last executing test programs:

15m2.548303713s ago: executing program 32 (id=7026):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)
dup3(r0, r1, 0x80000)

14m27.023464789s ago: executing program 33 (id=7271):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, 0x0, 0x0)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000229000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000})

13m55.964124657s ago: executing program 34 (id=7508):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r2}, 0x20)

12m39.051575469s ago: executing program 35 (id=8065):
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r1, &(0x7f0000000140)=""/50, 0xffa3)

12m1.622372149s ago: executing program 36 (id=8414):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0)
fcntl$setstatus(r2, 0x4, 0x42c00)
fcntl$setstatus(r2, 0x4, 0x2400)
write(r0, &(0x7f0000000040), 0xffffff4a)

11m20.203358234s ago: executing program 37 (id=8877):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xff}, 0x18)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r2, 0x4, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1)

11m18.039802022s ago: executing program 38 (id=8901):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000240), 0x181002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000500)={0x2, 0x108000})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000065b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x1000, 0x1})

10m39.214224872s ago: executing program 39 (id=9185):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

10m1.150259117s ago: executing program 40 (id=9501):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x32cc0000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000000))

9m47.073030249s ago: executing program 41 (id=9604):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
lchown(&(0x7f0000000040)='./file0/../file0/file0\x00', r2, r3)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000001, {0x1, 0x3, 0x200000000031, 0x8, 0x8, 0xffff672b, {0x2, 0xa1e3, 0x181, 0xffff, 0xfffffffffdffffff, 0x200000000000008, 0x7, 0xce90cbb, 0xffffff4a, 0x4000, 0x3, r2, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

9m46.404985167s ago: executing program 42 (id=9609):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

9m25.419111064s ago: executing program 43 (id=9748):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
io_uring_enter(r0, 0x2219, 0x7723, 0x16, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4e6a7f0d71d63c3b6169d19f73478185", 0x10, 0x10, 0x0, 0x0)

9m17.889354049s ago: executing program 44 (id=9805):
r0 = socket(0x10, 0x803, 0x0)
pipe2(&(0x7f0000000100), 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x27}}]}, 0x40}}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x40}}, 0x0)

8m26.829223575s ago: executing program 6 (id=10200):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000100)=0x400)

8m26.335314369s ago: executing program 6 (id=10203):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x4)

8m25.967941228s ago: executing program 6 (id=10205):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x7, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
recvfrom$inet6(r0, &(0x7f0000000140)=""/105, 0x69, 0x40000102, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)

8m24.940320832s ago: executing program 6 (id=10209):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x40, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

8m24.763276827s ago: executing program 6 (id=10212):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1f5, 0x4)
recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/38, 0x26}, 0x7}], 0x1, 0x45833af92e4b39ff, 0x0)

8m24.310274058s ago: executing program 6 (id=10217):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0)

8m23.633827965s ago: executing program 45 (id=10217):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0)

4m54.675751988s ago: executing program 3 (id=11670):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_ACT={0x3c, 0x3, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x80e42ef}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4c080)

4m54.483165797s ago: executing program 3 (id=11672):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0x8, 0xc}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)

4m54.13682s ago: executing program 3 (id=11673):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x7, 0x9)
write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000)
close_range(r0, 0xffffffffffffffff, 0x0)

4m53.848335091s ago: executing program 3 (id=11675):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4)

4m53.708537847s ago: executing program 3 (id=11679):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0)
epoll_create1(0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff2}, {0xffff, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)

4m52.142449183s ago: executing program 3 (id=11683):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x8, 0x0, 0x5}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m51.660207877s ago: executing program 46 (id=11683):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0x8, 0x0, 0x5}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4m24.859063281s ago: executing program 7 (id=11866):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x9, 0x4519b3ea, 0x6, 0x6, 0x4c9, 0x3, 0x53, 0xa32a, 0x4, 0x94f, 0x7, 0x2, 0x400, 0x1, 0xffffffffffffffff], 0x8080000, 0x28000})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x38, 0x8, 0x81, 0x0, 0x2, 0x6, 0x67, 0x0, 0x2, 0x6, 0x0, 0x9, 0x0, 0x5, 0x4, 0x3, 0xf4, 0x7a, 0x3, '\x00', 0x5, 0x44c6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m24.772426547s ago: executing program 7 (id=11867):
r0 = gettid()
timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000008c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0)

4m24.405495932s ago: executing program 7 (id=11868):
socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = getpgid(0x0)
syz_pidfd_open(r0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xae, 0x3, 0x1}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0)

4m24.357938583s ago: executing program 7 (id=11869):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4)

4m23.401089196s ago: executing program 7 (id=11875):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32)
sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

4m23.082407042s ago: executing program 7 (id=11878):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
gettid()
ioprio_set$pid(0x2, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0)
sendfile(r2, r2, 0x0, 0x200000)

4m22.488973455s ago: executing program 47 (id=11878):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
gettid()
ioprio_set$pid(0x2, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0)
sendfile(r2, r2, 0x0, 0x200000)

3m4.387298459s ago: executing program 1 (id=12304):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x2, 0x8, 0x8, 0xff76})
write$char_usb(r1, &(0x7f0000000040)="e2", 0x918)
socket$inet6(0x10, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10000000001, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x6, 0x1000000003, 0x5, 0x0, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)

3m3.31868035s ago: executing program 1 (id=12308):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890)
r0 = socket$netlink(0x10, 0x3, 0x1)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

3m2.973087756s ago: executing program 1 (id=12312):
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x6d100f4f, 0xd, 0xf, 0xf, 0x2, 0x0, 0x0, 0x1, 0xffff}}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x3f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="66b824010f00d80f01d10f0736420f001d0f000000f366360f2067b9cd0800000f320f201ec74424003f010000c74424020c000000ff2c24b9800000c00f3235000800000f308fa928932e", 0x4b}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3m2.700051145s ago: executing program 1 (id=12317):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x2cd2, 0x400)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0)
dup3(r3, r1, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

3m2.520415901s ago: executing program 1 (id=12319):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r2, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})

3m0.36429382s ago: executing program 1 (id=12336):
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m59.949383357s ago: executing program 48 (id=12336):
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m45.785143486s ago: executing program 9 (id=12798):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003180)=@newtfilter={0x6cc, 0x2c, 0xd3f, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x6a0, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xfff1}}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'wlan1\x00'}, @TCA_FW_ACT={0x66c, 0x4, [@m_ife={0xc4, 0x1c, 0x0, 0x0, {{0x8}, {0x4}, {0x99, 0x6, "6de674f1d8ee915c7473b232856507561bf3af79dff8743bbacc4b8913310f82ea4fae807581a26e0b12504802611fbc048577b2cf65cc25adaba29f8d03e2f34acf50bc0ddc90ee34f144c2fa906e07adb7df0133fbafe00e0033eaec6bb6be449908ae191924f9e54315806ffa62af535ffed7425c5c4d3cd79180ec06002cace6e3b56822703f92de49be1943ed275c28f924c9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x148, 0x13, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xf9, 0x6, "1b055f64fbb30bd87be244fcd6253a7bd2b7f5941bbc4c7460f68eea958468c491b1a8e29fc89a4cff1e3d2a60d8e56fdc902d23db58fba3457cebb1760167c028c715bb941df12968d92889bc75fce90aec899f59d63fd148a3da120aa317db4d17a41d7a9e54e251ccca7eb482724337eaf4f7380c370e3fb19e1b375b02ad5ef06f2ac12adde2515ffe2b8cc26003942bcbead68efa561912292149739c7ec278eeaa77035241fcea59f08a85b6a9c89b57a4a923c002fa23fc180b5074f96601001fbf4762561bd2dfc8b3da47cf8e88e28b8604cb237703f3f507629379640febeb3d7422a35a7f24a92d4ce1049d0c75b231"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x5}}}}, @m_police={0x45c, 0x14, 0x0, 0x0, {{0xb}, {0x430, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x996}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa00}, @TCA_POLICE_RESULT={0x8, 0x5, 0x72}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x480, 0x7, 0x6, 0x5, 0x5, 0x2, 0xffff6f6c, 0x1e4, 0xfffffffb, 0x5, 0xfffffe01, 0x9, 0x10001, 0x80000001, 0x3, 0x1, 0x0, 0x40, 0x1, 0x9, 0x9, 0x31a0, 0xf0f, 0x2b1, 0x3, 0x6, 0x735, 0x1ff, 0x2, 0x1, 0x4, 0x8, 0x10000, 0x4, 0x1, 0x10000, 0x4, 0xff, 0x9, 0xb, 0x8, 0x5, 0x8, 0x0, 0x10, 0x4, 0x6, 0x5, 0x9, 0x5, 0xfffffff7, 0x3cd, 0x0, 0xfcde, 0x4, 0x1, 0xb, 0x5, 0x8, 0x0, 0x8, 0xe8a7, 0x2, 0xaa5f, 0x800, 0x4, 0x6, 0x0, 0xffffff01, 0x3b08, 0x7, 0xff, 0x2, 0x9, 0xb2, 0xd6, 0xa5, 0xd388, 0x8, 0x0, 0x4, 0x400, 0x8, 0x6, 0x80, 0x3, 0x8, 0x6, 0x5c8, 0xfffffffd, 0x101, 0x7f, 0x4876, 0x0, 0x80, 0xff, 0x1, 0xdd7, 0x5, 0x3, 0x1, 0x7fffffff, 0x8, 0x60, 0xa000, 0x8, 0x9, 0x9, 0x0, 0x177, 0x6c3, 0xa1, 0x6, 0x3, 0x3e0a4466, 0x7, 0x8, 0x101, 0x0, 0x5, 0x8, 0xffffae0a, 0x7, 0x4, 0xc, 0x0, 0x1, 0x9, 0x0, 0x7fff, 0xfa5, 0x5, 0x0, 0x10, 0x4, 0x32690473, 0x4, 0x9, 0x400, 0x40, 0x1, 0x80, 0x9, 0x10000, 0x7fffffff, 0x5a, 0x9, 0x3ff, 0xc, 0x2919, 0x5, 0x7, 0x6, 0xe922, 0x9, 0x9, 0x5, 0x5, 0x40, 0x9, 0x0, 0x9, 0x2b, 0x103, 0x10000, 0xad13, 0x100, 0xc3e, 0x7, 0x597, 0xffff0000, 0x6, 0x3a, 0x1, 0x5, 0xd, 0x2, 0x67bd, 0x2, 0x5, 0x80000000, 0x7f, 0x7, 0x2, 0x1, 0x884, 0x4, 0x2, 0x8001, 0x6, 0x4, 0xffffff80, 0x8, 0x7fffffff, 0x9, 0x400000, 0x0, 0x9, 0x9e, 0x3, 0x6, 0x4, 0x7ff, 0x2, 0x8001, 0xb7e, 0x6, 0x59a, 0x1, 0x5, 0xbf78, 0x9, 0x5, 0x244, 0x3, 0x0, 0x7, 0x3, 0xc40, 0x0, 0x7fffffff, 0x9, 0xa8, 0x18, 0x4, 0x3, 0x2e2, 0x2, 0x4, 0x5, 0x86e5, 0x5, 0x2, 0x1, 0x8, 0x7, 0x7, 0x0, 0xec0, 0x81, 0x7, 0xfff, 0x669, 0x8, 0x9, 0x10, 0x7fff, 0x9, 0x5, 0x7, 0xc, 0x7, 0x1ff, 0x80, 0x7f]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x6cc}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

1m45.522081053s ago: executing program 9 (id=12800):
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)

1m45.278220394s ago: executing program 9 (id=12801):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)

1m43.181236932s ago: executing program 9 (id=12806):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
move_mount(r3, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220)

1m42.988951086s ago: executing program 9 (id=12810):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r3)
write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd)

1m42.532631497s ago: executing program 9 (id=12816):
r0 = mq_open(&(0x7f0000000000)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00\x9e\x13\xde\xddE# \xa9\xa0T)e\xc4\xee\x9e|\x160\x0e\x19\xa0z\xf8e\x93+\x99\x16\xef\x9f\xfdX\xfc\xfbB]\xde!\x7f\xd9\xfc\xc8\xd4\x88sy\xfb\x00\x1df\xd0\x15\xabp\xbb\x92\x8c@D\xbd \xd8\xb1\x9e\x1bC\xc2\x90\xaa*\x96Z\xe6\xb1\xde\x18\xadV28\x8c\xf7\xd0|R\xca\x1c\x8b\v\xae\x88\xc4B*', 0x6e93ebbbcc0884f2, 0xad05725454c62502, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

1m42.210872039s ago: executing program 49 (id=12816):
r0 = mq_open(&(0x7f0000000000)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00\x9e\x13\xde\xddE# \xa9\xa0T)e\xc4\xee\x9e|\x160\x0e\x19\xa0z\xf8e\x93+\x99\x16\xef\x9f\xfdX\xfc\xfbB]\xde!\x7f\xd9\xfc\xc8\xd4\x88sy\xfb\x00\x1df\xd0\x15\xabp\xbb\x92\x8c@D\xbd \xd8\xb1\x9e\x1bC\xc2\x90\xaa*\x96Z\xe6\xb1\xde\x18\xadV28\x8c\xf7\xd0|R\xca\x1c\x8b\v\xae\x88\xc4B*', 0x6e93ebbbcc0884f2, 0xad05725454c62502, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_clone(0x104000, 0x0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

19.356621342s ago: executing program 8 (id=13260):
r0 = userfaultfd(0x801)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)
r3 = socket(0xa, 0x5, 0x0)
r4 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10)
sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10)
sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

18.39100104s ago: executing program 8 (id=13269):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

18.282280905s ago: executing program 8 (id=13270):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x40)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)

15.069074726s ago: executing program 5 (id=13283):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)='./file0\x00')
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r2, 0xffffffffffffffff, 0x0)

13.988683633s ago: executing program 5 (id=13285):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

13.33068701s ago: executing program 5 (id=13287):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.69183207s ago: executing program 4 (id=13292):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f00000008c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

10.562109032s ago: executing program 4 (id=13293):
r0 = socket$kcm(0x21, 0x2, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0xa, 0x3, 0xff)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000edff"], 0x4a}, 0xfc40)

10.477915383s ago: executing program 4 (id=13294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x3, 0x1, 0x3, 0x8, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000740)="05032200", 0x4, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

10.445508532s ago: executing program 5 (id=13295):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c0400904000001030000000921090000012289"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffcd6)
syz_usb_ep_write(r0, 0x81, 0x82, &(0x7f00000001c0)="1000000a00380ed4be7eee21e65ff8e81a12e3b45f9b05654ea4d3e4dab8c2c5c963667e91c1219a4ef405d2d3f85bb59c65ab2e0861afa338b3a7e4e999386fd1a54ff511e3352c9d4d3e9cdc53ee11629368e577dbd77ceee3bda0b9a94c408c2b7960c0ebac193210d73524183084e33a0a2b16ad53fc8f5a313eae74aa624ac7")

9.127478919s ago: executing program 2 (id=13297):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})

9.113982993s ago: executing program 2 (id=13298):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r0, 0x0, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110bd000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004040)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872420dfef8a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}}, 0x0)

8.038700055s ago: executing program 8 (id=13299):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r4, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)=""/234, 0xea}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000001940)=""/4111, 0x100f}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f0000003cc0)=""/204, 0xcc}], 0x5}, 0x9}], 0x7, 0x10122, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)

7.926549669s ago: executing program 4 (id=13301):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x121801)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000040)=0x8)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

7.756388112s ago: executing program 2 (id=13302):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
listen(0xffffffffffffffff, 0x2005)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.557710172s ago: executing program 4 (id=13303):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r2, 0x8000002, {0x0, 0x0, 0x4}, 0xfd}, 0x18)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r5, 0x3, {0x1, 0xff, 0x4}}, 0x18)
sendmmsg(r4, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x119}], 0x1}}], 0x1, 0x48010)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

7.167303017s ago: executing program 5 (id=13304):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

6.338732812s ago: executing program 2 (id=13305):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/230, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/70, 0x41000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

6.135494684s ago: executing program 2 (id=13306):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000200)="bad330ebb6b55400040000ea071a0a5d86dd", 0x12, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

3.968327785s ago: executing program 0 (id=13308):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269"], 0x3c}}, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)
socket(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
syz_io_uring_setup(0x6901, &(0x7f0000000080)={0x0, 0x6526, 0x0, 0x2, 0x1008, 0x0, r0}, 0x0, 0x0, 0x0)
userfaultfd(0x801)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[])

3.840773197s ago: executing program 0 (id=13309):
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

