last executing test programs:

23.680939301s ago: executing program 4 (id=2959):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0x7f}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x161140, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e", 0x2}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000001884e99d93f99106b9741f8c683df619863495211000000010000000ec80d4cb093245d5247ff2b418effa25d211e04872f18d26c802c8d2d157972d8"], 0x10, 0x20000041}}], 0x1, 0xc004)
recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="186200000b000000000000008100000018000000090000000000000005000000f5eff342"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
gettid()
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r7, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x2)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8002}], 0x1, 0x0, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0xc0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd0, 0x4, {0xa, 0x25, 0x25, 0x7fff, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0x1a, 0x2, {0xa, 0x25, 0x25, 0x4, 0x5, 0x5d}}}}}}}}]}}, 0x0)
r9 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$negate(0xd, r9, 0x4a97, r9)

18.694776726s ago: executing program 4 (id=2965):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x884)

16.093850978s ago: executing program 4 (id=2968):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x20, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x1ff, r0, &(0x7f0000000080)="0d32818e", 0xfffffd1b}])

15.935407732s ago: executing program 0 (id=2970):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x54, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}]}]}, 0x54}}, 0x2400c000)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1602"], 0x19)
vmsplice(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f0000000180)="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", 0x102}, {&(0x7f0000000000)="8423237733626c19eece2fdfb6d02610fc997800000000000000", 0x1a}, {&(0x7f0000000900)="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", 0x215}, {&(0x7f00000012c0)="3056b9b7421a16ab0fafdeb26cf3e87bbc4bf310e05e8dd23e7879c0cfe6e0abc0e41b806917369f0407be834534837506bd18e354624950752397b897a00a9af488194b3ca880908c617a63f9ecdc69c1c2507b5944c7d05d883cc3f437380344992916aad37b1ef6b5ea84e3bc7253cb8758f726eae30972e80ca557c997c3a3525c0c7342a8519e157c2424969a0a3d25978edee9914edd89ea6a1afe9e543169860fd9c8655df7d0988806dc0d685baaefbc4d8529c6ba008289e5aca221a55a375d8612d1e315fb05f681ede1c8110c5b8d79943084b45d25f10802b6b508e817a8c73db23cb2b169e88e8e499b27478873994b9999790afb00bca05391f4d6305b118594a4f6c858a6103061f15d19ac9a2361ccc195ac16c505b621a45336b39f5975371af99330241fd93555e22e30dfd02e0e7be4a6eaad7a89e89332516d218f4894fb48b6620aa28d6f16cd82a06a0f6d29518b84af3cd9ce62bff2ad2c77f362d9d814bc8553cf01c517fe5327af450714e4de3a6626fa01a27ec65f62279d8fca6d433eadc85c6c4599716eea727e2f25c85b9fca0c89f851be1ad805a8dd54057aa52e51dc919e88b45bf38127099b0265ed7c990f7c2032cdc0a80e244da40766d5e0229d611979c277fad4989abe437b068a0f4e6105042651c145bb9270b1bea37fa45914d32d71eca93ee4d780747dda9176795f642f8633fa9f6e07cf2b4a6956d63b2a1dd21ca5fc52b3940b4082bfe49cf38acab915599ec8aaaca7820fc4144128bb7fa61e7cd81c1195d22f0b1cb7ae5396cd3b163610c73b21bb73e8a21836d1f8e47e9241923ab5581e4d1b992a1a7e759eed9f6c863ae3842518380069371c2fc2491f0ae5bd0dd6803417508d7c", 0x27b}], 0x4, 0xc)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/stat\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x1, 0xd2e1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
syz_open_dev$video4linux(&(0x7f0000000000), 0x8710, 0x129640)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0x40045613, &(0x7f0000000240)={0x8000001, 0x2, 0x4})

15.877868505s ago: executing program 4 (id=2971):
syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x4, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000080)='l', 0x1, 0x8000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x1000, 0xfffb, 0x800a, 0x5, 0x6, 0x291, 0xb3b, 0x5}, &(0x7f0000000240)=0x20)

13.683243813s ago: executing program 0 (id=2980):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpgid(0x0)
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r0}, 0x38)
r4 = socket$kcm(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000020805000000000000000096b636c5e3a5378d16f6c30cba82a25afbff9ce7559dc768d33876d04dcb316a845dd3eefd2e50c7594d41440263979512f57cba035bca10f3f59137be6d47d505dd662588da24a63f9079b0c4ff4502517f5fbcf90a7491e60054775538c086981e8f"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0, 0xfffffffffffffd6d}, 0x64)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r6 = io_uring_setup(0x7, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x404, 0x1, 0xbf22, 0x20, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000640)=@sg0, 0x0, 0x0)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x69)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)

10.704772696s ago: executing program 4 (id=2983):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)}, {&(0x7f00000001c0)="e582df448b7c", 0x6}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43dd5802f712a3", 0x12}, {&(0x7f0000000340)="3dae3dec21d5e0a7b1", 0x9}], 0x4)

10.110656454s ago: executing program 2 (id=2987):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x5a8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0)

7.700407149s ago: executing program 3 (id=2989):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x100)

7.420548808s ago: executing program 3 (id=2990):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x54, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}]}]}, 0x54}}, 0x2400c000)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1602"], 0x19)
vmsplice(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f0000000180)="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", 0x102}, {&(0x7f0000000000)="8423237733626c19eece2fdfb6d02610fc997800000000000000", 0x1a}, {&(0x7f0000000900)="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", 0x215}, {&(0x7f00000012c0)="3056b9b7421a16ab0fafdeb26cf3e87bbc4bf310e05e8dd23e7879c0cfe6e0abc0e41b806917369f0407be834534837506bd18e354624950752397b897a00a9af488194b3ca880908c617a63f9ecdc69c1c2507b5944c7d05d883cc3f437380344992916aad37b1ef6b5ea84e3bc7253cb8758f726eae30972e80ca557c997c3a3525c0c7342a8519e157c2424969a0a3d25978edee9914edd89ea6a1afe9e543169860fd9c8655df7d0988806dc0d685baaefbc4d8529c6ba008289e5aca221a55a375d8612d1e315fb05f681ede1c8110c5b8d79943084b45d25f10802b6b508e817a8c73db23cb2b169e88e8e499b27478873994b9999790afb00bca05391f4d6305b118594a4f6c858a6103061f15d19ac9a2361ccc195ac16c505b621a45336b39f5975371af99330241fd93555e22e30dfd02e0e7be4a6eaad7a89e89332516d218f4894fb48b6620aa28d6f16cd82a06a0f6d29518b84af3cd9ce62bff2ad2c77f362d9d814bc8553cf01c517fe5327af450714e4de3a6626fa01a27ec65f62279d8fca6d433eadc85c6c4599716eea727e2f25c85b9fca0c89f851be1ad805a8dd54057aa52e51dc919e88b45bf38127099b0265ed7c990f7c2032cdc0a80e244da40766d5e0229d611979c277fad4989abe437b068a0f4e6105042651c145bb9270b1bea37fa45914d32d71eca93ee4d780747dda9176795f642f8633fa9f6e07cf2b4a6956d63b2a1dd21ca5fc52b3940b4082bfe49cf38acab915599ec8aaaca7820fc4144128bb7fa61e7cd81c1195d22f0b1cb7ae5396cd3b163610c73b21bb73e8a21836d1f8e47e9241923ab5581e4d1b992a1a7e759eed9f6c863ae3842518380069371c2fc2491f0ae5bd0dd6803417508d7c", 0x27b}], 0x4, 0xc)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/stat\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x1, 0xd2e1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
syz_open_dev$video4linux(&(0x7f0000000000), 0x8710, 0x129640)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0x40045613, &(0x7f0000000240)={0x8000001, 0x2, 0x4})

6.930187053s ago: executing program 0 (id=2992):
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000000c0)=""/47, 0x2f}, {0x0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001700)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f0000001300)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}, 0xfffffffc}], 0x3, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x0, 0x0})
pwritev(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0xb, 0x10001)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r1, 0xaa0f4000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

6.810526087s ago: executing program 0 (id=2993):
syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x4, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32, @ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000080)='l', 0x1, 0x8000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x1000, 0xfffb, 0x800a, 0x5, 0x6, 0x291, 0xb3b, 0x5}, &(0x7f0000000240)=0x20)

6.497667877s ago: executing program 2 (id=2994):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000780)={0x28, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x810)

5.281004604s ago: executing program 0 (id=2995):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r3, 0x4000, r3}, 0x18)
sync()
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000540)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7, 0x1, 0xa})

4.342920484s ago: executing program 1 (id=2996):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
pwritev2(r0, &(0x7f0000000740)=[{&(0x7f0000000100)="3f6c5b761046b0a77db63c34e13408e27fcea6c7605a226d926b187e4d85c6dc144795bcb7eb57aa924187b4915c60848ced868e669e7383365c1b98ccdf87f4db91bf74c981a25caf0102470956f6b38a96d397cb995a13c9f1c474091c01e8c3c09a356e7dac9e7405acd7d332ba3fbb177cd8b2ffba8cc8d01264085fa41b35c651a946b8f2034baaa01bc5c5b1179e2e6e82dc3f059c52451ba5abc1", 0x9e}, {&(0x7f00000003c0)="87348b520f8a493ad8a047181df6537bdb1a05021f46d8199da66dd518ae99529927d7ba3d466263445843914d169d37b43a394b7f72563bb2b3f4d7d82ce7f5fd8465297d841e964f9ebefcab497fd319e92f52", 0x54}, {&(0x7f00000005c0)="f92c1e79acd0f7cdc8d83328244f9958c71163a4241e65d197e16cc0f83b426f50b2e198556fb3093a6c773014485fa3d250498d3c37886f01e28967891c211476b81d48e0d8c0e00a702dc058b1ea7a3379e60ec24f132994e5e71486e475fbd0bc45120c98a1f481eeed303a49c3715c922f20115a81e65ff34d2b6d903525677b13dc5a7a0dcf0d9fefab6f10ac3943b6fa40", 0x94}, {&(0x7f0000000540)="2f3a267f685a2d1298bed1b1df1e89e1fd29af64d0999594571ec52aa9ef8d2142b7d0ee618cd40d6c820d028cd41af19d307be674027c1096e85f739afb383cde82b296fa62d3e85d13dc0ba6", 0x4d}], 0x4, 0x9, 0x1, 0x1c)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
pipe2(&(0x7f0000001440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r5, 0x0, r4, 0x0, 0x6, 0x0)
write(r4, &(0x7f00000002c0)="fe", 0xfdef)
read$watch_queue(r3, &(0x7f0000000780)=""/221, 0xfdef)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])
sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)={0x0, 0xfffffefc, 0xffdffff8, 0x8, 0x15, "000000000000000000000000000000f30200"})
r6 = syz_open_pts(0xffffffffffffffff, 0x61c0)
pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)
mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)=ANY=[@ANYBLOB="7569ce8f", @ANYRESHEX=0x0, @ANYBLOB=',\x00'])
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xd4}}, 0x4000010)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4000)

4.341944534s ago: executing program 2 (id=2997):
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x26e1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb \xd2\xb0\xe6\xe4Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0\x7f>\xc8\xac[\x88\x12X\x03\xc4\x9f', 0x2)
ftruncate(r2, 0xffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$pptp(0x18, 0x1, 0x2)
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r2, 0x0, 0x2000, 0x8000})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x80, 0x3, 0x215, 0x0, r0}, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)

4.309979755s ago: executing program 4 (id=2998):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x103901)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x80001)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
userfaultfd(0x80001)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x71, 0x2)
r1 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB="07b0cf7e2c89cc"], 0x0)

2.414410744s ago: executing program 3 (id=2999):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2.316363037s ago: executing program 3 (id=3000):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/90, 0x5a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x100)

2.244614699s ago: executing program 2 (id=3001):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x0, 0xfffffffffffffffd, 0x9b0318})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200})

2.22363576s ago: executing program 1 (id=3002):
unshare(0x20400)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

2.097911254s ago: executing program 1 (id=3003):
recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000000c0)=""/47, 0x2f}, {0x0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001700)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f0000001300)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}, 0xfffffffc}], 0x3, 0x0, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x0, 0x0})
pwritev(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0xb, 0x10001)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r1, 0xaa0f4000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0)

2.051656655s ago: executing program 1 (id=3004):
syz_usb_connect$uac1(0x5, 0x87, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x1, 0xa0, 0x36, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x7f, 0x3, {0x7, 0x25, 0x1, 0x0, 0xf0, 0x59}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x1, 0x1001}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x2, 0x1, 0xf, "ed144b1cabd9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xc2, 0x8, 0x7, {0x7, 0x25, 0x1, 0xc, 0x3}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x2, 0x81, 0x2, 0xf7, 0x8}, 0x32, &(0x7f0000000280)={0x5, 0xf, 0x32, 0x3, [@wireless={0xb, 0x10, 0x1, 0x5, 0x94, 0xfe, 0x80, 0x5, 0x40}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x6, 0xf, 0x6, [0xf, 0x0, 0xffc030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x1, 0x1}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0xfffd, @random="c0c13c2baeb6", 'macvlan1\x00'}}, 0x1e)
sendmmsg$sock(r0, &(0x7f0000001dc0), 0x40000a6, 0x48850)

1.961837908s ago: executing program 3 (id=3005):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYBLOB="0003000000000100200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x48}}, 0x0)

1.88976721s ago: executing program 2 (id=3006):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x884)

1.736467635s ago: executing program 3 (id=3007):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x40, 0x15, 0x4, "3b3359b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c40)={0x2c, &(0x7f0000000980)={0x20, 0x10, 0x13, "12d6e82d551ee94b0a9b8cb6d617118382cb2b"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.677345787s ago: executing program 2 (id=3008):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="89e7ee0c7cda99", 0x7}, {&(0x7f00000001c0)="e582df448b7c", 0x6}, {&(0x7f0000000140)="03be00fbb46ecedbe0090a43dd5802f712a3", 0x12}, {&(0x7f0000000340)="3dae3dec21d5e0a7b1", 0x9}], 0x4)

