last executing test programs:

19m10.989664235s ago: executing program 32 (id=1408):
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
timer_delete(r0)

14m0.76490152s ago: executing program 33 (id=4352):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file4\x00', 0x100, 0x74e)
openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb)
read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020)

14m0.743563605s ago: executing program 34 (id=4353):
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

13m33.877481074s ago: executing program 35 (id=4532):
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

12m58.689093502s ago: executing program 36 (id=4796):
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0xd, 0x1, 0x1, 0x3, 0xe, 0x1, 0x6d, 0xf2, 0x8, 0x7, 0x6d, 0xfe, 0x0, 0x6, 0x1, 0x9}})
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="400c15"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="4008ce000000"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0})

12m26.021948689s ago: executing program 37 (id=5068):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x3b, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)

11m46.325576263s ago: executing program 38 (id=5367):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x20b8a0, 0x0, 0x3c, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

11m21.320362226s ago: executing program 39 (id=5528):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000000000000200fffd0900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000007"], 0x68}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

10m28.781409671s ago: executing program 40 (id=5889):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x8, 0x4)

10m9.231424595s ago: executing program 41 (id=6042):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000140), 0x12)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)

9m54.417259743s ago: executing program 42 (id=6116):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00')
read$FUSE(r1, &(0x7f00000059c0)={0x2020}, 0x2020)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020)

9m27.568143551s ago: executing program 43 (id=6320):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/power/pm_debug_messages', 0x1, 0x5)
unshare(0x24060400)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

8m40.718530701s ago: executing program 3 (id=6652):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000400)="a6c68f1b", 0xfff7}, {0x0}], 0x2)

8m40.549131171s ago: executing program 3 (id=6653):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x6)
fchdir(r1)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, 0x0, 0x30, 0xf}])

8m40.302674824s ago: executing program 3 (id=6655):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000240)={0x3, 0x2c5, 0x4, 0x7, 0x4, 0x6})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0xf0, 0x0, 0x0, 0x407, 0x1, 0x86, 0x2, 0xe7, 0xfc, 0x2, 0x2, 0x0, 0x7, 0x4, 0x7, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

8m39.963749847s ago: executing program 3 (id=6656):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

8m39.241628811s ago: executing program 3 (id=6658):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa)
ioctl$TCSETA(r0, 0x5406, &(0x7f00000013c0)={0x4, 0x7, 0xfffd, 0x7f, 0x14, "40999f49f937a4fd"})

8m36.638228114s ago: executing program 3 (id=6665):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000040)=0x84)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x81, 0x10}, 0x90)

8m35.815240291s ago: executing program 44 (id=6665):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000040)=0x84)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x81, 0x10}, 0x90)

7m49.753677019s ago: executing program 6 (id=7001):
socket(0x2b, 0x1, 0x1)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x8, 0x64, 0x9})

7m49.394340997s ago: executing program 6 (id=7006):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0x114}}, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, 0x0)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
r1 = syz_open_pts(r0, 0x800)
r2 = dup3(r1, r0, 0x0)
read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85)

7m48.508043701s ago: executing program 6 (id=7013):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x5, r1, 0x0, &(0x7f000000d000/0x1000)=nil, 0x1000, 0x57})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)="d9", 0x1, 0xe})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x70e})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x2, r1, 0x0, &(0x7f000000b000/0x4000)=nil, 0x4000, 0x3})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000800)="e67a", 0x2, 0x4c})

7m48.434887909s ago: executing program 6 (id=7015):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x208000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3c, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(r1, &(0x7f0000000640)='\x00', 0x89901)

7m47.509296937s ago: executing program 6 (id=7023):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f000000c200)={0x2020}, 0x2020)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64)
sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x40)

7m47.373369987s ago: executing program 6 (id=7024):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

7m47.014016151s ago: executing program 45 (id=7024):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

7m7.064940209s ago: executing program 8 (id=7289):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xffffc000)
r0 = userfaultfd(0x80001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})

7m6.790693027s ago: executing program 8 (id=7291):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r1})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000480)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1})

7m6.590526596s ago: executing program 8 (id=7293):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

7m6.344805884s ago: executing program 8 (id=7298):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x234)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4)

7m6.130919133s ago: executing program 8 (id=7301):
fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000d80)="f2435f0100088000008508004dae", 0xe, 0x44885, &(0x7f0000000100)={0x11, 0x4, r2, 0x1, 0xc0, 0x6, @random="7c5f85b15e25"}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

7m5.597156212s ago: executing program 8 (id=7309):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2)

7m5.1100754s ago: executing program 46 (id=7309):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2)

5m34.394727733s ago: executing program 2 (id=7971):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050)

5m34.237056934s ago: executing program 2 (id=7974):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x7a}, 0x8)

5m34.047828671s ago: executing program 2 (id=7976):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0x0, 0x7f, 0x44233, 0x7, 0x5, 0x941, 0x8001, 0x1005, 0xc, 0x200000000000005, 0x0, 0xfffffdfffffffffd], 0x200000, 0x80300})
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m33.564472997s ago: executing program 2 (id=7980):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0/../file0/../file0/file0\x00', 0x4)

5m32.529149795s ago: executing program 2 (id=7988):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x1, 0x3], 0x0, 0x8340})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m32.110802845s ago: executing program 2 (id=7991):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x8, 0x0, 0x80000002, 0xfffffffffffffffc, 0x1, 0xfffffffffffff844, 0x0, 0x1, 0x0, 0x3fffffffffffe, 0x8000000000000001, 0x2, 0x1, 0x4], 0xeeef0000, 0xfb40})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x3)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x400000b2, 0xbc9faef6, 0xbf}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m31.669270428s ago: executing program 47 (id=7991):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x8, 0x0, 0x80000002, 0xfffffffffffffffc, 0x1, 0xfffffffffffff844, 0x0, 0x1, 0x0, 0x3fffffffffffe, 0x8000000000000001, 0x2, 0x1, 0x4], 0xeeef0000, 0xfb40})
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)=0x3)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x400000b2, 0xbc9faef6, 0xbf}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m37.499248499s ago: executing program 5 (id=9457):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800)

1m35.873161966s ago: executing program 5 (id=9462):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m35.495602229s ago: executing program 5 (id=9467):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x6040, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x2)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x7)
landlock_restrict_self(r1, 0x9)
landlock_restrict_self(r0, 0xa)
landlock_restrict_self(r0, 0x1)
landlock_restrict_self(r1, 0x6)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x6)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)

1m35.355430619s ago: executing program 5 (id=9468):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240)=0x24)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1})
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x40, 0x17, 0x4, 0x4, 0x0, 0x5ff2, 0x0})

1m34.906024184s ago: executing program 5 (id=9472):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
socket(0x10, 0x803, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x10, r2}, 0x10)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0x2000000, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x3, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d38, 0xffffff01, 0x6, 0x4, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x6a, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xc71, 0x7, 0x3, 0x8, 0xcc74, 0x80000002, 0x23f, 0x5, 0xa, 0x0, 0x80008071, 0x7ff, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x7fffffff, 0x6, 0x4, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x3faee93c, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000047, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0x8, 0x5, 0x74, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab0, 0x47, 0x9, 0x1, 0xfe000000, 0xffff, 0x8, 0x4, 0x9, 0x3, 0x6, 0x9, 0x7ff, 0x9, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0xc, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x4, 0x20000008, 0x2, 0x6d01, 0x6, 0x38, 0x9ce, 0x2, 0x83, 0x3, 0x6, 0x7, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x7, 0xac8, 0xbf, 0xa586, 0x0, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x1, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0xa544, 0xb, 0xb, 0x938, 0x80006, 0xe23, 0x7fffffff, 0xb9, 0xce8, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x8087fff, 0xffff, 0x9, 0xfffffffe, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0x3, 0x80000000, 0xffffffff, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x2, 0x0, 0x4, 0x5, 0xb1e, 0xd3, 0x200, 0xa, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m34.488551402s ago: executing program 5 (id=9478):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x2, 0x1ff, 0x0, 0x0, 0x7, 0x4, 0x3, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0xc, 0x9, 0x3d3b, 0x200, 0xb6, 0x400, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004061}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4)

1m19.42698359s ago: executing program 48 (id=9478):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x2, 0x1ff, 0x0, 0x0, 0x7, 0x4, 0x3, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0xc, 0x9, 0x3d3b, 0x200, 0xb6, 0x400, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004061}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4)

7.347053629s ago: executing program 4 (id=9864):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r2})
dup3(r1, r2, 0x80000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3})
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)
mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r7, 0x3000001, 0x11, r6, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000240)={0x5, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9, r6})

7.04013008s ago: executing program 4 (id=9866):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000000100)=""/53, 0x0, 0x30000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000})
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1)

6.010327612s ago: executing program 4 (id=9873):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8)
listen(r0, 0x2b4b)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)

5.622381047s ago: executing program 1 (id=9875):
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_add_vcpu$x86(r3, &(0x7f00000008c0)={0x0, 0x0})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
r4 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40})
ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x3, 0x31237648, 0x6, 0x2, 0x80}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x40, 0x800000003, 0x208, 0x409, 0x8, 0x80, 0x11, 0x4, 0x8000000000000000, 0x2, 0x0, 0x3, 0x2, 0x3, 0xffffffffffffffff], 0x0, 0x194d40})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.40025734s ago: executing program 1 (id=9876):
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000080000000900000006"], 0x50)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = epoll_create(0x3ff)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x20000008})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c5fe68bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8ba58502975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418})
fsopen(&(0x7f0000000000)='adfs\x00', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

5.051274889s ago: executing program 4 (id=9878):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$FUSE_INIT(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f00000000c0)='!', 0xffffff49, 0x3000000000000500}])
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

4.832232065s ago: executing program 7 (id=9880):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r2 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.670290368s ago: executing program 7 (id=9881):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_usb_connect(0x4, 0xf4, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r1, &(0x7f0000000bc0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "7b96a0", 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x3, 0x0, 0x0, 0xff9f, 0x3, 0x1, 0x4e20, 0x4e24, 0x4, 0x4, 0x0, 0x0, 0x1}}}}}}, 0x5e)

4.448145805s ago: executing program 1 (id=9882):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c)
r3 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x1, 0x4, 0x20})

4.15803405s ago: executing program 4 (id=9883):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0102030109021b00020000000009046f0000aad823000904"], 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x23, 0x16, {0x16, 0x31, "d0c41d65c4afbc55baab997333ff6190f1d1cf93"}}, &(0x7f00000000c0)={0x0, 0x3, 0x26, @lang_id={0x4, 0x3, 0x2009}}}, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0xd, 0xf7, "31db99aadd09f1377154c3b6b0df94db9b9af7547fced921731be933336c8037eb1eb71f94e3dd1bde5dad271cb2e524ff86711419032f8642768f037e1540adb7cb044af9aace365d2c57d964d11cae7970fb1073aa62df84e21841a77df6c1ea19f19f4d2e2a420f650732f8d1a88328c8dc29eb5bf7c639f25feeee674f490c39ccb5f5c69a4cfeefe81a1069260b5c1fa801d9ca5bd0f9d7f6aaa5f258a6c31ffaedb3e2b0bac9ceb67724450ea3e69c15850fe1d30cbe4359a696a6dc84292c921d92de97f7960cc5af3050572d8d8eb6aef4586173edd7978c192a3f7c8ff3917e1eb8d34226932cf18a5b9878a7d1088a6a4bd6"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x9b}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0xc0, 0x5, 0x1, "8a"}, &(0x7f0000000340)={0x40, 0x5, 0x4, "da3b78e8"}})
syz_usb_control_io$printer(r2, &(0x7f0000000000)={0x14, &(0x7f0000000440)={0x20, 0xd, 0x38, {0x38, 0x1, "59167e1d031b4bbfc015b51f62f82fdded90c0e76ac5458dffe6c78678df4ea989e2bd98f7b3299a02d1b0fac1bc8e8e481c6da09457"}}, &(0x7f00000004c0)={0x0, 0x3, 0x87, @string={0x87, 0x3, "41e80fcddbb2ede78aa50737cd02fc930d5f34d8af655eef26da7c2ab31fed9002eb67ee71fb8ff449ffc8f713671ea6b0c2c5c88e4fdca496a4cb10f54d3f612dde59d1b1d0c7677e82ecef35a09bf30c77528a98636c82142c897fcfac7f93549ba2f46525670943db130cad571d99646f7a3e808daa71fc94c2d3943b5b195ada3dd291"}}}, 0x0)
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)

3.585043131s ago: executing program 7 (id=9884):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x30}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
r2 = pidfd_getfd(r1, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
pidfd_getfd(r2, r2, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000300)={'\be\f\x00', 0x3, 0x5, 0xb7, 0x1, 0x20c, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000007000003000000ff7f00"]})
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "5a060040", "0725eade", "e4eecc1a", ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.053386386s ago: executing program 1 (id=9886):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0)

2.85698173s ago: executing program 0 (id=9887):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0xc000)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r4, 0x2, 0x10}, 0xc)

2.847235676s ago: executing program 9 (id=9888):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc0008c0)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000180)="c992fe2b4236aa716c6447e793f5", 0xe, 0x40000, &(0x7f0000000200)={0x11, 0xc, r3, 0x1, 0x8, 0x6, @remote}, 0x14)

2.628607063s ago: executing program 0 (id=9889):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xe2115aaaaef6dd8a, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]})
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x6, 0x501000)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = syz_io_uring_setup(0x18f9, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000001280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20)
connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180))

2.559574s ago: executing program 9 (id=9890):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000002400)="80100280008fa1c7d800210ee7d5", 0xe, 0x20004853, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14)

2.460128712s ago: executing program 9 (id=9891):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r1)
eventfd2(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xb}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}]}, 0x3c}}, 0x24000004)

2.374843318s ago: executing program 0 (id=9892):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096})
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

2.341339505s ago: executing program 9 (id=9893):
unshare(0x2c020400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0)
r3 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181)
ftruncate(r3, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

1.99165902s ago: executing program 1 (id=9894):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000880)={0x400, "340b7832ceefef31b8e62d8c25f58fad9987ffe93bbabd18cf501922de974a27", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"24000100030000000000f4ffff00", r4})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x8, 0x0, 0x7fffffff}]})
close_range(r5, 0xffffffffffffffff, 0x0)

1.854001047s ago: executing program 1 (id=9895):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f00000006c0)={0x34, &(0x7f0000000200)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0xef97924dfeb2ce30, 0x18}, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000014c0)={0x44, &(0x7f0000001240)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.453555912s ago: executing program 0 (id=9896):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069d481, 0x81, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}])
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0)
dup3(r2, r0, 0x0)

1.415716736s ago: executing program 9 (id=9897):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50)

1.099225715s ago: executing program 0 (id=9898):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="02", 0x1}, {0x0}, {&(0x7f00000006c0)}], 0x3}, 0x40000c4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x2000000002, 0x4, 0x81, 0x9c2, 0x5, 0x1006, 0xc, 0x6, 0x8000, 0x1], 0x1000, 0xc2302})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

826.343387ms ago: executing program 7 (id=9899):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x5, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendto$inet(r1, &(0x7f0000000040)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x3)

413.205313ms ago: executing program 9 (id=9900):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000))
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$int_in(r2, 0x5452, &(0x7f0000001080)=0x3)
write(r2, &(0x7f0000000080)='g', 0x1)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"})

304.383852ms ago: executing program 7 (id=9901):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

227.700434ms ago: executing program 4 (id=9902):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
read(r0, &(0x7f00000002c0)=""/153, 0x99)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xf2733000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="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", 0xf44}], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40)

41.340021ms ago: executing program 7 (id=9903):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000040)="260000002200470105000007000007000000000000001f000a4a51f1ee839cd53400b017e924", 0x26)
connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
write(r1, &(0x7f0000000000)='\"', 0xfdef)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1)