3.533677503s ago: executing program 0 (id=13310):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0xda2, 0x3, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x10001})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3, 0x2, 0x6})
close_range(r1, r2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x80, 0x3})
close_range(r0, 0xffffffffffffffff, 0x0)

3.457385387s ago: executing program 0 (id=13311):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)

421.210467ms ago: executing program 8 (id=13312):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x3, 0xa}}]}}]}, 0x38}}, 0x60040050)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f5f, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)

414.561618ms ago: executing program 5 (id=13313):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3)
write(r2, &(0x7f0000000080)='g', 0x1)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"})

322.500348ms ago: executing program 4 (id=13314):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000076c0)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x50, 0x4004850}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@local, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96f6}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d6, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

314.408106ms ago: executing program 0 (id=13315):
syz_kvm_add_vcpu$x86(0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0xc008aeba, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xa, 0x6, 0x4, 0x7, 0x6, 0xe, 0x0, 0x1, 0xc, 0x3}, {0xfec00000, 0x3000, 0x8, 0x13, 0x1, 0x8, 0x7, 0x8, 0x3, 0x42, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x6, 0xc3, 0xe7, 0x3, 0x6, 0x8, 0x3}, {0x2, 0x0, 0x33b363f75dfd5566, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x40000, 0x8000000, 0xe, 0xd, 0x59, 0x5, 0x80, 0xc, 0xfc, 0x0, 0xf7, 0xfc}, {0x2, 0xeeef0000, 0xc, 0xbe, 0x6, 0x7, 0x10, 0x1, 0x0, 0x18, 0x2, 0x4}, {0x5000, 0xb000, 0x4, 0x9, 0xff, 0xf, 0x0, 0x3, 0x8, 0x4, 0x80, 0x2}, {0x8000000, 0x4, 0x10, 0x4, 0x8, 0x1, 0x0, 0xf9, 0x3, 0x7, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x60050018, 0x0, 0x0, 0x8, 0x100000002, 0xb101, 0xdddd1000, [0x6, 0x4, 0x4000000000000009, 0x7]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x5, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0xa, 0x1], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

116.578794ms ago: executing program 0 (id=13316):
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000006800)="10", 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

63.032942ms ago: executing program 8 (id=13317):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r2, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff)

0s ago: executing program 2 (id=13318):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000340)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x58f, 0x9410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x3f}}]}}, 0x0)

kernel console output (not intermixed with test programs):

