last executing test programs:

6m38.58630546s ago: executing program 32 (id=73):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000028c0)=@newtfilter={0xea0, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe74, 0x2, [@TCA_FW_ACT={0xe70, 0x4, [@m_pedit={0xe6c, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0xb}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0xffc00000, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x9, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0xd, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0x7, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0x0, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x2, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x0, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0xb, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x89}, {0x2, 0xffffffff, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xffffeff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0x80000001, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x3, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x0, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0xffff, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xea0}, 0x1, 0x0, 0x0, 0x80}, 0x800)

3m46.042122405s ago: executing program 3 (id=1329):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28)
sendto$inet6(r0, &(0x7f0000000440)="830b77a3c22d11cf560d377488c7dd5093cf12fd2499050f20642439ed5c289356a6b04b35c1e54567ebf069d81ccd7ebf518e4a372fbc54968fd888fd0627d49e3b848f7dadc1de5b7dd4cf88d33b8b42500bb4fc9cf7aa64de7c0f6ba1a9cc635b994276cef02364cee1e538b04f6d0b1b08000000ac030cacf94e1830cb99395545dce65a7de4c7caadb6c407f1d0aac007b90e39e488f9335f6f5a6b56405141ee01318a7300a3ea975f6b6d79846b38e3a157463ef2c5090112b5f44ad2202c161e1dd7fa200543a0651f417df59d2b9c9b4ec3ea", 0xffffffffffffffe8, 0x4000, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)

3m45.350142284s ago: executing program 3 (id=1336):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan1\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0)

3m45.012933392s ago: executing program 3 (id=1340):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000008c0))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0))

3m44.868858165s ago: executing program 3 (id=1343):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00')

3m44.649085642s ago: executing program 3 (id=1345):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x1f, 0xffffffffffffffff, 0x99b2f000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="440f20c066350d000000440f22c0bc0065666765f36f0f33f30f09660c3a0c55000010752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x3b}], 0x1, 0x54, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000002000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x100000000], 0xeeef0000, 0x80082})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m44.225033754s ago: executing program 3 (id=1349):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

3m43.903269809s ago: executing program 33 (id=1349):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)

2m50.625622126s ago: executing program 1 (id=1662):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m49.857716096s ago: executing program 1 (id=1664):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0xfd, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m49.424889954s ago: executing program 1 (id=1665):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x62, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20000080)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "5da03c39137c0d63", "0dad66e971f36b8d73c3e42b55bc35b5", "4c67a20c", "7267a931ab9c6be7"}, 0x28)

2m49.323545894s ago: executing program 1 (id=1666):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

2m48.393094408s ago: executing program 1 (id=1668):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x9)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x7fffffffffffffff)

2m45.940970314s ago: executing program 1 (id=1677):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x240080e4)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m45.39649144s ago: executing program 34 (id=1677):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x240080e4)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m35.71575879s ago: executing program 7 (id=1678):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

2m34.62157347s ago: executing program 7 (id=1721):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000940)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000000)=""/164, 0xa4, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f00000004c0)=""/110, 0x6e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000180)=""/242, 0xf2, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000008c0)={0x2, 0x0, {&(0x7f0000000880)=""/25, 0x19, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48)

2m34.18911236s ago: executing program 7 (id=1725):
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
unshare(0x4000400)
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48)

2m33.26222853s ago: executing program 35 (id=1725):
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
unshare(0x4000400)
r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000140)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48)

2m31.835271676s ago: executing program 4 (id=1732):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3ff, @mcast2, 0x7}, 0x1c, 0x0}}], 0x1, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0xa0000004, 0x1000000})

2m31.667112738s ago: executing program 4 (id=1733):
socket$nl_route(0x10, 0x3, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

2m31.057055034s ago: executing program 4 (id=1737):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [<r4=>0x0, 0x0, 0x0, <r5=>0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8]})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})

2m30.8277342s ago: executing program 4 (id=1738):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m29.726112873s ago: executing program 4 (id=1744):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4)

2m26.256775223s ago: executing program 4 (id=1754):
syz_io_uring_setup(0x1f8c, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f00000002c0), 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x8, 0x0, 0x0}}, 0x10)
r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"])
r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})

2m25.787737461s ago: executing program 36 (id=1754):
syz_io_uring_setup(0x1f8c, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f00000002c0), 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x8, 0x0, 0x0}}, 0x10)
r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400})
ioctl$TUNSETTXFILTER(r0, 0x401054d5, &(0x7f0000000380)=ANY=[@ANYBLOB="4504"])
r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})

1m16.493233098s ago: executing program 8 (id=2155):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r2=>0x0}, 0x2058)
write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r3=>0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_IOCTL(r0, &(0x7f0000002140)={0x20, 0x0, r3, {0x403, 0x0, 0x80003ff, 0xfff}}, 0x20)
syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x1, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x3, 0x8, 0x2, 0x0, 0x800, 0x0, 0x0, 0xa000, 0xbca4, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r1, 0x0, 0x0)

1m16.118416391s ago: executing program 8 (id=2159):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1m15.581837441s ago: executing program 8 (id=2162):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
removexattr(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)=@known='user.incfs.id\x00')
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000080)={0xc, 0x4, 0x5})
chdir(&(0x7f0000000480)='./cgroup\x00')
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0}, &(0x7f0000000100)=0xc)
syz_open_procfs(r2, &(0x7f0000000140)='net/xfrm_stat\x00')
write$cgroup_int(r1, &(0x7f0000000040)=0x902, 0x12)

1m15.192597086s ago: executing program 8 (id=2165):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00')

1m15.01095151s ago: executing program 8 (id=2167):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil})

1m14.468440791s ago: executing program 8 (id=2170):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x6000009)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r1)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

1m13.232851034s ago: executing program 37 (id=2170):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x6000009)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69)
close(r1)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

9.265914313s ago: executing program 9 (id=2469):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0xd8}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x1000, @private1, 0x9}}, [0x40, 0xd, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0xe, 0x5, 0x80000001, 0xfff, 0x6, 0xe0000000, 0x5, 0x8000000000000000, 0x4f3]}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x3, 0xef, '\x00', 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.088971282s ago: executing program 9 (id=2474):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x28000, 0x1000, 0x1}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)

7.778751979s ago: executing program 9 (id=2477):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0xe382, 0x0, 0x0, 0x8}}, 0x50)
read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000480)={0x10, 0xffffffffffffffda, r2}, 0x10)

6.772509413s ago: executing program 6 (id=2481):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x154c, 0xef91, 0x48, 0x0, 0x0)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
readv(r5, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1)

6.341070697s ago: executing program 9 (id=2485):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0)
r3 = dup(r2)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r3, 0x0, 0xffffffdb)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

5.644188759s ago: executing program 5 (id=2488):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xfa7})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"])
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007})

5.59503103s ago: executing program 6 (id=2489):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r2, 0x0)
ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000000)={0x26, 0x0, 0x41})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7a6e, 0x4, 0x20000000000, 0x0, 0x8, 0xc0, 0x0, 0x2], 0x8000000, 0x8340})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.209557019s ago: executing program 6 (id=2490):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0x88c, &(0x7f00000001c0)={0x0, 0xea4e, 0x0, 0x10000002, 0xbfdffffc}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x4008301}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002b80)=""/4104, 0x1008}], 0x1}, 0x80000000}], 0x2, 0x20, 0x0)

5.182764109s ago: executing program 2 (id=2491):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0)
close(r1)

5.008988446s ago: executing program 5 (id=2492):
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$nbd(r0, &(0x7f0000000380)=ANY=[], 0xfffffe02)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000)
syz_open_procfs(0x0, &(0x7f0000000a80)='net/igmp\x00')
syz_open_dev$tty20(0xc, 0x4, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
pselect6(0x40, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x7ff, 0x7, 0x0, 0x8, 0x3, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0)

4.422023607s ago: executing program 6 (id=2493):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0xd8, 0xff, 0x4, 0x40, 0x7f, 0xff, 0x7, 0x7f, 0x2, 0x8, 0x8, 0x3, 0x0, 0x7f, 0x9, 0xe2}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0xa, 0x800000000000000, 0x10, 0x1, 0xf4, 0x1, 0x0, 0x3, 0x7f, 0x4000000000000004, 0x8000, 0x7ff, 0x8396, 0x200, 0x9, 0xf], 0x80a0000, 0xd7c6})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @pic={0xb, 0x2, 0x8, 0x6, 0x2, 0x4, 0x5, 0x0, 0x5, 0x81, 0x6, 0x81, 0x6, 0x2e, 0x2, 0xff}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.293568554s ago: executing program 2 (id=2494):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x11}, 0xffffffffffffffda)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x80011}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d42, 0x2, 0x60, 0x0, 0x0)

3.891955124s ago: executing program 2 (id=2495):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xffffffffffefffff, {0x3, 0x1, 0x0, 0x0, 0x0, 0x2, {0x0, 0x2, 0x2, 0x0, 0x0, 0x9, 0xda9a, 0xff, 0x4000000, 0xa000, 0x0, 0x0, r2, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')
syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8c6, 0x200, 0x8001, 0x3, 0x0, 0x2, 0x20000000, 0xa000, 0x7, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

3.570035765s ago: executing program 5 (id=2496):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SG_EMULATED_HOST(r2, 0x1267, &(0x7f0000000000))

3.56916842s ago: executing program 6 (id=2497):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000300)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000100)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x84, 0x1, '\r'}, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000700)={0x60, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x19, 0x2, "06af"}, 0x0, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x1}, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e80)={0x18, &(0x7f0000000d40)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})

3.24361426s ago: executing program 2 (id=2499):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0)

3.088940086s ago: executing program 9 (id=2500):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x88, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd}, {0x6, 0x24, 0x1a, 0x3}, [@acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0xf, 0x5, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2e, 0x4, 0x7f}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7f, 0x6c71}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x6}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x10, 0x4, 0x2012, 0x3, 0x8016, 0x10, 0x2, 0x10, 0x7, 0x5f5, 0x10, 0xd}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

3.076870309s ago: executing program 5 (id=2501):
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0xce})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2.984573029s ago: executing program 0 (id=2502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x3, {0x0, 0x0, 0x4}, {0x2, 0x0, 0x2}, 0xff, 0xfd}, {0x1, 0x0, {0x0, 0x0, 0x1}, {0x1, 0xf0, 0x4}, 0xfd, 0xfd}], 0x40)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0xf, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4092}, 0x4000000)

2.77293315s ago: executing program 0 (id=2503):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000034c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x40)

2.772667126s ago: executing program 5 (id=2504):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
sendto$inet6(r0, &(0x7f0000000240)="d1", 0x1, 0x800, 0x0, 0x0)

2.713144328s ago: executing program 2 (id=2505):
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

2.439913548s ago: executing program 0 (id=2506):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000000)="66bad004ec440f20c0350d000000440f22c00f30670f01c5b93e030000b0ae9c9cbaf80cb8da6ada8bef66bafc0c66edc1c81fc4c159f656330f380a6c414a", 0x3f}], 0x1, 0x32, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.866186576s ago: executing program 0 (id=2507):
pipe2$9p(&(0x7f0000000240), 0x0)
fsopen(&(0x7f00000000c0)='ocfs2\x00', 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x2, 0xdf, 0x6, 0x81, 0x2e, 0x4d, 0x0, 0x33, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x4, 0x403})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"])

1.367805652s ago: executing program 0 (id=2508):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000007c0)={'broute\x00', 0x0, 0x4, 0x0, [0x9, 0x2, 0x8, 0x9, 0xdb], 0x0, 0x0, 0x0}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x4840, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'ip6gre0\x00', {0x1}, 0xc3})

569.384519ms ago: executing program 2 (id=2509):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x72, 0xa0, 0x66, 0x10, 0x2058, 0x1005, 0xe81f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb4, 0x2, 0x0, 0x90, 0x27, 0xd0, 0x80}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000001580)={0x24, &(0x7f0000001280)={0x20, 0x15, 0x2, "f24f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

414.391824ms ago: executing program 9 (id=2510):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

281.021277ms ago: executing program 6 (id=2511):
r0 = epoll_create1(0x80000)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080))