0s ago: executing program 0 (id=9904):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xffffffffffffff91, 0x0}, &(0x7f0000000240)=0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 2-1: Manufacturer: syz
[ 1195.396379][T25298] usb 2-1: SerialNumber: syz
[ 1195.403375][T25298] usb 2-1: config 0 descriptor??
[ 1195.415658][T25298] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1195.514580][ T5953] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1195.674456][ T5953] usb 1-1: Using ep0 maxpacket: 32
[ 1195.690310][ T5953] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[ 1195.716707][ T5953] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1195.744875][ T5953] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1195.763156][ T5953] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1195.777706][ T5953] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1195.793961][ T5953] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1195.807271][T32675] binder: 32674:32675 ioctl c0306201 2000000003c0 returned -14
[ 1195.815562][ T5953] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1195.835025][ T5953] usb 1-1: Product: syz
[ 1195.844083][ T5953] usb 1-1: Manufacturer: syz
[ 1195.855997][ T5953] usb 1-1: SerialNumber: syz
[ 1195.861535][T25298] gspca_sunplus: reg_r err -71
[ 1195.885485][ T5953] usb 1-1: config 0 descriptor??
[ 1195.897755][T25298] usb 2-1: USB disconnect, device number 99
[ 1195.919679][ T5953] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1195.954010][ T5953] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1196.120325][ T2173] usb 1-1: USB disconnect, device number 119
[ 1196.126556][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[ 1196.140678][ T2173] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[ 1196.185412][T12515] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1196.345013][T12515] usb 6-1: Using ep0 maxpacket: 32
[ 1196.356648][T12515] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1196.364888][T12515] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1196.375472][T12515] usb 6-1: config 0 has no interface number 0
[ 1196.381688][T12515] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1196.392838][T12515] usb 6-1: config 0 interface 1 has no altsetting 0
[ 1196.402235][T12515] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1196.411759][T12515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.419952][T12515] usb 6-1: Product: syz
[ 1196.424291][T12515] usb 6-1: Manufacturer: syz
[ 1196.429187][T12515] usb 6-1: SerialNumber: syz
[ 1196.437135][T12515] usb 6-1: config 0 descriptor??
[ 1196.526748][T32682] kvm: requested 18438 ns i8254 timer period limited to 200000 ns
[ 1196.536231][T32682] kvm: requested 103923 ns i8254 timer period limited to 200000 ns
[ 1196.546357][T32682] kvm: requested 135771 ns i8254 timer period limited to 200000 ns
[ 1196.556824][T32682] kvm: requested 11733 ns i8254 timer period limited to 200000 ns
[ 1196.572967][T32682] kvm: requested 129066 ns i8254 timer period limited to 200000 ns
[ 1196.583265][T32682] kvm: requested 137447 ns i8254 timer period limited to 200000 ns
[ 1196.595357][T32682] kvm: requested 130742 ns i8254 timer period limited to 200000 ns
[ 1196.605919][T32682] kvm: requested 25142 ns i8254 timer period limited to 200000 ns
[ 1196.614142][T32682] kvm: requested 189409 ns i8254 timer period limited to 200000 ns
[ 1196.622343][T32682] kvm: requested 194438 ns i8254 timer period limited to 200000 ns
[ 1197.383888][T12515] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1197.443496][T12515] cx231xx 6-1:0.1: Not found matching IAD interface
[ 1197.512957][T12515] usb 6-1: USB disconnect, device number 71
[ 1198.381273][T32726] netlink: 'syz.9.9028': attribute type 1 has an invalid length.
[ 1198.487055][T32726] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1198.536098][T32728] fuse: Bad value for 'fd'
[ 1198.569648][T32730] bond2: (slave geneve2): making interface the new active one
[ 1198.626451][T32730] bond2: (slave geneve2): Enslaving as an active interface with an up link
[ 1200.041348][  T302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9044'.
[ 1200.064067][  T302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9044'.
[ 1200.085748][  T302] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9044'.
[ 1200.116482][  T308] xt_hashlimit: size too large, truncated to 1048576
[ 1200.861288][  T322] program syz.1.9050 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1201.514461][T12515] usb 10-1: new high-speed USB device number 53 using dummy_hcd
[ 1201.714450][T12515] usb 10-1: Using ep0 maxpacket: 32
[ 1201.730303][T12515] usb 10-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config
[ 1201.767401][T12515] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1201.813282][T12515] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1201.837263][T12515] usb 10-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1201.877308][T12515] usb 10-1: Product: syz
[ 1201.910970][T12515] usb 10-1: Manufacturer: syz
[ 1201.935396][T12515] usb 10-1: SerialNumber: syz
[ 1201.973596][T12515] usb 10-1: config 0 descriptor??
[ 1202.234996][T12515] usb 10-1: USB disconnect, device number 53
[ 1202.326297][  T346] binder: 345:346 ioctl c0306201 200000000080 returned -14
[ 1202.378432][  T346] binder: 345:346 ioctl c0306201 2000000003c0 returned -14
[ 1202.562742][  T349] tipc: Cannot configure node identity twice
[ 1203.585069][ T5953] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1203.755346][ T5953] usb 1-1: Using ep0 maxpacket: 8
[ 1203.776502][ T5953] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1203.818362][ T5953] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1203.861516][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.903222][ T5953] usb 1-1: Product: syz
[ 1203.922729][ T5953] usb 1-1: Manufacturer: syz
[ 1203.953552][ T5953] usb 1-1: SerialNumber: syz
[ 1203.980579][ T5953] usb 1-1: config 0 descriptor??
[ 1204.031617][ T5953] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1204.337475][  T398] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1204.956341][  T423] loop9: detected capacity change from 0 to 4096
[ 1205.210924][  T432] syzkaller0: entered promiscuous mode
[ 1205.218215][ T5828] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1205.233103][  T432] syzkaller0: entered allmulticast mode
[ 1205.404519][ T5828] usb 6-1: Using ep0 maxpacket: 16
[ 1205.420622][ T5828] usb 6-1: config 6 has an invalid interface number: 152 but max is 3
[ 1205.461556][ T5828] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1205.496186][ T5828] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 4
[ 1205.523823][ T5828] usb 6-1: config 6 has no interface number 0
[ 1205.539097][ T5828] usb 6-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0
[ 1205.555197][ T5828] usb 6-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1205.569104][ T5828] usb 6-1: config 6 interface 152 has no altsetting 0
[ 1205.580589][ T5828] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa
[ 1205.599631][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.624381][ T5828] usb 6-1: Product: syz
[ 1205.631359][ T5828] usb 6-1: Manufacturer: syz
[ 1205.644385][ T5828] usb 6-1: SerialNumber: syz
[ 1205.886314][ T5953] gspca_zc3xx: reg_w_i err -71
[ 1205.919679][ T5828] ushc 6-1:6.152: probe with driver ushc failed with error -71
[ 1206.160945][ T5828] usb 6-1: USB disconnect, device number 72
[ 1206.535748][ T5953] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1206.594102][ T5953] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1206.774447][ T5828] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1206.863370][ T5953] usb 1-1: USB disconnect, device number 120
[ 1206.952370][ T5828] usb 6-1: Using ep0 maxpacket: 16
[ 1206.975239][ T5828] usb 6-1: config 6 has an invalid interface number: 152 but max is 3
[ 1207.006443][ T5828] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1207.025202][ T5828] usb 6-1: config 6 has 1 interface, different from the descriptor's value: 4
[ 1207.034973][ T5828] usb 6-1: config 6 has no interface number 0
[ 1207.042139][ T5828] usb 6-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0
[ 1207.052381][ T5828] usb 6-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1207.068581][ T5828] usb 6-1: config 6 interface 152 has no altsetting 0
[ 1207.085559][ T5828] usb 6-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa
[ 1207.095137][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.104850][ T5828] usb 6-1: Product: syz
[ 1207.110565][ T5828] usb 6-1: Manufacturer: syz
[ 1207.115383][ T5828] usb 6-1: SerialNumber: syz
[ 1207.285895][  T454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9097'.
[ 1207.328189][  T454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9097'.
[ 1207.393251][  T455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9097'.
[ 1207.410089][  T455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9097'.
[ 1207.555048][ T5828] ushc 6-1:6.152: probe with driver ushc failed with error -110
[ 1207.682458][ T5828] usb 6-1: USB disconnect, device number 73
[ 1208.528397][  T481] net_ratelimit: 10 callbacks suppressed
[ 1208.528416][  T481] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[ 1208.614467][ T5828] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1208.654537][ T2173] usb 10-1: new high-speed USB device number 54 using dummy_hcd
[ 1208.784478][ T5828] usb 6-1: Using ep0 maxpacket: 32
[ 1208.803882][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1208.819594][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1208.835359][ T2173] usb 10-1: Using ep0 maxpacket: 32
[ 1208.843178][ T5828] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1208.872513][ T2173] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1208.885898][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1208.896657][ T2173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.930860][ T2173] usb 10-1: Product: syz
[ 1208.936644][ T5828] usb 6-1: config 0 descriptor??
[ 1208.951460][ T2173] usb 10-1: Manufacturer: syz
[ 1208.979177][ T5828] hub 6-1:0.0: USB hub found
[ 1208.983954][ T2173] usb 10-1: SerialNumber: syz
[ 1209.016338][ T2173] usb 10-1: config 0 descriptor??
[ 1209.053068][ T2173] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1209.199854][ T5828] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1209.612457][ T5828] hid_parser_main: 28 callbacks suppressed
[ 1209.639956][ T5828] hid-generic 0003:046D:C31C.009B: unknown main item tag 0x0
[ 1209.698097][ T2173] gspca_ov534_9: reg_w failed -71
[ 1209.716611][ T5828] hid-generic 0003:046D:C31C.009B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0
[ 1210.025427][ T2173] gspca_ov534_9: Unknown sensor 0000
[ 1210.025536][ T2173] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22
[ 1210.126587][ T2173] usb 10-1: USB disconnect, device number 54
[ 1210.750135][  T477] usb 6-1: reset high-speed USB device number 74 using dummy_hcd
[ 1210.968284][  T503] netlink: 'syz.9.9116': attribute type 4 has an invalid length.
[ 1211.018273][  T504] netlink: 'syz.9.9116': attribute type 4 has an invalid length.
[ 1211.540494][ T2173] usb 6-1: USB disconnect, device number 74
[ 1212.774731][ T2173] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 1212.927421][ T2173] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1212.952729][ T2173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1212.991959][ T2173] usb 1-1: config 0 descriptor??
[ 1214.191134][ T2173] usb 1-1: Cannot set MAC address
[ 1214.204926][ T2173] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1214.284718][ T2173] usb 1-1: USB disconnect, device number 121
[ 1215.194493][ T2173] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1215.359780][ T2173] usb 2-1: config 0 has no interfaces?
[ 1215.371915][ T2173] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[ 1215.408189][ T2173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.430820][ T2173] usb 2-1: config 0 descriptor??
[ 1215.708974][  T564] kvm: kvm [563]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[ 1215.754286][  T564] kvm: kvm [563]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[ 1215.860580][T12515] usb 2-1: USB disconnect, device number 100
[ 1216.026187][  T590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9147'.
[ 1216.063030][  T590] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1217.824666][  T611] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9154'.
[ 1217.863287][  T611] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9154'.
[ 1219.784512][ T5828] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1219.946530][ T5828] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1219.974439][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1220.013235][ T5828] usb 2-1: config 0 descriptor??
[ 1220.994517][ T5953] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 1221.163437][ T5953] usb 1-1: Using ep0 maxpacket: 32
[ 1221.172981][ T5953] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1221.193211][ T5953] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1221.214511][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1221.228211][ T5953] usb 1-1: Product: syz
[ 1221.232523][ T5953] usb 1-1: Manufacturer: syz
[ 1221.237996][ T5953] usb 1-1: SerialNumber: syz
[ 1221.258127][ T5953] usb 1-1: config 0 descriptor??
[ 1221.286041][  T660] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9171'.
[ 1221.286867][  T654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1221.363909][  T657] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1634100787 (3268201574 ns) > initial count (1077961280 ns). Using initial count to start timer.
[ 1221.615090][ T2173] usb 1-1: USB disconnect, device number 122
[ 1222.055388][ T5828] usb 2-1: Cannot set autoneg
[ 1222.067104][ T5828] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1222.097030][ T5828] usb 2-1: USB disconnect, device number 101
[ 1222.628293][ T5828] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1222.694740][ T2173] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1222.794974][ T5828] usb 6-1: Using ep0 maxpacket: 32
[ 1222.806651][ T5828] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1222.818354][ T5828] usb 6-1: config 0 has no interfaces?
[ 1222.824258][ T5828] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1222.840245][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1222.852080][ T5828] usb 6-1: config 0 descriptor??
[ 1222.857568][ T2173] usb 5-1: Using ep0 maxpacket: 16
[ 1222.869173][ T2173] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1222.883633][ T2173] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1222.895726][ T2173] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1222.905668][ T2173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1222.913822][ T2173] usb 5-1: Product: syz
[ 1222.918523][ T2173] usb 5-1: Manufacturer: syz
[ 1222.923281][ T2173] usb 5-1: SerialNumber: syz
[ 1222.939979][ T2173] usb 5-1: 0:2 : does not exist
[ 1223.158651][ T2173] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1223.231065][ T5828] usb 6-1: USB disconnect, device number 75
[ 1223.263611][ T2173] usb 5-1: USB disconnect, device number 123
[ 1223.397741][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1223.821351][  T729] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9193'.
[ 1226.524442][ T5828] usb 10-1: new high-speed USB device number 55 using dummy_hcd
[ 1226.680118][ T5828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1226.706082][ T5828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1226.721314][ T5828] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1226.731181][ T5828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1226.743670][ T5828] usb 10-1: config 0 descriptor??
[ 1227.182831][ T5828] cp2112 0003:10C4:EA90.009C: unknown main item tag 0x0
[ 1227.203730][ T5828] cp2112 0003:10C4:EA90.009C: unknown main item tag 0x0
[ 1227.216703][ T5828] cp2112 0003:10C4:EA90.009C: unknown main item tag 0x0
[ 1227.233067][ T5828] cp2112 0003:10C4:EA90.009C: unknown main item tag 0x0
[ 1227.252210][ T5828] cp2112 0003:10C4:EA90.009C: unknown main item tag 0x0
[ 1227.263084][ T5828] cp2112 0003:10C4:EA90.009C: unknown main item tag 0x0
[ 1227.270564][ T5828] cp2112 0003:10C4:EA90.009C: unknown main item tag 0x0
[ 1227.282442][ T5828] cp2112 0003:10C4:EA90.009C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0
[ 1227.378369][ T5828] cp2112 0003:10C4:EA90.009C: Part Number: 0x00 Device Version: 0x00
[ 1227.404472][ T5953] usb 1-1: new full-speed USB device number 123 using dummy_hcd
[ 1227.556828][ T5953] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 1227.565244][ T5953] usb 1-1: config 0 has no interface number 0
[ 1227.571579][ T5953] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1227.583189][ T5953] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1227.597814][ T5953] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1227.607010][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.615190][ T5953] usb 1-1: Product: syz
[ 1227.619440][ T5953] usb 1-1: Manufacturer: syz
[ 1227.624074][ T5953] usb 1-1: SerialNumber: syz
[ 1227.631991][ T5953] usb 1-1: config 0 descriptor??
[ 1227.642750][  T807] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1227.650254][  T807] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1227.889557][  T807] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1227.901116][  T807] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1227.993086][ T5828] cp2112 0003:10C4:EA90.009C: error reading lock byte: -32
[ 1228.038234][ T5828] usb 10-1: USB disconnect, device number 55
[ 1228.119463][ T5953] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1228.131908][ T5953] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1228.224714][  T819] ªªªªªª: renamed from vlan0
[ 1228.898107][  T833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9230'.
[ 1229.566404][ T5953] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71
[ 1229.594977][ T5953] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[ 1229.623150][ T5953] usb 1-1: USB disconnect, device number 123
[ 1231.364542][ T5828] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1231.560087][ T5828] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.589080][ T5828] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1231.602322][ T5828] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1231.615776][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1231.623867][ T5828] usb 6-1: SerialNumber: syz
[ 1231.680282][  T915] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.9259'.
[ 1231.854207][ T5828] usb 6-1: 0:2 : does not exist
[ 1231.981616][ T5828] usb 6-1: USB disconnect, device number 76
[ 1232.072050][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1232.179812][  T939] binder: 938:939 ioctl c0306201 200000000240 returned -14
[ 1232.334474][ T5953] usb 10-1: new high-speed USB device number 56 using dummy_hcd
[ 1232.507000][ T5953] usb 10-1: Using ep0 maxpacket: 16
[ 1232.543825][ T5953] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1232.582618][ T5953] usb 10-1: config 0 has no interfaces?
[ 1232.602003][ T5953] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1232.626850][ T5953] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.672619][ T5953] usb 10-1: config 0 descriptor??
