_msg error -32 req 02 val 2600
[  673.086832][ T5724] pwc: recv_control_msg error -71 req 02 val 2800
[  673.103448][ T5724] pwc: recv_control_msg error -71 req 04 val 1100
[  673.120524][ T5724] pwc: recv_control_msg error -71 req 04 val 1200
[  673.142199][ T5724] pwc: Registered as video103.
[  673.155737][ T5724] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8
[  673.203093][ T5724] usb 7-1: USB disconnect, device number 10
[  673.781504][T10572] bridge0: port 2(bridge_slave_1) entered disabled state
[  673.789754][T10572] bridge0: port 1(bridge_slave_0) entered disabled state
[  674.155862][T10572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  674.190136][T10572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  674.880650][ T5638] Bluetooth: hci1: connection err: -111
[  675.500196][ T3312] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.733828][   T69] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.171772][ T3312] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.470348][T10628] binder: 10623:10628 ioctl c0306201 0 returned -14
[  677.577873][   T69] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.591187][   T69] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.634900][T10593] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  677.665460][T10593] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  677.746709][ T3312] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.783002][T10593] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  677.793979][  T807] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  677.816730][T10593] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  677.828637][   T69] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.973914][  T807] usb 2-1: Using ep0 maxpacket: 16
[  677.981444][  T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  677.995281][  T807] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  678.004867][  T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.013592][  T807] usb 2-1: Product: syz
[  678.018109][  T807] usb 2-1: Manufacturer: syz
[  678.029309][  T807] usb 2-1: SerialNumber: syz
[  678.103429][   T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  678.156457][  T807] usb 2-1: config 0 descriptor??
[  678.181148][  T807] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  678.211781][  T807] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  678.281851][   T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  678.311869][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.342607][   T10] usb 7-1: Product: syz
[  678.355851][   T10] usb 7-1: Manufacturer: syz
[  678.368551][   T10] usb 7-1: SerialNumber: syz
[  678.695428][T10593] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  678.728165][T10593] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  678.800025][  T807] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  678.835617][   T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  678.852854][ T5702] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  678.876455][   T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  678.969384][T10593] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  678.982941][T10593] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  679.033459][ T5702] usb 6-1: Using ep0 maxpacket: 32
[  679.058326][ T5702] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  679.090689][ T5702] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  679.116343][ T5702] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  679.146448][ T5702] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  679.183643][ T5702] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  679.204058][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  679.223121][ T5702] usb 6-1: Product: syz
[  679.234680][ T5702] usb 6-1: Manufacturer: syz
[  679.249247][ T5702] usb 6-1: SerialNumber: syz
[  679.275443][ T3312] bridge_slave_1: left allmulticast mode
[  679.289649][  T807] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  679.303326][ T3312] bridge_slave_1: left promiscuous mode
[  679.311173][    C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  679.322517][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.332013][  T807] em28xx 2-1:0.0: board has no eeprom
[  679.378658][ T3312] bridge_slave_0: left allmulticast mode
[  679.395512][ T3312] bridge_slave_0: left promiscuous mode
[  679.411817][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.424464][ T5702] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input9
[  679.543573][ T5702] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  679.572318][ T5702]  (id 0x00)
[  679.644025][  T807] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  679.675170][  T807] em28xx 2-1:0.0: dvb set to bulk mode.
[  679.698309][ T5728] em28xx 2-1:0.0: Binding DVB extension
[  679.742286][   T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  679.776263][  T807] usb 2-1: USB disconnect, device number 38
[  679.800404][   T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  679.817661][  T807] em28xx 2-1:0.0: Disconnecting em28xx
[  679.830006][ T5702] rc_core: IR keymap rc-imon-pad not found
[  679.868402][ T5702] Registered IR keymap rc-empty
[  679.910542][   T10] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  679.925289][ T5702] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  679.967884][ T5702] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  679.997776][   T10] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  680.028900][ T5728] em28xx 2-1:0.0: Registering input extension
[  680.059941][  T807] em28xx 2-1:0.0: Closing input extension
[  680.082307][ T5702] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[  680.106576][   T10] usb 7-1: USB disconnect, device number 11
[  680.149124][ T5702] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input10
[  680.298800][ T5702] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:19> initialized
[  680.585438][  T807] em28xx 2-1:0.0: Freeing device
[  680.911070][ T3312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  680.929893][  T807] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  680.984325][ T3312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  681.017558][ T3312] bond0 (unregistering): Released all slaves
[  681.116421][  T807] usb 2-1: Using ep0 maxpacket: 8
[  681.138670][  T807] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  681.175205][  T807] usb 2-1: config 0 has no interface number 0
[  681.199880][  T807] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  681.264599][  T807] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  681.311556][  T807] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  681.357025][  T807] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  681.390369][  T807] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  681.410930][  T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.411337][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.995'.
[  681.448441][  T807] usb 2-1: config 0 descriptor??
[  681.487333][  T807] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  681.507733][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  681.507779][   T29] audit: type=1326 audit(1777638486.933:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  681.637789][   T29] audit: type=1326 audit(1777638486.933:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  681.748129][   T29] audit: type=1326 audit(1777638486.933:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  681.809027][ T5725] usb 2-1: USB disconnect, device number 39
[  681.823678][   T29] audit: type=1326 audit(1777638486.933:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  681.870188][T10689] imon:display_open: display port is already open
[  681.897670][ T5725] ldusb 2-1:0.55: LD USB Device #1 now disconnected
[  681.966328][   T29] audit: type=1326 audit(1777638486.933:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  682.031551][   T29] audit: type=1326 audit(1777638486.983:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  682.059880][   T10] usb 6-1: USB disconnect, device number 19
[  682.112571][   T29] audit: type=1326 audit(1777638486.983:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  682.179277][   T29] audit: type=1326 audit(1777638486.983:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  682.248586][   T29] audit: type=1326 audit(1777638486.993:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  682.324087][   T29] audit: type=1326 audit(1777638486.993:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10684 comm="syz.2.992" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000
[  683.065598][T10738] binder: 10736:10738 ioctl c0306201 80000080 returned -14
[  683.102191][T10738] binder: 10736:10738 ioctl c0306201 800003c0 returned -14
[  683.521523][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'.
[  683.585975][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1007'.
[  683.653149][T10752] netlink: 'syz.2.1007': attribute type 4 has an invalid length.
[  683.680892][T10752] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1007'.
[  684.897287][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1
[  684.905488][T10744] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  684.931229][T10752] .`: renamed from bond0
[  685.043877][T10758] mac80211_hwsim hwsim5 O3�c��: renamed from wlan1
[  685.964508][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  685.971061][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  687.184972][ T3312] hsr_slave_0: left promiscuous mode
[  687.236106][ T3312] hsr_slave_1: left promiscuous mode
[  687.275955][ T3312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  687.299297][ T3312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  687.333577][ T3312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  687.352542][ T3312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  687.451883][ T3312] veth1_macvtap: left promiscuous mode
[  687.474172][ T3312] veth0_macvtap: left promiscuous mode
[  687.490503][ T3312] veth1_vlan: left promiscuous mode
[  687.520847][ T3312] veth0_vlan: left promiscuous mode
[  688.580782][ T3312] team0 (unregistering): Port device team_slave_1 removed
[  688.686602][ T3312] team0 (unregistering): Port device team_slave_0 removed
[  692.021935][ T3312] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.066878][T10895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1036'.
[  693.618066][ T3312] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.037339][ T3312] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.513010][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[  694.541239][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[  694.909069][T10920] netlink: 'syz.1.1040': attribute type 23 has an invalid length.
[  694.928170][ T3312] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.100165][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2
[  695.182879][ T5702] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  695.282939][ T9187] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  695.380678][ T5702] usb 3-1: Using ep0 maxpacket: 16
[  695.447349][ T5702] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  695.471506][ T9187] usb 6-1: Using ep0 maxpacket: 16
[  695.508247][ T9187] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  695.559782][ T9187] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  695.584560][ T9187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.647548][ T5702] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  695.676289][ T9187] usb 6-1: Product: syz
[  695.686017][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.705961][ T9187] usb 6-1: Manufacturer: syz
[  695.742403][ T9187] usb 6-1: SerialNumber: syz
[  695.761851][ T5702] usb 3-1: Product: syz
[  695.791459][ T5702] usb 3-1: Manufacturer: syz
[  695.827916][T10922] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  695.844717][ T5702] usb 3-1: SerialNumber: syz
[  695.942293][T10921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  697.768843][ T3312] bridge_slave_1: left allmulticast mode
[  697.804630][ T3312] bridge_slave_1: left promiscuous mode
[  697.811381][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state
[  697.950130][ T3312] bridge_slave_0: left allmulticast mode
[  697.957375][ T3312] bridge_slave_0: left promiscuous mode
[  697.966762][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.457988][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'.
[  698.497721][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'.