197.71942ms ago: executing program 5 (id=2512):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
syz_usb_disconnect(r0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0xb, 0xa4, 0xffb, 0xa, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x109, 0x4, 0x7, 0x5, 0x100000, 0x7c550, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20004, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x6, 0x8, 0x20004, 0x4, 0x401, 0x3, 0xd1, 0x8, 0x1, 0x1fc, 0xc5d, 0xffffffff]}})
connect(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

0s ago: executing program 0 (id=2513):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x0)
mprotect(&(0x7f00000ba000/0x2000)=nil, 0x2000, 0x0)
mprotect(&(0x7f0000012000/0x3000)=nil, 0x3000, 0xb)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

kernel console output (not intermixed with test programs):

disabled state
[  342.771223][T10841] bridge_slave_0: entered allmulticast mode
[  342.847254][T10841] bridge_slave_0: entered promiscuous mode
[  342.901516][T10841] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.948869][T10841] bridge0: port 2(bridge_slave_1) entered disabled state
[  342.984232][T10841] bridge_slave_1: entered allmulticast mode
[  343.009495][ T5853] Bluetooth: hci4: command tx timeout
[  343.041363][T10841] bridge_slave_1: entered promiscuous mode
[  343.177473][T10841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.232761][T10841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.379780][T10841] team0: Port device team_slave_0 added
[  343.426250][T10841] team0: Port device team_slave_1 added
[  343.584677][T10841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.594645][T10841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.627233][T10841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.665320][T10841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.686744][T10841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  343.715802][T10841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.220073][T10841] hsr_slave_0: entered promiscuous mode
[  344.256769][T10841] hsr_slave_1: entered promiscuous mode
[  344.279136][T10841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  344.301834][T10841] Cannot create hsr debugfs directory
[  344.329047][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1696'.
[  344.366670][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1696'.
[  344.399617][T10894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1696'.
[  345.056671][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805d209400: rx timeout, send abort
[  345.067250][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805d209400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  345.087472][ T5853] Bluetooth: hci4: command tx timeout
[  345.088828][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  345.314895][    T9] usb 6-1: Using ep0 maxpacket: 8
[  345.340138][    T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  345.383168][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.438632][T10841] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  345.463536][    T9] usb 6-1: config 0 descriptor??
[  345.497474][T10841] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  345.530166][T10841] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  345.584688][T10841] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  346.148484][T10841] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.292348][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1701'.
[  346.312597][T10841] 8021q: adding VLAN 0 to HW filter on device team0
[  346.431610][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.438902][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.676063][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.683238][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  346.993876][T10841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  347.116787][    T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  347.137446][    T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  347.168758][ T5853] Bluetooth: hci4: command tx timeout
[  347.215225][    T9] asix 6-1:0.0: probe with driver asix failed with error -71
[  347.217898][T10841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.325770][    T9] usb 6-1: USB disconnect, device number 17
[  347.408196][T10841] veth0_vlan: entered promiscuous mode
[  347.501583][T10841] veth1_vlan: entered promiscuous mode
[  347.623885][T10841] veth0_macvtap: entered promiscuous mode
[  347.720464][T10841] veth1_macvtap: entered promiscuous mode
[  347.869689][T10841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.979754][T10841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.054287][T10841] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.074446][T10841] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.097460][T10841] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.134516][T10841] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.736225][T10002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.788510][T10002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.982317][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.025754][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.253507][ T5853] Bluetooth: hci4: command tx timeout
[  351.070603][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.156415][ T2152] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  351.353379][ T2152] usb 7-1: Using ep0 maxpacket: 16
[  351.377325][ T2152] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  351.422709][ T2152] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  351.454646][ T2152] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  351.469353][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.495576][ T2152] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.529671][ T2152] usb 7-1: Product: syz
[  351.535582][ T2152] usb 7-1: Manufacturer: syz
[  351.540255][ T2152] usb 7-1: SerialNumber: syz
[  351.716210][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.811980][ T2152] usb 7-1: 0:2 : does not exist
[  351.828385][ T2152] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  351.947307][ T2152] usb 7-1: USB disconnect, device number 4
[  351.967478][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.068620][ T6262] udevd[6262]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  352.701066][   T12] bridge_slave_1: left allmulticast mode
[  352.712926][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1730'.
[  352.732476][   T12] bridge_slave_1: left promiscuous mode
[  352.743743][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.832399][   T12] bridge_slave_0: left allmulticast mode
[  352.848889][   T12] bridge_slave_0: left promiscuous mode
[  352.854808][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.926223][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  352.938054][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  352.947842][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  352.975354][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  352.984562][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  353.793571][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  353.806607][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  353.817264][   T12] bond0 (unregistering): Released all slaves
[  354.112238][T11047] input: syz1 as /devices/virtual/input/input27
[  354.842226][   T12] hsr_slave_0: left promiscuous mode
[  354.874521][   T12] hsr_slave_1: left promiscuous mode
[  354.895736][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.903258][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.957159][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.964660][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.060707][   T12] veth1_macvtap: left promiscuous mode
[  355.086464][ T5858] Bluetooth: hci4: command tx timeout
[  355.088235][T11073] loop9: detected capacity change from 0 to 7
[  355.099496][   T12] veth0_macvtap: left promiscuous mode
[  355.114190][   T12] veth1_vlan: left promiscuous mode
[  355.134469][T11073]  loop9:
[  355.143817][T11073] loop9: partition table partially beyond EOD, truncated
[  355.151350][   T12] veth0_vlan: left promiscuous mode
[  355.224902][ T2152] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  355.384549][ T2152] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  355.431263][ T2152] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  355.469982][ T2152] usb 7-1: config 220 has no interface number 2
[  355.507699][ T2152] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  355.541600][ T2152] usb 7-1: config 220 interface 0 has no altsetting 0
[  355.557952][ T2152] usb 7-1: config 220 interface 76 has no altsetting 0
[  355.574087][ T2152] usb 7-1: config 220 interface 1 has no altsetting 0
[  355.600494][ T2152] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  355.615274][ T2152] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.642059][ T2152] usb 7-1: Product: syz
[  355.650053][ T2152] usb 7-1: Manufacturer: syz
[  355.655233][ T2152] usb 7-1: SerialNumber: syz
[  356.866765][   T12] team0 (unregistering): Port device team_slave_1 removed
[  356.951158][ T2152] usb 7-1: selecting invalid altsetting 0
[  356.957871][   T12] team0 (unregistering): Port device team_slave_0 removed
[  356.976466][ T2152] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  357.005592][ T2152] usb 7-1: No valid video chain found.
[  357.040146][ T2152] usb 7-1: selecting invalid altsetting 0
[  357.047523][ T2152] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  357.083633][ T2152] usb 7-1: USB disconnect, device number 5
[  357.167420][ T5858] Bluetooth: hci4: command tx timeout
[  359.031037][T11038] chnl_net:caif_netlink_parms(): no params data found
[  359.245099][ T5858] Bluetooth: hci4: command tx timeout
[  359.552921][T11038] bridge0: port 1(bridge_slave_0) entered blocking state
[  359.584501][T11038] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.608351][T11038] bridge_slave_0: entered allmulticast mode
[  359.644001][T11038] bridge_slave_0: entered promiscuous mode
[  359.683182][T11038] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.705188][T11038] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.715268][T11038] bridge_slave_1: entered allmulticast mode
[  359.735923][T11038] bridge_slave_1: entered promiscuous mode
[  359.919176][T11038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.968236][T11038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  360.166671][T11038] team0: Port device team_slave_0 added
[  360.212605][T11038] team0: Port device team_slave_1 added
[  360.261231][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  360.271671][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  360.281417][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  360.284873][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  360.290953][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  360.304340][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  360.399313][T11038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  360.415378][T11038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.488004][    T9] usb 6-1: Using ep0 maxpacket: 8
[  360.534938][    T9] usb 6-1: config 2 has an invalid interface number: 31 but max is 0
[  360.543095][    T9] usb 6-1: config 2 has no interface number 0
[  360.563872][T11038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  360.606232][    T9] usb 6-1: config 2 interface 31 has no altsetting 0
[  360.629284][T11038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  360.650637][    T9] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  360.675081][T11038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  360.705864][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.713920][    T9] usb 6-1: Product: syz
[  360.739535][    T9] usb 6-1: Manufacturer: syz
[  360.744204][    T9] usb 6-1: SerialNumber: syz
[  360.766232][T11038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  360.855016][ T2152] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  360.973435][T11038] hsr_slave_0: entered promiscuous mode
[  360.984096][T11038] hsr_slave_1: entered promiscuous mode
[  360.999900][T11038] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  361.007920][T11038] Cannot create hsr debugfs directory
[  361.015222][ T2152] usb 7-1: Using ep0 maxpacket: 32
[  361.045370][ T2152] usb 7-1: config 1 has an invalid interface number: 242 but max is 0
[  361.066253][ T2152] usb 7-1: config 1 has no interface number 0
[  361.072548][ T2152] usb 7-1: config 1 interface 242 has no altsetting 0
[  361.090669][ T2152] usb 7-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df
[  361.108005][ T2152] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.117780][ T2152] usb 7-1: Product: syz
[  361.121996][ T2152] usb 7-1: Manufacturer: syz
[  361.140975][ T2152] usb 7-1: SerialNumber: syz
[  361.215073][ T5942] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  361.335493][ T5853] Bluetooth: hci4: command tx timeout
[  361.385542][ T5942] usb 3-1: Using ep0 maxpacket: 8
[  361.403135][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.425760][ T5942] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  361.435085][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.451412][    T9] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22
[  361.477617][ T5942] usb 3-1: config 0 descriptor??
[  361.500061][    T9] usb 6-1: USB disconnect, device number 18
[  361.560800][ T5942] gspca_main: vc032x-2.14.0 probing 046d:0892
[  361.938664][T11144] chnl_net:caif_netlink_parms(): no params data found
[  362.008239][T11038] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  362.012037][ T2152] aqc111 7-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0
[  362.033766][ T2152] aqc111 7-1:1.242: probe with driver aqc111 failed with error -61
[  362.138644][T11038] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  362.234106][T11038] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  362.368139][ T5853] Bluetooth: hci1: command tx timeout
[  362.394244][T11038] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  362.424214][T11144] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.441959][T11144] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.465188][T11144] bridge_slave_0: entered allmulticast mode
[  362.496366][T11144] bridge_slave_0: entered promiscuous mode
[  362.507088][T11144] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.514259][T11144] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.522045][T11144] bridge_slave_1: entered allmulticast mode
[  362.532673][T11144] bridge_slave_1: entered promiscuous mode
[  362.666499][T11144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.690345][T11144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.781876][T11144] team0: Port device team_slave_0 added
[  362.803756][T11144] team0: Port device team_slave_1 added
[  362.852900][T11144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.860724][ T2152] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  362.870406][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.901619][T11144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.914700][T11144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.921897][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.949613][T11144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  363.057066][ T2152] usb 6-1: Using ep0 maxpacket: 16
[  363.072265][ T2152] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  363.084264][ T2152] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  363.109490][ T2152] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  363.115719][T11144] hsr_slave_0: entered promiscuous mode
[  363.127821][ T2152] usb 6-1: config 1 interface 0 has no altsetting 0
[  363.134598][T11144] hsr_slave_1: entered promiscuous mode