m the descriptor's value: 3
[ 1435.757243][T28252] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1435.777033][T28252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1435.787165][T28252] usb 5-1: Product: syz
[ 1435.787477][T29320] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1435.795908][T28252] usb 5-1: Manufacturer: syz
[ 1435.805768][T28252] usb 5-1: SerialNumber: syz
[ 1435.864385][T28252] usb 5-1: 0:2 : does not exist
[ 1435.970456][T29320] usb 3-1: Using ep0 maxpacket: 8
[ 1435.990083][T29320] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[ 1436.010708][T29320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1436.035740][T29320] usb 3-1: config 0 has no interface number 0
[ 1436.048463][T16612] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1436.068789][T29320] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1436.073163][T28252] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1436.137669][T29320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1436.166682][T28252] usb 5-1: USB disconnect, device number 116
[ 1436.189135][T29320] usb 3-1: Product: syz
[ 1436.217667][T29320] usb 3-1: Manufacturer: syz
[ 1436.237966][T16612] usb 1-1: Using ep0 maxpacket: 16
[ 1436.245050][T29320] usb 3-1: SerialNumber: syz
[ 1436.260415][T16612] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1436.274219][T16612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1436.286770][T29320] usb 3-1: config 0 descriptor??
[ 1436.302092][T29320] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1436.312779][T16612] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1436.327116][T29320] uvcvideo 3-1:0.31: No valid video chain found.
[ 1436.334493][T16612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1436.345959][T16612] usb 1-1: Product: syz
[ 1436.352468][T16612] usb 1-1: Manufacturer: syz
[ 1436.360085][T16612] usb 1-1: SerialNumber: syz
[ 1436.378019][ T2461] udevd[2461]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1436.402416][T16612] usb 1-1: config 0 descriptor??
[ 1436.436886][T16607] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1436.460393][T16612] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1436.498193][T16612] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1436.539973][T28252] usb 3-1: USB disconnect, device number 62
[ 1436.680815][T16607] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[ 1436.716152][T16607] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1436.745379][T16607] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1436.788594][T16607] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1436.827153][T16607] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[ 1436.873073][T16607] usb 6-1: USB disconnect, device number 65
[ 1437.036407][T16612] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1437.052319][T16612] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[ 1437.346510][  T467] bond2 (unregistering): (slave gretap1): Releasing active interface
[ 1437.671877][  T467] bond1 (unregistering): (slave geneve2): Releasing active interface
[ 1437.901676][ T8671] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1437.993724][  T467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1438.009827][  T467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1438.022016][  T467] bond0 (unregistering): Released all slaves
[ 1438.040316][  T467] bond1 (unregistering): Released all slaves
[ 1438.098192][   T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1438.111284][  T467] bond2 (unregistering): Released all slaves
[ 1438.138961][  T467] bond3 (unregistering): Released all slaves
[ 1438.158542][T16612] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe
[ 1438.187099][ T8655] syzkaller0: entered promiscuous mode
[ 1438.194999][ T8655] syzkaller0: entered allmulticast mode
[ 1438.224353][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1438.299727][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1438.306984][   T10] usb 5-1: config index 0 descriptor too short (expected 3659, got 75)
[ 1438.316196][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1438.329792][   T10] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1438.339744][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.348238][   T10] usb 5-1: Product: syz
[ 1438.353242][   T10] usb 5-1: Manufacturer: syz
[ 1438.358416][   T10] usb 5-1: SerialNumber: syz
[ 1438.368118][   T10] usb 5-1: config 0 descriptor??
[ 1438.371216][T16612] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[ 1438.389044][   T10] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1438.415456][T16612] em28xx 1-1:0.0: couldn't setup AC97 register 2
[ 1438.425482][T16612] em28xx 1-1:0.0: couldn't setup AC97 register 4
[ 1438.441862][  T467] tipc: Left network mode
[ 1438.442624][T16612] em28xx 1-1:0.0: couldn't setup AC97 register 6
[ 1438.484751][T16612] em28xx 1-1:0.0: couldn't setup AC97 register 54
[ 1438.546259][T16612] em28xx 1-1:0.0: couldn't setup AC97 register 56
[ 1438.574431][T16612] usb 1-1: USB disconnect, device number 7
[ 1439.098955][  T467] hsr_slave_0: left promiscuous mode
[ 1439.131321][  T467] hsr_slave_1: left promiscuous mode
[ 1439.162058][  T467] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1439.194890][  T467] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1439.269656][  T467] veth1_macvtap: left promiscuous mode
[ 1439.288577][  T467] veth0_macvtap: left promiscuous mode
[ 1439.292096][ T8710] netlink: 'syz.9.12595': attribute type 1 has an invalid length.
[ 1439.342345][ T8713] netlink: 548 bytes leftover after parsing attributes in process `syz.0.12594'.
[ 1439.771933][  T467] team0 (unregistering): Port device team_slave_1 removed
[ 1439.820197][  T467] team0 (unregistering): Port device team_slave_0 removed
[ 1440.094606][ T8705] netlink: 'syz.0.12594': attribute type 29 has an invalid length.
[ 1440.112334][ T8710] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[ 1440.243735][ T5505] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1440.704605][   T10] gspca_sunplus: reg_r err -71
[ 1440.720622][   T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[ 1440.745775][   T10] usb 5-1: USB disconnect, device number 117
[ 1440.905866][  T467] IPVS: stop unused estimator thread 0...
[ 1441.631646][T28252] IPVS: starting estimator thread 0...
[ 1441.637658][   T10] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1441.759021][ T8773] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1441.864512][   T10] usb 3-1: Using ep0 maxpacket: 32
[ 1441.886317][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1441.936068][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1441.951234][ T5505] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1441.972943][ T8776] kvm: pic: non byte write
[ 1441.975387][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1441.977922][ T8776] kvm: pic: non byte write
[ 1441.977990][ T8776] kvm: pic: single mode not supported
[ 1441.978001][ T8776] kvm: pic: level sensitive irq not supported
[ 1441.978168][ T8776] kvm: pic: non byte write
[ 1441.978227][ T8776] kvm: pic: non byte write
[ 1441.978285][ T8776] kvm: pic: level sensitive irq not supported
[ 1441.978730][ T8776] kvm: pic: non byte write
[ 1442.012747][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1442.024304][ T8776] kvm: pic: non byte write
[ 1442.060691][   T10] usb 3-1: config 0 descriptor??
[ 1442.110253][   T10] hub 3-1:0.0: USB hub found
[ 1442.304970][   T10] hub 3-1:0.0: 1 port detected
[ 1442.916406][   T10] hub 3-1:0.0: activate --> -90
[ 1443.202635][   T10] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 1443.203502][T16607] usb 3-1: USB disconnect, device number 63
[ 1443.300531][ T5505] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1444.768082][   T10] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[ 1444.977834][   T10] usb 10-1: Using ep0 maxpacket: 8
[ 1445.015894][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1445.107367][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1445.137441][T16612] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1445.170167][   T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1445.225604][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1445.272133][   T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1445.333319][   T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1445.353416][T16612] usb 6-1: config index 0 descriptor too short (expected 24441, got 36)
[ 1445.393310][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1445.406186][T16612] usb 6-1: config 114 has too many interfaces: 116, using maximum allowed: 32
[ 1445.462361][T16612] usb 6-1: config 114 has an invalid descriptor of length 101, skipping remainder of the config
[ 1445.491692][   T10] usb 10-1: config 0 descriptor??
[ 1445.537194][ T8855] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1445.562024][T16612] usb 6-1: config 114 has 0 interfaces, different from the descriptor's value: 116
[ 1445.640719][T16612] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[ 1445.653664][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12634'.
[ 1445.684865][T16612] usb 6-1: New USB device strings: Mfr=0, Product=10, SerialNumber=0
[ 1445.751549][T16612] usb 6-1: Product: syz
[ 1446.443760][T16612] usb 6-1: USB disconnect, device number 66
[ 1446.634482][   T10] usb 10-1: USB disconnect, device number 45
[ 1446.644066][T24133] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[ 1448.507710][T16593] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1448.680546][T16593] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1448.732747][T16593] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1448.785147][T16593] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1448.812561][ T8929] syzkaller0: entered promiscuous mode
[ 1448.825944][T16593] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1448.837743][ T8929] syzkaller0: entered allmulticast mode
[ 1448.860211][T16593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1448.929326][ T8922] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1449.471855][ T8938] loop2: detected capacity change from 0 to 7
[ 1449.514114][ T8938]  loop2:
[ 1449.523605][ T8938] loop2: partition table partially beyond EOD, truncated
[ 1450.035979][ T8951] netlink: 'syz.5.12658': attribute type 1 has an invalid length.
[ 1450.429742][    T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1450.607656][    T9] usb 6-1: Using ep0 maxpacket: 8
[ 1450.641583][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1450.664798][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0089, bcdDevice= 0.40
[ 1450.675808][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.692906][    T9] usb 6-1: Product: syz
[ 1450.697127][    T9] usb 6-1: Manufacturer: syz
[ 1450.702174][    T9] usb 6-1: SerialNumber: syz
[ 1450.707524][T16612] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[ 1450.728650][ T8966] binder: 8965:8966 ioctl c0306201 200000000240 returned -14
[ 1450.861669][T16612] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1450.871848][T16612] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.880822][T16612] usb 10-1: Product: syz
[ 1450.885543][T16612] usb 10-1: Manufacturer: syz
[ 1450.897250][T16612] usb 10-1: SerialNumber: syz
[ 1450.954920][    T9] usb 6-1: 1:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 1450.977143][    T9] usb 6-1: found format II with max.bitrate = 4, frame size=65533
[ 1450.985914][    T9] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[ 1451.005119][    T9] usb 6-1: 1:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 1451.015234][    T9] usb 6-1: found format II with max.bitrate = 4, frame size=65533
[ 1451.025069][    T9] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[ 1451.058080][    T9] usb 6-1: failed to enable PITCH for EP 0x1
[ 1451.065215][    T9] usb 6-1: unit 8 not found!
[ 1451.217083][    T9] usb 6-1: USB disconnect, device number 67
[ 1451.326486][T16612] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1451.366447][T16612] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1451.889204][ T8989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1451.972530][ T8991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1451.993123][ T8989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1452.043058][T16593] aiptek 1-1:17.0: Aiptek tried all speeds, no sane response
[ 1452.071985][T16593] aiptek 1-1:17.0: probe with driver aiptek failed with error -22
[ 1452.105764][T16593] usb 1-1: USB disconnect, device number 8
[ 1452.413696][T16612] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[ 1452.433410][T16612] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1452.446811][T16612] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1452.461559][T16612] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[ 1452.488051][T16612] usb 10-1: USB disconnect, device number 46
[ 1452.569323][ T9000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1452.587745][T29320] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1452.761351][T29320] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1452.770851][T29320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.779606][T29320] usb 5-1: Product: syz
[ 1452.784410][T29320] usb 5-1: Manufacturer: syz
[ 1452.789563][T29320] usb 5-1: SerialNumber: syz
[ 1452.929895][T16593] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1453.079994][T16593] usb 1-1: Using ep0 maxpacket: 32
[ 1453.090301][T16593] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[ 1453.090331][T16593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1453.093974][T16593] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[ 1453.094005][T16593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1453.094026][T16593] usb 1-1: Product: syz
[ 1453.094040][T16593] usb 1-1: Manufacturer: syz
[ 1453.094056][T16593] usb 1-1: SerialNumber: syz
[ 1453.101662][T29320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1453.101713][T29320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1453.101731][T29320] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1453.106714][T16593] usb 1-1: config 0 descriptor??
[ 1453.120639][T16593] gspca_main: sunplus-2.14.0 probing 08ca:2060
[ 1453.126617][T29320] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[ 1453.175857][T29320] usb 5-1: USB disconnect, device number 118
[ 1453.710021][   T10] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[ 1453.921670][   T10] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1453.949829][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1454.039649][   T10] usb 10-1: config 0 descriptor??
[ 1455.391830][T16593] usb 1-1: USB disconnect, device number 9
[ 1455.884905][ T9061] kvm: pic: non byte write
[ 1456.188431][ T9075] netlink: 'syz.2.12693': attribute type 10 has an invalid length.
[ 1456.261680][ T9075] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1456.326161][   T10] usb 10-1: Cannot set autoneg
[ 1456.360241][   T10] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1456.454304][   T10] usb 10-1: USB disconnect, device number 47
[ 1456.719719][ T9092] kvm: pic: level sensitive irq not supported
[ 1456.719795][ T9092] kvm: pic: non byte read
[ 1456.761140][ T9092] kvm: pic: level sensitive irq not supported
[ 1456.761208][ T9092] kvm: pic: non byte read
[ 1456.972458][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1457.071790][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1457.123227][    T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[ 1457.183547][    T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[ 1457.224038][T23743] wlan1: authenticated
[ 1457.260739][T23743] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[ 1457.387813][  T467] wlan1: associate with 08:02:11:00:00:00 (try 2/3)
[ 1457.527446][T18753] wlan1: associate with 08:02:11:00:00:00 (try 3/3)
[ 1457.638842][  T467] wlan1: association with 08:02:11:00:00:00 timed out
[ 1457.660657][    T9] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1457.838060][    T9] usb 6-1: Using ep0 maxpacket: 32
[ 1457.873380][    T9] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[ 1457.916798][    T9] usb 6-1: config 0 has no interface number 0
[ 1457.931535][    T9] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1457.954273][    T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1457.974836][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1458.000125][    T9] usb 6-1: Product: syz
[ 1458.012810][    T9] usb 6-1: Manufacturer: syz
[ 1458.030557][    T9] usb 6-1: SerialNumber: syz
[ 1458.083928][    T9] usb 6-1: config 0 descriptor??
[ 1458.110270][ T9122] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1458.432420][ T9122] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1458.548878][ T9155] netlink: 'syz.9.12712': attribute type 11 has an invalid length.
[ 1458.789978][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12713'.
[ 1459.217466][   T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1459.402388][   T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1459.431462][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.455990][ T9178] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1459.473867][   T10] usb 3-1: Product: syz
[ 1459.475890][ T9178] batadv0: mtu less than device minimum
[ 1459.498282][   T10] usb 3-1: Manufacturer: syz
[ 1459.500508][ T9178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.518795][ T9178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.530247][ T9178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.541684][ T9178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.553200][ T9178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.564668][ T9178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.576306][ T9178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.587932][ T9178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.599279][ T9178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1459.645650][   T10] usb 3-1: SerialNumber: syz
[ 1459.664254][   T10] usb 3-1: config 0 descriptor??
[ 1459.773885][ T9178] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1459.824225][ T9178] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1459.939416][ T9178] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1459.959779][ T9178] batman_adv: batadv0: Interface deactivated: dummy0
[ 1459.966901][ T9178] batman_adv: batadv0: Removing interface: dummy0
[ 1459.970827][   T10] usb 3-1: USB disconnect, device number 64
[ 1460.314508][ T9191] create_pit_timer: 6 callbacks suppressed
[ 1460.314526][ T9191] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1460.342379][ T9191] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1460.352743][ T9191] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1460.361331][ T9191] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1460.369965][ T9191] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[ 1460.379291][ T9191] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1460.411421][ T9191] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[ 1460.521419][    T9] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1460.535849][    T9] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1460.557932][    T9] asix 6-1:0.188: probe with driver asix failed with error -71
[ 1460.583134][    T9] usb 6-1: USB disconnect, device number 68
[ 1461.161345][ T9208] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode
[ 1461.193751][ T9208] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode
[ 1461.217807][T16607] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[ 1461.388214][T16607] usb 10-1: Using ep0 maxpacket: 8
[ 1461.418152][T16607] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1461.460798][T16607] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1461.479239][T16607] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1461.495843][T16607] usb 10-1: config 0 descriptor??
[ 1461.697689][ T9220] syzkaller0: entered promiscuous mode
[ 1461.714889][ T9220] syzkaller0: entered allmulticast mode
[ 1461.723707][T16607] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1462.173158][T16607] usb 10-1: USB disconnect, device number 48
[ 1462.287404][   T10] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1462.467392][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 1462.475926][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1462.502423][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1462.525283][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1462.538207][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1462.549540][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1462.565683][   T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1462.575794][   T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1462.584319][   T10] usb 6-1: Manufacturer: syz
[ 1462.595181][   T10] usb 6-1: config 0 descriptor??
[ 1462.672816][ T9231] delete_channel: no stack
[ 1462.918187][   T10] rc_core: IR keymap rc-hauppauge not found
[ 1462.924827][   T10] Registered IR keymap rc-empty
[ 1462.960707][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1462.997584][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.039410][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1463.051476][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1463.079732][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input212
[ 1463.095895][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.128690][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.167653][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.187442][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.208687][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.229477][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1463.235015][ T9224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1463.241439][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.257090][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1463.272655][    T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1463.282802][T16593] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1463.287459][ T9224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1463.294930][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.309877][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1463.333793][    T9] usb 1-1: config 0 descriptor??