[  698.965646][ T5702] usb 3-1: selecting invalid altsetting 1
[  698.977097][ T9187] usb 6-1: selecting invalid altsetting 1
[  699.072951][  T807] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  699.232189][ T3312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  699.280493][ T3312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  699.289351][  T807] usb 5-1: Using ep0 maxpacket: 16
[  699.318566][  T807] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  699.346248][ T3312] bond0 (unregistering): Released all slaves
[  699.366530][ T5702] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  699.424832][  T807] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  699.477982][  T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.517373][ T5702] usb 3-1: USB disconnect, device number 51
[  699.580266][  T807] usb 5-1: Product: syz
[  699.587176][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3
[  699.634071][  T807] usb 5-1: Manufacturer: syz
[  699.676194][ T8613] udevd[8613]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  699.705966][  T807] usb 5-1: SerialNumber: syz
[  699.747121][T10968] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  699.760873][ T9187] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  699.956715][ T9187] usb 6-1: USB disconnect, device number 20
[  700.281170][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  700.741452][ T3312] hsr_slave_0: left promiscuous mode
[  700.801719][ T3312] hsr_slave_1: left promiscuous mode
[  700.845432][ T3312] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  700.912934][ T3312] batman_adv: batadv0: Removing interface: batadv_slave_0
[  700.963097][ T3312] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  701.002715][ T3312] batman_adv: batadv0: Removing interface: batadv_slave_1
[  701.079671][ T3312] veth1_macvtap: left promiscuous mode
[  701.115408][ T3312] veth0_macvtap: left promiscuous mode
[  701.134097][ T3312] veth1_vlan: left promiscuous mode
[  701.177970][ T3312] veth0_vlan: left promiscuous mode
[  701.589681][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'.
[  701.606426][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'.
[  702.383314][ T9187] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  702.574126][ T9187] usb 2-1: Using ep0 maxpacket: 16
[  702.630412][ T9187] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  702.726868][ T9187] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  702.757444][ T9187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.777081][ T3312] team0 (unregistering): Port device team_slave_1 removed
[  702.789983][ T9187] usb 2-1: Product: syz
[  702.808043][ T9187] usb 2-1: Manufacturer: syz
[  702.827158][ T9187] usb 2-1: SerialNumber: syz
[  702.858936][ T3312] team0 (unregistering): Port device team_slave_0 removed
[  702.873473][T10994] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  703.812880][ T5702] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  703.992953][ T5702] usb 6-1: Using ep0 maxpacket: 8
[  704.028444][ T5702] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  704.037103][ T5702] usb 6-1: config 0 has no interface number 0
[  704.045777][ T5702] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  704.057232][ T5702] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  704.069408][ T5702] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  704.081227][ T5702] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  704.095668][ T5702] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  704.175912][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.240767][ T5702] usb 6-1: config 0 descriptor??
[  704.340404][ T5702] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  704.361482][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4
[  704.881492][  T807] usb 5-1: selecting invalid altsetting 1
[  705.279171][  T807] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  705.610027][ T8613] udevd[8613]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  706.522673][  T807] usb 6-1: USB disconnect, device number 21
[  706.615067][  T807] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  706.735986][    T9] usb 5-1: USB disconnect, device number 49
[  707.650128][ T9187] usb 2-1: selecting invalid altsetting 1
[  707.823320][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5
[  707.983897][ T9187] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  708.036345][ T9187] usb 2-1: USB disconnect, device number 40
[  708.076373][T11042] netlink: 'syz.4.1054': attribute type 39 has an invalid length.
[  708.175922][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  708.384221][ T8588] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  708.544440][ T8588] usb 5-1: Using ep0 maxpacket: 32
[  708.555730][ T8588] usb 5-1: config 0 has an invalid interface number: 146 but max is 0
[  708.565147][ T8588] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.579132][ T8588] usb 5-1: config 0 has no interface number 0
[  708.585839][ T8588] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[  708.615189][ T8588] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  708.641480][ T8588] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0
[  708.690840][ T8588] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  708.750360][ T8588] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  708.798755][ T8588] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  708.836956][ T8588] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  708.874738][ T8588] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  708.916636][ T8588] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  708.918920][T11063] netlink: 'syz.1.1058': attribute type 4 has an invalid length.
[  708.942473][ T8588] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  708.973065][T11063] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1058'.
[  708.980419][ T8588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.996701][T11063] .`: renamed from bond0
[  709.027036][ T8588] usb 5-1: Product: syz
[  709.035719][ T8588] usb 5-1: Manufacturer: syz
[  709.047624][ T8588] usb 5-1: SerialNumber: syz
[  709.075003][ T8588] usb 5-1: config 0 descriptor??
[  709.184197][T11044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  709.272587][ T8588] usb 5-1: will this work? Command EP is not usually 12
[  709.324655][ T8588] usb 5-1: will this work? Response EP is not usually 3
[  709.342064][ T8588] usb 5-1: will this work? Image data EP is not usually 2
[  709.391805][ T8588] scsi host1: microtekX6
[  709.436449][   T69] usb 5-1: error -90 submitting URB
[  709.479728][   T69] usb 5-1: error -90 submitting URB
[  709.513714][   T11] usb 5-1: error -90 submitting URB
[  709.521577][ T8588] usb 5-1: USB disconnect, device number 50
[  709.553524][   T11] usb 5-1: error -19 submitting URB
[  709.861479][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6
[  710.523763][ T9187] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  710.692863][ T9187] usb 6-1: Using ep0 maxpacket: 32
[  710.715370][ T9187] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  710.761325][ T9187] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  710.794292][ T9187] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  710.825901][ T9187] usb 6-1: Product: syz
[  710.838770][ T9187] usb 6-1: Manufacturer: syz
[  710.847212][ T9187] usb 6-1: SerialNumber: syz
[  710.861228][ T9187] usb 6-1: config 0 descriptor??
[  710.876090][T11087] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  711.220037][T11111] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.1069'.
[  711.283806][ T9187] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  711.452925][ T9187] usb 7-1: Using ep0 maxpacket: 8
[  711.454697][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7
[  711.467787][ T9187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  711.501878][ T9187] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  711.514923][ T9187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.540099][    T9] usb 6-1: USB disconnect, device number 22
[  711.550389][ T9187] usb 7-1: config 0 descriptor??
[  711.674892][ T8588] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  711.798192][ T9187] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  711.833859][ T8588] usb 2-1: Using ep0 maxpacket: 8
[  711.877644][ T8588] usb 2-1: New USB device found, idVendor=17cc, idProduct=1978, bcdDevice= 0.40
[  711.905142][ T8588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.930564][ T8588] usb 2-1: Product: syz
[  711.944550][ T8588] usb 2-1: Manufacturer: syz
[  711.953801][ T8588] usb 2-1: SerialNumber: syz
[  712.073842][ T5725] usb 7-1: USB disconnect, device number 12
[  712.093600][T11131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1072'.
[  712.127156][T11131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1072'.
[  712.224007][ T8588] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[  712.237243][ T8588] usb 2-1: 1:1 : unsupported sample bitwidth 8 in 9 bytes
[  712.262271][ T8588] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  712.364146][ T8588] usb 2-1: USB disconnect, device number 41
[  712.461608][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  712.987752][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8
[  713.115430][T11160] warning: `syz.1.1080' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  713.133017][ T9187] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  713.299354][T11166] team0: entered allmulticast mode
[  713.317852][T11166] team_slave_0: entered allmulticast mode
[  713.317858][ T9187] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  713.317886][ T9187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.342169][T11166] team_slave_1: entered allmulticast mode
[  713.366337][T11166] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1073'.
[  713.401942][T11166] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  713.422613][ T9187] usb 6-1: config 0 descriptor??
[  713.658138][ T9187] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  714.048780][ T9187] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  714.072979][ T9187] [drm] Initialized udl on minor 2
[  714.139454][ T9187] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  714.214694][ T9187] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  714.278269][ T9187] usb 6-1: USB disconnect, device number 23
[  714.295071][    T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  714.344301][    T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  714.376283][ T5704] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  714.572836][ T5704] usb 2-1: Using ep0 maxpacket: 32
[  714.585700][ T5704] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  714.672801][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.738071][ T5704] usb 2-1: config 0 descriptor??
[  714.967872][ T5704] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  715.017513][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  715.059874][ T5704] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  715.091534][ T5704] usb 2-1: media controller created
[  715.271317][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  715.419593][ T5704] az6027: usb out operation failed. (-71)
[  715.442717][ T5704] az6027: usb out operation failed. (-71)
[  715.458008][ T5704] stb0899_attach: Driver disabled by Kconfig
[  715.473117][ T5704] az6027: no front-end attached
[  715.473117][ T5704] 
[  715.488453][ T5704] az6027: usb out operation failed. (-71)
[  715.495002][ T5704] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  715.504935][ T5704] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  715.530458][ T5704] dvb-usb: schedule remote query interval to 400 msecs.
[  715.553918][ T5704] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  715.594342][ T5704] usb 2-1: USB disconnect, device number 42
[  715.776649][ T5704] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  716.722626][T11226] input: syz0 as /devices/virtual/input/input13
[  717.572643][T11246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  717.581479][T11246] IPv6: NLM_F_CREATE should be set when creating new route
[  717.826268][T11249] syzkaller0: entered promiscuous mode
[  717.844599][T11249] syzkaller0: entered allmulticast mode
[  717.962982][ T5704] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  718.136587][ T5704] usb 5-1: config 0 has no interfaces?
[  718.161668][ T5704] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  718.200681][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.243850][ T5704] usb 5-1: config 0 descriptor??
[  718.425600][ T8588] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  718.614924][ T8588] usb 7-1: unable to get BOS descriptor or descriptor too short
[  718.635651][ T5704] usb 5-1: USB disconnect, device number 51
[  718.639895][ T8588] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  718.700384][ T8588] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  718.741295][ T8588] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  718.784832][ T8588] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  718.816021][ T8588] usb 7-1: config 1 interface 1 has no altsetting 1
[  718.835104][ T8588] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  718.854698][ T8588] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.874375][ T8588] usb 7-1: Product: syz
[  718.882831][ T8588] usb 7-1: Manufacturer: syz
[  718.894710][ T8588] usb 7-1: SerialNumber: syz
[  719.043004][ T5634] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  719.212841][ T5634] usb 2-1: Using ep0 maxpacket: 32
[  719.223251][ T5634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  719.248274][ T5634] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  719.256475][ T8588] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  719.279795][ T5634] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  719.306402][ T5634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  719.331411][ T8588] usb 7-1: USB disconnect, device number 13
[  719.334022][ T5634] usb 2-1: SerialNumber: syz
[  719.386785][ T5634] cdc_ether 2-1:1.0: skipping garbage
[  719.399216][ T5634] usb 2-1: No union descriptors
[  719.434451][T11217] udevd[11217]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  719.593401][ T5634] usb 2-1: USB disconnect, device number 43
[  719.868404][T11271] input: syz0 as /devices/virtual/input/input14
[  719.923835][T11217] udevd[11217]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory
[  720.323949][T11286] bridge0: port 3(netdevsim0) entered blocking state
[  720.355242][T11286] bridge0: port 3(netdevsim0) entered disabled state
[  720.370662][T11289] netlink: 'syz.6.1118': attribute type 10 has an invalid length.
