last executing test programs:

5m49.15649487s ago: executing program 2 (id=156):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40004840)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)

5m48.011886686s ago: executing program 2 (id=159):
syz_open_procfs(0x0, &(0x7f0000000400)='attr/fscreate\x00')
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "372a31a11e03279cec094e071cc80f218d360356a936a7e3971a8c35c47e5804", "400100", "fffffffffffffffd"}, 0x38)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x28}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x2000c090)
fsync(r2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000280)={0x80000000, 0x1, &(0x7f0000000140)=[0x0], &(0x7f00000001c0), &(0x7f0000000200), 0x0})
socket(0x1d, 0x2, 0x6)

5m44.436286572s ago: executing program 2 (id=166):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x840, 0x0, 0x0)
sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
io_setup(0x6, &(0x7f0000000300))
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x20e000, 0x0)
eventfd(0x7b)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r4, r5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)

5m42.652159858s ago: executing program 2 (id=170):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$inet(r1, 0x0, 0x0)

5m40.256283179s ago: executing program 2 (id=172):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', <r4=>0x0})
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

5m37.878503773s ago: executing program 2 (id=176):
r0 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x9}, 0x18)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
fchdir(r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x14)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100001d00000000000000008500000075000000a50000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(&(0x7f0000000000), 0x0)
timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000100))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_open_dev$MSR(&(0x7f0000000300), 0x3, 0x0)
mkdir(0x0, 0x1a0)

5m22.821632704s ago: executing program 32 (id=176):
r0 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x9}, 0x18)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
fchdir(r0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x14)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100001d00000000000000008500000075000000a50000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(&(0x7f0000000000), 0x0)
timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000100))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_open_dev$MSR(&(0x7f0000000300), 0x3, 0x0)
mkdir(0x0, 0x1a0)

2m30.231558451s ago: executing program 5 (id=510):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xd, "ea6aafaabfc5926708627c6c09"}, 0x0})

2m26.479161688s ago: executing program 5 (id=518):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="060000000400000008", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
pipe2$9p(&(0x7f0000000240), 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa})
epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)

2m23.870200206s ago: executing program 5 (id=523):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000003c0)={0x48})
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000000c0)={0xc})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r4, 0x3b70, &(0x7f0000000440)={0x46, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}})
ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x7c, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0x5, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x5e, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0x5, 0x7, '\x00', 0x4}, {0xb3, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0x7}, {0x6, 0xc, 0x92, '\x00', 0x8}]}})
syz_open_dev$tty20(0xc, 0x4, 0x0)
move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000002640), &(0x7f0000000000), 0x0)
r5 = accept4$unix(r1, &(0x7f0000000240)=@abs, 0x0, 0x81000)
connect$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0/file0\x00'}, 0x6e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000380), 0x101bf)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter(r5, 0x4807, 0x6aec, 0x0, &(0x7f0000000180)={[0x9]}, 0x8)

2m21.532459158s ago: executing program 5 (id=525):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)

2m20.120369756s ago: executing program 5 (id=529):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x800}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000e3010601000000000600000000000000000e00000005000400000000000900020073797a3000000000240007810c8008000140ffffffff0c1f01800800014080ffffff0500140002000000050005000200000005000100060002000000000000000000000000004000"], 0x6c}}, 0x4)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10)
userfaultfd(0x803)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0)
readv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1)

2m18.5070387s ago: executing program 5 (id=534):
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil)
write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
madvise(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x17)

2m2.538516719s ago: executing program 33 (id=534):
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil)
write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
madvise(&(0x7f000083f000/0x3000)=nil, 0x3000, 0x17)

15.596619757s ago: executing program 0 (id=737):
syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2)
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8)
sendmmsg$inet(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000040)="2965842d", 0x4}], 0x1}}], 0x1, 0x10)
setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}], 0x20}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, 0x0, 0x802, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x48094)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
dup(0xffffffffffffffff)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

15.353308426s ago: executing program 3 (id=739):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000001c0)=0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000000000000000000001000085000080000000000001"], &(0x7f0000000000)=""/140, 0x42, 0x8c, 0x1, 0x0, 0x0, @void, @value}, 0x28)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc1105511, &(0x7f0000000040)={0x5, 0x3, 0x40, 0x6, '\x00', 0x4000040})

13.61644595s ago: executing program 0 (id=741):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2f702, 0xfeff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getgroups(0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

13.112467325s ago: executing program 3 (id=742):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a", @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe)
io_uring_enter(0xffffffffffffffff, 0x11d0, 0xb012, 0x20, &(0x7f0000000180)={[0x80000000]}, 0x8)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

12.813927632s ago: executing program 6 (id=743):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2f702, 0xfeff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getgroups(0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r5, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
flistxattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x24, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0xa}, [@NDA_FLAGS_EXT={0x8, 0xf, 0xa1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)

11.719563923s ago: executing program 3 (id=746):
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94)
ioperm(0x83, 0x6, 0x8)
clock_getres(0x6, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r2)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r4, 0x1000006)
fcntl$addseals(r4, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x1000000})

10.667095531s ago: executing program 1 (id=747):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, 0x0, 0x0)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r5, r3, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000100)='./file1\x00', 0xe0)

10.403028163s ago: executing program 0 (id=748):
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905d891"], 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x22, 0x2, 0x3)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="c978c2cdad74c00d76cd3906aae700a707e01250aef0e00a61ff1d6c470754ca31fc852c00"/47, &(0x7f0000000240), 0x1800}, 0x38)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01239a007fd843de05aa05"], 0x1c}}, 0x0)

9.522454017s ago: executing program 1 (id=749):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2f702, 0xfeff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getgroups(0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r5 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r5, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
flistxattr(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x24, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0xa}, [@NDA_FLAGS_EXT={0x8, 0xf, 0xa1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0041}, 0x0)

8.858244265s ago: executing program 6 (id=750):
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000800))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

8.165517572s ago: executing program 4 (id=751):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'})
syz_io_uring_setup(0xd2, &(0x7f0000000400)={0x0, 0xff80, 0x1000}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r2 = eventfd2(0x21010, 0x80000)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x82403, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
dup3(r2, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x400}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x1b}, 0x6, 0x0, 0x0, 0x2, 0x3, 0x6}, 0x20)
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1, 0x2, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETGROUP(r4, 0x400454ce, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000039c99f8a6bdffc8cc7837ae84074f000001e36a9e61000000000000400"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000", 0x19)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000280)={0xffff, 0x101, 0x9, 0x0, 0x0, 0x5}, 0xc)