[  363.149048][ T2152] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  363.163132][T11144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  363.176422][ T2152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.184483][ T2152] usb 6-1: Product: syz
[  363.193350][T11144] Cannot create hsr debugfs directory
[  363.201077][ T5942] gspca_vc032x: reg_w err -71
[  363.203602][ T2152] usb 6-1: Manufacturer: syz
[  363.228422][ T2152] usb 6-1: SerialNumber: syz
[  363.237602][ T5942] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  363.285090][ T5942] usb 3-1: USB disconnect, device number 22
[  363.467901][ T2152] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  363.621357][T11038] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.675539][ T5908] usb 7-1: USB disconnect, device number 6
[  363.709013][T11038] 8021q: adding VLAN 0 to HW filter on device team0
[  363.837564][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.844893][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.885733][T11177] usblp0:failed reading printer status (-71)
[  363.890466][ T5942] usb 6-1: USB disconnect, device number 19
[  363.921510][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.928789][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.086807][T11176] usblp0: removed
[  364.272084][T11144] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  364.311840][T11144] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  364.394586][T11144] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  364.446154][ T5853] Bluetooth: hci1: command tx timeout
[  364.457566][T11144] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  364.555144][ T5854] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  364.623798][T11038] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.725876][ T5854] usb 3-1: Using ep0 maxpacket: 16
[  364.737421][ T5854] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7
[  364.770136][ T5854] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  364.810906][ T5854] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  364.867747][ T5854] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  364.914027][T11038] veth0_vlan: entered promiscuous mode
[  364.920280][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.967549][ T5854] usb 3-1: Product: syz
[  364.972202][ T5854] usb 3-1: Manufacturer: syz
[  364.989086][ T5854] usb 3-1: SerialNumber: syz
[  365.014637][T11038] veth1_vlan: entered promiscuous mode
[  365.119421][T11144] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.236376][ T5854] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  365.236381][T11038] veth0_macvtap: entered promiscuous mode
[  365.249270][T11144] 8021q: adding VLAN 0 to HW filter on device team0
[  365.292851][ T5854] usb 3-1: unit 1 not found!
[  365.299784][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.307197][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.346692][T11038] veth1_macvtap: entered promiscuous mode
[  365.374642][ T5854] usb 3-1: USB disconnect, device number 23
[  365.379742][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.388014][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.521414][ T6262] udevd[6262]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  365.585127][T11038] batman_adv: batadv0: Interface activated: batadv_slave_0
[  365.660040][T11038] batman_adv: batadv0: Interface activated: batadv_slave_1
[  365.720458][T11038] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  365.732895][T11038] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  365.743670][T11038] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  365.753018][T11038] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.907741][T11144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.110054][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.127783][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.188508][T11144] veth0_vlan: entered promiscuous mode
[  366.323898][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  366.352704][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.353021][T11144] veth1_vlan: entered promiscuous mode
[  366.525360][ T5853] Bluetooth: hci1: command tx timeout
[  366.631176][T11144] veth0_macvtap: entered promiscuous mode
[  366.681279][T11144] veth1_macvtap: entered promiscuous mode
[  366.830057][T11144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.937494][T11144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  366.982290][T11144] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.015397][ T5854] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  367.022962][T11144] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.023002][T11144] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.023032][T11144] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.235012][ T5854] usb 7-1: Using ep0 maxpacket: 16
[  367.262152][ T5854] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  367.293211][ T5854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  367.322237][ T5854] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  367.344790][T10002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.368706][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.384351][T10002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.397125][ T5854] usb 7-1: Product: syz
[  367.410135][ T5854] usb 7-1: Manufacturer: syz
[  367.423291][ T5854] usb 7-1: SerialNumber: syz
[  367.464134][ T5854] usb 7-1: config 0 descriptor??
[  367.488653][ T5854] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  367.518407][ T5854] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  367.584966][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.606365][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.110131][ T5854] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  368.132787][ T5854] em28xx 7-1:0.0: Config register raw data: 0xbc
[  368.151780][ T5854] em28xx 7-1:0.0: I2S Audio (3 sample rate(s))
[  368.176726][ T5854] em28xx 7-1:0.0: No AC97 audio processor
[  368.612607][T11298] input: syz1 as /devices/virtual/input/input28
[  368.619388][ T5853] Bluetooth: hci1: command tx timeout
[  369.022760][ T5973] usb 7-1: USB disconnect, device number 7
[  371.391048][T11349] input: syz1 as /devices/virtual/input/input29
[  374.109699][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1817'.
[  375.474882][ T5942] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  375.674674][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  375.745362][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.785209][ T5942] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  375.825982][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.845969][ T5942] usb 6-1: config 0 descriptor??
[  376.328160][ T5942] lua 0003:1E7D:2C2E.0012: invalid report_size 1052143565
[  376.349533][ T5942] lua 0003:1E7D:2C2E.0012: item 0 4 1 7 parsing failed
[  376.370514][ T5942] lua 0003:1E7D:2C2E.0012: parse failed
[  376.388145][ T5942] lua 0003:1E7D:2C2E.0012: probe with driver lua failed with error -22
[  376.618998][   T43] usb 6-1: USB disconnect, device number 20
[  376.942030][T11491] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3)
[  376.948863][T11491] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  376.977983][T11495] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  377.016160][T11491] vhci_hcd vhci_hcd.0: Device attached
[  377.036124][T11497] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(9)
[  377.042899][T11497] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  377.086859][T11497] vhci_hcd vhci_hcd.0: Device attached
[  377.100352][T11491] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(5)
[  377.106935][T11491] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  377.120011][T11491] vhci_hcd vhci_hcd.0: Device attached
[  377.137109][T11491] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(11)
[  377.143802][T11491] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  377.158876][T11491] vhci_hcd vhci_hcd.0: Device attached
[  377.170490][T11491] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(13)
[  377.177167][T11491] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  377.197337][T11491] vhci_hcd vhci_hcd.0: Device attached
[  377.208468][T11491] vhci_hcd vhci_hcd.0: pdev(9) rhport(6) sockfd(15)
[  377.215110][T11491] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  377.222504][ T5854] vhci_hcd: vhci_device speed not set
[  377.249930][T11491] vhci_hcd vhci_hcd.0: Device attached
[  377.289484][T11495] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(18)
[  377.296164][T11495] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  377.351598][ T5854] usb 51-1: new full-speed USB device number 2 using vhci_hcd
[  377.382437][T11495] vhci_hcd vhci_hcd.0: Device attached
[  377.413233][T11501] vhci_hcd: connection closed
[  377.413806][T11492] vhci_hcd: connection reset by peer
[  377.435072][ T2913] vhci_hcd: stop threads
[  377.441207][T11498] vhci_hcd: connection closed
[  377.441950][T11511] vhci_hcd: connection closed
[  377.447487][T11505] vhci_hcd: connection closed
[  377.455053][T11508] vhci_hcd: connection closed
[  377.461455][ T2913] vhci_hcd: release socket
[  377.495989][ T2913] vhci_hcd: disconnect device
[  377.520039][T11513] vhci_hcd: connection closed
[  377.531975][ T2913] vhci_hcd: stop threads
[  377.541429][ T2913] vhci_hcd: release socket
[  377.552021][ T2913] vhci_hcd: disconnect device
[  377.563882][ T2913] vhci_hcd: stop threads
[  377.574057][ T2913] vhci_hcd: release socket
[  377.584268][ T2913] vhci_hcd: disconnect device
[  377.601468][ T2913] vhci_hcd: stop threads
[  377.606255][ T2913] vhci_hcd: release socket
[  377.615034][ T2913] vhci_hcd: disconnect device
[  377.626730][ T2913] vhci_hcd: stop threads
[  377.636693][ T2913] vhci_hcd: release socket
[  377.653473][ T2913] vhci_hcd: disconnect device
[  377.673497][ T2913] vhci_hcd: stop threads
[  377.684039][ T2913] vhci_hcd: release socket
[  377.688954][ T2913] vhci_hcd: disconnect device
[  377.702669][ T2913] vhci_hcd: stop threads
[  377.711965][ T2913] vhci_hcd: release socket
[  377.725726][ T2913] vhci_hcd: disconnect device
[  378.404960][   T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  378.579166][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.597503][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.635162][   T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  378.649343][   T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  378.674825][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.712908][   T24] usb 10-1: config 0 descriptor??
[  378.783301][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.790150][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  379.026716][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'.
[  379.066231][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'.
[  379.184137][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1851'.
[  379.218981][   T24] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd
[  379.281550][   T24] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  379.583219][   T24] usb 10-1: USB disconnect, device number 2
[  379.714005][T11565] fido_id[11565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  379.815079][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  380.027082][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  380.156380][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  380.186501][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  380.214827][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  380.402338][    T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  380.454613][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.544098][    T9] usb 6-1: config 0 descriptor??
[  380.797955][T11584] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.1856'.
[  380.812537][T11584] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1856'.
[  381.086782][    T9] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  381.280422][ T5909] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  381.448314][ T5909] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  381.466672][ T5909] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  381.483018][ T5909] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  381.493734][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  381.508734][ T5909] usb 9-1: SerialNumber: syz
[  381.743783][ T5909] usb 9-1: 0:2 : does not exist
[  381.773874][ T5909] usb 9-1: unit 5: unexpected type 0x09
[  381.867995][ T5909] usb 9-1: USB disconnect, device number 2
[  381.974040][ T6262] udevd[6262]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  382.028655][ T5908] usb 6-1: USB disconnect, device number 21
[  382.516118][ T5854] vhci_hcd: vhci_device speed not set
[  382.708559][T11633] syz_tun: entered allmulticast mode
[  382.755244][T11632] syz_tun: left allmulticast mode
[  383.135341][T11645] program syz.5.1869 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  383.351480][    C1] sd 0:0:1:0: [sda] tag#1210 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  383.362168][    C1] sd 0:0:1:0: [sda] tag#1210 CDB: Write(6) 0a 00 00 00 00 00
[  383.621580][T11658] loop6: detected capacity change from 0 to 7
[  383.665124][ T5908] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  383.685428][T11658] Dev loop6: unable to read RDB block 7
[  383.693034][T11658]  loop6: unable to read partition table
[  383.723237][T11658] loop6: partition table beyond EOD, truncated
[  383.744874][T11658] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  383.858477][ T5908] usb 9-1: Using ep0 maxpacket: 8
[  383.881765][ T5942] usb usb52-port8: attempt power cycle
[  383.909316][ T5908] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  383.954659][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.985048][ T5908] usb 9-1: Product: syz
[  383.989293][ T5908] usb 9-1: Manufacturer: syz
[  384.038415][ T5908] usb 9-1: SerialNumber: syz
[  384.074714][ T5908] usb 9-1: config 0 descriptor??
[  384.304876][ T5909] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  384.327404][ T5908] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  384.475008][ T5909] usb 7-1: Using ep0 maxpacket: 8
[  384.508367][ T5909] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  384.519129][ T5942] usb usb52-port8: unable to enumerate USB device
[  384.545398][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.565055][ T5909] usb 7-1: Product: syz
[  384.569315][ T5909] usb 7-1: Manufacturer: syz
[  384.584126][ T5909] usb 7-1: SerialNumber: syz
[  384.612974][ T5909] usb 7-1: config 0 descriptor??
[  384.865166][ T5909] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  385.272392][T11688] netlink: 'syz.9.1881': attribute type 1 has an invalid length.
[  385.349278][ T5908] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  385.384516][ T5908] usb 9-1: USB disconnect, device number 3
[  386.104654][T11708] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  386.297490][ T5909] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  386.391228][ T5909] usb 7-1: USB disconnect, device number 8
[  387.234309][T11732] netlink: 'syz.9.1891': attribute type 4 has an invalid length.
[  387.245408][ T5909] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  387.272781][T11732] netlink: 'syz.9.1891': attribute type 4 has an invalid length.
[  387.405166][ T5909] usb 7-1: Using ep0 maxpacket: 32
[  387.430899][ T5909] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  387.481162][ T5909] usb 7-1: config 0 has no interface number 0
[  387.495298][ T5909] usb 7-1: config 0 interface 184 has no altsetting 0
[  387.516893][ T5909] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  387.541145][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.549775][ T5909] usb 7-1: Product: syz
[  387.554734][ T5909] usb 7-1: Manufacturer: syz
[  387.563605][ T5909] usb 7-1: SerialNumber: syz
[  387.572682][ T5909] usb 7-1: config 0 descriptor??
[  387.620669][ T5909] smsc75xx v1.0.0
[  387.634533][ T5909] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  387.670101][ T5909] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22