[  720.383229][T11286] netdevsim netdevsim6 netdevsim0: entered allmulticast mode
[  720.416655][T11286] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  720.435633][T11286] bridge0: port 3(netdevsim0) entered blocking state
[  720.442720][T11286] bridge0: port 3(netdevsim0) entered forwarding state
[  720.476791][T11289] bridge0: port 3(netdevsim0) entered disabled state
[  720.483845][T11289] bridge0: port 2(bridge_slave_1) entered disabled state
[  720.492248][T11289] bridge0: port 1(bridge_slave_0) entered disabled state
[  720.517604][T11289] bridge0: port 3(netdevsim0) entered blocking state
[  720.524564][T11289] bridge0: port 3(netdevsim0) entered forwarding state
[  720.532521][T11289] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.539778][T11289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  720.547346][T11289] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.554735][T11289] bridge0: port 1(bridge_slave_0) entered forwarding state
[  720.569377][T11289] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  721.374158][T11309] input: syz0 as /devices/virtual/input/input15
[  722.310578][T11338] snd_dummy snd_dummy.0: control 4:57412:0:syz0:0 is already present
[  722.412956][T11343] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1141'.
[  722.608079][T11349] syzkaller0: entered promiscuous mode
[  722.614097][T11349] syzkaller0: entered allmulticast mode
[  726.161282][T11422] pim6reg: entered allmulticast mode
[  726.200076][T11422] pim6reg: left allmulticast mode
[  726.256958][T11424] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  726.892844][ T8588] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  727.084603][ T8588] usb 2-1: Using ep0 maxpacket: 16
[  727.116040][ T8588] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  727.168138][ T8588] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  727.206644][ T8588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.241286][ T8588] usb 2-1: Product: syz
[  727.265667][ T8588] usb 2-1: Manufacturer: syz
[  727.279409][ T8588] usb 2-1: SerialNumber: syz
[  727.302146][ T8588] usb 2-1: config 0 descriptor??
[  727.331730][ T8588] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  727.358756][ T8588] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  727.442842][ T5634] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  727.623269][ T5634] usb 5-1: Using ep0 maxpacket: 16
[  727.646456][ T5634] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  727.681806][ T5634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.718849][ T5634] usb 5-1: Product: syz
[  727.738860][ T5634] usb 5-1: Manufacturer: syz
[  727.757475][ T5634] usb 5-1: SerialNumber: syz
[  727.795586][ T5634] usb 5-1: config 0 descriptor??
[  727.817963][ T5634] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  727.950558][ T8588] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  728.246536][T11453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  728.271241][T11453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  728.344543][ T5634] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[  728.423795][ T8588] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  728.458086][ T8588] em28xx 2-1:0.0: board has no eeprom
[  728.774968][ T8588] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  728.805296][ T8588] em28xx 2-1:0.0: dvb set to bulk mode.
[  728.822069][ T5725] em28xx 2-1:0.0: Binding DVB extension
[  728.850597][ T8588] usb 2-1: USB disconnect, device number 44
[  728.919342][ T8588] em28xx 2-1:0.0: Disconnecting em28xx
[  728.952269][  T807] usb 5-1: USB disconnect, device number 52
[  728.979611][   T29] kauditd_printk_skb: 19 callbacks suppressed
[  728.979638][   T29] audit: type=1804 audit(1777638534.403:55): pid=11487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1180" name="/newroot/231/file0" dev="tmpfs" ino=1188 res=1 errno=0
[  729.109452][ T5725] em28xx 2-1:0.0: Registering input extension
[  729.143466][ T8588] em28xx 2-1:0.0: Closing input extension
[  729.206986][ T8588] em28xx 2-1:0.0: Freeing device
[  730.023306][T11523] syzkaller0: entered promiscuous mode
[  730.029051][T11523] syzkaller0: entered allmulticast mode
[  730.603383][ T8588] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  730.773755][ T8588] usb 6-1: Using ep0 maxpacket: 16
[  730.812394][ T8588] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  730.859111][ T8588] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  730.938772][ T8588] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.975130][ T8588] usb 6-1: Product: syz
[  731.035013][ T8588] usb 6-1: Manufacturer: syz
[  731.132835][ T8588] usb 6-1: SerialNumber: syz
[  731.469966][ T8588] usb 6-1: config 0 descriptor??
[  731.524033][ T8588] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  731.568086][ T8588] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  732.147691][ T8588] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  732.569843][ T8588] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  732.615380][ T8588] em28xx 6-1:0.0: board has no eeprom
[  732.901126][ T9735] bond0: (slave bond_slave_0): interface is now down
[  732.926126][ T9735] bond0: (slave bond_slave_1): interface is now down
[  732.942864][ T8588] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  732.965562][ T8588] em28xx 6-1:0.0: dvb set to bulk mode.
[  732.997885][ T5725] em28xx 6-1:0.0: Binding DVB extension
[  733.006593][ T9735] bond0: (slave bond_slave_0): interface is now down
[  733.040057][ T9735] bond0: (slave bond_slave_1): interface is now down
[  733.040448][ T8588] usb 6-1: USB disconnect, device number 24
[  733.128355][ T8588] em28xx 6-1:0.0: Disconnecting em28xx
[  733.146214][ T9735] bond0: now running without any active interface!
[  733.336308][ T5725] em28xx 6-1:0.0: Registering input extension
[  733.382604][ T8588] em28xx 6-1:0.0: Closing input extension
[  733.496127][ T8588] em28xx 6-1:0.0: Freeing device
[  733.885697][T11624] input: syz0 as /devices/virtual/input/input23
[  734.492848][    T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  734.658703][    T9] usb 5-1: Using ep0 maxpacket: 16
[  734.728399][    T9] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  734.787681][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.812691][    T9] usb 5-1: Product: syz
[  734.820879][    T9] usb 5-1: Manufacturer: syz
[  734.833188][    T9] usb 5-1: SerialNumber: syz
[  734.870235][    T9] usb 5-1: config 0 descriptor??
[  735.120962][T11656] syzkaller0: entered promiscuous mode
[  735.128593][T11656] syzkaller0: entered allmulticast mode
[  735.265991][  T807] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  735.303154][ T8588] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  735.341003][    T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  735.384981][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  735.429625][    T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  735.443379][  T807] usb 7-1: Using ep0 maxpacket: 16
[  735.456900][    T9] usb 5-1: media controller created
[  735.465913][ T8588] usb 6-1: Using ep0 maxpacket: 32
[  735.480848][  T807] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  735.495569][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  735.512349][ T8588] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  735.537811][  T807] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  735.548127][ T8588] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  735.562210][  T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.570013][T11633] dtv5100: wlen = 4, aborting.
[  735.580029][ T8588] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  735.600851][  T807] usb 7-1: Product: syz
[  735.611686][ T8588] usb 6-1: Product: syz
[  735.618984][  T807] usb 7-1: Manufacturer: syz
[  735.633114][ T8588] usb 6-1: Manufacturer: syz
[  735.639601][  T807] usb 7-1: SerialNumber: syz
[  735.645868][ T8588] usb 6-1: SerialNumber: syz
[  735.666034][  T807] usb 7-1: config 0 descriptor??
[  735.679481][ T8588] usb 6-1: config 0 descriptor??
[  735.715670][T11653] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  735.726538][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  735.726929][  T807] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  735.756229][    T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  735.797411][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  735.799403][  T807] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  735.915748][    T9] usb 5-1: USB disconnect, device number 53
[  735.958464][    T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  736.020405][ T5727] usb 6-1: USB disconnect, device number 25
[  736.376083][  T807] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  736.754480][ T5727] hid_parser_main: 30 callbacks suppressed
[  736.754532][ T5727] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  736.813533][  T807] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  736.851838][  T807] em28xx 7-1:0.0: board has no eeprom
[  736.881920][ T5727] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  737.115620][T11693] fido_id[11693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  737.164677][  T807] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  737.184532][  T807] em28xx 7-1:0.0: dvb set to bulk mode.
[  737.209684][ T5727] em28xx 7-1:0.0: Binding DVB extension
[  737.271208][  T807] usb 7-1: USB disconnect, device number 14
[  737.330859][  T807] em28xx 7-1:0.0: Disconnecting em28xx
[  737.415419][ T5727] em28xx 7-1:0.0: Registering input extension
[  737.455267][  T807] em28xx 7-1:0.0: Closing input extension
[  737.559338][T11707] syzkaller0: entered promiscuous mode
[  737.570653][T11707] syzkaller0: entered allmulticast mode
[  737.612417][  T807] em28xx 7-1:0.0: Freeing device
[  739.508607][ T5727] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  739.673208][ T5727] usb 5-1: Using ep0 maxpacket: 16
[  739.687235][ T5727] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  739.713028][ T5727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  739.784504][ T5727] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  739.817455][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.826456][ T5727] usb 5-1: Product: syz
[  739.831068][ T5727] usb 5-1: Manufacturer: syz
[  739.837226][ T5727] usb 5-1: SerialNumber: syz
[  739.848159][ T5727] usb 5-1: config 0 descriptor??