7.116766561s ago: executing program 6 (id=752):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYBLOB="219b4be6a26bb5093d2c9393bfb1d5a344aef3de7fd49b3ebdae51437a3e75fc947dd7929c7671ae0239fe31b661616918cceda4a1a1664c10b061eb4149e8de52b85895c246d0cb123d9ac563f3fcc7fcaf8aca79cd6a8c15c5c15bb3497c28b4330ed03b736de4b27eb0d03ce516bfda6bb5857076e1e5b373b34ecd3d7fed35fb825df7bd87cc32b7ab844aa53365958b384ec6d74c37758325e587b07a6aa068acb3bf28778ab22851081c7029ec8434ccd82c53ff5eb23138e42992bdc4769bb3ea9bbe467908f8c3eb", @ANYBLOB], 0x98}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = semget$private(0x0, 0x5, 0x0)
semtimedop(r4, &(0x7f00000001c0)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0)
semop(r4, &(0x7f00000000c0)=[{0x0, 0x102}], 0x1)
semtimedop(r4, &(0x7f0000000340)=[{0x4, 0x9, 0x1000}, {0x3, 0x4b0a, 0x1800}, {0x3, 0x2, 0x800}, {0x1, 0xfffc, 0x800}, {0x7, 0xc6, 0x1800}, {0x3, 0x5}, {0x0, 0x7, 0x3800}], 0x7, &(0x7f0000000380))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000700)={'gre0\x00', <r8=>0x0, 0x8, 0x8000, 0x0, 0x8, {{0x23, 0x4, 0x0, 0x3c, 0x8c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@rr={0x7, 0x13, 0x38, [@private=0xa010102, @private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0x9f, 0x3, 0xd, [{@loopback, 0x8}, {@multicast1, 0x9}, {@local, 0x4}, {@multicast1, 0x2739}, {@broadcast, 0x3}, {@remote, 0x5}, {@multicast1, 0xd}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xde5}]}, @timestamp_addr={0x44, 0x14, 0x97, 0x1, 0x3, [{@private=0xa010101, 0x6}, {@local}]}, @end]}}}}})
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r9, &(0x7f0000000080)=""/79, 0x4f, 0x7f)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x9, 0x10}, 0xc)
r10 = creat(0x0, 0x0)
write$qrtrtun(r10, &(0x7f0000000540)="0b8393", 0x3)
write$UHID_INPUT(r10, &(0x7f0000001300)={0x8, {"af0014920c989bde943127351c7e048fe805d44569c987d51286ac5e80b0961cfe3629729c82e28c53b31e3ecbb8722bff9c0906027d5cb6fbd929cb4b5e657cc88a443809e6a720828c27b6519e7c18904d67528373733934aa5240afd60544d489e1ec3779ac45095c12c6c5f13c086306dfbbd31926b74150ff2c87db2be1d995e9b3a16fb7360de12618b05d94c291acfcdab84c919de60133f54a0a18d2517c1d0de417ae39fec1c9fa306573205051a9880da1f213b9a27c22b72d42d92b7b260b41bcc1868a0404936774ea5209f02929ec3eef4298818ddb708de6c0e1fda05436037d7d4042d2de3adebc8a62f58ec6ccb4160435c4393ba913250b56ec2fce544a01a5a3ce4363fd497fb256910f31e9416f5b719d64f931bd6d71b54787841b3e49e01fe6ac9598ddb5ef1aeb3d1cabb75845d46806a494b6cf89ec9c8203b92dd0dadc5a3c02545cd005b5f26b7d2b848cb684cb58245d591472d5109e7fbe1175656d729fdd689af57802b33d7d53d427aa57eb0af7a63d9f73be83cd9c12bd06463083b4cc853aad416e9faf484fa069d3b7599b6fc6d94152811403201b91da2547ff6721b0ea237c37464b47b3b4f37384e50ba5773a63356991a5abef659e089cc95e5c3b6d8428115efcf9e89e2743b167d7b9824392d868c159fd1264bea8b9b8b26769d15a27df3af350e2a6e9e37b35c153bf980e8ad15de3b0f3add5f98eb2cbc03eeb2b04e6fb032991d7a88b14c7d2cf2959fc4ed27c4c93c13f5760d0803f10afb91effb45967b4793c58e4bc2e4348c93b4e59f1544a01e89530f6056cda3f972050ae79d9297af71cce0d82c764db2422967f05c9847715c66321e8ab0075a361e8fd78a956074945e687ec1ad01f8dfeb7f3ae2c25daff35617a5d752ad5b019689f10c789d0196f73011f5a4e002aebb676ccb2d8b92ff6c1eb60de10ed0d42f2d19fe96786938eca0fd09a3f16f7b52ef806183282c05ff9fccf96abd096b442c73c494c78c4161ce0599bf6e637664f5dbefa129e69a0d53525d77f871716052385649c1249a402a4a9ecadfd7182a4aba3fc48d76890dfe8a5442ff1b833b95fdb7ae5f052e5c18e9b0ad482ed80c4567f0d0645e6525e3390195b3a4314ab063ffca639d2b181efe15d5bb09e967900fd55ad9db7f6ba99268e0d7e2785c5b14f801b16b6fe9966bb3fa88352bc2ca79aa9a77ec5f9c271dcc62b6124a4d5ed1014fa6eb98521d4be4ca4323311d39e44002e71469326056d98af69fd42eed1dfec48d191587b35e2641abe8c80a2553b92cb43feea49505b5b5ca35dfaf06c693730033ebcad45b6b8026d4722b5c7e13d69269808f438816f77a7b1ed2d31ab44968657e70a51e8d98e520e3628014a09e55f36ca5c4c630d687b20e5a7bdfd6d43613fd3738c8ec1464561586987388885b7a424c949a3110e5de795ffdcf1ef43fb8b5b0364cdb0e9a62c1c6922f08125d456f0ee5d58fa670ff071a8d5b57c06efe30d960f9a67d3dd7dd6ec13c799f9b89d90593ba794c5c582f8bd583af0a59043a1da36cee8e2cc173610960e33300ec48cf7281887ffe66e7ec113a29ed339556d84d638ae9554bb20f2a7695da8bcad10e5f155fe5d54eb511087f7abb4a8ae9e78e233b1e079a44c9cdf2529ed3166c24f80a2bda3b2dfdd2e1c2f650cc35fccf8cb17c03681c6f379f535eeaf46caa1dd95f0b72ea6cf301f2d713844b36c7e90e052528f04a668e1dc5ed11e95bbb86268c712af3f6c77d538c9d3dafeceaacc7ba6b20d9266d75c7470d627725700bfd36a9faf5488532a0871a00e18466f3499e3e3270513168d05f52472045b8558d3fb7880805b6fe3a56b3df9eaea72d147f94ee09e763fcf66d0c71b708fb842bbe619eeeaf483fa717864ab435ca03503285591364727a3615582c80d2023897f7bfdda9b00d095ec11f42482f3851a9232ed09ec6733d54020a9e3b98cb3a014f094e9d968672632a30f967a6d2f00c64fb0aefbeb64510edca5496c9f69379f71412f08fe6afeeb604040a42f00290bc04a40f66f0b84c9c6d7e4d1bc213ed49142215b259be08a0a305c68cbec769ce195ea62b7a2ce632da0a98b469284fd7802bb8c47943ac1c8a7a2b0ee36ed45cde2d13cc00ecc11ca9516d9e917fa28d703566b8d5743c5aba0da662f0446768c6d0df6773d1b0c46dac6a6213aa7b5095a8bd9f34048394a8baac9ec65d740ad8acb8eb683702eaf509c30b547bf355561ca00841efdccd413295a430344d17d2d5f4f435d0a33fafe1b4f6826e9d91436b379cc46039551997e54692487562f65a406b769f2856d37c87a73e2e3738c9afdfa5e0f088bbd2799c7c722c23a7cc37266af557beecb9cc8340bc76ba85a147530f3a9bd8cfe82358c0d799f0687540d463e0f010d1e914f043027284292bf31af75301e27689910393e41f877832797dd7c184249e7b2ec0a79b0decb9a3eead5b3c82ac60fe1485829bf75b8af597b5fd9e47460ebb6d809733eb790027094b019ef2bfb76d75876a5e1e312e80e841c5e074c78b35be6a4070c99372dbb13dc27966a8d448b8e3225b11af907985f3142d41da70a682166814fce9e535cca37058bbb3a02894f6ada82c266e763f431d7e1926da2fc86805b02d6af712c82e7a36e667bd3091661be9cc0cdbd3b3cc690594cf8bac39dd9dac1f883cfb0e500759b0e5dc36721b3ed452addc26d39733a2d76d852d897298009dea9546bae66e9aac7f35277e025d440ca93fdec4bbd58970a130fc79056af96f81b0461ef0e16d4fb12014313438a4bb95b2f9cac98e24a713ed14b539ceddf55e90b6c000044a24be6597e2c5a397a772d7c493ad53a05d6076b584ee7c1615ee7f9de627ac9d7d0d4a12b5a080a9c4977da436704bc9eb9f1d25ba91498e4b575550a69aab83e9157a910c4b2907ea97bcc171dcb7ff6fa982dee16d5c5aaaf93fcc225a6c67c96e54ead190f9c6f949b8025988a46d29c86cf18623882d5aa996a3ece81881ba63e0e7d62b585a179631c7e22f924be7aad5699af389c6651c92848153007d9929683648c8a3fb102a50d9a3e9c83e6cabeae5f97d7faad7a803f8c6dbd9237fa4bec7b33db2cc4db5cd7b3baf1c4f4ddc1f16ec6484cbd1adecab06617045b2d5bac8d1bf97a37ed2780a967a678095a6849cabd87256dbe46f52c960ba8ead52e666a131abfb019d2ac7dd2b055bf91168322b23821a522d241f27a2e7ef892d589a0e55b606167e53b0725a089cae5ef65f02f8a2f32dedb370bf2dc34dac5218be294e755915b399cece7e5c3fa887909961a3d626e4a43bab7edd193a9bc0a7a764640943a635fec7722ff8b3add819b26b78c4e54ff970c15d6b27971cd135d288f081a66e792a8ee5b2d89d5945a99f4216ac21fd9a61e305b4a908f4cbe38e5ccd5eab65f5962877a570524809dffa4ca0ed90d505601d7d244273f20cc47feca7259bd1362e334be459e25a59d4873fc8ede03744c88599a5e5f2a6fb0ca08d085e40c8bd71a0777f7715153e71f4a67f6bb73bbbcd766a9dd4287671dcf6b7daacc4f4b81b32ea0d0381fc32807fe9393249e596d3d5ae4bc5a1cb3e48d63478679eb381fbe8cafd2c6890ba29c1af695f2597c6b472a163b7584dde7327933b9d5e88e0d77e3a3d526a619966dde7f82c7ab7a67a59ded2c880ee0e2f736f054b7d99cc68df48c28d76ab12762c85d07a1f3215d3d4ef2ebd65b0f7eacf62ec12997ccdada731992513263a06e063c27eccfdb3c9d1199136c1a2c3d6b5ea6b2e96c9aa6be3bfbda408b2779ad4eba91809a495c1b872e40d49b0acf4b19b4677e6ea8d07b9a621816c4c5f0e5aa364d4803567da0b2b646604563b31aaa298130576690cbab52bf1ddad7c64a7a416ceb36d6b3202f377ed003e8d74cabd4a6a7be18c95716022cc30c45157d6743785746cf8b0e21ec3208336ab0a43ad9c058fffa3021f84ca8b037dea55254ab944493ca03d025a4b42df3e5b830b81471cddf81fd14aed18e45cfed27b1ef015827942f833a0eee4cc0fcd57f0180f83f32e17d27e4784e42eb1a256404aa6e12f9daabddb907230b20693f3bc74723be6808d95c6463ef7bb6bc4a756fdc805ef4077303e5cd504e6c1754ee8303ee92b94808782984f75c0df49436d3859c092133b0545dac0d8f84fc95a1f0f38e4ecbe3f935d33e86b97bb11ca6f502a602bc7e05b4e6514ddc8ae4d8231874b350b32f96ff6cfbe03f1bf5a0fda73c15eca00afe85c026f5e34e699910ab16502b224b8f383a9a863ca351a1e87c17baadb3f7141aa1295a2a6be4d88d1347da9c356ba9b3bfcc678b58add1b224a0c9b7c3cc4c828abc56acd320e8a8ad22da90a0cf6ae40a471c150581da040297aed0e4889c5963bd8c1415acecbd932f9acda87315e3b2dade276b8324dc7d95141cdd8c4fba82c834a95f9efeb2c74c31e7fd32f96a6a68d9e9942c0bdc55bedd1617e47420877b9f640094a37ceea39656468215ebe789a277f585adc1cc0285b53e33afae1616b0806aeed78b6cc4da54e3bdfa3d49ead4e4fa3623f86a4dfa3042ed403684c62a5d148a30c99c24c3cf9a8858e02800e49e0eed84472a559c9f208f6c3310050e4c5948320b5b4eeefe583bb0bcc0bc01356e76e3465f66a7d0c56ca7abc069db5bd7ad20ec01307f391b5bc890b5034271ee31d5bd374a9422a08ce949667512c8d0bb60eb5d4d22fa0e2a5d172edc7b7386abe63222ef8fc5c676828a1441c5ed19ed5827b0d73d568efc51f46f65ea4f205ac26924d6a7f11477fe23049e0de65bd534c81756556c1cd8bc70b3ce71e4e13d44500773e0767bc735c98f0e1d06dc79e43b946a2faaf698e188cf5909e433edbc546beffcbdea76064ff9d5d56273ca05af42c541b896bc5a942665599c9a8f52db36dbd6d42e8f9bb3446df5f44e3971eb408d0c63381b4aa5997441e01a5eff9fa51d82b7d60d8c3ead784e50b562db074b19e855e8290896b808611c40ed7e0691f758103208900d69cd4c86310318d339eeb473b4bea27be94622560cf35416eea7333bb72110afe202dfcc55c755ed32ea9b4851378b554546b52ebd71b90828733ac3040daf1e3d23bfcadd20bb9248731ab11155aebd259b7e693ebad5d43e6a85f14ea317f31eca905634f9e8d5b1ff73dc5dbd2bbeef6c2965932c885969e00e1939685b472c097b4504c9e6f273e1038045e5ac4010ac232288b77de7d3433a143292f145465b6d1f9020aa4f8405bda4310059b82ad8fd41e698a7824456e11f44e577dc5d5a0eb93b98421a2867c3d40627f9061c1d5689205915c7a91da42348ad3bd12038d84175bddaee423b73c93aebf873c850ef44d66324a80ad0cf268998d71fac6988cb0b1879ebcb6c4c3bce2c45daf73db246bc55fb8221341ef760f5f5264113a437e03cbcf03bb276cdc4100138afc6a1eeb9d90e7f43ce8abbd8be6b9c5b54920f76f07d1557167292feb4c970da3f582d40c0661af8f043e01db8016e2600f655175fa7d705bda3a14d1733ccf6603b7f8709b71f2046211468460791330234fa21f417e6a68cdb1d4496808923a87d02f0ebfb09e102a7c9f7c870c082d6993d10e0de2dbe119ac811848661ab30ab8d7a528acf262bf7d21c2f235e5638be58171b61bed99ac3fef801562aabcf3feff77fe9498d09de3e9c3cf18914392433030595aa31d9c79abc29350a2a2a1d0c2f311246", 0x1000}}, 0x1006)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1}, 0x0, &(0x7f0000000980)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x9, &(0x7f0000000580)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_fd={0x18, 0x8, 0x1, 0x0, r7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000600)='syzkaller\x00', 0x4, 0x98, &(0x7f0000000640)=""/152, 0x41100, 0x31, '\x00', r8, @fallback=0x31, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x5, 0x2, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00), 0x0, 0x10, 0xdfffff41, @void, @value}, 0x94)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x1})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103)
mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,'])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f,\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
r11 = signalfd4(r2, &(0x7f0000000140)={[0x3]}, 0x8, 0x80000)
setsockopt$ax25_SO_BINDTODEVICE(r11, 0x101, 0x19, &(0x7f0000000180)=@bpq0, 0x10)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"])