[ 1233.657479][  T980] random: crng reseeded on system resumption
[ 1234.374485][ T5934] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1234.554858][ T5934] usb 5-1: Using ep0 maxpacket: 32
[ 1234.566546][  T980] Unrecognized hibernate image header format!
[ 1234.589605][ T5934] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1234.595718][ T5953] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 1234.642841][  T980] PM: hibernation: Image mismatch: architecture specific data
[ 1234.650727][ T5934] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1234.692697][  T980] Unrecognized hibernate image header format!
[ 1234.713342][ T5934] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1234.725644][  T980] PM: hibernation: Image mismatch: architecture specific data
[ 1234.750394][  T980] Unrecognized hibernate image header format!
[ 1234.757940][ T5934] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1234.782693][  T980] PM: hibernation: Image mismatch: architecture specific data
[ 1234.801392][ T5934] usb 5-1: Product: syz
[ 1234.812751][ T5934] usb 5-1: Manufacturer: syz
[ 1234.814869][ T5953] usb 1-1: Using ep0 maxpacket: 32
[ 1234.852332][ T5953] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[ 1234.890922][ T5953] usb 1-1: config 0 has no interface number 0
[ 1234.915652][ T5934] hub 5-1:4.0: USB hub found
[ 1234.928472][ T5953] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1234.944142][  T997] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1234.969691][ T5953] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1235.007459][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.052905][ T5953] usb 1-1: Product: syz
[ 1235.078490][ T5953] usb 1-1: Manufacturer: syz
[ 1235.098035][ T5934] hub 5-1:4.0: 2 ports detected
[ 1235.108834][ T5953] usb 1-1: SerialNumber: syz
[ 1235.158560][ T5953] usb 1-1: config 0 descriptor??
[ 1235.190272][  T994] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1235.443429][  T994] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1236.000767][T25298] usb 10-1: USB disconnect, device number 56
[ 1236.330110][ T5934] hub 5-1:4.0: activate --> -90
[ 1237.138455][ T5934] hub 5-1:4.0: hub_ext_port_status failed (err = -71)
[ 1237.138852][T25298] usb 5-1: USB disconnect, device number 124
[ 1237.196811][ T5934] usb 5-1-port2: attempt power cycle
[ 1237.502389][ T5953] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1237.541183][ T5953] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1237.586916][ T5953] asix 1-1:0.188: probe with driver asix failed with error -71
[ 1237.635312][ T5953] usb 1-1: USB disconnect, device number 124
[ 1237.910304][ T1018] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9290'.
[ 1237.971327][ T1021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9290'.
[ 1238.062306][ T1018] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[ 1238.132000][ T1021] bond2: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms
[ 1238.298768][ T1028] netem: change failed
[ 1238.669692][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.678953][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.464431][ T5934] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1239.634398][ T5934] usb 6-1: Using ep0 maxpacket: 16
[ 1239.691198][ T5934] usb 6-1: config 0 has no interfaces?
[ 1239.726883][ T5934] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1239.777665][ T5934] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1239.821326][ T5934] usb 6-1: Manufacturer: syz
[ 1239.859307][ T5934] usb 6-1: config 0 descriptor??
[ 1240.380223][ T1051] Set syz1 is full, maxelem 6117 reached
[ 1240.427404][ T5934] usb 6-1: USB disconnect, device number 77
[ 1240.505876][ T1071] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1241.301226][   T30] kauditd_printk_skb: 154 callbacks suppressed
[ 1241.301244][   T30] audit: type=1800 audit(1776855016.270:1332): pid=1087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9306" name="file0" dev="fuse" ino=3 res=0 errno=0
[ 1241.584795][ T5953] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1241.774555][ T5953] usb 5-1: Using ep0 maxpacket: 16
[ 1241.788763][ T5953] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1241.807806][ T1106] kvm: pic: non byte write
[ 1241.825900][ T5953] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1241.847518][ T5953] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1241.859431][ T5953] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1241.870589][ T5953] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1241.879962][ T5953] usb 5-1: config 0 has no interface number 0
[ 1241.886541][ T5953] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1241.898914][ T5953] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1241.909732][ T5953] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1241.920763][ T5953] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1241.936335][ T5953] usb 5-1: config 0 interface 125 has no altsetting 0
[ 1241.943209][ T5953] usb 5-1: config 0 interface 125 has no altsetting 2
[ 1241.963582][ T5953] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1241.988529][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1241.999118][ T5953] usb 5-1: Product: syz
[ 1242.003369][ T5953] usb 5-1: Manufacturer: syz
[ 1242.009546][ T5953] usb 5-1: SerialNumber: syz
[ 1242.040196][ T5953] usb 5-1: config 0 descriptor??
[ 1242.065970][ T5953] usb 5-1: selecting invalid altsetting 2
[ 1242.947162][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1242.981457][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1243.144685][ T5953] get_1284_register timeout
[ 1243.158241][    C0] usb 5-1: async_complete: urb error -104
[ 1243.164165][    C0] usb 5-1: async_complete: urb error -104
[ 1243.365470][ T1148] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9327'.
[ 1243.400991][ T5953] usb 5-1: USB disconnect, device number 3
[ 1243.614934][T25298] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 1243.793042][T25298] usb 1-1: Using ep0 maxpacket: 8
[ 1243.815968][T25298] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1243.840250][T25298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.848840][T25298] usb 1-1: Product: syz
[ 1243.853485][T25298] usb 1-1: Manufacturer: syz
[ 1243.858240][T25298] usb 1-1: SerialNumber: syz
[ 1243.867041][T25298] usb 1-1: config 0 descriptor??
[ 1244.118827][T25298] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1245.077499][ T5934] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[ 1245.236136][ T2173] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1245.273184][ T5934] usb 5-1: config 0 has no interfaces?
[ 1245.309987][ T5934] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1245.348744][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[ 1245.372252][ T5934] usb 5-1: Product: syz
[ 1245.383613][ T5934] usb 5-1: Manufacturer: syz
[ 1245.409053][ T5934] usb 5-1: SerialNumber: syz
[ 1245.429445][ T5934] usb 5-1: config 0 descriptor??
[ 1245.434642][ T2173] usb 6-1: Using ep0 maxpacket: 8
[ 1245.471801][ T2173] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1245.512127][ T2173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.533968][ T2173] usb 6-1: Product: syz
[ 1245.542058][ T2173] usb 6-1: Manufacturer: syz
[ 1245.574778][ T2173] usb 6-1: SerialNumber: syz
[ 1245.624261][ T2173] usb 6-1: config 0 descriptor??
[ 1245.848669][ T1214] loop9: detected capacity change from 0 to 4096
[ 1245.888574][ T2173] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1245.947188][ T5934] usb 5-1: USB disconnect, device number 4
[ 1245.960896][T25298] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1246.002627][T25298] usb 1-1: USB disconnect, device number 125
[ 1246.124520][ T5936] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1246.307776][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1246.330310][ T5936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1246.362492][ T5936] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1246.373031][ T5936] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1246.388927][ T5936] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 1246.401771][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1246.412006][ T5936] usb 2-1: Product: syz
[ 1246.416599][ T5936] usb 2-1: Manufacturer: syz
[ 1246.421461][ T5936] usb 2-1: SerialNumber: syz
[ 1246.644491][ T5934] usb 10-1: new high-speed USB device number 57 using dummy_hcd
[ 1246.656318][ T5936] usb 2-1: Can't get UAC3 power state for id 11
[ 1246.666998][ T5936] usb 2-1: 5:0: failed to get current value for ch 0 (-71)
[ 1246.681461][ T5936] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1246.689980][ T5936] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1246.700394][ T5936] usb 2-1: [5] FU [Generic In Capture Volume] ch = 1, val = 0/1/1
[ 1246.763352][ T5936] usb 2-1: USB disconnect, device number 102
[ 1246.828659][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1246.845802][ T5934] usb 10-1: config 0 has no interfaces?
[ 1246.845841][ T5934] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1246.845865][ T5934] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1246.873844][ T5934] usb 10-1: config 0 descriptor??
[ 1247.120638][ T1216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1247.143776][ T1216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1247.158149][ T5934] usb 10-1: USB disconnect, device number 57
[ 1247.624810][ T5934] usb 10-1: new high-speed USB device number 58 using dummy_hcd
[ 1247.784807][ T5934] usb 10-1: Using ep0 maxpacket: 16
[ 1247.804207][ T5934] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1247.816197][ T5934] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1247.830897][ T5934] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[ 1247.843217][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1247.851441][ T5934] usb 10-1: Product: syz
[ 1247.856149][ T5934] usb 10-1: Manufacturer: syz
[ 1247.860909][ T5934] usb 10-1: SerialNumber: syz
[ 1247.877463][ T5934] usb 10-1: 0:2 : does not exist
[ 1247.905182][ T1238] syzkaller0: entered promiscuous mode
[ 1247.910956][ T1238] syzkaller0: entered allmulticast mode
[ 1247.923179][ T2173] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1247.938526][ T2173] usb 6-1: USB disconnect, device number 78
[ 1248.786388][ T2173] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1248.900004][ T5934] usb 10-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 1248.983538][ T5934] usb 10-1: USB disconnect, device number 58
[ 1248.994993][ T2173] usb 5-1: Using ep0 maxpacket: 16
[ 1249.034995][ T2173] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1249.080559][ T2173] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1249.128804][ T2173] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1249.179995][ T2173] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1249.224901][ T2173] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[ 1249.245689][ T2173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1249.274746][ T2173] usb 5-1: Product: syz
[ 1249.288273][ T2173] usb 5-1: Manufacturer: syz
[ 1249.303523][ T2173] usb 5-1: SerialNumber: syz
[ 1249.568487][ T2173] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[ 1249.848267][ T5953] usb 5-1: USB disconnect, device number 5
[ 1249.892714][ T5953] usblp0: removed
[ 1250.184859][T26620] IPVS: ip_vs_send_async error -101
[ 1250.266728][ T2173] usb 10-1: new high-speed USB device number 59 using dummy_hcd
[ 1250.444426][ T2173] usb 10-1: Using ep0 maxpacket: 16
[ 1250.480178][ T2173] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1250.512398][ T2173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.538813][ T2173] usb 10-1: Product: syz
[ 1250.552392][ T2173] usb 10-1: Manufacturer: syz
[ 1250.569492][ T2173] usb 10-1: SerialNumber: syz
[ 1250.595320][ T2173] usb 10-1: config 0 descriptor??
[ 1250.654507][ T5953] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 1250.816617][ T5953] usb 1-1: Using ep0 maxpacket: 16
[ 1250.861744][ T5953] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1250.924902][ T5953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1250.988725][ T5953] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1251.023679][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1251.049891][ T5953] usb 1-1: Product: syz
[ 1251.062048][ T5953] usb 1-1: Manufacturer: syz
[ 1251.077092][ T5953] usb 1-1: SerialNumber: syz
[ 1251.171447][ T5953] usb 1-1: 0:2 : does not exist
[ 1251.224704][ T5934] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[ 1251.260398][ T2173] dvb_usb_dtv5100 10-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[ 1251.296308][ T2173] usb 10-1: USB disconnect, device number 59
[ 1251.373010][ T5953] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1251.439751][ T5934] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1251.467040][ T5934] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1251.492079][ T5934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1251.514241][ T5934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1251.553631][ T5934] usb 2-1: config 1 has no interface number 0
[ 1251.579898][ T5934] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1251.599836][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1251.634256][ T5934] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[ 1251.703110][ T5953] usb 1-1: USB disconnect, device number 126
[ 1251.841134][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1252.138498][ T5934] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[ 1252.171303][ T5934] snd_usb_pod 2-1:1.1: invalid control EP
[ 1252.194160][ T5934] snd_usb_pod 2-1:1.1: cannot start listening: -22
[ 1252.221246][ T5934] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[ 1252.257371][ T5934] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1252.474493][ T5953] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1252.654797][ T5953] usb 1-1: Using ep0 maxpacket: 16
[ 1252.677697][ T5953] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1252.710247][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1252.739161][ T5953] usb 1-1: Product: syz
[ 1252.763938][ T5953] usb 1-1: Manufacturer: syz
[ 1252.789654][ T5953] usb 1-1: SerialNumber: syz
[ 1252.835303][ T5953] usb 1-1: config 0 descriptor??
[ 1253.151374][ T1293] syzkaller0: entered promiscuous mode
[ 1253.163846][ T1293] syzkaller0: entered allmulticast mode
[ 1253.224738][T25298] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1253.285907][ T5953] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1253.327926][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1253.369980][ T5953] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1253.406117][ T5953] usb 1-1: media controller created
[ 1253.411625][T25298] usb 10-1: Using ep0 maxpacket: 8
[ 1253.438048][T25298] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1253.469063][T25298] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1253.479577][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1253.536471][T25298] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1253.570393][T25298] pvrusb2: **********
[ 1253.581752][T25298] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1253.595281][ T5953] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1253.613437][ T5953] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1253.631513][T25298] pvrusb2: Important functionality might not be entirely working.
[ 1253.645596][ T5953] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1253.659912][T25298] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1253.684240][ T5953] usb 1-1: USB disconnect, device number 127
[ 1253.704784][T25298] pvrusb2: **********
[ 1253.744779][ T2365] pvrusb2: Invalid write control endpoint
[ 1253.788839][T25298] usb 2-1: USB disconnect, device number 103
[ 1253.887599][ T5953] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1253.970569][ T5973] usb 10-1: USB disconnect, device number 60
[ 1254.086301][ T2365] pvrusb2: Invalid write control endpoint
[ 1254.113024][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1254.150031][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1254.177729][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1254.208468][ T2365] pvrusb2: Device being rendered inoperable
[ 1254.223919][ T2365] cx25840 6-0044: Unable to detect h/w, assuming cx23887
[ 1254.241565][ T2365] cx25840 6-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1254.430007][ T2365] pvrusb2: Attached sub-driver cx25840
[ 1254.480392][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1254.528047][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1254.809649][ T1302] delete_channel: no stack
[ 1255.538920][ T1320] loop9: detected capacity change from 0 to 4096
[ 1256.041273][ T1323] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer.
[ 1258.629098][ T5973] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1258.856744][ T5973] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1258.866013][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1258.909516][ T5973] usb 2-1: config 0 descriptor??
[ 1258.942090][ T5973] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1259.974535][T25298] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 1260.147690][T25298] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1260.158811][T25298] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1260.168590][T25298] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.198791][ T5973] gspca_stv06xx: I2C: Read error writing address: -71
[ 1260.208072][T25298] usb 10-1: config 0 descriptor??
[ 1260.225442][ T5973] usb 2-1: USB disconnect, device number 104
[ 1260.239494][T25298] pwc: Askey VC010 type 2 USB webcam detected.
[ 1260.669489][T25298] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1260.678463][T25298] pwc: recv_control_msg error -32 req 02 val 2700
[ 1260.695959][T25298] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1260.703542][T25298] pwc: recv_control_msg error -32 req 04 val 1000
[ 1260.711631][T25298] pwc: recv_control_msg error -32 req 04 val 1300
[ 1260.720410][T25298] pwc: recv_control_msg error -32 req 04 val 1400
[ 1260.728407][T25298] pwc: recv_control_msg error -32 req 02 val 2000
[ 1260.736189][T25298] pwc: recv_control_msg error -32 req 02 val 2100
[ 1260.945572][T25298] pwc: recv_control_msg error -71 req 02 val 2500
[ 1260.958436][T25298] pwc: recv_control_msg error -71 req 02 val 2400
[ 1260.966105][T25298] pwc: recv_control_msg error -71 req 02 val 2600
[ 1260.975652][T25298] pwc: recv_control_msg error -71 req 02 val 2900
[ 1260.982856][T25298] pwc: recv_control_msg error -71 req 02 val 2800
[ 1260.991448][T25298] pwc: recv_control_msg error -71 req 04 val 1100
[ 1260.998804][T25298] pwc: recv_control_msg error -71 req 04 val 1200
[ 1261.064977][T25298] pwc: Registered as video103.
[ 1261.080046][T25298] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input182
[ 1261.109731][T25298] usb 10-1: USB disconnect, device number 61
[ 1261.116098][ T5973] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1261.302596][ T5973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1261.313795][ T5973] usb 2-1: config 0 has no interfaces?
[ 1261.319524][ T5973] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1261.328764][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1261.340254][ T5973] usb 2-1: config 0 descriptor??