1.172734573s ago: executing program 0 (id=3009):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x54, r3, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}}]}]}, 0x54}}, 0x2400c000)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1602"], 0x19)
vmsplice(0xffffffffffffffff, &(0x7f0000002300)=[{&(0x7f0000000180)="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", 0x102}, {&(0x7f0000000000)="8423237733626c19eece2fdfb6d02610fc997800000000000000", 0x1a}, {&(0x7f0000000900)="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", 0x21e}, {&(0x7f00000012c0)="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", 0x27b}], 0x4, 0xc)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/stat\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x1, 0xd2e1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
syz_open_dev$video4linux(&(0x7f0000000000), 0x8710, 0x129640)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0x40045613, &(0x7f0000000240)={0x8000001, 0x2, 0x4})

91.064746ms ago: executing program 1 (id=3010):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

0s ago: executing program 1 (id=3011):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x4000000000, {0x3, 0x0, 0x0, 0x0, 0x0, 0x400000, {0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006200)="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", 0x2000, &(0x7f000000ac00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a580)={0x90, 0x0, 0x2, {0x4, 0x0, 0x0, 0x1, 0x8000, 0xb3, {0x4, 0x7, 0x6, 0xfffffffffffff3c9, 0x4157f7ae, 0x5, 0xd, 0x841e, 0x8, 0xc000, 0x3, r4, r5, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r4, &(0x7f0000000200))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40605414, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000840)={"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"})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x6, 0xff, 0x2, 0xe1, 0x8, 0x80, 0xc, 0x7, 0x3, 0xca, 0x9, 0x3, 0xb, 0x5, 0x30, 0x86}})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r12 = socket(0x1, 0x803, 0x121)
getsockname$packet(r12, 0x0, &(0x7f00000001c0))
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000000228bd78000000002000000000", @ANYRES32=0x0, @ANYBLOB="460609004a00020014001400766c616e3000000000b40320bba5e19acdd08005ff67686c000000000000", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

kernel console output (not intermixed with test programs):