[  387.958243][ T5854] usb 7-1: USB disconnect, device number 9
[  392.327735][T11837] netlink: 'syz.8.1915': attribute type 7 has an invalid length.
[  392.370221][T11837] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1915'.
[  392.704916][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1919'.
[  393.713269][   T30] audit: type=1326 audit(1752706538.568:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.8.1932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  393.735676][    C1] vkms_vblank_simulate: vblank timer overrun
[  393.849489][   T30] audit: type=1326 audit(1752706538.568:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.8.1932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  393.871869][    C1] vkms_vblank_simulate: vblank timer overrun
[  394.047658][   T30] audit: type=1326 audit(1752706538.578:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff4558 code=0x7ffc0000
[  394.069856][    C1] vkms_vblank_simulate: vblank timer overrun
[  394.276341][   T30] audit: type=1326 audit(1752706538.578:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff4558 code=0x7ffc0000
[  394.431755][   T30] audit: type=1326 audit(1752706538.578:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff4558 code=0x7ffc0000
[  394.538289][   T30] audit: type=1326 audit(1752706538.578:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff4558 code=0x7ffc0000
[  394.612223][   T30] audit: type=1326 audit(1752706538.578:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff4558 code=0x7ffc0000
[  394.678484][   T30] audit: type=1326 audit(1752706538.578:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff4558 code=0x7ffc0000
[  394.785494][   T30] audit: type=1326 audit(1752706538.578:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff4558 code=0x7ffc0000
[  394.914034][   T30] audit: type=1326 audit(1752706538.578:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff4558 code=0x7ffc0000
[  395.859051][T11920] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1944'.
[  396.558593][T11936] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.1946'.
[  396.631875][T11936] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1946'.
[  397.775058][ T5909] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  397.945200][ T5909] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  397.966523][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.004549][ T5909] usb 9-1: config 0 descriptor??
[  398.120350][ T5922] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  398.321758][ T5922] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  398.343146][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.352562][ T5922] usb 6-1: Product: syz
[  398.362080][ T5922] usb 6-1: Manufacturer: syz
[  398.369725][ T5922] usb 6-1: SerialNumber: syz
[  398.382612][ T5922] usb 6-1: config 0 descriptor??
[  398.409699][ T5922] gspca_main: sunplus-2.14.0 probing 055f:c230
[  399.547751][T12009] fuse: Invalid uid '00000000000000000001'
[  399.682646][ T5909] pegasus 9-1:0.0: can't reset MAC
[  399.710168][ T5909] pegasus 9-1:0.0: probe with driver pegasus failed with error -5
[  399.752051][ T5909] usb 9-1: USB disconnect, device number 4
[  400.021577][ T5922] gspca_sunplus: reg_r err -71
[  400.048484][ T5922] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  400.100865][ T5922] usb 6-1: USB disconnect, device number 22
[  400.534834][   T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  400.735186][   T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  400.774600][   T24] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  400.836676][   T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  400.884874][   T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  400.916211][   T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  400.982057][   T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  401.034452][   T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  401.069445][   T24] usb 10-1: Product: syz
[  401.089123][   T24] usb 10-1: Manufacturer: syz
[  401.140439][   T24] cdc_wdm 10-1:1.0: skipping garbage
[  401.169878][   T24] cdc_wdm 10-1:1.0: skipping garbage
[  401.193591][   T24] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  401.230453][   T24] cdc_wdm 10-1:1.0: Unknown control protocol
[  401.583407][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  401.590175][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  401.597298][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  401.604039][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  401.611334][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  401.618073][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  401.625711][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  401.632572][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  401.639055][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  401.645783][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  401.652331][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  401.659063][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  401.665509][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  401.672221][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  401.678642][    C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  401.685354][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  401.691543][    C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  401.700428][   T24] usb 10-1: USB disconnect, device number 3
[  401.710604][T12025] cdc_wdm 10-1:1.0: Tx URB error: -19
[  401.759158][T12050] cdc_wdm 10-1:1.0: Tx URB error: -19
[  402.329738][   T30] kauditd_printk_skb: 363 callbacks suppressed
[  402.329759][   T30] audit: type=1326 audit(1752706547.178:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.5.1977" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x0
[  402.358471][T12063] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1978'.
[  404.231461][T12119] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1995'.
[  404.434894][T12121] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1995'.
[  404.991483][T12148] Scaler: =================  START STATUS  =================
[  405.009788][T12148] Scaler: ==================  END STATUS  ==================
[  405.017427][ T5909] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  405.037162][T12151] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.2003'.
[  405.046923][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2003'.
[  405.197222][ T5909] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  405.213945][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  405.265383][ T5909] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  405.290707][ T5909] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  405.319951][ T5909] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  405.336291][ T5909] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.353305][ T5909] usb 9-1: config 0 descriptor??
[  405.875467][ T5909] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[  406.449698][ T5858] Bluetooth: hci0: command 0x0406 tx timeout
[  406.957041][ T5909] usb 9-1: USB disconnect, device number 5
[  406.980073][   T30] audit: type=1326 audit(1752706551.848:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12163 comm="syz.6.2007" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f56539 code=0x0
[  407.861920][T12222] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2021'.
[  408.977413][T12240] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  408.984496][T12240] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  409.197836][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2026'.
[  409.736255][T12261] vcan0: tx drop: invalid da for name 0xfffffffffffffffc
[  409.947040][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2036'.
[  410.513544][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2041'.
[  410.638281][T12285] batadv1: entered promiscuous mode
[  410.718275][T12286] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2041'.
[  411.416056][ T5854] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  411.618057][ T5854] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  411.663684][ T5854] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  411.704944][   T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  411.712403][ T5854] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  411.752996][ T5854] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.779565][T12298] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  411.813288][ T5854] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  411.909246][   T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  411.949862][   T10] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  412.019700][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  412.031369][T12311] syzkaller0: entered promiscuous mode
[  412.054858][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  412.079268][ T5854] usb 10-1: USB disconnect, device number 4
[  412.099206][   T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  412.162884][   T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  412.215098][   T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  412.245823][   T10] usb 7-1: Product: syz
[  412.259964][   T10] usb 7-1: Manufacturer: syz
[  412.312228][   T10] cdc_wdm 7-1:1.0: skipping garbage
[  412.350939][   T10] cdc_wdm 7-1:1.0: skipping garbage
[  412.391628][   T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  412.421035][   T10] cdc_wdm 7-1:1.0: Unknown control protocol
[  412.636293][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.642977][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.649666][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.656326][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.662839][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.669470][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.679119][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.685771][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.695904][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.702686][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.709410][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.716121][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.722980][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.729622][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.741795][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.748623][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.765342][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.772007][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.784003][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  412.790659][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  412.801707][   T24] usb 7-1: USB disconnect, device number 10
[  412.801792][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  414.271899][   T30] audit: type=1326 audit(1752706559.138:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12343 comm="syz.5.2056" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f86539 code=0x0
[  414.384896][ T5942] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  414.537516][ T5942] usb 3-1: Using ep0 maxpacket: 8
[  414.568252][ T5942] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  414.618717][ T5942] usb 3-1: config 0 has no interface number 0
[  414.645390][ T5942] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  414.674246][ T5942] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  414.708457][ T5942] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  414.725802][ T5942] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  414.740332][ T5942] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  414.811422][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.878846][ T5942] usb 3-1: config 0 descriptor??
[  414.946856][ T5942] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  415.168120][T12363] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2061'.
[  415.927013][   T24] usb 3-1: USB disconnect, device number 24
[  415.947879][   T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  416.029407][T12378] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.2064'.
[  416.101069][T12378] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2064'.
[  416.464588][T12369] syz.5.2062: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  416.514944][   T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  416.547106][T12369] CPU: 0 UID: 0 PID: 12369 Comm: syz.5.2062 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  416.547140][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  416.547154][T12369] Call Trace:
[  416.547163][T12369]  <TASK>
[  416.547179][T12369]  dump_stack_lvl+0x189/0x250
[  416.547213][T12369]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  416.547249][T12369]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.547275][T12369]  ? __pfx__printk+0x10/0x10
[  416.547304][T12369]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  416.547331][T12369]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  416.547366][T12369]  warn_alloc+0x214/0x310
[  416.547403][T12369]  ? __pfx_warn_alloc+0x10/0x10
[  416.547442][T12369]  ? __get_vm_area_node+0x28f/0x300
[  416.547469][T12369]  ? vb2_vmalloc_alloc+0xef/0x340
[  416.547500][T12369]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  416.547563][T12369]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  416.547592][T12369]  ? vb2_vmalloc_alloc+0xb2/0x340
[  416.547619][T12369]  ? __kasan_kmalloc+0x93/0xb0
[  416.547648][T12369]  vmalloc_user_noprof+0xad/0xf0
[  416.547675][T12369]  ? vb2_vmalloc_alloc+0xef/0x340
[  416.547702][T12369]  vb2_vmalloc_alloc+0xef/0x340
[  416.547736][T12369]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  416.547763][T12369]  __vb2_queue_alloc+0x9bf/0x15a0
[  416.547818][T12369]  vb2_core_reqbufs+0xc31/0x1420
[  416.547866][T12369]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  416.547888][T12369]  ? vb2_verify_memory_type+0x1fc/0x570
[  416.547915][T12369]  ? vb2_reqbufs+0x3a9/0x630
[  416.548069][T12369]  v4l2_m2m_ioctl_reqbufs+0x10d/0x200
[  416.548116][T12369]  __video_do_ioctl+0xc9b/0xdb0
[  416.548154][T12369]  ? __pfx___video_do_ioctl+0x10/0x10
[  416.548199][T12369]  video_usercopy+0x86e/0x14f0
[  416.548253][T12369]  ? __pfx___video_do_ioctl+0x10/0x10
[  416.548279][T12369]  ? __pfx_video_usercopy+0x10/0x10
[  416.548329][T12369]  ? __fget_files+0x2a/0x420
[  416.548361][T12369]  v4l2_ioctl+0x18a/0x1e0
[  416.548390][T12369]  v4l2_compat_ioctl32+0x1d4/0x260
[  416.548429][T12369]  __ia32_compat_sys_ioctl+0x543/0x840
[  416.548457][T12369]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  416.548489][T12369]  ? __se_sys_futex_time32+0x360/0x3e0
[  416.548532][T12369]  ? rcu_is_watching+0x15/0xb0
[  416.548562][T12369]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  416.548585][T12369]  ? lockdep_hardirqs_on+0x9c/0x150
[  416.548620][T12369]  __do_fast_syscall_32+0xb6/0x2b0
[  416.548643][T12369]  ? lockdep_hardirqs_on+0x9c/0x150
[  416.548680][T12369]  do_fast_syscall_32+0x34/0x80
[  416.548702][T12369]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  416.548727][T12369] RIP: 0023:0xf7f86539
[  416.548748][T12369] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  416.548767][T12369] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  416.548792][T12369] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608
[  416.548808][T12369] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  416.548821][T12369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  416.548834][T12369] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  416.548846][T12369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  416.548880][T12369]  </TASK>
[  416.552834][T12369] Mem-Info:
[  416.933681][T12369] active_anon:7972 inactive_anon:0 isolated_anon:0
[  416.933681][T12369]  active_file:11487 inactive_file:39957 isolated_file:0