[  739.888212][ T5727] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  739.899162][ T5727] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  740.090677][    T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  740.271626][    T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  740.280441][    T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  740.291675][    T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  740.318749][    T9] usb 3-1: config 220 has no interface number 2
[  740.326137][    T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  740.353811][    T9] usb 3-1: config 220 interface 0 has no altsetting 0
[  740.377311][    T9] usb 3-1: config 220 interface 76 has no altsetting 0
[  740.400296][    T9] usb 3-1: config 220 interface 1 has no altsetting 0
[  740.470668][    T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  740.489151][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.498910][    T9] usb 3-1: Product: syz
[  740.503871][    T9] usb 3-1: Manufacturer: syz
[  740.508971][    T9] usb 3-1: SerialNumber: syz
[  740.519343][ T5727] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  740.536374][ T5727] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  740.563112][T11758] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  740.736059][    T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  740.760071][    T9] uvcvideo 3-1:220.0: No valid video chain found.
[  740.769353][    T9] usb 3-1: selecting invalid altsetting 0
[  740.844679][    T9] usb 3-1: selecting invalid altsetting 0
[  740.851603][    T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  740.891811][    T9] usb 3-1: USB disconnect, device number 52
[  741.163107][ T5727] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[  741.383937][ T5727] em28xx 5-1:0.0: couldn't setup AC97 register 2
[  741.418500][ T5727] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  741.438846][ T5727] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  741.448981][ T5727] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  741.464837][ T5727] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  741.503959][ T5727] usb 5-1: USB disconnect, device number 54
[  742.242953][ T5727] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  742.395188][ T5727] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  742.405652][ T5727] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  742.415274][ T5727] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  742.424948][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.436318][ T5727] usb 5-1: config 0 descriptor??
[  742.658315][T11774] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1880
[  742.995287][ T5727] usb 5-1: USB disconnect, device number 55
[  743.060930][    T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  743.222226][    T9] usb 3-1: Using ep0 maxpacket: 8
[  743.229861][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  743.240725][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  743.250244][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  743.259747][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.281096][    T9] usb 3-1: config 0 descriptor??
[  743.825690][T11790] loop8: detected capacity change from 0 to 7
[  743.838365][T11791] netlink: 822 bytes leftover after parsing attributes in process `syz.5.1275'.
[  743.848276][T11791] bridge: RTM_NEWNEIGH with unconfigured vlan 1033 on bridge0
[  743.880158][T11790] Dev loop8: unable to read RDB block 7
[  743.889060][T11790]  loop8: unable to read partition table
[  743.895241][T11790] loop8: partition table beyond EOD, truncated
[  743.907234][T11790] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  744.693684][T11809] syzkaller0: entered promiscuous mode
[  744.738789][T11809] syzkaller0: entered allmulticast mode
[  744.907651][   T29] audit: type=1804 audit(1777638550.333:56): pid=11813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1282" name="/newroot/113/file1" dev="tmpfs" ino=591 res=1 errno=0
[  745.975768][T11839] syzkaller0: entered promiscuous mode
[  745.993540][T11839] syzkaller0: entered allmulticast mode
[  746.315095][    T9] usb 3-1: USB disconnect, device number 53
[  747.065664][ T8588] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  747.245855][ T8588] usb 2-1: config 0 has no interfaces?
[  747.265686][ T8588] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  747.299450][ T8588] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.349199][ T8588] usb 2-1: config 0 descriptor??
[  747.409819][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  747.420934][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  747.672658][ T8588] usb 2-1: USB disconnect, device number 45
[  753.519441][T11918] netlink: 'syz.5.1319': attribute type 1 has an invalid length.
[  753.907008][T11920] bond1: (slave geneve2): making interface the new active one
[  753.974318][T11920] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  754.006727][ T9735] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  754.059408][ T9735] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  754.126246][ T9735] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  754.177648][ T9735] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  754.224864][ T8588] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  754.421570][ T8588] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  754.462997][ T8588] usb 5-1: config 0 has no interfaces?
[  754.485677][ T8588] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  754.510330][ T8588] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.542245][ T8588] usb 5-1: Product: syz
[  754.562079][ T8588] usb 5-1: Manufacturer: syz
[  754.579046][ T8588] usb 5-1: SerialNumber: syz
[  754.679629][ T8588] usb 5-1: config 0 descriptor??
[  755.131274][ T5727] usb 5-1: USB disconnect, device number 56
[  757.363055][ T5727] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  757.555422][ T5727] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  757.574494][ T5727] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  757.593023][ T5727] usb 6-1: Product: syz
[  757.628551][ T5727] usb 6-1: config 0 descriptor??
[  757.659439][ T5727] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  757.692302][ T5727] usb 6-1: Detected FT232H
[  757.858432][ T5727] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  758.318456][T12003] syzkaller0: entered promiscuous mode
[  758.338995][T12003] syzkaller0: entered allmulticast mode
[  758.483791][ T5727] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  758.552112][ T5727] usb 6-1: USB disconnect, device number 26
[  758.842326][ T5727] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  758.962577][ T5727] ftdi_sio 6-1:0.0: device disconnected
[  759.093175][ T5634] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  759.402229][ T5634] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  759.464264][ T5634] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.544868][ T5634] usb 7-1: config 0 descriptor??
[  759.816662][ T5634] usb 7-1: Cannot read MAC address
[  759.839893][ T5634] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[  760.255443][T12038] capability: warning: `syz.5.1367' uses 32-bit capabilities (legacy support in use)
[  760.917837][ T5634] usb 7-1: USB disconnect, device number 15
[  761.832878][ T5634] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  761.878321][T12076] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1��^!�l�1�*�$pOc�ɔ��r$�G����
[  761.915779][T12078] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1382'.
[  762.002888][ T5634] usb 6-1: Using ep0 maxpacket: 32
[  762.015788][ T5634] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  762.034856][ T5634] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  762.047044][ T5634] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  762.057149][ T5634] usb 6-1: Product: syz
[  762.061767][ T5634] usb 6-1: Manufacturer: syz
[  762.075546][ T5634] usb 6-1: SerialNumber: syz
[  762.107580][ T5634] usb 6-1: config 0 descriptor??
[  762.132028][T12069] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  762.205773][T12079] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�l�1�*�$pOc�ɔ��r$�G����'
[  762.243826][T12079] CPU: 1 UID: 0 PID: 12079 Comm: syz.6.1383 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  762.243863][T12079] Tainted: [L]=SOFTLOCKUP
[  762.243871][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  762.243890][T12079] Call Trace:
[  762.243903][T12079]  <TASK>
[  762.243913][T12079]  dump_stack_lvl+0xe8/0x150
[  762.243954][T12079]  sysfs_warn_dup+0x8e/0xa0
[  762.243984][T12079]  sysfs_do_create_link_sd+0xc0/0x110
[  762.244017][T12079]  device_add_class_symlinks+0x1cf/0x240
[  762.244048][T12079]  device_add+0x475/0xbb0
[  762.244078][T12079]  wiphy_register+0x1dc5/0x2dc0
[  762.244124][T12079]  ? __pfx_wiphy_register+0x10/0x10
[  762.244154][T12079]  ? __pfx_netdev_run_todo+0x10/0x10
[  762.244186][T12079]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  762.244228][T12079]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  762.244263][T12079]  ieee80211_register_hw+0x3d82/0x4a70
[  762.244311][T12079]  ? ieee80211_register_hw+0x1901/0x4a70
[  762.244369][T12079]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  762.244404][T12079]  ? __asan_memset+0x22/0x50
[  762.244433][T12079]  ? __hrtimer_setup+0x1b7/0x260
[  762.244460][T12079]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  762.244493][T12079]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  762.244552][T12079]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  762.244574][T12079]  ? kstrndup+0xbf/0x160
[  762.244606][T12079]  hwsim_new_radio_nl+0xf6a/0x1c00
[  762.244661][T12079]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  762.244694][T12079]  ? rcu_is_watching+0x15/0xb0
[  762.244721][T12079]  ? trace_kmalloc+0x2a/0xf0
[  762.244758][T12079]  ? __nla_parse+0x40/0x60
[  762.244800][T12079]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  762.244836][T12079]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  762.244882][T12079]  genl_family_rcv_msg_doit+0x22a/0x330
[  762.244925][T12079]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  762.244984][T12079]  ? bpf_lsm_capable+0x9/0x20
[  762.245006][T12079]  ? security_capable+0x7e/0x2c0
[  762.245040][T12079]  genl_rcv_msg+0x61c/0x7a0
[  762.245082][T12079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  762.245115][T12079]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  762.245139][T12079]  ? __pfx_ref_tracker_free+0x10/0x10
[  762.245166][T12079]  ? __asan_memcpy+0x40/0x70
[  762.245190][T12079]  ? __skb_clone+0x63/0x7a0
[  762.245225][T12079]  netlink_rcv_skb+0x232/0x4b0
[  762.245258][T12079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  762.245296][T12079]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  762.245343][T12079]  ? down_read+0x270/0x2e0
[  762.245371][T12079]  ? genl_rcv+0xd/0x40
[  762.245406][T12079]  genl_rcv+0x28/0x40
[  762.245437][T12079]  netlink_unicast+0x75c/0x8e0
[  762.245474][T12079]  netlink_sendmsg+0x813/0xb40
[  762.245513][T12079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  762.245545][T12079]  ? aa_sock_msg_perm+0xf1/0x1b0
[  762.245576][T12079]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  762.245610][T12079]  ____sys_sendmsg+0x972/0x9f0
[  762.245650][T12079]  ? __pfx_____sys_sendmsg+0x10/0x10
[  762.245697][T12079]  ___sys_sendmsg+0x2a5/0x360
[  762.245725][T12079]  ? __lock_acquire+0x6b5/0x2cf0
[  762.245754][T12079]  ? __pfx____sys_sendmsg+0x10/0x10
[  762.245792][T12079]  ? futex_wait+0x2a2/0x390
[  762.245853][T12079]  ? __fget_files+0x2a/0x420
[  762.245879][T12079]  ? __fget_files+0x3a0/0x420
[  762.245916][T12079]  __sys_sendmsg+0x183/0x260
[  762.245957][T12079]  ? __pfx___sys_sendmsg+0x10/0x10
[  762.246013][T12079]  __do_fast_syscall_32+0x229/0x6e0
[  762.246043][T12079]  ? do_fast_syscall_32+0x33/0x70
[  762.246072][T12079]  ? irqentry_exit+0x10f/0x730
[  762.246096][T12079]  ? rcu_is_watching+0x15/0xb0
[  762.246127][T12079]  do_fast_syscall_32+0x33/0x70
[  762.246156][T12079]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  762.246184][T12079] RIP: 0023:0xf7f2301c
[  762.246217][T12079] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  762.246238][T12079] RSP: 002b:00000000f53a450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  762.246262][T12079] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000100
[  762.246278][T12079] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000
[  762.246291][T12079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  762.246305][T12079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  762.246318][T12079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  762.246352][T12079]  </TASK>
[  763.305301][    T9] usb 6-1: USB disconnect, device number 27
[  763.334055][ T5725] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  763.562970][ T5725] usb 5-1: Using ep0 maxpacket: 8
[  763.570749][ T5725] usb 5-1: unable to get BOS descriptor or descriptor too short
[  763.596647][ T5725] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 148, changing to 7
[  763.750703][ T5725] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  763.868407][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.890996][ T5725] usb 5-1: Product: syz
[  763.907438][ T5725] usb 5-1: Manufacturer: syz
[  763.917674][ T5725] usb 5-1: SerialNumber: syz
[  764.712851][ T5725] usb 5-1: USB disconnect, device number 57
[  765.176418][ T5703] udevd[5703]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  765.737972][T12115] netlink: 'syz.6.1394': attribute type 1 has an invalid length.