6.394515078s ago: executing program 4 (id=753):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000001c0)=0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000000000000000000001000085000080000000000001"], &(0x7f0000000000)=""/140, 0x42, 0x8c, 0x1, 0x0, 0x0, @void, @value}, 0x28)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc1105511, &(0x7f0000000040)={0x5, 0x3, 0x40, 0x6, '\x00', 0x4000040})

6.377376166s ago: executing program 0 (id=754):
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905d891"], 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket(0x22, 0x2, 0x3)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="c978c2cdad74c00d76cd3906aae700a707e01250aef0e00a61ff1d6c470754ca31fc852c00"/47, &(0x7f0000000240), 0x1800}, 0x38)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4})
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01239a007fd843de05aa05"], 0x1c}}, 0x0)

6.222124706s ago: executing program 1 (id=755):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2f702, 0xfeff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getgroups(0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680))
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)

5.776518628s ago: executing program 6 (id=756):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='attr/fscreate\x00')
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "372a31a11e03279cec094e071cc80f218d360356a936a7e3971a8c35c47e5804", "400100", "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000040)=0x2f6, 0x4)
writev(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f72"], 0x4c}}, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x28}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x2000c090)
fsync(r2)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x0, 0x0, "d885700585"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'X', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x82, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6896, 0x1, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x9, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf8}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})

5.474560784s ago: executing program 3 (id=757):
syz_open_dev$vim2m(&(0x7f0000000080), 0x800, 0x2)
r0 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8)
sendmmsg$inet(r1, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000040)="2965842d", 0x4}], 0x1}}], 0x1, 0x10)
setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680))
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0x6, [{0x0, 0x1000000}, {0x12, 0xd5a}, {0x4000000}, {0x100}, {0x0, 0x7}, {0x0, 0x9}, {}, {0x0, 0xc}], 0x20}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$uinput(0xffffff9c, 0x0, 0x802, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x48094)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r6)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

5.214930781s ago: executing program 4 (id=758):
r0 = socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000240)='\x00', 0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, 0x0, 0x0)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000440), 0x0, 0x2100, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
dup3(r7, r6, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$key(r0, 0x0, 0x4007)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)

4.145020447s ago: executing program 4 (id=759):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, 0x0, 0x0)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r5, r3, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000100)='./file1\x00', 0xe0)

4.090773191s ago: executing program 3 (id=760):
r0 = fsopen(0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1, 0x0, 0x9}, 0x18)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(&(0x7f0000000000), 0x0)
timer_create(0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_open_dev$MSR(&(0x7f0000000300), 0x3, 0x0)
mkdir(0x0, 0x1a0)

2.744302542s ago: executing program 4 (id=761):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a010100441405", @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe)
io_uring_enter(0xffffffffffffffff, 0x11d0, 0xb012, 0x20, &(0x7f0000000180)={[0x80000000]}, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, 0x0, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.725187132s ago: executing program 1 (id=762):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf010", 0x4b, 0x840, 0x0, 0x0)
sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d)
io_setup(0x6, &(0x7f0000000300))
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000340), 0x20e000, 0x0)
eventfd(0x7b)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r4, r5, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40)

2.362534968s ago: executing program 0 (id=763):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x44040800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x42600, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES8=r0])
openat$userio(0xffffffffffffff9c, &(0x7f00000001c0), 0x101242, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.578779957s ago: executing program 6 (id=764):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access='])

1.534564468s ago: executing program 3 (id=765):
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r4, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006)

1.398807179s ago: executing program 1 (id=766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYBLOB="219b4be6a26bb5093d2c9393bfb1d5a344aef3de7fd49b3ebdae51437a3e75fc947dd7929c7671ae0239fe31b661616918cceda4a1a1664c10b061eb4149e8de52b85895c246d0cb123d9ac563f3fcc7fcaf8aca79cd6a8c15c5c15bb3497c28b4330ed03b736de4b27eb0d03ce516bfda6bb5857076e1e5b373b34ecd3d7fed35fb825df7bd87cc32b7ab844aa53365958b384ec6d74c37758325e587b07a6aa068acb3bf28778ab22851081c7029ec8434ccd82c53ff5eb23138e42992bdc4769bb3ea9bbe467908f8c3eb", @ANYBLOB], 0x98}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = semget$private(0x0, 0x5, 0x0)
semtimedop(r4, &(0x7f00000001c0)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0)
semop(r4, &(0x7f00000000c0)=[{0x0, 0x102}], 0x1)
semtimedop(r4, &(0x7f0000000340)=[{0x4, 0x9, 0x1000}, {0x3, 0x4b0a, 0x1800}, {0x3, 0x2, 0x800}, {0x1, 0xfffc, 0x800}, {0x7, 0xc6, 0x1800}, {0x3, 0x5}, {0x0, 0x7, 0x3800}], 0x7, &(0x7f0000000380))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx  \x00'}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000700)={'gre0\x00', <r6=>0x0, 0x8, 0x8000, 0x0, 0x8, {{0x23, 0x4, 0x0, 0x3c, 0x8c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@rr={0x7, 0x13, 0x38, [@private=0xa010102, @private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x30}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4c, 0x9f, 0x3, 0xd, [{@loopback, 0x8}, {@multicast1, 0x9}, {@local, 0x4}, {@multicast1, 0x2739}, {@broadcast, 0x3}, {@remote, 0x5}, {@multicast1, 0xd}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xde5}]}, @timestamp_addr={0x44, 0x14, 0x97, 0x1, 0x3, [{@private=0xa010101, 0x6}, {@local}]}, @end]}}}}})
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r7, &(0x7f0000000080)=""/79, 0x4f, 0x7f)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0x0, 0x9, 0x10}, 0xc)
r8 = creat(0x0, 0x0)
write$qrtrtun(r8, &(0x7f0000000540)="0b8393", 0x3)
write$UHID_INPUT(r8, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0x1}, &(0x7f0000000940), &(0x7f0000000980)='%-5lx  \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x4, 0x98, &(0x7f0000000640)=""/152, 0x41100, 0x31, '\x00', r6, @fallback=0x31, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x3, 0x5, 0x2, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00), 0x0, 0x10, 0xdfffff41, @void, @value}, 0x94)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x1})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103)
mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,'])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f,\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')
r9 = signalfd4(r2, &(0x7f0000000140)={[0x3]}, 0x8, 0x80000)
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000180)=@bpq0, 0x10)
ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"])

1.148299272s ago: executing program 4 (id=767):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240), 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)

1.078674857s ago: executing program 6 (id=768):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f00000001c0)=0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000000000000000000001000085000080000000000001"], &(0x7f0000000000)=""/140, 0x42, 0x8c, 0x1, 0x0, 0x0, @void, @value}, 0x28)
syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc1105511, &(0x7f0000000040)={0x5, 0x3, 0x40, 0x6, '\x00', 0x4000040})

984.812784ms ago: executing program 0 (id=769):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000880)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sysinfo(&(0x7f0000000000)=""/52)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc)