[ 1463.339527][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.367505][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.388420][   T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1463.437559][   T10] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1463.452625][   T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1463.476328][   T10] usb 6-1: USB disconnect, device number 69
[ 1463.488775][T16593] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[ 1463.510274][T16593] usb 5-1: config 1 has no interface number 0
[ 1463.544017][T16593] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1463.589139][T16593] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1463.623882][T16593] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1463.656728][T16593] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1463.677035][T16593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1463.693251][T16593] usb 5-1: Product: syz
[ 1463.698587][T16593] usb 5-1: Manufacturer: syz
[ 1463.713533][T16593] usb 5-1: SerialNumber: syz
[ 1463.734280][ T9243] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1463.826938][    T9] hid_parser_main: 7 callbacks suppressed
[ 1463.826962][    T9] cp2112 0003:10C4:EA90.00D1: unknown main item tag 0x0
[ 1463.847224][    T9] cp2112 0003:10C4:EA90.00D1: unknown main item tag 0x0
[ 1463.864673][    T9] cp2112 0003:10C4:EA90.00D1: unknown main item tag 0x0
[ 1463.879096][    T9] cp2112 0003:10C4:EA90.00D1: unknown main item tag 0x0
[ 1463.895782][    T9] cp2112 0003:10C4:EA90.00D1: unknown main item tag 0x0
[ 1463.915068][    T9] cp2112 0003:10C4:EA90.00D1: unknown main item tag 0x0
[ 1463.960519][    T9] cp2112 0003:10C4:EA90.00D1: unknown main item tag 0x0
[ 1463.996172][ T9243] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1464.044351][    T9] cp2112 0003:10C4:EA90.00D1: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 1464.138588][    T9] cp2112 0003:10C4:EA90.00D1: Part Number: 0x00 Device Version: 0x00
[ 1464.237233][T16593] usb 5-1: Incompatible driver and firmware versions
[ 1464.273298][T16593] usb 5-1: USB disconnect, device number 119
[ 1464.781907][    T9] cp2112 0003:10C4:EA90.00D1: error reading lock byte: -71
[ 1464.834002][    T9] usb 1-1: USB disconnect, device number 10
[ 1465.247216][   T30] kauditd_printk_skb: 299 callbacks suppressed
[ 1465.247250][   T30] audit: type=1326 audit(1776718714.885:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9271 comm="syz.5.12754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc99d19c819 code=0x0
[ 1465.307689][ T9275] binder: 9274:9275 ioctl c0306201 2000000003c0 returned -14
[ 1465.588312][T16607] usb 10-1: new full-speed USB device number 49 using dummy_hcd
[ 1465.699003][ T9292] netlink: 'syz.0.12761': attribute type 29 has an invalid length.
[ 1465.762353][T16607] usb 10-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[ 1465.782481][T16607] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1465.807454][T16607] usb 10-1: Product: syz
[ 1465.812066][T16607] usb 10-1: Manufacturer: syz
[ 1465.827424][T16607] usb 10-1: SerialNumber: syz
[ 1466.090224][T16607] usb 10-1: unit 8 not found!
[ 1466.122463][T16607] usb 10-1: unit 6 not found!
[ 1466.144712][T16607] usb 10-1: unit 199 not found!
[ 1466.180653][T16607] usb 10-1: unit 208 not found!
[ 1466.441721][T16607] usb 10-1: USB disconnect, device number 49
[ 1466.621240][ T2461] udevd[2461]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1466.946313][ T9320] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1468.422395][ T9340] syzkaller0: entered promiscuous mode
[ 1468.435688][ T9340] syzkaller0: entered allmulticast mode
[ 1468.763952][ T9351] fuse: Bad value for 'fd'
[ 1468.824365][ T9351] usb usb8: usbfs: process 9351 (syz.9.12778) did not claim interface 0 before use
[ 1470.780510][   T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1470.957659][   T10] usb 3-1: Using ep0 maxpacket: 8
[ 1470.972116][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1470.982420][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1470.998766][   T10] usb 3-1: config 0 has no interfaces?
[ 1471.042292][   T10] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1471.053872][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1471.063981][   T10] usb 3-1: Product: syz
[ 1471.104705][   T10] usb 3-1: Manufacturer: syz
[ 1471.111780][   T10] usb 3-1: SerialNumber: syz
[ 1471.146001][   T10] usb 3-1: config 0 descriptor??
[ 1471.197922][    T9] usb 1-1: Using ep0 maxpacket: 32
[ 1471.214176][    T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[ 1471.222735][    T9] usb 1-1: config 0 has no interface number 0
[ 1471.229464][    T9] usb 1-1: config 0 interface 184 has no altsetting 0
[ 1471.288072][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1471.297393][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.305605][    T9] usb 1-1: Product: syz
[ 1471.310032][    T9] usb 1-1: Manufacturer: syz
[ 1471.338266][    T9] usb 1-1: SerialNumber: syz
[ 1471.371492][    T9] usb 1-1: config 0 descriptor??
[ 1471.385612][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12783'.
[ 1472.047058][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1472.058471][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1473.543953][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[ 1473.560078][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[ 1473.619117][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[ 1473.634997][    T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1473.690801][    T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[ 1473.731004][    T9] usb 1-1: USB disconnect, device number 11
[ 1476.024244][ T9404] input: syz1 as /devices/virtual/input/input213
[ 1476.540631][ T9413] netlink: 'syz.9.12801': attribute type 4 has an invalid length.
[ 1476.595550][ T9414] netlink: 'syz.9.12801': attribute type 4 has an invalid length.
[ 1478.318615][ T9366] bridge0: entered promiscuous mode
[ 1478.326968][ T9366] bridge0: left promiscuous mode
[ 1478.494859][T29320] usb 3-1: USB disconnect, device number 65
[ 1479.072890][ T9453] netlink: 172 bytes leftover after parsing attributes in process `syz.4.12814'.
[ 1479.084246][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12814'.
[ 1479.157877][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1479.161694][ T9455] syzkaller0: entered promiscuous mode
[ 1479.171192][ T9455] syzkaller0: entered allmulticast mode
[ 1479.277393][T16593] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1479.317474][   T10] usb 1-1: Using ep0 maxpacket: 16
[ 1479.324753][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1479.343735][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1479.353331][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1479.363891][   T10] usb 1-1: Product: syz
[ 1479.369181][   T10] usb 1-1: Manufacturer: syz
[ 1479.374077][   T10] usb 1-1: SerialNumber: syz
[ 1479.382479][   T10] usb 1-1: config 0 descriptor??
[ 1479.394733][   T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1479.404804][   T10] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1479.438170][T16593] usb 6-1: Using ep0 maxpacket: 32
[ 1479.459308][T16593] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[ 1479.469741][T16593] usb 6-1: config 0 has no interface number 0
[ 1479.476147][T16593] usb 6-1: config 0 interface 12 has no altsetting 0
[ 1479.499711][T16593] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1479.519582][T16593] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1479.539322][T16593] usb 6-1: Product: syz
[ 1479.549591][T16593] usb 6-1: Manufacturer: syz
[ 1479.560679][T16593] usb 6-1: SerialNumber: syz
[ 1479.590333][T16593] usb 6-1: config 0 descriptor??
[ 1479.725818][T16278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1479.751564][T16278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1479.761473][T16278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1479.772712][T16278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1479.780955][T16278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1479.819981][  T703] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1479.987586][  T703] usb 5-1: Using ep0 maxpacket: 16
[ 1479.999584][  T703] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1480.027485][  T703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1480.050681][   T10] em28xx 1-1:0.0: chip ID is em2765
[ 1480.062720][  T703] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1480.093949][  T703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.120153][  T703] usb 5-1: Product: syz
[ 1480.136573][  T703] usb 5-1: Manufacturer: syz
[ 1480.151239][  T703] usb 5-1: SerialNumber: syz
[ 1480.171880][  T703] usb 5-1: config 0 descriptor??
[ 1480.198783][  T703] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1480.227457][  T703] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 1480.293852][ T9465] chnl_net:caif_netlink_parms(): no params data found
[ 1480.481271][ T9465] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1480.495154][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1480.507910][ T9465] bridge_slave_0: entered allmulticast mode
[ 1480.523237][ T9465] bridge_slave_0: entered promiscuous mode
[ 1480.542602][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1480.581845][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1480.613814][ T9465] bridge_slave_1: entered allmulticast mode
[ 1480.636128][ T9465] bridge_slave_1: entered promiscuous mode
[ 1480.666267][   T10] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1480.731749][   T10] em28xx 1-1:0.0: board has no eeprom
[ 1480.732948][ T9465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1480.797699][ T9465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1480.822970][  T703] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1480.841674][  T703] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 1480.938236][ T9465] team0: Port device team_slave_0 added
[ 1480.950778][ T9465] team0: Port device team_slave_1 added
[ 1481.019626][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1481.026792][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1481.054955][   T10] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1481.064284][   T10] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1481.109101][T25415] em28xx 1-1:0.0: Binding DVB extension
[ 1481.138587][ T9465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1481.167844][   T10] usb 1-1: USB disconnect, device number 12
[ 1481.194842][   T10] em28xx 1-1:0.0: Disconnecting em28xx
[ 1481.204449][ T9480] loop5: detected capacity change from 0 to 7
[ 1481.225369][ T9465] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1481.253719][ T9465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1481.256041][ T9480] Dev loop5: unable to read RDB block 7
[ 1481.315570][T25415] em28xx 1-1:0.0: Registering input extension
[ 1481.317888][ T9480]  loop5: unable to read partition table
[ 1481.329596][ T9480] loop5: partition table beyond EOD, truncated
[ 1481.329947][ T9465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1481.349391][   T10] em28xx 1-1:0.0: Closing input extension
[ 1481.364779][ T9480] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1481.463058][   T10] em28xx 1-1:0.0: Freeing device
[ 1481.474483][ T9465] hsr_slave_0: entered promiscuous mode
[ 1481.490918][ T9465] hsr_slave_1: entered promiscuous mode
[ 1481.498642][  T703] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[ 1481.504660][ T9465] debugfs: 'hsr0' already exists in 'hsr'
[ 1481.519317][ T9465] Cannot create hsr debugfs directory
[ 1481.747830][ T9485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1481.760167][T16607] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1481.916706][  T703] em28xx 5-1:0.0: couldn't setup AC97 register 2
[ 1481.929054][T24133] Bluetooth: hci2: command tx timeout
[ 1481.935047][  T703] em28xx 5-1:0.0: couldn't setup AC97 register 4
[ 1481.942018][T16607] usb 3-1: Using ep0 maxpacket: 8
[ 1481.944714][T16593] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1481.951950][T16607] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1481.976823][T16607] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1481.986695][  T703] em28xx 5-1:0.0: couldn't setup AC97 register 6
[ 1481.987488][  T703] em28xx 5-1:0.0: couldn't setup AC97 register 54
[ 1482.003046][T16593] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[ 1482.016166][T16607] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1482.027427][T16593] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1482.038209][T16607] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1482.053489][  T703] em28xx 5-1:0.0: couldn't setup AC97 register 56
[ 1482.053815][T16607] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1482.069571][T16593] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[ 1482.097482][  T703] usb 5-1: USB disconnect, device number 120
[ 1482.099054][T16607] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1482.153911][T16593] usb 6-1: USB disconnect, device number 70
[ 1482.176068][T16607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1482.467074][T16607] usb 3-1: GET_CAPABILITIES returned 0
[ 1482.480770][T16607] usbtmc 3-1:16.0: can't read capabilities
[ 1482.843562][T16607] usb 3-1: USB disconnect, device number 66
[ 1483.997547][T24133] Bluetooth: hci2: command tx timeout
[ 1484.267144][ T9465] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1484.304535][ T9465] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1484.330220][ T9465] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1484.413948][ T9465] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1484.452701][ T9465] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1484.539011][ T9465] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1484.561676][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.569727][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.583351][ T9465] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1484.618011][ T9465] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1485.181054][ T9465] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1485.280782][ T9465] 8021q: adding VLAN 0 to HW filter on device team0
[ 1485.373304][T18753] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1485.380671][T18753] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1485.476948][T18753] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1485.484187][T18753] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1485.949436][ T9465] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1486.077627][T24133] Bluetooth: hci2: command tx timeout
[ 1486.358536][ T9465] veth0_vlan: entered promiscuous mode
[ 1486.422325][ T9465] veth1_vlan: entered promiscuous mode
[ 1486.494420][ T9603] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1486.732045][ T9465] veth0_macvtap: entered promiscuous mode
[ 1486.826173][ T9465] veth1_macvtap: entered promiscuous mode
[ 1487.014244][ T9465] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1487.150867][ T9465] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1487.164314][ T9611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1487.296036][T18753] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.348793][T18753] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.426186][T18753] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.488667][T18753] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1487.783903][ T9624] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1488.041409][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1488.088779][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1488.160185][T24133] Bluetooth: hci2: command tx timeout
[ 1488.194389][ T9634] mac80211_hwsim hwsim58 syzkaller0: left promiscuous mode
[ 1488.246464][ T9634] mac80211_hwsim hwsim58 syzkaller0: left allmulticast mode
[ 1488.316254][ T9635] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12853'.
[ 1488.397096][T18753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1488.464200][T18753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1489.728374][T16607] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1489.924330][T16607] usb 6-1: Using ep0 maxpacket: 32
[ 1489.968079][T16607] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1490.012741][T16607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.049367][T16607] usb 6-1: Product: syz
[ 1490.049393][T16607] usb 6-1: Manufacturer: syz
[ 1490.049408][T16607] usb 6-1: SerialNumber: syz
[ 1490.068378][T16607] usb 6-1: config 0 descriptor??
[ 1490.099361][T16607] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1490.357489][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[ 1490.468098][T29320] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1490.593883][ T9686] blkio.reset_stats is deprecated
[ 1490.668605][T29320] usb 9-1: Using ep0 maxpacket: 16
[ 1490.694713][T29320] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1490.799687][T29320] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1490.811758][T29320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1490.837464][T29320] usb 9-1: Product: syz
[ 1490.847055][T29320] usb 9-1: Manufacturer: syz
[ 1490.868175][T29320] usb 9-1: SerialNumber: syz
[ 1490.930554][T29320] usb 9-1: config 0 descriptor??
[ 1490.980697][T29320] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1491.002413][T29320] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 1491.053881][ T9696] binder_alloc: 9695: binder_alloc_buf, no vma
[ 1491.448238][T16612] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1491.594751][T29320] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1491.609739][T16612] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1491.631535][T16612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.668860][T16612] usb 3-1: config 0 descriptor??
[ 1491.701526][T16612] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1491.748108][ T9722] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1492.012440][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1492.036039][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1492.052047][T29320] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1492.079053][T29320] em28xx 9-1:0.0: board has no eeprom
[ 1492.147545][T29320] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1492.156026][T29320] em28xx 9-1:0.0: dvb set to bulk mode.
[ 1492.170957][ T8628] em28xx 9-1:0.0: Binding DVB extension
[ 1492.193893][T29320] usb 9-1: USB disconnect, device number 8
[ 1492.223307][T29320] em28xx 9-1:0.0: Disconnecting em28xx
[ 1492.286376][ T8628] em28xx 9-1:0.0: Registering input extension
[ 1492.302175][T29320] em28xx 9-1:0.0: Closing input extension
[ 1492.332939][T29320] em28xx 9-1:0.0: Freeing device
[ 1492.340049][T16607] gspca_ov534_9: reg_r err -71
[ 1492.627416][T16607] gspca_ov534_9: Unknown sensor 0000
[ 1492.627507][T16607] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[ 1492.702092][T16607] usb 6-1: USB disconnect, device number 71
[ 1492.923218][T16612] gspca_stv06xx: I2C: Read error writing address: -71
[ 1492.955603][T16612] usb 3-1: USB disconnect, device number 67
[ 1493.087400][ T9750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1493.526022][ T9774] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1493.571921][ T9774] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1493.620565][ T9774] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1493.666872][ T9774] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1493.725432][ T9774] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[ 1493.761404][ T9774] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1493.811556][ T9774] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[ 1493.872260][ T9774] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[ 1493.914783][ T9774] kvm: requested 100571 ns i8254 timer period limited to 200000 ns
[ 1493.984623][ T9774] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1495.379485][ T9819] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1497.427415][  T703] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1497.597407][ T9627] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1497.605105][  T703] usb 5-1: Using ep0 maxpacket: 16
[ 1497.626617][  T703] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1497.656939][  T703] usb 5-1: config 0 has no interface number 0
[ 1497.680668][  T703] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1497.716483][  T703] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1497.755930][  T703] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1497.771264][ T9627] usb 6-1: Using ep0 maxpacket: 16
[ 1497.782718][  T703] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1497.797804][ T9627] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1497.816313][  T703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.832764][ T9627] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1497.846691][  T703] usb 5-1: Product: syz
[ 1497.861393][ T9627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.871186][  T703] usb 5-1: Manufacturer: syz
[ 1497.889096][  T703] usb 5-1: SerialNumber: syz
[ 1497.896850][ T9627] usb 6-1: Product: syz
[ 1497.915407][  T703] usb 5-1: config 0 descriptor??
[ 1497.920756][ T9627] usb 6-1: Manufacturer: syz
[ 1497.941263][ T9627] usb 6-1: SerialNumber: syz
[ 1497.952164][ T9846] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1497.979726][ T9627] usb 6-1: config 0 descriptor??
[ 1497.986072][  T703] sr9700 5-1:0.41: probe with driver sr9700 failed with error -22
[ 1498.010958][ T9627] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1498.037073][ T9627] em28xx 6-1:0.0: DVB interface 0 found: bulk
[ 1498.340789][ T9846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1498.422300][T16612] usb 5-1: USB disconnect, device number 121
[ 1498.653632][ T9627] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1499.186338][ T9627] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1499.245748][ T9627] em28xx 6-1:0.0: board has no eeprom
[ 1499.607422][ T9627] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1499.618285][ T9627] em28xx 6-1:0.0: dvb set to bulk mode.
[ 1499.638887][  T703] em28xx 6-1:0.0: Binding DVB extension
[ 1499.716515][ T9627] usb 6-1: USB disconnect, device number 72
[ 1499.756850][ T9627] em28xx 6-1:0.0: Disconnecting em28xx
[ 1499.814894][  T703] em28xx 6-1:0.0: Registering input extension
[ 1499.933028][ T9627] em28xx 6-1:0.0: Closing input extension
[ 1500.190326][ T9627] em28xx 6-1:0.0: Freeing device
[ 1501.024123][ T9910] netlink: 88 bytes leftover after parsing attributes in process `syz.5.12904'.