7.855982][ T4356] scsi host1: usb-storage 3-1:1.0
[  777.891062][T12955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2362'.
[  778.086526][T12933] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2356'.
[  778.159496][ T4356] usb 3-1: USB disconnect, device number 16
[  778.301640][T12962] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  778.426226][T12966] netlink: 'syz.1.2364': attribute type 1 has an invalid length.
[  778.508555][T12970] device bond4 entered promiscuous mode
[  778.550305][T12970] 8021q: adding VLAN 0 to HW filter on device bond4
[  779.066586][T12984] 9pnet_fd: Insufficient options for proto=fd
[  779.089188][ T8968] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  779.283103][ T8968] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  779.293494][ T8968] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping
[  779.307458][ T8968] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  779.317688][ T8968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.326361][ T8968] usb 3-1: Product: syz
[  779.330954][ T8968] usb 3-1: Manufacturer: syz
[  779.335663][ T8968] usb 3-1: SerialNumber: syz
[  779.350729][ T8968] usb 3-1: config 0 descriptor??
[  779.357332][T12976] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  779.366015][T12976] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  779.375609][ T8968] usb 3-1: ucan: probing device on interface #0
[  779.382987][ T8968] usb 3-1: ucan: invalid EP count (1)
[  779.388918][ T8968] usb 3-1: ucan: probe failed; try to update the device firmware
[  779.636702][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2373'.
[  779.658350][T12990] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2373'.
[  779.850819][T12993] device syzkaller0 entered promiscuous mode
[  781.189436][ T4317] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  781.389322][ T4317] usb 2-1: Using ep0 maxpacket: 16
[  781.408897][ T4317] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  781.428720][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.437547][ T4317] usb 2-1: Product: syz
[  781.442195][ T4317] usb 2-1: Manufacturer: syz
[  781.446864][ T4317] usb 2-1: SerialNumber: syz
[  781.455885][ T4317] usb 2-1: config 0 descriptor??
[  781.464179][ T4317] visor 2-1:0.0: Sony Clie 3.5 converter detected
[  781.689292][ T4356] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  781.825148][ T5533] usb 3-1: USB disconnect, device number 17
[  781.870379][ T4317] usb 2-1: clie_3_5_startup: get interface number bad return length: 0
[  781.879273][ T4317] visor: probe of 2-1:0.0 failed with error -5
[  781.879850][ T4356] usb 4-1: Using ep0 maxpacket: 16
[  781.901107][ T4356] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  781.910523][ T4356] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  781.920765][ T4356] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  781.930719][ T4356] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  781.942160][ T4356] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  781.952581][ T4356] usb 4-1: config 1 interface 0 has no altsetting 0
[  781.959584][ T4356] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  781.968858][ T4356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  781.982281][ T4356] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  782.086846][ T4317] usb 2-1: USB disconnect, device number 25
[  782.186702][ T4356] scsi host1: usb-storage 4-1:1.0
[  782.395131][ T4317] usb 4-1: USB disconnect, device number 19
[  782.676567][T13017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2381'.
[  782.738488][T13018] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2381'.
[  783.028960][T13022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2384'.
[  783.029966][ T8967] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  783.118823][T13022] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2384'.
[  783.235326][ T8967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  783.280165][ T4317] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  783.297555][ T8967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  783.337046][T13030] 9pnet_fd: Insufficient options for proto=fd
[  783.372054][ T8967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  783.464391][ T8967] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  783.509197][ T4317] usb 2-1: Using ep0 maxpacket: 16
[  783.524391][ T4317] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  783.558605][ T8967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.599426][ T4317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  783.628730][ T8967] usb 3-1: Product: syz
[  783.662719][ T8967] usb 3-1: Manufacturer: syz
[  783.684994][ T4317] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  783.708412][ T8967] usb 3-1: SerialNumber: syz
[  783.817043][ T4317] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  783.838842][ T8967] usb 3-1: config 0 descriptor??
[  783.910810][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.991358][ T4317] usb 2-1: Product: syz
[  783.995729][ T4317] usb 2-1: Manufacturer: syz
[  784.017562][ T4317] usb 2-1: SerialNumber: syz
[  784.090355][T13038] netlink: 'syz.3.2389': attribute type 1 has an invalid length.
[  784.133943][ T8967] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  784.218979][T13041] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  784.245388][ T4317] usb 2-1: 0:2 : does not exist
[  784.264232][T13041] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  784.279032][ T4317] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1)
[  784.318953][ T5533] usb 3-1: USB disconnect, device number 18
[  784.346732][ T4317] usb 2-1: USB disconnect, device number 26
[  784.416380][T13038] bond8: (slave gretap2): making interface the new active one
[  784.468916][T13038] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  784.541966][T13042] bond8: (slave bridge4): Enslaving as an active interface with a down link
[  784.578181][T13043] device macvlan2 entered promiscuous mode
[  784.604644][T13043] device bond8 entered promiscuous mode
[  784.619268][T13043] device gretap2 entered promiscuous mode
[  784.625648][T13043] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  784.683853][T13043] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  784.711299][T13043] device bond8 left promiscuous mode
[  784.716898][T13043] device gretap2 left promiscuous mode
[  784.783282][ T8967] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  784.976093][T13054] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2392'.
[  784.989355][ T8967] usb 4-1: Using ep0 maxpacket: 32
[  785.005650][ T8967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.038632][ T8967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  785.100453][ T8967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  785.145421][ T8967] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  785.175869][ T8967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.212389][ T8967] usb 4-1: config 0 descriptor??
[  785.647012][ T8967] hid (null): unknown global tag 0xd
[  785.664164][T10715] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  785.664441][ T8968] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  785.679549][ T8967] hid (null): invalid report_size 25464
[  785.687299][ T8967] hid (null): report_id 0 is invalid
[  785.703244][ T8967] kye 0003:0458:5011.0009: unknown main item tag 0x0
[  785.710071][ T8967] kye 0003:0458:5011.0009: unexpected long global item
[  785.718222][ T8967] kye 0003:0458:5011.0009: parse failed
[  785.724187][ T8967] kye: probe of 0003:0458:5011.0009 failed with error -22
[  785.739396][ T4356] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  785.869361][ T8968] usb 3-1: Using ep0 maxpacket: 32
[  785.949399][ T4356] usb 2-1: Using ep0 maxpacket: 32
[  785.960783][ T4356] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  785.997744][ T4356] usb 2-1: config 0 has no interface number 0
[  786.023772][ T4356] usb 2-1: config 0 interface 12 has no altsetting 0
[  786.152024][ T4356] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  786.167551][T13076] 9pnet_fd: Insufficient options for proto=fd
[  786.198613][ T4356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  786.237355][ T4356] usb 2-1: Product: syz
[  786.285473][ T4356] usb 2-1: Manufacturer: syz
[  786.343878][ T4356] usb 2-1: SerialNumber: syz
[  786.422724][ T4356] usb 2-1: config 0 descriptor??
[  786.692067][ T8968] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  786.703483][ T8968] usb 3-1: config 0 interface 0 has no altsetting 0
[  786.710436][ T8968] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  786.719730][ T8968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.737220][ T8968] usb 3-1: config 0 descriptor??
[  786.832214][ T4356] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  786.862560][ T4356] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  786.893877][ T4356] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  786.924951][ T4356] f81534: probe of 2-1:0.12 failed with error -71
[  786.982121][ T4356] usb 2-1: USB disconnect, device number 27
[  787.153967][T13062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  787.183171][T13062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.187428][ T8967] usb 4-1: USB disconnect, device number 20
[  787.234766][ T8968] corsair-psu 0003:1B1C:1C09.000A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0
[  787.317758][T13090] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2404'.
[  787.597787][T10715] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  787.660983][ T8968] corsair-psu 0003:1B1C:1C09.000A: unable to initialize device (-95)
[  787.707014][ T8968] corsair-psu: probe of 0003:1B1C:1C09.000A failed with error -95
[  787.766163][ T8968] usb 3-1: USB disconnect, device number 19
[  787.831534][T13108] 9pnet_virtio: no channels available for device 127.0.0.1
[  788.133709][T13112] 9pnet_fd: Insufficient options for proto=fd
[  788.509628][T13105] fido_id[13105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  788.758790][T13116] netlink: 'syz.2.2415': attribute type 1 has an invalid length.
[  788.879994][T13119] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1
[  788.890366][T13119] PKCS7: Only support pkcs7_signedData type
[  788.906167][T13116] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  788.936105][T10715] Bluetooth: hci2: unexpected cc 0x0c5b length: 2 > 1
[  788.943074][T10715] Bluetooth: hci2: unexpected event for opcode 0x0c5b
[  789.002344][T13116] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  789.146661][T13122] bond4: (slave gretap1): making interface the new active one
[  789.242002][T13122] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  789.419299][    T7] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  790.839504][    T7] usb 3-1: Using ep0 maxpacket: 32
[  790.847494][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  790.889417][T10715] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  790.929304][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  790.931461][T13126] bond4: (slave bridge5): Enslaving as an active interface with a down link
[  790.936581][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  790.936635][    T7] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  791.085355][T13128] device macvlan2 entered promiscuous mode
[  791.104643][T13128] device bond4 entered promiscuous mode
[  791.121059][T13128] device gretap1 entered promiscuous mode
[  791.146833][T13128] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  791.179310][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.200470][T13152] 9pnet_virtio: no channels available for device 127.0.0.1
[  791.231213][T13128] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  791.237629][    T7] usb 3-1: config 0 descriptor??
[  791.297169][T13128] device bond4 left promiscuous mode
[  791.303802][T13128] device gretap1 left promiscuous mode
[  791.650261][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'.
[  791.674100][T13157] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.696577][    T7] hid (null): unknown global tag 0xd
[  791.705605][    T7] hid (null): invalid report_size 25464
[  791.737880][    T7] hid (null): report_id 0 is invalid
[  791.749679][    T7] kye 0003:0458:5011.000B: unknown main item tag 0x0
[  791.758173][    T7] kye 0003:0458:5011.000B: unexpected long global item
[  791.788152][    T7] kye 0003:0458:5011.000B: parse failed
[  791.794104][    T7] kye: probe of 0003:0458:5011.000B failed with error -22
[  791.912078][T13157] device bridge_slave_1 left promiscuous mode
[  791.918275][T13157] bridge0: port 2(bridge_slave_1) entered disabled state
[  792.333274][T13166] 9pnet_fd: Insufficient options for proto=fd
[  793.538411][ T4318] usb 3-1: USB disconnect, device number 20
[  793.850097][T10715] Bluetooth: hci4: ACL packet for unknown connection handle 201
[  794.452087][T13192] 9pnet_virtio: no channels available for device 127.0.0.1
[  794.570192][T13193] device syzkaller0 entered promiscuous mode
[  795.238762][T13202] netlink: 'syz.1.2438': attribute type 1 has an invalid length.
[  795.323293][T13206] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  795.361605][T13206] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  795.419206][T10715] Bluetooth: hci4: unexpected cc 0x0c5b length: 2 > 1
[  795.426142][T10715] Bluetooth: hci4: unexpected event for opcode 0x0c5b
[  795.443078][T13202] bond5: (slave gretap1): making interface the new active one
[  795.514943][T13202] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  795.848385][T13220] 9pnet_fd: Insufficient options for proto=fd
[  795.859547][ T4317] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  796.079259][ T4317] usb 2-1: Using ep0 maxpacket: 32
[  796.094797][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  796.143030][T13210] bond5: (slave bridge5): Enslaving as an active interface with a down link
[  796.378251][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  796.388419][T13206] device macvlan2 entered promiscuous mode
[  796.430572][T13206] device bond5 entered promiscuous mode
[  796.446756][ T4317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  796.486714][T13206] device gretap1 entered promiscuous mode
[  796.511315][T13206] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  796.554959][ T4317] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  796.576073][T13206] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  796.606538][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.665496][T13206] device bond5 left promiscuous mode
[  796.667742][ T4317] usb 2-1: config 0 descriptor??
[  796.680119][T13206] device gretap1 left promiscuous mode
[  797.248686][T13236] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  797.281882][T13236] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  797.308791][ T4317] hid (null): unknown global tag 0xd
[  797.321196][ T4317] hid (null): invalid report_size 25464
[  797.331023][ T4317] hid (null): report_id 0 is invalid
[  797.341995][ T4317] kye 0003:0458:5011.000C: unknown main item tag 0x0
[  797.349006][ T4317] kye 0003:0458:5011.000C: unexpected long global item
[  797.357113][ T4317] kye 0003:0458:5011.000C: parse failed
[  797.363035][ T4317] kye: probe of 0003:0458:5011.000C failed with error -22
[  797.542665][ T5533] usb 2-1: USB disconnect, device number 28
[  798.051816][T13206] syz.1.2438 (13206) used greatest stack depth: 18160 bytes left
[  799.542509][ T5533] libceph: connect (1)[c::]:6789 error -101
[  799.564920][ T5533] libceph: mon0 (1)[c::]:6789 connect error
[  799.735414][T13263] ceph: No mds server is up or the cluster is laggy
[  800.323565][T13280] 9pnet_fd: Insufficient options for proto=fd
[  804.645606][T13307] netlink: 'syz.3.2466': attribute type 1 has an invalid length.
[  805.100654][T13310] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  805.125573][T13310] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  805.317409][ T5533] libceph: connect (1)[c::]:6789 error -101
[  805.326578][ T5533] libceph: mon0 (1)[c::]:6789 connect error
[  805.363964][T13315] bond9: (slave bridge5): Enslaving as an active interface with a down link
[  805.420064][T13317] device macvlan2 entered promiscuous mode
[  805.429263][ T4356] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  805.455931][T13317] device bond9 entered promiscuous mode
[  805.471144][T13312] ceph: No mds server is up or the cluster is laggy
[  805.526032][T13317] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  805.602957][T13317] device bond9 left promiscuous mode
[  805.619204][ T4356] usb 4-1: Using ep0 maxpacket: 32
[  805.626276][T10715] Bluetooth: hci3: unexpected cc 0x0c5b length: 2 > 1
[  805.630788][ T4356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  805.634103][T10715] Bluetooth: hci3: unexpected event for opcode 0x0c5b
[  805.736205][ T4356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  805.805881][ T4356] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  805.859262][ T4356] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  805.878803][ T4356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.934205][ T4356] usb 4-1: config 0 descriptor??
[  806.159243][ T4318] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  806.349352][ T4318] usb 3-1: Using ep0 maxpacket: 32
[  806.361342][ T4318] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  806.370760][ T4356] usbhid 4-1:0.0: can't add hid device: -71
[  806.384492][ T4318] usb 3-1: config 0 has no interface number 0
[  806.390990][ T4318] usb 3-1: config 0 interface 12 has no altsetting 0
[  806.395238][ T4356] usbhid: probe of 4-1:0.0 failed with error -71
[  806.407722][ T4318] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  806.419681][ T4356] usb 4-1: USB disconnect, device number 21
[  806.435935][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.461320][ T4318] usb 3-1: Product: syz
[  806.467155][ T4318] usb 3-1: Manufacturer: syz
[  806.478131][ T4318] usb 3-1: SerialNumber: syz
[  806.487995][ T4318] usb 3-1: config 0 descriptor??
[  808.546504][T10715] Bluetooth: hci1: unexpected cc 0x0c5b length: 2 > 1
[  808.553661][T10715] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  808.735985][T13370] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  808.787132][T13370] device syzkaller0 entered promiscuous mode
[  808.794464][T13370] tipc: Resetting bearer <eth:syzkaller0>
[  808.810594][T13368] tipc: Resetting bearer <eth:syzkaller0>
[  808.968068][ T4356] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  809.007666][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  809.014300][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  809.179196][ T4356] usb 4-1: Using ep0 maxpacket: 8
[  809.186515][ T4356] usb 4-1: config 2 has an invalid interface number: 31 but max is 0
[  809.204811][ T4356] usb 4-1: config 2 has no interface number 0
[  809.212470][ T4356] usb 4-1: config 2 interface 31 has no altsetting 0
[  809.252445][ T4356] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  809.267762][ T4356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.276522][ T4356] usb 4-1: Product: syz
[  809.280930][ T4356] usb 4-1: Manufacturer: syz
[  809.285697][ T4356] usb 4-1: SerialNumber: syz
[  809.719208][ T4356] ch9200: probe of 4-1:2.31 failed with error -22