0s ago: executing program 1 (id=770):
r0 = fsopen(0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1, 0x0, 0x9}, 0x18)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2(&(0x7f0000000000), 0x0)
timer_create(0x2, 0x0, &(0x7f0000000100))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
syz_open_dev$MSR(&(0x7f0000000300), 0x3, 0x0)
mkdir(0x0, 0x1a0)

kernel console output (not intermixed with test programs):

e strings: Mfr=1, Product=2, SerialNumber=3
[  110.625882][ T5873] usb 2-1: Product: syz
[  110.639703][ T5873] usb 2-1: Manufacturer: syz
[  110.644388][ T5873] usb 2-1: SerialNumber: syz
[  110.701847][ T5873] usb 2-1: config 0 descriptor??
[  110.711988][ T5873] usb 2-1: can't set config #0, error -71
[  110.752505][ T5873] usb 2-1: USB disconnect, device number 2
[  113.481091][ T5873] usb 3-1: new low-speed USB device number 3 using dummy_hcd
[  113.791073][ T5873] usb 3-1: config 0 has no interfaces?
[  113.796807][ T5873] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  113.944435][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.979816][ T5873] usb 3-1: config 0 descriptor??
[  115.954583][ T6052] tipc: Started in network mode
[  115.959874][ T6052] tipc: Node identity ac14140f, cluster identity 4711
[  115.969078][ T6052] tipc: New replicast peer: 255.255.255.255
[  115.977223][ T6052] tipc: Enabled bearer <udp:syz2>, priority 10
[  116.013182][ T6052] futex_wake_op: syz.0.31 tries to shift op by -1; fix this program
[  116.032376][ T5127] Bluetooth: hci4: command 0x0405 tx timeout
[  117.757765][ T5870] tipc: Node number set to 2886997007
[  117.812539][ T6061] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.861884][ T5873] usb 3-1: USB disconnect, device number 3
[  122.857172][ T6086] netlink: 'syz.4.39': attribute type 23 has an invalid length.
[  124.336293][ T6093] futex_wake_op: syz.2.40 tries to shift op by -1; fix this program
[  124.383660][ T6085] geneve0: entered allmulticast mode
[  127.634756][ T6119] can0: slcan on ttyS3.
[  128.862569][ T6112] can0 (unregistered): slcan off ttyS3.
[  129.231938][ T6129] xt_CT: You must specify a L4 protocol and not use inversions on it
[  130.148679][   T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  130.459233][   T47] usb 5-1: Using ep0 maxpacket: 32
[  130.466290][   T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  130.489310][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  130.503168][   T47] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  131.151809][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.356109][   T47] usb 5-1: Product: syz
[  131.362329][   T47] usb 5-1: Manufacturer: syz
[  131.366978][   T47] usb 5-1: SerialNumber: syz
[  131.390573][   T47] usb 5-1: config 0 descriptor??
[  131.403998][   T47] usb 5-1: no audio or video endpoints found
[  131.900607][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'.
[  131.993435][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  132.915441][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  132.925267][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  132.949203][ T5872] usb 1-1: Using ep0 maxpacket: 32
[  132.956788][ T5872] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  133.120334][ T5872] usb 1-1: config 0 has no interface number 0
[  133.136994][   T47] usb 5-1: USB disconnect, device number 2
[  133.143601][ T5872] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  133.189540][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.473314][ T5872] usb 1-1: Product: syz
[  133.852873][ T5872] usb 1-1: Manufacturer: syz
[  133.865412][ T5872] usb 1-1: SerialNumber: syz
[  133.920665][ T5872] usb 1-1: config 0 descriptor??
[  134.451754][ T5872] radio-si470x 1-1:0.35: this is not a si470x device.
[  134.542282][ T5872] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  134.600231][ T6173] geneve0: entered allmulticast mode
[  134.692606][ T6173] netlink: 'syz.3.56': attribute type 23 has an invalid length.
[  134.899601][ T5872] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  135.200064][ T5872] usb 5-1: config 0 has no interfaces?
[  135.266628][ T5872] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  135.370388][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.470529][ T5872] usb 5-1: config 0 descriptor??
[  135.619063][ T5872] usb 1-1: USB disconnect, device number 2
[  135.776179][ T1205] usb 5-1: USB disconnect, device number 3
[  140.126065][ T6213] can0: slcan on ttyS3.
[  140.782747][ T6210] can0 (unregistered): slcan off ttyS3.
[  142.511869][ T6223] tipc: Started in network mode
[  142.516888][ T6223] tipc: Node identity ac14140f, cluster identity 4711
[  142.525610][ T6223] tipc: New replicast peer: 255.255.255.255
[  142.532481][ T6223] tipc: Enabled bearer <udp:syz2>, priority 10
[  142.542308][ T6223] futex_wake_op: syz.1.70 tries to shift op by -1; fix this program
[  142.979359][ T5872] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  143.269694][ T5872] usb 3-1: Using ep0 maxpacket: 32
[  143.297886][ T5872] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  143.481366][ T5872] usb 3-1: config 0 has no interface number 0
[  143.511789][ T5872] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  143.663130][ T5873] tipc: Node number set to 2886997007
[  143.789296][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.812371][ T5872] usb 3-1: Product: syz
[  143.816611][ T5872] usb 3-1: Manufacturer: syz
[  143.859434][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  143.869300][ T5872] usb 3-1: SerialNumber: syz
[  143.885732][ T5872] usb 3-1: config 0 descriptor??
[  144.088811][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.283516][ T5872] radio-si470x 3-1:0.35: this is not a si470x device.
[  144.469816][ T5872] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  144.829212][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.839031][ T5873] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  144.855949][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.926808][ T5872] usb 3-1: USB disconnect, device number 4
[  144.967049][ T5873] usb 4-1: config 0 descriptor??
[  145.363924][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  145.738360][ T5873] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  145.820857][ T5873] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  145.906814][   T10] usb 2-1: Using ep0 maxpacket: 32
[  146.214217][ T5873] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE
[  146.237171][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  146.269231][ T5821] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  146.292102][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  146.445258][ T5873] cp2112 0003:10C4:EA90.0002: error requesting SMBus config
[  146.473280][   T10] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  146.488025][ T6255] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  146.506378][ T5873] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -5
[  146.516422][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.525997][   T10] usb 2-1: Product: syz
[  146.532397][   T10] usb 2-1: Manufacturer: syz
[  146.547682][   T10] usb 2-1: SerialNumber: syz
[  146.552545][ T5821] usb 3-1: Using ep0 maxpacket: 32
[  146.579298][ T5821] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  146.588536][   T10] usb 2-1: config 0 descriptor??
[  146.597584][ T5821] usb 3-1: config 0 has no interface number 0
[  146.623385][   T10] usb 2-1: no audio or video endpoints found
[  146.640227][ T5821] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  146.653156][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.673960][ T5821] usb 3-1: Product: syz
[  146.678195][ T5821] usb 3-1: Manufacturer: syz
[  146.683335][ T5821] usb 3-1: SerialNumber: syz
[  146.722173][ T5821] usb 3-1: config 0 descriptor??
[  146.866115][ T6262] 9pnet_fd: Insufficient options for proto=fd
[  146.914333][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'.
[  147.109710][ T5872] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  147.260712][ T5821] radio-si470x 3-1:0.35: this is not a si470x device.
[  147.320633][ T5821] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  147.325912][ T5872] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  147.379035][ T5872] usb 5-1: config 1 has no interface number 1
[  147.423518][ T5872] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  147.509453][ T5872] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  147.670267][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.678493][ T5872] usb 5-1: Product: syz
[  147.685319][ T5872] usb 5-1: Manufacturer: syz
[  147.697988][ T5872] usb 5-1: SerialNumber: syz
[  147.752727][ T5870] usb 4-1: USB disconnect, device number 2
[  148.093179][ T5870] usb 2-1: USB disconnect, device number 3
[  148.941215][ T5872] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  148.963438][ T5872] usb 5-1: found format II with max.bitrate = 26774, frame size=1
[  149.008967][ T5872] usb 5-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  149.034908][ T5872] usb 5-1: found format II with max.bitrate = 26774, frame size=1
[  149.065433][ T5872] usb 5-1: failed to enable PITCH for EP 0x82
[  149.189812][ T6280] netlink: 'syz.3.86': attribute type 23 has an invalid length.
[  150.427988][ T5870] usb 3-1: USB disconnect, device number 5
[  150.464679][ T5872] usb 5-1: USB disconnect, device number 4
[  152.059509][ T1205] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  152.449303][ T1205] usb 1-1: Using ep0 maxpacket: 32
[  152.543342][ T1205] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  152.966022][ T6310] SET target dimension over the limit!
[  153.420579][ T1205] usb 1-1: config 0 has no interface number 0
[  153.786654][ T6114] udevd[6114]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.201202][ T6314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.94'.
[  155.890718][ T1205] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  155.918106][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.969253][ T1205] usb 1-1: Product: syz
[  155.995207][ T1205] usb 1-1: config 0 descriptor??
[  156.182087][ T1205] usb 1-1: can't set config #0, error -71
[  156.360021][ T1205] usb 1-1: USB disconnect, device number 3
[  156.439468][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  156.629479][   T10] usb 2-1: Using ep0 maxpacket: 16
[  156.703872][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  156.829453][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  156.840559][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  156.872329][ T6334] SET target dimension over the limit!
[  156.988007][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.04
[  157.159504][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.508273][ T6339] netlink: 20 bytes leftover after parsing attributes in process `syz.4.100'.
[  157.544553][   T10] usb 2-1: config 0 descriptor??
[  157.579433][   T24] usb 3-1: Using ep0 maxpacket: 32
[  157.618189][   T24] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  157.831026][   T24] usb 3-1: config 0 has no interface number 0
[  157.885958][   T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  158.007070][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.014856][   T10] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  158.065030][   T24] usb 3-1: Product: syz
[  158.090882][   T10] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  158.127841][   T24] usb 3-1: Manufacturer: syz
[  158.166407][   T10] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  158.199593][   T24] usb 3-1: SerialNumber: syz
[  158.294033][   T10] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0
[  158.382103][   T24] usb 3-1: config 0 descriptor??
[  158.490026][   T10] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device
[  158.558150][   T10] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse
[  158.632406][   T10] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -71
[  158.750521][   T10] usb 2-1: USB disconnect, device number 4
[  158.959234][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  159.150297][ T5873] usb 5-1: Using ep0 maxpacket: 32
[  159.239783][ T5873] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  159.247932][ T5873] usb 5-1: config 0 has no interface number 0
[  159.254161][   T24] radio-si470x 3-1:0.35: this is not a si470x device.
[  159.279876][   T24] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  159.327609][ T5873] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  159.382862][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.409164][ T5873] usb 5-1: Product: syz
[  159.413394][ T5873] usb 5-1: Manufacturer: syz
[  159.449249][ T5873] usb 5-1: SerialNumber: syz
