last executing test programs:

18m48.120178169s ago: executing program 2 (id=6):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x40800)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
sendfile(r0, r1, 0x0, 0x7ffff004)

18m47.918266795s ago: executing program 2 (id=7):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0xfffffffe, "b6855a32474ffa64f778ddcf29c94337"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x800)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x368)
r9 = dup(r6)
r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f0000000340), 0x0)
r11 = inotify_init()
fcntl$setstatus(r11, 0x4, 0x42800)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d843923619009cce06c3c8653ba4b9be6e1c0fc98f06a002464e676570e7ae8e9bb2cd2bd14c11a7658244d54c4ea4d850de53a920c7442df3d75924173ed62d2943ce668a30083b43c33d5b77b6699532def9a0268a565b73da10c963c8669f0aa0527d12d9155b5de72c1de61621ac304e12af0cc7e9ed28ba5956e1f43e2c04d49de80517582eeb78f1d7f", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00'])
ioctl$KDADDIO(r6, 0x4b34, 0x3)

18m46.704385358s ago: executing program 2 (id=9):
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

18m46.013724317s ago: executing program 2 (id=13):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1404c, &(0x7f0000000300)={[{@grpquota}, {@init_itable}, {@init_itable_val}]}, 0x1, 0x485, &(0x7f0000000bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20004000)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

18m43.059944857s ago: executing program 2 (id=15):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x29}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r3, 0x5c, 0x0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000b0008000500a35078fe6a58ac0b85b458c995939798d15e16cc65b0fdfd4401188a593f72942fd0003a90df2e46ff1c0fbfd77e1feb72bfcbfaabe09eabe23456cc5cc747c1246c86a2cd80", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f00000036c0)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x2, 0x42}]}, @struct={0xc}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000800)=""/4097, 0x3c, 0x1001, 0x1}, 0x28)
getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb)
socket(0x9, 0x2, 0xc4)

18m41.369680663s ago: executing program 2 (id=23):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x20, 0x30, 0x2, "fbc2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000880)={0x20, 0xe, 0x2, "ea61"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x20, 0x16, 0x2, "e918"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f00000009c0)={0x0, 0x16, 0x8, "dde1ffa23d699718"}, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

18m40.102092008s ago: executing program 32 (id=23):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x20, 0x30, 0x2, "fbc2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f0000000880)={0x20, 0xe, 0x2, "ea61"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x20, 0x16, 0x2, "e918"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000b80)={0x1c, &(0x7f00000009c0)={0x0, 0x16, 0x8, "dde1ffa23d699718"}, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

18m30.975117676s ago: executing program 3 (id=42):
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

18m30.625086996s ago: executing program 3 (id=44):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00')
read$FUSE(r3, &(0x7f00000027c0)={0x2020}, 0x2038)

18m28.344855428s ago: executing program 3 (id=46):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x29}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r3, 0x5c, 0x0}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000000a0000000000000004000b0008000500a35078fe6a58ac0b85b458c995939798d15e16cc65b0fdfd4401188a593f72942fd0003a90df2e46ff1c0fbfd77e1feb72bfcbfaabe09eabe23456cc5cc747c1246c86a2cd80", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0)
socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f00000036c0)="$eJzs2M1rXOUeB/DfOZnkpm1uJ733Lm7vphcrtCCdvLWhqSCtC0EQLBRcqRjsJA2ZNCWToskqxaUuXAgqImg3LkSahdCN1IjgH6Ab+y8IoqILF8LImUxeSCcv1qQPTT8feGaelzn5/p4kc5hnAnhk/b94yCJ6IqI/Isqt+Twiupq97oiF5dfdGlq8UrQsGo1LP2XFZXFzaPHKys/KWs+HonlJnIyIp5/J4t9v3Jtbn5ufHK3VqjOtcd/s1LW++tz8qYmp0fHqePXq4ODZMyOnB4aHR3ZtrwN98fLXn59/YeHC9c/6X5yeLOrtaa2t38duytrMlSLipb0IS6CjtZ+OdXNZKWFBAABsqfic/6+IeKz5Ga4cHbH24a0cd79MWhwAAACwKxrHGgAAAMA+l/r7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg6NRhYNAAAAYF9L/f0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl5tDi1dW2oPM/fFCRPQu599qteWVUiw0n7ujMyIO/ppFad11WUT070L+wo2I+G+7/WfN/N7obo425ucRcTFx/iu7kA+PsqXi/nO+3fsvX73/RJv3X2n5sr9t5f53657731p+xyb3v2s7zPjku+ff2jT/RsT/Su3ys9X8bH1+51r+wg7z7zx39P3N1hofR5yI9vkril7f7NS1vvrc/KmJqdHx6nj16uDg2TMjpweGh0f6xiZq1f7lx7YZH3765jdb7f/gZvlZbPn7f3uH+z9+5MkvPtoi/+Txrf/+WZv8oqbFotPYPv+Xbw//sdlakX95k/1vlV/MLW0f3fTs7Yu3d/hSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2iTwieiLLK6v9PK9UIg5FxH/iYF6brs8+MTZ9/erlYi2iNzrzsYlatT8iysvjrBgPNPtr48EN46GIOBIR75QPNMeVV6drl1NvHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFWHIqInsrwSEXlE/FbO80oldVUAAADArutNXQAAAACw55z/AQAAYP/b9vx/56kHUwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD71ZFjS3eziFg4d6DZCl2ttc6klQF7LU9dAJBMR+oCgGRKqQsAknHGB7Jt1rvvYwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/efE0aW7WUQsnDvQbIWu1lpn0sqAvZanLgBIpiN1AUAypdQFAMk44wPZNuvd97ECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP7T02xZXomIvNnP80ol4p8R0Rud2dhErdofEYcj4vty5z+K8UDqogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh19bn5ydFarTqjo/NwdL7yT/sgOqnvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApFCfm58crdWqM/XUlQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJBW/kMWEUU7UX68Z+NqV/Z7ufkcEa99cOnd10dnZ2cGivmfV+dn32vND6aoHwAAANho5Zy+co4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYqfrc/ORorVad2cNO6j0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/NnwEAAP//hsSitA==")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0x2, 0x42}]}, @struct={0xc}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000800)=""/4097, 0x3c, 0x1001, 0x1}, 0x28)
getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb)
socket(0x9, 0x2, 0xc4)

18m24.490527963s ago: executing program 3 (id=50):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1404c, &(0x7f0000000300)={[{@grpquota}, {@init_itable}, {@init_itable_val}]}, 0x1, 0x485, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvbLuFWrQV8Rf4YxWNxGhLAZWDBzWaeMDERA963LSVIAUNrYmQJhYPeDLGxLvx6L/gSS/GeNHEq94JCTFcBE9rZmem3W1ntxR2u+p+PsnC983M7nvfffO2b+Z1G8DQqqX/JBF7IuL3iJjMiu0H1LL/rl9bmbtxbWUuiUbjrT+T5nF/XVuZKw4tnjfRWogkDpTUu3T+wun64uLCubw8s3zmw5ml8xeePXWmfnLh5MLZI8ePHzs6+8LzR57rSZ4TUcmj19/98o0Tn7flvyGPHql12/lko9Hj6gbrzpZ4dIDtYHtG8v6qNsf/ZIy09N5kvPbpWuGTATUQ6JtGo9GY6Lx7tQH8jyXRXjbkYVgUP+iL69+y6+CX+jb7GLyrL2cXQGne1/NHtmd07Y5BdcP1bS/VIuKd1b+/Th/Rn/sQAABtvk/nP8+ks52VuXTusT7/qMR9Lcfdla8NTUXE3RGxNyLuibOxLyLujWgee39EPLDN+lsWSZrTzM3zn8qVW07uJqTzvxfzta32+V8x+4upkWbpfFaIavLeqcWFw/l7ciiqu9LybJc6fnj1ty867Wud/6WPtP5iLpi348rorvbnzNeX67eecburFyP2j5bln6ytBCQR8WBE7C97gcrWdZx6+tuHOu2rTW+Vfxc9WGhqfBPxVNb/q7Eh/0LSfX1yZncsLhyeKc6KzX7+9dKbnerfuv/7K+3/O0rP/7X8p5LW9dql7ddx6Y/POl7T1Kp5sI3zf7W+XB9L3m7GY/m2j+vLy+dmI8aSE1mjW7cfWX9uUS6OT/M/dLB8/O+N9XfiQESkJ/HDEfFIRDya991jEfF4RBzskv9Przzx/sZt40X+3ft/rMvL9kSa//y2+n89GIv2LZWSY9Jg5PSP37VVOrUe5vnf6P75d6wZHcq33Mzn3+ZWlAe3+/4BAADAf0ElIvZEUpleiyuV6ensd/j3ZUvfqY/OzmffEZiKaqW40zXZcj90Nr+sz8oXIyL71YJi/9GoNO8bfzUy3ixPz32wOD/QzIGJDuM/dXlk0K0D+s4XtmB4Gf8wvLqO/+rOtQPYeZvGf9cxv6uvbQF2VsnP//FBtAPYeWXzf3/vB4bDhvFv2Q+GiPv/MLyMfxhexj8MpaXx2PpL8l2D4pVu8elbBZMRt9vC07vLdv1S+jcNehdEtV+v/O8IotL3Ksb6e2r1LUhuts2XB97UzsHgPpMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66Z8AAAD//2qZzow=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

18m22.243786924s ago: executing program 3 (id=55):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)

18m19.390329532s ago: executing program 3 (id=60):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = dup3(r1, r0, 0x0)
read$msr(r2, &(0x7f0000026200)=""/102398, 0x18ffe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

18m17.517608233s ago: executing program 33 (id=60):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = dup3(r1, r0, 0x0)
read$msr(r2, &(0x7f0000026200)=""/102398, 0x18ffe)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

18.692613647s ago: executing program 5 (id=2521):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, 0x0, 0x0)
getdents64(r2, 0x0, 0x0)

18.354082576s ago: executing program 5 (id=2522):
mknodat(0xffffffffffffffff, 0x0, 0x1, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x125, 0x9})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

18.023044294s ago: executing program 5 (id=2525):
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80000000)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17.005216571s ago: executing program 5 (id=2526):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0})
getdents64(r2, 0x0, 0x0)
getdents64(r2, 0x0, 0x0)

16.006306397s ago: executing program 5 (id=2529):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
r1 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r1, 0x0)

15.186353008s ago: executing program 5 (id=2531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
open(0x0, 0x1, 0x104)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000000c0))

7.519307416s ago: executing program 1 (id=2544):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c010)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7000000100000000000000aaaaaaaabb080045000014000040"], 0xfdef)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5)
r6 = dup(r4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$XFS_IOC_FSGROWFSLOG(r6, 0x4008586f, &(0x7f0000000440)={0x1, 0x7})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', <r9=>0x0})
setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf943", 0x44, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)

6.453428863s ago: executing program 1 (id=2546):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r7 = socket$inet(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x330, 0x0, 0x98, 0x0, 0x1a0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@ip={@local, @local, 0x0, 0xff, 'veth0_to_batadv\x00', 'nicvf0\x00', {}, {}, 0x8}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "ec4a", 0x1}}, @common=@set={{0x40}, {{0x2, [0x0, 0x3, 0x2, 0x7, 0x6, 0x2], 0x5, 0x6}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7ff, 0x6, @ipv4=@empty, 0x4e21}}}, {{@ip={@remote, @local, 0x0, 0x0, 'syzkaller0\x00', 'wg0\x00', {}, {}, 0x89, 0x0, 0x35}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0xf, "cc00", 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0xa5, 0x57}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000014000000000000000000030018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000008807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f)
preadv(0xffffffffffffffff, &(0x7f0000001640)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x86, 0x451)
syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0xf1, 0x40, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffc0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xb, 0x4, 0x2, 0x1, "2b601e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x81, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x8, 0xad, {0x7, 0x25, 0x1, 0x0, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x12a})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r11 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080)

5.04191875s ago: executing program 4 (id=2551):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x205, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0)

4.995608041s ago: executing program 0 (id=2552):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
syz_open_dev$vim2m(0x0, 0x100000000ff, 0x2)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x228000, 0x40)
lseek(0xffffffffffffffff, 0x851, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

4.823738905s ago: executing program 4 (id=2553):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c010)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7000000100000000000000aaaaaaaabb080045000014000040"], 0xfdef)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5)
r6 = dup(r4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$XFS_IOC_FSGROWFSLOG(r6, 0x4008586f, &(0x7f0000000440)={0x1, 0x7})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', <r9=>0x0})
setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf943", 0x44, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.722995658s ago: executing program 1 (id=2554):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.665965525s ago: executing program 4 (id=2555):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r1 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r1, 0x0)

3.516369589s ago: executing program 4 (id=2556):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x31835003, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50)

3.185852998s ago: executing program 0 (id=2557):
mknodat(0xffffffffffffffff, 0x0, 0x1, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xa27, 0x0, &(0x7f0000000280)})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x125, 0x9})
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2.959174053s ago: executing program 1 (id=2558):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000001080)={0x0, [{0x0, 0x60, 0x2000006, &(0x7f0000000640)="7a650e526bd0998268bb5847"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000001c0)={0x4, 0x0, [{0x272, 0x0, 0x4}, {0xa16, 0x0, 0x2}, {0xb31, 0x0, 0x4}, {0x207, 0x0, 0x6}]})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x19)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r3}, 0x38)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x400000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.822312977s ago: executing program 0 (id=2559):
r0 = io_uring_setup(0x185a, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x840000c1})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.665597921s ago: executing program 0 (id=2560):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x40, 0x4, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.583001863s ago: executing program 1 (id=2561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x205, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x0)