[  809.766786][ T4356] usb 4-1: USB disconnect, device number 22
[  810.256225][ T4318] f81534 3-1:0.12: f81534_get_register: reg: 1004 failed: -71
[  810.269234][ T4318] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  810.276593][ T4318] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  810.322436][ T4318] f81534: probe of 3-1:0.12 failed with error -71
[  810.350161][ T4318] usb 3-1: USB disconnect, device number 21
[  812.908839][T10715] Bluetooth: hci1: unexpected cc 0x0c5b length: 2 > 1
[  812.915776][T10715] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  813.483170][ T4318] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  813.696369][ T4318] usb 4-1: Using ep0 maxpacket: 32
[  813.712256][ T4318] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  813.729932][ T4318] usb 4-1: config 0 has no interface number 0
[  813.736077][ T4318] usb 4-1: config 0 interface 12 has no altsetting 0
[  813.791558][ T4318] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  813.800809][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.808833][ T4318] usb 4-1: Product: syz
[  813.813442][ T4318] usb 4-1: Manufacturer: syz
[  813.818082][ T4318] usb 4-1: SerialNumber: syz
[  813.831882][ T4318] usb 4-1: config 0 descriptor??
[  814.817689][T13368] tipc: Disabling bearer <eth:syzkaller0>
[  814.826508][T13381] netlink: 'syz.0.2488': attribute type 1 has an invalid length.
[  815.882711][ T4318] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32
[  815.895178][ T4318] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32
[  815.904127][ T4318] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32
[  815.915796][ T4318] f81534: probe of 4-1:0.12 failed with error -32
[  816.281396][ T4284] usb 4-1: USB disconnect, device number 23
[  818.435620][T13463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  818.562332][T13463] device syzkaller0 entered promiscuous mode
[  818.574140][T13463] tipc: Resetting bearer <eth:syzkaller0>
[  818.616271][T13461] tipc: Resetting bearer <eth:syzkaller0>
[  818.889259][ T4318] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  819.080156][ T4318] usb 3-1: Using ep0 maxpacket: 16
[  819.095985][ T4318] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  819.122287][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.185417][ T4318] usb 3-1: Product: syz
[  819.229795][ T4318] usb 3-1: Manufacturer: syz
[  819.243610][ T4318] usb 3-1: SerialNumber: syz
[  819.286386][ T4318] usb 3-1: config 0 descriptor??
[  819.362409][ T4318] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  819.570146][ T4318] usb 3-1: clie_3_5_startup: get config number bad return length: 0
[  819.584013][ T4318] visor: probe of 3-1:0.0 failed with error -5
[  819.786796][ T4318] usb 3-1: USB disconnect, device number 22
[  820.180397][T13492] 9pnet_fd: Insufficient options for proto=fd
[  823.527370][T13461] tipc: Disabling bearer <eth:syzkaller0>
[  823.536080][T13480] netlink: 'syz.4.2513': attribute type 1 has an invalid length.
[  823.578809][T13481] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address
[  823.607910][T13481] bond7: (slave vxcan1): Error -95 calling set_mac_address
[  823.637866][T13483] bond7: (slave bridge8): Enslaving as an active interface with a down link
[  823.653097][T13484] device macvlan2 entered promiscuous mode
[  823.681817][T13484] device bond7 entered promiscuous mode
[  823.687911][T13484] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  823.697522][T13484] device bond7 left promiscuous mode
[  823.852051][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'.
[  823.914918][T13526] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2521'.
[  824.442495][T13543] 9pnet_fd: Insufficient options for proto=fd
[  825.779667][T13544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2527'.
[  825.919878][T13553] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  826.868450][T13553] device syzkaller0 entered promiscuous mode
[  826.937083][T13553] tipc: Resetting bearer <eth:syzkaller0>
[  826.975342][T13552] tipc: Resetting bearer <eth:syzkaller0>
[  829.747055][T13552] tipc: Disabling bearer <eth:syzkaller0>
[  829.760145][T13572] netlink: 'syz.0.2534': attribute type 1 has an invalid length.
[  829.786940][T13576] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  829.808840][T13576] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  829.829643][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2535'.
[  829.915933][T13583] bond5: (slave bridge6): Enslaving as an active interface with a down link
[  829.936554][T13584] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2535'.
[  829.954083][T13586] device macvlan2 entered promiscuous mode
[  829.990420][T13586] device bond5 entered promiscuous mode
[  830.009348][T13586] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  830.054957][T13586] device bond5 left promiscuous mode
[  830.084527][T10715] Bluetooth: hci1: unexpected cc 0x0c5b length: 2 > 1
[  830.091617][T10715] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  831.345609][T13613] 9pnet_fd: Insufficient options for proto=fd
[  833.038274][T13623] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  833.052591][T13623] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  834.122538][T13633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  834.208441][T13641] 9pnet_fd: p9_fd_create_tcp (13641): problem connecting socket to 127.0.0.1
[  834.515856][T13648] 9pnet_fd: Insufficient options for proto=fd
[  834.756745][T13633] device syzkaller0 entered promiscuous mode
[  834.829333][T13633] tipc: Resetting bearer <eth:syzkaller0>
[  834.866791][T13644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2551'.
[  835.126419][T13649] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2551'.
[  835.339622][ T4447] tipc: Resetting bearer <eth:syzkaller0>
[  835.355362][T13632] tipc: Resetting bearer <eth:syzkaller0>
[  835.542190][ T4318] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  835.553684][T13664] 9pnet: Could not find request transport: fd0x0000000000000004
[  835.764669][ T4318] usb 2-1: unable to get BOS descriptor or descriptor too short
[  835.799565][ T4318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  835.811049][ T4318] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  835.821504][ T4318] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  835.832658][ T4318] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  835.846131][ T4318] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  835.857180][ T4318] usb 2-1: config 1 interface 1 has no altsetting 0
[  835.868159][ T4318] usb 2-1: string descriptor 0 read error: -22
[  835.874817][ T4318] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  835.884140][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.441193][ T5533] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  836.635502][ T5533] usb 3-1: Using ep0 maxpacket: 32
[  836.653339][ T5533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  836.664479][ T5533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  836.674959][ T5533] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  836.688108][ T5533] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  836.697586][ T5533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.727167][ T5533] usb 3-1: config 0 descriptor??
[  837.513641][ T4318] usb 2-1: USB disconnect, device number 29
[  838.005187][T11639] udevd[11639]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  838.381748][T10715] Bluetooth: hci2: unexpected cc 0x0c5b length: 2 > 1
[  838.388651][T10715] Bluetooth: hci2: unexpected event for opcode 0x0c5b
[  838.797553][T13691] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  839.736574][T13632] tipc: Disabling bearer <eth:syzkaller0>
[  839.748567][T13668] netlink: 'syz.2.2557': attribute type 1 has an invalid length.
[  839.836161][T13689] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  839.857196][T13690] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  839.974383][ T5533] usbhid 3-1:0.0: can't add hid device: -71
[  839.999204][ T5533] usbhid: probe of 3-1:0.0 failed with error -71
[  840.050350][ T5533] usb 3-1: USB disconnect, device number 23
[  841.212486][T13706] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  841.976905][T13716] 9pnet: Could not find request transport: fd0x0000000000000008
[  842.947882][T10715] Bluetooth: hci3: unexpected cc 0x0c5b length: 2 > 1
[  842.954884][T10715] Bluetooth: hci3: unexpected event for opcode 0x0c5b
[  843.018670][T13706] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  843.028542][T13706] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  843.037641][T13706] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  843.050593][T13706] device geneve2 entered promiscuous mode
[  843.095654][T13706] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  843.108266][T13706] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  843.123112][T13706] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  843.133509][T13706] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  843.233314][T13742] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  843.284414][T13737] device syzkaller0 entered promiscuous mode
[  844.579230][ T4318] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  844.814551][ T4318] usb 2-1: Using ep0 maxpacket: 32
[  844.832174][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  844.843287][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  844.856915][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  844.873692][ T4318] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  844.883847][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.906545][ T4318] usb 2-1: config 0 descriptor??
[  844.962897][T13774] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  847.435815][T13751] netlink: 'syz.1.2578': attribute type 1 has an invalid length.
[  847.574174][T13771] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  848.869864][ T4318] usbhid 2-1:0.0: can't add hid device: -71
[  848.887521][ T4318] usbhid: probe of 2-1:0.0 failed with error -71
[  848.915818][ T4318] usb 2-1: USB disconnect, device number 30
[  848.960008][T13792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  849.068620][T13792] device syzkaller0 entered promiscuous mode
[  849.075886][T13792] tipc: Resetting bearer <eth:syzkaller0>
[  849.093619][T13791] tipc: Resetting bearer <eth:syzkaller0>
[  849.101243][T10715] Bluetooth: hci1: unexpected cc 0x0c5b length: 2 > 1
[  849.108546][T10715] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  849.284592][T13800] 9pnet: Could not find request transport: fd0x0000000000000004
[  849.819203][ T4318] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  850.009199][ T4318] usb 4-1: Using ep0 maxpacket: 32
[  850.027256][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  850.059302][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  850.088491][ T4318] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  850.121653][ T4318] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  850.143168][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.183273][ T4318] usb 4-1: config 0 descriptor??
[  850.629366][ T4318] hid (null): unknown global tag 0xd
[  850.635145][ T4318] hid (null): invalid report_size 25464
[  850.644888][ T4318] hid (null): report_id 0 is invalid
[  850.672071][ T4318] kye 0003:0458:5011.000D: unknown main item tag 0x0
[  850.678909][ T4318] kye 0003:0458:5011.000D: unexpected long global item
[  850.686632][ T4318] kye 0003:0458:5011.000D: parse failed
[  850.712631][ T4318] kye: probe of 0003:0458:5011.000D failed with error -22
[  850.764568][T10715] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  852.707195][T13791] tipc: Disabling bearer <eth:syzkaller0>
[  852.715161][T13804] netlink: 'syz.3.2590': attribute type 1 has an invalid length.
[  853.404475][ T8967] usb 4-1: USB disconnect, device number 24
[  853.816869][T13850] netlink: 'syz.0.2597': attribute type 1 has an invalid length.
[  853.911722][T13849] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  853.955255][T13849] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  854.607500][T10715] Bluetooth: hci4: unexpected cc 0x0c5b length: 2 > 1
[  854.614632][T10715] Bluetooth: hci4: unexpected event for opcode 0x0c5b
[  854.643163][T13858] bond6: (slave bridge7): Enslaving as an active interface with a down link
[  854.720532][T13856] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  854.764710][T13850] device macvlan2 entered promiscuous mode
[  854.775459][T13850] device bond6 entered promiscuous mode
[  854.816752][T13850] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  854.877321][T13850] device bond6 left promiscuous mode
[  856.077750][T13880] 9pnet_fd: Insufficient options for proto=fd
[  857.422774][T13859] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  857.634092][T10715] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  857.654430][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2604'.
[  857.726929][T13892] netlink: 'syz.0.2608': attribute type 1 has an invalid length.
[  857.757379][T13884] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2604'.
[  857.769505][T13887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  857.798474][T13892] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  857.837087][T13892] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  857.996557][T13887] device syzkaller0 entered promiscuous mode
[  858.008555][T13887] tipc: Resetting bearer <eth:syzkaller0>
[  858.034816][T13898] bond7: (slave bridge8): Enslaving as an active interface with a down link
[  858.049810][T13892] device macvlan2 entered promiscuous mode
[  858.056541][T13892] device bond7 entered promiscuous mode
[  858.064620][T13892] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  858.074727][T13892] device bond7 left promiscuous mode
[  859.102999][T13883] tipc: Resetting bearer <eth:syzkaller0>
[  861.181560][T13945] 9pnet_fd: Insufficient options for proto=fd
[  864.304346][T13883] tipc: Disabling bearer <eth:syzkaller0>
[  864.333716][T13903] device syzkaller0 entered promiscuous mode
[  864.743233][ T5533] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  864.929399][ T5533] usb 2-1: Using ep0 maxpacket: 16
[  864.942361][ T5533] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  864.952737][ T5533] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  864.971573][ T5533] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  864.981528][ T5533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.004396][ T5533] usb 2-1: Product: syz
[  865.008709][ T5533] usb 2-1: Manufacturer: syz
[  865.020026][ T5533] usb 2-1: SerialNumber: syz
[  865.463172][ T5533] usb 2-1: USB disconnect, device number 31
[  867.352771][T13947] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  867.374559][T13956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'.
[  867.420259][T13958] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2620'.
[  868.573773][T13972] netlink: 'syz.2.2626': attribute type 1 has an invalid length.
[  868.941974][T13973] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  869.132913][T13973] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  869.230640][T13986] 9pnet_fd: Insufficient options for proto=fd
[  870.109241][ T8967] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  870.330752][ T8967] usb 3-1: Using ep0 maxpacket: 32
[  870.402105][ T8967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  870.442052][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  870.452856][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  870.505047][ T8967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  870.540353][T13972] bond5: (slave bridge7): Enslaving as an active interface with a down link
[  870.556620][ T8967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  870.603658][T13978] device macvlan2 entered promiscuous mode
[  870.617744][T13978] device bond5 entered promiscuous mode
[  870.651318][T13978] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  870.661540][ T8967] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  870.687439][T13978] device bond5 left promiscuous mode
[  870.703545][ T8967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.762892][ T8967] usb 3-1: config 0 descriptor??
[  870.826881][T13996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  870.884759][  T952] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  871.079365][  T952] usb 2-1: Using ep0 maxpacket: 32
[  871.087635][  T952] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  871.112816][  T952] usb 2-1: config 0 has no interface number 0
[  871.136525][  T952] usb 2-1: config 0 interface 12 has no altsetting 0
[  871.179981][ T4278] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  871.192955][ T4278] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  871.202204][  T952] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  871.211728][ T4278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  871.220975][ T8967] hid (null): unknown global tag 0xd
[  871.221917][  T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.226790][ T8967] hid (null): invalid report_size 25464
[  871.235173][  T952] usb 2-1: Product: syz
[  871.235192][  T952] usb 2-1: Manufacturer: syz
[  871.235209][  T952] usb 2-1: SerialNumber: syz
[  871.252165][  T952] usb 2-1: config 0 descriptor??
[  871.262292][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  871.270552][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  871.277947][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  871.322313][ T8967] hid (null): report_id 0 is invalid
[  871.338327][ T8967] kye 0003:0458:5011.000E: unknown main item tag 0x0
[  871.345750][ T8967] kye 0003:0458:5011.000E: unexpected long global item
[  871.353584][ T8967] kye 0003:0458:5011.000E: parse failed
[  871.360342][ T8967] kye: probe of 0003:0458:5011.000E failed with error -22
[  871.453781][T13998] device syzkaller0 entered promiscuous mode
[  871.466643][ T8967] usb 3-1: USB disconnect, device number 24
[  871.490064][T13998] tipc: Resetting bearer <eth:syzkaller0>
[  871.524180][T13992] tipc: Resetting bearer <eth:syzkaller0>
[  873.347783][ T4278] Bluetooth: hci3: command 0x0409 tx timeout
[  874.363928][  T952] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  874.371934][  T952] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  874.381012][  T952] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  874.388750][  T952] f81534: probe of 2-1:0.12 failed with error -71
[  874.411315][  T952] usb 2-1: USB disconnect, device number 32
[  874.809724][T13992] tipc: Disabling bearer <eth:syzkaller0>
[  874.846211][T14018] device syzkaller0 entered promiscuous mode
[  874.853421][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2634'.
[  874.875552][T14027] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2634'.
[  875.399516][ T4278] Bluetooth: hci3: command 0x041b tx timeout
[  876.208725][T14046] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  877.489260][ T4278] Bluetooth: hci3: command 0x040f tx timeout
[  878.470177][T14034] device syzkaller1 entered promiscuous mode
[  878.478085][T14044] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  879.001287][T14057] 9pnet_fd: Insufficient options for proto=fd
[  879.559286][ T4278] Bluetooth: hci3: command 0x0419 tx timeout
[  880.502923][T14068] 9pnet: Could not find request transport: fd0x0000000000000008