[  159.461695][ T5873] usb 5-1: config 0 descriptor??
[  159.989669][ T5873] radio-si470x 5-1:0.35: this is not a si470x device.
[  160.019568][ T5873] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  160.554994][ T1205] usb 3-1: USB disconnect, device number 6
[  161.871955][ T5904] usb 5-1: USB disconnect, device number 5
[  163.179308][   T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  163.693876][ T6373] syzkaller0: entered promiscuous mode
[  163.699448][ T6373] syzkaller0: entered allmulticast mode
[  163.789240][   T10] usb 4-1: Using ep0 maxpacket: 32
[  163.817839][   T10] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  163.838736][   T10] usb 4-1: config 0 has no interface number 0
[  163.863132][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  163.873326][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.894152][   T10] usb 4-1: Product: syz
[  163.898771][   T10] usb 4-1: Manufacturer: syz
[  163.912652][   T10] usb 4-1: SerialNumber: syz
[  163.937040][   T10] usb 4-1: config 0 descriptor??
[  163.968092][ T6380] netlink: 'syz.4.110': attribute type 23 has an invalid length.
[  164.113754][ T6384] 9pnet_fd: Insufficient options for proto=fd
[  164.379281][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  164.551488][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'.
[  164.620728][   T10] radio-si470x 4-1:0.35: this is not a si470x device.
[  164.788056][   T10] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  165.347139][   T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  165.361237][   T24] usb 3-1: config 1 has no interface number 1
[  165.367427][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  165.401581][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  165.812654][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.821412][   T24] usb 3-1: Product: syz
[  165.825706][   T24] usb 3-1: Manufacturer: syz
[  165.839182][   T24] usb 3-1: SerialNumber: syz
[  165.905312][   T10] usb 4-1: USB disconnect, device number 3
[  166.056038][ T6397] 9pnet_fd: Insufficient options for proto=fd
[  166.119534][   T24] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  166.175900][   T24] usb 3-1: found format II with max.bitrate = 26774, frame size=1
[  166.201912][   T24] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  166.326689][   T24] usb 3-1: found format II with max.bitrate = 26774, frame size=1
[  166.407410][   T24] usb 3-1: failed to enable PITCH for EP 0x82
[  166.563530][   T24] usb 3-1: USB disconnect, device number 7
[  167.499374][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  167.849795][ T1205] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  168.026579][ T1205] usb 1-1: Using ep0 maxpacket: 32
[  168.064867][ T1205] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  168.103089][ T6319] udevd[6319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.119279][ T1205] usb 1-1: config 0 has no interface number 0
[  168.124515][ T1205] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  168.153919][   T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  168.178551][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.188337][   T10] usb 4-1: config 1 has no interface number 1
[  168.191657][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  168.230982][ T1205] usb 1-1: Product: syz
[  168.235208][ T1205] usb 1-1: Manufacturer: syz
[  168.255652][ T1205] usb 1-1: SerialNumber: syz
[  168.273220][ T1205] usb 1-1: config 0 descriptor??
[  168.333788][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  168.383347][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  168.392813][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.400205][   T24] usb 3-1: Using ep0 maxpacket: 32
[  168.705481][   T10] usb 4-1: Product: syz
[  168.889241][ T1205] radio-si470x 1-1:0.35: this is not a si470x device.
[  168.908133][   T24] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  168.918537][   T24] usb 3-1: config 0 has no interface number 0
[  168.927451][   T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  169.026724][   T10] usb 4-1: Manufacturer: syz
[  169.028059][ T1205] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  169.038660][   T10] usb 4-1: SerialNumber: syz
[  169.086274][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.124889][   T24] usb 3-1: Product: syz
[  169.218632][   T24] usb 3-1: Manufacturer: syz
[  169.299928][   T24] usb 3-1: SerialNumber: syz
[  169.497015][   T10] usb 4-1: can't set config #1, error -71
[  169.519690][   T24] usb 3-1: config 0 descriptor??
[  169.522328][   T10] usb 4-1: USB disconnect, device number 4
[  170.104055][   T24] radio-si470x 3-1:0.35: this is not a si470x device.
[  170.506478][   T24] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  171.169758][ T5821] usb 3-1: USB disconnect, device number 8
[  171.607266][ T6426] tmpfs: Bad value for 'mpol'
[  173.278959][   T24] usb 1-1: USB disconnect, device number 4
[  173.871634][ T1205] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  174.230857][ T1205] usb 1-1: Using ep0 maxpacket: 32
[  174.535431][ T1205] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  174.543977][ T1205] usb 1-1: config 0 has no interface number 0
[  175.534403][ T1205] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  175.547912][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.556346][ T1205] usb 1-1: Product: syz
[  175.768434][ T1205] usb 1-1: Manufacturer: syz
[  175.779469][ T1205] usb 1-1: SerialNumber: syz
[  175.798730][ T1205] usb 1-1: config 0 descriptor??
[  176.002766][ T6465] netlink: 52 bytes leftover after parsing attributes in process `syz.1.132'.
[  176.321041][ T1205] radio-si470x 1-1:0.35: this is not a si470x device.
[  176.392289][ T1205] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  177.913396][ T5127] Bluetooth: hci1: command tx timeout
[  178.539438][ T5821] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  179.647331][   T10] usb 1-1: USB disconnect, device number 5
[  179.655182][ T5821] usb 2-1: Using ep0 maxpacket: 32
[  179.675459][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  179.698331][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  179.892322][ T5821] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  180.607904][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.629192][ T5821] usb 2-1: Product: syz
[  180.633454][ T5821] usb 2-1: Manufacturer: syz
[  180.638093][ T5821] usb 2-1: SerialNumber: syz
[  180.657498][ T5821] usb 2-1: config 0 descriptor??
[  180.736669][ T5821] usb 2-1: no audio or video endpoints found
[  181.203433][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'.
[  182.386676][ T5821] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  182.549297][ T5821] usb 3-1: Using ep0 maxpacket: 32
[  182.565729][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0
[  182.588525][ T5821] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  182.617452][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.628927][ T5127] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  182.664810][ T5821] usb 3-1: Product: syz
[  182.684350][ T5821] usb 3-1: Manufacturer: syz
[  182.689025][ T5821] usb 3-1: SerialNumber: syz
[  182.698126][ T5821] usb 3-1: config 0 descriptor??
[  182.749539][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  183.022655][ T5873] usb 2-1: USB disconnect, device number 5
[  183.049341][   T24] usb 4-1: Using ep0 maxpacket: 32
[  183.840662][ T5821] gs_usb 3-1:0.0: Configuring for 3 interfaces
[  183.852830][   T24] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  183.866152][ T5821] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  183.891832][   T24] usb 4-1: config 0 has no interface number 0
[  183.923668][   T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  183.958087][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.961006][ T5821] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22
[  183.977177][   T24] usb 4-1: Product: syz
[  184.122827][   T24] usb 4-1: Manufacturer: syz
[  184.128254][   T24] usb 4-1: SerialNumber: syz
[  184.155420][   T24] usb 4-1: config 0 descriptor??
[  184.781180][   T24] radio-si470x 4-1:0.35: this is not a si470x device.
[  184.809900][   T24] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  184.851362][ T5821] usb 3-1: USB disconnect, device number 9
[  185.393219][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'.
[  185.477947][   T24] usb 4-1: USB disconnect, device number 5
[  186.093405][ T6535] 9pnet_fd: Insufficient options for proto=fd
[  186.987535][ T6549] tmpfs: Bad value for 'mpol'
[  187.515940][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  187.679306][   T10] usb 5-1: Using ep0 maxpacket: 32
[  187.732149][   T10] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  187.758842][   T10] usb 5-1: config 0 has no interface number 0
[  187.790526][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  187.801476][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.810243][   T10] usb 5-1: Product: syz
[  187.814545][   T10] usb 5-1: Manufacturer: syz
[  187.826388][   T10] usb 5-1: SerialNumber: syz
[  187.909227][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  188.101669][   T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  188.460674][   T10] usb 5-1: config 0 descriptor??
[  189.331877][   T24] usb 4-1: config 1 has no interface number 1
[  189.338049][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  189.665489][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  189.697311][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.733786][   T24] usb 4-1: Product: syz
[  189.811714][   T24] usb 4-1: can't set config #1, error -71
[  189.914122][   T24] usb 4-1: USB disconnect, device number 6
[  190.082943][   T10] radio-si470x 5-1:0.35: this is not a si470x device.
[  190.339752][   T10] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  191.437387][ T5821] usb 5-1: USB disconnect, device number 6
[  194.414562][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.429355][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  201.397086][ T6652] tipc: Started in network mode
[  201.402986][ T6652] tipc: Node identity ac14140f, cluster identity 4711
[  201.412109][ T6652] tipc: New replicast peer: 255.255.255.255
[  201.420597][ T6652] tipc: Enabled bearer <udp:syz2>, priority 10
[  201.459123][ T6652] futex_wake_op: syz.3.177 tries to shift op by -1; fix this program
[  202.159524][ T5821] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  202.949449][   T10] tipc: Node number set to 2886997007
[  203.969879][ T5821] usb 2-1: Using ep0 maxpacket: 32
[  204.262527][ T5821] usb 2-1: device descriptor read/all, error -71
[  206.317490][ T6684] tmpfs: Bad value for 'mpol'
[  209.095857][ T6698] tmpfs: Bad value for 'mpol'
[  211.909631][ T5820] Bluetooth: hci3: command 0x0406 tx timeout
[  211.915726][ T5820] Bluetooth: hci4: command 0x0405 tx timeout
[  211.923231][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  211.923254][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  218.138028][ T6771] can0: slcan on ttyS3.
[  218.719576][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  218.732563][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  218.740447][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  218.750107][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  218.758813][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  218.860673][ T6768] can0 (unregistered): slcan off ttyS3.
[  220.301549][ T6772] chnl_net:caif_netlink_parms(): no params data found
[  220.869248][ T5825] Bluetooth: hci5: command tx timeout
[  221.012364][ T6791] fuse: Unknown parameter 'group_i00000000000000000000'
[  222.950208][ T5825] Bluetooth: hci5: command tx timeout
[  223.372262][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.408116][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.450531][ T6772] bridge_slave_0: entered allmulticast mode
[  223.631178][ T6772] bridge_slave_0: entered promiscuous mode
[  223.660345][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.509274][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.516568][ T6772] bridge_slave_1: entered allmulticast mode
[  224.616576][ T6772] bridge_slave_1: entered promiscuous mode
[  225.489132][ T5825] Bluetooth: hci5: command tx timeout
[  226.812474][ T6772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.189800][ T6772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.510083][ T5825] Bluetooth: hci5: command tx timeout
[  227.536009][ T6849] fuse: Unknown parameter 'group_id00000000000000000000'
[  228.223609][ T6772] team0: Port device team_slave_0 added