[ 1261.518496][ T1369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9402'.
[ 1261.588585][ T1364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1261.614956][ T1364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1261.628655][T25298] usb 2-1: USB disconnect, device number 105
[ 1261.709674][ T1374] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1261.718412][ T1374] bond3: (slave bond4): Enslaving as an active interface with an up link
[ 1261.748514][ T1377] bond3 (unregistering): (slave bond4): Releasing backup interface
[ 1261.768679][ T1377] bond3 (unregistering): Released all slaves
[ 1262.094413][T25298] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1262.194547][ T5973] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1262.264568][T25298] usb 2-1: Using ep0 maxpacket: 8
[ 1262.288394][T25298] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[ 1262.319487][T25298] usb 2-1: config 0 has no interface number 0
[ 1262.342809][T25298] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[ 1262.363505][ T5973] usb 1-1: Using ep0 maxpacket: 16
[ 1262.379266][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1262.396772][T25298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1262.421460][ T5973] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1262.450452][T25298] usb 2-1: config 0 descriptor??
[ 1262.457410][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.498325][ T5973] usb 1-1: Product: syz
[ 1262.511743][ T5973] usb 1-1: Manufacturer: syz
[ 1262.526038][ T5973] usb 1-1: SerialNumber: syz
[ 1262.538930][ T5973] usb 1-1: config 0 descriptor??
[ 1262.558894][ T5973] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1262.569337][ T5973] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1262.596372][T25298] viperboard 2-1:0.143: version 0.00 found at bus 002 address 106
[ 1262.651335][T25298] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[ 1262.651383][T25298] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[ 1262.792112][ T1403] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9412'.
[ 1263.169241][ T5973] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1263.604211][ T5973] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1263.620971][ T5973] em28xx 1-1:0.0: board has no eeprom
[ 1263.904913][ T5973] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1263.940384][ T5973] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1263.965975][ T5953] em28xx 1-1:0.0: Binding DVB extension
[ 1263.995911][ T5973] usb 1-1: USB disconnect, device number 2
[ 1264.037701][ T5973] em28xx 1-1:0.0: Disconnecting em28xx
[ 1264.183706][ T5953] em28xx 1-1:0.0: Registering input extension
[ 1264.202873][ T5973] em28xx 1-1:0.0: Closing input extension
[ 1264.267935][ T5973] em28xx 1-1:0.0: Freeing device
[ 1264.958603][ T2173] usb 2-1: USB disconnect, device number 106
[ 1265.203304][ T1435] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9421'.
[ 1265.293355][ T1435] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9421'.
[ 1265.406920][ T1435] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9421'.
[ 1266.256589][ T5953] usb 10-1: new high-speed USB device number 62 using dummy_hcd
[ 1266.334594][ T2173] usb 6-1: new full-speed USB device number 79 using dummy_hcd
[ 1266.439189][ T5953] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1266.452341][ T5953] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.460802][ T5953] usb 10-1: Product: syz
[ 1266.465987][ T5953] usb 10-1: Manufacturer: syz
[ 1266.470845][ T5953] usb 10-1: SerialNumber: syz
[ 1266.509709][ T2173] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1266.535820][ T2173] usb 6-1: config 0 has no interface number 0
[ 1266.560084][ T2173] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1266.612312][ T2173] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1266.644820][ T2173] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1266.658053][ T2173] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1266.672179][ T2173] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1266.681088][ T2173] usb 6-1: Product: syz
[ 1266.694924][ T2173] usb 6-1: SerialNumber: syz
[ 1266.714881][ T2173] usb 6-1: config 0 descriptor??
[ 1266.726685][ T2173] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 1266.741697][ T2173] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input184
[ 1266.900640][ T5953] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1266.943624][ T5953] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1267.083452][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1267.090889][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1267.092575][T25298] usb 6-1: USB disconnect, device number 79
[ 1267.097871][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1267.133820][T25298] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1267.747212][ T1483] netlink: 'syz.5.9437': attribute type 9 has an invalid length.
[ 1267.755318][ T1483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9437'.
[ 1267.787120][ T1483] macvlan2: entered promiscuous mode
[ 1267.805707][ T1483] syz_tun: entered promiscuous mode
[ 1267.811430][ T1483] macvlan2: entered allmulticast mode
[ 1267.817487][ T1483] syz_tun: entered allmulticast mode
[ 1268.592910][ T5953] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[ 1268.641673][ T5953] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[ 1268.672968][ T5953] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1268.717383][ T5953] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1268.760911][ T5953] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1268.821253][ T5953] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[ 1268.898350][ T5953] usb 10-1: USB disconnect, device number 62
[ 1270.751275][ T1526] syzkaller0: entered promiscuous mode
[ 1270.762555][ T1526] syzkaller0: entered allmulticast mode
[ 1270.964455][ T5936] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1271.156707][ T5936] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1271.166033][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1271.195642][ T5936] usb 5-1: config 0 descriptor??
[ 1273.545732][ T5936] usb 5-1: Cannot set autoneg
[ 1273.551755][ T5936] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1273.568618][ T5936] usb 5-1: USB disconnect, device number 6
[ 1274.244517][   T30] audit: type=1326 audit(1776855049.210:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1551 comm="syz.4.9459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa64b79c819 code=0x0
[ 1275.200895][ T1566] pic_ioport_write: 1 callbacks suppressed
[ 1275.200909][ T1566] kvm: pic: single mode not supported
[ 1276.854621][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1276.883002][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1277.165171][ T5953] usb 2-1: new full-speed USB device number 107 using dummy_hcd
[ 1277.348315][ T5953] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1277.369089][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.399846][ T5953] usb 2-1: Product: syz
[ 1277.416680][ T5953] usb 2-1: Manufacturer: syz
[ 1277.434187][ T5953] usb 2-1: SerialNumber: syz
[ 1277.451169][ T5953] usb 2-1: config 0 descriptor??
[ 1277.683441][ T5953] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1277.782534][ T1610] syzkaller0: entered promiscuous mode
[ 1277.804526][ T1610] syzkaller0: entered allmulticast mode
[ 1277.818223][T12032] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1277.828301][T12032] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1279.173230][ T5953] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1279.222787][ T5953] usb 2-1: USB disconnect, device number 107
[ 1280.045217][T12515] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1280.232246][T12515] usb 2-1: Using ep0 maxpacket: 32
[ 1280.262081][T12515] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[ 1280.270790][T12515] usb 2-1: config 0 has no interface number 0
[ 1280.277807][T12515] usb 2-1: config 0 interface 184 has no altsetting 0
[ 1280.329407][T12515] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1280.349155][T12515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1280.386383][T12515] usb 2-1: Product: syz
[ 1280.390880][T12515] usb 2-1: Manufacturer: syz
[ 1280.397658][T12515] usb 2-1: SerialNumber: syz
[ 1280.413955][T12515] usb 2-1: config 0 descriptor??
[ 1281.088075][T12515] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1281.109518][T12515] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1281.334596][ T1657] create_pit_timer: 5 callbacks suppressed
[ 1281.334638][ T1657] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1281.380967][ T1657] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1281.389895][ T1657] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[ 1281.406042][ T1657] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1281.414126][ T1657] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[ 1281.423184][ T1657] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1281.493830][ T1657] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[ 1281.525937][ T1657] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[ 1281.533998][ T1657] kvm: requested 100571 ns i8254 timer period limited to 200000 ns
[ 1281.543108][ T1657] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[ 1282.588636][T12515] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[ 1282.600561][T12515] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[ 1282.611620][T12515] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[ 1282.646809][T12515] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1282.678654][T12515] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[ 1282.690551][T12515] usb 2-1: USB disconnect, device number 108
[ 1282.899203][ T1674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1283.556002][   T29] usb 10-1: new high-speed USB device number 63 using dummy_hcd
[ 1283.734462][   T29] usb 10-1: Using ep0 maxpacket: 8
[ 1283.742239][   T29] usb 10-1: config 0 has an invalid interface number: 31 but max is 0
[ 1283.764753][   T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1283.775191][   T29] usb 10-1: config 0 has no interface number 0
[ 1283.784412][   T29] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1283.793892][   T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1283.802189][   T29] usb 10-1: Product: syz
[ 1283.806668][   T29] usb 10-1: Manufacturer: syz
[ 1283.811495][   T29] usb 10-1: SerialNumber: syz
[ 1283.829054][   T29] usb 10-1: config 0 descriptor??
[ 1283.857040][   T29] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[ 1283.867588][   T29] uvcvideo 10-1:0.31: No valid video chain found.
[ 1284.070538][   T29] usb 10-1: USB disconnect, device number 63
[ 1285.464558][ T1617] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1285.636809][ T1617] usb 5-1: Using ep0 maxpacket: 32
[ 1285.653947][ T1617] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1285.694116][ T1617] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1285.741483][ T1617] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1285.769458][ T1617] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1285.842285][ T1617] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1285.854845][ T1617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.863050][ T1617] usb 5-1: Product: syz
[ 1285.867862][ T1617] usb 5-1: Manufacturer: syz
[ 1285.872501][ T1617] usb 5-1: SerialNumber: syz
[ 1285.908068][    C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1285.919592][ T1617] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input185
[ 1286.210766][ T1617] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1286.230538][ T1617]  (id 0x00)
[ 1286.340091][ T1617] rc_core: IR keymap rc-imon-pad not found
[ 1286.354458][ T1617] Registered IR keymap rc-empty
[ 1286.390574][ T1617] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1286.414382][ T1617] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1286.475543][ T1617] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[ 1286.508610][ T1617] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input186
[ 1286.565188][ T1617] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:7> initialized
[ 1287.096517][ T1719] imon:send_packet: task interrupted
[ 1287.101966][ T1719] imon:send_packet: packet tx failed (-512)
[ 1287.108734][ T1719] imon:vfd_write: send packet #1 failed
[ 1287.138955][ T1719] imon:send_packet: task interrupted
[ 1287.144621][ T1719] imon:send_packet: packet tx failed (-512)
[ 1287.151008][ T1719] imon:vfd_write: send packet #0 failed
[ 1287.176382][ T1719] imon:send_packet: packet tx failed (-32)
[ 1287.207901][ T1719] imon:vfd_write: send packet #0 failed
[ 1287.219079][ T1721] imon:display_open: display port is already open
[ 1287.301761][   T29] usb 5-1: USB disconnect, device number 7
[ 1287.967340][ T1724] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9512'.
[ 1288.688383][ T1729] binder: 1728:1729 ioctl c0306201 200000000180 returned -14
[ 1289.967564][ T1754] binder: 1753:1754 ioctl c0306201 2000000003c0 returned -14
[ 1291.741683][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1291.763889][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1291.776183][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1291.787747][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1291.795860][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1291.869403][T22124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1291.878624][T22124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1291.899956][T22124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1291.931576][T22124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1291.942117][T22124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1291.982854][   T29] usb 10-1: new high-speed USB device number 64 using dummy_hcd
[ 1292.184507][   T29] usb 10-1: Using ep0 maxpacket: 8
[ 1292.196294][   T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1292.208830][   T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1292.228915][   T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1292.264366][   T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[ 1292.294394][   T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1292.306548][   T29] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1292.326363][   T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.349086][   T29] usb 10-1: config 0 descriptor??
[ 1292.365396][ T1780] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1293.054829][T12032] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1293.064017][T12032] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1293.119822][   T29] usb 10-1: USB disconnect, device number 64
[ 1293.130622][ T5844] Bluetooth: hci6: Opcode 0x0c03 failed: -71
[ 1293.631052][ T1798] debugfs: 'netdev:syzkaller0' already exists in 'phy63'
[ 1293.693094][ T1798] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9533'.
[ 1293.908910][ T1603] syz_tun (unregistering): left allmulticast mode
[ 1293.919482][ T1603] syz_tun (unregistering): left promiscuous mode
[ 1294.005658][ T1785] chnl_net:caif_netlink_parms(): no params data found
[ 1294.036424][ T5844] Bluetooth: hci5: command tx timeout
[ 1294.158024][ T5926] IPVS: starting estimator thread 0...
[ 1294.254539][ T1813] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1294.485526][ T1823] kvm: pic: level sensitive irq not supported
[ 1294.485603][ T1823] kvm: pic: non byte read
[ 1294.498884][ T1823] kvm: pic: level sensitive irq not supported
[ 1294.498960][ T1823] kvm: pic: non byte read
[ 1294.731342][ T1785] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1294.738706][ T1785] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1294.746272][ T1785] bridge_slave_0: entered allmulticast mode
[ 1294.754635][ T1785] bridge_slave_0: entered promiscuous mode
[ 1294.764894][ T1785] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1294.772200][ T1785] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1294.779881][ T1785] bridge_slave_1: entered allmulticast mode
[ 1294.788490][ T1785] bridge_slave_1: entered promiscuous mode
[ 1295.357848][ T1785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1295.416152][ T1785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1295.721683][ T1785] team0: Port device team_slave_0 added
[ 1295.753800][ T1785] team0: Port device team_slave_1 added
[ 1295.848259][ T1785] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1295.900527][ T1785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1296.004026][ T1785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1296.067952][ T1785] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1296.098751][ T1785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1296.105378][ T5844] Bluetooth: hci5: command tx timeout
[ 1296.230165][ T1785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1296.256477][ T1861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1296.555440][ T1873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9556'.
[ 1296.610957][ T1878] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9556'.
[ 1296.694493][ T1617] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1296.777016][ T1873] team1: entered promiscuous mode
[ 1296.782211][ T1873] team1: entered allmulticast mode
[ 1296.789295][ T1873] 8021q: adding VLAN 0 to HW filter on device team1
[ 1296.800576][ T1878] team2 (uninitialized): Failed to send options change via netlink (err -105)
[ 1296.835953][ T1878] team2: entered promiscuous mode
[ 1296.854872][ T1878] team2: entered allmulticast mode
[ 1296.860542][ T1878] 8021q: adding VLAN 0 to HW filter on device team2
[ 1296.864994][ T1617] usb 1-1: Using ep0 maxpacket: 16
[ 1296.888889][ T1617] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1296.913151][ T1617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.950771][ T1617] usb 1-1: config 0 descriptor??
[ 1296.989690][ T1617] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1297.014400][ T5926] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1297.090697][ T1785] hsr_slave_0: entered promiscuous mode
[ 1297.107625][ T1785] hsr_slave_1: entered promiscuous mode
[ 1297.124061][ T1785] debugfs: 'hsr0' already exists in 'hsr'
[ 1297.130693][ T1785] Cannot create hsr debugfs directory
[ 1297.184461][ T5926] usb 2-1: Using ep0 maxpacket: 32
[ 1297.202864][ T5926] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1297.232893][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1297.284732][ T5926] usb 2-1: Product: syz
[ 1297.295579][ T5926] usb 2-1: Manufacturer: syz
[ 1297.321483][ T5926] usb 2-1: SerialNumber: syz
[ 1297.359478][ T5926] usb 2-1: config 0 descriptor??
[ 1297.373579][ T5926] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1297.396898][T12032] bridge_slave_1: left allmulticast mode
[ 1297.402917][T12032] bridge_slave_1: left promiscuous mode
[ 1297.409896][T12032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1297.426618][T12032] bridge_slave_0: left allmulticast mode
[ 1297.442634][T12032] bridge_slave_0: left promiscuous mode
[ 1297.452350][T12032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1297.547048][ T5953] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1297.704447][ T5953] usb 5-1: Using ep0 maxpacket: 16
[ 1297.717433][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1297.738167][T12032] bond4 (unregistering): (slave gretap1): Releasing backup interface