[  880.800920][T14005] chnl_net:caif_netlink_parms(): no params data found
[  880.937913][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2644'.
[  881.003915][T14082] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2644'.
[  881.129824][T14005] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.137064][T14005] bridge0: port 1(bridge_slave_0) entered disabled state
[  881.180254][T14005] device bridge_slave_0 entered promiscuous mode
[  881.195390][T14005] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.202821][ T4317] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  881.216795][T14005] bridge0: port 2(bridge_slave_1) entered disabled state
[  881.226620][T14005] device bridge_slave_1 entered promiscuous mode
[  881.254733][T14090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  881.275163][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  881.342846][T14090] device syzkaller0 entered promiscuous mode
[  881.350479][T14090] tipc: Resetting bearer <eth:syzkaller0>
[  881.359206][ T4317] usb 2-1: device descriptor read/64, error -71
[  881.428404][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  881.467713][T14089] tipc: Resetting bearer <eth:syzkaller0>
[  882.339178][ T4317] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  882.511601][ T4317] usb 2-1: device descriptor read/64, error -71
[  882.643152][ T4317] usb usb2-port1: attempt power cycle
[  883.083784][ T4317] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  883.131090][ T4317] usb 2-1: device descriptor read/8, error -71
[  883.405883][ T4317] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  883.470079][ T4317] usb 2-1: device descriptor read/8, error -71
[  883.590865][ T4317] usb usb2-port1: unable to enumerate USB device
[  884.436119][T14118] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  885.085873][T14089] tipc: Disabling bearer <eth:syzkaller0>
[  885.115036][T14116] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  885.123133][T14117] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  885.196010][T14005] team0: Port device team_slave_0 added
[  885.245698][T14005] team0: Port device team_slave_1 added
[  885.599745][T14129] 9pnet_fd: Insufficient options for proto=fd
[  887.586909][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  887.626602][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  887.727887][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  887.762337][T14138] netlink: 'syz.3.2654': attribute type 1 has an invalid length.
[  887.884469][T14140] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  887.907771][T14125] 9pnet: Could not find request transport: fd0x0000000000000007
[  887.957531][T14140] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  888.033734][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  888.058582][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  888.136063][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  888.163063][T14155] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2657'.
[  888.200812][T14138] bond10: (slave bridge8): Enslaving as an active interface with a down link
[  888.217655][T14145] device macvlan2 entered promiscuous mode
[  888.241988][T14145] device bond10 entered promiscuous mode
[  888.254533][T14145] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  888.331232][T14145] device bond10 left promiscuous mode
[  888.381262][ T8968] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  888.484243][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'.
[  888.589240][ T8968] usb 4-1: Using ep0 maxpacket: 32
[  888.589801][T14158] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2656'.
[  888.789339][  T952] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  888.989603][  T952] usb 2-1: Using ep0 maxpacket: 32
[  889.003491][  T952] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  889.019664][T14005] device hsr_slave_0 entered promiscuous mode
[  889.070229][  T952] usb 2-1: config 0 has no interface number 0
[  889.112283][  T952] usb 2-1: config 0 interface 12 has no altsetting 0
[  889.193638][T14005] device hsr_slave_1 entered promiscuous mode
[  889.221343][ T8968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  889.232418][ T8968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  889.241865][  T952] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  889.244530][ T8968] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  889.264846][ T8968] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  889.274286][ T8968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  889.292178][ T8968] usb 4-1: config 0 descriptor??
[  889.299533][  T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.332725][  T952] usb 2-1: Product: syz
[  889.337575][  T952] usb 2-1: Manufacturer: syz
[  889.365798][  T952] usb 2-1: SerialNumber: syz
[  889.376478][  T952] usb 2-1: config 0 descriptor??
[  889.408680][T14005] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  889.436784][T14005] Cannot create hsr debugfs directory
[  889.617450][T14171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  889.677990][  T952] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  889.700342][  T952] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  889.707743][  T952] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  889.737978][  T952] f81534: probe of 2-1:0.12 failed with error -71
[  889.768623][T14171] device syzkaller0 entered promiscuous mode
[  889.797664][  T952] usb 2-1: USB disconnect, device number 37
[  889.820362][T14171] tipc: Resetting bearer <eth:syzkaller0>
[  889.848983][T14170] tipc: Resetting bearer <eth:syzkaller0>
[  889.943930][ T8968] usbhid 4-1:0.0: can't add hid device: -71
[  889.960898][ T8968] usbhid: probe of 4-1:0.0 failed with error -71
[  889.979809][ T8968] usb 4-1: USB disconnect, device number 25
[  890.969189][T14190] 9pnet_fd: Insufficient options for proto=fd
[  894.278174][T14196] 9pnet: Could not find request transport: fd0x0000000000000008
[  895.286098][ T4278] Bluetooth: hci2: unexpected cc 0x0c5b length: 2 > 1
[  895.293354][ T4278] Bluetooth: hci2: unexpected event for opcode 0x0c5b
[  897.308476][T14170] tipc: Disabling bearer <eth:syzkaller0>
[  897.347241][T14173] device syzkaller0 entered promiscuous mode
[  897.742983][ T4318] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  897.946395][ T4318] usb 3-1: Using ep0 maxpacket: 32
[  897.953651][ T4318] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  897.968044][ T4318] usb 3-1: config 0 has no interface number 0
[  897.974525][ T4318] usb 3-1: config 0 interface 12 has no altsetting 0
[  897.984971][ T4318] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  897.994400][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.002721][ T4318] usb 3-1: Product: syz
[  898.006939][ T4318] usb 3-1: Manufacturer: syz
[  898.011940][ T4318] usb 3-1: SerialNumber: syz
[  898.027162][ T4318] usb 3-1: config 0 descriptor??
[  898.272745][ T4318] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  898.281220][ T4318] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  898.288558][ T4318] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  898.296743][ T4318] f81534: probe of 3-1:0.12 failed with error -71
[  898.316982][ T4318] usb 3-1: USB disconnect, device number 25
[  901.115801][T14241] 9pnet_fd: Insufficient options for proto=fd
[  901.473188][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2669'.
[  901.621117][T14211] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2669'.
[  901.909785][ T4278] Bluetooth: hci4: unexpected cc 0x0c5b length: 2 > 1
[  901.916699][ T4278] Bluetooth: hci4: unexpected event for opcode 0x0c5b
[  901.956519][T14250] fuse: Bad value for 'fd'
[  903.295423][T14263] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  903.423228][T14256] tipc: Disabling bearer <eth:syzkaller0>
[  903.649265][ T8968] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  903.849192][ T8968] usb 4-1: Using ep0 maxpacket: 32
[  904.248943][ T8968] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  906.025556][ T8968] usb 4-1: config 0 has no interface number 0
[  906.069211][ T8968] usb 4-1: config 0 interface 12 has no altsetting 0
[  906.126524][ T8968] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  906.474850][T14284] 9pnet_fd: Insufficient options for proto=fd
[  907.059615][ T8968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.067885][ T8968] usb 4-1: Product: syz
[  907.110879][T14005] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  907.174382][T14005] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  907.193681][ T8968] usb 4-1: Manufacturer: syz
[  907.198343][ T8968] usb 4-1: SerialNumber: syz
[  907.204506][T14005] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  907.238048][T14286] device syzkaller1 entered promiscuous mode
[  907.247340][T14005] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  907.294339][ T8968] usb 4-1: config 0 descriptor??
[  907.323409][ T8968] usb 4-1: can't set config #0, error -71
[  907.361431][ T8968] usb 4-1: USB disconnect, device number 26
[  907.474874][T14289] device syzkaller0 entered promiscuous mode
[  907.485338][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2688'.
[  911.949872][T14293] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2688'.
[  912.134005][T14005] 8021q: adding VLAN 0 to HW filter on device bond0
[  912.192880][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  912.206105][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  912.245003][T14005] 8021q: adding VLAN 0 to HW filter on device team0
[  912.792021][T14318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  913.121778][T14321] device syzkaller0 entered promiscuous mode
[  913.128638][T14321] tipc: Resetting bearer <eth:syzkaller0>
[  913.140120][T14310] tipc: Resetting bearer <eth:syzkaller0>
[  913.389483][ T4356] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  913.629680][ T4356] usb 2-1: Using ep0 maxpacket: 32
[  913.645028][ T4356] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  913.689638][ T4356] usb 2-1: config 0 has no interface number 0
[  913.724623][ T4356] usb 2-1: config 0 interface 12 has no altsetting 0
[  913.787320][ T4356] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  913.845812][ T4356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.887650][ T4356] usb 2-1: Product: syz
[  913.907271][ T4356] usb 2-1: Manufacturer: syz
[  913.929427][ T4356] usb 2-1: SerialNumber: syz
[  913.970277][ T4356] usb 2-1: config 0 descriptor??
[  914.409880][ T4356] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  914.427547][ T4356] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  914.435514][ T4356] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  914.444545][ T4356] f81534: probe of 2-1:0.12 failed with error -71
[  914.526132][ T4356] usb 2-1: USB disconnect, device number 38
[  914.545847][T14341] 9pnet_fd: Insufficient options for proto=fd
[  917.255080][T14310] tipc: Disabling bearer <eth:syzkaller0>
[  917.268364][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  917.279736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  917.288373][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  917.297179][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  917.305873][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  917.331489][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  917.350621][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  917.384254][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state
[  917.391469][ T4453] bridge0: port 2(bridge_slave_1) entered forwarding state
[  917.403585][T14343] netlink: 'syz.4.2699': attribute type 1 has an invalid length.
[  917.444425][T14344] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  917.469663][T14344] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  917.509714][T14349] bond8: (slave bridge11): Enslaving as an active interface with a down link
[  917.530273][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  917.553222][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2701'.
[  917.594312][T14359] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2701'.
[  917.609687][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  917.644754][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  917.666212][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  917.718985][T14355] device syzkaller0 entered promiscuous mode
[  917.737925][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  921.094915][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  921.104254][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  921.121701][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  921.137013][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  921.173258][T14005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  921.220266][T14005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  921.253422][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  921.290300][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  921.902820][ T4356] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  921.989303][ T4318] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  922.389566][ T4356] usb 4-1: Using ep0 maxpacket: 32
[  922.404231][ T4356] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  922.466240][ T4356] usb 4-1: config 0 has no interface number 0
[  922.492009][T14403] 9pnet_fd: Insufficient options for proto=fd
[  922.499398][ T4284] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  922.547687][ T4356] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  922.614516][ T4356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.690079][ T4356] usb 4-1: Product: syz
[  922.694272][ T4356] usb 4-1: Manufacturer: syz
[  922.712114][ T4284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  922.728329][ T4284] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  922.739681][ T4356] usb 4-1: SerialNumber: syz
[  922.773658][ T4356] usb 4-1: config 0 descriptor??
[  922.779096][ T4284] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  922.788429][ T4284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.807447][ T4356] smsc95xx v2.0.0
[  922.817482][ T4284] usb 3-1: config 0 descriptor??
[  922.860695][ T4318] usb 2-1: Using ep0 maxpacket: 32
[  922.871324][ T4318] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  922.889170][ T4318] usb 2-1: config 0 has no interface number 0
[  922.907200][ T4318] usb 2-1: config 0 interface 12 has no altsetting 0
[  922.947821][ T4318] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  922.969173][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.977595][ T4318] usb 2-1: Product: syz
[  922.996298][ T4318] usb 2-1: Manufacturer: syz
[  923.001473][ T4318] usb 2-1: SerialNumber: syz
[  923.026606][ T4318] usb 2-1: config 0 descriptor??
[  923.119876][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  923.135016][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  923.152241][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  923.187162][T14411] netlink: 'syz.4.2713': attribute type 1 has an invalid length.
[  923.221686][T14411] device bond9 entered promiscuous mode
[  923.227525][ T4356] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  923.241039][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  923.249829][ T4356] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  923.268659][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  923.280878][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'.
[  923.322670][T14005] device veth0_vlan entered promiscuous mode
[  923.333643][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  923.355747][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  923.383744][ T4318] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  923.386237][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  923.404434][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  923.413946][T14005] device veth1_vlan entered promiscuous mode
[  923.419841][ T4318] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  923.453618][ T4318] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  923.463048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  923.478701][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  923.487316][ T4318] f81534: probe of 2-1:0.12 failed with error -71
[  923.496189][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  923.519437][ T4318] usb 2-1: USB disconnect, device number 39
[  923.525753][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  923.545207][T14005] device veth0_macvtap entered promiscuous mode
[  923.578938][T14005] device veth1_macvtap entered promiscuous mode
[  923.612293][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  923.632277][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  923.642874][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  923.653648][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  923.670031][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0
[  923.678224][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  923.687802][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  923.701646][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  923.733499][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  923.751383][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  923.789086][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  923.801869][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  923.817042][T14420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  923.821152][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  923.841022][T14420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  923.853675][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1
[  923.863281][T14422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'.
[  923.883265][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  923.894336][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  923.907224][T14005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  923.924069][T14005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  923.935256][T14005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  923.947064][T14005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  923.960426][T14423] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2716'.
[  924.148183][ T4448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  924.161838][ T4448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  924.201018][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  924.246133][ T4441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  924.259278][ T4441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  924.268200][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  925.159347][ T4278] Bluetooth: hci3: unexpected event 0x06 length: 7 > 3
[  925.532496][T14437] device syzkaller0 entered promiscuous mode
[  925.546773][ T4356] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71
[  925.581090][T14444] 9pnet_fd: Insufficient options for proto=fd
[  925.662367][ T4356] smsc95xx: probe of 4-1:0.67 failed with error -71
[  925.934657][ T4356] usb 4-1: USB disconnect, device number 27
[  926.116063][  T952] usb 3-1: USB disconnect, device number 26
[  926.784046][ T8968] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  926.982949][ T8968] usb 3-1: Using ep0 maxpacket: 32