[  228.362721][   T71] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.424596][ T6772] team0: Port device team_slave_1 added
[  228.520375][ T5904] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  229.354016][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.387509][   T71] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.259752][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.304881][ T5904] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  230.369218][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.378521][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.529123][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.567637][ T5904] usb 1-1: config 0 descriptor??
[  230.849325][ T6772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.260595][   T71] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.276765][ T5904] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  231.348162][ T5904] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  231.419893][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.458763][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.486525][ T5904] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE
[  231.491720][ T6772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.547688][   T71] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.644482][ T6772] hsr_slave_0: entered promiscuous mode
[  231.651988][ T6772] hsr_slave_1: entered promiscuous mode
[  231.658522][ T6772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  231.666835][ T6772] Cannot create hsr debugfs directory
[  231.696282][ T5904] cp2112 0003:10C4:EA90.0004: error requesting SMBus config
[  231.716126][ T5904] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -32
[  231.742224][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  231.757493][ T5904] usb 1-1: USB disconnect, device number 6
[  231.896543][   T71] bridge_slave_1: left allmulticast mode
[  231.904807][   T71] bridge_slave_1: left promiscuous mode
[  231.912616][   T71] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.912884][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.935160][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.945977][ T5873] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  231.947060][   T71] bridge_slave_0: left allmulticast mode
[  231.955173][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.959475][ T5873] usb 5-1: config 0 descriptor??
[  232.006766][   T71] bridge_slave_0: left promiscuous mode
[  232.031580][   T71] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.032937][ T5873] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  233.069417][ T5873] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  233.174432][ T5873] cp2112 0003:10C4:EA90.0005: error requesting version
[  233.280408][ T5873] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -5
[  233.776905][ T6897] fuse: Unknown parameter 'group_id00000000000000000000'
[  234.566483][ T5872] usb 5-1: USB disconnect, device number 7
[  236.855640][   T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.894031][   T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.906365][   T71] bond0 (unregistering): Released all slaves
[  238.847127][ T6935] 9pnet_fd: Insufficient options for proto=fd
[  239.203610][ T5870] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  239.278535][ T6945] fuse: Unknown parameter 'group_id00000000000000000000'
[  239.991321][ T5870] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  240.001825][ T5870] usb 1-1: config 1 has no interface number 1
[  240.010250][ T5870] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  240.207474][ T5870] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  240.224227][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.233194][   T71] hsr_slave_0: left promiscuous mode
[  240.240052][   T71] hsr_slave_1: left promiscuous mode
[  240.243629][ T5870] usb 1-1: Product: syz
[  240.246224][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  240.254430][ T5870] usb 1-1: Manufacturer: syz
[  240.260818][   T71] batman_adv: batadv0: Removing interface: batadv_slave_0
[  240.263017][ T5870] usb 1-1: SerialNumber: syz
[  240.368786][ T6949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.241'.
[  240.790547][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  240.798610][   T71] batman_adv: batadv0: Removing interface: batadv_slave_1
[  240.897274][   T71] veth1_macvtap: left promiscuous mode
[  240.907105][   T71] veth0_macvtap: left promiscuous mode
[  240.959435][   T71] veth1_vlan: left promiscuous mode
[  240.970673][   T71] veth0_vlan: left promiscuous mode
[  241.019652][ T5870] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  241.030683][ T5870] usb 1-1: found format II with max.bitrate = 26774, frame size=1
[  241.038768][ T5870] usb 1-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  241.048318][ T5870] usb 1-1: found format II with max.bitrate = 26774, frame size=1
[  241.065906][ T5870] usb 1-1: failed to enable PITCH for EP 0x82
[  241.119475][ T5870] usb 1-1: USB disconnect, device number 7
[  241.319541][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  241.469249][   T24] usb 4-1: Using ep0 maxpacket: 32
[  241.489286][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  241.501358][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  241.534001][   T24] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  241.545708][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.554642][   T24] usb 4-1: Product: syz
[  241.609893][   T24] usb 4-1: Manufacturer: syz
[  241.632464][   T24] usb 4-1: SerialNumber: syz
[  241.658451][   T24] usb 4-1: config 0 descriptor??
[  241.685618][   T24] usb 4-1: no audio or video endpoints found
[  243.051565][   T71] team0 (unregistering): Port device team_slave_1 removed
[  243.147247][   T71] team0 (unregistering): Port device team_slave_0 removed
[  244.967323][ T5872] usb 4-1: USB disconnect, device number 7
[  245.767400][ T6772] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  246.605084][ T6772] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  246.770341][ T6993] fuse: Bad value for 'user_id'
[  246.775330][ T6993] fuse: Bad value for 'user_id'
[  247.049493][ T6772] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  247.314875][ T6772] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  247.346790][ T7000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.251'.
[  249.589419][ T5873] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  250.273468][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.799147][ T5873] usb 5-1: Using ep0 maxpacket: 16
[  250.805898][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  250.836487][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  250.882951][ T6772] 8021q: adding VLAN 0 to HW filter on device team0
[  250.898067][ T5873] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.04
[  250.943183][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.980676][ T5873] usb 5-1: config 0 descriptor??
[  250.982961][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.993149][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.225144][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.232495][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.890691][ T5873] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0
[  252.099277][ T5873] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0
[  252.115338][ T5873] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0
[  252.137217][ T5873] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0
[  252.173455][ T7037] netlink: 68 bytes leftover after parsing attributes in process `syz.0.259'.
[  252.279655][ T5873] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device
[  252.287933][ T5873] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse
[  253.331945][ T5873] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71
[  253.344722][ T5873] usb 5-1: USB disconnect, device number 8
[  253.728401][ T7054] fuse: Bad value for 'user_id'
[  253.734077][ T7054] fuse: Bad value for 'user_id'
[  255.185684][ T7071] syzkaller0: entered promiscuous mode
[  255.205526][ T7071] syzkaller0: entered allmulticast mode
[  255.321286][ T6772] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.755695][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.762519][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  258.572518][ T7110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.271'.
[  258.983305][ T7114] tmpfs: Bad value for 'mpol'
[  261.105055][ T7126] fuse: Bad value for 'group_id'
[  261.119331][ T7126] fuse: Bad value for 'group_id'
[  261.622967][ T6772] veth0_vlan: entered promiscuous mode
[  261.684113][ T6772] veth1_vlan: entered promiscuous mode
[  261.744895][ T7131] Bluetooth: MGMT ver 1.23
[  262.423507][ T6772] veth0_macvtap: entered promiscuous mode
[  262.440339][ T6772] veth1_macvtap: entered promiscuous mode
[  263.485941][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.496993][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.506972][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.539219][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.592244][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.603872][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.048975][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.093204][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.112792][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.430552][ T7167] xt_CT: You must specify a L4 protocol and not use inversions on it
[  265.235362][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.271730][ T5825] Bluetooth: hci4: unexpected event for opcode 0x0003
[  265.352643][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.410680][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.445382][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.485265][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.704404][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.715732][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.726660][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.740630][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.766513][ T7176] netlink: 68 bytes leftover after parsing attributes in process `syz.3.286'.
[  266.437581][ T6772] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.309168][ T6772] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.318059][ T6772] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.326950][ T6772] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.358811][ T6601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.375346][ T6601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.537346][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.585993][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.895978][ T7201] netlink: 'syz.4.289': attribute type 21 has an invalid length.
[  269.352117][ T5825] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  269.361852][ T5825] Bluetooth: hci4: Injecting HCI hardware error event
[  269.376836][ T5825] Bluetooth: hci4: hardware error 0x00
[  269.480609][ T7201] netlink: 'syz.4.289': attribute type 6 has an invalid length.
[  269.488342][ T7201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.289'.
[  269.979716][ T5870] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  270.269160][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  270.322873][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  270.340410][ T7226] xt_CT: You must specify a L4 protocol and not use inversions on it
[  270.685473][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  271.013452][ T5870] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.04
[  271.104398][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.345868][ T5870] usb 4-1: config 0 descriptor??
[  271.669356][ T5825] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  272.427053][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.297'.
[  272.436283][ T7239] netlink: 'syz.5.297': attribute type 5 has an invalid length.
[  272.444291][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.5.297'.
[  272.498208][ T7239] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  272.507225][ T7239] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  272.516260][ T7239] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  272.525346][ T7239] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  272.534809][ T7239] geneve2: entered promiscuous mode
[  272.540531][ T7239] geneve2: entered allmulticast mode
[  272.984661][ T5870] usbhid 4-1:0.0: can't add hid device: -71
[  273.114803][ T5870] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  273.179476][ T5870] usb 4-1: USB disconnect, device number 8