[ 1297.747864][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1297.763323][ T5953] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1297.773114][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1297.781888][ T5953] usb 5-1: Product: syz
[ 1297.788498][ T5953] usb 5-1: Manufacturer: syz
[ 1297.793284][ T5953] usb 5-1: SerialNumber: syz
[ 1297.818719][ T5953] usb 5-1: config 0 descriptor??
[ 1297.840242][ T5953] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1297.850378][ T5953] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 1297.997724][T12032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1298.010342][T12032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1298.020915][T12032] bond0 (unregistering): Released all slaves
[ 1298.050994][T12032] bond1 (unregistering): Released all slaves
[ 1298.081101][T12032] bond2 (unregistering): Released all slaves
[ 1298.117831][T12032] bond3 (unregistering): (slave veth3): Releasing active interface
[ 1298.132718][T12032] bond3 (unregistering): (slave batadv1): Releasing active interface
[ 1298.153555][T12032] bond3 (unregistering): Released all slaves
[ 1298.184652][ T5844] Bluetooth: hci5: command tx timeout
[ 1298.191137][T12032] bond4 (unregistering): (slave bond5): Releasing backup interface
[ 1298.202549][ T1617] gspca_sonixj: reg_w1 err -71
[ 1298.221721][T12032] bond4 (unregistering): Released all slaves
[ 1298.235374][ T1617] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[ 1298.255952][ T1617] usb 1-1: USB disconnect, device number 3
[ 1298.276541][T12032] bond5 (unregistering): Released all slaves
[ 1298.324780][T12032] bond6 (unregistering): Released all slaves
[ 1298.449126][ T5953] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1298.462262][ T5953] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 1298.612957][ T1901] netlink: 'syz.9.9565': attribute type 10 has an invalid length.
[ 1298.710388][ T1901] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1298.971830][T12032] hsr_slave_0: left promiscuous mode
[ 1298.993947][T12032] hsr_slave_1: left promiscuous mode
[ 1299.244539][ T1617] usb 10-1: new full-speed USB device number 65 using dummy_hcd
[ 1299.343172][T12032] team0 (unregistering): Port device team_slave_1 removed
[ 1299.352456][ T1914] netlink: 'syz.0.9569': attribute type 8 has an invalid length.
[ 1299.378063][T12032] team0 (unregistering): Port device team_slave_0 removed
[ 1299.397707][ T1617] usb 10-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1299.410610][ T1617] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1299.420050][ T1617] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.430401][ T1617] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1299.439758][ T1617] usb 10-1: config 1 has no interface number 0
[ 1299.448018][ T1617] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1299.460282][ T1617] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1299.515444][ T5953] em28xx 5-1:0.0: AC97 vendor ID = 0x00fc00fe
[ 1299.523251][ T1617] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found
[ 1299.620429][ T5926] gspca_ov534_9: reg_r err -71
[ 1299.720263][ T5953] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[ 1299.749943][ T5953] em28xx 5-1:0.0: couldn't setup AC97 register 2
[ 1299.781310][ T5953] em28xx 5-1:0.0: couldn't setup AC97 register 4
[ 1299.804466][ T5953] em28xx 5-1:0.0: couldn't setup AC97 register 6
[ 1299.832496][ T5953] em28xx 5-1:0.0: couldn't setup AC97 register 54
[ 1299.844447][ T5926] gspca_ov534_9: Unknown sensor 0000
[ 1299.844529][ T5926] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[ 1299.849203][ T5953] em28xx 5-1:0.0: couldn't setup AC97 register 56
[ 1299.871701][ T5926] usb 2-1: USB disconnect, device number 109
[ 1299.911446][ T1617] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values
[ 1299.942376][ T1617] snd_usb_pod 10-1:1.1: invalid control EP
[ 1299.949957][ T5953] usb 5-1: USB disconnect, device number 8
[ 1299.978052][ T1617] snd_usb_pod 10-1:1.1: cannot start listening: -22
[ 1300.001848][ T1617] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected
[ 1300.044117][ T1617] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22
[ 1300.114002][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.125296][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.265408][ T5844] Bluetooth: hci5: command tx timeout
[ 1301.009129][ T1945] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1301.308209][ T1617] usb 10-1: USB disconnect, device number 65
[ 1301.591245][ T5505] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1302.461918][ T1785] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1302.490638][ T1785] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1302.511097][ T1785] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1302.540173][ T1785] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1302.574148][ T1785] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1302.613820][ T1785] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1302.637906][ T1785] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1302.652585][ T1785] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1303.031628][ T1785] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1303.178241][ T1785] 8021q: adding VLAN 0 to HW filter on device team0
[ 1303.250758][T20583] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1303.257979][T20583] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1303.349440][T12032] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1303.356667][T12032] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1303.434651][ T5953] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[ 1303.605533][ T5953] usb 10-1: Using ep0 maxpacket: 16
[ 1303.634713][ T5953] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1303.675677][ T5953] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1303.713043][ T5505] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1303.732799][ T5953] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1303.758099][ T5953] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1303.778506][ T5953] usb 10-1: Product: syz
[ 1303.790343][ T5953] usb 10-1: Manufacturer: syz
[ 1303.802124][ T5953] usb 10-1: SerialNumber: syz
[ 1303.802649][ T1785] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1303.841065][ T5953] usb 10-1: config 0 descriptor??
[ 1303.879689][ T5953] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1303.937557][ T5953] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[ 1304.127026][ T1785] veth0_vlan: entered promiscuous mode
[ 1304.186563][ T1785] veth1_vlan: entered promiscuous mode
[ 1304.362256][ T1785] veth0_macvtap: entered promiscuous mode
[ 1304.407018][ T1785] veth1_macvtap: entered promiscuous mode
[ 1304.501047][ T5953] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[ 1304.541706][ T1785] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1304.543000][ T5953] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[ 1304.707596][ T1785] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1304.796621][T12032] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.843594][T12032] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.908695][T12032] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.962839][T12032] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1305.219382][ T5953] em28xx 10-1:0.0: Unknown AC97 audio processor detected!
[ 1305.412189][T12034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1305.424320][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[ 1305.463084][T12034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1305.637341][T12021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1305.655285][ T5953] em28xx 10-1:0.0: couldn't setup AC97 register 2
[ 1305.682837][T12021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1305.697695][ T5953] em28xx 10-1:0.0: couldn't setup AC97 register 4
[ 1305.726270][ T5953] em28xx 10-1:0.0: couldn't setup AC97 register 6
[ 1305.764805][ T5953] em28xx 10-1:0.0: couldn't setup AC97 register 54
[ 1305.788408][ T5953] em28xx 10-1:0.0: couldn't setup AC97 register 56
[ 1305.821639][ T5953] usb 10-1: USB disconnect, device number 66
[ 1305.851511][ T1614] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0
[ 1305.940445][ T1614] hid-generic 0000:0000:0000.009D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1306.245137][ T5505] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1306.318722][ T2040] create_pit_timer: 6 callbacks suppressed
[ 1306.318745][ T2040] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[ 1306.419043][ T2042] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[ 1307.625566][ T2085] kvm: user requested TSC rate below hardware speed
[ 1307.687751][ T2085] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1308.458845][ T5505] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1309.881565][ T2130] kvm: pic: single mode not supported
[ 1309.881590][ T2130] kvm: pic: level sensitive irq not supported
[ 1309.936077][ T2130] kvm: pic: non byte write
[ 1311.506576][ T2151] syzkaller0: entered promiscuous mode
[ 1311.543464][ T2151] syzkaller0: entered allmulticast mode
[ 1311.693734][   T30] audit: type=1326 audit(1776855086.660:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2153 comm="syz.4.9616" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa64b79c819 code=0x0
[ 1312.485741][ T5926] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1312.701699][T26620] IPVS: ip_vs_send_async error -101
[ 1312.709471][ T5926] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1312.749427][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1312.794690][ T5926] usb 2-1: Product: syz
[ 1312.820697][ T5926] usb 2-1: Manufacturer: syz
[ 1312.829292][ T5926] usb 2-1: SerialNumber: syz
[ 1313.275329][ T5926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1313.338215][ T5926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1314.442796][ T5926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[ 1314.512869][ T5926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1314.607330][ T5926] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1314.667942][ T5926] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1314.780362][ T5926] usb 2-1: USB disconnect, device number 110
[ 1317.383517][ T2223] binder: 2220:2223 ioctl c0306201 200000000180 returned -14
[ 1319.731379][ T5973] usb 10-1: new high-speed USB device number 67 using dummy_hcd
[ 1319.928632][ T5973] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1319.940585][ T5973] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1320.037461][ T5973] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1320.069562][ T5973] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1320.077894][ T5973] usb 10-1: SerialNumber: syz
[ 1320.327580][ T5973] usb 10-1: 0:2 : does not exist
[ 1320.532425][ T5973] usb 10-1: USB disconnect, device number 67
[ 1321.619891][ T2143] syz.7.9614 (2143): drop_caches: 1
[ 1323.672978][ T2284] batman_adv: batadv0: Adding interface: ipvlan3
[ 1323.681509][ T2280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9647'.
[ 1323.710715][ T2284] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1323.739714][ T2280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9647'.
[ 1323.752875][ T2284] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[ 1324.348761][ T5973] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1324.539139][ T5973] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1324.561217][ T5973] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1324.593572][ T5973] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1324.609089][ T5973] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1324.629014][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.646906][ T5973] usb 1-1: Product: syz
[ 1324.666072][ T5973] usb 1-1: Manufacturer: syz
[ 1324.679780][ T5973] usb 1-1: SerialNumber: syz
[ 1325.029958][   T30] audit: type=1804 audit(1776855100.000:1335): pid=2334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.9660" name="/newroot/600/file0" dev="fuse" ino=1 res=1 errno=0
[ 1325.153369][ T5973] usb 1-1: USB disconnect, device number 4
[ 1325.361782][ T2337] syzkaller0: entered promiscuous mode
[ 1325.374034][ T2337] syzkaller0: entered allmulticast mode
[ 1325.978636][ T2363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1325.992752][   T30] audit: type=1326 audit(1776855100.960:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2362 comm="syz.1.9667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6e9d9c819 code=0x0
[ 1326.384824][   T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1326.451187][ T2351] kvm: pic: non byte write
[ 1326.465756][ T2351] kvm: pic: non byte write
[ 1326.477453][ T2351] kvm: pic: non byte write
[ 1326.486224][ T2351] kvm: pic: non byte write
[ 1326.490999][ T2351] kvm: pic: non byte write
[ 1326.501120][ T2351] kvm: pic: non byte write
[ 1326.507538][ T2351] kvm: pic: non byte write
[ 1326.512654][ T2351] kvm: pic: non byte write
[ 1326.520131][ T2351] kvm: pic: non byte write
[ 1326.524988][ T1614] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1326.535686][ T2351] kvm: pic: non byte write
[ 1326.541829][ T2351] kvm: pic: non byte read
[ 1326.565146][   T29] usb 5-1: Using ep0 maxpacket: 32
[ 1326.581088][   T29] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1326.610248][   T29] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1326.631033][   T29] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1326.659384][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1326.693421][   T29] usb 5-1: config 0 descriptor??
[ 1326.698878][ T1614] usb 1-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[ 1326.698908][ T1614] usb 1-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[ 1326.698931][ T1614] usb 1-1: Product: syz
[ 1326.698948][ T1614] usb 1-1: Manufacturer: syz
[ 1326.698965][ T1614] usb 1-1: SerialNumber: syz
[ 1326.735989][ T1614] usb 1-1: config 0 descriptor??
[ 1327.054726][T29914] usb 1-1: USB disconnect, device number 5
[ 1327.120172][ T2399] binder: 2398:2399 ioctl c0306201 200000004a40 returned -22
[ 1327.557521][ T2414] netlink: 'syz.1.9678': attribute type 1 has an invalid length.
[ 1327.633749][   T29] corsair-cpro 0003:1B1C:0C10.009E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0
[ 1327.664518][ T2414] bond4: (slave bridge2): Enslaving as a backup interface with an up link
[ 1327.703689][ T2422] macvlan0: entered promiscuous mode
[ 1327.715900][ T2424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9679'.
[ 1327.726876][ T2422] macvlan0: entered allmulticast mode
[ 1327.754183][ T2422] bond4: entered promiscuous mode
[ 1327.754813][ T5973] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1327.766691][ T2422] bridge2: entered promiscuous mode
[ 1327.809517][ T2422] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1327.843195][ T2422] bond4: left promiscuous mode
[ 1327.859030][ T2422] bridge2: left promiscuous mode
[ 1327.934613][ T5973] usb 8-1: Using ep0 maxpacket: 16
[ 1327.946499][ T5973] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[ 1327.983704][ T5973] usb 8-1: config 0 has no interface number 0
[ 1328.020989][ T5973] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1328.058391][ T5973] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1328.068810][   T29] corsair-cpro 0003:1B1C:0C10.009E: probe with driver corsair-cpro failed with error -71
[ 1328.107788][ T5973] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1328.125868][   T29] usb 5-1: USB disconnect, device number 9
[ 1328.160082][ T5973] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1328.200079][ T5973] usb 8-1: Product: syz
[ 1328.211737][ T5973] usb 8-1: Manufacturer: syz
[ 1328.219482][ T5973] usb 8-1: SerialNumber: syz
[ 1328.252353][ T5973] usb 8-1: config 0 descriptor??
[ 1328.288010][ T2411] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1328.321563][ T2411] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1328.569222][ T2411] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1328.587475][ T2411] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1328.817429][ T5973] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1328.854088][ T2461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9695'.
[ 1329.022848][ T2461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9695'.
[ 1329.672673][ T2483] netlink: 'syz.1.9689': attribute type 1 has an invalid length.
[ 1329.779553][ T2483] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1329.872953][ T2486] vlan0: entered allmulticast mode
[ 1329.893624][ T2486] bond5: entered allmulticast mode
[ 1329.980657][ T2487] bond5: (slave geneve2): making interface the new active one
[ 1330.025980][ T2487] geneve2: entered allmulticast mode
[ 1330.090624][ T2487] bond5: (slave geneve2): Enslaving as an active interface with an up link
[ 1330.123811][T12030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.161257][T12030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.187056][T12030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.228153][T12030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1330.334507][ T2489] binder: 2488:2489 ioctl c0306201 200000000540 returned -14
[ 1330.451071][ T5973] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[ 1330.506160][ T5973] asix 8-1:0.34: probe with driver asix failed with error -71
[ 1330.584096][ T5973] usb 8-1: USB disconnect, device number 10
[ 1330.743674][ T2509] netlink: 'syz.0.9694': attribute type 1 has an invalid length.
[ 1331.544609][ T5973] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1331.751077][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1331.798211][ T5973] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1331.833969][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1331.876612][ T5973] usb 5-1: config 0 descriptor??
[ 1332.120597][ T5973] usbhid 5-1:0.0: can't add hid device: -71
[ 1332.146274][ T5973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1332.200061][ T5973] usb 5-1: USB disconnect, device number 10
[ 1332.674419][ T5973] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1332.854439][ T5973] usb 5-1: Using ep0 maxpacket: 16
[ 1332.871128][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1332.890141][ T5973] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[ 1332.909967][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1332.952450][ T5973] usb 5-1: config 0 descriptor??
[ 1333.004947][   T29] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1333.106113][ T5953] usb 10-1: new high-speed USB device number 68 using dummy_hcd
[ 1333.174422][   T29] usb 1-1: Using ep0 maxpacket: 16
[ 1333.226247][   T29] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1333.268712][   T29] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1333.276774][ T5953] usb 10-1: Using ep0 maxpacket: 8
[ 1333.316569][ T5953] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1333.333808][   T29] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1333.343563][ T5953] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1333.385214][ T5953] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1333.389878][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1333.410369][ T5973] kye 0003:0458:5016.009F: control desc unexpectedly large
[ 1333.442713][ T5953] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1333.456288][   T29] usb 1-1: Product: syz