2.410210197s ago: executing program 4 (id=2562):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c010)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7000000100000000000000aaaaaaaabb080045000014000040"], 0xfdef)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5)
r6 = dup(r4)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$XFS_IOC_FSGROWFSLOG(r6, 0x4008586f, &(0x7f0000000440)={0x1, 0x7})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', <r9=>0x0})
setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf943", 0x44, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)

772.173649ms ago: executing program 0 (id=2563):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
r1 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400103842, 0x2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r1, 0x0)

640.369413ms ago: executing program 0 (id=2564):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
syz_open_dev$vim2m(0x0, 0x100000000ff, 0x2)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x228000, 0x40)
lseek(0xffffffffffffffff, 0x851, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

25.901709ms ago: executing program 4 (id=2565):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 1 (id=2566):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000800)=ANY=[@ANYBLOB="50000100ffffffffffff08021100000050505050505000000020000000000000fe0360f1000601010101010101000301ae7206e00303030303710701ffff01007f20"], 0x42)

kernel console output (not intermixed with test programs):

40 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  674.321178][ T2321] pvrusb2: Attached sub-driver cx25840
[  674.335319][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  674.405614][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  677.644135][T11031] comedi comedi0: Minor 3 could not be opened
[  677.653232][T11032] comedi comedi0: Minor 3 could not be opened
[  677.688197][   T27] audit: type=1326 audit(1777584772.764:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.4.1341" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea3a99cdd9 code=0x0
[  677.891374][T11036] overlayfs: missing 'workdir'
[  678.763446][ T2189] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  679.089836][ T2189] usb 5-1: Using ep0 maxpacket: 8
[  679.156281][ T2189] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  679.232730][ T2189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.342076][ T2189] pvrusb2: Hardware description: Terratec Grabster AV400
[  679.382820][ T2189] pvrusb2: **********
[  679.394602][ T2189] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  679.426812][ T2189] pvrusb2: Important functionality might not be entirely working.
[  679.434870][ T2189] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  679.481537][ T2189] pvrusb2: **********
[  679.489646][T11051] binder_alloc: 11050: binder_alloc_buf size 17408 failed, no address space
[  679.503209][T11051] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  679.550352][ T2321] pvrusb2: Invalid write control endpoint
[  679.560061][ T2189] usb 5-1: USB disconnect, device number 51
[  679.721105][ T2321] pvrusb2: Invalid write control endpoint
[  679.741290][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  680.234365][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  680.263486][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  680.274288][ T2321] pvrusb2: Device being rendered inoperable
[  680.285305][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  680.299553][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  680.416969][ T2321] pvrusb2: Attached sub-driver cx25840
[  680.468808][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  680.544861][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  680.595488][T11062] comedi comedi0: Minor 3 could not be opened
[  682.427527][T11081] overlayfs: missing 'lowerdir'
[  684.615420][  T787] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  685.419649][T11098] comedi comedi0: Minor 3 could not be opened
[  685.497468][  T787] usb 6-1: Using ep0 maxpacket: 8
[  685.504486][  T787] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  685.516235][  T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.562575][  T787] pvrusb2: Hardware description: Terratec Grabster AV400
[  685.629471][  T787] pvrusb2: **********
[  685.642974][  T787] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  685.674655][  T787] pvrusb2: Important functionality might not be entirely working.
[  685.685302][  T787] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  685.712889][  T787] pvrusb2: **********
[  685.883894][ T2321] pvrusb2: Invalid write control endpoint
[  686.129336][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  686.135864][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  686.353507][  T787] usb 6-1: USB disconnect, device number 58
[  686.571306][ T2321] pvrusb2: Invalid write control endpoint
[  686.591408][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  686.631297][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  686.658359][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  686.672148][ T2321] pvrusb2: Device being rendered inoperable
[  686.678917][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  686.687020][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  686.715296][ T2321] pvrusb2: Attached sub-driver cx25840
[  686.720844][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  686.775029][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  687.764471][T11127] Bluetooth: hci0: unsupported parameter 255
[  687.889561][T11127] Bluetooth: hci0: unsupported parameter 255
[  690.185275][ T2189] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  690.564266][ T2189] usb 2-1: Using ep0 maxpacket: 8
[  690.649782][ T2189] usb 2-1: unable to get BOS descriptor or descriptor too short
[  690.799404][ T2189] usb 2-1: config 4 interface 0 has no altsetting 0
[  690.819084][ T2189] usb 2-1: string descriptor 0 read error: -22
[  690.826576][ T2189] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  690.836504][ T2189] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  690.871955][ T2189] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  690.918783][ T2189] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  690.957566][ T2189] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  690.964934][ T2189] usb 2-1: media controller created
[  691.843972][ T2189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  692.362774][ T2189] zl10353_read_register: readreg error (reg=127, ret==0)
[  692.698254][ T2189] usb 2-1: USB disconnect, device number 31
[  697.665633][T11219] fuse: Bad value for 'group_id'
[  698.235278][    T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  698.625389][    T9] usb 1-1: Using ep0 maxpacket: 8
[  699.054984][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  699.293455][    T9] usb 1-1: config 4 interface 0 has no altsetting 0
[  699.416753][    T9] usb 1-1: string descriptor 0 read error: -22
[  699.439351][    T9] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  699.467488][    T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  699.513327][    T9] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  700.473397][    T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  700.492642][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  700.500587][    T9] usb 1-1: media controller created
[  700.525854][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  700.549719][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  700.663128][    T9] usb 1-1: USB disconnect, device number 37
[  705.021136][T11282] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  705.030209][T11282] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  705.095272][   T28] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  705.285887][   T28] usb 2-1: Using ep0 maxpacket: 8
[  705.302343][   T28] usb 2-1: unable to get BOS descriptor or descriptor too short
[  705.317955][   T28] usb 2-1: config 4 interface 0 has no altsetting 0
[  706.006963][  T787] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  706.135893][   T28] usb 2-1: string descriptor 0 read error: -22
[  706.142784][   T28] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  706.177643][   T28] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  706.194581][   T28] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  706.209548][   T28] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  706.220384][   T28] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  706.228448][   T28] usb 2-1: media controller created
[  706.254903][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  706.265913][  T787] usb 6-1: Using ep0 maxpacket: 8
[  706.296793][  T787] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  706.327211][  T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.977096][  T787] pvrusb2: Hardware description: Terratec Grabster AV400
[  707.557629][   T28] zl10353_read_register: readreg error (reg=127, ret==0)
[  707.568774][  T787] pvrusb2: **********
[  707.572825][  T787] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  707.642275][  T787] pvrusb2: Important functionality might not be entirely working.
[  707.661991][  T787] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  707.675016][  T787] pvrusb2: **********
[  707.682513][ T2321] pvrusb2: Invalid write control endpoint
[  707.718431][  T787] usb 6-1: USB disconnect, device number 59
[  707.789493][ T2321] pvrusb2: Invalid write control endpoint
[  707.796334][   T28] usb 2-1: USB disconnect, device number 32
[  707.804801][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  707.845555][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  707.854050][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  707.867018][ T2321] pvrusb2: Device being rendered inoperable
[  707.886075][ T2321] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  707.894595][ T2321] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  707.910448][ T2321] pvrusb2: Attached sub-driver cx25840
[  707.916806][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  707.931671][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  712.937531][T11350] comedi comedi0: Minor 3 could not be opened
[  716.178434][   T27] audit: type=1326 audit(1777584811.154:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11371 comm="syz.1.1448" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f264119cdd9 code=0x0
[  716.345814][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.0.0.32
[  718.167010][T11406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  718.184766][T11406] syzkaller0: entered promiscuous mode
[  718.205699][T11406] syzkaller0: entered allmulticast mode
[  718.290770][T11406] tipc: Resetting bearer <eth:syzkaller0>
[  718.315914][T11405] tipc: Resetting bearer <eth:syzkaller0>
[  718.414482][T11405] tipc: Disabling bearer <eth:syzkaller0>
[  718.613282][T11412] comedi comedi0: Minor 3 could not be opened
[  720.378842][   T27] audit: type=1326 audit(1777584814.774:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.5.1459" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d9c19cdd9 code=0x0
[  722.407795][T11435] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1462'.
[  722.416861][T11435] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1462'.
[  722.426021][T11435] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1462'.
[  726.293986][   T27] audit: type=1326 audit(1777584820.584:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.5.1470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d9c19cdd9 code=0x0
[  727.580516][T11473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1472'.
[  727.589681][T11473] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1472'.
[  727.598880][T11473] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1472'.
[  728.425419][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.0.0.32
[  729.525760][T11485] comedi comedi0: Minor 3 could not be opened
[  732.328284][T11516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1485'.
[  732.337622][T11516] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1485'.
[  732.346657][T11516] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1485'.
[  732.745595][    C0] icmp: detected local route for 172.20.20.28 during ICMP sending, src 0.0.0.32
[  736.041337][T11546] fuse: Unknown parameter 'grou00000000000000000000'
[  736.817149][T11556] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1496'.
[  736.826611][T11556] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1496'.
[  736.835664][T11556] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1496'.
[  738.630140][   T27] audit: type=1326 audit(1777584833.704:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11564 comm="syz.4.1498" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea3a99cdd9 code=0x0
[  740.623160][T11581] fuse: Unknown parameter 'grou00000000000000000000'
[  740.868785][T11590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1506'.
[  740.877849][T11590] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1506'.
[  740.886930][T11590] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1506'.
[  743.226972][   T27] audit: type=1326 audit(1777584838.304:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11597 comm="syz.0.1509" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c1039cdd9 code=0x0
[  744.878562][T11626] fuse: Unknown parameter 'grou00000000000000000000'
[  746.500140][T11627] comedi comedi0: Minor 3 could not be opened
[  746.513461][T11636] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1518'.
[  746.522698][T11636] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1518'.
[  746.531730][T11636] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1518'.
[  748.132139][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  748.138647][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  749.242407][   T27] audit: type=1326 audit(1777584844.244:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11648 comm="syz.1.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f264119cdd9 code=0x0
[  752.084676][T11682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1527'.
[  752.094630][T11682] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1527'.
[  752.103938][T11682] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1527'.
[  753.428093][   T27] audit: type=1326 audit(1777584848.504:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11699 comm="syz.5.1531" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d9c19cdd9 code=0x0
[  755.322998][T11716] comedi comedi0: Minor 3 could not be opened
[  758.615706][   T27] audit: type=1326 audit(1777584853.694:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.1.1541" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f264119cdd9 code=0x0
[  763.502398][   T27] audit: type=1326 audit(1777584858.544:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.4.1551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea3a99cdd9 code=0x0
[  766.428154][T11802] comedi comedi0: Minor 3 could not be opened
[  768.250629][T11820] comedi comedi0: Minor 3 could not be opened
[  768.819939][T11837] kAFS: No cell specified
[  769.519829][T11831] comedi comedi0: Minor 3 could not be opened
[  769.842220][   T27] audit: type=1326 audit(1777584864.914:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11842 comm="syz.0.1565" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3c1039cdd9 code=0x0
[  772.786751][T11861] comedi comedi0: Minor 3 could not be opened
[  773.333658][T11872] kAFS: No cell specified
[  774.567273][T11881] comedi comedi0: Minor 2 could not be opened
[  777.035154][T11901] comedi comedi0: Minor 2 could not be opened
[  778.595420][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  778.815246][    T9] usb 2-1: Using ep0 maxpacket: 32
[  778.841247][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  779.262001][    T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  779.294308][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.395900][    T9] usb 2-1: Product: syz
[  779.400602][    T9] usb 2-1: Manufacturer: syz
[  779.407770][    T9] usb 2-1: SerialNumber: syz
[  779.482876][    T9] usb 2-1: config 0 descriptor??
[  780.361261][    T9] usb 2-1: USB disconnect, device number 33
[  782.715025][T11948] comedi comedi0: Minor 2 could not be opened
[  782.740891][T11944] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  782.786415][T11944] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  782.815771][T11944] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  784.586146][T11965] binder_alloc: 11962: binder_alloc_buf, no vma
[  786.135336][T11981] block nbd5: Device being setup by another task
[  786.628536][T11978] block nbd5: shutting down sockets
[  787.146192][T11990] comedi comedi0: Minor 2 could not be opened
[  791.616986][T12031] comedi comedi0: Minor 2 could not be opened
[  795.545247][ T2189] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  795.956420][ T2189] usb 6-1: device descriptor read/64, error -71
[  796.245903][ T2189] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  796.345377][T12054] comedi comedi0: Minor 2 could not be opened
[  796.495258][ T2189] usb 6-1: device descriptor read/64, error -71
[  796.615456][ T2189] usb usb6-port1: attempt power cycle
[  796.765172][  T787] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  797.505192][  T787] usb 1-1: Using ep0 maxpacket: 8