[  926.991327][ T8968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  927.014967][ T8968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  927.025179][ T8968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  927.038679][ T8968] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  927.048351][ T8968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.072436][ T8968] usb 3-1: config 0 descriptor??
[  927.505149][ T8968] hid (null): unknown global tag 0xd
[  927.510750][ T8968] hid (null): invalid report_size 25464
[  927.518507][ T8968] hid (null): report_id 0 is invalid
[  927.529338][ T8968] kye 0003:0458:5011.000F: unknown main item tag 0x0
[  927.536130][ T8968] kye 0003:0458:5011.000F: unexpected long global item
[  927.543807][ T8968] kye 0003:0458:5011.000F: parse failed
[  927.550136][ T8968] kye: probe of 0003:0458:5011.000F failed with error -22
[  929.131091][T14449] netlink: 'syz.2.2723': attribute type 1 has an invalid length.
[  929.156468][T14450] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  929.170959][T14450] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  929.186676][T14453] netlink: 'syz.3.2724': attribute type 1 has an invalid length.
[  929.226296][T14454] bond6: (slave bridge10): Enslaving as an active interface with a down link
[  929.245423][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2724'.
[  929.267080][ T4318] usb 3-1: USB disconnect, device number 27
[  929.292783][T14455] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  929.317194][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2727'.
[  929.344220][T14467] netlink: 'syz.4.2729': attribute type 1 has an invalid length.
[  929.362484][T14468] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2727'.
[  929.576196][ T4356] libceph: connect (1)[c::]:6789 error -101
[  929.584192][ T4356] libceph: mon0 (1)[c::]:6789 connect error
[  930.380432][T14482] ceph: No mds server is up or the cluster is laggy
[  930.392889][ T4356] libceph: connect (1)[c::]:6789 error -101
[  930.422404][ T4356] libceph: mon0 (1)[c::]:6789 connect error
[  930.629326][ T4318] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  930.828182][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  930.897520][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  930.972300][T14503] 9pnet_fd: Insufficient options for proto=fd
[  931.071407][ T4318] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  931.214755][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.319212][T10715] Bluetooth: hci3: command 0x0406 tx timeout
[  931.604284][ T4318] usb 1-1: config 0 descriptor??
[  931.647223][T14506] device syzkaller0 entered promiscuous mode
[  931.881673][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  931.888187][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  932.726101][T14525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  932.742470][T14525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.810361][  T952] usb 1-1: USB disconnect, device number 9
[  934.379103][  T952] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  934.579192][  T952] usb 1-1: Using ep0 maxpacket: 32
[  934.587099][  T952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  934.604155][  T952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  934.615721][  T952] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  934.641313][  T952] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  934.656902][  T952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.667101][  T952] usb 1-1: config 0 descriptor??
[  935.085744][  T952] hid (null): unknown global tag 0xd
[  935.092073][  T952] hid (null): invalid report_size 25464
[  935.100339][  T952] hid (null): report_id 0 is invalid
[  935.110456][  T952] kye 0003:0458:5011.0010: unknown main item tag 0x0
[  935.117223][  T952] kye 0003:0458:5011.0010: unexpected long global item
[  935.126778][  T952] kye 0003:0458:5011.0010: parse failed
[  935.132817][  T952] kye: probe of 0003:0458:5011.0010 failed with error -22
[  935.309841][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2743'.
[  935.325230][T14518] netlink: 'syz.2.2742': attribute type 1 has an invalid length.
[  935.345472][T14519] netlink: 'syz.3.2744': attribute type 4 has an invalid length.
[  935.353922][T14519] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2744'.
[  935.370016][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'.
[  935.394571][T14521] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  935.445329][T14523] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2743'.
[  935.459241][T14527] netlink: 'syz.0.2745': attribute type 1 has an invalid length.
[  935.570220][T14528] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  935.582174][T14528] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  935.641341][T14529] bond1: (slave gretap1): making interface the new active one
[  935.656460][T14529] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  935.682529][   T26] libceph: connect (1)[c::]:6789 error -101
[  935.705915][   T26] libceph: mon0 (1)[c::]:6789 connect error
[  936.001492][ T4318] libceph: connect (1)[c::]:6789 error -101
[  936.028431][ T4318] libceph: mon0 (1)[c::]:6789 connect error
[  936.415405][T14537] ceph: No mds server is up or the cluster is laggy
[  936.466660][T14530] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  936.537765][T14540] netlink: 'syz.4.2749': attribute type 1 has an invalid length.
[  936.546120][  T952] usb 1-1: USB disconnect, device number 10
[  936.645033][T14544] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  936.736482][T14544] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  937.013287][T14552] bond10: (slave bridge14): Enslaving as an active interface with a down link
[  937.866701][T14578] netlink: 'syz.4.2758': attribute type 1 has an invalid length.
[  938.114229][T14578] device bond11 entered promiscuous mode
[  938.119441][ T4356] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  938.312520][T14581] netlink: 'syz.0.2756': attribute type 4 has an invalid length.
[  938.320980][T14581] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2756'.
[  938.568735][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2759'.
[  938.717398][T14585] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2759'.
[  938.833733][T14590] binder: 14589:14590 ioctl 4018620d 0 returned -22
[  938.851288][ T4356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  938.869420][ T4356] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  938.898541][ T4356] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  938.944376][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.990075][ T4356] usb 3-1: config 0 descriptor??
[  938.997977][T14588] device syzkaller0 entered promiscuous mode
[  940.010598][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.088596][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  940.801290][    T7] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  940.999147][    T7] usb 4-1: Using ep0 maxpacket: 32
[  941.016962][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  941.057379][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  941.085641][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  941.104880][    T7] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  941.114457][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.131297][    T7] usb 4-1: config 0 descriptor??
[  941.260332][ T8968] usb 3-1: USB disconnect, device number 28
[  941.550137][    T7] hid (null): unknown global tag 0xd
[  941.555637][    T7] hid (null): invalid report_size 25464
[  941.572639][    T7] hid (null): report_id 0 is invalid
[  941.583230][ T1191] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  941.607029][    T7] kye 0003:0458:5011.0011: unknown main item tag 0x0
[  941.613908][    T7] kye 0003:0458:5011.0011: unexpected long global item
[  941.621879][    T7] kye 0003:0458:5011.0011: parse failed
[  941.627501][    T7] kye: probe of 0003:0458:5011.0011 failed with error -22
[  941.770812][ T1191] usb 1-1: Using ep0 maxpacket: 16
[  941.801977][ T1191] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  941.822000][ T1191] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  941.832121][ T1191] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  941.842027][ T1191] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  941.852147][ T1191] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  941.862380][ T1191] usb 1-1: config 1 interface 0 has no altsetting 0
[  941.869211][ T1191] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  941.878489][ T1191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  941.901270][ T1191] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  942.117856][ T1191] scsi host1: usb-storage 1-1:1.0
[  942.321216][   T26] usb 1-1: USB disconnect, device number 11
[  942.927065][T14639] binder: 14638:14639 ioctl 4018620d 0 returned -22
[  943.032164][   T26] libceph: connect (1)[c::]:6789 error -101
[  943.038249][   T26] libceph: mon0 (1)[c::]:6789 connect error
[  943.148515][T14641] ceph: No mds server is up or the cluster is laggy
[  945.613242][T14609] netlink: 'syz.3.2768': attribute type 1 has an invalid length.
[  945.801701][T14629] netlink: 'syz.2.2772': attribute type 1 has an invalid length.
[  945.815266][T14630] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[  945.826434][T14635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2773'.
[  945.840118][    C0] vkms_vblank_simulate: vblank timer overrun
[  945.881584][T14637] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2773'.
[  945.933378][ T8967] usb 4-1: USB disconnect, device number 28
[  946.001817][T14676] binder: 14675:14676 ioctl 4018620d 0 returned -22
[  946.009616][   T26] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  946.017426][ T4318] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  946.124540][T14678] libceph: connect (1)[c::]:6789 error -101
[  946.131262][T14678] libceph: mon0 (1)[c::]:6789 connect error
[  946.179399][ T4322] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  946.209211][   T26] usb 2-1: Using ep0 maxpacket: 16
[  946.216464][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  946.228090][   T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  946.238473][ T4318] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  946.250008][   T26] usb 2-1: config 0 has no interfaces?
[  946.255768][ T4318] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  946.256290][T14681] ceph: No mds server is up or the cluster is laggy
[  946.273892][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.284566][   T26] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  946.295031][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.307201][ T4318] usb 1-1: config 0 descriptor??
[  946.312433][   T26] usb 2-1: Product: syz
[  946.316959][   T26] usb 2-1: Manufacturer: syz
[  946.323123][   T26] usb 2-1: SerialNumber: syz
[  946.379173][ T4322] usb 3-1: Using ep0 maxpacket: 16
[  946.387053][   T26] usb 2-1: config 0 descriptor??
[  946.394244][ T4322] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11
[  946.405869][ T4322] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  946.425293][ T4322] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  946.435415][ T4322] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  946.449224][ T4322] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  946.471903][ T4322] usb 3-1: config 1 interface 0 has no altsetting 0
[  946.478641][ T4322] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  946.488597][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.555326][ T4322] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  947.289159][ T4322] ums-sddr09: probe of 3-1:1.0 failed with error -22
[  947.469280][ T4322] usb 3-1: USB disconnect, device number 29
[  947.515650][T14697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  947.530968][T14697] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  948.815887][    T7] usb 1-1: USB disconnect, device number 12
[  948.866341][ T4322] usb 2-1: USB disconnect, device number 40
[  949.082743][T14718] netlink: 'syz.0.2794': attribute type 1 has an invalid length.
[  949.302657][T14718] device bond2 entered promiscuous mode
[  949.546403][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'.
[  949.745452][T14733] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2796'.
[  949.852726][T14734] binder: BINDER_SET_CONTEXT_MGR already set
[  949.906217][T14734] binder: 14732:14734 ioctl 4018620d 200000000040 returned -16
[  950.103155][ T4317] libceph: connect (1)[c::]:6789 error -101
[  950.111779][ T4317] libceph: mon0 (1)[c::]:6789 connect error
[  950.152498][T14739] ceph: No mds server is up or the cluster is laggy
[  951.267606][T14761] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2803'.
[  952.670254][T14772] tipc: Started in network mode
[  952.687657][T14772] tipc: Node identity ac14142f, cluster identity 4711
[  952.730956][T14772] tipc: Enabled bearer <udp:syz2>, priority 10
[  952.763920][T14773] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  952.779298][ T1191] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  952.825159][T14775] binder: 14774:14775 unknown command 1074553619
[  952.831900][T14775] binder: 14774:14775 ioctl c0306201 200000000040 returned -22
[  952.851317][T14775] binder: 14774:14775 unknown command 1074553620
[  952.857757][T14775] binder: 14774:14775 ioctl c0306201 200000000640 returned -22
[  952.959886][T14772] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  953.019136][ T1191] usb 4-1: Using ep0 maxpacket: 32
[  953.026305][ T1191] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  953.045859][ T1191] usb 4-1: config 0 has no interface number 0
[  953.053416][ T1191] usb 4-1: config 0 interface 12 has no altsetting 0
[  953.069701][ T1191] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  953.078789][ T1191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.093258][ T1191] usb 4-1: Product: syz
[  953.097490][ T1191] usb 4-1: Manufacturer: syz
[  953.103449][ T1191] usb 4-1: SerialNumber: syz
[  953.124196][ T1191] usb 4-1: config 0 descriptor??
[  953.159480][ T4322] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  953.209222][    T7] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  953.359219][ T4322] usb 2-1: Using ep0 maxpacket: 16
[  953.367305][ T4322] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  953.389133][ T4322] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  953.398960][ T4322] usb 2-1: config 0 interface 0 has no altsetting 0
[  953.401327][    T7] usb 3-1: Using ep0 maxpacket: 8
[  953.431724][    T7] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  953.439256][ T4322] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  953.439292][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.459693][    T7] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  953.459824][ T4322] usb 2-1: config 0 descriptor??
[  953.472786][    T7] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  953.487817][    T7] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  953.500023][    T7] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  953.514139][    T7] usb 3-1: config 168 interface 0 has no altsetting 0
[  953.523103][    T7] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  953.531297][    T7] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  953.543653][    T7] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  953.566487][    T7] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  953.578191][    T7] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  953.592362][    T7] usb 3-1: config 168 interface 0 has no altsetting 0
[  953.600945][    T7] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  953.608785][    T7] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  953.620721][    T7] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  953.632966][    T7] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping
[  953.644867][    T7] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  953.659863][    T7] usb 3-1: config 168 interface 0 has no altsetting 0
[  953.678637][    T7] usb 3-1: string descriptor 0 read error: -22
[  953.701548][    T7] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  953.719175][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.742227][    T7] adutux 3-1:168.0: interrupt endpoints not found
[  953.849281][    T7] tipc: Node number set to 2886997039
[  953.894117][T14781] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2810'.
[  953.907315][T14781] bond1 (unregistering): (slave gretap1): Releasing active interface
[  953.933640][T14781] bond1 (unregistering): (slave bridge1): Releasing active interface
[  953.966596][T14781] bond1 (unregistering): Released all slaves
[  953.974441][    T7] usb 3-1: USB disconnect, device number 30
[  954.123027][ T4322] usbhid 2-1:0.0: can't add hid device: -71
[  954.138525][ T4322] usbhid: probe of 2-1:0.0 failed with error -71
[  954.154724][ T4322] usb 2-1: USB disconnect, device number 41
[  954.278220][T14786] binder: BINDER_SET_CONTEXT_MGR already set
[  954.285084][T14786] binder: 14785:14786 ioctl 4018620d 200000000040 returned -16
[  954.629229][    T7] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  954.811463][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  954.835657][    T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  954.856365][    T7] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  954.868758][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.885881][    T7] usb 1-1: Product: syz
[  954.891002][    T7] usb 1-1: Manufacturer: syz
[  954.895700][    T7] usb 1-1: SerialNumber: syz
[  954.911330][    T7] usb 1-1: config 0 descriptor??
[  955.217892][    T7] usb 1-1: USB disconnect, device number 13
[  955.498651][  T952] libceph: connect (1)[c::]:6789 error -101
[  955.540501][  T952] libceph: mon0 (1)[c::]:6789 connect error
[  955.566554][T14793] ceph: No mds server is up or the cluster is laggy
[  955.654591][T14801] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2816'.
[  955.811638][  T952] libceph: connect (1)[c::]:6789 error -101
[  955.892190][  T952] libceph: mon0 (1)[c::]:6789 connect error
[  956.273818][ T1191] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  956.409347][ T1191] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  956.463627][ T1191] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  956.494121][ T1191] f81534: probe of 4-1:0.12 failed with error -71
[  956.520440][ T1191] usb 4-1: USB disconnect, device number 29
[  956.603091][T14808] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  956.690569][T14811] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  957.367912][T14815] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2822'.
[  957.460788][T14819] lo: Caught tx_queue_len zero misconfig
[  957.516574][T14808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  957.569941][T14822] binder: BINDER_SET_CONTEXT_MGR already set
[  957.579867][T14822] binder: 14816:14822 ioctl 4018620d 200000000040 returned -16
[  958.939079][ T1191] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  959.217956][ T1191] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  959.296844][ T1191] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  959.341670][ T1191] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  959.367325][T14841] device syzkaller0 entered promiscuous mode