[ 1506.465129][ T9886] syz.4.12901 (9886): drop_caches: 1
[ 1508.237919][T16612] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1508.276072][ T9942] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1508.397669][T16612] usb 5-1: Using ep0 maxpacket: 32
[ 1508.410782][T16612] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1508.430565][T16612] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1508.472617][T16612] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1508.504812][T16612] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1508.546552][T16612] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1508.566368][T16612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.586714][T16612] usb 5-1: Product: syz
[ 1508.596892][T16612] usb 5-1: Manufacturer: syz
[ 1508.607063][T16612] usb 5-1: SerialNumber: syz
[ 1508.656741][    C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1508.678972][T16612] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input217
[ 1508.881148][T16612] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1508.892715][T16612]  (id 0x00)
[ 1509.007385][T16607] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1509.118291][  T703] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1509.157421][T16612] rc_core: IR keymap rc-imon-pad not found
[ 1509.166475][T16612] Registered IR keymap rc-empty
[ 1509.179153][T16612] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1509.205311][T16607] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1509.215411][T16612] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1509.227180][T16607] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.236537][T16607] usb 9-1: Product: syz
[ 1509.244524][T16607] usb 9-1: Manufacturer: syz
[ 1509.254279][T16607] usb 9-1: SerialNumber: syz
[ 1509.264516][T16612] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[ 1509.313535][T16612] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input218
[ 1509.328408][  T703] usb 1-1: Using ep0 maxpacket: 32
[ 1509.347185][T16612] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:122> initialized
[ 1509.353050][  T703] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[ 1509.404745][  T703] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1509.465460][  T703] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1509.514579][  T703] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1509.557564][  T703] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1509.572037][  T703] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1509.594017][  T703] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1509.618531][  T703] usb 1-1: Product: syz
[ 1509.624547][  T703] usb 1-1: Manufacturer: syz
[ 1509.635676][  T703] usb 1-1: SerialNumber: syz
[ 1509.656331][  T703] usb 1-1: config 0 descriptor??
[ 1509.669541][  T703] ldusb 1-1:0.0: Interrupt in endpoint not found
[ 1509.744839][T16607] net_ratelimit: 30 callbacks suppressed
[ 1509.744862][T16607] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1509.797082][T16607] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1509.957407][  T703] usb 1-1: USB disconnect, device number 13
[ 1511.255894][T16612] usb 5-1: USB disconnect, device number 122
[ 1511.304262][ T9995] kvm: user requested TSC rate below hardware speed
[ 1511.334616][ T9995] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1511.479543][T16607] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[ 1511.518403][T16607] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[ 1511.547639][T16607] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1511.575845][T16607] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1511.586053][T16607] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1511.598630][T16607] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[ 1511.618918][T16607] usb 9-1: USB disconnect, device number 9
[ 1512.277626][   T30] audit: type=1326 audit(1776718761.915:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.2.12936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb35999c819 code=0x7fc00000
[ 1512.319704][   T30] audit: type=1326 audit(1776718761.925:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.2.12936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb35999c819 code=0x7fc00000
[ 1513.017618][ T9627] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1513.240160][ T9627] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1513.275675][ T9627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1513.304072][ T9627] usb 5-1: Product: syz
[ 1513.317598][ T9627] usb 5-1: Manufacturer: syz
[ 1513.338150][ T9627] usb 5-1: SerialNumber: syz
[ 1513.788554][ T9627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1513.827072][ T9627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1514.137513][T16590] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1514.309365][T16590] usb 3-1: Using ep0 maxpacket: 8
[ 1514.318983][T16590] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[ 1514.336046][T16590] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1514.349625][T16590] usb 3-1: config 0 has no interface number 0
[ 1514.360018][T16590] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1514.376463][T16590] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1514.389481][T16590] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1514.402718][T16590] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1514.416284][T16590] usb 3-1: config 0 interface 52 has no altsetting 0
[ 1514.441534][T16590] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[ 1514.453407][T16590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.472479][T16590] usb 3-1: config 0 descriptor??
[ 1514.677479][T16607] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1514.805644][T16590] usb 3-1: Can not set alternate setting to 1, error: -71
[ 1514.818153][T16590] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71
[ 1514.833680][T16590] usb 3-1: USB disconnect, device number 68
[ 1514.866939][T16607] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1514.882343][T16607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.891047][T16612] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1514.914051][T16607] usb 6-1: config 0 descriptor??
[ 1514.928430][T16607] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1514.952441][T10072] binder: 10071:10072 ioctl c0306201 0 returned -14
[ 1515.059404][T16612] usb 9-1: config 0 has no interfaces?
[ 1515.065217][T16612] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1515.074593][T16612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1515.085664][T16612] usb 9-1: config 0 descriptor??
[ 1515.101303][ T9627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1515.118385][ T9627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[ 1515.135778][ T9627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1515.152230][ T9627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1515.164042][ T9627] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1515.175703][ T9627] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[ 1515.205436][ T9627] usb 5-1: USB disconnect, device number 123
[ 1515.319503][T16612] usb 9-1: USB disconnect, device number 10
[ 1516.219680][T10096] netlink: 'syz.0.12965': attribute type 1 has an invalid length.
[ 1516.362064][T10104] syzkaller0: entered promiscuous mode
[ 1516.367988][T10104] syzkaller0: entered allmulticast mode
[ 1516.782124][T16607] usb 6-1: USB disconnect, device number 73
[ 1518.336381][T10153] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12986'.
[ 1518.371437][T10153] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12986'.
[ 1518.767417][T16607] usb 5-1: new low-speed USB device number 124 using dummy_hcd
[ 1518.959673][T16607] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1519.007415][T16607] usb 5-1: config 0 has no interface number 0
[ 1519.033683][T16607] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1519.108781][T16607] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1519.163777][T16607] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1519.194288][T16607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.232001][T16607] usb 5-1: config 0 descriptor??
[ 1519.265945][T10155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1519.362438][T16607] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1519.600352][T16607] usb 5-1: USB disconnect, device number 124
[ 1519.666259][T10181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1519.760846][T10181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1519.775647][T10181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1520.659398][ T9627] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1520.851484][ T9627] usb 5-1: Using ep0 maxpacket: 32
[ 1520.889885][ T9627] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1520.944024][ T9627] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1520.996056][ T9627] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1521.041409][ T9627] usb 5-1: Product: syz
[ 1521.062558][ T9627] usb 5-1: Manufacturer: syz
[ 1521.085900][ T9627] usb 5-1: SerialNumber: syz
[ 1521.132056][ T9627] usb 5-1: config 0 descriptor??
[ 1521.168136][T10186] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1521.204475][ T9627] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1521.243984][ T9627] hub 5-1:0.0: probe with driver hub failed with error -5
[ 1521.664006][T10211] netlink: 'syz.2.13006': attribute type 1 has an invalid length.
[ 1522.447455][T16607] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1522.500991][   T30] audit: type=1326 audit(1776718772.145:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10229 comm="syz.0.13013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe66479c819 code=0x0
[ 1522.597683][T16607] usb 6-1: Using ep0 maxpacket: 16
[ 1522.606510][T16607] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1522.619570][T16607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1522.635367][T16607] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1522.645397][T16607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.656350][T16607] usb 6-1: Product: syz
[ 1522.663345][T16607] usb 6-1: Manufacturer: syz
[ 1522.668712][T16607] usb 6-1: SerialNumber: syz
[ 1522.682693][T16607] usb 6-1: config 0 descriptor??
[ 1522.692331][T16607] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1522.703074][T16607] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1523.201476][ T9626] usb 5-1: USB disconnect, device number 125
[ 1523.300295][T16607] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1523.323988][T16607] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[ 1523.939971][ T8628] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1524.108134][ T8628] usb 1-1: too many configurations: 9, using maximum allowed: 8
[ 1524.117158][ T8628] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1524.127087][ T8628] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1524.139303][ T8628] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1524.153181][ T8628] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1524.177444][ T8628] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1524.193978][ T8628] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1524.217465][ T8628] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1524.226934][T10264] netlink: 52 bytes leftover after parsing attributes in process `syz.8.13022'.
[ 1524.267416][T16612] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1524.278369][ T8628] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1524.323683][ T8628] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1524.342749][ T8628] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1524.365215][ T8628] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1524.384421][ T8628] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1524.394473][ T8628] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1524.403698][ T8628] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1524.417454][T16607] em28xx 6-1:0.0: AC97 vendor ID = 0x00fc00fe
[ 1524.425752][ T8628] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1524.436929][ T8628] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1524.446914][ T8628] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1524.458026][T16612] usb 3-1: Using ep0 maxpacket: 32
[ 1524.465948][ T8628] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1524.474324][T16612] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[ 1524.497960][T16612] usb 3-1: config 0 has no interface number 0
[ 1524.506045][ T8628] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1524.515860][ T8628] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1524.530259][ T8628] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1524.542472][T16612] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1524.555750][ T8628] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1524.568786][ T8628] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1524.581352][ T8628] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1524.589473][T16612] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1524.600543][T16612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1524.612365][T16612] usb 3-1: Product: syz
[ 1524.619600][ T8628] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1524.631276][ T8628] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1524.641377][ T8628] usb 1-1: Product: syz
[ 1524.647607][T16612] usb 3-1: Manufacturer: syz
[ 1524.652544][ T8628] usb 1-1: Manufacturer: syz
[ 1524.657806][T16612] usb 3-1: SerialNumber: syz
[ 1524.662603][ T8628] usb 1-1: SerialNumber: syz
[ 1524.671840][T16612] usb 3-1: config 0 descriptor??
[ 1524.681329][ T8628] usb 1-1: config 0 descriptor??
[ 1524.688769][T10256] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1524.708850][ T8628] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[ 1524.820725][T16607] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[ 1524.833407][T16607] em28xx 6-1:0.0: couldn't setup AC97 register 2
[ 1524.846457][T16607] em28xx 6-1:0.0: couldn't setup AC97 register 4
[ 1524.862614][T16607] em28xx 6-1:0.0: couldn't setup AC97 register 6
[ 1524.874764][T16607] em28xx 6-1:0.0: couldn't setup AC97 register 54
[ 1524.884679][T16607] em28xx 6-1:0.0: couldn't setup AC97 register 56
[ 1524.911339][T16607] usb 6-1: USB disconnect, device number 74
[ 1524.943376][T10256] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1525.063816][    C1] usb 1-1: yurex_control_callback - control failed: -71
[ 1525.108746][    C1] usb 1-1: yurex_control_callback - control failed: -71
[ 1525.125391][ T8628] usb 1-1: USB disconnect, device number 14
[ 1525.140456][ T8628] yurex 1-1:0.0: USB YUREX #0 now disconnected
[ 1525.987439][T16590] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1526.057439][ T9626] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1526.159189][T16590] usb 5-1: Using ep0 maxpacket: 32
[ 1526.174118][T16590] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1526.197424][ T9626] usb 9-1: device descriptor read/64, error -71
[ 1526.204572][T16590] usb 5-1: config 0 has no interface number 0
[ 1526.220148][T16590] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1526.234032][T16590] usb 5-1: config 0 interface 1 has no altsetting 0
[ 1526.267573][T16590] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1526.286816][T16590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1526.312052][T16590] usb 5-1: Product: syz
[ 1526.323690][T16590] usb 5-1: Manufacturer: syz
[ 1526.344518][T16590] usb 5-1: SerialNumber: syz
[ 1526.368795][T16590] usb 5-1: config 0 descriptor??
[ 1526.467389][ T9626] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1526.611547][T16590] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1526.648258][T16590] cx231xx 5-1:0.1: Failed to read PCB config
[ 1526.667859][T16590] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71
[ 1526.700109][T16590] usb 5-1: USB disconnect, device number 126
[ 1526.895690][T10300] xt_connbytes: Forcing CT accounting to be enabled
[ 1527.006183][T16612] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1527.045503][T16612] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1527.084480][T16612] asix 3-1:0.188: probe with driver asix failed with error -71
[ 1527.117689][T16612] usb 3-1: USB disconnect, device number 69
[ 1527.167440][T16590] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1527.357635][T16590] usb 5-1: Using ep0 maxpacket: 32
[ 1527.364757][T16590] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1527.373486][T16590] usb 5-1: config 0 has no interface number 0
[ 1527.379911][T16590] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1527.390978][T16590] usb 5-1: config 0 interface 1 has no altsetting 0
[ 1527.402884][T16590] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1527.414246][T16590] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.423024][T16590] usb 5-1: Product: syz
[ 1527.427479][T16590] usb 5-1: Manufacturer: syz
[ 1527.432278][T16590] usb 5-1: SerialNumber: syz
[ 1527.440896][T16590] usb 5-1: config 0 descriptor??
[ 1527.467426][ T9627] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1527.557492][    T9] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1527.607382][T16278] Bluetooth: hci4: command 0x0406 tx timeout
[ 1527.617502][ T9627] usb 1-1: Using ep0 maxpacket: 16
[ 1527.634271][ T9627] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1527.647432][ T9627] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1527.666910][ T9627] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1527.691619][T16590] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1527.708110][ T9627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.718174][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1527.733444][T16590] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[ 1527.742632][ T9627] usb 1-1: Product: syz
[ 1527.748140][ T9627] usb 1-1: Manufacturer: syz
[ 1527.754378][ T9627] usb 1-1: SerialNumber: syz
[ 1527.762729][    T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[ 1527.776808][ T9627] usb 1-1: config 0 descriptor??
[ 1527.781935][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.791682][    T9] usb 6-1: Product: syz
[ 1527.798898][    T9] usb 6-1: Manufacturer: syz
[ 1527.806389][ T9627] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1527.820818][    T9] usb 6-1: SerialNumber: syz
[ 1527.825535][ T9627] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1527.867790][T16590] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[ 1527.887988][T16590] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1527.907855][T16590] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1527.920882][T16590] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1527.930909][T16590] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1527.939268][T16590] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32
[ 1527.973679][T16590] i2c i2c-4: Added multiplexed i2c bus 6
[ 1527.995566][T16590] i2c i2c-4: Added multiplexed i2c bus 7
[ 1528.187971][T16590] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1528.227857][T16590] cx231xx 5-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1528.239055][T16590] cx231xx 5-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1528.249078][T16590] cx231xx 5-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1528.260090][T16590] cx231xx 5-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1528.270760][T16590] cx231xx 5-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1528.279530][T16590] cx231xx 5-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1528.292987][T16590] cx231xx 5-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1528.302642][T16590] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[ 1528.311501][T16590] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[ 1528.325749][T10318] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1528.374863][T16590] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71
[ 1528.388326][T16590] usb 5-1: USB disconnect, device number 127
[ 1528.418514][ T9627] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1528.441088][ T9627] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[ 1528.671168][    T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1528.684924][    T9] usb 6-1: USB disconnect, device number 75
[ 1529.054529][ T9627] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[ 1529.668770][ T9627] em28xx 1-1:0.0: couldn't setup AC97 register 4
[ 1529.693314][ T9627] em28xx 1-1:0.0: couldn't setup AC97 register 6
[ 1529.713329][ T9627] em28xx 1-1:0.0: couldn't setup AC97 register 54
[ 1529.761149][ T9627] em28xx 1-1:0.0: couldn't setup AC97 register 56
[ 1529.819706][ T9627] usb 1-1: USB disconnect, device number 15
[ 1529.936036][T10336] netlink: 'syz.8.13046': attribute type 1 has an invalid length.
[ 1529.990378][T10338] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13046'.
[ 1530.095815][T10336] bond1: entered promiscuous mode
[ 1530.110159][T10336] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1530.121375][T10338] bond1: entered allmulticast mode
[ 1530.189083][T10341] netlink: 'syz.4.13047': attribute type 1 has an invalid length.
[ 1530.246706][T10336] bond1: (slave bridge1): making interface the new active one
[ 1530.277419][T10336] bridge1: entered promiscuous mode
[ 1530.283079][T10336] bridge1: entered allmulticast mode
[ 1530.309130][T10336] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1530.763972][T10349] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode
[ 1530.774574][T10349] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode
[ 1531.107734][T10368] binder: BINDER_SET_CONTEXT_MGR already set
[ 1531.120937][T10368] binder: 10367:10368 ioctl 4018620d 200000004a80 returned -16
[ 1531.658072][ T9627] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1531.827783][ T9627] usb 3-1: Using ep0 maxpacket: 32
[ 1531.835381][ T9627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1531.846958][ T9627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1531.857766][ T9627] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1531.867050][ T9627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1531.878929][ T9627] usb 3-1: config 0 descriptor??
[ 1532.057598][ T9626] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[ 1532.221416][ T9626] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1532.231099][ T9626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1532.239899][ T9626] usb 9-1: Product: syz