[  797.727827][  T787] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  797.736562][  T787] usb 1-1: config 0 has no interface number 0
[  797.742780][  T787] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  797.754188][  T787] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  797.765240][  T787] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  797.778762][  T787] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  797.788114][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.798786][  T787] usb 1-1: config 0 descriptor??
[  797.813583][  T787] ldusb 1-1:0.55: Interrupt in endpoint not found
[  798.034247][  T787] usb 1-1: USB disconnect, device number 38
[  798.130899][ T2189] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  798.840588][ T2189] usb 6-1: device descriptor read/8, error -71
[  800.329099][T12097] afs: Unknown parameter ''
[  801.551690][T12091] comedi comedi0: Minor 2 could not be opened
[  803.383556][  T787] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  803.469489][T12113] binder: BINDER_SET_CONTEXT_MGR already set
[  803.495348][T12113] binder: 12111:12113 ioctl 4018620d 200000001000 returned -16
[  804.560579][  T787] usb 5-1: device descriptor read/64, error -71
[  805.165699][  T787] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  806.292892][T12133] afs: Unknown parameter ''
[  806.418197][T12134] capability: warning: `syz.0.1647' uses 32-bit capabilities (legacy support in use)
[  809.002292][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  809.009619][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  812.332174][T12175] afs: Unknown parameter ''
[  812.565264][  T787] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  813.105947][  T787] usb 1-1: device descriptor read/64, error -71
[  813.406141][  T787] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  813.575425][  T787] usb 1-1: device descriptor read/64, error -71
[  813.770865][  T787] usb usb1-port1: attempt power cycle
[  814.052462][T12187] comedi comedi0: Minor 2 could not be opened
[  814.296876][  T787] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  814.770523][  T787] usb 1-1: device descriptor read/8, error -71
[  816.933536][T12221] afs: Unknown parameter 'dy'
[  818.425366][T12219] comedi comedi0: Minor 2 could not be opened
[  820.916610][ T5812] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  821.075486][ T5812] usb 2-1: device descriptor read/64, error -71
[  822.105383][ T5812] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  822.359698][ T5812] usb 2-1: device descriptor read/64, error -71
[  822.555482][ T5812] usb usb2-port1: attempt power cycle
[  823.115460][T12262] afs: Unknown parameter 'dy'
[  823.232315][ T5812] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  824.217882][ T5812] usb 2-1: device not accepting address 36, error -71
[  825.249924][T12276] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  825.258940][T12276] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  825.267836][T12276] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  825.505008][T12277] comedi comedi0: Minor 2 could not be opened
[  827.949402][ T5810] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  828.114740][   T27] audit: type=1326 audit(1777584923.184:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12294 comm="syz.1.1693" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f264119cdd9 code=0x0
[  828.495207][ T5810] usb 1-1: device descriptor read/64, error -71
[  828.905327][ T5810] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  829.757729][ T5810] usb 1-1: device descriptor read/64, error -71
[  829.905829][T12315] comedi comedi0: Minor 2 could not be opened
[  829.990804][ T5810] usb usb1-port1: attempt power cycle
[  831.397898][T12321] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  831.425564][T12321] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  831.437055][T12321] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  833.795243][  T787] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  833.985416][  T787] usb 1-1: device descriptor read/64, error -71
[  834.199092][T12342] comedi comedi0: Minor 2 could not be opened
[  834.411684][ T2189] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  834.485401][  T787] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  834.635177][ T2189] usb 2-1: device descriptor read/64, error -71
[  834.745879][  T787] usb 1-1: device descriptor read/64, error -71
[  835.067837][  T787] usb usb1-port1: attempt power cycle
[  835.085369][ T2189] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  835.305516][ T2189] usb 2-1: device descriptor read/64, error -71
[  835.425863][ T2189] usb usb2-port1: attempt power cycle
[  835.536030][  T787] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  835.855384][ T2189] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  835.892625][  T787] usb 1-1: device descriptor read/8, error -71
[  835.946583][ T2189] usb 2-1: device descriptor read/8, error -71
[  836.499830][ T2189] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  836.627435][ T2189] usb 2-1: device descriptor read/8, error -71
[  836.656229][T12354] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1712'.
[  836.745337][T12354] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1712'.
[  836.933057][ T2189] usb usb2-port1: unable to enumerate USB device
[  840.861001][  T787] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  841.035197][  T787] usb 5-1: device descriptor read/64, error -71
[  843.655158][  T787] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  848.364958][ T5840] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  852.295403][ T2189] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  852.995469][ T2189] usb 6-1: device descriptor read/64, error -71
[  853.289395][T12509] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  853.297879][T12509] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  853.306702][T12509] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  853.335490][ T2189] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  854.988922][ T2189] usb 6-1: device descriptor read/64, error -71
[  855.156875][ T2189] usb usb6-port1: attempt power cycle
[  858.311222][  T787] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  861.108459][  T787] usb 1-1: device descriptor read/64, error -71
[  861.265695][T12566] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  861.274517][T12566] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  861.283145][T12566] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  866.645725][ T2189] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  866.692146][T12611] binder: 12610:12611 ioctl 4018620d 0 returned -22
[  867.484013][ T2189] usb 1-1: device descriptor read/64, error -71
[  867.755204][ T2189] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  867.835192][  T787] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  867.915229][ T2189] usb 1-1: device descriptor read/64, error -71
[  868.025115][  T787] usb 2-1: Using ep0 maxpacket: 16
[  868.041142][  T787] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  868.049765][ T2189] usb usb1-port1: attempt power cycle
[  868.055415][  T787] usb 2-1: config 0 has no interface number 0
[  868.062482][  T787] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  868.073073][  T787] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  868.087248][  T787] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  868.098610][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.107282][  T787] usb 2-1: Product: syz
[  868.111647][  T787] usb 2-1: Manufacturer: syz
[  868.116892][  T787] usb 2-1: SerialNumber: syz
[  868.124731][  T787] usb 2-1: config 0 descriptor??
[  868.142427][T12614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  868.160756][T12614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  868.479200][T12614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  868.529315][T12614] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  870.429638][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  870.662692][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  871.606734][  T787] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  871.838871][  T787] asix: probe of 2-1:0.34 failed with error -71
[  871.886673][  T787] usb 2-1: USB disconnect, device number 42
[  872.405531][ T5840] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  872.605530][ T5840] usb 1-1: device descriptor read/64, error -71
[  872.935319][ T5840] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  873.209684][ T5840] usb 1-1: device descriptor read/64, error -71
[  873.346971][ T5840] usb usb1-port1: attempt power cycle
[  875.289839][T12675] binder: BINDER_SET_CONTEXT_MGR already set
[  875.297310][T12675] binder: 12674:12675 ioctl 4018620d 200000000040 returned -16
[  875.306512][T12675] binder: 12674:12675 ioctl c0306201 2000000003c0 returned -22
[  877.859757][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'.
[  877.952420][T12695] ipt_ECN: cannot use operation on non-tcp rule
[  878.051276][T12691] 8021q: adding VLAN 0 to HW filter on device bond1
[  878.265303][T12351] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  878.835197][T12351] usb 2-1: Using ep0 maxpacket: 16
[  878.843188][T12351] usb 2-1: unable to get BOS descriptor or descriptor too short
[  878.855477][T12351] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  878.873803][T12351] usb 2-1: string descriptor 0 read error: -22
[  878.889789][T12351] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  878.913419][T12351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.976155][T12351] snd-ua101 2-1:1.0: invalid num_altsetting
[  878.998532][T12710] binder: BINDER_SET_CONTEXT_MGR already set
[  879.016666][T12710] binder: 12709:12710 ioctl 4018620d 200000000040 returned -16
[  879.050420][T12711] binder: 12709:12711 ioctl c0306201 2000000003c0 returned -22
[  879.398524][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'.
[  879.408309][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1801'.
[  879.457568][T12691] 8021q: adding VLAN 0 to HW filter on device bond0
[  879.843959][T12691] bond1: (slave bond0): making interface the new active one
[  879.864570][T12691] bond1: (slave bond0): Enslaving as an active interface with an up link
[  879.912272][T12695] netlink: 'syz.1.1801': attribute type 10 has an invalid length.
[  880.266647][T12695] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.274458][T12695] bridge0: port 1(bridge_slave_0) entered disabled state
[  880.502575][T12695] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.509887][T12695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  880.518603][T12695] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.525871][T12695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  880.557920][T12695] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  880.628027][T12351] usb 2-1: USB disconnect, device number 43
[  881.648074][T12691] syz.1.1801 (12691) used greatest stack depth: 19912 bytes left
[  882.220936][T12742] binder: BINDER_SET_CONTEXT_MGR already set
[  882.234409][T12742] binder: 12741:12742 ioctl 4018620d 200000000040 returned -16
[  882.259803][T12742] binder: 12741:12742 ioctl c0306201 2000000003c0 returned -22
[  882.365142][T12351] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  882.545255][T12351] usb 6-1: Using ep0 maxpacket: 8
[  882.555730][T12351] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  882.639833][T12351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.651709][T12351] usb 6-1: Product: syz
[  882.660092][T12351] usb 6-1: Manufacturer: syz
[  882.686345][T12351] usb 6-1: SerialNumber: syz
[  883.531147][T12351] usb 6-1: config 0 descriptor??
[  883.899339][T12351] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  884.128659][T12766] binder: 12765:12766 ioctl c0306201 0 returned -14
[  884.150329][T12351] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  884.175615][T12351] usb 6-1: USB disconnect, device number 67
[  884.215164][   T28] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  884.498164][   T28] usb 2-1: Using ep0 maxpacket: 32
[  885.275451][   T28] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  885.295220][   T28] usb 2-1: config 0 has no interface number 0
[  885.315212][   T28] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  885.355162][   T28] usb 2-1: config 0 interface 89 has no altsetting 0
[  885.368548][   T28] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  885.391841][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.412371][   T28] usb 2-1: Product: syz
[  885.425817][   T28] usb 2-1: Manufacturer: syz
[  885.431239][   T28] usb 2-1: SerialNumber: syz
[  885.486696][   T28] usb 2-1: config 0 descriptor??
[  885.579739][   T28] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  885.631128][   T28] em28xx 2-1:0.89: Video interface 89 found:
[  886.720737][   T28] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  887.599554][T12793] binder: 12792:12793 ioctl c0306201 0 returned -14
[  888.721828][   T28] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  888.742415][   T28] em28xx 2-1:0.89: board has no eeprom
[  888.825260][   T28] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  888.834203][   T28] em28xx 2-1:0.89: analog set to bulk mode.
[  888.842421][  T967] em28xx 2-1:0.89: Registering V4L2 extension
[  888.865531][   T28] usb 2-1: USB disconnect, device number 44
[  888.885484][   T28] em28xx 2-1:0.89: Disconnecting em28xx
[  889.016655][  T967] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  889.035999][  T967] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  889.054043][  T967] em28xx 2-1:0.89: No AC97 audio processor
[  889.101997][  T967] usb 2-1: Decoder not found
[  889.112907][  T967] em28xx 2-1:0.89: failed to create media graph
[  889.144611][  T967] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  889.296580][  T967] em28xx 2-1:0.89: Registering snapshot button...
[  889.437896][  T967] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input7
[  889.689011][  T967] em28xx 2-1:0.89: Remote control support is not available for this card.
[  889.818058][   T28] em28xx 2-1:0.89: Closing input extension
[  889.873342][   T28] em28xx 2-1:0.89: Deregistering snapshot button
[  890.198800][T12823] binder: 12822:12823 ioctl c0306201 0 returned -14
[  890.266316][   T28] em28xx 2-1:0.89: Freeing device
[  891.289241][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'.
[  891.626656][T12839] ipt_ECN: cannot use operation on non-tcp rule
[  892.167937][T12835] 8021q: adding VLAN 0 to HW filter on device bond1
[  892.357951][ T5840] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  893.342000][ T5840] usb 5-1: Using ep0 maxpacket: 16
[  893.466851][ T5840] usb 5-1: unable to get BOS descriptor or descriptor too short
[  893.532709][ T5840] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  893.620654][ T5840] usb 5-1: string descriptor 0 read error: -22
[  893.627249][ T5840] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  893.640752][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.673856][ T5840] snd-ua101 5-1:1.0: invalid num_altsetting
[  894.279105][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'.
[  894.460667][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1850'.
[  895.266337][T12835] 8021q: adding VLAN 0 to HW filter on device bond0
[  895.288161][T12835] bond1: (slave bond0): making interface the new active one
[  895.308942][T12835] bond1: (slave bond0): Enslaving as an active interface with an up link
[  895.395255][ T5812] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  895.564260][T10208] usb 5-1: USB disconnect, device number 57
[  895.576156][ T5812] usb 6-1: device descriptor read/64, error -71
[  895.995369][ T5812] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  896.825233][ T5812] usb 6-1: device descriptor read/64, error -71
[  898.706269][ T5812] usb usb6-port1: attempt power cycle
[  899.330565][T12889] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  899.339148][T12889] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  899.347798][T12889] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  899.486697][T12888] binder_alloc: 12887: binder_alloc_buf, no vma
[  901.385170][ T5812] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  903.788258][T12921] binder: BINDER_SET_CONTEXT_MGR already set
[  903.794902][T12921] binder: 12920:12921 ioctl 4018620d 200000004a80 returned -16
[  903.835943][T10208] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  905.655725][T10208] usb 2-1: Using ep0 maxpacket: 8
[  906.228867][T10208] usb 2-1: device descriptor read/all, error -71
[  906.630238][T12941] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  908.125327][T10208] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  908.365280][T10208] usb 2-1: device descriptor read/64, error -71
[  909.377057][T10208] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  910.515155][  T787] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  910.725236][  T787] usb 5-1: Using ep0 maxpacket: 8
[  910.789283][  T787] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  910.812386][  T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.826798][  T787] usb 5-1: Product: syz
[  910.835340][  T787] usb 5-1: Manufacturer: syz