[  959.379217][ T1191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.414483][ T1191] usb 4-1: Product: syz
[  959.423027][ T1191] usb 4-1: Manufacturer: syz
[  959.439151][ T1191] usb 4-1: SerialNumber: syz
[  959.466115][ T1191] usb 4-1: config 0 descriptor??
[  959.561808][T14843] program syz.0.2832 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  959.685949][  T952] usb 4-1: USB disconnect, device number 30
[  959.849457][ T4317] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  960.069172][ T4317] usb 1-1: Using ep0 maxpacket: 32
[  960.081706][ T4317] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  960.169673][ T4317] usb 1-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40
[  960.265260][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.360993][ T4317] usb 1-1: Product: syz
[  960.410569][ T4317] usb 1-1: Manufacturer: syz
[  960.478900][ T4317] usb 1-1: SerialNumber: syz
[  960.750683][T14843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  960.768514][T14843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  960.809548][ T4317] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6
[  960.836298][ T3624] bcm5974 1-1:1.0: could not read from device
[  960.869675][ T4356] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  960.885078][ T3624] bcm5974 1-1:1.0: could not read from device
[  960.893111][ T4317] usb 1-1: USB disconnect, device number 14
[  961.029276][ T4356] usb 3-1: device descriptor read/64, error -71
[  961.269404][ T4322] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  961.539497][ T4322] usb 2-1: device descriptor read/64, error -71
[  961.849234][ T4322] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  961.877217][T14859] sctp: failed to load transform for md5: -2
[  962.129104][ T4356] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  962.209232][ T4322] usb 2-1: device descriptor read/64, error -71
[  962.309110][ T4356] usb 3-1: device descriptor read/64, error -71
[  962.331406][ T4322] usb usb2-port1: attempt power cycle
[  962.461988][ T4356] usb usb3-port1: attempt power cycle
[  962.567605][T14885] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  962.779330][ T4322] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  962.780899][  T952] libceph: connect (1)[c::]:6789 error -101
[  962.821739][ T4322] usb 2-1: device descriptor read/8, error -71
[  962.882452][T14889] device syzkaller0 entered promiscuous mode
[  962.896081][  T952] libceph: mon0 (1)[c::]:6789 connect error
[  962.911157][T14880] ceph: No mds server is up or the cluster is laggy
[  963.090967][ T4322] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  963.119198][ T4356] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  963.136141][ T4322] usb 2-1: device descriptor read/8, error -71
[  963.167103][ T4356] usb 3-1: device descriptor read/8, error -71
[  963.259396][ T4322] usb usb2-port1: unable to enumerate USB device
[  963.351647][T14894] binder: 14892:14894 unknown command 1074553619
[  963.358091][T14894] binder: 14892:14894 ioctl c0306201 200000000040 returned -22
[  963.386924][T14894] binder: 14892:14894 unknown command 1074553620
[  963.399207][T14894] binder: 14892:14894 ioctl c0306201 200000000640 returned -22
[  963.449523][ T4356] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  963.503631][ T4356] usb 3-1: device descriptor read/8, error -71
[  963.644952][ T4356] usb usb3-port1: unable to enumerate USB device
[  965.109271][ T4356] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  965.309977][ T4356] usb 1-1: Using ep0 maxpacket: 16
[  965.347338][ T4356] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  965.458136][ T4356] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  965.581645][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.590240][ T4356] usb 1-1: Product: syz
[  965.594462][ T4356] usb 1-1: Manufacturer: syz
[  965.599319][ T4322] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  965.600146][ T4356] usb 1-1: SerialNumber: syz
[  965.617959][ T4356] usb 1-1: config 0 descriptor??
[  965.724636][T14918] device syzkaller0 entered promiscuous mode
[  965.810994][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  965.828220][ T4322] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  965.837626][ T4322] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  965.853785][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.866052][ T4322] usb 3-1: config 0 descriptor??
[  966.825635][T14932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.835898][T14932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  967.048974][T14940] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  967.064367][T14940] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  967.138315][T14942] netlink: 'syz.3.2864': attribute type 1 has an invalid length.
[  967.166310][T14942] device bond11 entered promiscuous mode
[  967.188681][T14942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2864'.
[  967.199839][T14940] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  968.269739][  T952] usb 1-1: USB disconnect, device number 15
[  968.302202][T14953] device syzkaller0 entered promiscuous mode
[  968.340261][ T4322] usb 3-1: USB disconnect, device number 35
[  968.512220][   T27] audit: type=1326 audit(1778754263.143:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff599ce59 code=0x7ffc0000
[  968.536276][    C0] vkms_vblank_simulate: vblank timer overrun
[  968.565049][   T27] audit: type=1326 audit(1778754263.173:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f1ff599ce59 code=0x7ffc0000
[  968.589519][    C0] vkms_vblank_simulate: vblank timer overrun
[  968.602955][   T27] audit: type=1326 audit(1778754263.173:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff599ce59 code=0x7ffc0000
[  968.647156][   T27] audit: type=1326 audit(1778754263.173:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ff599ce59 code=0x7ffc0000
[  968.671155][    C0] vkms_vblank_simulate: vblank timer overrun
[  968.761102][   T27] audit: type=1326 audit(1778754263.173:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff599ce59 code=0x7ffc0000
[  968.785165][    C0] vkms_vblank_simulate: vblank timer overrun
[  968.829178][   T27] audit: type=1326 audit(1778754263.173:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ff599ce59 code=0x7ffc0000
[  968.853207][    C0] vkms_vblank_simulate: vblank timer overrun
[  969.182461][   T27] audit: type=1326 audit(1778754263.173:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff599ce59 code=0x7ffc0000
[  969.207489][    C0] vkms_vblank_simulate: vblank timer overrun
[  969.602711][   T27] audit: type=1326 audit(1778754263.173:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ff595d68e code=0x7ffc0000
[  969.627329][   T27] audit: type=1326 audit(1778754263.173:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff599ce59 code=0x7ffc0000
[  969.652675][   T27] audit: type=1326 audit(1778754263.173:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.0.2868" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f1ff599ce59 code=0x7ffc0000
[  969.718654][T14974] netlink: 'syz.3.2875': attribute type 1 has an invalid length.
[  969.772061][T14974] device bond12 entered promiscuous mode
[  969.829753][T14980] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2875'.
[  969.862559][T14979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  969.998387][T14981] device syzkaller0 entered promiscuous mode
[  970.021888][T14981] tipc: Resetting bearer <eth:syzkaller0>
[  970.029369][ T4318] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  970.080000][T14975] tipc: Resetting bearer <eth:syzkaller0>
[  970.449349][ T4356] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  970.694317][ T4356] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  970.861611][ T4356] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  970.900547][ T4356] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  970.942182][ T4356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  971.007971][ T4356] usb 2-1: config 0 descriptor??
[  971.008927][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  971.036332][ T4318] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  971.090834][ T4318] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  971.116010][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.138621][ T4318] usb 3-1: Product: syz
[  971.152499][ T4318] usb 3-1: Manufacturer: syz
[  971.162219][ T4318] usb 3-1: SerialNumber: syz
[  971.190141][ T4318] usb 3-1: config 0 descriptor??
[  971.408701][  T952] usb 3-1: USB disconnect, device number 36
[  971.976578][T15013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  971.992175][T15013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.279363][ T4356] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  972.459402][ T4356] usb 3-1: Using ep0 maxpacket: 16
[  972.466739][ T4356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  972.496085][ T4356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  972.507403][ T4356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  972.520707][ T4356] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  972.530074][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.547473][ T4356] usb 3-1: config 0 descriptor??
[  973.004340][ T4356] usbhid 3-1:0.0: can't add hid device: -71
[  973.013928][ T4356] usbhid: probe of 3-1:0.0 failed with error -71
[  973.041724][ T4356] usb 3-1: USB disconnect, device number 37
[  973.074975][ T4318] usb 2-1: USB disconnect, device number 46
[  975.662182][T14975] tipc: Disabling bearer <eth:syzkaller0>
[  975.687363][T15029] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  975.695465][T15036] netlink: 'syz.1.2891': attribute type 1 has an invalid length.
[  975.730050][T15038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2891'.
[  975.740269][T15030] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  975.989018][T15043] binder: 15041:15043 unknown command 1074553619
[  975.996128][T15043] binder: 15041:15043 ioctl c0306201 200000000040 returned -22
[  976.367082][T15048] binder: 15041:15048 unknown command 1074553620
[  976.429163][  T952] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  976.895311][T15048] binder: 15041:15048 ioctl c0306201 200000000640 returned -22
[  977.482205][  T952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  977.497814][  T952] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  977.522171][  T952] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  977.552215][  T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.560699][  T952] usb 2-1: Product: syz
[  977.565123][  T952] usb 2-1: Manufacturer: syz
[  977.569884][  T952] usb 2-1: SerialNumber: syz
[  977.583583][  T952] usb 2-1: config 0 descriptor??
[  977.798161][  T952] usb 2-1: USB disconnect, device number 47
[  977.934463][T15073] device syzkaller0 entered promiscuous mode
[  978.119345][    T7] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  978.172491][ T4322] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  978.309166][    T7] usb 3-1: Using ep0 maxpacket: 32
[  978.316521][    T7] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  978.351645][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  978.368038][    T7] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  978.377699][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.399138][ T4322] usb 1-1: Using ep0 maxpacket: 16
[  978.401642][    T7] usb 3-1: Product: syz
[  978.408561][    T7] usb 3-1: Manufacturer: syz
[  978.409935][ T4322] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  978.427881][    T7] usb 3-1: SerialNumber: syz
[  978.441219][    T7] usb 3-1: config 0 descriptor??
[  978.452218][ T4322] usb 1-1: config 0 has no interface number 0
[  978.473053][ T4322] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  978.493032][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.501438][ T4322] usb 1-1: Product: syz
[  978.505660][ T4322] usb 1-1: Manufacturer: syz
[  978.515739][ T4322] usb 1-1: SerialNumber: syz
[  978.533276][ T4322] usb 1-1: config 0 descriptor??
[  978.560279][ T4322] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  978.695749][    T7] qmi_wwan: probe of 3-1:0.0 failed with error -22
[  978.734905][    T7] usb 3-1: USB disconnect, device number 38
[  980.623378][ T4322] gspca_spca1528: reg_r err -71
[  980.629463][ T4322] spca1528: probe of 1-1:0.1 failed with error -71
[  980.639378][ T4322] usb 1-1: USB disconnect, device number 16
[  982.202604][T15077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  982.258947][T15078] device syzkaller0 entered promiscuous mode
[  982.266559][T15078] tipc: Resetting bearer <eth:syzkaller0>
[  982.281950][T15083] netlink: 'syz.2.2904': attribute type 1 has an invalid length.
[  982.319610][T15084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2904'.
[  982.380021][T15075] tipc: Resetting bearer <eth:syzkaller0>
[  983.315537][ T4356] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  983.532986][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  983.550061][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  983.566549][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  983.586647][ T4356] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  983.595954][ T4356] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.611252][ T4356] usb 1-1: Product: syz
[  983.615500][ T4356] usb 1-1: Manufacturer: syz
[  983.625406][ T4356] usb 1-1: SerialNumber: syz
[  983.651584][ T4356] usb 1-1: config 0 descriptor??
[  983.669843][ T4356] adutux 1-1:0.0: interrupt endpoints not found
[  983.869650][    T7] usb 1-1: USB disconnect, device number 17
[  984.936744][ T4322] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  985.133757][ T4322] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  985.148955][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  985.157628][ T4322] usb 1-1: Product: syz
[  985.168045][ T4322] usb 1-1: Manufacturer: syz
[  985.172949][ T4322] usb 1-1: SerialNumber: syz
[  985.194952][ T4322] usb 1-1: config 0 descriptor??
[  985.434448][ T4322] usb 1-1: USB disconnect, device number 18
[  986.100729][T15075] tipc: Disabling bearer <eth:syzkaller0>
[  986.108921][T15102] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  986.122383][T15106] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2908'.
[  986.145849][T15125] device syzkaller1 entered promiscuous mode
[  986.340998][T15130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2916'.
[  986.352679][T15130] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2916'.
[  986.536502][T15132] device syzkaller0 entered promiscuous mode
[  986.565810][T15135] netlink: 'syz.1.2918': attribute type 1 has an invalid length.
[  986.598830][T15135] device bond6 entered promiscuous mode
[  986.619316][ T4317] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  986.815898][ T4317] usb 4-1: Using ep0 maxpacket: 8
[  986.828887][ T4317] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  986.841345][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  986.850852][ T4317] usb 4-1: Product: syz
[  986.855080][ T4317] usb 4-1: Manufacturer: syz
[  986.869113][ T4317] usb 4-1: SerialNumber: syz
[  987.537493][ T4317] usb 4-1: clock source 0 is not valid, cannot use
[  987.751176][T15128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  987.766223][    C0] vkms_vblank_simulate: vblank timer overrun
[  987.779544][T15128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  987.795557][ T4317] usb 4-1: 1:1: cannot get freq (v2/v3): err -71
[  987.802435][    C0] vkms_vblank_simulate: vblank timer overrun
[  987.805677][ T4317] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  987.825152][ T4317] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  987.854706][ T4317] usb 4-1: clock source 0 is not valid, cannot use
[  987.863343][ T4317] usb 4-1: 2:1: cannot get freq (v2/v3): err -71
[  987.886097][ T4317] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  987.919291][ T4317] usb 4-1: USB disconnect, device number 31
[  988.200622][T15154] udevd[15154]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  989.090755][ T4317] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  989.312019][ T4317] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  989.321422][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.329913][ T4317] usb 4-1: Product: syz
[  989.334253][ T4317] usb 4-1: Manufacturer: syz
[  989.338900][ T4317] usb 4-1: SerialNumber: syz
[  989.347332][ T4317] usb 4-1: config 0 descriptor??
[  989.576502][    T7] usb 4-1: USB disconnect, device number 32
[  990.443700][T15135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'.
[  990.523959][T15169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  990.672635][T15178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2929'.
[  990.683425][T15178] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2929'.
[  990.856550][T15185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2927'.
[  990.914059][T15170] device syzkaller0 entered promiscuous mode
[  990.921588][T15170] tipc: Resetting bearer <eth:syzkaller0>
[  990.928399][T15184] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  990.947646][T15166] tipc: Resetting bearer <eth:syzkaller0>
[  991.104734][T15184] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  991.446790][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2931'.
[  993.194906][ T4356] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  993.325079][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  993.332114][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  993.422032][ T4356] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  993.431540][ T4356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.453412][ T4356] usb 3-1: config 0 descriptor??
[  993.470107][ T4356] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  993.695321][ T4356] gp8psk: usb in 128 operation failed.
[  993.912557][ T4356] gp8psk: usb in 146 operation failed.
[  993.918360][ T4356] gp8psk: failed to get FW version
[  993.930520][ T4356] gp8psk: usb in 149 operation failed.
[  993.937574][ T4356] gp8psk: failed to get FPGA version
[  994.151169][ T4356] gp8psk: usb out operation failed.
[  994.156487][ T4356] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  994.174548][ T4356] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  994.188479][ T4356] usb 3-1: USB disconnect, device number 39
[  995.818631][T15166] tipc: Disabling bearer <eth:syzkaller0>
[  995.826593][T15187] tipc: Can't add remote ip to TIPC UDP multicast bearer
[  995.834088][T15212] netlink: 'syz.1.2938': attribute type 1 has an invalid length.
[  995.862695][T15214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2938'.
[  996.005187][T15224] device syzkaller0 entered promiscuous mode
[  996.371870][ T4356] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  996.569205][ T4356] usb 2-1: Using ep0 maxpacket: 8
[  996.576438][ T4356] usb 2-1: config 2 has an invalid interface number: 241 but max is 0
[  996.596389][ T4356] usb 2-1: config 2 has no interface number 0
[  996.604726][ T4356] usb 2-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  996.624147][ T4356] usb 2-1: config 2 interface 241 has no altsetting 0
[  996.634420][ T8967] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  996.634756][ T4356] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  996.651601][ T4356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.659726][ T4356] usb 2-1: Product: syz