[ 1532.244417][ T9626] usb 9-1: Manufacturer: syz
[ 1532.251967][ T9626] usb 9-1: SerialNumber: syz
[ 1532.259852][ T9626] usb 9-1: config 0 descriptor??
[ 1532.274114][ T9626] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1532.299189][ T9627] ft260 0003:0403:6030.00D2: unknown main item tag 0x0
[ 1532.309665][ T9627] ft260 0003:0403:6030.00D2: unknown main item tag 0x0
[ 1532.507929][ T9627] ft260 0003:0403:6030.00D2: chip code: 0000 0000
[ 1532.712680][ T9627] ft260 0003:0403:6030.00D2: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0
[ 1532.912919][ T9627] ft260 0003:0403:6030.00D2: failed to retrieve status: -32, no wakeup
[ 1533.157592][ T9627] usb 3-1: USB disconnect, device number 70
[ 1533.859288][T10412] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13072'.
[ 1533.983555][T10412] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1534.011207][T10412] bond0 (unregistering): Released all slaves
[ 1534.149112][T10424] kvm: pic: non byte read
[ 1534.165964][T10424] kvm: pic: non byte read
[ 1534.178510][T10424] kvm: pic: non byte read
[ 1534.192338][T10424] kvm: pic: non byte read
[ 1534.214060][T10424] kvm: pic: non byte read
[ 1534.229568][T10424] kvm: pic: non byte read
[ 1534.252778][T10424] kvm: pic: non byte read
[ 1534.276269][T10424] kvm: pic: non byte read
[ 1534.293392][T10424] kvm: pic: non byte read
[ 1534.306291][T10424] kvm: pic: non byte read
[ 1534.396478][T16607] hid-generic 0000:0000:0000.00D3: unknown main item tag 0x0
[ 1534.486568][T16607] hid-generic 0000:0000:0000.00D3: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1534.694971][ T9626] gspca_stk1135: reg_w 0x300 err -71
[ 1534.712810][ T9626] gspca_stk1135: serial bus timeout: status=0x00
[ 1534.749433][ T9626] gspca_stk1135: Sensor write failed
[ 1534.785312][ T9626] gspca_stk1135: serial bus timeout: status=0x00
[ 1534.804655][ T9626] gspca_stk1135: Sensor write failed
[ 1534.821007][ T9626] gspca_stk1135: serial bus timeout: status=0x00
[ 1534.836642][ T9626] gspca_stk1135: Sensor read failed
[ 1534.842454][ T9626] gspca_stk1135: serial bus timeout: status=0x00
[ 1534.853495][ T9626] gspca_stk1135: Sensor read failed
[ 1534.860990][ T9626] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1534.878999][ T9626] gspca_stk1135: serial bus timeout: status=0x00
[ 1534.886467][ T9626] gspca_stk1135: Sensor read failed
[ 1534.893657][ T9626] gspca_stk1135: serial bus timeout: status=0x00
[ 1534.913175][ T9626] gspca_stk1135: Sensor read failed
[ 1534.920600][ T9626] gspca_stk1135: serial bus timeout: status=0x00
[ 1534.927353][T10438] fido_id[10438]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1534.956036][ T9626] gspca_stk1135: Sensor write failed
[ 1534.965036][ T9626] gspca_stk1135: serial bus timeout: status=0x00
[ 1534.996490][ T9626] gspca_stk1135: Sensor write failed
[ 1535.015691][ T9626] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71
[ 1535.053730][ T9626] usb 9-1: USB disconnect, device number 13
[ 1536.189767][T10478] netlink: 60 bytes leftover after parsing attributes in process `syz.8.13094'.
[ 1536.242926][T10478] unsupported nlmsg_type 40
[ 1536.268428][T10481] kvm: pic: non byte write
[ 1536.371971][T10485] syzkaller0: entered promiscuous mode
[ 1536.380068][T10485] syzkaller0: entered allmulticast mode
[ 1536.593525][T10490] create_pit_timer: 14 callbacks suppressed
[ 1536.593544][T10490] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1536.666456][T10490] kvm: pic: level sensitive irq not supported
[ 1536.667103][T10490] kvm: pic: level sensitive irq not supported
[ 1537.221610][    T9] IPVS: starting estimator thread 0...
[ 1537.279994][T16607] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1537.347374][T10517] IPVS: using max 30 ests per chain, 72000 per kthread
[ 1537.459966][T16607] usb 1-1: Using ep0 maxpacket: 32
[ 1537.484494][T16607] usb 1-1: config 0 has an invalid interface number: 111 but max is 1
[ 1537.519540][T16607] usb 1-1: config 0 has no interface number 1
[ 1537.556107][T16607] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[ 1537.587156][T10524] binder: BINDER_SET_CONTEXT_MGR already set
[ 1537.602984][T16607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1537.621091][T10524] binder: 10523:10524 ioctl 4018620d 200000004a80 returned -16
[ 1537.656732][T16607] usb 1-1: Product: syz
[ 1537.680259][T16607] usb 1-1: Manufacturer: syz
[ 1537.697868][T16607] usb 1-1: SerialNumber: syz
[ 1537.748446][T16607] usb 1-1: config 0 descriptor??
[ 1538.015435][T16607] snd-usb-6fire 1-1:0.111: unable to receive device firmware state.
[ 1538.060859][T16607] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -71
[ 1538.123505][T16607] usb 1-1: USB disconnect, device number 16
[ 1538.312586][T10535] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1538.477596][    T9] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[ 1538.607458][T16607] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1538.694328][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1538.752260][    T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1538.797571][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1538.810312][T16607] usb 1-1: Using ep0 maxpacket: 32
[ 1538.836556][T16607] usb 1-1: config 0 has an invalid interface number: 111 but max is 1
[ 1538.853687][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64
[ 1538.895961][T16607] usb 1-1: config 0 has no interface number 1
[ 1538.901469][    T9] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1538.958129][T16607] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[ 1538.989838][    T9] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[ 1539.016435][T16607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1539.039092][    T9] usb 9-1: Product: syz
[ 1539.043484][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13113'.
[ 1539.057853][    T9] usb 9-1: Manufacturer: syz
[ 1539.075733][    T9] usb 9-1: SerialNumber: syz
[ 1539.083841][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13113'.
[ 1539.101871][T16607] usb 1-1: Product: syz
[ 1539.110704][    T9] usb 9-1: config 0 descriptor??
[ 1539.118086][T10545] netlink: 'syz.5.13113': attribute type 4 has an invalid length.
[ 1539.136050][T16607] usb 1-1: Manufacturer: syz
[ 1539.137395][T10531] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1539.154566][T10545] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13113'.
[ 1539.172284][T16607] usb 1-1: SerialNumber: syz
[ 1539.190821][T16607] usb 1-1: config 0 descriptor??
[ 1539.208898][T10545] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1539.338971][    T9] rc_core: IR keymap rc-imon-rsc not found
[ 1539.385160][    T9] Registered IR keymap rc-empty
[ 1539.421871][    T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1539.450726][T16607] snd-usb-6fire 1-1:0.111: unknown device firmware state received from device:
[ 1539.474759][T16607] 31 db 99 aa dd 09 f1 37 
[ 1539.488467][T16607] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -5
[ 1539.585307][    T9] input: iMON Station as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input220
[ 1539.882120][T16607] usb 9-1: USB disconnect, device number 14
[ 1540.185088][   T30] audit: type=1800 audit(1776718789.825:1758): pid=10564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13120" name="bus" dev="tmpfs" ino=2305 res=0 errno=0
[ 1540.566104][T10572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13122'.
[ 1540.842047][T10584] syzkaller0: entered promiscuous mode
[ 1540.847914][T10584] syzkaller0: entered allmulticast mode
[ 1541.101439][T16612] usb 1-1: USB disconnect, device number 17
[ 1541.107770][T10589] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1542.092025][T10619] syz.8.13136 (10619): drop_caches: 2
[ 1542.116766][   T30] audit: type=1326 audit(1776718791.755:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.0.13138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66479c819 code=0x7fc00000
[ 1542.207387][   T30] audit: type=1326 audit(1776718791.755:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.0.13138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe66479c819 code=0x7fc00000
[ 1542.377499][ T9627] usb 6-1: new full-speed USB device number 76 using dummy_hcd
[ 1542.569286][ T9627] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 13961, setting to 64
[ 1542.602816][ T9627] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1542.625887][ T9627] usb 6-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00
[ 1542.660138][ T9627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.705098][ T9627] usb 6-1: config 0 descriptor??
[ 1542.727724][T10626] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1542.731478][   T30] audit: type=1326 audit(1776718792.375:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.4.13141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc0f0196597 code=0x0
[ 1543.174913][ T9627] usbhid 6-1:0.0: can't add hid device: -71
[ 1543.175036][ T9627] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1543.187475][ T9627] usb 6-1: USB disconnect, device number 76
[ 1543.353964][T10645] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1543.390602][T10645] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1543.410627][T10645] bond4: (slave macvlan0): Enslaving as a backup interface with an up link
[ 1543.471230][T18753] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1543.509005][T16612] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1543.580824][T10653] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13145'.
[ 1543.591994][T18753] bond4: (slave macvlan0): link status up again after 0 ms
[ 1543.663369][T10653] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13145'.
[ 1543.703055][T18753] bond4: (slave macvlan0): link status up again after 0 ms
[ 1543.717026][T16612] usb 9-1: Using ep0 maxpacket: 8
[ 1543.739246][T18753] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1543.760554][T16612] usb 9-1: config 0 has an invalid interface number: 55 but max is 0
[ 1543.785665][T18753] bond4: (slave macvlan0): link status up again after 0 ms
[ 1543.799354][T16612] usb 9-1: config 0 has no interface number 0
[ 1543.811013][T10661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13148'.
[ 1543.821536][T16612] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1543.837844][T18753] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1543.858990][T16612] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1543.892578][T16612] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1543.921107][T16612] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1543.965408][T16612] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1544.005470][   T37] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1544.028701][T16612] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.077238][T16612] usb 9-1: config 0 descriptor??
[ 1544.112379][T16612] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1544.127527][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1544.237696][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1544.341319][ T9626] usb 9-1: USB disconnect, device number 15
[ 1544.347512][T18751] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1544.372153][ T9626] ldusb 9-1:0.55: LD USB Device #0 now disconnected
[ 1544.457413][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1544.588601][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1545.266182][T18751] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1545.427536][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1545.514902][T10686] netlink: 'syz.0.13154': attribute type 1 has an invalid length.
[ 1545.527724][T16607] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1545.617232][T10689] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1545.676106][T10690] bond5: (slave bridge1): Enslaving as a backup interface with an up link
[ 1545.698500][T16607] usb 9-1: Using ep0 maxpacket: 16
[ 1545.712010][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1545.722092][T16607] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1545.731871][T16607] usb 9-1: config 13 has an invalid interface number: 50 but max is 0
[ 1545.736304][T10686] macvlan1: entered promiscuous mode
[ 1545.740689][T16607] usb 9-1: config 13 has no interface number 0
[ 1545.746592][T10686] macvlan1: entered allmulticast mode
[ 1545.751812][T16607] usb 9-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[ 1545.758616][T10686] bond5: entered promiscuous mode
[ 1545.768019][T16607] usb 9-1: config 13 interface 50 has no altsetting 0
[ 1545.773435][T10686] bridge1: entered promiscuous mode
[ 1545.782284][T16607] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[ 1545.786195][T10686] 8021q: adding VLAN 0 to HW filter on device macvlan1
[ 1545.794200][T16607] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1545.794226][T16607] usb 9-1: Product: syz
[ 1545.794241][T16607] usb 9-1: Manufacturer: syz
[ 1545.794257][T16607] usb 9-1: SerialNumber: syz
[ 1545.798665][T10684] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1545.848011][T10686] bond5: left promiscuous mode
[ 1545.853145][T10686] bridge1: left promiscuous mode
[ 1545.897453][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1545.904916][ T9626] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1546.004735][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.012611][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.020215][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1546.069573][ T9626] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1546.083584][ T9626] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[ 1546.092772][ T9626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1546.105913][ T9626] usb 6-1: config 0 descriptor??
[ 1546.137464][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1546.227531][ T8628] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1546.261012][T16607] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[ 1546.270409][T16607] usb 9-1: MIDIStreaming interface descriptor not found
[ 1546.338865][T16607] usb 9-1: USB disconnect, device number 16
[ 1546.378637][ T8628] usb 1-1: Using ep0 maxpacket: 8
[ 1546.395744][ T9928] udevd[9928]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1546.419474][ T9627] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1546.429095][ T8628] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1546.444146][ T8628] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1546.454748][ T8628] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1546.478141][ T8628] usb 1-1: Product: syz
[ 1546.482650][ T8628] usb 1-1: Manufacturer: syz
[ 1546.497403][ T8628] usb 1-1: SerialNumber: syz
[ 1546.540337][ T9626] usbhid 6-1:0.0: can't add hid device: -71
[ 1546.547936][ T9626] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1546.557763][    T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1546.569794][ T9626] usb 6-1: USB disconnect, device number 77
[ 1546.587407][ T9627] usb 5-1: Using ep0 maxpacket: 32
[ 1546.594380][ T9627] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1546.603026][ T9627] usb 5-1: config 0 has no interface number 0
[ 1546.613721][ T9627] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1546.623148][ T9627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1546.631332][ T9627] usb 5-1: Product: syz
[ 1546.635633][ T9627] usb 5-1: Manufacturer: syz
[ 1546.640895][ T9627] usb 5-1: SerialNumber: syz
[ 1546.648002][ T9627] usb 5-1: config 0 descriptor??
[ 1546.659292][ T9627] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1546.668618][ T9627] usb 5-1: selecting invalid altsetting 1
[ 1546.674499][ T9627] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1546.684224][ T9627] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1546.694762][ T9627] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1546.703369][ T9627] usb 5-1: media controller created
[ 1546.710413][ T8628] usb 1-1: Handspring Visor / Palm OS: port 0, is for unknown use
[ 1546.720902][ T8628] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[ 1546.723967][ T9627] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1546.729599][ T8628] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[ 1546.757380][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1546.764330][    T9] usb 3-1: config 0 has no interfaces?
[ 1546.770189][    T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1546.779621][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1546.792349][    T9] usb 3-1: config 0 descriptor??
[ 1546.858795][ T9627] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1546.865883][ T9627] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1546.873999][ T9627] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1546.913046][ T8628] usb 1-1: palm_os_3_probe - error -71 getting bytes available request
[ 1546.915868][ T9627] usb 5-1: USB disconnect, device number 2
[ 1546.926641][ T8628] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[ 1546.954912][ T8628] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1546.976918][ T8628] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1546.993985][ T8628] usb 1-1: USB disconnect, device number 18
[ 1547.009641][ T8628] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1547.023881][ T8628] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1547.034531][ T8628] visor 1-1:1.0: device disconnected
[ 1547.541744][T10719] syzkaller0: entered promiscuous mode
[ 1547.548470][T10719] syzkaller0: entered allmulticast mode
[ 1547.590555][ T9627] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1547.738306][T10723] syzkaller0: entered promiscuous mode
[ 1547.750911][T10723] syzkaller0: entered allmulticast mode
[ 1547.780242][ T9627] usb 9-1: Using ep0 maxpacket: 32
[ 1547.833024][ T9627] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1547.845087][ T9627] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1547.859367][ T9627] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1547.869678][T10725] binder_alloc: 10724: pid 10724 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1547.872704][ T9627] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1547.895493][ T9627] usb 9-1: config 0 descriptor??
[ 1547.908833][T10725] binder_alloc: 10724: binder_alloc_buf size 64768 failed, no address space
[ 1547.911775][ T9627] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1547.923185][T10725] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168)
[ 1547.976058][ T9627] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1547.992092][ T9627] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1548.827424][ T9627] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1549.000088][ T9627] usb 6-1: Using ep0 maxpacket: 16
[ 1549.034375][ T9627] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1549.090966][ T9627] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1549.145755][ T9627] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1549.186335][ T9627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1549.226913][ T9627] usb 6-1: Product: syz
[ 1549.241613][ T9627] usb 6-1: Manufacturer: syz
[ 1549.254586][ T9627] usb 6-1: SerialNumber: syz
[ 1549.281882][ T9627] usb 6-1: config 0 descriptor??
[ 1549.325416][ T9627] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1549.339524][T18760] net_ratelimit: 27 callbacks suppressed
[ 1549.339544][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1549.374248][ T9627] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1549.506059][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1549.629112][T18751] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1549.757622][T18751] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1549.797709][T10755] kvm: pic: single mode not supported
[ 1549.797730][T10755] kvm: pic: level sensitive irq not supported
[ 1549.818965][T10755] picdev_read: 80 callbacks suppressed
[ 1549.818988][T10755] kvm: pic: non byte read
[ 1549.867528][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1549.900844][T10755] kvm: pic: single mode not supported
[ 1549.900859][T10755] kvm: pic: level sensitive irq not supported
[ 1549.925587][T10755] kvm: pic: non byte read
[ 1549.947047][ T9627] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1549.975675][ T9627] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[ 1549.983436][T10755] kvm: pic: non byte read
[ 1549.991221][T10755] kvm: pic: non byte read
[ 1550.003548][T10755] kvm: pic: non byte read
[ 1550.007637][T18751] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1550.034833][T10755] kvm: pic: non byte read
[ 1550.048415][T10755] kvm: pic: non byte read
[ 1550.058409][T10755] kvm: pic: single mode not supported
[ 1550.058423][T10755] kvm: pic: level sensitive irq not supported
[ 1550.071622][T10755] kvm: pic: non byte read
[ 1550.098801][T10755] kvm: pic: level sensitive irq not supported
[ 1550.098856][T10755] kvm: pic: non byte read
[ 1550.122656][T10755] kvm: pic: non byte read
[ 1550.136201][T10755] kvm: pic: single mode not supported
[ 1550.147442][T23743] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1550.205284][T16607] usb 3-1: USB disconnect, device number 71
[ 1550.337655][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1550.363022][T10760] netlink: 172 bytes leftover after parsing attributes in process `syz.4.13182'.
[ 1550.374798][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13182'.
[ 1550.480192][T18751] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1550.596721][T10764] syzkaller0: entered promiscuous mode
[ 1550.621829][T10764] syzkaller0: entered allmulticast mode
[ 1550.628071][ T9627] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[ 1550.667619][   T37] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1550.844498][ T9627] em28xx 6-1:0.0: couldn't setup AC97 register 2
[ 1550.860978][ T9627] em28xx 6-1:0.0: couldn't setup AC97 register 4
[ 1550.879444][ T9627] em28xx 6-1:0.0: couldn't setup AC97 register 6
[ 1550.887473][ T9627] em28xx 6-1:0.0: couldn't setup AC97 register 54
[ 1550.920497][ T9627] em28xx 6-1:0.0: couldn't setup AC97 register 56
[ 1550.943894][ T9627] usb 6-1: USB disconnect, device number 78
[ 1551.148106][T16607] usb 9-1: USB disconnect, device number 17
[ 1551.154827][T10780] syzkaller0: entered promiscuous mode
[ 1551.160799][T10780] syzkaller0: entered allmulticast mode
[ 1551.416507][T10786] netlink: 'syz.4.13191': attribute type 1 has an invalid length.
[ 1551.505244][T10786] bond1: (slave gretap1): making interface the new active one