[ 1333.462489][ T5973] kye 0003:0458:5016.009F: control desc unexpectedly large
[ 1333.468281][   T29] usb 1-1: Manufacturer: syz
[ 1333.480711][   T29] usb 1-1: SerialNumber: syz
[ 1333.502211][   T29] usb 1-1: 0:2 : does not exist
[ 1333.511994][ T5953] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1333.532812][ T5973] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.009F/input/input187
[ 1333.566478][ T5953] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1333.720664][   T29] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1333.765770][ T5973] kye 0003:0458:5016.009F: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0
[ 1333.856921][ T5953] usb 10-1: GET_CAPABILITIES returned 0
[ 1333.877658][ T5973] usb 5-1: USB disconnect, device number 11
[ 1333.888072][ T5953] usbtmc 10-1:16.0: can't read capabilities
[ 1334.089465][   T29] usb 1-1: USB disconnect, device number 6
[ 1334.110602][ T5953] usb 10-1: USB disconnect, device number 68
[ 1334.136708][ T2583] fido_id[2583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1334.387181][ T5898] udevd[5898]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1334.496789][ T2591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9709'.
[ 1334.509952][ T2591] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1334.599135][ T2598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9710'.
[ 1334.619960][ T2598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9710'.
[ 1334.785013][   T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1334.873995][ T2611] binder_alloc: 2607: pid 2607 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1334.963399][ T2615] binder_alloc: 2607: binder_alloc_buf size 64768 failed, no address space
[ 1334.980052][ T2615] binder_alloc: allocated: 5120 (num: 2 largest: 4096), free: 7168 (num: 1 largest: 7168)
[ 1335.008114][   T29] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1335.028090][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.042365][   T29] usb 1-1: config 0 descriptor??
[ 1335.072947][   T29] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1335.164965][T29914] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1335.345536][T29914] usb 5-1: Using ep0 maxpacket: 8
[ 1335.359329][T29914] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[ 1335.381676][T29914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1335.398611][T29914] usb 5-1: config 0 has no interface number 0
[ 1335.407283][T29914] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1335.419386][T29914] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1335.433122][T29914] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1335.458974][T29914] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1335.487492][T29914] usb 5-1: config 0 interface 52 has no altsetting 0
[ 1335.495842][T29914] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[ 1335.506929][T29914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.550220][T29914] usb 5-1: config 0 descriptor??
[ 1336.068969][T29914] usb 5-1: Can not set alternate setting to 1, error: -71
[ 1336.107650][T29914] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71
[ 1336.158912][T29914] usb 5-1: USB disconnect, device number 12
[ 1336.473924][ T2667] netlink: 'syz.9.9723': attribute type 1 has an invalid length.
[ 1336.729120][   T29] gspca_stv06xx: I2C: Read error writing address: -71
[ 1336.760684][   T29] usb 1-1: USB disconnect, device number 7
[ 1337.025948][T29914] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1337.204606][T29914] usb 5-1: Using ep0 maxpacket: 32
[ 1337.216436][T29914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1337.231043][T29914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1337.261323][T29914] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1337.302751][T29914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1337.357927][T29914] usb 5-1: config 0 descriptor??
[ 1337.836968][T29914] ft260 0003:0403:6030.00A0: unknown main item tag 0x0
[ 1337.879848][T29914] ft260 0003:0403:6030.00A0: unknown main item tag 0x0
[ 1338.008772][T29914] ft260 0003:0403:6030.00A0: chip code: 0000 0000
[ 1338.226715][T29914] ft260 0003:0403:6030.00A0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[ 1338.437890][T29914] ft260 0003:0403:6030.00A0: failed to retrieve status: -32, no wakeup
[ 1338.816129][T29914] usb 5-1: USB disconnect, device number 13
[ 1338.962016][ T2727] binder: BINDER_SET_CONTEXT_MGR already set
[ 1339.004214][ T2727] binder: 2725:2727 ioctl 4018620d 200000004a80 returned -16
[ 1339.639368][ T2748] binder: transaction release 334 bad handle 1, ret = -22
[ 1339.775516][ T5926] usb 10-1: new high-speed USB device number 69 using dummy_hcd
[ 1339.922538][ T2760] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1340.014542][ T5926] usb 10-1: Using ep0 maxpacket: 32
[ 1340.037055][ T5926] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1340.064854][ T5926] usb 10-1: config 0 has no interface number 0
[ 1340.071189][ T5926] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1340.120062][ T5926] usb 10-1: config 0 interface 1 has no altsetting 0
[ 1340.143230][ T5926] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1340.176660][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1340.224718][ T5926] usb 10-1: Product: syz
[ 1340.242597][ T5926] usb 10-1: Manufacturer: syz
[ 1340.264050][ T5926] usb 10-1: SerialNumber: syz
[ 1340.295546][ T5926] usb 10-1: config 0 descriptor??
[ 1340.598582][ T5926] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1340.642550][ T5926] cx231xx 10-1:0.1: Failed to read PCB config
[ 1340.672230][ T5926] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -71
[ 1340.713125][ T5926] usb 10-1: USB disconnect, device number 69
[ 1341.104615][ T5926] usb 10-1: new high-speed USB device number 70 using dummy_hcd
[ 1341.204981][ T1614] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[ 1341.274446][ T5926] usb 10-1: Using ep0 maxpacket: 32
[ 1341.297594][ T5926] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1341.337814][ T5926] usb 10-1: config 0 has no interface number 0
[ 1341.356008][ T5926] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1341.386436][ T1614] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 13961, setting to 64
[ 1341.395629][ T5926] usb 10-1: config 0 interface 1 has no altsetting 0
[ 1341.414152][ T5926] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1341.421714][ T1614] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1341.447580][ T5926] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1341.450258][ T1614] usb 2-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00
[ 1341.483305][ T5926] usb 10-1: Product: syz
[ 1341.490507][ T1614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1341.495961][ T5926] usb 10-1: Manufacturer: syz
[ 1341.522013][ T5926] usb 10-1: SerialNumber: syz
[ 1341.538171][ T1614] usb 2-1: config 0 descriptor??
[ 1341.557252][ T5926] usb 10-1: config 0 descriptor??
[ 1341.563862][ T2777] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1341.814252][ T5926] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1341.830290][ T5926] cx231xx 10-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[ 1341.854423][ T5973] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[ 1341.934079][ T1614] usbhid 2-1:0.0: can't add hid device: -71
[ 1341.943126][ T1614] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1341.957101][ T1614] usb 2-1: USB disconnect, device number 111
[ 1341.961623][ T5926] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[ 1341.995590][ T5926] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1342.015780][ T5926] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1342.026777][ T5973] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc
[ 1342.028932][ T5926] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1342.047444][ T5926] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1342.056426][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1342.058628][ T5926] cx231xx 10-1:0.1: Failed to set devmode to analog: error: -32
[ 1342.095288][ T5926] i2c i2c-6: Added multiplexed i2c bus 8
[ 1342.103922][ T5973] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280
[ 1342.153367][ T5926] i2c i2c-6: Added multiplexed i2c bus 9
[ 1342.354821][ T5926] cx231xx 10-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1342.375479][ T5926] cx231xx 10-1:0.1: cx231xx_send_usb_command: failed with status --32
[ 1342.385127][ T5926] cx231xx 10-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1342.398417][ T5926] cx231xx 10-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1342.409381][ T5926] cx231xx 10-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1342.421715][ T5926] cx231xx 10-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1342.449779][ T5926] cx231xx 10-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1342.466174][ T5926] cx231xx 10-1:0.1: cx231xx_send_usb_command: failed with status --71
[ 1342.475944][ T5926] cx231xx 10-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[ 1342.487122][ T5926] cx231xx 10-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[ 1342.499711][ T5973] gspca_sn9c20x: Write register 1001 failed -71
[ 1342.519551][ T5973] gspca_sn9c20x: Device initialization failed
[ 1342.538920][ T5973] gspca_sn9c20x 1-1:252.0: probe with driver gspca_sn9c20x failed with error -71
[ 1342.560222][ T5926] cx231xx 10-1:0.1: probe with driver cx231xx failed with error -71
[ 1342.591439][ T5973] usb 1-1: USB disconnect, device number 8
[ 1342.596113][ T5926] usb 10-1: USB disconnect, device number 70
[ 1342.950985][ T2803] binder_alloc: 2802: pid 2802 spamming oneway? 1 buffers allocated for a total size of 6144
[ 1342.961878][ T2803] binder: 2802:2803 ioctl c0306201 200000000680 returned -14
[ 1343.118776][ T2805] binder_alloc: 2804: pid 2804 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1343.811026][ T2822] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9763'.
[ 1343.862455][T12034] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.871926][ T2822] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9763'.
[ 1343.892240][T12034] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.913733][T12034] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1343.941016][T12034] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1344.136230][ T2824] xt_connbytes: Forcing CT accounting to be enabled
[ 1344.854425][ T5973] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1345.054400][ T5973] usb 8-1: Using ep0 maxpacket: 32
[ 1345.097213][ T5973] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1345.157891][ T5973] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1345.236883][ T5973] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1345.298302][ T5973] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.365936][ T5973] usb 8-1: config 0 descriptor??
[ 1345.423944][ T5973] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1345.469120][ T5973] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1345.526546][ T5973] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1346.411852][ T2851] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1346.456949][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.457039][ T2851] kvm: pic: non byte read
[ 1346.476321][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.476464][ T2851] kvm: pic: non byte read
[ 1346.487488][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.487566][ T2851] kvm: pic: non byte read
[ 1346.498592][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.498677][ T2851] kvm: pic: non byte read
[ 1346.510171][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.510245][ T2851] kvm: pic: non byte read
[ 1346.521752][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.521828][ T2851] kvm: pic: non byte read
[ 1346.578354][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.578427][ T2851] kvm: pic: non byte read
[ 1346.598481][ T2861] binder_alloc: 2854: binder_alloc_buf, no vma
[ 1346.661356][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.661408][ T2851] kvm: pic: non byte read
[ 1346.703576][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.704021][ T2851] kvm: pic: non byte read
[ 1346.745635][ T2851] kvm: pic: level sensitive irq not supported
[ 1346.745784][ T2851] kvm: pic: non byte read
[ 1347.229989][ T2873] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1347.288837][ T2884] batman_adv: batadv0: Interface deactivated: dummy0
[ 1347.566609][T12030] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1347.624174][T12030] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.710461][T12030] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1347.802318][T12030] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.878694][T12030] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1347.979062][T12030] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.035804][T12030] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1348.109799][T12030] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1348.477822][ T2173] usb 10-1: new high-speed USB device number 71 using dummy_hcd
[ 1348.654440][ T2173] usb 10-1: Using ep0 maxpacket: 8
[ 1348.680785][ T2173] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[ 1348.710328][ T2173] usb 10-1: config 0 has no interface number 0
[ 1348.730421][ T2173] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1348.764599][ T2173] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1348.800530][ T2173] usb 10-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0
[ 1348.844224][ T2173] usb 10-1: Product: syz
[ 1348.879664][ T2173] usb 10-1: config 0 descriptor??
[ 1348.892459][ T2915] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1348.923621][ T2173] iowarrior 10-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0
[ 1348.935771][ T5926] usb 8-1: USB disconnect, device number 11
[ 1349.220143][    C1] iowarrior 10-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19
[ 1349.235727][ T2173] usb 10-1: USB disconnect, device number 71
[ 1349.304821][ T1616] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1349.404446][ T5973] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[ 1349.466559][ T1616] usb 8-1: Using ep0 maxpacket: 8
[ 1349.479639][ T1616] usb 8-1: config 0 has no interfaces?
[ 1349.486766][ T1616] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1349.510209][ T1616] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1349.528597][ T1616] usb 8-1: config 0 descriptor??
[ 1349.590771][ T5973] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1349.629338][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1349.656777][ T5973] usb 5-1: Product: syz
[ 1349.666473][ T5973] usb 5-1: Manufacturer: syz
[ 1349.672508][ T5973] usb 5-1: SerialNumber: syz
[ 1349.942930][ T5973] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[ 1349.951689][ T5973] usb 5-1: USB disconnect, device number 14
[ 1349.972621][ T5973] usblp0: removed
[ 1350.384473][ T1616] usb 10-1: new high-speed USB device number 72 using dummy_hcd
[ 1350.534570][ T1616] usb 10-1: Using ep0 maxpacket: 32
[ 1350.541296][ T1616] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1350.541325][ T1616] usb 10-1: config 0 has no interface number 0
[ 1350.557135][ T1616] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1350.577883][ T1616] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1350.599836][ T1616] usb 10-1: Product: syz
[ 1350.609586][ T1616] usb 10-1: Manufacturer: syz
[ 1350.633211][ T1616] usb 10-1: SerialNumber: syz
[ 1350.659753][ T1616] usb 10-1: config 0 descriptor??
[ 1350.675501][ T1616] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1350.684817][ T1616] usb 10-1: selecting invalid altsetting 1
[ 1350.690736][ T1616] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1350.702254][ T1616] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1350.728313][ T1616] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1350.755293][ T1616] usb 10-1: media controller created
[ 1350.840714][ T1616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1350.945518][ T1616] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1350.961696][ T1616] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1350.986736][ T1616] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1351.122262][ T1616] usb 10-1: USB disconnect, device number 72
[ 1351.793862][   T30] audit: type=1804 audit(1776855126.760:1337): pid=2978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.9798" name="/newroot/629/file1" dev="fuse" ino=1 res=1 errno=0
[ 1351.818995][ T2961] syz.1.9796 (2961): drop_caches: 1
[ 1352.126574][ T1614] usb 8-1: USB disconnect, device number 12
[ 1352.332759][ T2993] syzkaller0: entered promiscuous mode
[ 1352.357878][ T2993] syzkaller0: entered allmulticast mode
[ 1352.774760][ T2173] usb 10-1: new high-speed USB device number 73 using dummy_hcd
[ 1352.933554][ T2961] syz.1.9796 (2961): drop_caches: 1
[ 1352.957686][ T2173] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1352.999372][ T2173] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1353.063864][ T2173] usb 10-1: config 0 descriptor??
[ 1353.114673][ T2173] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1353.583523][ T3031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9810'.
[ 1353.688518][ T3036] bridge3: port 1(veth5) entered blocking state
[ 1353.713209][ T3036] bridge3: port 1(veth5) entered disabled state
[ 1353.733343][ T3036] veth5: entered allmulticast mode
[ 1353.774808][ T3036] veth5: entered promiscuous mode
[ 1353.924945][ T3031] bridge3: port 2(veth7) entered blocking state
[ 1353.954715][ T3031] bridge3: port 2(veth7) entered disabled state
[ 1353.978820][ T3031] veth7: entered allmulticast mode
[ 1354.009067][ T3031] veth7: entered promiscuous mode
[ 1354.332371][ T3046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1354.693047][ T3053] mac80211_hwsim hwsim55 syzkaller0: entered promiscuous mode
[ 1354.736996][ T3053] mac80211_hwsim hwsim55 syzkaller0: entered allmulticast mode
[ 1354.950852][ T2173] usb 10-1: USB disconnect, device number 73
[ 1354.966258][ T1614] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1355.156081][ T1614] usb 8-1: Using ep0 maxpacket: 16
[ 1355.175018][ T1614] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1355.203707][ T1614] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1355.234419][ T1614] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1355.251659][ T1614] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1355.278718][ T1614] usb 8-1: Product: syz
[ 1355.290183][ T1614] usb 8-1: Manufacturer: syz
[ 1355.312610][ T1614] usb 8-1: SerialNumber: syz
[ 1355.349107][ T1614] usb 8-1: config 0 descriptor??
[ 1355.385857][ T1614] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1355.413899][ T1614] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[ 1355.983897][ T3080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9819'.
[ 1356.013883][ T1614] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[ 1356.046492][ T1614] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[ 1356.499058][   T30] audit: type=1804 audit(1776855131.470:1338): pid=3094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9825" name="/newroot/551/file1" dev="fuse" ino=1 res=1 errno=0
[ 1357.080347][ T1614] em28xx 8-1:0.0: AC97 vendor ID = 0x00fc00fe