[  910.840023][  T787] usb 5-1: SerialNumber: syz
[  910.874463][  T787] usb 5-1: config 0 descriptor??
[  911.085366][  T787] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  911.118007][  T787] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  911.150629][  T787] usb 5-1: USB disconnect, device number 58
[  914.453090][T13012] binder: BINDER_SET_CONTEXT_MGR already set
[  914.459653][T13012] binder: 13010:13012 ioctl 4018620d 200000000040 returned -16
[  914.791733][T13018] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  914.800268][T13018] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  914.808944][T13018] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  916.995417][T12351] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  917.175145][T12351] usb 6-1: Using ep0 maxpacket: 8
[  917.186638][T12351] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  917.196291][T12351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.204381][T12351] usb 6-1: Product: syz
[  917.208711][T12351] usb 6-1: Manufacturer: syz
[  917.213517][T12351] usb 6-1: SerialNumber: syz
[  917.221400][T12351] usb 6-1: config 0 descriptor??
[  917.462303][T12351] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  917.498153][T12351] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  917.517640][T12351] usb 6-1: USB disconnect, device number 72
[  920.465257][T12351] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  921.321595][T13091] binder: BINDER_SET_CONTEXT_MGR already set
[  921.351538][T13091] binder: 13090:13091 ioctl 4018620d 200000004a80 returned -16
[  921.418052][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'.
[  921.465198][T13093] bond1: option mode: unable to set because the bond device has slaves
[  921.478565][T12351] usb 5-1: unable to get BOS descriptor or descriptor too short
[  921.494184][T13093] ipt_ECN: cannot use operation on non-tcp rule
[  921.497131][T12351] usb 5-1: not running at top speed; connect to a high speed hub
[  921.520722][T12351] usb 5-1: config 5 has an invalid interface number: 130 but max is 0
[  921.531109][T12351] usb 5-1: config 5 has no interface number 0
[  921.552583][T12351] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e006, bcdDevice=69.53
[  921.565154][T12351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.573393][T12351] usb 5-1: Product: syz
[  921.580853][T12351] usb 5-1: Manufacturer: syz
[  921.594371][T12351] usb 5-1: SerialNumber: syz
[  921.805249][ T5813] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  921.842388][T12351] hub 5-1:5.130: bad descriptor, ignoring hub
[  921.997039][ T5813] usb 2-1: Using ep0 maxpacket: 16
[  922.223646][T12351] hub: probe of 5-1:5.130 failed with error -5
[  922.230905][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short
[  922.252713][ T5813] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  922.279949][T12351] usb 5-1: USB disconnect, device number 59
[  922.282494][ T5813] usb 2-1: string descriptor 0 read error: -22
[  922.292805][ T5813] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  922.313526][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.349212][ T5813] snd-ua101 2-1:1.0: invalid num_altsetting
[  922.574875][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'.
[  922.584222][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'.
[  922.650365][T12351] usb 2-1: USB disconnect, device number 49
[  922.682594][T12530] bond1: (slave bond0): link status definitely down, disabling slave
[  922.745163][T12530] bond1: now running without any active interface!
[  925.038800][T13130] binder: 13128:13130 ioctl 4018620d 0 returned -22
[  925.638200][T13143] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  926.020735][T13143] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  926.029428][T13143] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  926.515652][T13153] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  926.524581][T13153] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  926.533260][T13153] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  928.446937][T13166] binder: 13164:13166 ioctl 4018620d 0 returned -22
[  930.366826][T13188] comedi comedi0: Minor 2 could not be opened
[  931.870714][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  931.877452][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  932.082892][T13202] binder: 13199:13202 ioctl 4018620d 0 returned -22
[  933.962117][T13223] comedi comedi0: Minor 2 could not be opened
[  934.573936][T13227] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  934.582365][T13227] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  934.591291][T13227] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  935.651509][T13239] binder: 13237:13239 ioctl c0306201 0 returned -14
[  936.925360][T10208] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  937.115466][T10208] usb 5-1: Using ep0 maxpacket: 32
[  937.137144][T10208] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  937.147621][T10208] usb 5-1: config 0 has no interface number 0
[  937.154248][T10208] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  937.164438][T10208] usb 5-1: config 0 interface 89 has no altsetting 0
[  937.186314][T10208] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  937.196011][T10208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.204292][T10208] usb 5-1: Product: syz
[  937.208848][T10208] usb 5-1: Manufacturer: syz
[  937.214769][T10208] usb 5-1: SerialNumber: syz
[  937.249893][T10208] usb 5-1: config 0 descriptor??
[  937.293216][T10208] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  937.304387][T10208] em28xx 5-1:0.89: Video interface 89 found:
[  937.568777][T13260] comedi comedi0: Minor 2 could not be opened
[  937.895470][T10208] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  938.382463][T13272] binder: 13271:13272 ioctl c0306201 0 returned -14
[  938.874613][T10208] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  938.945947][T10208] em28xx 5-1:0.89: board has no eeprom
[  939.076541][T10208] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  939.124645][T10208] em28xx 5-1:0.89: analog set to bulk mode.
[  939.184255][   T28] em28xx 5-1:0.89: Registering V4L2 extension
[  939.375275][T10208] usb 5-1: USB disconnect, device number 60
[  939.382471][T10208] em28xx 5-1:0.89: Disconnecting em28xx
[  939.542403][   T28] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  939.559960][   T28] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  939.567241][   T28] em28xx 5-1:0.89: No AC97 audio processor
[  939.588501][   T28] usb 5-1: Decoder not found
[  939.599043][   T28] em28xx 5-1:0.89: failed to create media graph
[  939.609979][   T28] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  939.692773][   T28] em28xx 5-1:0.89: Registering snapshot button...
[  939.726442][T13289] comedi comedi0: Minor 2 could not be opened
[  939.812112][   T28] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input8
[  940.083095][   T28] em28xx 5-1:0.89: Remote control support is not available for this card.
[  940.094805][T10208] em28xx 5-1:0.89: Closing input extension
[  940.101509][T10208] em28xx 5-1:0.89: Deregistering snapshot button
[  940.307101][T13290] comedi comedi0: Minor 2 could not be opened
[  940.543408][T10208] em28xx 5-1:0.89: Freeing device
[  941.436493][T13305] binder: 13304:13305 ioctl c0306201 0 returned -14
[  941.785334][T10208] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  941.985142][T10208] usb 1-1: Using ep0 maxpacket: 32
[  941.995246][   T28] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  942.033014][T10208] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  942.068500][T10208] usb 1-1: config 0 has no interface number 0
[  942.080752][T10208] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  942.107070][T10208] usb 1-1: config 0 interface 89 has no altsetting 0
[  942.158821][T10208] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  942.195426][T10208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.204105][T10208] usb 1-1: Product: syz
[  942.211549][T10208] usb 1-1: Manufacturer: syz
[  942.219614][T10208] usb 1-1: SerialNumber: syz
[  942.245105][   T28] usb 2-1: Using ep0 maxpacket: 8
[  942.256961][T10208] usb 1-1: config 0 descriptor??
[  942.329022][   T28] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  942.471941][T10208] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  942.487870][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.551208][   T28] usb 2-1: Product: syz
[  942.557278][T10208] em28xx 1-1:0.89: Video interface 89 found:
[  942.565466][   T28] usb 2-1: Manufacturer: syz
[  942.583365][   T28] usb 2-1: SerialNumber: syz
[  942.610258][   T28] usb 2-1: config 0 descriptor??
[  942.845334][T13325] comedi comedi0: Minor 2 could not be opened
[  942.898430][T13324] comedi comedi0: Minor 2 could not be opened
[  943.334764][   T28] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  943.344537][    C1] raw-gadget.1 gadget.1: ignoring, device is not running
[  943.352439][   T28] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  943.426960][   T28] usb 2-1: USB disconnect, device number 50
[  943.532802][T10208] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  943.584400][T13332] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  943.592924][T13332] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  943.601656][T13332] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  944.611924][T10208] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  944.642122][T10208] em28xx 1-1:0.89: board has no eeprom
[  944.735169][T10208] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  945.268276][T13351] Bluetooth: hci0: unsupported parameter 255
[  945.290897][T13351] Bluetooth: hci0: unsupported parameter 255
[  945.537333][T10208] em28xx 1-1:0.89: analog set to bulk mode.
[  945.543371][  T967] em28xx 1-1:0.89: Registering V4L2 extension
[  945.567861][T10208] usb 1-1: USB disconnect, device number 58
[  945.574907][T10208] em28xx 1-1:0.89: Disconnecting em28xx
[  945.635174][  T967] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  945.642365][  T967] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  945.650068][  T967] em28xx 1-1:0.89: No AC97 audio processor
[  945.675708][  T967] usb 1-1: Decoder not found
[  945.680380][  T967] em28xx 1-1:0.89: failed to create media graph
[  945.695066][  T967] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  945.715633][  T967] em28xx 1-1:0.89: Registering snapshot button...
[  945.756924][T13341] fuse: Bad value for 'group_id'
[  945.766244][  T967] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input9
[  945.920266][  T967] em28xx 1-1:0.89: Remote control support is not available for this card.
[  945.929956][T10208] em28xx 1-1:0.89: Closing input extension
[  945.936197][T10208] em28xx 1-1:0.89: Deregistering snapshot button
[  945.979530][T10208] em28xx 1-1:0.89: Freeing device
[  946.506955][T13355] comedi comedi0: Minor 2 could not be opened
[  946.582011][T13359] comedi comedi0: Minor 2 could not be opened
[  948.370028][T13378] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  948.379198][T13378] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  948.387945][T13378] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  949.268097][  T967] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  949.430650][T13387] Bluetooth: hci0: unsupported parameter 255
[  949.437165][T13387] Bluetooth: hci0: unsupported parameter 255
[  949.486177][  T967] usb 2-1: Using ep0 maxpacket: 8
[  949.513819][  T967] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  949.544361][  T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.562434][  T967] usb 2-1: Product: syz
[  949.571723][  T967] usb 2-1: Manufacturer: syz
[  949.588278][  T967] usb 2-1: SerialNumber: syz
[  949.614789][  T967] usb 2-1: config 0 descriptor??
[  950.692365][  T967] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  950.714681][  T967] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  950.788010][  T967] usb 2-1: USB disconnect, device number 51
[  950.856515][T13398] comedi comedi0: Minor 2 could not be opened
[  951.753935][T13402] comedi comedi0: Minor 2 could not be opened
[  951.965371][T13405] fuse: Bad value for 'group_id'
[  952.049130][T13411] binder: BINDER_SET_CONTEXT_MGR already set
[  952.056593][T13411] binder: 13410:13411 ioctl 4018620d 200000004a80 returned -16
[  954.295120][T13431] comedi comedi0: Minor 2 could not be opened
[  954.707427][T13439] comedi comedi0: Minor 2 could not be opened
[  954.718489][  T787] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  954.965275][  T787] usb 1-1: Using ep0 maxpacket: 8
[  955.023884][  T787] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  955.034828][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.044123][  T787] usb 1-1: Product: syz
[  955.049424][  T787] usb 1-1: Manufacturer: syz
[  955.055058][  T787] usb 1-1: SerialNumber: syz
[  955.114264][  T787] usb 1-1: config 0 descriptor??
[  955.379664][  T787] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  955.448848][T13441] binder: BINDER_SET_CONTEXT_MGR already set
[  955.454916][T13441] binder: 13440:13441 ioctl 4018620d 200000004a80 returned -16
[  955.577198][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  955.595488][  T787] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32
[  955.620846][  T787] usb 1-1: USB disconnect, device number 59
[  957.925993][T13466] comedi comedi0: Minor 2 could not be opened
[  961.656482][T13476] comedi comedi0: Minor 2 could not be opened
[  961.877752][T13488] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  961.886340][T13488] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  961.896031][T13488] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  964.572254][T13506] comedi comedi0: Minor 2 could not be opened
[  964.908451][T13520] comedi comedi0: Minor 2 could not be opened
[  968.265769][T13536] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  968.274356][T13536] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  968.283130][T13536] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  968.864702][T13551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2070'.
[  970.993140][T12351] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  971.067872][T13557] comedi comedi0: Minor 2 could not be opened
[  971.315253][T12351] usb 6-1: Using ep0 maxpacket: 32
[  971.338975][T12351] usb 6-1: unable to read config index 0 descriptor/start: -61
[  971.356458][T12351] usb 6-1: can't read configurations, error -61
[  971.585257][T12351] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  973.375868][T12351] usb 6-1: Using ep0 maxpacket: 32
[  973.411020][T12351] usb 6-1: unable to read config index 0 descriptor/start: -61
[  973.486460][T12351] usb 6-1: can't read configurations, error -61
[  973.542626][T12351] usb usb6-port1: attempt power cycle
[  973.767000][T13561] comedi comedi0: Minor 2 could not be opened
[  977.389353][T13607] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0)
[  977.829676][T13610] comedi comedi0: Minor 2 could not be opened
[  978.809498][T13614] comedi comedi0: Minor 2 could not be opened
[  979.358302][T13625] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  983.945685][T13641] comedi comedi0: Minor 2 could not be opened
[  984.154884][T13651] overlayfs: failed to resolve './file0': -2
[  985.508663][T13664] comedi comedi0: Minor 2 could not be opened
[  987.327333][T13676] comedi comedi0: Minor 2 could not be opened
[  987.818386][T13681] overlayfs: failed to resolve './file0': -2
[  988.283623][T13693] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  989.960943][T13698] comedi comedi0: Minor 2 could not be opened
[  990.030057][T13703] comedi comedi0: Minor 2 could not be opened
[  990.882707][T13722] overlayfs: failed to resolve './file0': -2
[  992.095161][ T2189] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  993.028177][ T2189] usb 6-1: Using ep0 maxpacket: 32
[  993.079210][ T2189] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  993.116267][ T2189] usb 6-1: config 0 has no interface number 0
[  993.123841][ T2189] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  993.165823][ T2189] usb 6-1: config 0 interface 89 has no altsetting 0
[  993.275897][ T2189] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  993.295274][ T2189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  993.370876][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  993.381449][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  993.408052][ T2189] usb 6-1: Product: syz
[  993.430407][ T2189] usb 6-1: Manufacturer: syz
[  993.435894][ T2189] usb 6-1: SerialNumber: syz
[  993.522970][T13741] comedi comedi0: Minor 2 could not be opened
[  993.586003][ T2189] usb 6-1: config 0 descriptor??
[  993.657585][ T2189] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  993.667592][ T2189] em28xx 6-1:0.89: Video interface 89 found:
[  994.321308][T13743] comedi comedi0: Minor 2 could not be opened
[  994.574132][ T2189] em28xx 6-1:0.89: unknown em28xx chip ID (0)
[  995.376478][ T2189] em28xx 6-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  996.180198][ T2189] em28xx 6-1:0.89: board has no eeprom
[  996.265143][ T2189] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67)
[  996.272706][ T2189] em28xx 6-1:0.89: analog set to bulk mode.
[  996.278765][  T787] em28xx 6-1:0.89: Registering V4L2 extension