[  416.933681][T12369]  unevictable:768 dirty:265 writeback:0
[  416.933681][T12369]  slab_reclaimable:12026 slab_unreclaimable:107439
[  416.933681][T12369]  mapped:30412 shmem:1398 pagetables:1668
[  416.933681][T12369]  sec_pagetables:0 bounce:0
[  416.933681][T12369]  kernel_misc_reclaimable:0
[  416.933681][T12369]  free:1287108 free_pcp:16950 free_cma:0
[  417.024840][   T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  417.033534][   T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  417.114283][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  417.128760][T12369] Node 0 active_anon:32076kB inactive_anon:0kB active_file:45948kB inactive_file:159628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121724kB dirty:1076kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13800kB pagetables:6552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  417.187451][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  417.220496][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  417.226551][T12369] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  417.258833][   T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  417.291706][   T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  417.299649][T12369] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  417.310617][   T10] usb 3-1: Product: syz
[  417.377578][T12369] lowmem_reserve[]: 0 2498 2500 2500 2500
[  417.392722][T12369] Node 0 DMA32 free:1232324kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32128kB inactive_anon:0kB active_file:45948kB inactive_file:158052kB unevictable:1536kB writepending:1076kB present:3129332kB managed:2558384kB mlocked:0kB bounce:0kB free_pcp:47788kB local_pcp:19636kB free_cma:0kB
[  417.396473][   T10] usb 3-1: Manufacturer: syz
[  417.462220][T12369] lowmem_reserve[]: 0 0 1 1 1
[  417.480885][T12369] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  417.548946][T12369] lowmem_reserve[]: 0 0 0 0 0
[  417.582061][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  417.587780][T12369] Node 1 Normal free:3899296kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21440kB local_pcp:11072kB free_cma:0kB
[  417.626298][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  417.639400][   T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  417.647818][   T10] cdc_wdm 3-1:1.0: Unknown control protocol
[  417.676360][T12369] lowmem_reserve[]: 0 0 0 0 0
[  417.696835][T12369] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  417.744184][T12369] Node 0 DMA32: 1207*4kB (UME) 597*8kB (UME) 154*16kB (UME) 181*32kB (ME) 252*64kB (UME) 30*128kB (UME) 18*256kB (UM) 10*512kB (UME) 7*1024kB (UM) 3*2048kB (UME) 286*4096kB (M) = 1232324kB
[  417.779640][T12369] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  417.807417][T12369] Node 1 Normal: 208*4kB (U) 52*8kB (UME) 50*16kB (UME) 63*32kB (UME) 21*64kB (UME) 11*128kB (UME) 5*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3899296kB
[  417.832344][T12369] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  417.842526][T12369] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  417.861988][T12369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  417.874655][T12369] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  417.911211][T12369] 52838 total pagecache pages
[  417.918789][T12369] 0 pages in swap cache
[  417.929421][T12369] Free swap  = 124996kB
[  417.937447][T12369] Total swap = 124996kB
[  417.941731][T12369] 2097051 pages RAM
[  417.988848][T12369] 0 pages HighMem/MovableOnly
[  418.007134][T12369] 425413 pages reserved
[  418.043884][T12369] 0 pages cma reserved
[  418.175704][    C0] wdm_int_callback: 11 callbacks suppressed
[  418.175731][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.188263][    C0] wdm_int_callback: 11 callbacks suppressed
[  418.188277][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.202775][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.209391][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.215912][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.222507][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.228860][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.235538][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.241851][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.248491][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.254817][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.261470][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.267821][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.274465][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.280866][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.287528][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.294246][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.300905][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.307931][    C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  418.314555][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  418.354984][   T10] usb 3-1: USB disconnect, device number 25
[  418.355075][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  419.828158][T12439] netlink: 'syz.2.2080': attribute type 5 has an invalid length.
[  420.030299][   T30] audit: type=1326 audit(1752706564.898:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.186944][   T30] audit: type=1326 audit(1752706564.898:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.343930][   T30] audit: type=1326 audit(1752706564.948:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.413798][   T30] audit: type=1326 audit(1752706564.948:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.464106][   T30] audit: type=1326 audit(1752706564.948:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.577813][   T30] audit: type=1326 audit(1752706564.968:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.600773][T12462] VFS: Lookup of 'file0' in fuse fuse would have caused loop
[  420.667278][   T30] audit: type=1326 audit(1752706564.968:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.714075][   T30] audit: type=1326 audit(1752706564.968:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.765375][   T30] audit: type=1326 audit(1752706564.968:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.853566][   T30] audit: type=1326 audit(1752706564.968:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12454 comm="syz.8.2084" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000
[  420.882818][T12479] netlink: 'syz.9.2091': attribute type 4 has an invalid length.
[  421.578122][T12500] binder: 12499:12500 ioctl c0306201 80000640 returned -22
[  422.335204][T12522] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2101'.
[  422.589854][T12522] 8021q: adding VLAN 0 to HW filter on device bond1
[  422.671689][T12525] vlan2: entered allmulticast mode
[  422.692489][T12525] bond1: entered allmulticast mode
[  423.309827][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  423.489492][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.549675][   T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  423.635307][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.714293][   T10] usb 3-1: config 0 descriptor??
[  423.996006][T12560] netlink: 'syz.5.2112': attribute type 1 has an invalid length.
[  424.030309][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  424.058766][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  424.169132][   T10] usb 3-1: USB disconnect, device number 26
[  424.614853][   T43] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  424.675646][   T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  424.776165][   T43] usb 10-1: Using ep0 maxpacket: 32
[  424.787147][   T43] usb 10-1: config 0 has an invalid interface number: 184 but max is 0
[  424.807566][   T43] usb 10-1: config 0 has no interface number 0
[  424.813842][   T43] usb 10-1: config 0 interface 184 has no altsetting 0
[  424.874851][   T10] usb 3-1: Using ep0 maxpacket: 32
[  424.882912][   T43] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  424.907437][   T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.916646][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.926431][   T43] usb 10-1: Product: syz
[  424.958612][   T43] usb 10-1: Manufacturer: syz
[  424.958758][   T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  424.979863][   T43] usb 10-1: SerialNumber: syz
[  424.986561][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.021913][   T43] usb 10-1: config 0 descriptor??
[  425.028405][   T10] usb 3-1: config 0 descriptor??
[  425.043775][   T43] smsc75xx v1.0.0
[  425.063549][   T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  425.099325][   T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  425.480792][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'.
[  425.504420][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'.
[  425.541740][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'.
[  425.666756][ T5909] usb 3-1: USB disconnect, device number 27
[  425.702771][   T43] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  425.705337][ T5909] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  425.726997][   T43] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  426.142964][T12605] tipc: Failed to remove unknown binding: 66,3,3/0:1355729233/1355729234
[  426.595251][   T43] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  426.617728][   T43] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  426.633476][   T43] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  426.661709][   T43] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71
[  426.711126][   T43] usb 10-1: USB disconnect, device number 5
[  428.724892][   T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  428.927366][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.948645][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.025248][   T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  429.176596][   T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  429.213301][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.401692][   T10] usb 7-1: config 0 descriptor??
[  429.662103][T12692] block device autoloading is deprecated and will be removed.
[  429.675896][T12692] syz.8.2162: attempt to access beyond end of device
[  429.675896][T12692] md2: rw=2048, sector=0, nr_sectors = 8 limit=0
[  429.855721][   T10] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd
[  429.932643][   T10] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  430.207787][ T1028] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.228824][   T10] usb 7-1: USB disconnect, device number 11
[  430.411188][ T1028] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.573100][ T1028] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.753635][ T1028] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.237540][ T1028] bridge_slave_1: left allmulticast mode
[  431.243263][ T1028] bridge_slave_1: left promiscuous mode
[  431.278422][ T1028] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.396340][ T1028] bridge_slave_0: left allmulticast mode
[  431.402257][ T1028] bridge_slave_0: left promiscuous mode
[  431.424469][ T1028] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.255084][ T5909] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  432.427345][ T5909] usb 3-1: config 0 has no interfaces?
[  432.452769][ T5909] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  432.497515][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.564882][ T5909] usb 3-1: Product: syz
[  432.569134][ T5909] usb 3-1: Manufacturer: syz
[  432.573757][ T5909] usb 3-1: SerialNumber: syz
[  432.688633][ T5909] usb 3-1: config 0 descriptor??
[  433.245431][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  433.275369][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  433.311296][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  433.323208][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  433.334002][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  433.663108][ T1028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.701925][ T1028] bond_slave_0: left promiscuous mode
[  433.709677][ T1028] bond_slave_0: left allmulticast mode
[  433.721259][ T1028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.736361][ T1028] bond_slave_1: left promiscuous mode
[  433.750205][ T1028] bond_slave_1: left allmulticast mode
[  433.771772][ T1028] bond0 (unregistering): Released all slaves
[  433.925016][   T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  434.135235][   T43] usb 6-1: Using ep0 maxpacket: 8
[  434.149212][   T43] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  434.158432][   T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  434.194461][   T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  434.226494][   T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  434.251776][   T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  434.286884][   T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  434.310993][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.564476][   T43] usb 6-1: GET_CAPABILITIES returned 0
[  434.584491][   T43] usbtmc 6-1:16.0: can't read capabilities
[  434.644141][T12765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  434.832097][   T43] usb 6-1: USB disconnect, device number 23
[  434.897379][   T10] usb 3-1: USB disconnect, device number 28
[  434.956419][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2181'.
[  435.039301][ T1028] hsr_slave_0: left promiscuous mode
[  435.072110][ T1028] hsr_slave_1: left promiscuous mode
[  435.109291][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.153504][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.204384][ T1028] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.231189][ T1028] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.283176][ T1028] veth1_macvtap: left promiscuous mode
[  435.289029][ T1028] veth0_macvtap: left promiscuous mode
[  435.297611][ T1028] veth1_vlan: left promiscuous mode
[  435.303071][ T1028] veth0_vlan: left promiscuous mode
[  435.404946][ T5858] Bluetooth: hci4: command tx timeout
[  436.276790][   T43] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  436.431348][T12801] cgroup: fork rejected by pids controller in /syz5
[  436.472174][   T43] usb 3-1: Using ep0 maxpacket: 16
[  436.500245][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  436.537173][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  436.564908][   T43] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  436.594707][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.623287][   T43] usb 3-1: config 0 descriptor??
[  436.872926][ T1028] team0 (unregistering): Port device team_slave_1 removed
[  436.943493][ T1028] team0 (unregistering): Port device team_slave_0 removed
[  437.082034][   T43] hid-multitouch 0003:1FD2:6007.0017: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  437.497185][ T5858] Bluetooth: hci4: command tx timeout
[  437.919245][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  437.919265][   T30] audit: type=1326 audit(1752706582.788:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.5.2189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7fc00000
[  438.244278][T12775] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2181'.
[  438.367175][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2190'.
[  438.422806][ T5942] usb 3-1: USB disconnect, device number 29
[  438.733395][   T30] audit: type=1326 audit(1752706583.598:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13503 comm="syz.5.2189" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f86558 code=0x7fc00000
[  438.858777][T13521] kernel read not supported for file /file1 (pid: 13521 comm: syz.9.2192)
[  438.934384][   T30] audit: type=1800 audit(1752706583.798:1525): pid=13521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2192" name="file1" dev="mqueue" ino=51383 res=0 errno=0
[  439.145770][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2194'.