[ 1357.492161][ T1614] em28xx 8-1:0.0: Unknown AC97 audio processor detected!
[ 1357.512581][ T1614] em28xx 8-1:0.0: couldn't setup AC97 register 2
[ 1357.522794][ T1614] em28xx 8-1:0.0: couldn't setup AC97 register 4
[ 1357.542657][ T1614] em28xx 8-1:0.0: couldn't setup AC97 register 6
[ 1357.556333][T12515] usb 10-1: new high-speed USB device number 74 using dummy_hcd
[ 1357.567562][ T1614] em28xx 8-1:0.0: couldn't setup AC97 register 54
[ 1357.596972][ T1614] em28xx 8-1:0.0: couldn't setup AC97 register 56
[ 1357.653879][ T1614] usb 8-1: USB disconnect, device number 13
[ 1357.747821][T12515] usb 10-1: Using ep0 maxpacket: 16
[ 1357.776235][T12515] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[ 1357.799508][T12515] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.824205][T12515] usb 10-1: Product: syz
[ 1357.842601][T12515] usb 10-1: Manufacturer: syz
[ 1357.860449][T12515] usb 10-1: SerialNumber: syz
[ 1358.381568][ T3132] netlink: 'syz.1.9833': attribute type 1 has an invalid length.
[ 1358.528487][ T3132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9833'.
[ 1358.550975][ T3134] bond6: (slave gretap1): making interface the new active one
[ 1358.599390][ T3134] bond6: (slave gretap1): Enslaving as an active interface with an up link
[ 1358.630521][ T3132] bond6 (unregistering): (slave gretap1): Releasing active interface
[ 1358.650070][ T3132] bond6 (unregistering): Released all slaves
[ 1358.701473][ T3136] syzkaller0: entered promiscuous mode
[ 1358.711454][ T3136] syzkaller0: entered allmulticast mode
[ 1358.778884][T12515] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1358.794152][T12515] usb 10-1: USB disconnect, device number 74
[ 1358.992587][ T3146] netlink: 'syz.4.9838': attribute type 1 has an invalid length.
[ 1359.020548][ T3146] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1359.044950][ T3146] bond3: (slave ip6gretap1): making interface the new active one
[ 1359.054223][ T3146] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1359.101837][ T3146] veth5: entered promiscuous mode
[ 1359.117598][ T3146] bond3: (slave veth5): Enslaving as an active interface with a down link
[ 1359.144668][ T3148] erspan0: entered allmulticast mode
[ 1359.155979][ T3148] bond3: (slave erspan0): Enslaving as an active interface with an up link
[ 1359.195768][ T1614] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1359.374441][ T1614] usb 2-1: Using ep0 maxpacket: 16
[ 1359.392458][ T1614] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1359.431762][ T1614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1359.469785][ T1614] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1359.482726][ T3158] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1359.498332][ T1614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1359.510080][ T1614] usb 2-1: Product: syz
[ 1359.514961][ T1614] usb 2-1: Manufacturer: syz
[ 1359.519727][ T1614] usb 2-1: SerialNumber: syz
[ 1359.534218][ T1614] usb 2-1: config 0 descriptor??
[ 1359.547030][ T1614] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1359.556842][ T1614] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 1359.664368][T12515] usb 10-1: new high-speed USB device number 75 using dummy_hcd
[ 1359.834440][T12515] usb 10-1: Using ep0 maxpacket: 32
[ 1359.847600][T12515] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1359.869617][T12515] usb 10-1: config 0 has no interface number 0
[ 1359.888690][T12515] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1359.912230][T12515] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1359.920639][T12515] usb 10-1: Product: syz
[ 1359.925101][T12515] usb 10-1: Manufacturer: syz
[ 1359.929899][T12515] usb 10-1: SerialNumber: syz
[ 1359.939461][T12515] usb 10-1: config 0 descriptor??
[ 1359.949089][T12515] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1359.968361][T12515] usb 10-1: selecting invalid altsetting 1
[ 1359.985590][T12515] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1360.020451][T12515] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1360.049716][T12515] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1360.058474][T12515] usb 10-1: media controller created
[ 1360.085398][T12515] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1360.149536][T12515] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1360.160853][T12515] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1360.169022][ T1614] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1360.170253][T12515] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1360.183007][ T1614] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[ 1360.229736][T12515] usb 10-1: USB disconnect, device number 75
[ 1360.346670][ T5973] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1360.514472][ T5973] usb 5-1: Using ep0 maxpacket: 16
[ 1360.528122][ T5973] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1360.537745][ T5973] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[ 1360.547622][ T5973] usb 5-1: config 13 has no interface number 0
[ 1360.553854][ T5973] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[ 1360.567016][ T5973] usb 5-1: config 13 interface 50 has no altsetting 0
[ 1360.579872][ T5973] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[ 1360.589484][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1360.597739][ T5973] usb 5-1: Product: syz
[ 1360.602084][ T5973] usb 5-1: Manufacturer: syz
[ 1360.607274][ T5973] usb 5-1: SerialNumber: syz
[ 1360.615913][ T3172] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1360.808840][ T1614] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[ 1361.051904][ T5973] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1361.081772][ T5973] usb 5-1: MIDIStreaming interface descriptor not found
[ 1361.303603][ T5973] usb 5-1: USB disconnect, device number 15
[ 1361.437180][ T1614] em28xx 2-1:0.0: couldn't setup AC97 register 4
[ 1361.465842][ T1614] em28xx 2-1:0.0: couldn't setup AC97 register 6
[ 1361.479860][ T1614] em28xx 2-1:0.0: couldn't setup AC97 register 54
[ 1361.498636][ T1614] em28xx 2-1:0.0: couldn't setup AC97 register 56
[ 1361.510540][T10294] udevd[10294]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1361.559299][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.567870][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.580500][ T1614] usb 2-1: USB disconnect, device number 112
[ 1362.307255][ T3210] picdev_write: 8 callbacks suppressed
[ 1362.307270][ T3210] kvm: pic: non byte write
[ 1362.501554][ T3213] kvm: pic: non byte write
[ 1362.916832][ T3224] loop7: detected capacity change from 0 to 7
[ 1363.045071][ T1614] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[ 1363.176312][ T5973] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1363.344727][ T5973] usb 1-1: Using ep0 maxpacket: 32
[ 1363.366631][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1363.410575][ T5973] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1363.431540][ T1614] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1363.454067][ T5973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1363.486754][ T1614] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1363.506287][ T1614] usb 2-1: can't read configurations, error -71
[ 1363.521876][ T5973] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1363.541651][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1363.561117][ T5973] usb 1-1: Product: syz
[ 1363.575313][ T5973] usb 1-1: Manufacturer: syz
[ 1363.592435][ T5973] usb 1-1: SerialNumber: syz
[ 1363.619958][ T5973] usb 1-1: config 0 descriptor??
[ 1363.653774][ T5973] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input188
[ 1363.983283][ T5973] usb 1-1: USB disconnect, device number 9
[ 1363.983550][    C1] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19
[ 1363.997318][    C1] xpad 1-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[ 1364.264518][ T1616] usb 10-1: new full-speed USB device number 76 using dummy_hcd
[ 1364.439213][ T1616] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1364.480780][ T1616] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1364.524418][ T1616] usb 10-1: Product: syz
[ 1364.534414][ T1616] usb 10-1: Manufacturer: syz
[ 1364.548504][ T1616] usb 10-1: SerialNumber: syz
[ 1364.578023][ T1616] usb 10-1: config 0 descriptor??
[ 1364.605666][ T1616] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1366.114505][ T5973] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1366.250963][ T3275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9881'.
[ 1366.285332][ T5973] usb 1-1: Using ep0 maxpacket: 8
[ 1366.311086][ T5973] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[ 1366.334108][ T5973] usb 1-1: config 0 has no interface number 0
[ 1366.358947][ T5973] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1366.371348][ T5973] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1366.384523][ T5973] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1366.468197][ T5973] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1366.503110][ T5973] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1366.534167][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1366.556998][ T5973] usb 1-1: config 0 descriptor??
[ 1366.573945][ T5973] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1367.064467][ T5973] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1367.079061][ T1616] gspca_stk1135: reg_w 0x300 err -71
[ 1367.098010][ T1616] gspca_stk1135: serial bus timeout: status=0x00
[ 1367.115503][ T1616] gspca_stk1135: Sensor write failed
[ 1367.128055][ T1616] gspca_stk1135: serial bus timeout: status=0x00
[ 1367.146582][ T1616] gspca_stk1135: Sensor write failed
[ 1367.163496][ T1616] gspca_stk1135: serial bus timeout: status=0x00
[ 1367.186189][ T1616] gspca_stk1135: Sensor read failed
[ 1367.206191][ T1616] gspca_stk1135: serial bus timeout: status=0x00
[ 1367.241392][ T1616] gspca_stk1135: Sensor read failed
[ 1367.266390][ T5973] usb 5-1: Using ep0 maxpacket: 32
[ 1367.279234][ T1616] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1367.293231][ T5973] usb 5-1: config 0 has an invalid interface number: 111 but max is 1
[ 1367.319703][ T5926] usb 1-1: USB disconnect, device number 10
[ 1367.325726][    C1] ldusb 1-1:0.55: usb_submit_urb failed (-19)
[ 1367.332931][ T5973] usb 5-1: config 0 has no interface number 1
[ 1367.339551][ T1616] gspca_stk1135: serial bus timeout: status=0x00
[ 1367.372797][ T5973] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[ 1367.385440][ T1616] gspca_stk1135: Sensor read failed
[ 1367.403108][ T1616] gspca_stk1135: serial bus timeout: status=0x00
[ 1367.414434][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1367.433290][ T1616] gspca_stk1135: Sensor read failed
[ 1367.445408][ T5926] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[ 1367.452925][ T3283] ldusb: No device or device unplugged -19
[ 1367.502486][ T5973] usb 5-1: Product: syz
[ 1367.507203][ T1616] gspca_stk1135: serial bus timeout: status=0x00
[ 1367.513730][ T5973] usb 5-1: Manufacturer: syz
[ 1367.518827][ T1616] gspca_stk1135: Sensor write failed
[ 1367.524614][ T5973] usb 5-1: SerialNumber: syz
[ 1367.530166][ T1616] gspca_stk1135: serial bus timeout: status=0x00
[ 1367.547066][ T5973] usb 5-1: config 0 descriptor??
[ 1367.552515][ T1616] gspca_stk1135: Sensor write failed
[ 1367.564509][ T1616] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71
[ 1367.587241][ T1616] usb 10-1: USB disconnect, device number 76
[ 1367.694733][ T1614] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1367.818979][ T5973] snd-usb-6fire 5-1:0.111: unable to receive device firmware state.
[ 1367.837040][ T5973] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -71
[ 1367.856615][ T1614] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1367.880116][ T1614] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1367.881006][ T5973] usb 5-1: USB disconnect, device number 16
[ 1367.899521][ T1614] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1367.924197][ T1614] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1367.995579][ T1614] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1368.030373][ T1614] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.051883][ T1614] usb 8-1: config 0 descriptor??
[ 1368.083044][ T3285] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1368.110435][ T3296] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode
[ 1368.126056][ T3296] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode
[ 1368.374480][ T5973] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1368.534863][ T5973] usb 5-1: Using ep0 maxpacket: 32
[ 1368.544003][ T5973] usb 5-1: config 0 has an invalid interface number: 111 but max is 1
[ 1368.553638][ T5973] usb 5-1: config 0 has no interface number 1
[ 1368.571460][ T5973] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[ 1368.600831][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1368.615386][   T30] audit: type=1800 audit(1776855143.590:1339): pid=3312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9893" name="bus" dev="tmpfs" ino=3349 res=0 errno=0
[ 1368.619082][ T5973] usb 5-1: Product: syz
[ 1368.640625][ T5973] usb 5-1: Manufacturer: syz
[ 1368.646292][ T5973] usb 5-1: SerialNumber: syz
[ 1368.660548][ T5973] usb 5-1: config 0 descriptor??
[ 1368.878012][ T5973] snd-usb-6fire 5-1:0.111: unknown device firmware state received from device:
[ 1368.896023][ T5973] 31 db 99 aa dd 09 f1 37 
[ 1368.906891][ T5973] snd-usb-6fire 5-1:0.111: probe with driver snd-usb-6fire failed with error -5
[ 1369.264866][ T1614] usbhid 8-1:0.0: can't add hid device: -71
[ 1369.271153][ T1614] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1369.283699][ T1614] usb 8-1: USB disconnect, device number 14
[ 1369.285469][T29914] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1369.444396][T29914] usb 2-1: Using ep0 maxpacket: 16
[ 1369.458731][T29914] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1369.469758][T29914] usb 2-1: config 0 has no interface number 0
[ 1369.480036][T29914] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1369.494020][T29914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.502491][T29914] usb 2-1: Product: syz
[ 1369.507122][T29914] usb 2-1: Manufacturer: syz
[ 1369.511785][T29914] usb 2-1: SerialNumber: syz
[ 1369.519381][T29914] usb 2-1: config 0 descriptor??
[ 1369.542793][T29914] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1369.870129][ T3329] kvm: pic: non byte write
[ 1370.529103][T12515] usb 5-1: USB disconnect, device number 17
[ 1371.000645][ T3346] 
[ 1371.003125][ T3346] =====================================================
[ 1371.010078][ T3346] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1371.017573][ T3346] syzkaller #0 Tainted: G             L     
[ 1371.023586][ T3346] -----------------------------------------------------
[ 1371.030541][ T3346] syz.9.9900/3346 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1371.038225][ T3346] ffff88805537f2b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1371.047005][ T3346] 
[ 1371.047005][ T3346] and this task is already holding:
[ 1371.054400][ T3346] ffff888029748440 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x1b/0x50
[ 1371.062971][ T3346] which would create a new lock dependency:
[ 1371.068879][ T3346]  (&tty->flow.lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 1371.076571][ T3346] 
[ 1371.076571][ T3346] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1371.086031][ T3346]  (kbd_event_lock){..-.}-{3:3}
[ 1371.086059][ T3346] 
[ 1371.086059][ T3346] ... which became SOFTIRQ-irq-safe at:
[ 1371.098644][ T3346]   lock_acquire+0x106/0x350
[ 1371.103272][ T3346]   _raw_spin_lock+0x2e/0x40
[ 1371.107897][ T3346]   kbd_event+0xd7/0x42f0
[ 1371.112249][ T3346]   input_handle_events_default+0xd4/0x1a0
[ 1371.118270][ T3346]   input_pass_values+0x288/0x890
[ 1371.123329][ T3346]   input_event_dispose+0x330/0x6b0
[ 1371.128555][ T3346]   input_event+0x84/0xc0
[ 1371.132930][ T3346]   imon_incoming_packet+0x1ccf/0x31c0
[ 1371.138530][ T3346]   usb_rx_callback_intf0+0xba/0x210
[ 1371.143859][ T3346]   __usb_hcd_giveback_urb+0x376/0x540
[ 1371.149793][ T3346]   dummy_timer+0xbc0/0x4650
[ 1371.154427][ T3346]   __hrtimer_run_queues+0x3c0/0xa20
[ 1371.159749][ T3346]   hrtimer_run_softirq+0x17a/0x240
[ 1371.164978][ T3346]   handle_softirqs+0x22a/0x840
[ 1371.169873][ T3346]   __irq_exit_rcu+0xca/0x220
[ 1371.174594][ T3346]   irq_exit_rcu+0x9/0x30
[ 1371.178962][ T3346]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1371.184788][ T3346]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1371.191002][ T3346]   do_raw_spin_lock+0x77/0x2f0
[ 1371.195880][ T3346]   fast_dput+0xdd/0x430
[ 1371.200140][ T3346]   dput+0xe8/0x1a0
[ 1371.203967][ T3346]   step_into_slowpath+0x2d4/0x7e0
[ 1371.209121][ T3346]   link_path_walk+0xd50/0x18d0
[ 1371.214000][ T3346]   path_lookupat+0xe4/0x8c0
[ 1371.218608][ T3346]   filename_lookup+0x256/0x5d0
[ 1371.223493][ T3346]   vfs_statx+0xfc/0x200
[ 1371.227781][ T3346]   vfs_fstatat+0x11b/0x170
[ 1371.232324][ T3346]   __x64_sys_newfstatat+0x151/0x200
[ 1371.237632][ T3346]   do_syscall_64+0x15f/0xf80
[ 1371.242335][ T3346]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.248332][ T3346] 
[ 1371.248332][ T3346] to a SOFTIRQ-irq-unsafe lock:
[ 1371.255370][ T3346]  (tasklist_lock){.+.+}-{3:3}
[ 1371.255400][ T3346] 
[ 1371.255400][ T3346] ... which became SOFTIRQ-irq-unsafe at:
[ 1371.268089][ T3346] ...
[ 1371.268103][ T3346]   lock_acquire+0x106/0x350
[ 1371.275322][ T3346]   _raw_read_lock+0x36/0x50
[ 1371.279935][ T3346]   __do_wait+0xde/0x740
[ 1371.284223][ T3346]   do_wait+0x1e7/0x510
[ 1371.288431][ T3346]   kernel_wait+0xd6/0x1c0
[ 1371.292903][ T3346]   call_usermodehelper_exec_work+0xbe/0x230
[ 1371.298953][ T3346]   process_scheduled_works+0xb5d/0x1860
[ 1371.304649][ T3346]   worker_thread+0xa53/0xfc0
[ 1371.309367][ T3346]   kthread+0x388/0x470
[ 1371.313548][ T3346]   ret_from_fork+0x514/0xb70
[ 1371.318260][ T3346]   ret_from_fork_asm+0x1a/0x30
[ 1371.323142][ T3346] 
[ 1371.323142][ T3346] other info that might help us debug this:
[ 1371.323142][ T3346] 
[ 1371.333406][ T3346] Chain exists of:
[ 1371.333406][ T3346]   kbd_event_lock --> &tty->flow.lock --> tasklist_lock
[ 1371.333406][ T3346] 
[ 1371.346237][ T3346]  Possible interrupt unsafe locking scenario:
[ 1371.346237][ T3346] 
[ 1371.354575][ T3346]        CPU0                    CPU1
[ 1371.359960][ T3346]        ----                    ----
[ 1371.365339][ T3346]   lock(tasklist_lock);
[ 1371.369628][ T3346]                                local_irq_disable();
[ 1371.376418][ T3346]                                lock(kbd_event_lock);
[ 1371.383282][ T3346]                                lock(&tty->flow.lock);
[ 1371.390246][ T3346]   <Interrupt>
[ 1371.393712][ T3346]     lock(kbd_event_lock);
[ 1371.398239][ T3346] 
[ 1371.398239][ T3346]  *** DEADLOCK ***
[ 1371.398239][ T3346] 
[ 1371.406400][ T3346] 6 locks held by syz.9.9900/3346:
[ 1371.411551][ T3346]  #0: ffff8880297480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1371.421335][ T3346]  #1: ffff8880297482c8 (&tty->termios_rwsem/1){++++}-{4:4}, at: tty_set_termios+0x147/0x1800
[ 1371.431639][ T3346]  #2: ffff8880297480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90
[ 1371.440976][ T3346]  #3: ffff888029748440 (&tty->flow.lock){....}-{3:3}, at: start_tty+0x1b/0x50