[  996.307150][ T2189] usb 6-1: USB disconnect, device number 76
[  996.314196][ T2189] em28xx 6-1:0.89: Disconnecting em28xx
[  996.735229][  T787] em28xx 6-1:0.89: Config register raw data: 0xffffffed
[  996.816542][  T787] em28xx 6-1:0.89: AC97 chip type couldn't be determined
[  996.850594][  T787] em28xx 6-1:0.89: No AC97 audio processor
[  997.079836][  T787] usb 6-1: Decoder not found
[  997.089005][  T787] em28xx 6-1:0.89: failed to create media graph
[  997.136324][T13777] comedi comedi0: Minor 2 could not be opened
[  997.365078][  T787] em28xx 6-1:0.89: V4L2 device video103 deregistered
[  997.444503][T13776] comedi comedi0: Minor 2 could not be opened
[  997.681323][  T787] em28xx 6-1:0.89: Registering snapshot button...
[  997.766222][  T787] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input10
[  997.816905][  T787] em28xx 6-1:0.89: Remote control support is not available for this card.
[  997.867696][ T2189] em28xx 6-1:0.89: Closing input extension
[  997.877631][ T2189] em28xx 6-1:0.89: Deregistering snapshot button
[  997.931711][ T2189] em28xx 6-1:0.89: Freeing device
[  998.230692][T13791] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  998.239530][T13791] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  998.249032][T13791] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  999.675163][T10208] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  999.875051][T10208] usb 1-1: Using ep0 maxpacket: 32
[  999.890582][T10208] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  999.903416][T10208] usb 1-1: config 0 has no interface number 0
[  999.920296][T10208] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  999.950707][T10208] usb 1-1: config 0 interface 89 has no altsetting 0
[  999.964093][T10208] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  999.973699][T10208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.982107][T10208] usb 1-1: Product: syz
[  999.988642][T10208] usb 1-1: Manufacturer: syz
[  999.993340][T10208] usb 1-1: SerialNumber: syz
[ 1000.007793][T10208] usb 1-1: config 0 descriptor??
[ 1000.020261][T10208] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1000.030519][T10208] em28xx 1-1:0.89: Video interface 89 found:
[ 1000.178058][T13817] comedi comedi0: Minor 2 could not be opened
[ 1000.675992][T10208] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[ 1001.061956][T13820] comedi comedi0: Minor 2 could not be opened
[ 1001.521376][T10208] em28xx 1-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[ 1001.583098][T10208] em28xx 1-1:0.89: board has no eeprom
[ 1001.675183][T10208] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[ 1001.682648][T10208] em28xx 1-1:0.89: analog set to bulk mode.
[ 1001.692356][ T5811] em28xx 1-1:0.89: Registering V4L2 extension
[ 1001.808247][T10208] usb 1-1: USB disconnect, device number 60
[ 1001.824091][T10208] em28xx 1-1:0.89: Disconnecting em28xx
[ 1002.117188][ T5811] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[ 1002.135731][ T5811] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[ 1002.159253][ T5811] em28xx 1-1:0.89: No AC97 audio processor
[ 1002.246812][ T5811] usb 1-1: Decoder not found
[ 1002.259434][ T5811] em28xx 1-1:0.89: failed to create media graph
[ 1002.295131][ T5811] em28xx 1-1:0.89: V4L2 device video103 deregistered
[ 1002.457645][ T5811] em28xx 1-1:0.89: Registering snapshot button...
[ 1002.502932][ T5811] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input11
[ 1002.740947][ T5811] em28xx 1-1:0.89: Remote control support is not available for this card.
[ 1002.803435][T10208] em28xx 1-1:0.89: Closing input extension
[ 1002.859702][T10208] em28xx 1-1:0.89: Deregistering snapshot button
[ 1003.093008][T10208] em28xx 1-1:0.89: Freeing device
[ 1003.200828][T13843] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1003.209501][T13843] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1003.218211][T13843] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1005.567751][T13866] comedi comedi0: Minor 2 could not be opened
[ 1006.560006][ T5840] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1006.876038][ T5840] usb 1-1: Using ep0 maxpacket: 16
[ 1006.924658][ T5840] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1007.028451][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1007.099947][ T5840] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1007.144750][ T5840] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1007.156047][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.164208][ T5840] usb 1-1: Product: syz
[ 1007.170861][ T5840] usb 1-1: Manufacturer: syz
[ 1007.175855][ T5840] usb 1-1: SerialNumber: syz
[ 1007.759059][ T5840] usb 1-1: 0:2 : does not exist
[ 1007.923036][ T5840] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[ 1008.168043][ T5840] usb 1-1: USB disconnect, device number 61
[ 1008.227963][T13855] udevd[13855]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1012.715788][T13911] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1015.645486][T13929] fuse: Bad value for 'fd'
[ 1017.655316][T10208] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1017.669916][T13945] comedi comedi0: Minor 2 could not be opened
[ 1018.055097][T10208] usb 5-1: Using ep0 maxpacket: 32
[ 1018.082732][T10208] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[ 1018.101838][T10208] usb 5-1: config 0 has no interface number 0
[ 1018.115079][T10208] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1018.670079][T10208] usb 5-1: config 0 interface 89 has no altsetting 0
[ 1018.996031][T10208] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1019.006804][T10208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.015101][T10208] usb 5-1: Product: syz
[ 1019.020050][T10208] usb 5-1: Manufacturer: syz
[ 1019.024813][T10208] usb 5-1: SerialNumber: syz
[ 1019.060984][T10208] usb 5-1: config 0 descriptor??
[ 1020.457480][T10208] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1020.485027][T10208] em28xx 5-1:0.89: Video interface 89 found:
[ 1020.583025][T10208] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[ 1021.486394][T10208] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1021.596990][T10208] em28xx 5-1:0.89: board has no eeprom
[ 1021.675187][T10208] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[ 1021.690262][T10208] em28xx 5-1:0.89: analog set to bulk mode.
[ 1021.702404][ T5811] em28xx 5-1:0.89: Registering V4L2 extension
[ 1021.760701][T10208] usb 5-1: USB disconnect, device number 61
[ 1021.783283][T10208] em28xx 5-1:0.89: Disconnecting em28xx
[ 1022.167334][ T5811] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[ 1022.174366][ T5811] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[ 1022.195269][ T5811] em28xx 5-1:0.89: No AC97 audio processor
[ 1022.210181][ T5811] usb 5-1: Decoder not found
[ 1022.225101][ T5811] em28xx 5-1:0.89: failed to create media graph
[ 1022.251954][ T5811] em28xx 5-1:0.89: V4L2 device video103 deregistered
[ 1022.300841][ T5811] em28xx 5-1:0.89: Registering snapshot button...
[ 1022.325577][ T5811] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input12
[ 1022.336179][T13975] fuse: Bad value for 'fd'
[ 1022.374908][ T5811] em28xx 5-1:0.89: Remote control support is not available for this card.
[ 1022.384423][T10208] em28xx 5-1:0.89: Closing input extension
[ 1022.390983][T10208] em28xx 5-1:0.89: Deregistering snapshot button
[ 1022.924049][T10208] em28xx 5-1:0.89: Freeing device
[ 1022.929423][T13969] comedi comedi0: Minor 2 could not be opened
[ 1023.465645][T10208] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[ 1023.483124][T13981] comedi comedi0: Minor 2 could not be opened
[ 1023.665799][T10208] usb 5-1: device descriptor read/64, error -71
[ 1023.760801][T13987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2187'.
[ 1025.526153][T10208] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[ 1027.495177][ T5840] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1027.985199][ T5840] usb 2-1: Using ep0 maxpacket: 8
[ 1028.027535][ T5840] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1028.085768][ T5840] usb 2-1: config 4 interface 0 has no altsetting 0
[ 1028.194694][ T5840] usb 2-1: string descriptor 0 read error: -22
[ 1028.240246][T14018] fuse: Bad value for 'fd'
[ 1028.298884][ T5840] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1028.557449][ T5840] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1028.587812][T14014] comedi comedi0: Minor 2 could not be opened
[ 1028.638167][ T5840] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1028.666377][ T5840] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1028.687091][ T5840] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1029.028454][ T5840] usb 2-1: media controller created
[ 1029.537682][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1029.711782][ T5840] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1029.815895][ T5840] usb 2-1: USB disconnect, device number 52
[ 1036.201965][T14068] comedi comedi0: Minor 2 could not be opened
[ 1038.499995][T14097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2198'.
[ 1038.509219][T10208] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1039.377268][T10208] usb 2-1: Using ep0 maxpacket: 8
[ 1040.952211][T10208] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1040.981343][T10208] usb 2-1: config 4 interface 0 has no altsetting 0
[ 1041.022446][T10208] usb 2-1: string descriptor 0 read error: -22
[ 1041.250109][T10208] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1041.261491][T10208] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1041.305300][T10208] usb 2-1: can't set config #4, error -71
[ 1041.383775][T10208] usb 2-1: USB disconnect, device number 53
[ 1042.661896][T14124] input: syz0 as /devices/virtual/input/input13
[ 1044.003912][T14136] mmap: syz.4.2218 (14136) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 1044.745573][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'.
[ 1044.754540][T14140] bond1: option mode: unable to set because the bond device has slaves
[ 1044.785197][T14140] ipt_ECN: cannot use operation on non-tcp rule
[ 1045.065191][ T5810] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1045.124406][ T8630] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.135117][T14147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1045.141551][T14147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1045.152576][T14147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1045.162037][T14147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1045.171953][T14147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1045.181080][T14147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1045.238229][ T8630] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.265085][ T5810] usb 5-1: Using ep0 maxpacket: 16
[ 1045.274654][ T5810] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1045.284558][ T5810] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1045.300822][ T5810] usb 5-1: string descriptor 0 read error: -22
[ 1045.307528][ T5810] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1045.317587][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.338886][ T5810] snd-ua101 5-1:1.0: invalid num_altsetting
[ 1045.371415][ T8630] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.453603][ T8630] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1045.475653][   T28] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1045.557067][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2220'.
[ 1045.567586][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'.
[ 1045.598458][T14140] netlink: 'syz.4.2220': attribute type 10 has an invalid length.
[ 1045.608802][T14140] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1045.616177][T14140] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1045.637405][T14140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1045.644787][T14140] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1045.652508][T14140] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1045.660003][T14140] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1045.700279][T14140] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1045.716866][ T1108] bond1: (slave bond0): link status definitely down, disabling slave
[ 1045.733063][ T5813] usb 5-1: USB disconnect, device number 64
[ 1045.741117][ T1108] bond1: now running without any active interface!
[ 1045.798205][   T28] usb 6-1: Using ep0 maxpacket: 8
[ 1045.811765][   T28] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1045.833084][   T28] usb 6-1: config 4 interface 0 has no altsetting 0
[ 1045.847837][T14146] chnl_net:caif_netlink_parms(): no params data found
[ 1045.857001][   T28] usb 6-1: string descriptor 0 read error: -22
[ 1045.864705][   T28] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1045.973933][ T8630] tipc: Left network mode
[ 1046.083815][   T28] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1046.110984][   T28] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1046.137105][   T28] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1046.277846][   T28] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1046.491969][   T28] usb 6-1: media controller created
[ 1046.997395][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1047.239272][T14147] Bluetooth: hci2: command tx timeout
[ 1047.427519][T14146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1047.437756][T14146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.453432][T14146] bridge_slave_0: entered allmulticast mode
[ 1047.507278][T14146] bridge_slave_0: entered promiscuous mode
[ 1047.683210][   T28] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1048.994574][T14146] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1049.018144][T14146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.064104][T14146] bridge_slave_1: entered allmulticast mode
[ 1049.070857][   T28] usb 6-1: USB disconnect, device number 77
[ 1049.104896][T14146] bridge_slave_1: entered promiscuous mode
[ 1049.305112][T14147] Bluetooth: hci2: command tx timeout
[ 1049.649823][T14182] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[ 1049.661997][T14146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1049.673869][T14182] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[ 1049.688103][T14182] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1049.801272][T14146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1050.088950][T14146] team0: Port device team_slave_0 added
[ 1050.138397][T14146] team0: Port device team_slave_1 added
[ 1050.625224][T14146] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1050.632644][T14146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1050.842978][T14146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1051.385134][T14147] Bluetooth: hci2: command tx timeout
[ 1051.429057][T14210] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[ 1051.522336][T14210] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[ 1051.542383][T14210] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1051.615870][T14146] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1051.625120][T14146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1051.661704][T14146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1053.465291][T14147] Bluetooth: hci2: command tx timeout
[ 1053.625480][T12351] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1053.817184][T14146] hsr_slave_0: entered promiscuous mode
[ 1053.885642][T12351] usb 5-1: Using ep0 maxpacket: 8
[ 1053.935334][T14146] hsr_slave_1: entered promiscuous mode
[ 1053.954782][T12351] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1054.049624][T12351] usb 5-1: config 4 interface 0 has no altsetting 0
[ 1054.073141][T14146] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1054.178061][T14146] Cannot create hsr debugfs directory
[ 1054.210051][T12351] usb 5-1: string descriptor 0 read error: -22
[ 1054.298071][T12351] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1054.371431][T12351] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1054.448096][T12351] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1054.511090][T12351] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1054.556867][ T8630] hsr_slave_0: left promiscuous mode
[ 1054.568908][T12351] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1054.608369][T12351] usb 5-1: media controller created
[ 1054.635098][ T8630] hsr_slave_1: left promiscuous mode
[ 1054.643912][ T8630] bridge_slave_1: left allmulticast mode
[ 1054.655063][ T8630] bridge_slave_1: left promiscuous mode
[ 1054.682109][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.717895][T12351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1054.751192][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.757782][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.066500][ T8630] bridge_slave_0: left allmulticast mode
[ 1055.072485][ T8630] bridge_slave_0: left promiscuous mode
[ 1055.085871][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.463829][T14246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2236'.
[ 1055.474825][ T8630] veth1_macvtap: left promiscuous mode
[ 1055.488088][ T8630] veth0_macvtap: left promiscuous mode
[ 1055.735322][ T8630] veth1_vlan: left promiscuous mode
[ 1055.740769][ T8630] veth0_vlan: left promiscuous mode
[ 1056.455102][T12351] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1057.808594][ T8630] team0 (unregistering): Port device team_slave_1 removed