[  765.900157][T12116] bond1: (slave geneve2): making interface the new active one
[  765.938734][T12116] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  765.949209][ T3312] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  766.002567][T12124] binder: BINDER_SET_CONTEXT_MGR already set
[  766.012039][T11873] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  766.021050][T12124] binder: 12123:12124 ioctl 4018620d 80004a80 returned -16
[  766.044253][ T3312] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  766.071829][ T3312] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  768.204719][T12162] binder: BINDER_SET_CONTEXT_MGR already set
[  768.228664][T12162] binder: 12160:12162 ioctl 4018620d 80004a80 returned -16
[  768.269006][T12164] syz.4.1411 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  768.573748][ T5725] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  768.601326][T12174] capability: warning: `syz.6.1415' uses deprecated v2 capabilities in a way that may be insecure
[  768.706291][T12178] netlink: 'syz.6.1417': attribute type 1 has an invalid length.
[  768.769321][ T5725] usb 5-1: config index 0 descriptor too short (expected 1572, got 36)
[  768.805400][ T5725] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  768.876306][ T5725] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  768.941412][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.987252][ T5725] usb 5-1: Product: syz
[  769.014073][ T5725] usb 5-1: Manufacturer: syz
[  769.033827][ T5725] usb 5-1: SerialNumber: syz
[  769.089761][ T5725] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input25
[  769.269222][T12195] binder: BINDER_SET_CONTEXT_MGR already set
[  769.275815][T12195] binder: 12193:12195 ioctl 4018620d 80004a80 returned -16
[  769.288467][ T4979] bcm5974 5-1:1.0: could not read from device
[  769.417269][ T5725] bcm5974 5-1:1.0: could not read from device
[  769.488386][ T4979] bcm5974 5-1:1.0: could not read from device
[  769.573466][ T5725] input: failed to attach handler mousedev to device input25, error: -5
[  769.671831][ T4979] bcm5974 5-1:1.0: could not read from device
[  769.680853][ T5725] usb 5-1: USB disconnect, device number 58
[  769.709954][ T4979] bcm5974 5-1:1.0: could not read from device
[  770.912212][T12227] syzkaller0: entered promiscuous mode
[  770.946317][T12227] syzkaller0: entered allmulticast mode
[  770.988811][T12227] tipc: Started in network mode
[  771.004335][T12227] tipc: Node identity 1af0860f94b9, cluster identity 4711
[  771.013671][T12227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  771.040046][T12226] tipc: Resetting bearer <eth:syzkaller0>
[  771.309823][T12226] tipc: Disabling bearer <eth:syzkaller0>
[  773.334445][  T807] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  773.525678][  T807] usb 5-1: Using ep0 maxpacket: 8
[  773.543102][  T807] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  773.573222][  T807] usb 5-1: config 254 has 0 interfaces, different from the descriptor's value: 1
[  773.607995][  T807] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  773.628882][  T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.691765][  T807] usb 5-1: Product: syz
[  773.704841][  T807] usb 5-1: Manufacturer: syz
[  773.717198][  T807] usb 5-1: SerialNumber: syz
[  774.112219][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1459'.
[  776.174990][  T807] usb 5-1: USB disconnect, device number 59
[  776.460830][ T9692] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  776.497146][ T9692] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  776.508346][ T9692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  776.521661][ T9692] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  776.530713][ T9692] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  776.623815][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  776.635377][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  776.647866][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  776.661893][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  776.682885][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  776.752945][    T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  776.972907][    T9] usb 5-1: Using ep0 maxpacket: 16
[  776.982850][ T5704] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  776.998406][    T9] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  777.022929][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.042777][    T9] usb 5-1: Product: syz
[  777.050651][    T9] usb 5-1: Manufacturer: syz
[  777.057467][    T9] usb 5-1: SerialNumber: syz
[  777.173615][ T5704] usb 7-1: Using ep0 maxpacket: 16
[  777.189489][ T5704] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  777.216391][ T5704] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.250193][ T5704] usb 7-1: Product: syz
[  777.271945][ T5704] usb 7-1: Manufacturer: syz
[  777.302849][ T5704] usb 7-1: SerialNumber: syz
[  777.341372][    T9] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  777.361093][ T5704] usb 7-1: config 0 descriptor??
[  777.389188][ T5704] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  777.423404][    T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  777.490262][    T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  777.535831][    T9] usb 5-1: media controller created
[  777.625510][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  777.869389][T12318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.895020][T12318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.943295][ T5704] ssu100 7-1:0.0: probe with driver ssu100 failed with error -110
[  777.956563][T12318] binder: 12316:12318 ioctl c0109428 80000300 returned -22
[  777.962541][    T9] zl10353_read_register: readreg error (reg=127, ret==-32)
[  778.088980][T12338] binder: BINDER_SET_CONTEXT_MGR already set
[  778.124056][T12338] binder: 12336:12338 ioctl 4018620d 80004a80 returned -16
[  778.174722][T12319] bridge0: port 1(bridge_slave_0) entered blocking state
[  778.212496][    T9] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  778.231514][T12319] bridge0: port 1(bridge_slave_0) entered disabled state
[  778.259999][T12319] bridge_slave_0: entered allmulticast mode
[  778.290641][    T9] usb 5-1: USB disconnect, device number 60
[  778.300498][T12319] bridge_slave_0: entered promiscuous mode
[  778.330662][T12319] bridge0: port 2(bridge_slave_1) entered blocking state
[  778.362404][T12319] bridge0: port 2(bridge_slave_1) entered disabled state
[  778.389169][T12319] bridge_slave_1: entered allmulticast mode
[  778.428508][T12319] bridge_slave_1: entered promiscuous mode
[  778.611347][T12319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  778.668688][T12319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  778.755675][T12319] team0: Port device team_slave_0 added
[  778.768154][ T9692] Bluetooth: hci2: command tx timeout
[  778.825356][T12319] team0: Port device team_slave_1 added
[  778.983640][ T5634] usb 7-1: USB disconnect, device number 16
[  779.074679][T12319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  779.112060][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  779.213117][T12319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  779.316203][T12319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  779.330053][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  779.427641][T12319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  779.652270][T12356] syzkaller0: entered promiscuous mode
[  779.662135][T12356] syzkaller0: entered allmulticast mode
[  780.378105][T12372] binder: BINDER_SET_CONTEXT_MGR already set
[  780.385432][T12372] binder: 12371:12372 ioctl 4018620d 80004a80 returned -16
[  780.843325][ T9692] Bluetooth: hci2: command tx timeout
[  780.914336][T12376] netlink: 'syz.4.1486': attribute type 1 has an invalid length.
[  782.933695][ T9692] Bluetooth: hci2: command tx timeout
[  785.011041][ T9692] Bluetooth: hci2: command tx timeout
[  785.501020][T12376] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  785.837951][T12319] hsr_slave_0: entered promiscuous mode
[  785.874349][T12319] hsr_slave_1: entered promiscuous mode
[  785.881362][T12319] debugfs: 'hsr0' already exists in 'hsr'
[  785.888638][T12319] Cannot create hsr debugfs directory
[  787.492275][T12420] netlink: 'syz.6.1499': attribute type 1 has an invalid length.
[  787.846673][T12319] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  787.955772][T12319] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  787.969864][T12319] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  787.996374][T12319] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  788.019646][T12319] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  788.052230][T12319] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  788.078227][T12319] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  788.115778][T12319] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  788.323337][T12440] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1504'.