[  274.402497][ T7255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.302'.
[  275.280123][ T7270] fuse: Bad value for 'group_id'
[  275.285146][ T7270] fuse: Bad value for 'group_id'
[  275.749207][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  276.381180][ T5127] Bluetooth: hci3: command 0x1003 tx timeout
[  276.387497][ T5825] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  277.621016][   T24] usb 4-1: Using ep0 maxpacket: 16
[  278.238438][ T7278] 9pnet_fd: Insufficient options for proto=fd
[  278.288328][   T24] usb 4-1: device descriptor read/all, error -71
[  278.521998][ T5821] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  278.745441][ T5821] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  278.777835][ T5821] usb 5-1: config 1 has no interface number 1
[  278.803098][ T5821] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  279.827922][ T5904] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  280.034827][ T5821] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  280.306316][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.330990][ T5904] usb 2-1: Using ep0 maxpacket: 32
[  280.369354][ T5821] usb 5-1: Product: syz
[  280.373716][ T5821] usb 5-1: Manufacturer: syz
[  280.378362][ T5821] usb 5-1: SerialNumber: syz
[  280.409138][ T5904] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  280.417292][ T5904] usb 2-1: config 0 has no interface number 0
[  280.492962][ T5821] usb 5-1: can't set config #1, error -71
[  280.512891][ T5821] usb 5-1: USB disconnect, device number 9
[  280.560513][ T5904] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  280.992959][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.219317][ T5904] usb 2-1: Product: syz
[  281.223522][ T5904] usb 2-1: Manufacturer: syz
[  281.228108][ T5904] usb 2-1: SerialNumber: syz
[  281.326048][ T5904] usb 2-1: config 0 descriptor??
[  281.331618][ T7308] netlink: 32 bytes leftover after parsing attributes in process `syz.5.314'.
[  282.530501][ T5904] usb 2-1: can't set config #0, error -71
[  282.555534][ T5904] usb 2-1: USB disconnect, device number 8
[  282.797713][ T7325] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  282.812647][ T7325] futex_wake_op: syz.0.318 tries to shift op by -1; fix this program
[  284.560526][ T7341] can0: slcan on ttyS3.
[  284.624026][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[  285.604217][ T7334] can0 (unregistered): slcan off ttyS3.
[  288.320481][ T7378] netlink: 'syz.1.329': attribute type 23 has an invalid length.
[  288.405380][ T7377] geneve0: entered allmulticast mode
[  288.677821][ T5821] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  288.753387][ T7383] netlink: 'syz.3.328': attribute type 21 has an invalid length.
[  288.769280][ T7383] netlink: 'syz.3.328': attribute type 6 has an invalid length.
[  288.797527][ T7383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.328'.
[  288.939896][ T5821] usb 1-1: Using ep0 maxpacket: 8
[  288.976253][ T5821] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  289.005238][ T5821] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  289.083958][ T5821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  289.124886][ T5821] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  289.153687][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.180411][ T5821] usb 1-1: Product: ࡃ
[  289.200733][ T5821] usb 1-1: Manufacturer: ခ
[  289.205401][ T5821] usb 1-1: SerialNumber: ࠖ
[  289.214690][ T7388] binder: BINDER_SET_CONTEXT_MGR already set
[  289.229143][ T7388] binder: 7385:7388 ioctl 4018620d 200000000040 returned -16
[  289.400592][ T7388] binder: 7385:7388 ioctl c0306201 2000000003c0 returned -14
[  289.503291][ T5821] usb 1-1: 0:2 : does not exist
[  289.525395][ T7388] binder: 7385:7388 ioctl c0306201 200000000540 returned -11
[  289.565144][ T5821] usb 1-1: USB disconnect, device number 8
[  289.580728][ T7396] process 'syz.4.331' launched './file0' with NULL argv: empty string added
[  289.780739][ T6541] udevd[6541]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  290.409821][ T7400] fuse: Bad value for 'group_id'
[  290.498408][ T7400] fuse: Bad value for 'group_id'
[  297.932404][ T5821] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  298.619278][ T5821] usb 1-1: Using ep0 maxpacket: 32
[  298.633566][ T5821] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  298.912365][ T5821] usb 1-1: config 0 has no interface number 0
[  298.935579][ T5821] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  298.945154][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.954226][ T5821] usb 1-1: Product: syz
[  298.958910][ T5821] usb 1-1: Manufacturer: syz
[  298.963911][ T5821] usb 1-1: SerialNumber: syz
[  298.983878][ T5821] usb 1-1: config 0 descriptor??
[  299.511784][ T5821] radio-si470x 1-1:0.35: this is not a si470x device.
[  299.550379][ T5821] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  300.334756][ T5821] usb 1-1: USB disconnect, device number 9
[  300.367156][ T5873] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  301.127165][ T7483] SET target dimension over the limit!
[  301.318895][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.373930][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.741077][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  301.967333][ T5873] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  301.976563][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.987716][ T5873] usb 2-1: config 0 descriptor??
[  302.969140][   T10] usb 6-1: Using ep0 maxpacket: 32
[  302.976569][   T10] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  303.079996][   T10] usb 6-1: config 0 has no interface number 0
[  303.125072][   T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  303.156344][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.710115][   T10] usb 6-1: Product: syz
[  303.714372][   T10] usb 6-1: Manufacturer: syz
[  303.720264][   T10] usb 6-1: SerialNumber: syz
[  303.883772][   T10] usb 6-1: config 0 descriptor??
[  303.888881][ T5873] usbhid 2-1:0.0: can't add hid device: -71
[  303.965523][ T5873] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  304.017898][   T10] usb 6-1: can't set config #0, error -71
[  304.247188][   T10] usb 6-1: USB disconnect, device number 2
[  304.379108][ T5873] usb 2-1: USB disconnect, device number 9
[  306.327843][ T7510] can0: slcan on ttyS3.
[  306.340029][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'.
[  307.047916][ T7489] can0 (unregistered): slcan off ttyS3.
[  307.514579][ T7526] can0: slcan on ttyS3.
[  308.585622][ T7513] can0 (unregistered): slcan off ttyS3.
[  309.969450][ T7550] binder: 7549:7550 ioctl c0306201 2000000003c0 returned -14
[  310.971654][ T5873] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  311.299184][ T5873] usb 5-1: Using ep0 maxpacket: 32
[  311.322254][ T5873] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  311.407488][ T5873] usb 5-1: config 0 has no interface number 0
[  311.430140][ T5873] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  311.448069][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.467198][ T5873] usb 5-1: Product: syz
[  311.485841][ T5873] usb 5-1: Manufacturer: syz
[  311.703000][ T5873] usb 5-1: SerialNumber: syz
[  312.673417][ T5873] usb 5-1: config 0 descriptor??
[  313.066271][ T5873] radio-si470x 5-1:0.35: this is not a si470x device.
[  313.113092][ T5873] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  313.239521][ T5873] usb 5-1: USB disconnect, device number 10
[  315.132759][ T7591] tty tty20: ldisc open failed (-12), clearing slot 19
[  317.199688][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.213350][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.309358][ T5873] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  318.559132][ T5873] usb 2-1: Using ep0 maxpacket: 32
[  318.571578][ T5873] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  318.599297][ T5873] usb 2-1: config 0 has no interface number 0
[  319.312188][ T5873] usb 2-1: string descriptor 0 read error: -71
[  319.318628][ T5873] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  319.557509][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.783860][ T5873] usb 2-1: config 0 descriptor??
[  320.395014][ T5873] usb 2-1: can't set config #0, error -71
[  320.950238][ T5873] usb 2-1: USB disconnect, device number 10
[  322.113240][ T7647] netlink: 'syz.5.379': attribute type 21 has an invalid length.
[  322.219748][ T7647] netlink: 'syz.5.379': attribute type 6 has an invalid length.
[  322.227450][ T7647] netlink: 132 bytes leftover after parsing attributes in process `syz.5.379'.
[  322.985328][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  323.623398][   T10] usb 1-1: Using ep0 maxpacket: 32
[  323.686423][   T10] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  323.720961][   T10] usb 1-1: config 0 has no interface number 0
[  323.747895][   T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  323.772274][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.802593][   T10] usb 1-1: Product: syz
[  323.818986][   T10] usb 1-1: Manufacturer: syz
[  323.969137][   T10] usb 1-1: SerialNumber: syz
[  323.977831][   T10] usb 1-1: config 0 descriptor??
[  324.373463][ T7675] tipc: Started in network mode
[  324.378595][ T7675] tipc: Node identity ac14140f, cluster identity 4711
[  324.388795][ T7675] tipc: New replicast peer: 255.255.255.255
[  324.398115][ T7675] tipc: Enabled bearer <udp:syz2>, priority 10
[  324.427969][ T7675] futex_wake_op: syz.4.385 tries to shift op by -1; fix this program
[  324.766877][   T10] radio-si470x 1-1:0.35: this is not a si470x device.
[  324.843378][   T10] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  325.071091][ T7681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.387'.
[  325.362257][ T7687] fuse: Bad value for 'group_id'
[  325.409299][ T7687] fuse: Bad value for 'group_id'
[  326.188704][   T10] tipc: Node number set to 2886997007
[  327.834709][ T5821] usb 1-1: USB disconnect, device number 10
[  330.389284][ T5870] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  330.569138][ T5821] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  331.395288][ T5821] usb 6-1: Using ep0 maxpacket: 32
[  331.458575][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  331.529177][ T5870] usb 2-1: Using ep0 maxpacket: 32
[  331.529981][ T5821] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  331.566000][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  331.623778][ T5821] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  331.641084][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.655597][ T7740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.400'.
[  331.679147][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  331.686380][ T5821] usb 6-1: Product: syz
[  331.718045][ T5821] usb 6-1: Manufacturer: syz
[  331.729521][ T5821] usb 6-1: SerialNumber: syz
[  331.758157][ T5821] usb 6-1: config 0 descriptor??
[  331.774013][ T5870] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  331.796815][ T5821] usb 6-1: no audio or video endpoints found
[  331.872454][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.168464][ T7749] SET target dimension over the limit!
[  333.203907][ T5870] usb 2-1: Product: syz
[  333.208150][ T5870] usb 2-1: Manufacturer: syz
[  333.309218][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.398'.
[  333.379412][ T5127] Bluetooth: hci5: command 0x0405 tx timeout
[  334.112092][ T5870] usb 2-1: SerialNumber: syz
[  335.072476][ T5821] usb 6-1: USB disconnect, device number 3
[  335.230717][ T5870] usb 2-1: config 0 descriptor??
[  335.351072][ T5870] usb 2-1: can't set config #0, error -71
[  335.385972][ T5870] usb 2-1: USB disconnect, device number 11
[  336.379236][ T1205] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  337.139188][ T1205] usb 6-1: Using ep0 maxpacket: 32
[  338.101194][ T1205] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  338.159666][ T1205] usb 6-1: config 0 has no interface number 0
[  342.349561][ T1205] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  342.358680][ T1205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.421727][ T1205] usb 6-1: Product: syz
[  342.450364][ T1205] usb 6-1: config 0 descriptor??
[  342.489301][ T1205] usb 6-1: can't set config #0, error -71
[  342.494943][ T7811] syzkaller0: entered promiscuous mode
[  342.706770][ T7811] syzkaller0: entered allmulticast mode
[  342.796650][ T1205] usb 6-1: USB disconnect, device number 4
[  344.870884][ T5825] Bluetooth: hci5: command 0x0405 tx timeout
[  348.081771][ T5904] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  348.262243][ T5904] usb 2-1: Using ep0 maxpacket: 32