[ 1057.854799][ T8630] team0 (unregistering): Port device team_slave_0 removed
[ 1057.910195][ T8630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1057.970692][ T8630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1058.325334][ T8630] bond0 (unregistering): Released all slaves
[ 1058.599525][T12351] usb 5-1: USB disconnect, device number 65
[ 1063.503147][T14284] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[ 1063.540273][T14284] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[ 1063.565127][T14284] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[ 1063.851878][T14146] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1063.864105][T14146] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1063.897749][T14146] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1063.905548][  T967] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1063.950921][T14146] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1064.111475][  T967] usb 2-1: Using ep0 maxpacket: 8
[ 1064.125273][T14302] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1064.140419][  T967] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1064.155826][  T967] usb 2-1: config 4 interface 0 has no altsetting 0
[ 1064.176921][  T967] usb 2-1: string descriptor 0 read error: -22
[ 1064.184490][  T967] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1064.212259][  T967] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1064.304033][  T967] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1064.371339][  T967] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1064.404293][T14146] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1064.440364][  T967] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1064.494622][  T967] usb 2-1: media controller created
[ 1064.572298][T14146] 8021q: adding VLAN 0 to HW filter on device team0
[ 1064.579303][  T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1065.174139][T12406] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1065.181542][T12406] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1065.270891][T12406] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1065.278143][T12406] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1065.351936][  T967] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1065.900280][  T967] usb 2-1: USB disconnect, device number 54
[ 1068.571941][T14146] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1068.708223][T14146] veth0_vlan: entered promiscuous mode
[ 1068.777286][T14146] veth1_vlan: entered promiscuous mode
[ 1068.854292][T14146] veth0_macvtap: entered promiscuous mode
[ 1068.905969][T14146] veth1_macvtap: entered promiscuous mode
[ 1068.967198][T14146] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1068.991893][T14146] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1069.997439][T14146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.216289][T14146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.303672][T14146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1070.312706][T14146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1071.365200][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'.
[ 1071.405288][  T787] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1071.487727][T14367] bond1: option mode: unable to set because the bond device has slaves
[ 1071.568668][T14371] ipt_ECN: cannot use operation on non-tcp rule
[ 1071.665340][  T787] usb 6-1: Using ep0 maxpacket: 8
[ 1071.746336][  T787] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1071.918003][  T787] usb 6-1: config 4 interface 0 has no altsetting 0
[ 1072.142740][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1072.157738][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1072.174204][  T787] usb 6-1: string descriptor 0 read error: -22
[ 1072.218144][  T787] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1072.227764][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1072.246911][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1072.270960][  T787] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1072.280428][ T2189] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1072.359461][  T787] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1072.408427][  T787] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1072.436498][  T787] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1072.444133][  T787] usb 6-1: media controller created
[ 1072.515568][ T2189] usb 5-1: Using ep0 maxpacket: 16
[ 1072.535678][ T2189] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1072.556018][ T2189] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1072.586682][  T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1072.607896][ T2189] usb 5-1: string descriptor 0 read error: -22
[ 1072.614298][ T2189] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1072.645003][ T2189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.701221][ T2189] snd-ua101 5-1:1.0: invalid num_altsetting
[ 1072.883992][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'.
[ 1073.075334][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2258'.
[ 1073.622078][T14367] netlink: 'syz.4.2258': attribute type 10 has an invalid length.
[ 1073.857656][  T787] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1073.936920][T14382] overlayfs: missing 'lowerdir'
[ 1074.172863][T14367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1074.180178][T14367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1074.373992][   T28] usb 5-1: USB disconnect, device number 66
[ 1074.630169][  T787] usb 6-1: USB disconnect, device number 78
[ 1078.176454][T14438] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1078.285447][T14441] overlayfs: missing 'lowerdir'
[ 1078.775573][   T28] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1079.075080][   T28] usb 6-1: Using ep0 maxpacket: 8
[ 1079.087737][   T28] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1079.151911][   T28] usb 6-1: config 4 interface 0 has no altsetting 0
[ 1079.185842][   T28] usb 6-1: string descriptor 0 read error: -22
[ 1079.192166][   T28] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1079.201750][   T28] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1079.232338][   T28] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1079.264225][   T28] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1079.438482][   T28] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1079.464543][   T28] usb 6-1: media controller created
[ 1080.743622][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1081.915103][   T28] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1082.970704][   T28] usb 6-1: USB disconnect, device number 79
[ 1083.072413][T14476] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1083.080991][T14476] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1083.089785][T14476] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1083.526385][T14493] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1083.954377][T14513] overlayfs: missing 'lowerdir'
[ 1085.278821][T14525] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1085.287806][T14525] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1085.566307][T14525] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1085.596702][T14525] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1087.036356][T14549] overlayfs: missing 'lowerdir'
[ 1087.200044][T14556] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[ 1087.209031][T14556] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[ 1087.217722][T14556] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[ 1087.418029][T14554] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1090.758432][T14589] overlayfs: missing 'lowerdir'
[ 1097.770221][T14635] overlayfs: missing 'lowerdir'
[ 1102.176827][T12351] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1102.467477][T12351] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[ 1102.496991][T12351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1102.528689][T12351] usb 1-1: config 0 descriptor??
[ 1102.544033][T12351] usb-storage 1-1:0.0: USB Mass Storage device detected
[ 1104.569945][T12351] usb 1-1: USB disconnect, device number 62
[ 1107.405069][T10208] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1107.565416][T10208] usb 6-1: device descriptor read/64, error -71
[ 1107.905191][T10208] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1108.138455][T14694] overlayfs: missing 'lowerdir'
[ 1109.885100][ T5812] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[ 1110.830478][ T5812] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1110.839777][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.848266][ T5812] usb 2-1: Product: syz
[ 1110.853528][ T5812] usb 2-1: Manufacturer: syz
[ 1110.858836][ T5812] usb 2-1: SerialNumber: syz
[ 1112.033582][ T5812] usb 2-1: config 0 descriptor??
[ 1112.205456][T14730] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[ 1112.214761][T14730] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[ 1112.223440][T14730] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[ 1112.279224][T14712] netlink: 'syz.1.2322': attribute type 39 has an invalid length.
[ 1112.450930][T14736] loop5: detected capacity change from 0 to 7
[ 1112.670960][T14736]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[ 1112.679949][T14736] loop5: partition table partially beyond EOD, truncated
[ 1112.688092][T14736] loop5: p1 size 487441168 extends beyond EOD, truncated
[ 1112.703025][T14737] binder: 14711:14737 ioctl c0285840 200000000000 returned -22
[ 1112.735223][T14737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1112.745457][T14737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1113.071624][ T5812] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110
[ 1114.832472][ T5812] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -110
[ 1115.169075][ T5812] usb 2-1: USB disconnect, device number 55
[ 1115.850077][T14652] udevd[14652]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[ 1115.865633][T14751] overlayfs: missing 'workdir'
[ 1116.138163][T14756] binder: BINDER_SET_CONTEXT_MGR already set
[ 1116.162006][T14756] binder: 14754:14756 ioctl 4018620d 200000001000 returned -16
[ 1116.190645][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.198351][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.215068][T12351] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1116.436474][T12351] usb 5-1: device descriptor read/64, error -71
[ 1116.725011][T12351] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 1119.529888][T12351] usb 5-1: device descriptor read/64, error -71
[ 1119.729810][T12351] usb usb5-port1: attempt power cycle
[ 1119.839215][T14777] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[ 1119.847572][T14777] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[ 1119.856200][T14777] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[ 1120.757801][T14788] overlayfs: missing 'workdir'
[ 1121.117063][T14794] binder: BINDER_SET_CONTEXT_MGR already set
[ 1121.418214][T14794] binder: 14790:14794 ioctl 4018620d 200000001000 returned -16
[ 1122.247337][T14798] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[ 1122.256055][T14798] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[ 1122.264601][T14798] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1123.595077][ T5810] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1123.815043][ T5810] usb 1-1: device descriptor read/64, error -71
[ 1124.105336][ T5810] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1124.265088][ T5810] usb 1-1: device descriptor read/64, error -71
[ 1124.398733][ T5810] usb usb1-port1: attempt power cycle
[ 1124.738995][T14829] binder: 14828:14829 ioctl c0306201 0 returned -14
[ 1124.825318][ T5810] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1124.866459][ T5810] usb 1-1: device descriptor read/8, error -71
[ 1126.116805][T14839] overlayfs: missing 'workdir'
[ 1128.203681][T14858] binder: 14856:14858 ioctl c0306201 0 returned -14
[ 1129.365057][   T28] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1130.465093][   T28] usb 5-1: device descriptor read/64, error -71
[ 1130.742231][T14873] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[ 1130.751248][T14873] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[ 1130.759754][T14873] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1130.774570][   T28] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1130.945099][   T28] usb 5-1: device descriptor read/64, error -71
[ 1131.076394][   T28] usb usb5-port1: attempt power cycle
[ 1131.293766][T14880] overlayfs: missing 'lowerdir'
[ 1134.847275][T14902] binder: 14899:14902 ioctl c0306201 0 returned -14
[ 1134.897318][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'.
[ 1134.917210][T14906] bond1: option mode: unable to set because the bond device has slaves
[ 1134.966507][T14906] ipt_ECN: cannot use operation on non-tcp rule
[ 1135.265055][T10208] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1135.445076][T10208] usb 5-1: Using ep0 maxpacket: 16
[ 1135.458418][T10208] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1135.479419][T10208] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1135.503920][T10208] usb 5-1: string descriptor 0 read error: -22
[ 1135.515307][T10208] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1135.541178][T10208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.576006][T10208] snd-ua101 5-1:1.0: invalid num_altsetting
[ 1135.786656][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'.
[ 1135.804358][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2386'.
[ 1135.835859][T14906] netlink: 'syz.4.2386': attribute type 10 has an invalid length.
[ 1135.847329][T10208] usb 5-1: USB disconnect, device number 73
[ 1135.912426][T14912] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[ 1135.920822][T14912] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[ 1135.929330][T14912] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1137.533669][T14931] overlayfs: missing 'lowerdir'
[ 1141.865312][T14953] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[ 1141.873576][T14953] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[ 1141.882125][T14953] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1141.990614][T14961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2401'.
[ 1145.358547][T14979] overlayfs: missing 'lowerdir'
[ 1145.664392][T14985] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[ 1145.672871][T14985] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[ 1145.681389][T14985] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[ 1145.776118][T14991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2412'.
[ 1147.560580][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2417'.
[ 1147.616198][T15007] bond1: option mode: unable to set because the bond device has slaves
[ 1147.975022][ T5811] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1148.198841][ T5811] usb 5-1: Using ep0 maxpacket: 16
[ 1148.263170][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1148.288044][ T5811] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1148.308285][ T5811] usb 5-1: string descriptor 0 read error: -22
[ 1148.314668][ T5811] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1148.345218][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1148.376610][ T5811] snd-ua101 5-1:1.0: invalid num_altsetting
[ 1148.581676][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2417'.
[ 1148.597513][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'.
[ 1148.609075][T15007] netlink: 'syz.4.2417': attribute type 10 has an invalid length.
[ 1148.623345][ T5811] usb 5-1: USB disconnect, device number 74
[ 1150.972240][T15038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1150.981126][T15038] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1157.708663][T15087] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1157.717688][T15087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1163.364800][T15132] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1163.373663][T15132] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1166.184731][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1166.195643][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1166.215067][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1166.229354][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1166.241611][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1166.253848][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1166.425444][ T8638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1166.502635][ T8638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1167.235934][ T8638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1167.454783][ T8638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.260455][ T8638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1168.271867][ T8638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.345121][ T5778] Bluetooth: hci0: command tx timeout
[ 1168.417300][ T8638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1168.436060][ T8638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.767679][ T8638] tipc: Left network mode
[ 1168.790754][T15150] chnl_net:caif_netlink_parms(): no params data found
[ 1169.581095][ T5778] Bluetooth: hci2: command 0x0406 tx timeout
[ 1170.425432][T15193] Bluetooth: hci0: command tx timeout
[ 1171.159517][T15190] fuse: Bad value for 'user_id'