[ 1551.525764][T10786] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1551.537739][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13191'.
[ 1551.583377][T10790] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1551.634702][T10790] bond1 (unregistering): Released all slaves
[ 1551.887888][ T9627] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1552.044021][T10808] netlink: 'syz.0.13199': attribute type 1 has an invalid length.
[ 1552.057402][ T9627] usb 6-1: Using ep0 maxpacket: 32
[ 1552.072901][T10808] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1552.083501][ T9626] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1552.110335][ T9627] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[ 1552.131666][T10808] bond6: (slave veth9): Enslaving as an active interface with a down link
[ 1552.137771][ T9627] usb 6-1: config 0 has no interface number 0
[ 1552.157461][ T9627] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1552.163706][T10808] vlan0: entered allmulticast mode
[ 1552.174167][T10808] veth0_to_bond: entered allmulticast mode
[ 1552.180945][T10808] bond6: (slave vlan0): Opening slave failed
[ 1552.194617][ T9627] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1552.213198][ T9627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1552.223058][ T9627] usb 6-1: Product: syz
[ 1552.237878][ T9627] usb 6-1: Manufacturer: syz
[ 1552.247556][ T9627] usb 6-1: SerialNumber: syz
[ 1552.267410][ T9627] usb 6-1: config 0 descriptor??
[ 1552.278193][T10794] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1552.349065][ T9626] usb 3-1: Using ep0 maxpacket: 16
[ 1552.364159][ T9626] usb 3-1: config index 0 descriptor too short (expected 67, got 36)
[ 1552.373213][ T9626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1552.386629][ T9626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1552.396874][ T9626] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[ 1552.417069][ T9626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.433261][ T9626] usb 3-1: config 0 descriptor??
[ 1552.506153][T10794] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1552.653983][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13205'.
[ 1552.797534][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1552.960414][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1552.990012][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1553.022974][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1553.048852][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1553.070689][    T9] usb 1-1: SerialNumber: syz
[ 1553.260276][ T9626] usbhid 3-1:0.0: can't add hid device: -71
[ 1553.273183][ T9626] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1553.301911][ T9626] usb 3-1: USB disconnect, device number 72
[ 1553.332794][    T9] usb 1-1: 0:2 : does not exist
[ 1553.445024][    T9] usb 1-1: USB disconnect, device number 19
[ 1553.832711][ T8628] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0
[ 1553.859591][ T8628] hid-generic 0000:0000:0000.00D4: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1554.124644][T10837] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1554.387637][  T467] net_ratelimit: 27 callbacks suppressed
[ 1554.387663][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1554.517660][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1554.642547][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1554.680987][    T9] hid-generic 0000:0000:0000.00D5: unknown main item tag 0x0
[ 1554.712122][    T9] hid-generic 0000:0000:0000.00D5: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1554.753227][ T9627] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1554.763900][   T37] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1554.804801][ T9627] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[ 1554.837454][ T9626] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1554.849942][ T9627] asix 6-1:0.188: probe with driver asix failed with error -71
[ 1554.869347][T23743] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1554.883567][ T9627] usb 6-1: USB disconnect, device number 79
[ 1554.997552][   T37] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1555.037716][ T9626] usb 9-1: Using ep0 maxpacket: 16
[ 1555.045923][ T9626] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1555.057471][ T9626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1555.070204][ T9626] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1555.081048][ T9626] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1555.092006][ T9626] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1555.106847][ T9626] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1555.108059][T23743] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1555.116720][ T9626] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1555.147451][ T9626] usb 9-1: Manufacturer: syz
[ 1555.163226][ T9626] usb 9-1: config 0 descriptor??
[ 1555.194025][T10857] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1555.227420][   T37] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1555.357804][T18751] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1555.488312][T23743] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1555.509828][ T9626] rc_core: IR keymap rc-hauppauge not found
[ 1555.527151][ T9626] Registered IR keymap rc-empty
[ 1555.532460][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1555.568891][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1555.629911][ T9626] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1555.661571][ T9626] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input221
[ 1555.774993][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1555.808011][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1555.847489][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1555.891283][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1555.918578][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1555.937488][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1555.967443][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1556.037397][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1556.077851][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1556.117541][ T9626] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1556.166243][ T9626] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1556.181414][ T9626] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1556.203648][ T9626] usb 9-1: USB disconnect, device number 18
[ 1556.460494][T10894] syzkaller0: entered promiscuous mode
[ 1556.480952][T10894] syzkaller0: entered allmulticast mode
[ 1556.746517][T10896] syzkaller0: entered promiscuous mode
[ 1556.760139][T10896] syzkaller0: entered allmulticast mode
[ 1556.977622][ T8628] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1557.128638][ T8628] usb 9-1: Using ep0 maxpacket: 16
[ 1557.147780][ T8628] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1557.176693][ T8628] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1557.202017][ T8628] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.224108][ T8628] usb 9-1: Product: syz
[ 1557.240195][ T8628] usb 9-1: Manufacturer: syz
[ 1557.255049][ T8628] usb 9-1: SerialNumber: syz
[ 1557.276284][ T8628] usb 9-1: config 0 descriptor??
[ 1557.290217][ T8628] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1557.305709][ T8628] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 1557.567430][ T9627] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1557.678393][ T9626] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1557.741209][ T9627] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1557.750537][ T9627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.762030][ T9627] usb 1-1: Product: syz
[ 1557.766235][ T9627] usb 1-1: Manufacturer: syz
[ 1557.777392][ T9627] usb 1-1: SerialNumber: syz
[ 1557.896649][ T8628] em28xx 9-1:0.0: chip ID is em2765
[ 1557.944067][ T9626] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1557.957428][ T9626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.977492][ T9626] usb 3-1: Product: syz
[ 1557.994225][ T9626] usb 3-1: Manufacturer: syz
[ 1558.008807][ T9626] usb 3-1: SerialNumber: syz
[ 1558.232493][ T9627] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1558.520289][ T9626] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1558.522071][ T8628] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1558.551909][ T8628] em28xx 9-1:0.0: board has no eeprom
[ 1558.881406][ T8628] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1558.881438][ T8628] em28xx 9-1:0.0: dvb set to bulk mode.
[ 1558.894682][T16607] em28xx 9-1:0.0: Binding DVB extension
[ 1558.911983][ T8628] usb 9-1: USB disconnect, device number 19
[ 1558.913961][ T8628] em28xx 9-1:0.0: Disconnecting em28xx
[ 1559.036949][T16607] em28xx 9-1:0.0: Registering input extension
[ 1559.037183][ T8628] em28xx 9-1:0.0: Closing input extension
[ 1559.082288][ T8628] em28xx 9-1:0.0: Freeing device
[ 1559.089994][ T9932] udevd[9932]: setting mode of /dev/bus/usb/009/019 to 020664 failed: No such file or directory
[ 1559.090146][ T9932] udevd[9932]: setting owner of /dev/bus/usb/009/019 to uid=0, gid=0 failed: No such file or directory
[ 1559.418088][T18751] net_ratelimit: 33 callbacks suppressed
[ 1559.418108][T18751] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1559.494374][ T9627] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1559.526652][ T9627] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[ 1559.539034][T18751] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1559.670051][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1559.752693][ T9627] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO
[ 1559.779952][ T9627] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1559.788451][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1559.806993][ T9627] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1559.820496][ T9627] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[ 1559.836472][ T9627] usb 1-1: USB disconnect, device number 20
[ 1559.907722][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1560.017022][ T9626] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1560.028323][T10948] syzkaller0: entered promiscuous mode
[ 1560.034485][T10948] syzkaller0: entered allmulticast mode
[ 1560.127399][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1560.441837][ T9626] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1560.488577][ T9626] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1560.519377][ T8628] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1560.532544][ T9626] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[ 1560.601766][ T9626] usb 3-1: USB disconnect, device number 73
[ 1560.701262][ T8628] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1560.723241][ T8628] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1560.745266][ T8628] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1560.774600][ T8628] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1560.794854][ T8628] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1560.818457][ T8628] usb 9-1: config 0 descriptor??
[ 1561.298072][ T8628] plantronics 0003:047F:FFFF.00D6: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1561.659328][ T9626] usb 9-1: USB disconnect, device number 20
[ 1562.257560][ T8628] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1562.467382][ T8628] usb 6-1: Using ep0 maxpacket: 32
[ 1562.478966][ T8628] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1562.502724][ T8628] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1562.517945][ T8628] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1562.529318][ T8628] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1562.542653][ T8628] usb 6-1: config 0 descriptor??
[ 1562.562391][ T8628] hub 6-1:0.0: USB hub found
[ 1562.764930][T10985] netlink: 5 bytes leftover after parsing attributes in process `syz.5.13258'.
[ 1562.793517][T10985] .30ªX¹¦D: renamed from gretap0
[ 1562.805266][T10985] .30ªX¹¦D: entered allmulticast mode
[ 1562.819517][ T8628] hub 6-1:0.0: config failed, can't read hub descriptor (err -90)
[ 1563.025265][T10985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1563.052118][T10985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1563.098672][ T9626] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1563.262766][ T9626] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1563.279502][ T9626] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1563.284729][ T8628] usbhid 6-1:0.0: can't add hid device: -71
[ 1563.289970][ T9626] usb 5-1: config 220 interface 0 has no altsetting 0
[ 1563.309226][ T8628] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1563.327378][ T9626] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1563.338049][ T9626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1563.348307][ T9626] usb 5-1: Product: syz
[ 1563.364001][ T9626] usb 5-1: Manufacturer: syz
[ 1563.369825][ T8628] usb 6-1: USB disconnect, device number 80
[ 1563.370384][T16590] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1563.383888][ T9626] usb 5-1: SerialNumber: syz
[ 1563.600137][T16590] usb 1-1: Using ep0 maxpacket: 16
[ 1563.641321][T16590] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[ 1563.649742][T16590] usb 1-1: config 0 has no interface number 0
[ 1563.655867][T16590] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1563.676579][T16590] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1563.696805][T16590] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1563.706550][T16590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1563.714896][T16590] usb 1-1: Product: syz
[ 1563.719370][T16590] usb 1-1: Manufacturer: syz
[ 1563.724308][T16590] usb 1-1: SerialNumber: syz
[ 1563.733456][T16590] usb 1-1: config 0 descriptor??
[ 1563.800790][T11006] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1563.808901][T11006] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1563.953678][ T9626] usb 5-1: USB disconnect, device number 3
[ 1564.034771][T11006] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1564.042783][T11006] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 1564.267381][T16590] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1565.876523][T16590] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[ 1565.937398][T16590] asix 1-1:0.34: probe with driver asix failed with error -71
[ 1566.000236][T16590] usb 1-1: USB disconnect, device number 21
[ 1566.959208][ T9626] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1567.161269][ T9626] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1567.171324][ T9626] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1567.186293][ T9626] usb 1-1: Product: syz
[ 1567.200412][ T9626] usb 1-1: SerialNumber: syz
[ 1567.218539][ T9626] usb 1-1: config 0 descriptor??
[ 1567.504866][ T9626] hso 1-1:0.0: Failed to find BULK eps
[ 1567.734801][T16607] usb 1-1: USB disconnect, device number 22
[ 1568.077428][ T8628] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1568.267734][ T8628] usb 5-1: Using ep0 maxpacket: 32
[ 1568.275782][ T8628] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1568.303858][ T8628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1568.356181][ T8628] usb 5-1: config 0 descriptor??
[ 1568.383203][ T8628] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1568.689695][T16607] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1568.857460][T16607] usb 6-1: Using ep0 maxpacket: 8
[ 1568.868254][T16607] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1568.879288][T16607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1568.911141][T16607] usb 6-1: Product: syz
[ 1568.915671][T16607] usb 6-1: Manufacturer: syz
[ 1568.921965][T16607] usb 6-1: SerialNumber: syz
[ 1568.930559][T16607] usb 6-1: config 0 descriptor??
[ 1569.153006][T16607] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1570.304072][ T8628] gspca_sunplus: reg_w_riv err -71
[ 1570.316422][ T8628] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[ 1570.345769][ T8628] usb 5-1: USB disconnect, device number 4
[ 1570.626531][T16607] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1570.652160][T16607] usb 6-1: USB disconnect, device number 81
[ 1571.030336][T11084] binder_alloc: 11083: pid 11083 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1571.608533][ T9626] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1571.818925][ T9626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1571.861417][ T9626] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1571.871231][ T9626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1571.883321][ T9626] usb 6-1: config 0 descriptor??
[ 1572.104979][ T9626] usbhid 6-1:0.0: can't add hid device: -71
[ 1572.111576][ T9626] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1572.135548][ T9626] usb 6-1: USB disconnect, device number 82
[ 1572.668628][ T9626] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1572.682354][T11103] netlink: 'syz.2.13298': attribute type 2 has an invalid length.
[ 1572.691599][T11103] netlink: 'syz.2.13298': attribute type 2 has an invalid length.
[ 1572.849350][ T9626] usb 6-1: Using ep0 maxpacket: 16
[ 1572.879700][ T9626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1572.916338][ T9626] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[ 1572.925595][ T9626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1572.936377][ T9626] usb 6-1: config 0 descriptor??
[ 1573.442922][ T9626] kye 0003:0458:5016.00D7: control desc unexpectedly large
[ 1573.451348][ T9626] kye 0003:0458:5016.00D7: control desc unexpectedly large
[ 1573.488756][ T9626] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.00D7/input/input223
[ 1573.624227][ T9626] kye 0003:0458:5016.00D7: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0
[ 1573.881122][ T9626] usb 6-1: USB disconnect, device number 83
[ 1574.012330][T11112] syzkaller0: entered promiscuous mode
[ 1574.019633][T11112] syzkaller0: entered allmulticast mode
[ 1574.027584][  T467] net_ratelimit: 33 callbacks suppressed
[ 1574.027605][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1574.044234][ T8628] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1574.174108][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13303'.
[ 1574.197439][ T8628] usb 1-1: Using ep0 maxpacket: 32
[ 1574.204556][ T8628] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 1574.213220][ T8628] usb 1-1: config 0 has no interface number 0
[ 1574.221705][ T8628] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1574.231304][ T8628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1574.241642][ T8628] usb 1-1: Product: syz
[ 1574.246173][ T8628] usb 1-1: Manufacturer: syz
[ 1574.251278][ T8628] usb 1-1: SerialNumber: syz
[ 1574.262236][ T8628] usb 1-1: config 0 descriptor??
[ 1574.718719][ T8628] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1574.730111][ T8628] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1575.430954][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806a12f800: rx timeout, send abort
[ 1575.445678][    C1] vcan0: j1939_tp_rxtimer: 0xffff88806a12d800: rx timeout, send abort
[ 1575.457764][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a12d800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1575.472679][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806a12f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1576.666163][ T8628] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[ 1576.679058][ T8628] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[ 1576.713415][ T8628] usb 1-1: USB disconnect, device number 23
[ 1581.192715][T11122] syz_tun: entered allmulticast mode
[ 1581.198738][T11122] syz_tun: left allmulticast mode
[ 1581.212653][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1581.397576][T18753] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1581.557457][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1581.671468][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1581.775751][T11167] 
[ 1581.778179][T11167] =====================================================
[ 1581.785117][T11167] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1581.792607][T11167] syzkaller #0 Tainted: G             L     
[ 1581.798940][T11167] -----------------------------------------------------
[ 1581.806054][T11167] syz.5.13313/11167 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1581.814048][T11167] ffff88805249bf30 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1581.822885][T11167] 
[ 1581.822885][T11167] and this task is already holding:
[ 1581.830436][T11167] ffff88807a41c440 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x1b/0x50
[ 1581.839086][T11167] which would create a new lock dependency:
[ 1581.845074][T11167]  (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 1581.852772][T11167] 
[ 1581.852772][T11167] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1581.862406][T11167]  (kbd_event_lock){..-.}-{3:3}
[ 1581.862445][T11167] 
[ 1581.862445][T11167] ... which became SOFTIRQ-irq-safe at:
[ 1581.875096][T11167]   lock_acquire+0x106/0x350
[ 1581.879726][T11167]   _raw_spin_lock+0x2e/0x40
[ 1581.884764][T11167]   kbd_event+0xd7/0x42f0
[ 1581.889202][T11167]   input_handle_events_default+0xd4/0x1a0
[ 1581.895146][T11167]   input_pass_values+0x288/0x890
[ 1581.900220][T11167]   input_event_dispose+0x3e5/0x6b0
[ 1581.905531][T11167]   input_event+0x84/0xc0
[ 1581.909961][T11167]   hidinput_hid_event+0x143a/0x1ec0
[ 1581.915358][T11167]   hid_process_event+0x4be/0x620
[ 1581.920393][T11167]   hid_report_raw_event+0xec2/0x1730
[ 1581.925794][T11167]   hid_input_report+0x44b/0x580
[ 1581.930765][T11167]   hid_irq_in+0x47e/0x6d0
[ 1581.935209][T11167]   __usb_hcd_giveback_urb+0x376/0x540
[ 1581.940697][T11167]   dummy_timer+0xbc0/0x4650
[ 1581.945405][T11167]   __hrtimer_run_queues+0x3c0/0xa20
[ 1581.950708][T11167]   hrtimer_run_softirq+0x17a/0x240
[ 1581.955966][T11167]   handle_softirqs+0x22a/0x840
[ 1581.960934][T11167]   run_ksoftirqd+0x36/0x60
[ 1581.965633][T11167]   smpboot_thread_fn+0x541/0xa50
[ 1581.970710][T11167]   kthread+0x388/0x470
[ 1581.975147][T11167]   ret_from_fork+0x514/0xb70
[ 1581.980045][T11167]   ret_from_fork_asm+0x1a/0x30
[ 1581.985099][T11167] 
[ 1581.985099][T11167] to a SOFTIRQ-irq-unsafe lock:
[ 1581.992581][T11167]  (tasklist_lock){.+.+}-{3:3}
[ 1581.992619][T11167] 
[ 1581.992619][T11167] ... which became SOFTIRQ-irq-unsafe at:
[ 1582.005535][T11167] ...
[ 1582.005548][T11167]   lock_acquire+0x106/0x350
[ 1582.012972][T11167]   _raw_read_lock+0x36/0x50