[  439.342710][ T1028] IPVS: stop unused estimator thread 0...
[  439.352071][T12754] chnl_net:caif_netlink_parms(): no params data found
[  439.575627][ T5858] Bluetooth: hci4: command tx timeout
[  439.875006][   T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  440.075560][   T43] usb 3-1: Using ep0 maxpacket: 32
[  440.087483][T12754] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.094648][   T43] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  440.094682][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.101760][   T43] usb 3-1: config 0 descriptor??
[  440.135813][T12754] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.155157][T12754] bridge_slave_0: entered allmulticast mode
[  440.191406][   T43] gspca_main: sunplus-2.14.0 probing 041e:400b
[  440.202130][T12754] bridge_slave_0: entered promiscuous mode
[  440.220305][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.227584][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.444706][ T1151] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.475531][ T5854] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  440.551295][T12754] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.564619][T12754] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.615568][T12754] bridge_slave_1: entered allmulticast mode
[  440.653625][T12754] bridge_slave_1: entered promiscuous mode
[  440.667840][ T5854] usb 6-1: config 162 has an invalid interface number: 251 but max is 1
[  440.721813][ T5854] usb 6-1: config 162 has an invalid interface number: 209 but max is 1
[  440.772761][ T5854] usb 6-1: config 162 has no interface number 0
[  440.793772][ T5854] usb 6-1: config 162 has no interface number 1
[  440.833220][ T5854] usb 6-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  440.874591][ T5854] usb 6-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  440.927092][ T5854] usb 6-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  440.967089][ T1151] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.001521][ T5854] usb 6-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  441.050760][ T5854] usb 6-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  441.106117][ T5854] usb 6-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64
[  441.125209][T13572] batman_adv: batadv0: Adding interface: dummy0
[  441.144989][T13572] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  441.162156][ T5854] usb 6-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  441.216103][T13572] batman_adv: batadv0: Interface activated: dummy0
[  441.227512][ T5854] usb 6-1: config 162 interface 251 has no altsetting 0
[  441.240988][ T5854] usb 6-1: config 162 interface 209 has no altsetting 0
[  441.261547][ T5854] usb 6-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88
[  441.271201][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.288412][T13574] batadv0: mtu less than device minimum
[  441.291323][ T5854] usb 6-1: Product: syz
[  441.303368][T13574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.309496][ T5854] usb 6-1: Manufacturer: syz
[  441.315760][T13574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.327804][ T5854] usb 6-1: SerialNumber: syz
[  441.330669][T13574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.345967][T13574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.358149][T13574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.370343][T13574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.382569][T13574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.394763][T13574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.406965][T13574] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  441.583363][ T1151] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.604908][ T5854] io_edgeport 6-1:162.251: required endpoints missing
[  441.646229][ T5858] Bluetooth: hci4: command tx timeout
[  441.676478][T12754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.791230][T12754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.816976][ T5854] io_edgeport 6-1:162.209: Edgeport 2 port adapter converter detected
[  441.889411][   T43] gspca_sunplus: reg_w_riv err -71
[  441.894970][   T43] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  441.903950][ T1151] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  441.935034][   T43] usb 3-1: USB disconnect, device number 30
[  442.098596][T12754] team0: Port device team_slave_0 added
[  442.170198][T12754] team0: Port device team_slave_1 added
[  442.219577][ T5854] usb 6-1:  䀁 detected
[  442.306148][T12754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  442.323346][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.359257][T12754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  442.396466][T12754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  442.403584][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  442.464950][T12754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.479756][ T5854] usb 6-1: Edgeport 2 port adapter converter now attached to ttyUSB0
[  442.582503][ T5854] usb 6-1: Edgeport 2 port adapter converter now attached to ttyUSB1
[  442.747797][ T5854] usb 6-1: USB disconnect, device number 24
[  442.747864][    C1] usb 6-1: edge_interrupt_callback - Error -19 submitting control urb
[  442.825528][ T5854] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0
[  442.891695][ T5854] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1
[  442.943603][ T5854] io_edgeport 6-1:162.209: device disconnected
[  443.042256][T12754] hsr_slave_0: entered promiscuous mode
[  443.086239][T12754] hsr_slave_1: entered promiscuous mode
[  443.092729][T12754] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  443.140926][T12754] Cannot create hsr debugfs directory
[  443.236289][ T5939] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  443.414130][ T5939] usb 7-1: Using ep0 maxpacket: 32
[  443.459543][ T5939] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  443.508083][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.528168][ T1151] bridge_slave_1: left allmulticast mode
[  443.544900][ T1151] bridge_slave_1: left promiscuous mode
[  443.557563][ T5939] usb 7-1: Product: syz
[  443.585028][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.595111][ T5939] usb 7-1: Manufacturer: syz
[  443.599767][ T5939] usb 7-1: SerialNumber: syz
[  443.628766][ T5939] usb 7-1: config 0 descriptor??
[  443.672910][ T5939] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  443.701658][ T1151] bridge_slave_0: left allmulticast mode
[  443.715037][ T1151] bridge_slave_0: left promiscuous mode
[  443.721048][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.086107][ T5939] gspca_topro: Sensor cx0342
[  445.384675][ T5939] usb 7-1: USB disconnect, device number 12
[  445.809142][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  445.859405][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  445.877957][ T1151] bond0 (unregistering): Released all slaves
[  446.819845][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2232'.
[  447.005255][ T5942] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  447.185893][ T5942] usb 10-1: Using ep0 maxpacket: 32
[  447.247611][ T5942] usb 10-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  447.311114][ T5942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.413436][ T5942] usb 10-1: config 0 descriptor??
[  447.499152][ T5942] gspca_main: sunplus-2.14.0 probing 041e:400b
[  447.958459][ T5939] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  448.013222][ T1151] hsr_slave_0: left promiscuous mode
[  448.020490][ T1151] hsr_slave_1: left promiscuous mode
[  448.032114][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.057619][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.084951][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.104673][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.155568][ T5939] usb 3-1: Using ep0 maxpacket: 8
[  448.171627][ T5939] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  448.191333][ T1151] veth1_macvtap: left promiscuous mode
[  448.202841][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.207458][ T1151] veth0_macvtap: left promiscuous mode
[  448.217215][ T1151] veth1_vlan: left promiscuous mode
[  448.222114][ T5939] usb 3-1: Product: syz
[  448.229503][ T5939] usb 3-1: Manufacturer: syz
[  448.229639][ T1151] veth0_vlan: left promiscuous mode
[  448.239588][ T5939] usb 3-1: SerialNumber: syz
[  448.256902][ T5939] usb 3-1: config 0 descriptor??
[  448.725571][ T5939] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  448.934820][ T5939] gspca_sunplus: reg_w_riv err -71
[  448.946964][ T5939] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  448.954980][   T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  448.979894][ T5939] usb 3-1: USB disconnect, device number 31
[  449.107869][   T10] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  449.136677][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.154328][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.165948][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  449.191561][ T5942] gspca_sunplus: reg_w_riv err -71
[  449.210244][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.220090][ T5942] sunplus 10-1:0.0: probe with driver sunplus failed with error -71
[  449.243264][ T5942] usb 10-1: USB disconnect, device number 6
[  449.250153][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.278131][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  449.289214][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.348994][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.381671][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  449.393759][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.415009][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.426046][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  449.435776][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.445654][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.457406][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  449.465827][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.474917][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.486200][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  449.494428][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.503518][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.514560][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  449.523562][   T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  449.533574][   T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  449.545098][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  449.579188][   T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  449.588738][   T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  449.603220][   T10] usb 7-1: Product: syz
[  449.608514][   T10] usb 7-1: Manufacturer: syz
[  449.613478][   T10] usb 7-1: SerialNumber: syz
[  449.641902][   T10] usb 7-1: config 0 descriptor??
[  449.691747][   T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  449.701033][ T1151] team0 (unregistering): Port device team_slave_1 removed
[  449.809054][ T1151] team0 (unregistering): Port device team_slave_0 removed
[  450.627787][    C0] usb 7-1: yurex_control_callback - control failed: -71
[  450.670059][ T5939] usb 7-1: USB disconnect, device number 13
[  450.692226][ T5939] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  451.763910][T13695] net_ratelimit: 10 callbacks suppressed
[  451.763932][T13695] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  452.033458][T12754] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  452.113901][T12754] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  452.174965][T12754] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  452.235078][   T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  452.263707][T12754] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  452.455079][   T10] usb 3-1: Using ep0 maxpacket: 16
[  452.472598][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  452.502845][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  452.518392][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.540636][   T10] usb 3-1: Product: syz
[  452.546696][   T10] usb 3-1: Manufacturer: syz
[  452.551480][   T10] usb 3-1: SerialNumber: syz
[  452.573209][   T10] usb 3-1: config 0 descriptor??
[  452.590367][   T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  452.631853][   T10] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  452.933015][T12754] 8021q: adding VLAN 0 to HW filter on device bond0
[  453.020320][T12754] 8021q: adding VLAN 0 to HW filter on device team0
[  453.077338][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.084587][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  453.126642][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.134430][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  453.207677][   T10] em28xx 3-1:0.0: chip ID is em2874
[  453.277502][   T30] audit: type=1800 audit(1752706598.148:1526): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2248" name="file0" dev="fuse" ino=2 res=0 errno=0
[  453.458048][T12754] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.614610][T12754] veth0_vlan: entered promiscuous mode
[  453.795902][T12754] veth1_vlan: entered promiscuous mode
[  454.023492][T12754] veth0_macvtap: entered promiscuous mode
[  454.111964][T12754] veth1_macvtap: entered promiscuous mode
[  454.202691][T12754] batman_adv: batadv0: Interface activated: batadv_slave_0
[  454.259625][   T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  454.261220][T12754] batman_adv: batadv0: Interface activated: batadv_slave_1
[  454.279507][   T10] em28xx 3-1:0.0: board has no eeprom
[  454.333038][T12754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  454.366800][T12754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  454.376226][T12754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  454.400520][T12754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  454.424795][   T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  454.468220][   T10] em28xx 3-1:0.0: dvb set to bulk mode.
[  454.474024][ T5908] em28xx 3-1:0.0: Binding DVB extension
[  454.542496][   T10] usb 3-1: USB disconnect, device number 32
[  454.637434][   T10] em28xx 3-1:0.0: Disconnecting em28xx
[  454.763836][ T5908] em28xx 3-1:0.0: Registering input extension
[  454.856862][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.882650][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.046244][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  455.116609][ T5908] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  455.123453][ T5908] Registered IR keymap rc-empty
[  455.131309][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  455.182278][ T5908] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  455.247817][ T5908] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34
[  455.314501][ T5908] em28xx 3-1:0.0: Input extension successfully initialized
[  455.495651][   T10] em28xx 3-1:0.0: Closing input extension
[  455.786198][   T10] em28xx 3-1:0.0: Freeing device
[  456.474835][   T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  456.675294][   T43] usb 3-1: Using ep0 maxpacket: 32
[  456.734900][   T43] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  456.760675][ T5922] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  456.792800][   T43] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  456.884908][   T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  456.924690][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  456.981100][   T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  457.025042][ T5922] usb 10-1: Using ep0 maxpacket: 8
[  457.034949][ T5922] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  457.052273][   T43] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  457.092037][ T5922] usb 10-1: config 179 has no interface number 0