[ 1171.447793][T15150] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1171.456057][T15150] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1171.463323][T15150] bridge_slave_0: entered allmulticast mode
[ 1171.470914][T15150] bridge_slave_0: entered promiscuous mode
[ 1171.487668][T15150] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1171.514676][T15150] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1171.535401][T15150] bridge_slave_1: entered allmulticast mode
[ 1171.577912][T15150] bridge_slave_1: entered promiscuous mode
[ 1172.507224][T15193] Bluetooth: hci0: command tx timeout
[ 1173.155446][T15150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1173.232995][T15150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1173.904506][T15150] team0: Port device team_slave_0 added
[ 1173.936990][T15150] team0: Port device team_slave_1 added
[ 1174.046501][T10208] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1174.192099][T15150] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1174.205858][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1174.233931][T15150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1174.275098][T10208] usb 5-1: Using ep0 maxpacket: 16
[ 1174.292008][T10208] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1174.311299][T10208] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1174.322794][T10208] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1174.323084][T15150] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1174.340697][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1174.349116][T10208] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1174.384362][T15150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1174.437982][T10208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.446486][T10208] usb 5-1: Product: syz
[ 1174.450805][T10208] usb 5-1: Manufacturer: syz
[ 1174.455878][T10208] usb 5-1: SerialNumber: syz
[ 1174.595718][T15193] Bluetooth: hci0: command tx timeout
[ 1174.615640][T15150] hsr_slave_0: entered promiscuous mode
[ 1174.644534][T15150] hsr_slave_1: entered promiscuous mode
[ 1174.664292][T15150] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1174.696259][T15150] Cannot create hsr debugfs directory
[ 1174.748462][T10208] usb 5-1: 0:2 : does not exist
[ 1174.774685][ T8638] hsr_slave_0: left promiscuous mode
[ 1174.799846][ T8638] hsr_slave_1: left promiscuous mode
[ 1174.813362][T10208] usb 5-1: USB disconnect, device number 75
[ 1174.872828][ T8638] bridge_slave_1: left allmulticast mode
[ 1174.886060][ T8638] bridge_slave_1: left promiscuous mode
[ 1174.895298][T15186] udevd[15186]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1174.902708][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1174.969968][ T8638] bridge_slave_0: left allmulticast mode
[ 1174.995254][ T8638] bridge_slave_0: left promiscuous mode
[ 1175.001110][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1175.074798][ T8638] veth1_macvtap: left promiscuous mode
[ 1175.085442][ T8638] veth0_macvtap: left promiscuous mode
[ 1175.095191][ T8638] veth1_vlan: left promiscuous mode
[ 1175.100583][ T8638] veth0_vlan: left promiscuous mode
[ 1175.236729][T15262] fuse: Bad value for 'user_id'
[ 1177.643003][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.650355][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.756556][ T8638] bond1 (unregistering): (slave bond0): Releasing active interface
[ 1177.911323][ T8638] bond1 (unregistering): Released all slaves
[ 1179.351393][ T8638] team0 (unregistering): Port device team_slave_1 removed
[ 1179.415086][ T8638] team0 (unregistering): Port device team_slave_0 removed
[ 1179.465908][ T8638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1179.522765][ T8638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1179.867677][ T8638] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1179.878049][ T8638] bond0 (unregistering): Released all slaves
[ 1181.018969][T15304] comedi comedi0: Minor 3 could not be opened
[ 1181.528696][T15316] ipt_ECN: cannot use operation on non-tcp rule
[ 1181.569760][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'.
[ 1181.609809][T15314] bond1: option mode: unable to set because the bond device has slaves
[ 1181.751981][T15311] fuse: Bad value for 'fd'
[ 1181.875462][ T5813] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 1182.088629][T15150] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1182.095391][ T5813] usb 5-1: Using ep0 maxpacket: 16
[ 1182.102567][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1182.126258][T15150] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1182.133927][ T5813] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1182.157631][T15150] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1182.173894][ T5813] usb 5-1: string descriptor 0 read error: -22
[ 1182.188376][ T5813] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1182.198221][T15150] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1182.219710][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.263816][ T5813] snd-ua101 5-1:1.0: invalid num_altsetting
[ 1182.500720][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'.
[ 1182.534974][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2485'.
[ 1182.557287][T15314] bond1: (slave bond0): Releasing active interface
[ 1182.613870][T15314] netlink: 'syz.4.2485': attribute type 10 has an invalid length.
[ 1182.641403][ T5810] usb 5-1: USB disconnect, device number 76
[ 1182.831664][T15150] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1182.898921][T15150] 8021q: adding VLAN 0 to HW filter on device team0
[ 1182.973161][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1182.980357][ T8638] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1183.144551][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1183.151909][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1184.446557][T15150] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1185.932881][T15370] comedi comedi0: Minor 3 could not be opened
[ 1186.167403][T15150] veth0_vlan: entered promiscuous mode
[ 1186.196814][T15150] veth1_vlan: entered promiscuous mode
[ 1186.345974][T15150] veth0_macvtap: entered promiscuous mode
[ 1186.379197][T15150] veth1_macvtap: entered promiscuous mode
[ 1186.417078][T15150] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1186.443508][T15150] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1186.469238][T15150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.482096][T15150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.492912][T15150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.502111][T15150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.897748][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1186.952523][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1187.019933][ T8630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1187.032648][ T8630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1187.218518][T15385] fuse: Bad value for 'fd'
[ 1187.329141][   T28] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1187.545125][   T28] usb 6-1: Using ep0 maxpacket: 8
[ 1187.562428][   T28] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1187.583425][   T28] usb 6-1: config 0 has no interfaces?
[ 1187.608997][   T28] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 1187.648704][   T28] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.675064][   T28] usb 6-1: Product: syz
[ 1187.679501][   T28] usb 6-1: Manufacturer: syz
[ 1187.689307][   T28] usb 6-1: SerialNumber: syz
[ 1187.698735][   T28] usb 6-1: config 0 descriptor??
[ 1188.690931][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1188.702541][T15410] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1189.566024][T15410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1189.573601][T15410] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1189.656652][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1189.671701][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1189.680538][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1189.708738][T10208] usb 6-1: USB disconnect, device number 82
[ 1189.710542][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1189.722596][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1189.733179][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1190.530298][ T8630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1191.110110][ T8630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1191.317616][ T8630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1191.675586][ T8630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1191.785460][T15193] Bluetooth: hci4: command tx timeout
[ 1192.553215][T15414] chnl_net:caif_netlink_parms(): no params data found
[ 1193.902171][T15193] Bluetooth: hci4: command tx timeout
[ 1194.676140][T15482] ipt_ECN: cannot use operation on non-tcp rule
[ 1195.135801][ T5840] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1195.232711][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'.
[ 1195.406173][T15479] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1195.445043][ T5840] usb 2-1: Using ep0 maxpacket: 16
[ 1195.482488][ T5840] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1195.508907][ T5840] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1195.596271][ T5840] usb 2-1: string descriptor 0 read error: -22
[ 1195.602652][ T5840] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1195.622178][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1195.673038][ T5840] snd-ua101 2-1:1.0: invalid num_altsetting
[ 1195.798955][T15414] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1195.817624][T15414] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1195.836128][T15414] bridge_slave_0: entered allmulticast mode
[ 1195.866359][T15414] bridge_slave_0: entered promiscuous mode
[ 1196.105057][T15193] Bluetooth: hci4: command tx timeout
[ 1196.131430][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'.
[ 1196.142279][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'.
[ 1196.241613][T15414] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1196.251654][T15414] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1196.260201][T15414] bridge_slave_1: entered allmulticast mode
[ 1196.269157][T15414] bridge_slave_1: entered promiscuous mode
[ 1196.308650][T15482] netlink: 'syz.1.2509': attribute type 10 has an invalid length.
[ 1196.321368][T15501] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[ 1196.331461][T15482] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1196.340972][T15482] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1196.350458][T15501] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[ 1196.466174][T15501] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[ 1196.520716][T15482] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1196.528078][T15482] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1196.535710][T15482] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1196.542910][T15482] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1196.647911][T15482] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1196.677211][ T5840] usb 2-1: USB disconnect, device number 56
[ 1196.800651][T15414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1196.854008][T15414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1197.152837][T15414] team0: Port device team_slave_0 added
[ 1197.191900][T15414] team0: Port device team_slave_1 added
[ 1197.537694][T15414] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1197.757968][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1197.953937][T15414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1198.024772][T15524] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1198.032813][T15414] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1198.056449][T15414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1198.107283][T15414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1198.195154][T15193] Bluetooth: hci4: command tx timeout
[ 1198.248571][ T8630] hsr_slave_0: left promiscuous mode
[ 1198.267535][ T8630] hsr_slave_1: left promiscuous mode
[ 1198.285698][ T8630] bridge_slave_1: left allmulticast mode
[ 1198.305525][ T8630] bridge_slave_1: left promiscuous mode
[ 1198.311380][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1198.350974][ T8630] bridge_slave_0: left allmulticast mode
[ 1198.373315][ T8630] bridge_slave_0: left promiscuous mode
[ 1198.382820][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1199.118519][ T8630] veth1_macvtap: left promiscuous mode
[ 1199.134686][ T8630] veth0_macvtap: left promiscuous mode
[ 1199.141648][ T8630] veth1_vlan: left promiscuous mode
[ 1199.157282][ T8630] veth0_vlan: left promiscuous mode
[ 1200.300860][ T8630] bond1 (unregistering): Released all slaves
[ 1201.198641][ T8630] team0 (unregistering): Port device team_slave_1 removed
[ 1201.254136][ T8630] team0 (unregistering): Port device team_slave_0 removed
[ 1201.311591][ T8630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1201.369377][ T8630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1201.738247][ T8630] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1201.747649][ T8630] bond0 (unregistering): Released all slaves
[ 1201.857324][T15414] hsr_slave_0: entered promiscuous mode
[ 1201.863917][T15414] hsr_slave_1: entered promiscuous mode
[ 1202.404244][ T8630] IPVS: stop unused estimator thread 0...
[ 1202.465435][T15560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2523'.
[ 1202.474407][T15560] bond1: option mode: unable to set because the bond device is up
[ 1202.505753][T15563] ipt_ECN: cannot use operation on non-tcp rule
[ 1202.789695][ T5810] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1202.853159][ T2189] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1203.060592][ T5810] usb 2-1: Using ep0 maxpacket: 16
[ 1203.086859][ T2189] usb 1-1: Using ep0 maxpacket: 16
[ 1203.095069][ T5810] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1203.104116][ T2189] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1203.113446][ T2189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1203.130177][ T5810] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1203.415154][ T2189] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1203.441802][ T2189] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1203.454118][ T5810] usb 2-1: string descriptor 0 read error: -22
[ 1203.465445][ T5810] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1203.490715][ T2189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.503122][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.514846][ T2189] usb 1-1: Product: syz
[ 1203.519293][ T2189] usb 1-1: Manufacturer: syz
[ 1203.523934][ T2189] usb 1-1: SerialNumber: syz
[ 1203.554122][ T5810] snd-ua101 2-1:1.0: invalid num_altsetting
[ 1203.751461][T15414] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1203.776744][T15414] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1203.798071][T15560] netlink: 'syz.1.2523': attribute type 10 has an invalid length.
[ 1203.807701][ T2189] usb 1-1: 0:2 : does not exist
[ 1203.813045][T15560] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1203.820409][T15560] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.841601][T15414] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1203.850089][T10208] usb 2-1: USB disconnect, device number 57
[ 1203.876258][ T2189] usb 1-1: USB disconnect, device number 67
[ 1203.904395][T15414] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1203.950832][T15186] udevd[15186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1204.091683][T15414] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1204.117255][T15414] 8021q: adding VLAN 0 to HW filter on device team0
[ 1204.133167][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1204.140421][ T8630] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1204.157964][T12406] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1204.165218][T12406] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1204.740796][T15414] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1204.837002][T15608] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1204.874983][T12351] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1205.705893][T12351] usb 2-1: Using ep0 maxpacket: 32
[ 1205.724637][T12351] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1205.774859][T12351] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1205.813555][T12351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.844321][T12351] usb 2-1: Product: syz
[ 1206.621159][T12351] usb 2-1: Manufacturer: syz
[ 1206.626210][T12351] usb 2-1: SerialNumber: syz
[ 1206.634181][T12351] usb 2-1: config 0 descriptor??
[ 1206.658658][T12351] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[ 1206.871231][T12351] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[ 1206.895746][T12351] quatech2: probe of 2-1:0.0 failed with error -8
[ 1207.089312][T12351] usb 2-1: USB disconnect, device number 58
[ 1207.113486][T15414] veth0_vlan: entered promiscuous mode
[ 1207.162311][T15414] veth1_vlan: entered promiscuous mode
[ 1207.251417][T15414] veth0_macvtap: entered promiscuous mode
[ 1207.271436][T15414] veth1_macvtap: entered promiscuous mode