[  788.785028][T12319] 8021q: adding VLAN 0 to HW filter on device bond0
[  788.966917][T12319] 8021q: adding VLAN 0 to HW filter on device team0
[  789.201184][T11872] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.209038][T11872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  789.258112][T11872] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.265569][T11872] bridge0: port 2(bridge_slave_1) entered forwarding state
[  789.486146][T12319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  789.598570][T12319] veth0_vlan: entered promiscuous mode
[  789.652547][T12319] veth1_vlan: entered promiscuous mode
[  789.743974][T12319] veth0_macvtap: entered promiscuous mode
[  789.777038][T12319] veth1_macvtap: entered promiscuous mode
[  789.829149][T12319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  789.897853][T12319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  790.063385][T11871] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  790.107792][T11871] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  790.128702][T11871] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  790.378513][T11874] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  790.707028][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  790.738249][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  790.830833][T11874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  790.841469][T11874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  792.702852][ T5704] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  792.854407][ T5704] usb 2-1: Using ep0 maxpacket: 8
[  792.871275][ T5704] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  792.901489][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  793.020000][ T5704] pvrusb2: Hardware description: Terratec Grabster AV400
[  793.046695][ T5704] pvrusb2: **********
[  793.061561][ T5704] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  793.098318][ T5704] pvrusb2: Important functionality might not be entirely working.
[  793.144480][ T5704] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  793.218881][ T5704] pvrusb2: **********
[  793.269475][ T2365] pvrusb2: Invalid write control endpoint
[  793.500966][T12480] pvrusb2: Invalid write control endpoint
[  793.568627][ T5704] usb 2-1: USB disconnect, device number 46
[  793.604435][T12494] syzkaller0: entered promiscuous mode
[  793.610171][T12494] syzkaller0: entered allmulticast mode
[  793.738988][ T2365] pvrusb2: Invalid write control endpoint
[  793.757001][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  793.790368][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  793.809177][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  793.831998][ T2365] pvrusb2: Device being rendered inoperable
[  793.852591][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  793.873689][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  793.981958][ T2365] pvrusb2: Attached sub-driver cx25840
[  794.008212][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  794.053344][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  794.322900][ T8588] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  794.336231][T12498] netlink: 'syz.4.1524': attribute type 1 has an invalid length.
[  794.503228][ T8588] usb 6-1: Using ep0 maxpacket: 8
[  794.516745][ T8588] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  794.560171][ T8588] usb 6-1: config 0 has no interface number 0
[  794.604661][ T8588] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  794.620399][T12502] bond1: (slave geneve2): making interface the new active one
[  794.671967][ T8588] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  794.687255][T12502] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  794.704027][T11874] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  794.723533][ T8588] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  794.742839][T11874] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  794.759230][ T8588] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  794.781071][T11874] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  794.809834][T11874] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  794.824537][ T8588] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  794.852573][ T8588] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.886064][ T8588] usb 6-1: config 0 descriptor??
[  794.922648][ T8588] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  795.149632][ T8588] usb 6-1: USB disconnect, device number 28
[  795.204221][ T8588] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  795.673012][ T5725] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  795.852993][ T5725] usb 2-1: Using ep0 maxpacket: 8
[  795.867857][ T5725] usb 2-1: unable to get BOS descriptor or descriptor too short
[  795.896719][ T5725] usb 2-1: config 4 interface 0 has no altsetting 0
[  795.923478][ T5725] usb 2-1: string descriptor 0 read error: -22
[  795.940975][ T5725] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  795.960998][ T5725] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  795.999338][ T5725] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  796.051647][ T5725] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  796.100434][ T5725] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  796.148235][ T5725] usb 2-1: media controller created
[  796.529896][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  797.466305][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1536'.
[  797.552272][T12540] binder: 12539:12540 ioctl 4018620d 0 returned -22
[  797.748034][ T5725] zl10353_read_register: readreg error (reg=127, ret==0)
[  797.849301][ T5725] usb 2-1: USB disconnect, device number 47
[  798.818312][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1547'.
[  799.140744][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'.
[  800.464689][T12586] syzkaller0: entered promiscuous mode
[  800.472369][T12586] syzkaller0: entered allmulticast mode
[  800.742881][T12588] netlink: 'syz.5.1555': attribute type 1 has an invalid length.
[  801.236675][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1558'.
[  802.251851][T12619] netlink: 157 bytes leftover after parsing attributes in process `syz.4.1565'.
[  802.882945][ T5634] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  802.933452][T12629] netlink: 'syz.6.1569': attribute type 10 has an invalid length.
[  803.106543][ T5634] usb 5-1: Using ep0 maxpacket: 8
[  803.159792][ T5634] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  803.188669][ T5634] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  803.256706][ T5634] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  803.299983][ T5634] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  803.345632][ T5634] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  803.389157][ T5634] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  803.428785][ T5634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.705098][ T5634] usb 5-1: usb_control_msg returned -32
[  803.739371][ T5634] usbtmc 5-1:16.0: can't read capabilities
[  804.091016][T12641] tipc: Started in network mode
[  804.096311][T12641] tipc: Node identity 2aee974e5b55, cluster identity 4711
[  804.104802][T12641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  804.113015][T12641] syzkaller0: entered promiscuous mode
[  804.119475][T12641] syzkaller0: entered allmulticast mode
[  804.258487][T12641] tipc: Resetting bearer <eth:syzkaller0>
[  804.269553][T12640] tipc: Resetting bearer <eth:syzkaller0>
[  804.333495][T12640] tipc: Disabling bearer <eth:syzkaller0>
[  804.538797][T12645] usbtmc 5-1:16.0: usb_control_msg returned -32
[  804.698761][ T8588] usb 5-1: USB disconnect, device number 61
[  805.195018][T12665] debugfs: '1��^!�l�1�*�$pOc�ɔ��r$�G����' already exists in 'ieee80211'
[  805.396666][T12667] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�l�1�*�$pOc�ɔ��r$�G����'
[  805.422822][T12667] CPU: 1 UID: 0 PID: 12667 Comm: syz.5.1581 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  805.422862][T12667] Tainted: [L]=SOFTLOCKUP
[  805.422871][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  805.422884][T12667] Call Trace:
[  805.422894][T12667]  <TASK>
[  805.422903][T12667]  dump_stack_lvl+0xe8/0x150
[  805.422936][T12667]  sysfs_warn_dup+0x8e/0xa0
[  805.422966][T12667]  sysfs_do_create_link_sd+0xc0/0x110
[  805.422997][T12667]  device_add_class_symlinks+0x1cf/0x240
[  805.423027][T12667]  device_add+0x475/0xbb0
[  805.423055][T12667]  wiphy_register+0x1dc5/0x2dc0
[  805.423103][T12667]  ? __pfx_wiphy_register+0x10/0x10
[  805.423131][T12667]  ? __pfx_netdev_run_todo+0x10/0x10
[  805.423162][T12667]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  805.423204][T12667]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  805.423240][T12667]  ieee80211_register_hw+0x3d82/0x4a70
[  805.423289][T12667]  ? ieee80211_register_hw+0x1901/0x4a70
[  805.423349][T12667]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  805.423384][T12667]  ? __asan_memset+0x22/0x50
[  805.423420][T12667]  ? __hrtimer_setup+0x1b7/0x260
[  805.423449][T12667]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  805.423483][T12667]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  805.423542][T12667]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  805.423566][T12667]  ? kstrndup+0xbf/0x160
[  805.423599][T12667]  hwsim_new_radio_nl+0xf6a/0x1c00
[  805.423649][T12667]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  805.423684][T12667]  ? rcu_is_watching+0x15/0xb0
[  805.423713][T12667]  ? trace_kmalloc+0x2a/0xf0
[  805.423750][T12667]  ? __nla_parse+0x40/0x60
[  805.423966][T12667]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  805.424028][T12667]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  805.424071][T12667]  genl_family_rcv_msg_doit+0x22a/0x330
[  805.424120][T12667]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  805.424186][T12667]  ? bpf_lsm_capable+0x9/0x20
[  805.424212][T12667]  ? security_capable+0x7e/0x2c0
[  805.424251][T12667]  genl_rcv_msg+0x61c/0x7a0
[  805.424295][T12667]  ? __pfx_genl_rcv_msg+0x10/0x10
[  805.424331][T12667]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  805.424361][T12667]  ? __pfx_ref_tracker_free+0x10/0x10
[  805.424392][T12667]  ? __asan_memcpy+0x40/0x70
[  805.424419][T12667]  ? __skb_clone+0x63/0x7a0
[  805.424460][T12667]  netlink_rcv_skb+0x232/0x4b0
[  805.424490][T12667]  ? __pfx_genl_rcv_msg+0x10/0x10
[  805.424525][T12667]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  805.424571][T12667]  ? down_read+0x270/0x2e0
[  805.424600][T12667]  ? genl_rcv+0xd/0x40
[  805.424629][T12667]  genl_rcv+0x28/0x40
[  805.424657][T12667]  netlink_unicast+0x75c/0x8e0
[  805.424691][T12667]  netlink_sendmsg+0x813/0xb40
[  805.424725][T12667]  ? __pfx_netlink_sendmsg+0x10/0x10
[  805.424760][T12667]  ? aa_sock_msg_perm+0xf1/0x1b0
[  805.424794][T12667]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  805.424837][T12667]  ____sys_sendmsg+0x972/0x9f0
[  805.424880][T12667]  ? __pfx_____sys_sendmsg+0x10/0x10
[  805.425015][T12667]  ___sys_sendmsg+0x2a5/0x360
[  805.425100][T12667]  ? __lock_acquire+0x6b5/0x2cf0
[  805.425131][T12667]  ? __pfx____sys_sendmsg+0x10/0x10
[  805.425167][T12667]  ? futex_wait+0x2a2/0x390
[  805.425227][T12667]  ? __fget_files+0x2a/0x420
[  805.425254][T12667]  ? __fget_files+0x3a0/0x420
[  805.425292][T12667]  __sys_sendmsg+0x183/0x260
[  805.425326][T12667]  ? __pfx___sys_sendmsg+0x10/0x10
[  805.425365][T12667]  ? fput+0xa0/0xd0
[  805.425402][T12667]  __do_fast_syscall_32+0x229/0x6e0
[  805.425434][T12667]  ? do_fast_syscall_32+0x33/0x70
[  805.425463][T12667]  ? irqentry_exit+0x10f/0x730
[  805.425495][T12667]  do_fast_syscall_32+0x33/0x70
[  805.425525][T12667]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  805.425553][T12667] RIP: 0023:0xf70af01c
[  805.425576][T12667] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  805.425596][T12667] RSP: 002b:00000000f545b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  805.425621][T12667] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000100
[  805.425637][T12667] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000
[  805.425650][T12667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  805.425662][T12667] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  805.425675][T12667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  805.425708][T12667]  </TASK>
[  806.648150][ T5634] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  806.663566][ T5704] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  806.822837][ T5704] usb 5-1: Using ep0 maxpacket: 32
[  806.829040][ T5634] usb 6-1: Using ep0 maxpacket: 8
[  806.838611][ T5634] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  806.851029][ T5634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.899234][ T5634] pvrusb2: Hardware description: Terratec Grabster AV400
[  806.928834][ T5634] pvrusb2: **********
[  806.943748][ T5634] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  806.967544][ T5634] pvrusb2: Important functionality might not be entirely working.