[  457.132726][ T5922] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  457.146903][   T43] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  457.222353][ T5922] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  457.233883][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.285660][   T43] usb 3-1: config 0 descriptor??
[  457.304903][ T5922] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  457.362714][ T5922] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  457.460709][ T5922] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  457.494937][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  457.577680][   T43] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  457.625365][ T5922] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  457.675245][ T5922] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.680548][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  457.700230][T13799] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  457.772647][   T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  457.842346][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.909099][   T10] usb 1-1: config 0 descriptor??
[  458.179006][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  458.222614][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  458.273069][   T10] usb 1-1: USB disconnect, device number 2
[  458.356604][T13765] usb 10-1: USB disconnect, device number 7
[  458.356634][    C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  458.371277][    C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  458.735026][ T5854] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  458.894951][ T5854] usb 6-1: Using ep0 maxpacket: 32
[  458.915334][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  458.919843][ T5854] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  458.942501][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.000882][ T5854] usb 6-1: config 0 descriptor??
[  459.020993][ T5854] gspca_main: sunplus-2.14.0 probing 041e:400b
[  459.114897][   T10] usb 1-1: Using ep0 maxpacket: 32
[  459.135175][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  459.211275][   T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  459.256731][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.290679][   T10] usb 1-1: config 0 descriptor??
[  459.309134][T13765] usb 3-1: USB disconnect, device number 33
[  459.363945][T13765] usblp0: removed
[  459.380324][   T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  459.443189][   T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  459.902984][T13808] ldusb 1-1:0.0: Read buffer overflow, 297 bytes dropped
[  460.557110][T13765] usb 1-1: USB disconnect, device number 3
[  460.615675][T13765] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  460.652962][ T5854] gspca_sunplus: reg_w_riv err -71
[  460.671519][ T5854] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  460.726631][ T5854] usb 6-1: USB disconnect, device number 25
[  462.012081][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2290'.
[  462.203498][T13891] loop9: detected capacity change from 0 to 7
[  462.280120][T11144] Dev loop9: unable to read RDB block 7
[  462.313040][T11144]  loop9: unable to read partition table
[  462.362634][T11144] loop9: partition table beyond EOD, truncated
[  462.383983][T13891] Dev loop9: unable to read RDB block 7
[  462.390607][T13891]  loop9: unable to read partition table
[  462.401018][T13891] loop9: partition table beyond EOD, truncated
[  462.413001][T13891] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  463.826509][T13920] netlink: 'syz.0.2299': attribute type 1 has an invalid length.
[  464.654168][T13927] kvm: MONITOR instruction emulated as NOP!
[  465.716968][T13953] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  468.255338][T13992] kvm: kvm [13990]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xc00000000
[  470.962065][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2333'.
[  471.581980][T14031] input: syz1 as /devices/virtual/input/input35
[  472.463518][   T30] audit: type=1326 audit(1752706617.318:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  472.558372][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2342'.
[  472.559883][   T30] audit: type=1326 audit(1752706617.358:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  472.647902][   T30] audit: type=1326 audit(1752706617.378:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  472.682003][   T30] audit: type=1326 audit(1752706617.378:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  472.744906][   T30] audit: type=1326 audit(1752706617.378:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  472.811905][   T30] audit: type=1326 audit(1752706617.388:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  472.884401][   T30] audit: type=1326 audit(1752706617.388:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  472.912892][   T30] audit: type=1326 audit(1752706617.388:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  473.024652][   T30] audit: type=1326 audit(1752706617.388:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  473.085145][   T30] audit: type=1326 audit(1752706617.388:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14081 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86539 code=0x7ffc0000
[  474.442441][T14132] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2357'.
[  475.912816][T14167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2366'.
[  476.027947][T14169] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2367'.
[  477.878493][   T43] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  478.034793][   T43] usb 1-1: Using ep0 maxpacket: 8
[  478.057354][   T43] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  478.074833][   T43] usb 1-1: config 0 has no interface number 0
[  478.107586][   T43] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  478.147411][   T43] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  478.184829][   T43] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  478.225988][   T43] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  478.259948][   T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  478.322066][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.365536][   T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  478.379281][   T43] usb 1-1: config 0 descriptor??
[  478.396072][   T43] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  478.770287][ T2152] usb 1-1: USB disconnect, device number 4
[  478.823636][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  478.823656][   T30] audit: type=1326 audit(1752706623.688:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  478.858493][ T2152] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  478.908318][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  478.939297][   T24] usb 6-1: unable to read config index 0 descriptor/start: -71
[  478.964929][   T24] usb 6-1: can't read configurations, error -71
[  478.965266][   T30] audit: type=1326 audit(1752706623.688:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  479.042613][   T30] audit: type=1326 audit(1752706623.758:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  479.064982][    C1] vkms_vblank_simulate: vblank timer overrun
[  479.108429][   T30] audit: type=1326 audit(1752706623.758:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  479.168406][   T30] audit: type=1326 audit(1752706623.758:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  479.223477][   T30] audit: type=1326 audit(1752706623.798:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  479.276979][   T30] audit: type=1326 audit(1752706623.798:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  479.310300][   T30] audit: type=1326 audit(1752706623.798:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  479.382941][   T30] audit: type=1326 audit(1752706623.798:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  479.463691][   T30] audit: type=1326 audit(1752706623.798:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14225 comm="syz.9.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7ffc0000
[  481.605249][ T5909] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  481.794879][ T5909] usb 1-1: Using ep0 maxpacket: 8
[  481.893620][ T5909] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  481.935060][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.946223][ T5909] usb 1-1: Product: syz
[  481.954898][ T5909] usb 1-1: Manufacturer: syz
[  481.965609][ T5909] usb 1-1: SerialNumber: syz
[  481.997098][ T5909] usb 1-1: config 0 descriptor??
[  482.211254][ T5909] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  482.837758][ T5909] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  482.861163][ T5909] usb 1-1: USB disconnect, device number 5
[  483.245007][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  483.466691][T14322] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  483.831435][T14335] syzkaller0: entered promiscuous mode
[  483.850972][T14335] syzkaller0: entered allmulticast mode
[  484.184866][ T5909] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  484.377803][ T5909] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  484.429385][ T5909] usb 3-1: config 1 interface 0 has no altsetting 0
[  484.464960][ T5909] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  484.504998][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.519102][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'.
[  484.538803][ T5909] usb 3-1: Product: syz
[  484.545128][ T5909] usb 3-1: Manufacturer: syz
[  484.581454][ T5909] usb 3-1: SerialNumber: syz
[  484.590899][T14350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'.
[  484.662361][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2408'.
[  484.949806][ T5909] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input36
[  485.055781][ T5909] usb 3-1: USB disconnect, device number 34
[  485.061851][    C0] pxrc 3-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  485.079675][ T5204] pxrc 3-1:1.0: pxrc_open - usb_submit_urb failed, error: -19
[  485.094662][ T5204] pxrc 3-1:1.0: pxrc_open - usb_submit_urb failed, error: -19
[  485.235502][T13765] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  485.414803][T13765] usb 7-1: Using ep0 maxpacket: 8
[  485.423924][T13765] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  485.446760][T13765] usb 7-1: config 179 has no interface number 0
[  485.480954][T13765] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  485.507713][T14367] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  485.535510][T13765] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  485.584773][T13765] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  485.622439][T13765] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  485.658822][T13765] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  485.745359][T13765] usb 7-1: config 179 interface 65 has no altsetting 0
[  485.775840][T13765] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  485.832549][T13765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.959291][T13765] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input37
[  486.082786][ T5204] input input37: unable to receive magic message: -110
[  486.171743][T13765] usb 7-1: USB disconnect, device number 14
[  486.171821][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  486.186650][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  487.127802][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805cf2e800: rx timeout, send abort
[  487.136323][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cf2e800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  487.207208][ T5858] Bluetooth: hci2: Unexpected advertising set terminated event
[  487.246379][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  487.246400][   T30] audit: type=1326 audit(1752706632.118:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  487.444914][ T5908] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  487.556150][T13765] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  487.628456][ T5908] usb 3-1: Using ep0 maxpacket: 32
[  487.641285][ T5908] usb 3-1: config 0 has an invalid interface number: 151 but max is 0
[  487.660195][ T5908] usb 3-1: config 0 has no interface number 0
[  487.678051][ T5908] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  487.690783][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.709893][ T5908] usb 3-1: Product: syz
[  487.716440][ T5908] usb 3-1: Manufacturer: syz
[  487.729798][T13765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.747834][ T5908] usb 3-1: SerialNumber: syz
[  487.767439][T13765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.781155][ T5908] usb 3-1: config 0 descriptor??
[  487.795045][T13765] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  487.834836][T13765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.856299][T13765] usb 6-1: config 0 descriptor??
[  487.977665][   T30] audit: type=1326 audit(1752706632.848:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709e539 code=0x7fc00000
[  488.083081][   T30] audit: type=1326 audit(1752706632.848:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  488.189707][   T30] audit: type=1326 audit(1752706632.848:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  488.258487][   T30] audit: type=1326 audit(1752706632.848:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  488.301020][T13765] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0
[  488.323491][   T30] audit: type=1326 audit(1752706632.848:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  488.325430][T13765] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0
[  488.368434][T14413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.389119][T14413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.407351][   T30] audit: type=1326 audit(1752706632.848:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  488.425139][T13765] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0018/input/input38
[  488.513463][   T30] audit: type=1326 audit(1752706632.848:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000
[  488.575276][T13765] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  488.599238][ T5908] usb 3-1: USB disconnect, device number 35
[  488.722098][T13765] usb 6-1: USB disconnect, device number 28
[  488.801824][ T6262] udevd[6262]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  488.928072][T14440] fido_id[14440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  489.039027][ T5908] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  489.218842][ T5908] usb 7-1: Using ep0 maxpacket: 32
[  489.244296][ T5908] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  489.278275][ T5908] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  489.338164][ T5908] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  489.381619][ T5908] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  489.422059][ T5908] usb 7-1: config 0 interface 0 has no altsetting 0
[  489.432783][ T5908] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  489.447546][ T5908] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  489.458682][ T5908] usb 7-1: Product: syz
[  489.463041][ T5908] usb 7-1: Manufacturer: syz
[  489.497948][ T5908] usb 7-1: SerialNumber: syz
[  489.553300][ T5908] usb 7-1: config 0 descriptor??
[  489.584461][ T5908] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  489.601384][ T5908] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  490.018808][T14473] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2439'.
[  490.286348][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2442'.
[  490.298529][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2442'.
[  491.805531][ T5908] usb 7-1: USB disconnect, device number 15
[  491.805554][    C1] ldusb 7-1:0.0: usb_submit_urb failed (-19)
[  491.855926][ T5908] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  494.240355][T14562] binder: 14560:14562 ioctl c0306201 80000240 returned -14
[  494.528453][T14570] input: syz1 as /devices/virtual/input/input41