[ 1371.449972][ T3346]  #4: ffff8880297480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x90
[ 1371.459324][ T3346]  #5: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1371.468405][ T3346] 
[ 1371.468405][ T3346] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1371.478820][ T3346]  -> (kbd_event_lock){..-.}-{3:3} {
[ 1371.484163][ T3346]     IN-SOFTIRQ-W at:
[ 1371.488250][ T3346]                       lock_acquire+0x106/0x350
[ 1371.494609][ T3346]                       _raw_spin_lock+0x2e/0x40
[ 1371.500957][ T3346]                       kbd_event+0xd7/0x42f0
[ 1371.507074][ T3346]                       input_handle_events_default+0xd4/0x1a0
[ 1371.514635][ T3346]                       input_pass_values+0x288/0x890
[ 1371.521423][ T3346]                       input_event_dispose+0x330/0x6b0
[ 1371.528382][ T3346]                       input_event+0x84/0xc0
[ 1371.534470][ T3346]                       imon_incoming_packet+0x1ccf/0x31c0
[ 1371.541710][ T3346]                       usb_rx_callback_intf0+0xba/0x210
[ 1371.548757][ T3346]                       __usb_hcd_giveback_urb+0x376/0x540
[ 1371.555984][ T3346]                       dummy_timer+0xbc0/0x4650
[ 1371.562334][ T3346]                       __hrtimer_run_queues+0x3c0/0xa20
[ 1371.569384][ T3346]                       hrtimer_run_softirq+0x17a/0x240
[ 1371.576343][ T3346]                       handle_softirqs+0x22a/0x840
[ 1371.582957][ T3346]                       __irq_exit_rcu+0xca/0x220
[ 1371.589406][ T3346]                       irq_exit_rcu+0x9/0x30
[ 1371.595500][ T3346]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1371.602980][ T3346]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1371.610807][ T3346]                       do_raw_spin_lock+0x77/0x2f0
[ 1371.617424][ T3346]                       fast_dput+0xdd/0x430
[ 1371.623427][ T3346]                       dput+0xe8/0x1a0
[ 1371.628989][ T3346]                       step_into_slowpath+0x2d4/0x7e0
[ 1371.635866][ T3346]                       link_path_walk+0xd50/0x18d0
[ 1371.642480][ T3346]                       path_lookupat+0xe4/0x8c0
[ 1371.648826][ T3346]                       filename_lookup+0x256/0x5d0
[ 1371.655438][ T3346]                       vfs_statx+0xfc/0x200
[ 1371.661440][ T3346]                       vfs_fstatat+0x11b/0x170
[ 1371.667737][ T3346]                       __x64_sys_newfstatat+0x151/0x200
[ 1371.674776][ T3346]                       do_syscall_64+0x15f/0xf80
[ 1371.681225][ T3346]                       entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.688963][ T3346]     INITIAL USE at:
[ 1371.692977][ T3346]                      lock_acquire+0x106/0x350
[ 1371.699261][ T3346]                      _raw_spin_lock_irqsave+0x40/0x60
[ 1371.706216][ T3346]                      vt_reset_unicode+0x2b/0x160
[ 1371.712748][ T3346]                      reset_vc+0x68/0x1b0
[ 1371.718573][ T3346]                      vc_init+0x70/0x4a0
[ 1371.724312][ T3346]                      con_init+0x377/0x6a0
[ 1371.730233][ T3346]                      console_init+0x10b/0x4a0
[ 1371.736499][ T3346]                      start_kernel+0x230/0x3e0
[ 1371.742754][ T3346]                      x86_64_start_reservations+0x24/0x30
[ 1371.749972][ T3346]                      x86_64_start_kernel+0x143/0x1c0
[ 1371.756851][ T3346]                      common_startup_64+0x13e/0x147
[ 1371.763551][ T3346]   }
[ 1371.766150][ T3346]   ... key      at: [<ffffffff8f209e98>] kbd_event_lock+0x18/0xa0
[ 1371.774071][ T3346] -> (&tty->flow.lock){....}-{3:3} {
[ 1371.779407][ T3346]    INITIAL USE at:
[ 1371.783352][ T3346]                    lock_acquire+0x106/0x350
[ 1371.789466][ T3346]                    _raw_spin_lock_irqsave+0x40/0x60
[ 1371.796257][ T3346]                    start_tty+0x1b/0x50
[ 1371.801949][ T3346]                    n_tty_set_termios+0xa7c/0x10a0
[ 1371.808573][ T3346]                    tty_set_termios+0xdb3/0x1800
[ 1371.815021][ T3346]                    set_termios+0x566/0x710
[ 1371.821025][ T3346]                    tty_mode_ioctl+0x4a6/0x7d0
[ 1371.827296][ T3346]                    tty_ioctl+0x9c5/0xde0
[ 1371.833149][ T3346]                    __se_sys_ioctl+0xfc/0x170
[ 1371.839321][ T3346]                    do_syscall_64+0x15f/0xf80
[ 1371.845513][ T3346]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.852990][ T3346]  }
[ 1371.855532][ T3346]  ... key      at: [<ffffffff9a8184a0>] alloc_tty_struct.__key.35+0x0/0x20
[ 1371.864243][ T3346]  ... acquired at:
[ 1371.868061][ T3346]    _raw_spin_lock_irqsave+0x40/0x60
[ 1371.873471][ T3346]    stop_tty+0x2f/0x140
[ 1371.877728][ T3346]    kbd_event+0x2f91/0x42f0
[ 1371.882337][ T3346]    input_handle_events_default+0xd4/0x1a0
[ 1371.888247][ T3346]    input_pass_values+0x288/0x890
[ 1371.893397][ T3346]    input_event_dispose+0x330/0x6b0
[ 1371.898750][ T3346]    input_inject_event+0x1dc/0x330
[ 1371.903988][ T3346]    evdev_write+0x325/0x4c0
[ 1371.908619][ T3346]    vfs_write+0x29a/0xb90
[ 1371.913065][ T3346]    ksys_write+0x150/0x270
[ 1371.917593][ T3346]    do_syscall_64+0x15f/0xf80
[ 1371.922385][ T3346]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.928475][ T3346] 
[ 1371.930817][ T3346] 
[ 1371.930817][ T3346] the dependencies between the lock to be acquired
[ 1371.930828][ T3346]  and SOFTIRQ-irq-unsafe lock:
[ 1371.944396][ T3346]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1371.949739][ T3346]      HARDIRQ-ON-R at:
[ 1371.953916][ T3346]                         lock_acquire+0x106/0x350
[ 1371.960451][ T3346]                         _raw_read_lock+0x36/0x50
[ 1371.966987][ T3346]                         __do_wait+0xde/0x740
[ 1371.973248][ T3346]                         do_wait+0x1e7/0x510
[ 1371.979334][ T3346]                         kernel_wait+0xd6/0x1c0
[ 1371.985679][ T3346]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1371.993700][ T3346]                         process_scheduled_works+0xb5d/0x1860
[ 1372.001280][ T3346]                         worker_thread+0xa53/0xfc0
[ 1372.007893][ T3346]                         kthread+0x388/0x470
[ 1372.013985][ T3346]                         ret_from_fork+0x514/0xb70
[ 1372.020602][ T3346]                         ret_from_fork_asm+0x1a/0x30
[ 1372.027379][ T3346]      SOFTIRQ-ON-R at:
[ 1372.031550][ T3346]                         lock_acquire+0x106/0x350
[ 1372.038074][ T3346]                         _raw_read_lock+0x36/0x50
[ 1372.044608][ T3346]                         __do_wait+0xde/0x740
[ 1372.050791][ T3346]                         do_wait+0x1e7/0x510
[ 1372.056885][ T3346]                         kernel_wait+0xd6/0x1c0
[ 1372.063246][ T3346]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1372.071165][ T3346]                         process_scheduled_works+0xb5d/0x1860
[ 1372.078754][ T3346]                         worker_thread+0xa53/0xfc0
[ 1372.085372][ T3346]                         kthread+0x388/0x470
[ 1372.091452][ T3346]                         ret_from_fork+0x514/0xb70
[ 1372.098090][ T3346]                         ret_from_fork_asm+0x1a/0x30
[ 1372.104871][ T3346]      INITIAL USE at:
[ 1372.108961][ T3346]                        lock_acquire+0x106/0x350
[ 1372.115426][ T3346]                        _raw_write_lock_irq+0x3d/0x50
[ 1372.122307][ T3346]                        copy_process+0x2b5e/0x4450
[ 1372.128927][ T3346]                        kernel_clone+0x284/0x8f0
[ 1372.135384][ T3346]                        user_mode_thread+0x110/0x180
[ 1372.142169][ T3346]                        rest_init+0x23/0x300
[ 1372.148262][ T3346]                        start_kernel+0x38a/0x3e0
[ 1372.154699][ T3346]                        x86_64_start_reservations+0x24/0x30
[ 1372.162186][ T3346]                        x86_64_start_kernel+0x143/0x1c0
[ 1372.169240][ T3346]                        common_startup_64+0x13e/0x147
[ 1372.176116][ T3346]      INITIAL READ USE at:
[ 1372.180637][ T3346]                             lock_acquire+0x106/0x350
[ 1372.187527][ T3346]                             _raw_read_lock+0x36/0x50
[ 1372.194414][ T3346]                             __do_wait+0xde/0x740
[ 1372.200946][ T3346]                             do_wait+0x1e7/0x510
[ 1372.207400][ T3346]                             kernel_wait+0xd6/0x1c0
[ 1372.214105][ T3346]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1372.222399][ T3346]                             process_scheduled_works+0xb5d/0x1860
[ 1372.230323][ T3346]                             worker_thread+0xa53/0xfc0
[ 1372.237290][ T3346]                             kthread+0x388/0x470
[ 1372.243732][ T3346]                             ret_from_fork+0x514/0xb70
[ 1372.250702][ T3346]                             ret_from_fork_asm+0x1a/0x30
[ 1372.257837][ T3346]    }
[ 1372.260527][ T3346]    ... key      at: [<ffffffff8e60a058>] tasklist_lock+0x18/0x40
[ 1372.268456][ T3346]    ... acquired at:
[ 1372.272445][ T3346]    _raw_read_lock+0x36/0x50
[ 1372.277142][ T3346]    send_sigurg+0x12b/0x420
[ 1372.281790][ T3346]    sk_send_sigurg+0x6c/0x2e0
[ 1372.286612][ T3346]    queue_oob+0x42c/0x4f0
[ 1372.291060][ T3346]    unix_stream_sendmsg+0xcb1/0xe80
[ 1372.296372][ T3346]    ____sys_sendmsg+0x972/0x9f0
[ 1372.301332][ T3346]    ___sys_sendmsg+0x2a5/0x360
[ 1372.306703][ T3346]    __sys_sendmmsg+0x27c/0x4e0
[ 1372.311611][ T3346]    __x64_sys_sendmmsg+0xa0/0xc0
[ 1372.316666][ T3346]    do_syscall_64+0x15f/0xf80
[ 1372.321456][ T3346]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.327543][ T3346] 
[ 1372.329904][ T3346]  -> (&f_owner->lock){....}-{3:3} {
[ 1372.335245][ T3346]     INITIAL USE at:
[ 1372.339252][ T3346]                      lock_acquire+0x106/0x350
[ 1372.345546][ T3346]                      _raw_write_lock_irq+0x3d/0x50
[ 1372.352242][ T3346]                      __f_setown+0x67/0x370
[ 1372.358247][ T3346]                      tty_fasync+0x2db/0x350
[ 1372.364343][ T3346]                      do_fcntl+0x1201/0x1a20
[ 1372.370525][ T3346]                      __se_sys_fcntl+0xc8/0x150
[ 1372.376875][ T3346]                      do_syscall_64+0x15f/0xf80
[ 1372.383279][ T3346]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.390930][ T3346]     INITIAL READ USE at:
[ 1372.395370][ T3346]                           lock_acquire+0x106/0x350
[ 1372.402075][ T3346]                           _raw_read_lock_irqsave+0x48/0x60
[ 1372.409468][ T3346]                           send_sigio+0x38/0x370
[ 1372.415902][ T3346]                           dnotify_handle_event+0x169/0x440
[ 1372.423306][ T3346]                           fsnotify+0x168e/0x1ae0
[ 1372.429832][ T3346]                           __fsnotify_parent+0x50d/0x620
[ 1372.436967][ T3346]                           notify_change+0xc55/0xf40
[ 1372.443762][ T3346]                           chmod_common+0x273/0x4a0
[ 1372.450566][ T3346]                           do_fchmodat+0x12d/0x230
[ 1372.457185][ T3346]                           __x64_sys_chmod+0x62/0x70
[ 1372.463986][ T3346]                           do_syscall_64+0x15f/0xf80
[ 1372.470783][ T3346]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.478958][ T3346]   }
[ 1372.481564][ T3346]   ... key      at: [<ffffffff9a538840>] file_f_owner_allocate.__key+0x0/0x20
[ 1372.490544][ T3346]   ... acquired at:
[ 1372.494454][ T3346]    _raw_read_lock_irqsave+0x48/0x60
[ 1372.499853][ T3346]    send_sigio+0x38/0x370
[ 1372.504300][ T3346]    kill_fasync+0x24d/0x4d0
[ 1372.508920][ T3346]    lease_break_callback+0x26/0x30
[ 1372.514159][ T3346]    __break_lease+0x81f/0x1ea0
[ 1372.519037][ T3346]    __vfs_setxattr_locked+0x204/0x2c0
[ 1372.524521][ T3346]    vfs_setxattr+0x163/0x360
[ 1372.529233][ T3346]    filename_setxattr+0x296/0x630
[ 1372.534362][ T3346]    path_setxattrat+0x3eb/0x440
[ 1372.539327][ T3346]    __x64_sys_lsetxattr+0xbf/0xe0
[ 1372.544461][ T3346]    do_syscall_64+0x15f/0xf80
[ 1372.549260][ T3346]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.555354][ T3346] 
[ 1372.557692][ T3346] -> (&new->fa_lock){....}-{3:3} {
[ 1372.562840][ T3346]    INITIAL USE at:
[ 1372.566756][ T3346]                    lock_acquire+0x106/0x350
[ 1372.572857][ T3346]                    _raw_write_lock_irq+0x3d/0x50
[ 1372.579413][ T3346]                    fasync_remove_entry+0xf1/0x1c0
[ 1372.586032][ T3346]                    tty_fasync+0x13c/0x350
[ 1372.591955][ T3346]                    __fput+0x890/0xa60
[ 1372.597515][ T3346]                    task_work_run+0x1d9/0x270
[ 1372.603717][ T3346]                    exit_to_user_mode_loop+0xed/0x480
[ 1372.610596][ T3346]                    do_syscall_64+0x33e/0xf80
[ 1372.616777][ T3346]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.624261][ T3346]    INITIAL READ USE at:
[ 1372.628618][ T3346]                         lock_acquire+0x106/0x350
[ 1372.635167][ T3346]                         _raw_read_lock_irqsave+0x48/0x60
[ 1372.642410][ T3346]                         kill_fasync+0x199/0x4d0
[ 1372.648862][ T3346]                         sock_wake_async+0x137/0x160
[ 1372.655701][ T3346]                         sock_def_error_report+0x332/0x390
[ 1372.663021][ T3346]                         sk_error_report+0x48/0x280
[ 1372.669728][ T3346]                         unix_dgram_connect+0x96b/0xc20
[ 1372.676775][ T3346]                         __sys_connect+0x312/0x450
[ 1372.683388][ T3346]                         __x64_sys_connect+0x7a/0x90
[ 1372.690211][ T3346]                         do_syscall_64+0x15f/0xf80
[ 1372.696859][ T3346]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.704768][ T3346]  }
[ 1372.707283][ T3346]  ... key      at: [<ffffffff9a538860>] fasync_insert_entry.__key+0x0/0x20
[ 1372.715977][ T3346]  ... acquired at:
[ 1372.719789][ T3346]    _raw_read_lock_irqsave+0x48/0x60
[ 1372.725185][ T3346]    kill_fasync+0x199/0x4d0
[ 1372.729810][ T3346]    __start_tty+0x18c/0x220
[ 1372.734421][ T3346]    start_tty+0x26/0x50
[ 1372.738698][ T3346]    n_tty_set_termios+0xa7c/0x10a0
[ 1372.743935][ T3346]    tty_set_termios+0xdb3/0x1800
[ 1372.748986][ T3346]    set_termios+0x566/0x710
[ 1372.753622][ T3346]    tty_mode_ioctl+0x4a6/0x7d0
[ 1372.758511][ T3346]    tty_ioctl+0x9c5/0xde0
[ 1372.762959][ T3346]    __se_sys_ioctl+0xfc/0x170
[ 1372.767766][ T3346]    do_syscall_64+0x15f/0xf80
[ 1372.772559][ T3346]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.778645][ T3346] 
[ 1372.780988][ T3346] 
[ 1372.780988][ T3346] stack backtrace:
[ 1372.786979][ T3346] CPU: 0 UID: 0 PID: 3346 Comm: syz.9.9900 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1372.787006][ T3346] Tainted: [L]=SOFTLOCKUP
[ 1372.787013][ T3346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1372.787027][ T3346] Call Trace:
[ 1372.787039][ T3346]  <TASK>
[ 1372.787047][ T3346]  dump_stack_lvl+0xe8/0x150
[ 1372.787078][ T3346]  __lock_acquire+0x2a94/0x2cf0
[ 1372.787116][ T3346]  ? kill_fasync+0x199/0x4d0
[ 1372.787138][ T3346]  lock_acquire+0x106/0x350
[ 1372.787167][ T3346]  ? kill_fasync+0x199/0x4d0
[ 1372.787194][ T3346]  ? ldsem_down_read_trylock+0x13d/0x1b0
[ 1372.787223][ T3346]  ? tty_ldisc_ref+0x1c/0x90
[ 1372.787242][ T3346]  ? __pfx_ldsem_down_read_trylock+0x10/0x10
[ 1372.787272][ T3346]  _raw_read_lock_irqsave+0x48/0x60
[ 1372.787294][ T3346]  ? kill_fasync+0x199/0x4d0
[ 1372.787320][ T3346]  kill_fasync+0x199/0x4d0
[ 1372.787341][ T3346]  ? kill_fasync+0x53/0x4d0
[ 1372.787363][ T3346]  ? __pfx_n_tty_write_wakeup+0x10/0x10
[ 1372.787401][ T3346]  __start_tty+0x18c/0x220
[ 1372.787420][ T3346]  start_tty+0x26/0x50
[ 1372.787438][ T3346]  n_tty_set_termios+0xa7c/0x10a0
[ 1372.787471][ T3346]  ? __pfx_n_tty_set_termios+0x10/0x10
[ 1372.787496][ T3346]  tty_set_termios+0xdb3/0x1800
[ 1372.787516][ T3346]  ? __pfx_tty_set_termios+0x10/0x10
[ 1372.787539][ T3346]  set_termios+0x566/0x710
[ 1372.787557][ T3346]  ? __pfx_set_termios+0x10/0x10
[ 1372.787576][ T3346]  ? tty_ldisc_ref_wait+0x25/0x70
[ 1372.787605][ T3346]  tty_mode_ioctl+0x4a6/0x7d0
[ 1372.787623][ T3346]  ? __pfx_tty_mode_ioctl+0x10/0x10
[ 1372.787641][ T3346]  ? __pfx___ldsem_down_read_nested+0x10/0x10
[ 1372.787674][ T3346]  ? n_tty_ioctl_helper+0x84/0x4d0
[ 1372.787692][ T3346]  ? __pfx_n_tty_ioctl+0x10/0x10
[ 1372.787717][ T3346]  tty_ioctl+0x9c5/0xde0
[ 1372.787741][ T3346]  ? __pfx_tty_ioctl+0x10/0x10
[ 1372.787761][ T3346]  __se_sys_ioctl+0xfc/0x170
[ 1372.787783][ T3346]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.787802][ T3346]  do_syscall_64+0x15f/0xf80
[ 1372.787826][ T3346]  ? clear_bhb_loop+0x40/0x90
[ 1372.787846][ T3346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1372.787864][ T3346] RIP: 0033:0x7f675a59c819
[ 1372.787884][ T3346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1372.787900][ T3346] RSP: 002b:00007f675b467028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1372.787919][ T3346] RAX: ffffffffffffffda RBX: 00007f675a816090 RCX: 00007f675a59c819
[ 1372.787932][ T3346] RDX: 0000200000000140 RSI: 0000000000005402 RDI: 0000000000000004
[ 1372.787955][ T3346] RBP: 00007f675a632c91 R08: 0000000000000000 R09: 0000000000000000
[ 1372.787966][ T3346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1372.787977][ T3346] R13: 00007f675a816128 R14: 00007f675a816090 R15: 00007f675a93fa48
[ 1372.787997][ T3346]  </TASK>
[ 1372.848727][T29914] gspca_spca1528: reg_w err -110
[ 1373.073394][T29914] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[ 1373.196749][T29914] usb 2-1: USB disconnect, device number 115
[ 1373.341559][T12032] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.421963][T12032] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.531168][T12032] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.661237][T12032] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1373.808791][T12032] bridge_slave_1: left allmulticast mode
[ 1373.814923][T12032] bridge_slave_1: left promiscuous mode
[ 1373.820701][T12032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1373.831319][T12032] bridge_slave_0: left allmulticast mode
[ 1373.837620][T12032] bridge_slave_0: left promiscuous mode
[ 1373.843383][T12032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1373.865839][T26620] IPVS: ip_vs_send_async error -101
[ 1373.995854][T12032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1374.007769][T12032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1374.017908][T12032] bond0 (unregistering): Released all slaves
[ 1374.250041][T12032] hsr_slave_0: left promiscuous mode
[ 1374.261974][T12032] hsr_slave_1: left promiscuous mode
[ 1374.276656][T12032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1374.284191][T12032] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1374.293535][T12032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1374.314455][T12032] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1374.338873][T12032] veth1_macvtap: left promiscuous mode
[ 1374.354435][T12032] veth0_macvtap: left promiscuous mode
[ 1374.360047][T12032] veth1_vlan: left promiscuous mode
[ 1374.374433][T12032] veth0_vlan: left promiscuous mode
[ 1374.619110][T12032] team0 (unregistering): Port device team_slave_1 removed
[ 1374.632757][T12032] team0 (unregistering): Port device team_slave_0 removed
[ 1374.733481][ T5505] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1375.235602][ T5505] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1375.646199][ T5505] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1376.048825][ T5505] 8021q: adding VLAN 0 to HW filter on device eth16