[  806.976859][ T5634] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  806.990478][ T5634] pvrusb2: **********
[  807.098371][ T2365] pvrusb2: Invalid write control endpoint
[  807.281512][ T2365] pvrusb2: Invalid write control endpoint
[  807.289272][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  807.301148][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  807.309730][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  807.321029][ T2365] pvrusb2: Device being rendered inoperable
[  807.330421][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  807.342185][ T9187] usb 6-1: USB disconnect, device number 29
[  807.348360][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  807.404468][ T2365] pvrusb2: Attached sub-driver cx25840
[  807.419450][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  807.431804][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  807.480190][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short
[  807.512612][ T5704] usb 5-1: unable to read config index 0 descriptor/start: -71
[  807.524765][ T5704] usb 5-1: can't read configurations, error -71
[  808.434907][T12710] netlink: 'syz.5.1595': attribute type 2 has an invalid length.
[  808.457409][T12710] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1595'.
[  808.717756][   T29] audit: type=1326 audit(1777638614.123:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000
[  808.766035][   T29] audit: type=1326 audit(1777638614.133:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70af01c code=0x7ffc0000
[  808.809600][   T29] audit: type=1326 audit(1777638614.133:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000
[  808.839502][   T29] audit: type=1326 audit(1777638614.173:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70af01c code=0x7ffc0000
[  808.868567][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  808.875233][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  808.958396][   T29] audit: type=1326 audit(1777638614.173:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000
[  809.065323][   T29] audit: type=1326 audit(1777638614.173:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70af01c code=0x7ffc0000
[  809.178553][T11874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.183349][   T29] audit: type=1326 audit(1777638614.173:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000
[  809.328678][   T29] audit: type=1326 audit(1777638614.173:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=9 compat=1 ip=0xf70af01c code=0x7ffc0000
[  809.492336][   T29] audit: type=1326 audit(1777638614.173:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000
[  809.637374][T11874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.759837][   T29] audit: type=1326 audit(1777638614.173:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.1595" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000
[  809.869412][T11874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.971830][T11874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.993758][ T8588] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  810.155980][ T8588] usb 5-1: Using ep0 maxpacket: 8
[  810.172429][ T8588] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  810.191631][ T8588] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.275971][ T8588] pvrusb2: Hardware description: Terratec Grabster AV400
[  810.343110][ T8588] pvrusb2: **********
[  810.357058][ T8588] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  810.377003][T12738] Sensor B: =================  START STATUS  =================
[  810.388395][T12738] Sensor B: Test Pattern: 
[  810.394109][ T8588] pvrusb2: Important functionality might not be entirely working.
[  810.403407][T12738] 75% Colorbar
[  810.427368][T12738] Sensor B: Show Information: All
[  810.437501][T12738] Sensor B: Vertical Flip: false
[  810.452936][T12738] Sensor B: Horizontal Flip: false
[  810.466743][T12738] Sensor B: Brightness: 
[  810.466772][ T8588] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  810.466811][ T8588] pvrusb2: **********
[  810.516118][T12738] 128
[  810.523258][T12738] Sensor B: Contrast: 128
[  810.533389][T12738] Sensor B: Hue: 0
[  810.565084][T12738] Sensor B: Saturation: 128
[  810.587865][T12738] Sensor B: Pixel Rate: 160000000
[  810.614801][T12738] Sensor B: Horizontal Blanking: 800
[  810.659811][ T2365] pvrusb2: Invalid write control endpoint
[  810.675145][ T8588] usb 5-1: USB disconnect, device number 64
[  810.686686][T12738] Sensor B: Vertical Blanking: 3223
[  810.713360][T12738] Sensor B: ==================  END STATUS  ==================
[  811.160209][ T2365] pvrusb2: Invalid write control endpoint
[  811.192221][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  811.288747][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  811.368520][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  811.460353][T11874] bridge_slave_1: left allmulticast mode
[  811.468885][ T2365] pvrusb2: Device being rendered inoperable
[  811.473196][T11874] bridge_slave_1: left promiscuous mode
[  811.510658][T11874] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.544197][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  811.562136][T11874] bridge_slave_0: left allmulticast mode
[  811.579111][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  811.591292][T11874] bridge_slave_0: left promiscuous mode
[  811.612618][T11874] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.628095][ T2365] pvrusb2: Attached sub-driver cx25840
[  811.666001][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  811.701772][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  812.806277][T11874] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  813.054991][T11874] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  813.564577][T11874] .` (unregistering): Released all slaves
[  813.665231][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9
[  814.849554][T11874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  814.886768][T11874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.925539][T11874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  814.945751][T11874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  815.020033][T11874] veth1_macvtap: left promiscuous mode
[  815.040115][T11874] veth0_macvtap: left promiscuous mode
[  815.053491][T11874] veth1_vlan: left promiscuous mode
[  815.059384][T11874] veth0_vlan: left promiscuous mode
[  815.781809][T11874] team_slave_1 (unregistering): left allmulticast mode
[  815.969441][T11874] team0 (unregistering): Port device team_slave_1 removed
[  815.993008][T11874] team_slave_0 (unregistering): left allmulticast mode
[  816.257267][T11874] team0 (unregistering): Port device team_slave_0 removed
[  816.668287][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10
[  817.193866][T12839] netlink: 'syz.1.1636': attribute type 1 has an invalid length.
[  817.912962][ T5725] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  818.064672][ T5725] usb 6-1: config index 0 descriptor too short (expected 1572, got 36)
[  818.087148][ T5725] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  818.105214][ T8588] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  818.128331][ T5725] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  818.150340][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.182649][ T5725] usb 6-1: Product: syz
[  818.200811][ T5725] usb 6-1: Manufacturer: syz
[  818.211835][ T5725] usb 6-1: SerialNumber: syz
[  818.239624][ T5725] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input26
[  818.283095][ T8588] usb 2-1: Using ep0 maxpacket: 32
[  818.291882][ T8588] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  818.312036][ T8588] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  818.323634][ T8588] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  818.333186][ T8588] usb 2-1: Product: syz
[  818.337546][ T8588] usb 2-1: Manufacturer: syz
[  818.342516][ T8588] usb 2-1: SerialNumber: syz
[  818.359086][ T8588] usb 2-1: config 0 descriptor??
[  818.378701][T12852] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  818.435412][ T4979] bcm5974 6-1:1.0: could not read from device
[  818.482553][ T4979] bcm5974 6-1:1.0: could not read from device
[  818.492375][ T5725] usb 6-1: USB disconnect, device number 30
[  818.510715][ T4979] bcm5974 6-1:1.0: could not read from device
[  818.620940][ T8588] usb 2-1: USB disconnect, device number 48
[  818.847422][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11
[  820.033908][T12886] syzkaller0: entered promiscuous mode
[  820.039721][T12886] syzkaller0: entered allmulticast mode
[  820.113317][    T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  820.292859][    T9] usb 6-1: Using ep0 maxpacket: 16
[  820.313239][ T5727] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  820.323013][    T9] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  820.347735][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.374523][    T9] usb 6-1: Product: syz
[  820.383010][    T9] usb 6-1: Manufacturer: syz
[  820.393057][    T9] usb 6-1: SerialNumber: syz
[  820.517280][ T5727] usb 5-1: Using ep0 maxpacket: 8
[  820.545257][ T5727] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  820.562846][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.626514][ T5727] pvrusb2: Hardware description: Terratec Grabster AV400
[  820.636136][ T5727] pvrusb2: **********
[  820.642305][ T5727] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  820.654268][ T5727] pvrusb2: Important functionality might not be entirely working.