[  996.663925][ T4356] usb 2-1: Manufacturer: syz
[  996.669476][ T4356] usb 2-1: SerialNumber: syz
[  996.697462][ T4356] ti_usb_3410_5052 2-1:2.241: TI USB 3410 1 port adapter converter detected
[  996.706613][ T4356] ti_usb_3410_5052 2-1:2.241: missing endpoints
[  996.724381][ T4317] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  996.839256][ T8967] usb 4-1: Using ep0 maxpacket: 32
[  996.847252][ T8967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  996.868847][ T8967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  996.879861][ T8967] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  996.893273][ T8967] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  996.902723][ T8967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  996.917256][    C0] vkms_vblank_simulate: vblank timer overrun
[  996.925235][ T8967] usb 4-1: config 0 descriptor??
[  996.938331][ T4317] usb 1-1: Using ep0 maxpacket: 32
[  996.947707][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  996.976458][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  996.986527][ T4317] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  996.999604][ T4317] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  997.008821][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.009904][    C0] vkms_vblank_simulate: vblank timer overrun
[  997.048108][ T4317] usb 1-1: config 0 descriptor??
[  997.087051][ T4322] usb 2-1: USB disconnect, device number 48
[  997.477756][ T4317] hid (null): unknown global tag 0xd
[  997.486194][ T4317] hid (null): invalid report_size 25464
[  997.507717][ T4317] hid (null): bogus close delimiter
[  997.520455][ T4317] kye 0003:0458:5011.0012: unknown main item tag 0x0
[  997.527508][ T4317] kye 0003:0458:5011.0012: unexpected long global item
[  997.535228][ T4317] kye 0003:0458:5011.0012: parse failed
[  997.541139][ T4317] kye: probe of 0003:0458:5011.0012 failed with error -22
[  997.549257][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1000.143865][T15235] netlink: 'syz.3.2942': attribute type 1 has an invalid length.
[ 1000.170582][ T4317] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1000.189718][T15246] netlink: 'syz.0.2944': attribute type 1 has an invalid length.
[ 1000.365192][ T4322] usb 1-1: USB disconnect, device number 19
[ 1000.383278][ T8967] usbhid 4-1:0.0: can't add hid device: -71
[ 1000.396195][ T4317] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1000.406171][ T8967] usbhid: probe of 4-1:0.0 failed with error -71
[ 1000.433197][ T4317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.461840][ T8967] usb 4-1: USB disconnect, device number 33
[ 1000.467924][ T4317] usb 2-1: Product: syz
[ 1000.481183][ T4317] usb 2-1: Manufacturer: syz
[ 1000.490179][ T4317] usb 2-1: SerialNumber: syz
[ 1000.605154][T15273] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1000.635139][T15275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1000.746304][T15275] device syzkaller0 entered promiscuous mode
[ 1000.762934][T15275] tipc: Resetting bearer <eth:syzkaller0>
[ 1000.769997][T15273] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1000.793930][T15270] tipc: Resetting bearer <eth:syzkaller0>
[ 1000.839502][ T1191] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1000.911263][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[ 1001.075226][ T1191] usb 3-1: Using ep0 maxpacket: 32
[ 1001.082870][ T1191] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 1001.109157][ T1191] usb 3-1: config 0 has no interface number 0
[ 1001.156030][ T1191] usb 3-1: config 0 interface 12 has no altsetting 0
[ 1001.174739][ T1191] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1001.190197][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.198477][ T1191] usb 3-1: Product: syz
[ 1001.210605][ T1191] usb 3-1: Manufacturer: syz
[ 1001.215481][ T1191] usb 3-1: SerialNumber: syz
[ 1001.234194][ T1191] usb 3-1: config 0 descriptor??
[ 1001.346553][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[ 1001.373771][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1001.435345][ T4317] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1001.543031][ T4317] lan78xx: probe of 2-1:1.0 failed with error -71
[ 1001.657816][ T4317] usb 2-1: USB disconnect, device number 49
[ 1005.161850][ T1191] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -32
[ 1005.187133][ T1191] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32
[ 1005.241619][ T1191] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32
[ 1005.260430][ T1191] f81534: probe of 3-1:0.12 failed with error -32
[ 1005.285037][ T1191] usb 3-1: USB disconnect, device number 40
[ 1005.939241][ T4322] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1006.160759][ T4322] usb 3-1: Using ep0 maxpacket: 32
[ 1006.179121][ T1191] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1006.193239][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1006.204752][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1006.214949][ T4322] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1006.228099][ T4322] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1006.237604][ T4322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.260170][ T4322] usb 3-1: config 0 descriptor??
[ 1006.364775][ T1191] usb 2-1: Using ep0 maxpacket: 32
[ 1006.372436][ T1191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1006.384058][ T1191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1006.395255][ T1191] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1006.408756][ T1191] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1006.419771][ T1191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.434370][ T1191] usb 2-1: config 0 descriptor??
[ 1006.701481][ T4322] hid (null): unknown global tag 0xd
[ 1006.707004][ T4322] hid (null): invalid report_size 25464
[ 1006.718829][ T4322] kye 0003:0458:5011.0013: unknown main item tag 0x0
[ 1006.725759][ T4322] kye 0003:0458:5011.0013: unexpected long global item
[ 1006.733264][ T4322] kye 0003:0458:5011.0013: parse failed
[ 1006.738886][ T4322] kye: probe of 0003:0458:5011.0013 failed with error -22
[ 1008.351439][T15270] tipc: Disabling bearer <eth:syzkaller0>
[ 1008.364362][T15308] netlink: 'syz.2.2963': attribute type 1 has an invalid length.
[ 1008.395297][T15310] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1008.408655][T15310] bond7: (slave vxcan3): Error -95 calling set_mac_address
[ 1008.440027][T15311] netlink: 'syz.1.2964': attribute type 1 has an invalid length.
[ 1008.473175][ T4322] usb 3-1: USB disconnect, device number 41
[ 1008.534223][T15313] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1008.572516][T15313] bond7: (slave vxcan3): Error -95 calling set_mac_address
[ 1008.615968][T15315] device macvlan2 entered promiscuous mode
[ 1008.624471][T15315] device bond7 entered promiscuous mode
[ 1008.638889][T15315] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1008.652363][T15315] device bond7 left promiscuous mode
[ 1008.781348][ T1191] usbhid 2-1:0.0: can't add hid device: -71
[ 1008.788395][ T1191] usbhid: probe of 2-1:0.0 failed with error -71
[ 1008.825476][ T1191] usb 2-1: USB disconnect, device number 50
[ 1009.054788][T15331] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1009.070375][T15331] tipc: Can't add remote ip to TIPC UDP multicast bearer
[ 1009.372952][T15331] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1009.429190][    T7] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1009.609067][    T7] usb 3-1: Using ep0 maxpacket: 32
[ 1009.618531][    T7] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 1009.637043][    T7] usb 3-1: config 0 has no interface number 0
[ 1009.651404][    T7] usb 3-1: config 0 interface 12 has no altsetting 0
[ 1009.676887][    T7] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1009.698281][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.718827][    T7] usb 3-1: Product: syz
[ 1009.734751][    T7] usb 3-1: Manufacturer: syz
[ 1009.745889][    T7] usb 3-1: SerialNumber: syz
[ 1009.835819][    T7] usb 3-1: config 0 descriptor??
[ 1012.867834][    T7] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1014.042587][T15367] netlink: 'syz.1.2979': attribute type 20 has an invalid length.
[ 1014.050674][T15367] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1014.067138][    T7] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[ 1014.117857][    T7] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1014.189242][    T7] f81534: probe of 3-1:0.12 failed with error -71
[ 1014.232918][    T7] usb 3-1: USB disconnect, device number 42
[ 1014.235491][T15387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1014.294954][T15387] device syzkaller0 entered promiscuous mode
[ 1014.303285][T15387] tipc: Resetting bearer <eth:syzkaller0>
[ 1014.340037][T15385] tipc: Resetting bearer <eth:syzkaller0>
[ 1016.985968][    T7] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1017.071792][T15403] binder: 15402:15403 ioctl c0306201 0 returned -14
[ 1017.209169][    T7] usb 3-1: Using ep0 maxpacket: 16
[ 1017.217069][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1017.238386][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1017.256994][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1017.277988][    T7] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1017.287516][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1017.311276][    T7] usb 3-1: config 0 descriptor??
[ 1017.811380][    T7] usbhid 3-1:0.0: can't add hid device: -71
[ 1017.818376][    T7] usbhid: probe of 3-1:0.0 failed with error -71
[ 1017.835762][    T7] usb 3-1: USB disconnect, device number 43
[ 1018.373331][ T4322] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1018.572180][ T4322] usb 1-1: Using ep0 maxpacket: 32
[ 1018.617292][ T4322] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[ 1018.625542][ T4322] usb 1-1: config 0 has no interface number 0
[ 1018.631914][ T4322] usb 1-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[ 1018.643395][ T4322] usb 1-1: config 0 interface 12 has no altsetting 0
[ 1018.696561][ T4322] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1018.705832][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1018.718619][ T4322] usb 1-1: Product: syz
[ 1018.723110][ T4322] usb 1-1: Manufacturer: syz
[ 1018.727839][ T4322] usb 1-1: SerialNumber: syz
[ 1018.745835][ T4322] usb 1-1: config 0 descriptor??
[ 1018.761918][ T4322] f81534 1-1:0.12: required endpoints missing
[ 1018.990321][    T7] usb 1-1: USB disconnect, device number 20
[ 1019.788053][T15426] fuse: Bad value for 'fd'
[ 1020.386911][T15385] tipc: Disabling bearer <eth:syzkaller0>
[ 1020.408184][T15407] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1022.504282][T15440] binder: 15439:15440 ioctl c0306201 0 returned -14
[ 1022.983695][T15453] netlink: 'syz.3.3005': attribute type 1 has an invalid length.
[ 1023.039978][T15453] device bond13 entered promiscuous mode
[ 1023.066386][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3005'.
[ 1023.199131][ T1191] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1023.262459][T15461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1023.335411][T15461] device syzkaller0 entered promiscuous mode
[ 1023.342342][T15461] tipc: Resetting bearer <eth:syzkaller0>
[ 1023.359726][T15460] tipc: Resetting bearer <eth:syzkaller0>
[ 1023.413891][ T1191] usb 2-1: Using ep0 maxpacket: 16
[ 1023.422764][ T1191] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 194, changing to 7
[ 1023.429463][ T4322] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1023.471186][ T1191] usb 2-1: string descriptor 0 read error: -22
[ 1023.488949][ T1191] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1023.529162][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.576795][ T1191] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1023.649187][ T4322] usb 4-1: Using ep0 maxpacket: 32
[ 1023.656675][ T4322] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1023.679316][ T4322] usb 4-1: config 0 has no interface number 0
[ 1023.746965][ T4322] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1023.766522][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.791796][ T4322] usb 4-1: Product: syz
[ 1023.796023][ T4322] usb 4-1: Manufacturer: syz
[ 1023.807563][ T4322] usb 4-1: SerialNumber: syz
[ 1023.833906][ T4322] usb 4-1: config 0 descriptor??
[ 1023.857259][ T4322] smsc95xx v2.0.0
[ 1024.189140][ T1191] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[ 1024.197690][ T1191] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1024.232186][T15466] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1024.285253][ T1191] usb 2-1: USB disconnect, device number 51
[ 1024.302203][ T4322] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1024.325724][ T4322] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1024.560765][T15155] udevd[15155]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1024.989794][T15472] ------------[ cut here ]------------
[ 1024.996283][T15472] WARNING: CPU: 0 PID: 15472 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0
[ 1025.007265][T15472] Modules linked in:
[ 1025.011338][T15472] CPU: 0 PID: 15472 Comm: syz.1.3011 Not tainted syzkaller #0
[ 1025.018890][T15472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1025.029109][T15472] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0
[ 1025.036001][T15472] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb
[ 1025.055920][T15472] RSP: 0018:ffffc90004997c48 EFLAGS: 00010287
[ 1025.062093][T15472] RAX: ffffffff81100f7c RBX: ffff8880736a27c0 RCX: 0000000000080000
[ 1025.070164][T15472] RDX: ffffc9000ca69000 RSI: 00000000000003bf RDI: 00000000000003c0
[ 1025.078183][T15472] RBP: ffff88802963c000 R08: dffffc0000000000 R09: 1ffffffff215f268
[ 1025.086262][T15472] R10: dffffc0000000000 R11: fffffbfff215f269 R12: ffff8880736a2ab4
[ 1025.094320][T15472] R13: ffff8880736a2898 R14: dffffc0000000000 R15: 0000000000000000
[ 1025.102392][T15472] FS:  00007f26df1116c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1025.111406][T15472] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1025.118077][T15472] CR2: 0000001b2fd19ff8 CR3: 00000000547aa000 CR4: 00000000003526f0
[ 1025.126169][T15472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1025.134321][T15472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1025.142379][T15472] Call Trace:
[ 1025.145698][T15472]  <TASK>
[ 1025.148703][T15472]  ? mutex_lock_nested+0x10/0x10
[ 1025.153764][T15472]  ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0
[ 1025.159578][T15472]  kvm_vcpu_ioctl+0x8f7/0xc10
[ 1025.164435][T15472]  ? xa_release+0x50/0x50
[ 1025.168831][T15472]  ? __fget_files+0x28/0x4b0
[ 1025.173524][T15472]  ? __fget_files+0x28/0x4b0
[ 1025.178213][T15472]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1025.183298][T15472]  ? security_file_ioctl+0x7c/0xa0
[ 1025.188478][T15472]  ? xa_release+0x50/0x50
[ 1025.192901][T15472]  __se_sys_ioctl+0xfa/0x170
[ 1025.197587][T15472]  do_syscall_64+0x4c/0xa0
[ 1025.202129][T15472]  ? clear_bhb_loop+0x60/0xb0
[ 1025.206950][T15472]  ? clear_bhb_loop+0x60/0xb0
[ 1025.211706][T15472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1025.217680][T15472] RIP: 0033:0x7f26de19ce59
[ 1025.222187][T15472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1025.241916][T15472] RSP: 002b:00007f26df111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1025.250444][T15472] RAX: ffffffffffffffda RBX: 00007f26de415fa0 RCX: 00007f26de19ce59
[ 1025.258547][T15472] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1025.266615][T15472] RBP: 00007f26de232d6f R08: 0000000000000000 R09: 0000000000000000
[ 1025.274666][T15472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1025.282726][T15472] R13: 00007f26de416038 R14: 00007f26de415fa0 R15: 00007ffc515aa6b8
[ 1025.290797][T15472]  </TASK>
[ 1025.293862][T15472] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1025.301186][T15472] CPU: 0 PID: 15472 Comm: syz.1.3011 Not tainted syzkaller #0
[ 1025.308674][T15472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1025.318748][T15472] Call Trace:
[ 1025.322047][T15472]  <TASK>
[ 1025.325003][T15472]  dump_stack_lvl+0x188/0x24e
[ 1025.329733][T15472]  ? memcpy+0x3c/0x60
[ 1025.333775][T15472]  ? show_regs_print_info+0x12/0x12
[ 1025.339010][T15472]  ? load_image+0x400/0x400
[ 1025.343567][T15472]  panic+0x2e5/0x730
[ 1025.347492][T15472]  ? bpf_jit_dump+0xd0/0xd0
[ 1025.352031][T15472]  __warn+0x2f8/0x4f0
[ 1025.356045][T15472]  ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0
[ 1025.361916][T15472]  ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0
[ 1025.367760][T15472]  report_bug+0x2ba/0x4f0
[ 1025.372125][T15472]  ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0
[ 1025.377962][T15472]  handle_bug+0x3a/0x70
[ 1025.382162][T15472]  exc_invalid_op+0x16/0x40
[ 1025.386884][T15472]  asm_exc_invalid_op+0x16/0x20
[ 1025.391890][T15472] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0
[ 1025.398361][T15472] Code: e8 29 72 c3 00 e9 30 ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c bd e5 ff ff 4c 89 ff e8 ee 71 c3 00 e9 b0 e5 ff ff e8 d4 65 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 90 eb
[ 1025.418089][T15472] RSP: 0018:ffffc90004997c48 EFLAGS: 00010287
[ 1025.424181][T15472] RAX: ffffffff81100f7c RBX: ffff8880736a27c0 RCX: 0000000000080000
[ 1025.432180][T15472] RDX: ffffc9000ca69000 RSI: 00000000000003bf RDI: 00000000000003c0
[ 1025.440172][T15472] RBP: ffff88802963c000 R08: dffffc0000000000 R09: 1ffffffff215f268
[ 1025.448166][T15472] R10: dffffc0000000000 R11: fffffbfff215f269 R12: ffff8880736a2ab4
[ 1025.456168][T15472] R13: ffff8880736a2898 R14: dffffc0000000000 R15: 0000000000000000
[ 1025.464162][T15472]  ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0
[ 1025.470053][T15472]  ? kvm_arch_vcpu_ioctl_run+0x1ebc/0x23b0
[ 1025.475920][T15472]  ? mutex_lock_nested+0x10/0x10
[ 1025.480918][T15472]  ? kvm_arch_vcpu_ioctl_run+0x139/0x23b0
[ 1025.486669][T15472]  kvm_vcpu_ioctl+0x8f7/0xc10
[ 1025.491378][T15472]  ? xa_release+0x50/0x50
[ 1025.495744][T15472]  ? __fget_files+0x28/0x4b0
[ 1025.500367][T15472]  ? __fget_files+0x28/0x4b0
[ 1025.504994][T15472]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1025.510318][T15472]  ? security_file_ioctl+0x7c/0xa0
[ 1025.515459][T15472]  ? xa_release+0x50/0x50
[ 1025.519837][T15472]  __se_sys_ioctl+0xfa/0x170
[ 1025.524476][T15472]  do_syscall_64+0x4c/0xa0
[ 1025.528931][T15472]  ? clear_bhb_loop+0x60/0xb0
[ 1025.533664][T15472]  ? clear_bhb_loop+0x60/0xb0
[ 1025.538374][T15472]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1025.544306][T15472] RIP: 0033:0x7f26de19ce59
[ 1025.548767][T15472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1025.568514][T15472] RSP: 002b:00007f26df111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1025.576959][T15472] RAX: ffffffffffffffda RBX: 00007f26de415fa0 RCX: 00007f26de19ce59
[ 1025.584953][T15472] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1025.592948][T15472] RBP: 00007f26de232d6f R08: 0000000000000000 R09: 0000000000000000
[ 1025.600946][T15472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1025.608943][T15472] R13: 00007f26de416038 R14: 00007f26de415fa0 R15: 00007ffc515aa6b8
[ 1025.616959][T15472]  </TASK>
[ 1025.620578][T15472] Kernel Offset: disabled
[ 1025.625022][T15472] Rebooting in 86400 seconds..