[  495.051199][T14578] syzkaller1: entered promiscuous mode
[  495.088767][T14578] syzkaller1: entered allmulticast mode
[  495.274857][ T5908] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  495.278527][T14590] netlink: 2032 bytes leftover after parsing attributes in process `syz.0.2465'.
[  495.364175][T14590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2465'.
[  495.455214][ T5908] usb 7-1: Using ep0 maxpacket: 32
[  495.512649][ T5908] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  495.561710][ T5908] usb 7-1: config 0 has no interface number 0
[  495.620161][ T5908] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  495.656829][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.707319][ T5908] usb 7-1: Product: syz
[  495.732056][ T5908] usb 7-1: Manufacturer: syz
[  495.760896][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2468'.
[  495.791221][ T5908] usb 7-1: SerialNumber: syz
[  495.827002][ T5908] usb 7-1: config 0 descriptor??
[  495.928548][ T5908] smsc95xx v2.0.0
[  496.337350][ T5908] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  496.362069][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'.
[  496.383207][ T5908] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  497.628573][ T5908] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  497.664350][ T5908] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  497.720793][ T5908] usb 7-1: USB disconnect, device number 16
[  498.589260][T14647] binder: 14645:14647 ioctl c0306201 800000c0 returned -14
[  498.674162][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'.
[  499.855922][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  500.035556][   T24] usb 1-1: Using ep0 maxpacket: 16
[  500.064062][   T24] usb 1-1: config 0 has an invalid interface number: 180 but max is 0
[  500.087250][   T24] usb 1-1: config 0 has no interface number 0
[  500.111546][   T24] usb 1-1: config 0 interface 180 has no altsetting 0
[  500.141198][   T24] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f
[  500.171198][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.193376][   T24] usb 1-1: Product: syz
[  500.210040][   T24] usb 1-1: Manufacturer: syz
[  500.231696][   T24] usb 1-1: SerialNumber: syz
[  500.259279][   T24] usb 1-1: config 0 descriptor??
[  500.683655][   T24] viperboard 1-1:0.180: version 0.f2 found at bus 001 address 006
[  500.801201][   T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  500.854817][   T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  500.922002][   T24] usb 1-1: USB disconnect, device number 6
[  501.664850][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.671307][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  501.969941][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'.
[  501.979331][   T24] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  502.007392][T14716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'.
[  502.171731][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2502'.
[  502.177826][   T24] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  502.214812][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.225794][   T24] usb 7-1: Product: syz
[  502.230013][   T24] usb 7-1: Manufacturer: syz
[  502.240458][   T24] usb 7-1: SerialNumber: syz
[  502.293260][   T24] usb 7-1: config 0 descriptor??
[  502.314829][ T2152] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  502.508588][ T2152] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  502.564892][ T2152] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  502.602511][ T2152] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.623603][ T2152] usb 10-1: Product: syz
[  502.634745][ T2152] usb 10-1: Manufacturer: syz
[  502.646140][ T2152] usb 10-1: SerialNumber: syz
[  502.807505][T14735] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.815510][T14735] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.833938][   T24] airspy 7-1:0.0: Board ID: 05
[  502.841703][   T24] airspy 7-1:0.0: Firmware version: 
[  502.941833][    T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  503.115238][    T9] usb 3-1: Using ep0 maxpacket: 8
[  503.161355][    T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  503.179916][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.223499][    T9] usb 3-1: Product: syz
[  503.243683][    T9] usb 3-1: Manufacturer: syz
[  503.281690][    T9] usb 3-1: SerialNumber: syz
[  503.322747][    T9] usb 3-1: config 0 descriptor??
[  503.482733][T14735] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  503.551944][T14735] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  503.580839][    T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  503.795300][ T2152] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42
[  503.830132][    T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  503.839899][ T2152] cdc_ncm 10-1:1.0: setting tx_max = 76
[  503.852692][   T24] airspy 7-1:0.0: Registered as swradio24
[  503.878596][    T9] usb 3-1: USB disconnect, device number 36
[  503.884864][   T24] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  504.165519][T14735] netdevsim netdevsim5 : unset [1, 0] type 2 family 0 port 6081 - 0
[  504.184192][T14735] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.231167][T14735] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.255299][T14741] usb 7-1: USB disconnect, device number 17
[  504.283289][T14735] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  504.580649][T14735] netdevsim netdevsim5 : unset [0, 0] type 1 family 0 port 8472 - 0
[  504.589431][T14735] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.598543][T14735] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.607806][T14735] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  504.844970][    T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  504.860804][ T2152] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  504.860820][T14771] 8021q: VLANs not supported on ip6gre0
[  504.920199][ T2152] usb 10-1: USB disconnect, device number 8
[  504.945821][ T2152] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP)
[  505.015327][    T9] usb 3-1: Using ep0 maxpacket: 16
[  505.052657][    T9] usb 3-1: config 0 has an invalid interface number: 180 but max is 0
[  505.084894][    T9] usb 3-1: config 0 has no interface number 0
[  505.125146][    T9] usb 3-1: config 0 interface 180 has no altsetting 0
[  505.158852][ T2152] ------------[ cut here ]------------
[  505.161462][    T9] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f
[  505.164390][ T2152] ODEBUG: free active (active state 0) object: ffff88805f685260 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xc80
[  505.203090][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.243914][    T9] usb 3-1: Product: syz
[  505.248401][ T2152] WARNING: CPU: 1 PID: 2152 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0
[  505.248452][ T2152] Modules linked in:
[  505.248501][ T2152] CPU: 1 UID: 0 PID: 2152 Comm: kworker/1:2 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  505.248529][ T2152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  505.248545][ T2152] Workqueue: usb_hub_wq hub_event
[  505.248574][ T2152] RIP: 0010:debug_print_object+0x16b/0x1e0
[  505.248602][ T2152] Code: 4c 89 ff e8 e7 b2 5b fd 4d 8b 0f 48 c7 c7 20 a7 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 7a 15 bc fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 26 da 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  505.290310][    T9] usb 3-1: Manufacturer: syz
[  505.296095][ T2152] RSP: 0018:ffffc900052f7280 EFLAGS: 00010292
[  505.316093][T14759] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[  505.334631][ T2152] 
[  505.338280][ T2152] RAX: 2c3e3267bc517100 RBX: dffffc0000000000 RCX: 0000000000100000
[  505.341867][    T9] usb 3-1: SerialNumber: syz
[  505.347197][ T2152] RDX: ffffc90017392000 RSI: 000000000005fad9 RDI: 000000000005fada
[  505.357545][    T9] usb 3-1: config 0 descriptor??
[  505.359076][ T2152] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  505.372525][ T2152] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffffffff8707a8f0
[  505.380611][ T2152] R13: ffffffff8be2a8a0 R14: ffff88805f685260 R15: ffffffff8b89dd60
[  505.388709][ T2152] FS:  0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000
[  505.397785][ T2152] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  505.404425][ T2152] CR2: 00007fe7f7a52ff8 CR3: 000000007c2aa000 CR4: 00000000003526f0
[  505.412787][ T2152] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  505.420874][ T2152] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  505.428932][ T2152] Call Trace:
[  505.432249][ T2152]  <TASK>
[  505.435296][ T2152]  debug_check_no_obj_freed+0x3a2/0x470
[  505.441983][ T2152]  ? device_release+0x99/0x1c0
[  505.447704][ T2152]  kfree+0x112/0x440
[  505.451655][ T2152]  ? __pfx_netdev_release+0x10/0x10
[  505.456956][ T2152]  device_release+0x99/0x1c0
[  505.461624][ T2152]  kobject_put+0x22b/0x480
[  505.466178][ T2152]  usb_unbind_interface+0x26b/0x8f0
[  505.471525][ T2152]  ? __pfx_usb_unbind_interface+0x10/0x10
[  505.476991][T14759] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  505.477323][ T2152]  device_release_driver_internal+0x4d6/0x7c0
[  505.491787][ T2152]  bus_remove_device+0x34d/0x410
[  505.496860][ T2152]  device_del+0x511/0x8e0
[  505.497357][T14759] usb 6-1: config 0 has no interface number 0
[  505.501220][ T2152]  ? kfree+0x18e/0x440
[  505.501253][ T2152]  ? __pfx_device_del+0x10/0x10
[  505.516463][ T2152]  ? kobject_put+0x446/0x480
[  505.521043][T14759] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  505.521106][T14759] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  505.532213][ T2152]  usb_disable_device+0x3e9/0x8a0
[  505.532263][ T2152]  usb_disconnect+0x330/0x950
[  505.532308][ T2152]  hub_event+0x1cdb/0x4a00
[  505.551210][T14759] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  505.555117][ T2152]  ? do_raw_spin_lock+0x121/0x290
[  505.555160][ T2152]  ? register_lock_class+0x51/0x320
[  505.555202][ T2152]  ? __pfx_hub_event+0x10/0x10
[  505.559944][T14759] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.568746][ T2152]  ? process_scheduled_works+0x9ef/0x17b0
[  505.597794][ T2152]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.603047][ T2152]  ? process_scheduled_works+0x9ef/0x17b0
[  505.608861][ T2152]  ? process_scheduled_works+0x9ef/0x17b0
[  505.614784][ T2152]  process_scheduled_works+0xae1/0x17b0
[  505.620410][ T2152]  ? __pfx_process_scheduled_works+0x10/0x10
[  505.626514][ T2152]  worker_thread+0x8a0/0xda0
[  505.631155][ T2152]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  505.637809][ T2152]  ? __kthread_parkme+0x7b/0x200
[  505.642824][ T2152]  kthread+0x70e/0x8a0
[  505.648381][ T2152]  ? __pfx_worker_thread+0x10/0x10
[  505.653551][ T2152]  ? __pfx_kthread+0x10/0x10
[  505.659282][ T2152]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.663486][T14759] usb 6-1: config 0 descriptor??
[  505.664610][ T2152]  ? lockdep_hardirqs_on+0x9c/0x150
[  505.664651][ T2152]  ? __pfx_kthread+0x10/0x10
[  505.679681][ T2152]  ret_from_fork+0x3fc/0x770
[  505.684325][ T2152]  ? __pfx_ret_from_fork+0x10/0x10
[  505.689551][ T2152]  ? __switch_to_asm+0x39/0x70
[  505.694380][ T2152]  ? __switch_to_asm+0x33/0x70
[  505.699275][ T2152]  ? __pfx_kthread+0x10/0x10
[  505.703924][ T2152]  ret_from_fork_asm+0x1a/0x30
[  505.708842][ T2152]  </TASK>
[  505.708875][    T9] viperboard 3-1:0.180: version 0.f2 found at bus 003 address 037
[  505.711878][ T2152] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  505.711896][ T2152] CPU: 1 UID: 0 PID: 2152 Comm: kworker/1:2 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) 
[  505.711923][ T2152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  505.711937][ T2152] Workqueue: usb_hub_wq hub_event
[  505.711963][ T2152] Call Trace:
[  505.711972][ T2152]  <TASK>
[  505.711981][ T2152]  dump_stack_lvl+0x99/0x250
[  505.712009][ T2152]  ? __asan_memcpy+0x40/0x70
[  505.712029][ T2152]  ? __pfx_dump_stack_lvl+0x10/0x10
[  505.712053][ T2152]  ? __pfx__printk+0x10/0x10
[  505.712094][ T2152]  panic+0x2db/0x790
[  505.712123][ T2152]  ? __pfx_panic+0x10/0x10
[  505.712142][ T2152]  ? show_trace_log_lvl+0x4fb/0x550
[  505.712177][ T2152]  ? ret_from_fork_asm+0x1a/0x30
[  505.712209][ T2152]  __warn+0x31b/0x4b0
[  505.712229][ T2152]  ? debug_print_object+0x16b/0x1e0
[  505.712256][ T2152]  ? debug_print_object+0x16b/0x1e0
[  505.712281][ T2152]  report_bug+0x2be/0x4f0
[  505.712309][ T2152]  ? debug_print_object+0x16b/0x1e0
[  505.712334][ T2152]  ? debug_print_object+0x16b/0x1e0
[  505.712359][ T2152]  ? debug_print_object+0x16d/0x1e0
[  505.712383][ T2152]  handle_bug+0x84/0x160
[  505.712406][ T2152]  exc_invalid_op+0x1a/0x50
[  505.712428][ T2152]  asm_exc_invalid_op+0x1a/0x20
[  505.712446][ T2152] RIP: 0010:debug_print_object+0x16b/0x1e0
[  505.712472][ T2152] Code: 4c 89 ff e8 e7 b2 5b fd 4d 8b 0f 48 c7 c7 20 a7 e2 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 7a 15 bc fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 67 26 da 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41
[  505.712490][ T2152] RSP: 0018:ffffc900052f7280 EFLAGS: 00010292
[  505.712508][ T2152] RAX: 2c3e3267bc517100 RBX: dffffc0000000000 RCX: 0000000000100000
[  505.712524][ T2152] RDX: ffffc90017392000 RSI: 000000000005fad9 RDI: 000000000005fada
[  505.712538][ T2152] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  505.712550][ T2152] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: ffffffff8707a8f0
[  505.712565][ T2152] R13: ffffffff8be2a8a0 R14: ffff88805f685260 R15: ffffffff8b89dd60
[  505.712583][ T2152]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  505.712633][ T2152]  debug_check_no_obj_freed+0x3a2/0x470
[  505.712676][ T2152]  ? device_release+0x99/0x1c0
[  505.712704][ T2152]  kfree+0x112/0x440
[  505.712730][ T2152]  ? __pfx_netdev_release+0x10/0x10
[  505.712749][ T2152]  device_release+0x99/0x1c0
[  505.712780][ T2152]  kobject_put+0x22b/0x480
[  505.712807][ T2152]  usb_unbind_interface+0x26b/0x8f0
[  505.712841][ T2152]  ? __pfx_usb_unbind_interface+0x10/0x10
[  505.712867][ T2152]  device_release_driver_internal+0x4d6/0x7c0
[  505.712902][ T2152]  bus_remove_device+0x34d/0x410
[  505.712930][ T2152]  device_del+0x511/0x8e0
[  505.712960][ T2152]  ? kfree+0x18e/0x440
[  505.712984][ T2152]  ? __pfx_device_del+0x10/0x10
[  505.713007][ T2152]  ? kobject_put+0x446/0x480
[  505.713038][ T2152]  usb_disable_device+0x3e9/0x8a0
[  505.713070][ T2152]  usb_disconnect+0x330/0x950
[  505.713110][ T2152]  hub_event+0x1cdb/0x4a00
[  505.713160][ T2152]  ? do_raw_spin_lock+0x121/0x290
[  505.713190][ T2152]  ? register_lock_class+0x51/0x320
[  505.713229][ T2152]  ? __pfx_hub_event+0x10/0x10
[  505.713251][ T2152]  ? process_scheduled_works+0x9ef/0x17b0
[  505.713281][ T2152]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.713307][ T2152]  ? process_scheduled_works+0x9ef/0x17b0
[  505.713328][ T2152]  ? process_scheduled_works+0x9ef/0x17b0
[  505.713352][ T2152]  process_scheduled_works+0xae1/0x17b0
[  505.713403][ T2152]  ? __pfx_process_scheduled_works+0x10/0x10
[  505.713440][ T2152]  worker_thread+0x8a0/0xda0
[  505.713465][ T2152]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  505.713502][ T2152]  ? __kthread_parkme+0x7b/0x200
[  505.713537][ T2152]  kthread+0x70e/0x8a0
[  505.713568][ T2152]  ? __pfx_worker_thread+0x10/0x10
[  505.713590][ T2152]  ? __pfx_kthread+0x10/0x10
[  505.713626][ T2152]  ? _raw_spin_unlock_irq+0x23/0x50
[  505.713653][ T2152]  ? lockdep_hardirqs_on+0x9c/0x150
[  505.713680][ T2152]  ? __pfx_kthread+0x10/0x10
[  505.713708][ T2152]  ret_from_fork+0x3fc/0x770
[  505.713732][ T2152]  ? __pfx_ret_from_fork+0x10/0x10
[  505.713760][ T2152]  ? __switch_to_asm+0x39/0x70
[  505.713784][ T2152]  ? __switch_to_asm+0x33/0x70
[  505.713808][ T2152]  ? __pfx_kthread+0x10/0x10
[  505.713836][ T2152]  ret_from_fork_asm+0x1a/0x30
[  505.713879][ T2152]  </TASK>
[  505.719979][ T2152] Kernel Offset: disabled