[ 1582.017595][T11167]   __do_wait+0xde/0x740
[ 1582.021953][T11167]   do_wait+0x1e7/0x510
[ 1582.026124][T11167]   kernel_wait+0xd6/0x1c0
[ 1582.030651][T11167]   call_usermodehelper_exec_work+0xbe/0x230
[ 1582.036739][T11167]   process_scheduled_works+0xb5d/0x1860
[ 1582.042391][T11167]   worker_thread+0xa53/0xfc0
[ 1582.047097][T11167]   kthread+0x388/0x470
[ 1582.051366][T11167]   ret_from_fork+0x514/0xb70
[ 1582.056159][T11167]   ret_from_fork_asm+0x1a/0x30
[ 1582.061113][T11167] 
[ 1582.061113][T11167] other info that might help us debug this:
[ 1582.061113][T11167] 
[ 1582.071453][T11167] Chain exists of:
[ 1582.071453][T11167]   kbd_event_lock --> &tty->flow.lock --> tasklist_lock
[ 1582.071453][T11167] 
[ 1582.084348][T11167]  Possible interrupt unsafe locking scenario:
[ 1582.084348][T11167] 
[ 1582.092903][T11167]        CPU0                    CPU1
[ 1582.098286][T11167]        ----                    ----
[ 1582.103747][T11167]   lock(tasklist_lock);
[ 1582.108027][T11167]                                local_irq_disable();
[ 1582.114798][T11167]                                lock(kbd_event_lock);
[ 1582.122190][T11167]                                lock(&tty->flow.lock);
[ 1582.129406][T11167]   <Interrupt>
[ 1582.132877][T11167]     lock(kbd_event_lock);
[ 1582.137573][T11167] 
[ 1582.137573][T11167]  *** DEADLOCK ***
[ 1582.137573][T11167] 
[ 1582.145722][T11167] 6 locks held by syz.5.13313/11167:
[ 1582.151017][T11167]  #0: ffff88807a41c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1582.160802][T11167]  #1: ffff88807a41c2c8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x147/0x1800
[ 1582.171126][T11167]  #2: ffff88807a41c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90
[ 1582.180559][T11167]  #3: ffff88807a41c440 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x1b/0x50
[ 1582.189731][T11167]  #4: ffff88807a41c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90
[ 1582.199258][T11167]  #5: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1582.208347][T11167] 
[ 1582.208347][T11167] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1582.219064][T11167]  -> (kbd_event_lock){..-.}-{3:3} {
[ 1582.224665][T11167]     IN-SOFTIRQ-W at:
[ 1582.228821][T11167]                       lock_acquire+0x106/0x350
[ 1582.235170][T11167]                       _raw_spin_lock+0x2e/0x40
[ 1582.241607][T11167]                       kbd_event+0xd7/0x42f0
[ 1582.247788][T11167]                       input_handle_events_default+0xd4/0x1a0
[ 1582.255446][T11167]                       input_pass_values+0x288/0x890
[ 1582.262230][T11167]                       input_event_dispose+0x3e5/0x6b0
[ 1582.269182][T11167]                       input_event+0x84/0xc0
[ 1582.275293][T11167]                       hidinput_hid_event+0x143a/0x1ec0
[ 1582.282798][T11167]                       hid_process_event+0x4be/0x620
[ 1582.290136][T11167]                       hid_report_raw_event+0xec2/0x1730
[ 1582.297273][T11167]                       hid_input_report+0x44b/0x580
[ 1582.304052][T11167]                       hid_irq_in+0x47e/0x6d0
[ 1582.310219][T11167]                       __usb_hcd_giveback_urb+0x376/0x540
[ 1582.317437][T11167]                       dummy_timer+0xbc0/0x4650
[ 1582.323949][T11167]                       __hrtimer_run_queues+0x3c0/0xa20
[ 1582.331164][T11167]                       hrtimer_run_softirq+0x17a/0x240
[ 1582.338299][T11167]                       handle_softirqs+0x22a/0x840
[ 1582.344905][T11167]                       run_ksoftirqd+0x36/0x60
[ 1582.351160][T11167]                       smpboot_thread_fn+0x541/0xa50
[ 1582.357932][T11167]                       kthread+0x388/0x470
[ 1582.363861][T11167]                       ret_from_fork+0x514/0xb70
[ 1582.370778][T11167]                       ret_from_fork_asm+0x1a/0x30
[ 1582.377784][T11167]     INITIAL USE at:
[ 1582.381788][T11167]                      lock_acquire+0x106/0x350
[ 1582.388057][T11167]                      _raw_spin_lock_irqsave+0x40/0x60
[ 1582.395106][T11167]                      vt_reset_unicode+0x2b/0x160
[ 1582.401889][T11167]                      reset_vc+0x68/0x1b0
[ 1582.407972][T11167]                      vc_init+0x70/0x4a0
[ 1582.413791][T11167]                      con_init+0x377/0x6a0
[ 1582.419807][T11167]                      console_init+0x10b/0x4a0
[ 1582.426155][T11167]                      start_kernel+0x230/0x3e0
[ 1582.432422][T11167]                      x86_64_start_reservations+0x24/0x30
[ 1582.439729][T11167]                      x86_64_start_kernel+0x143/0x1c0
[ 1582.446606][T11167]                      common_startup_64+0x13e/0x147
[ 1582.453477][T11167]   }
[ 1582.456073][T11167]   ... key      at: [<ffffffff8f209ad8>] kbd_event_lock+0x18/0xa0
[ 1582.464077][T11167] -> (&tty->flow.lock){....}-{3:3} {
[ 1582.469397][T11167]    INITIAL USE at:
[ 1582.473390][T11167]                    lock_acquire+0x106/0x350
[ 1582.479569][T11167]                    _raw_spin_lock_irqsave+0x40/0x60
[ 1582.486535][T11167]                    start_tty+0x1b/0x50
[ 1582.492277][T11167]                    n_tty_set_termios+0xa7c/0x10a0
[ 1582.498902][T11167]                    tty_set_termios+0xdb3/0x1800
[ 1582.505335][T11167]                    set_termios+0x566/0x710
[ 1582.511334][T11167]                    tty_mode_ioctl+0x4a6/0x7d0
[ 1582.517585][T11167]                    tty_ioctl+0x9c5/0xde0
[ 1582.523565][T11167]                    __se_sys_ioctl+0xfc/0x170
[ 1582.529715][T11167]                    do_syscall_64+0x15f/0xf80
[ 1582.535947][T11167]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.543478][T11167]  }
[ 1582.545968][T11167]  ... key      at: [<ffffffff9a8114a0>] alloc_tty_struct.__key.35+0x0/0x20
[ 1582.554831][T11167]  ... acquired at:
[ 1582.558667][T11167]    _raw_spin_lock_irqsave+0x40/0x60
[ 1582.564176][T11167]    stop_tty+0x2f/0x140
[ 1582.568662][T11167]    kbd_event+0x2f91/0x42f0
[ 1582.573262][T11167]    input_handle_events_default+0xd4/0x1a0
[ 1582.579249][T11167]    input_pass_values+0x288/0x890
[ 1582.584448][T11167]    input_event_dispose+0x330/0x6b0
[ 1582.589724][T11167]    input_inject_event+0x1dc/0x330
[ 1582.594911][T11167]    evdev_write+0x325/0x4c0
[ 1582.599500][T11167]    vfs_write+0x29a/0xb90
[ 1582.603992][T11167]    ksys_write+0x150/0x270
[ 1582.608486][T11167]    do_syscall_64+0x15f/0xf80
[ 1582.613239][T11167]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1582.619294][T11167] 
[ 1582.621643][T11167] 
[ 1582.621643][T11167] the dependencies between the lock to be acquired
[ 1582.621651][T11167]  and SOFTIRQ-irq-unsafe lock:
[ 1582.635242][T11167]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1582.640533][T11167]      HARDIRQ-ON-R at:
[ 1582.644757][T11167]                         lock_acquire+0x106/0x350
[ 1582.651520][T11167]                         _raw_read_lock+0x36/0x50
[ 1582.658023][T11167]                         __do_wait+0xde/0x740
[ 1582.664271][T11167]                         do_wait+0x1e7/0x510
[ 1582.670414][T11167]                         kernel_wait+0xd6/0x1c0
[ 1582.676730][T11167]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1582.684619][T11167]                         process_scheduled_works+0xb5d/0x1860
[ 1582.692165][T11167]                         worker_thread+0xa53/0xfc0
[ 1582.698755][T11167]                         kthread+0x388/0x470
[ 1582.704818][T11167]                         ret_from_fork+0x514/0xb70
[ 1582.711404][T11167]                         ret_from_fork_asm+0x1a/0x30
[ 1582.718179][T11167]      SOFTIRQ-ON-R at:
[ 1582.722327][T11167]                         lock_acquire+0x106/0x350
[ 1582.728832][T11167]                         _raw_read_lock+0x36/0x50
[ 1582.735413][T11167]                         __do_wait+0xde/0x740
[ 1582.741556][T11167]                         do_wait+0x1e7/0x510
[ 1582.747700][T11167]                         kernel_wait+0xd6/0x1c0
[ 1582.754128][T11167]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1582.762036][T11167]                         process_scheduled_works+0xb5d/0x1860
[ 1582.769656][T11167]                         worker_thread+0xa53/0xfc0
[ 1582.776502][T11167]                         kthread+0x388/0x470
[ 1582.782684][T11167]                         ret_from_fork+0x514/0xb70
[ 1582.789276][T11167]                         ret_from_fork_asm+0x1a/0x30
[ 1582.796029][T11167]      INITIAL USE at:
[ 1582.800092][T11167]                        lock_acquire+0x106/0x350
[ 1582.806598][T11167]                        _raw_write_lock_irq+0x3d/0x50
[ 1582.813447][T11167]                        copy_process+0x2b5e/0x4450
[ 1582.820044][T11167]                        kernel_clone+0x284/0x8f0
[ 1582.826554][T11167]                        user_mode_thread+0x110/0x180
[ 1582.833574][T11167]                        rest_init+0x23/0x300
[ 1582.839640][T11167]                        start_kernel+0x38a/0x3e0
[ 1582.846138][T11167]                        x86_64_start_reservations+0x24/0x30
[ 1582.853512][T11167]                        x86_64_start_kernel+0x143/0x1c0
[ 1582.860527][T11167]                        common_startup_64+0x13e/0x147
[ 1582.867542][T11167]      INITIAL READ USE at:
[ 1582.872033][T11167]                             lock_acquire+0x106/0x350
[ 1582.878966][T11167]                             _raw_read_lock+0x36/0x50
[ 1582.885903][T11167]                             __do_wait+0xde/0x740
[ 1582.892401][T11167]                             do_wait+0x1e7/0x510
[ 1582.898911][T11167]                             kernel_wait+0xd6/0x1c0
[ 1582.905575][T11167]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1582.913819][T11167]                             process_scheduled_works+0xb5d/0x1860
[ 1582.921820][T11167]                             worker_thread+0xa53/0xfc0
[ 1582.928860][T11167]                             kthread+0x388/0x470
[ 1582.935265][T11167]                             ret_from_fork+0x514/0xb70
[ 1582.942197][T11167]                             ret_from_fork_asm+0x1a/0x30
[ 1582.949302][T11167]    }
[ 1582.952059][T11167]    ... key      at: [<ffffffff8e60a058>] tasklist_lock+0x18/0x40
[ 1582.960040][T11167]    ... acquired at:
[ 1582.964007][T11167]    _raw_read_lock+0x36/0x50
[ 1582.968682][T11167]    send_sigurg+0x12b/0x420
[ 1582.973261][T11167]    sk_send_sigurg+0x6c/0x2e0
[ 1582.978389][T11167]    queue_oob+0x42c/0x4f0
[ 1582.982800][T11167]    unix_stream_sendmsg+0xcb1/0xe80
[ 1582.988084][T11167]    ____sys_sendmsg+0x972/0x9f0
[ 1582.993029][T11167]    ___sys_sendmsg+0x2a5/0x360
[ 1582.997977][T11167]    __sys_sendmmsg+0x27c/0x4e0
[ 1583.003081][T11167]    __x64_sys_sendmmsg+0xa0/0xc0
[ 1583.008194][T11167]    do_syscall_64+0x15f/0xf80
[ 1583.013035][T11167]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.019117][T11167] 
[ 1583.021516][T11167]  -> (&f_owner->lock){....}-{3:3} {
[ 1583.026805][T11167]     INITIAL USE at:
[ 1583.030912][T11167]                      lock_acquire+0x106/0x350
[ 1583.037150][T11167]                      _raw_write_lock_irq+0x3d/0x50
[ 1583.043821][T11167]                      __f_setown+0x67/0x370
[ 1583.049796][T11167]                      fcntl_dirnotify+0x3f9/0x6a0
[ 1583.056291][T11167]                      do_fcntl+0x77e/0x1a20
[ 1583.062256][T11167]                      __se_sys_fcntl+0xc8/0x150
[ 1583.068733][T11167]                      do_syscall_64+0x15f/0xf80
[ 1583.075073][T11167]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.082713][T11167]     INITIAL READ USE at:
[ 1583.087138][T11167]                           lock_acquire+0x106/0x350
[ 1583.093903][T11167]                           _raw_read_lock_irq+0x45/0x60
[ 1583.100927][T11167]                           do_fcntl+0x30f/0x1a20
[ 1583.107347][T11167]                           __se_sys_fcntl+0xc8/0x150
[ 1583.114103][T11167]                           do_syscall_64+0x15f/0xf80
[ 1583.120889][T11167]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.129174][T11167]   }
[ 1583.131840][T11167]   ... key      at: [<ffffffff9a531840>] file_f_owner_allocate.__key+0x0/0x20
[ 1583.140855][T11167]   ... acquired at:
[ 1583.144744][T11167]    _raw_read_lock_irqsave+0x48/0x60
[ 1583.150114][T11167]    send_sigio+0x38/0x370
[ 1583.154609][T11167]    kill_fasync+0x24d/0x4d0
[ 1583.159194][T11167]    lease_break_callback+0x26/0x30
[ 1583.164478][T11167]    __break_lease+0x81f/0x1ea0
[ 1583.169408][T11167]    do_dentry_open+0x1010/0x14e0
[ 1583.174518][T11167]    vfs_open+0x3b/0x340
[ 1583.178859][T11167]    path_openat+0x2e08/0x3860
[ 1583.183727][T11167]    do_file_open+0x23e/0x4a0
[ 1583.188394][T11167]    do_sys_openat2+0x113/0x200
[ 1583.193321][T11167]    __x64_sys_openat+0x138/0x170
[ 1583.198515][T11167]    do_syscall_64+0x15f/0xf80
[ 1583.203313][T11167]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.209382][T11167] 
[ 1583.211789][T11167] -> (&new->fa_lock){....}-{3:3} {
[ 1583.216906][T11167]    INITIAL USE at:
[ 1583.220787][T11167]                    lock_acquire+0x106/0x350
[ 1583.226852][T11167]                    _raw_write_lock_irq+0x3d/0x50
[ 1583.233368][T11167]                    fasync_remove_entry+0xf1/0x1c0
[ 1583.240339][T11167]                    pipe_fasync+0xa9/0x1e0
[ 1583.246230][T11167]                    __fput+0x890/0xa60
[ 1583.251762][T11167]                    task_work_run+0x1d9/0x270
[ 1583.257905][T11167]                    exit_to_user_mode_loop+0xed/0x480
[ 1583.264753][T11167]                    do_syscall_64+0x33e/0xf80
[ 1583.270898][T11167]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.278375][T11167]    INITIAL READ USE at:
[ 1583.282699][T11167]                         lock_acquire+0x106/0x350
[ 1583.289218][T11167]                         _raw_read_lock_irqsave+0x48/0x60
[ 1583.296409][T11167]                         kill_fasync+0x199/0x4d0
[ 1583.302920][T11167]                         sock_wake_async+0x137/0x160
[ 1583.309976][T11167]                         unix_write_space+0x3bb/0x470
[ 1583.316994][T11167]                         sock_wfree+0x1d9/0x750
[ 1583.323398][T11167]                         unix_destruct_scm+0x15f/0x1b0
[ 1583.330325][T11167]                         skb_release_head_state+0x358/0x360
[ 1583.337953][T11167]                         __kfree_skb+0x24/0x210
[ 1583.344368][T11167]                         unix_release_sock+0x9ad/0xc80
[ 1583.351405][T11167]                         unix_release+0x92/0xd0
[ 1583.357744][T11167]                         sock_close+0xc3/0x240
[ 1583.363980][T11167]                         __fput+0x44f/0xa60
[ 1583.370131][T11167]                         task_work_run+0x1d9/0x270
[ 1583.376825][T11167]                         exit_to_user_mode_loop+0xed/0x480
[ 1583.384609][T11167]                         do_syscall_64+0x33e/0xf80
[ 1583.391390][T11167]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.399368][T11167]  }
[ 1583.401873][T11167]  ... key      at: [<ffffffff9a531860>] fasync_insert_entry.__key+0x0/0x20
[ 1583.410740][T11167]  ... acquired at:
[ 1583.414590][T11167]    _raw_read_lock_irqsave+0x48/0x60
[ 1583.419965][T11167]    kill_fasync+0x199/0x4d0
[ 1583.424756][T11167]    __start_tty+0x18c/0x220
[ 1583.429333][T11167]    start_tty+0x26/0x50
[ 1583.433686][T11167]    n_tty_set_termios+0xa7c/0x10a0
[ 1583.438887][T11167]    tty_set_termios+0xdb3/0x1800
[ 1583.443898][T11167]    set_termios+0x566/0x710
[ 1583.448472][T11167]    tty_mode_ioctl+0x4a6/0x7d0
[ 1583.453307][T11167]    tty_ioctl+0x9c5/0xde0
[ 1583.457893][T11167]    __se_sys_ioctl+0xfc/0x170
[ 1583.462648][T11167]    do_syscall_64+0x15f/0xf80
[ 1583.467579][T11167]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.473729][T11167] 
[ 1583.476050][T11167] 
[ 1583.476050][T11167] stack backtrace:
[ 1583.481955][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.5.13313 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1583.481981][T11167] Tainted: [L]=SOFTLOCKUP
[ 1583.481987][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1583.482005][T11167] Call Trace:
[ 1583.482018][T11167]  <TASK>
[ 1583.482026][T11167]  dump_stack_lvl+0xe8/0x150
[ 1583.482053][T11167]  __lock_acquire+0x2a94/0x2cf0
[ 1583.482091][T11167]  ? kill_fasync+0x199/0x4d0
[ 1583.482108][T11167]  lock_acquire+0x106/0x350
[ 1583.482128][T11167]  ? kill_fasync+0x199/0x4d0
[ 1583.482146][T11167]  ? ldsem_down_read_trylock+0x13d/0x1b0
[ 1583.482168][T11167]  ? tty_ldisc_ref+0x1c/0x90
[ 1583.482183][T11167]  ? __pfx_ldsem_down_read_trylock+0x10/0x10
[ 1583.482205][T11167]  _raw_read_lock_irqsave+0x48/0x60
[ 1583.482227][T11167]  ? kill_fasync+0x199/0x4d0
[ 1583.482244][T11167]  kill_fasync+0x199/0x4d0
[ 1583.482261][T11167]  ? kill_fasync+0x53/0x4d0
[ 1583.482278][T11167]  ? __pfx_n_tty_write_wakeup+0x10/0x10
[ 1583.482298][T11167]  __start_tty+0x18c/0x220
[ 1583.482314][T11167]  start_tty+0x26/0x50
[ 1583.482328][T11167]  n_tty_set_termios+0xa7c/0x10a0
[ 1583.482352][T11167]  ? __pfx_n_tty_set_termios+0x10/0x10
[ 1583.482371][T11167]  tty_set_termios+0xdb3/0x1800
[ 1583.482388][T11167]  ? __pfx_tty_set_termios+0x10/0x10
[ 1583.482407][T11167]  set_termios+0x566/0x710
[ 1583.482422][T11167]  ? __pfx_set_termios+0x10/0x10
[ 1583.482437][T11167]  ? tty_ldisc_ref_wait+0x25/0x70
[ 1583.482458][T11167]  tty_mode_ioctl+0x4a6/0x7d0
[ 1583.482473][T11167]  ? __pfx_tty_mode_ioctl+0x10/0x10
[ 1583.482488][T11167]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[ 1583.482513][T11167]  ? n_tty_ioctl_helper+0x84/0x4d0
[ 1583.482528][T11167]  ? __pfx_n_tty_ioctl+0x10/0x10
[ 1583.482547][T11167]  tty_ioctl+0x9c5/0xde0
[ 1583.482564][T11167]  ? __pfx_tty_ioctl+0x10/0x10
[ 1583.482580][T11167]  __se_sys_ioctl+0xfc/0x170
[ 1583.482598][T11167]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.482614][T11167]  do_syscall_64+0x15f/0xf80
[ 1583.482630][T11167]  ? trace_irq_disable+0x3b/0x140
[ 1583.482649][T11167]  ? clear_bhb_loop+0x40/0x90
[ 1583.482665][T11167]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1583.482681][T11167] RIP: 0033:0x7fc99d19c819
[ 1583.482696][T11167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1583.482710][T11167] RSP: 002b:00007fc99e026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1583.482727][T11167] RAX: ffffffffffffffda RBX: 00007fc99d416090 RCX: 00007fc99d19c819
[ 1583.482739][T11167] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004
[ 1583.482749][T11167] RBP: 00007fc99d232c91 R08: 0000000000000000 R09: 0000000000000000
[ 1583.482760][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1583.482770][T11167] R13: 00007fc99d416128 R14: 00007fc99d416090 R15: 00007fc99d53fa48
[ 1583.482786][T11167]  </TASK>
[ 1583.790152][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1583.955295][T18753] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1584.067336][T16590] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1584.097383][T23743] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1584.207409][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1584.237374][T16590] usb 1-1: Using ep0 maxpacket: 32
[ 1584.245597][T16590] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1584.267363][T16590] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1584.292920][T16590] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1584.305043][T16590] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1584.318643][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1584.326499][ T9626] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1584.338670][T16590] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1584.348026][T16590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1584.356139][T16590] usb 1-1: Product: syz
[ 1584.360972][T16590] usb 1-1: Manufacturer: syz
[ 1584.365884][T16590] usb 1-1: SerialNumber: syz
[ 1584.376174][    C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1584.385323][T16590] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input224
[ 1584.437455][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1584.477670][ T9626] usb 3-1: Using ep0 maxpacket: 8
[ 1584.484467][ T9626] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1584.495300][ T9626] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00
[ 1584.504765][ T9626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1584.519312][ T9626] usb 3-1: config 0 descriptor??
[ 1584.528270][ T9626] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1584.597333][T16590] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1584.605882][T16590]  (id 0x00)
[ 1584.657360][T16590] rc_core: IR keymap rc-imon-pad not found
[ 1584.663443][T16590] Registered IR keymap rc-empty
[ 1584.671568][T16590] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1584.682460][T16590] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1584.798005][T16590] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0
[ 1584.810444][T16590] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input225
[ 1584.825029][T16590] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:24> initialized
[ 1584.843629][T16590] usb 3-1: USB disconnect, device number 74
[ 1585.955163][T11175] imon:send_packet: task interrupted
[ 1585.962915][T11175] imon:send_packet: packet tx failed (-512)
[ 1585.969796][T11175] imon:vfd_write: send packet #3 failed
[ 1585.976283][T11175] imon:send_packet: packet tx failed (-32)
[ 1585.982602][T11175] imon:vfd_write: send packet #0 failed
[ 1585.994662][T16612] usb 1-1: USB disconnect, device number 24
[ 1586.237491][T18760] net_ratelimit: 15 callbacks suppressed
[ 1586.237513][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1586.357548][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1586.467425][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1586.577453][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1586.687477][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1586.797489][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1586.907429][   T13] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1587.017478][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1587.127487][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1587.247450][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1591.267413][T18760] net_ratelimit: 35 callbacks suppressed
[ 1591.267436][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1591.387406][  T467] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1591.497402][T18760] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1591.617417][T18753] bond4: (slave macvlan0): failed to get link speed/duplex
[ 1591.727470][T18753] bond4: (slave macvlan0): failed to get link speed/duplex