[  820.664631][ T5727] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  820.677142][ T5727] pvrusb2: **********
[  820.685564][    T9] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  820.720337][    T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  820.732387][    T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  820.743648][    T9] usb 6-1: media controller created
[  820.761509][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  821.015646][    T9] zl10353_read_register: readreg error (reg=127, ret==-110)
[  821.024033][T12896] ------------[ cut here ]------------
[  821.031832][T12896] usb 6-1: BOGUS control dir, pipe 80001f80 doesn't match bRequestType c0
[  821.040889][T12896] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.4.1649/12896
[  821.051877][T12896] Modules linked in:
[  821.056568][T12896] CPU: 0 UID: 0 PID: 12896 Comm: syz.4.1649 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  821.068050][T12896] Tainted: [L]=SOFTLOCKUP
[  821.072846][T12896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  821.083341][T12896] RIP: 0010:usb_submit_urb+0x1115/0x18b0
[  821.089606][T12896] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9
[  821.110043][T12896] RSP: 0000:ffffc900036876e8 EFLAGS: 00010246
[  821.116432][T12896] RAX: 0000000000000000 RBX: ffff88802b014d00 RCX: 0000000080001f80
[  821.125049][T12896] RDX: ffff88807a1e0820 RSI: ffffffff8c808840 RDI: ffffffff903e01b0
[  821.133490][T12896] RBP: 1ffff1100c509e18 R08: 00000000000000c0 R09: 0000000000000000
[  821.142166][T12896] R10: ffffc900036877e0 R11: fffff520006d0f08 R12: ffff888058149100
[  821.150645][T12896] R13: ffff88806284f0c0 R14: 0000000080001f80 R15: ffff88807a1e0820
[  821.159115][T12896] FS:  0000000000000000(0000) GS:ffff888125290000(0063) knlGS:00000000f541db40
[  821.168903][T12896] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  821.176198][T12896] CR2: 00007f45e53cdfe8 CR3: 000000005da88000 CR4: 00000000003526f0
[  821.185255][T12896] Call Trace:
[  821.188739][T12896]  <TASK>
[  821.191961][T12896]  ? __init_swait_queue_head+0xa9/0x150
[  821.198149][T12896]  usb_start_wait_urb+0x13f/0x5b0
[  821.203458][T12896]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  821.209387][T12896]  usb_control_msg+0x234/0x3e0
[  821.214517][T12896]  gl861_ctrl_msg+0x207/0x420
[  821.219367][T12896]  ? lockdep_hardirqs_on+0x7a/0x110
[  821.224767][T12896]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  821.230124][T12896]  ? rt_mutex_slowlock+0x1fd/0x780
[  821.235636][T12896]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  821.241467][T12896]  gl861_i2c_master_xfer+0x439/0x6a0
[  821.247155][T12896]  __i2c_transfer+0x79a/0x1f70
[  821.252260][T12896]  ? i2c_transfer+0xc8/0x2d0
[  821.257661][T12896]  i2c_transfer+0x1cc/0x2d0
[  821.262386][T12896]  i2cdev_ioctl_rdwr+0x460/0x740
[  821.267597][T12896]  compat_i2cdev_ioctl+0x59f/0x5c0
[  821.272908][T12896]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[  821.278816][T12896]  ? __fget_files+0x3a0/0x420
[  821.283858][T12896]  ? __fget_files+0x2a/0x420
[  821.288626][T12896]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  821.294561][T12896]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  821.300211][T12896]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  821.306722][T12896]  ? kmem_cache_free+0x182/0x650
[  821.311949][T12896]  ? __se_sys_futex_time32+0x3ab/0x440
[  821.317633][T12896]  ? rcu_is_watching+0x15/0xb0
[  821.322569][T12896]  __do_fast_syscall_32+0x229/0x6e0
[  821.327998][T12896]  ? do_fast_syscall_32+0x33/0x70
[  821.333352][T12896]  ? lockdep_hardirqs_on+0x7a/0x110
[  821.338920][T12896]  ? asm_int80_emulation+0x1a/0x20
[  821.344621][T12896]  ? do_int80_emulation+0x286/0x530
[  821.350490][T12896]  ? trace_irq_disable+0x3b/0x140
[  821.356020][T12896]  do_fast_syscall_32+0x33/0x70
[  821.361221][T12896]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  821.368041][T12896] RIP: 0023:0xf702f01c
[  821.372257][T12896] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  821.394451][T12896] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  821.403793][T12896] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[  821.413025][T12896] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  821.421948][T12896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  821.432128][T12896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  821.440700][T12896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  821.450028][T12896]  </TASK>
[  821.453340][T12896] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  821.461420][T12896] CPU: 0 UID: 0 PID: 12896 Comm: syz.4.1649 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  821.473247][T12896] Tainted: [L]=SOFTLOCKUP
[  821.477890][T12896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  821.491715][T12896] Call Trace:
[  821.495461][T12896]  <TASK>
[  821.498618][T12896]  vpanic+0x56c/0xa60
[  821.502842][T12896]  ? __pfx__printk+0x10/0x10
[  821.507630][T12896]  ? __pfx_vpanic+0x10/0x10
[  821.512838][T12896]  ? is_bpf_text_address+0x292/0x2b0
[  821.518414][T12896]  ? is_bpf_text_address+0x26/0x2b0
[  821.524250][T12896]  panic+0xc5/0xd0
[  821.528195][T12896]  ? __pfx_panic+0x10/0x10
[  821.532815][T12896]  __warn+0x315/0x4c0
[  821.537047][T12896]  ? usb_submit_urb+0x1053/0x18b0
[  821.542126][T12896]  ? usb_submit_urb+0x1053/0x18b0
[  821.547337][T12896]  __report_bug+0x29a/0x540
[  821.551974][T12896]  ? usb_submit_urb+0x1053/0x18b0
[  821.557334][T12896]  ? __pfx___report_bug+0x10/0x10
[  821.562472][T12896]  ? lockdep_hardirqs_on+0x7a/0x110
[  821.567857][T12896]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  821.573736][T12896]  report_bug_entry+0x19a/0x290
[  821.579308][T12896]  ? usb_submit_urb+0x1115/0x18b0
[  821.584508][T12896]  ? usb_submit_urb+0x111a/0x18b0
[  821.589975][T12896]  handle_bug+0xce/0x200
[  821.594513][T12896]  exc_invalid_op+0x1a/0x50
[  821.599607][T12896]  asm_exc_invalid_op+0x1a/0x20
[  821.604872][T12896] RIP: 0010:usb_submit_urb+0x1115/0x18b0
[  821.611922][T12896] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9
[  821.633856][T12896] RSP: 0000:ffffc900036876e8 EFLAGS: 00010246
[  821.640559][T12896] RAX: 0000000000000000 RBX: ffff88802b014d00 RCX: 0000000080001f80
[  821.649635][T12896] RDX: ffff88807a1e0820 RSI: ffffffff8c808840 RDI: ffffffff903e01b0
[  821.658379][T12896] RBP: 1ffff1100c509e18 R08: 00000000000000c0 R09: 0000000000000000
[  821.667407][T12896] R10: ffffc900036877e0 R11: fffff520006d0f08 R12: ffff888058149100
[  821.675796][T12896] R13: ffff88806284f0c0 R14: 0000000080001f80 R15: ffff88807a1e0820
[  821.684632][T12896]  ? usb_submit_urb+0x10a4/0x18b0
[  821.691755][T12896]  ? __init_swait_queue_head+0xa9/0x150
[  821.698358][T12896]  usb_start_wait_urb+0x13f/0x5b0
[  821.704187][T12896]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  821.710158][T12896]  usb_control_msg+0x234/0x3e0
[  821.714986][T12896]  gl861_ctrl_msg+0x207/0x420
[  821.719897][T12896]  ? lockdep_hardirqs_on+0x7a/0x110
[  821.725780][T12896]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  821.731255][T12896]  ? rt_mutex_slowlock+0x1fd/0x780
[  821.736639][T12896]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  821.742475][T12896]  gl861_i2c_master_xfer+0x439/0x6a0
[  821.748356][T12896]  __i2c_transfer+0x79a/0x1f70
[  821.753643][T12896]  ? i2c_transfer+0xc8/0x2d0
[  821.758551][T12896]  i2c_transfer+0x1cc/0x2d0
[  821.763248][T12896]  i2cdev_ioctl_rdwr+0x460/0x740
[  821.768889][T12896]  compat_i2cdev_ioctl+0x59f/0x5c0
[  821.774617][T12896]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[  821.780858][T12896]  ? __fget_files+0x3a0/0x420
[  821.785593][T12896]  ? __fget_files+0x2a/0x420
[  821.790424][T12896]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  821.796467][T12896]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  821.802020][T12896]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  821.808359][T12896]  ? kmem_cache_free+0x182/0x650
[  821.813457][T12896]  ? __se_sys_futex_time32+0x3ab/0x440
[  821.818975][T12896]  ? rcu_is_watching+0x15/0xb0
[  821.823796][T12896]  __do_fast_syscall_32+0x229/0x6e0
[  821.829217][T12896]  ? do_fast_syscall_32+0x33/0x70
[  821.834481][T12896]  ? lockdep_hardirqs_on+0x7a/0x110
[  821.839897][T12896]  ? asm_int80_emulation+0x1a/0x20
[  821.845135][T12896]  ? do_int80_emulation+0x286/0x530
[  821.850568][T12896]  ? trace_irq_disable+0x3b/0x140
[  821.856450][T12896]  do_fast_syscall_32+0x33/0x70
[  821.862086][T12896]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  821.869317][T12896] RIP: 0023:0xf702f01c
[  821.873568][T12896] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  821.894302][T12896] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  821.903011][T12896] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[  821.911817][T12896] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  821.921139][T12896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  821.929856][T12896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  821.938002][T12896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  821.946401][T12896]  </TASK>
[  821.950645][T12896] Kernel Offset: disabled
[  821.956490][T12896] Rebooting in 86400 seconds..