[ 1207.314350][T15414] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1207.338220][T15414] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1207.360791][T15414] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1207.369726][T15414] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1207.379663][T15414] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1207.390029][T15414] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1207.522226][T12406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1207.541155][T12406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1207.577803][ T8644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1207.587149][ T8644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1207.746611][ T5811] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[ 1207.945497][T10208] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1208.050770][ T5811] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1208.233756][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.364664][ T5811] usb 1-1: Product: syz
[ 1208.371629][ T5811] usb 1-1: Manufacturer: syz
[ 1208.376614][T10208] usb 2-1: Using ep0 maxpacket: 16
[ 1208.384178][ T5811] usb 1-1: SerialNumber: syz
[ 1208.412561][ T5811] usb 1-1: config 0 descriptor??
[ 1208.426149][T10208] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1208.438348][T10208] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1208.453118][T10208] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1208.482548][T10208] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1208.492453][T10208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1208.501059][T10208] usb 2-1: Product: syz
[ 1208.511531][T10208] usb 2-1: Manufacturer: syz
[ 1208.515822][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'.
[ 1208.516697][T10208] usb 2-1: SerialNumber: syz
[ 1208.559278][T15657] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1208.607296][T15657] ipt_ECN: cannot use operation on non-tcp rule
[ 1208.719159][T15645] netlink: 'syz.0.2534': attribute type 39 has an invalid length.
[ 1208.767126][T10208] usb 2-1: 0:2 : does not exist
[ 1208.798748][T10208] usb 2-1: USB disconnect, device number 59
[ 1208.913277][T15663] loop5: detected capacity change from 0 to 7
[ 1208.915273][ T2189] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1208.932418][T15663]  loop5: [CUMANA/ADFS] p1 [ADFS] p1
[ 1208.938112][T15663] loop5: partition table partially beyond EOD, truncated
[ 1208.946612][T15663] loop5: p1 size 487441168 extends beyond EOD, truncated
[ 1209.000601][T15664] binder: 15643:15664 ioctl c0285840 200000000000 returned -22
[ 1209.708393][ T5811] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110
[ 1209.872083][ T5811] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110
[ 1210.638052][T15085] udevd[15085]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1212.097154][ T5813] usb 1-1: USB disconnect, device number 68
[ 1213.219249][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1213.235931][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1213.247908][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1213.256728][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1213.266949][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1213.274526][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1213.966053][ T8644] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.051320][ T8644] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.208011][ T8644] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.264346][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[ 1214.274685][T15696] bond1: option mode: unable to set because the bond device is up
[ 1214.291129][T15696] ipt_ECN: cannot use operation on non-tcp rule
[ 1214.341656][ T8644] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1214.465217][ T2189] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1214.581035][T15682] chnl_net:caif_netlink_parms(): no params data found
[ 1214.605270][ T5811] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1214.655007][ T2189] usb 1-1: Using ep0 maxpacket: 16
[ 1214.677158][ T2189] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1214.686602][ T2189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1214.704940][ T2189] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1214.735796][ T2189] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1214.743199][ T8644] tipc: Left network mode
[ 1214.758493][ T2189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1214.772467][T15701] fuse: Unknown parameter 'fd0x0000000000000004'
[ 1214.780385][ T2189] usb 1-1: Product: syz
[ 1214.794987][ T2189] usb 1-1: Manufacturer: syz
[ 1214.809906][ T2189] usb 1-1: SerialNumber: syz
[ 1214.822755][ T5811] usb 2-1: Using ep0 maxpacket: 16
[ 1214.833721][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1214.843497][ T5811] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[ 1214.867795][ T5811] usb 2-1: string descriptor 0 read error: -22
[ 1214.874192][ T5811] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[ 1214.907915][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1215.015662][ T5811] snd-ua101 2-1:1.0: invalid num_altsetting
[ 1215.088533][ T2189] usb 1-1: 0:2 : does not exist
[ 1215.133684][ T2189] usb 1-1: USB disconnect, device number 69
[ 1215.192299][T15186] udevd[15186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1215.211332][T15682] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1215.243369][T15682] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1215.261249][T15682] bridge_slave_0: entered allmulticast mode
[ 1215.281884][T15682] bridge_slave_0: entered promiscuous mode
[ 1215.338309][T15696] netlink: 'syz.1.2546': attribute type 10 has an invalid length.
[ 1215.363525][T15682] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1215.375808][ T5810] usb 2-1: USB disconnect, device number 60
[ 1215.385874][T15193] Bluetooth: hci1: command tx timeout
[ 1215.401662][T15682] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1215.431269][T15682] bridge_slave_1: entered allmulticast mode
[ 1215.452859][T15682] bridge_slave_1: entered promiscuous mode
[ 1215.591332][T15682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1215.608396][T15682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1215.799942][T15682] team0: Port device team_slave_0 added
[ 1215.928587][T15682] team0: Port device team_slave_1 added
[ 1216.611297][T15682] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1216.618892][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1216.684208][T15682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1216.809252][T15682] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1216.835099][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1216.889463][T15682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1217.175548][T15682] hsr_slave_0: entered promiscuous mode
[ 1217.195694][T15682] hsr_slave_1: entered promiscuous mode
[ 1217.205763][T15682] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1217.213393][T15682] Cannot create hsr debugfs directory
[ 1217.465137][T15193] Bluetooth: hci1: command tx timeout
[ 1217.604961][ T8644] hsr_slave_0: left promiscuous mode
[ 1217.627279][ T8644] hsr_slave_1: left promiscuous mode
[ 1217.660355][ T8644] bridge_slave_1: left allmulticast mode
[ 1217.675204][ T8644] bridge_slave_1: left promiscuous mode
[ 1217.693318][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1217.719605][ T8644] bridge_slave_0: left allmulticast mode
[ 1217.741324][ T8644] bridge_slave_0: left promiscuous mode
[ 1217.755541][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1217.875069][T15746] fuse: Unknown parameter 'fd0x0000000000000004'
[ 1217.922851][ T8644] veth1_macvtap: left promiscuous mode
[ 1217.941516][ T8644] veth0_macvtap: left promiscuous mode
[ 1217.974470][ T8644] veth1_vlan: left promiscuous mode
[ 1217.995286][ T8644] veth0_vlan: left promiscuous mode
[ 1218.387546][ T2189] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1218.675078][ T2189] usb 1-1: Using ep0 maxpacket: 16
[ 1218.689913][ T2189] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1218.924655][ T2189] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1218.976042][ T2189] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1219.016457][ T2189] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1219.026769][ T2189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.049680][ T2189] usb 1-1: Product: syz
[ 1219.054177][ T2189] usb 1-1: Manufacturer: syz
[ 1219.062783][ T2189] usb 1-1: SerialNumber: syz
[ 1219.293883][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[ 1219.303380][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[ 1219.313221][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[ 1219.321398][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[ 1219.333695][ T2189] usb 1-1: 0:2 : does not exist
[ 1219.366552][ T2189] usb 1-1: USB disconnect, device number 70
[ 1219.434314][T15186] udevd[15186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1219.545195][T15193] Bluetooth: hci1: command tx timeout
[ 1219.749651][ T8644] team0 (unregistering): Port device team_slave_1 removed
[ 1219.798091][ T8644] team0 (unregistering): Port device team_slave_0 removed
[ 1219.853855][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1219.943940][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1220.464325][ T8644] bond0 (unregistering): Released all slaves
[ 1220.779641][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2566'.
[ 1221.008898][T15794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1221.347256][T15791] 
[ 1221.349710][T15791] =============================
[ 1221.354657][T15791] WARNING: suspicious RCU usage
[ 1221.359696][T15791] syzkaller #0 Not tainted
[ 1221.364165][T15791] -----------------------------
[ 1221.369156][T15791] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage!
[ 1221.378333][T15791] 
[ 1221.378333][T15791] other info that might help us debug this:
[ 1221.378333][T15791] 
[ 1221.388795][T15791] 
[ 1221.388795][T15791] rcu_scheduler_active = 2, debug_locks = 1
[ 1221.396946][T15791] 1 lock held by syz.1.2566/15791:
[ 1221.402118][T15791]  #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140
[ 1221.411501][T15791] 
[ 1221.411501][T15791] stack backtrace:
[ 1221.417913][T15791] CPU: 1 PID: 15791 Comm: syz.1.2566 Not tainted syzkaller #0
[ 1221.425529][T15791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1221.435647][T15791] Call Trace:
[ 1221.439074][T15791]  <TASK>
[ 1221.442228][T15791]  dump_stack_lvl+0x18c/0x250
[ 1221.447032][T15791]  ? show_regs_print_info+0x20/0x20
[ 1221.452396][T15791]  ? load_image+0x420/0x420
[ 1221.457020][T15791]  lockdep_rcu_suspicious+0x1e1/0x300
[ 1221.462513][T15791]  ieee80211_check_concurrent_iface+0x475/0x950
[ 1221.468911][T15791]  ieee80211_open+0xc1/0x200
[ 1221.473579][T15791]  __dev_open+0x2cb/0x430
[ 1221.478093][T15791]  ? dev_open+0x190/0x190
[ 1221.482501][T15791]  __dev_change_flags+0x211/0x6a0
[ 1221.487595][T15791]  ? __mutex_lock+0x4f9/0xcc0
[ 1221.492423][T15791]  ? dev_get_flags+0x1c0/0x1c0
[ 1221.497267][T15791]  ? mutex_lock_nested+0x20/0x20
[ 1221.502276][T15791]  dev_change_flags+0x88/0x1a0
[ 1221.507120][T15791]  dev_ioctl+0x7b4/0x1140
[ 1221.511522][T15791]  sock_do_ioctl+0x239/0x310
[ 1221.516268][T15791]  ? sock_show_fdinfo+0xb0/0xb0
[ 1221.521189][T15791]  sock_ioctl+0x5ba/0x7e0
[ 1221.525563][T15791]  ? sock_poll+0x3e0/0x3e0
[ 1221.530116][T15791]  ? bpf_lsm_file_ioctl+0x9/0x10
[ 1221.535208][T15791]  ? security_file_ioctl+0x80/0xa0
[ 1221.540395][T15791]  ? sock_poll+0x3e0/0x3e0
[ 1221.544852][T15791]  __se_sys_ioctl+0xfd/0x170
[ 1221.549558][T15791]  do_syscall_64+0x55/0xa0
[ 1221.554064][T15791]  ? clear_bhb_loop+0x40/0x90
[ 1221.558844][T15791]  ? clear_bhb_loop+0x40/0x90
[ 1221.563563][T15791]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1221.569506][T15791] RIP: 0033:0x7f88e099cdd9
[ 1221.573954][T15791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1221.593598][T15791] RSP: 002b:00007f88e1817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1221.602048][T15791] RAX: ffffffffffffffda RBX: 00007f88e0c16180 RCX: 00007f88e099cdd9
[ 1221.610049][T15791] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007
[ 1221.618048][T15791] RBP: 00007f88e0a32d69 R08: 0000000000000000 R09: 0000000000000000
[ 1221.626056][T15791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1221.634076][T15791] R13: 00007f88e0c16218 R14: 00007f88e0c16180 R15: 00007ffe332a3cc8
[ 1221.642104][T15791]  </TASK>
[ 1221.705179][T15193] Bluetooth: hci1: command tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1222.755144][ T8644] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1222.984304][ T8644] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.128139][ T8644] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.231691][ T8644] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1224.392678][ T8644] hsr_slave_0: left promiscuous mode
[ 1224.399160][ T8644] hsr_slave_1: left promiscuous mode
[ 1224.409425][ T8644] bridge_slave_1: left allmulticast mode
[ 1224.415422][ T8644] bridge_slave_1: left promiscuous mode
[ 1224.421220][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1224.436102][ T8644] bridge_slave_0: left allmulticast mode
[ 1224.441832][ T8644] bridge_slave_0: left promiscuous mode
[ 1224.448681][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1224.473942][ T8644] veth1_macvtap: left promiscuous mode
[ 1224.480793][ T8644] veth0_macvtap: left promiscuous mode
[ 1224.487055][ T8644] veth1_vlan: left promiscuous mode
[ 1224.492438][ T8644] veth0_vlan: left promiscuous mode
[ 1225.124925][ T8644] team0 (unregistering): Port device team_slave_1 removed
[ 1225.189615][ T8644] team0 (unregistering): Port device team_slave_0 removed
[ 1225.241738][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1225.297131][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1225.632792][ T8644] bond0 (unregistering): Released all slaves
[ 1226.114008][ T8644] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1226.219095][ T8644] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1226.303245][ T8644] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1226.369028][ T8644] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1226.562104][ T8644] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1226.656814][ T8644] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1226.722963][ T8644] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1226.791869][ T8644] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1228.622715][ T8644] hsr_slave_0: left promiscuous mode
[ 1228.631675][ T8644] hsr_slave_1: left promiscuous mode
[ 1228.639623][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1228.649238][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1228.659539][ T8644] bridge_slave_1: left allmulticast mode
[ 1228.666905][ T8644] bridge_slave_1: left promiscuous mode
[ 1228.672730][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1228.683782][ T8644] bridge_slave_0: left allmulticast mode
[ 1228.690870][ T8644] bridge_slave_0: left promiscuous mode
[ 1228.697833][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1228.712833][ T8644] hsr_slave_0: left promiscuous mode
[ 1228.719581][ T8644] hsr_slave_1: left promiscuous mode
[ 1228.726355][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1228.733815][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1228.743360][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1228.750864][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1228.758950][ T8644] bridge_slave_1: left allmulticast mode
[ 1228.764702][ T8644] bridge_slave_1: left promiscuous mode
[ 1228.770646][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1228.779877][ T8644] bridge_slave_0: left allmulticast mode
[ 1228.786063][ T8644] bridge_slave_0: left promiscuous mode
[ 1228.791815][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1228.806513][ T8644] hsr_slave_0: left promiscuous mode
[ 1228.812602][ T8644] hsr_slave_1: left promiscuous mode
[ 1228.819462][ T8644] bridge_slave_1: left allmulticast mode
[ 1228.825466][ T8644] bridge_slave_1: left promiscuous mode
[ 1228.831257][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1228.841372][ T8644] bridge_slave_0: left allmulticast mode
[ 1228.847295][ T8644] bridge_slave_0: left promiscuous mode
[ 1228.853009][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1228.894484][ T8644] veth1_macvtap: left promiscuous mode
[ 1228.901914][ T8644] veth0_macvtap: left promiscuous mode
[ 1228.907785][ T8644] veth1_vlan: left promiscuous mode
[ 1228.913134][ T8644] veth0_vlan: left promiscuous mode
[ 1228.926224][ T8644] veth1_macvtap: left promiscuous mode
[ 1228.931823][ T8644] veth0_macvtap: left promiscuous mode
[ 1228.937620][ T8644] veth1_vlan: left promiscuous mode
[ 1228.942946][ T8644] veth0_vlan: left promiscuous mode
[ 1229.367836][ T8644] team0 (unregistering): Port device team_slave_1 removed
[ 1229.406698][ T8644] team0 (unregistering): Port device team_slave_0 removed
[ 1229.447554][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1229.482898][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1229.626602][ T8644] bond0 (unregistering): Released all slaves
[ 1229.803425][ T8644] bond1 (unregistering): Released all slaves
[ 1230.312114][ T8644] team0 (unregistering): Port device team_slave_1 removed
[ 1230.367726][ T8644] team0 (unregistering): Port device team_slave_0 removed
[ 1230.428622][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1230.478983][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1230.825749][ T8644] bond0 (unregistering): Released all slaves
[ 1231.049254][ T8644] bond1 (unregistering): Released all slaves