[  348.286281][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  348.298556][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  348.322947][ T5904] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  348.334694][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.343187][ T5904] usb 2-1: Product: syz
[  348.350844][ T5904] usb 2-1: Manufacturer: syz
[  348.355631][ T5904] usb 2-1: SerialNumber: syz
[  348.380033][ T5904] usb 2-1: config 0 descriptor??
[  348.396973][ T5904] usb 2-1: no audio or video endpoints found
[  348.612471][ T5872] usb 2-1: USB disconnect, device number 12
[  348.870299][ T7844] netlink: 'syz.4.417': attribute type 23 has an invalid length.
[  350.434363][ T7897] can0: slcan on ttyS3.
[  350.613037][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'.
[  350.864259][ T7903] netlink: 32 bytes leftover after parsing attributes in process `syz.3.428'.
[  350.879739][ T7890] can0 (unregistered): slcan off ttyS3.
[  354.545724][ T7954] can0: slcan on ttyS3.
[  355.241534][ T7945] can0 (unregistered): slcan off ttyS3.
[  357.995043][ T7976] fuse: Bad value for 'group_id'
[  358.019282][ T7976] fuse: Bad value for 'group_id'
[  360.133477][ T7998] can0: slcan on ttyS3.
[  360.809607][ T7993] can0 (unregistered): slcan off ttyS3.
[  362.928177][ T8021] SET target dimension over the limit!
[  364.161033][ T8026] 9pnet_fd: Insufficient options for proto=fd
[  364.613858][ T8040] netlink: 'syz.1.457': attribute type 23 has an invalid length.
[  365.251052][ T8053] tipc: Started in network mode
[  365.256148][ T8053] tipc: Node identity ac14140f, cluster identity 4711
[  365.264725][ T8053] tipc: New replicast peer: 255.255.255.255
[  365.272630][ T8053] tipc: Enabled bearer <udp:syz2>, priority 10
[  365.299913][ T8053] futex_wake_op: syz.5.459 tries to shift op by -1; fix this program
[  366.429525][ T5870] tipc: Node number set to 2886997007
[  367.120953][ T8059] Can't find ip_set type has
[  367.818224][ T8085] futex_wake_op: syz.1.464 tries to shift op by -1; fix this program
[  370.659174][ T5821] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  371.030536][ T5821] usb 2-1: Using ep0 maxpacket: 32
[  371.801663][ T5821] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  372.312050][ T5821] usb 2-1: config 0 has no interface number 0
[  372.354867][ T5821] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  372.699233][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.766285][ T5821] usb 2-1: Product: syz
[  372.801831][ T5821] usb 2-1: Manufacturer: syz
[  372.821592][ T5821] usb 2-1: SerialNumber: syz
[  372.902490][ T5821] usb 2-1: config 0 descriptor??
[  372.969315][ T5821] usb 2-1: can't set config #0, error -71
[  372.986918][ T5821] usb 2-1: USB disconnect, device number 13
[  373.989273][ T8153] syzkaller0: entered promiscuous mode
[  373.994995][ T8153] syzkaller0: entered allmulticast mode
[  374.658264][ T8162] netlink: 112 bytes leftover after parsing attributes in process `syz.3.479'.
[  378.676489][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  378.693206][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  380.719336][ T5870] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  381.461356][ T5870] usb 5-1: Using ep0 maxpacket: 32
[  381.475276][ T5870] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  381.501663][ T5870] usb 5-1: config 0 has no interface number 0
[  381.543281][ T5870] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  381.555277][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.567227][ T5870] usb 5-1: Product: syz
[  381.571990][ T5870] usb 5-1: Manufacturer: syz
[  381.576740][ T5870] usb 5-1: SerialNumber: syz
[  381.899316][ T5873] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  381.930345][    C0] raw-gadget.1 gadget.5: ignoring, device is not running
[  382.129216][ T5870] usb 5-1: config 0 descriptor??
[  382.734329][ T5870] radio-si470x 5-1:0.35: this is not a si470x device.
[  382.759209][ T5873] usb 6-1: device descriptor read/64, error -32
[  382.886491][ T5870] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  383.164866][ T5873] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  383.329129][ T5873] usb 6-1: Using ep0 maxpacket: 32
[  383.341640][ T5873] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  383.352657][ T5873] usb 6-1: config 0 has no interface number 0
[  383.378838][ T5873] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  383.388372][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.401873][ T5873] usb 6-1: Product: syz
[  383.406217][ T5873] usb 6-1: Manufacturer: syz
[  383.412407][ T5873] usb 6-1: SerialNumber: syz
[  383.424214][ T5873] usb 6-1: config 0 descriptor??
[  383.438492][ T5870] usb 5-1: USB disconnect, device number 11
[  384.027630][ T5873] radio-si470x 6-1:0.35: this is not a si470x device.
[  384.070660][ T5873] radio-raremono 6-1:0.35: this is not Thanko's Raremono.
[  384.460501][ T8241] netlink: 'syz.3.499': attribute type 23 has an invalid length.
[  384.687578][ T5870] usb 6-1: USB disconnect, device number 6
[  387.729652][ T8283] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  387.786526][ T8283] futex_wake_op: syz.5.508 tries to shift op by -1; fix this program
[  389.764187][ T8298] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  389.773752][ T8298] futex_wake_op: syz.4.513 tries to shift op by -1; fix this program
[  389.799607][ T5873] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  390.822383][ T8306] netlink: 52 bytes leftover after parsing attributes in process `syz.4.515'.
[  390.865518][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.890889][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.911824][ T5873] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  390.948353][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.016387][ T5873] usb 6-1: config 0 descriptor??
[  392.047293][ T5873] usb 6-1: can't set config #0, error -71
[  392.155563][ T5873] usb 6-1: USB disconnect, device number 7
[  393.119300][ T8325] can0: slcan on ttyS3.
[  393.200667][ T8325] netlink: 'syz.1.519': attribute type 20 has an invalid length.
[  393.208537][ T8325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.519'.
[  393.800004][ T8320] can0 (unregistered): slcan off ttyS3.
[  395.491227][ T8332] fuse: Bad value for 'group_id'
[  395.496230][ T8332] fuse: Bad value for 'group_id'
[  396.179210][ T5871] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  396.399227][ T5871] usb 2-1: Using ep0 maxpacket: 32
[  396.787367][ T5871] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  396.809883][ T5871] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  396.818538][ T5871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  397.037822][ T5871] usb 2-1: config 1 has no interface number 0
[  397.057267][ T5871] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  397.079309][ T5871] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  397.134509][ T5871] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  397.172912][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.241063][ T8350] netlink: 'syz.4.524': attribute type 23 has an invalid length.
[  397.281728][ T5871] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  398.547732][ T5871] snd_usb_pod 2-1:1.1: set_interface failed
[  398.556817][ T5871] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  398.565000][ T5871] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71
[  398.673801][ T5871] usb 2-1: USB disconnect, device number 14
[  398.714260][   T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  399.416078][   T24] usb 5-1: Using ep0 maxpacket: 32
[  399.424203][   T24] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  399.436615][   T24] usb 5-1: config 0 has no interface number 0
[  399.444325][   T24] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  400.035284][ T5873] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  400.090264][   T24] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  400.140169][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.176692][   T24] usb 5-1: Product: syz
[  400.188620][   T24] usb 5-1: Manufacturer: syz
[  400.199118][ T5873] usb 2-1: Using ep0 maxpacket: 32
[  400.199133][   T24] usb 5-1: SerialNumber: syz
[  400.215134][   T24] usb 5-1: config 0 descriptor??
[  400.382284][ T5873] usb 2-1: config 0 has no interfaces?
[  400.383340][   T24] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  400.397328][ T5873] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  400.417214][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.430629][ T5873] usb 2-1: Product: syz
[  400.434842][ T5873] usb 2-1: Manufacturer: syz
[  400.442026][ T5873] usb 2-1: SerialNumber: syz
[  400.575984][   T24] em28xx 5-1:0.132: Video interface 132 found:
[  401.690190][   T24] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  402.019272][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  402.270669][ T5873] usb 2-1: config 0 descriptor??
[  403.185044][ T5873] usb 2-1: can't set config #0, error -71
[  403.199528][ T5873] usb 2-1: USB disconnect, device number 15
[  403.343835][   T24] em28xx 5-1:0.132: failed to read eeprom (err=-110)
[  403.529262][   T24] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  403.539497][   T10] usb 1-1: device not accepting address 11, error -71
[  403.599759][   T24] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  403.623623][   T24] em28xx 5-1:0.132: analog set to bulk mode.
[  403.711763][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.538'.
[  403.765470][ T1205] em28xx 5-1:0.132: Registering V4L2 extension
[  404.626971][   T24] usb 5-1: USB disconnect, device number 12
[  404.688736][ T8411] netlink: 'syz.3.540': attribute type 23 has an invalid length.
[  404.805861][ T1205] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-19)
[  404.850073][   T24] em28xx 5-1:0.132: Disconnecting em28xx
[  405.202789][ T8426] fuse: Bad value for 'group_id'
[  405.207926][ T8426] fuse: Bad value for 'group_id'
[  406.307162][ T1205] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  406.518075][ T1205] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  406.526737][ T1205] em28xx 5-1:0.132: No AC97 audio processor
[  406.542915][ T1205] usb 5-1: Decoder not found
[  406.547573][ T1205] em28xx 5-1:0.132: failed to create media graph
[  406.554307][ T1205] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  407.482060][ T1205] em28xx 5-1:0.132: Remote control support is not available for this card.
[  407.514667][   T24] em28xx 5-1:0.132: Closing input extension
[  408.242905][   T24] em28xx 5-1:0.132: Freeing device
[  409.544762][ T8457] fuse: Unknown parameter 'user_id00000000000000000000'
[  410.205407][ T8441] fuse: Bad value for 'group_id'
[  410.210810][ T8441] fuse: Bad value for 'group_id'
[  411.134698][ T8462] tmpfs: Bad value for 'mpol'
[  412.090462][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'.
[  412.099480][ T8465] netlink: 'syz.4.551': attribute type 5 has an invalid length.
[  412.107236][ T8465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'.
[  412.123667][ T8465] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  412.132499][ T8465] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  412.147506][ T8465] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  412.158544][ T8465] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  412.168897][ T8465] geneve2: entered promiscuous mode
[  412.176136][ T8465] geneve2: entered allmulticast mode
[  415.501320][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'.
[  415.947903][ T8487] can0: slcan on ttyS3.
[  416.125175][ T8482] can0 (unregistered): slcan off ttyS3.
[  417.606668][ T8502] fuse: Unknown parameter 'user_id00000000000000000000'
[  418.025128][ T8504] tmpfs: Bad value for 'mpol'
[  419.365313][ T8509] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  419.374545][ T8509] futex_wake_op: syz.1.563 tries to shift op by -1; fix this program
[  419.389661][ T8516] tmpfs: Bad value for 'mpol'
[  419.854326][ T8519] fuse: Unknown parameter 'grou00000000000000000000'
[  420.445402][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  420.455144][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  420.473493][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  420.491961][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  420.503277][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  421.649131][ T1205] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  422.210573][ T8548] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  422.230343][ T8548] futex_wake_op: syz.3.570 tries to shift op by -1; fix this program
[  422.519109][ T1205] usb 1-1: Using ep0 maxpacket: 32
[  422.531304][ T1205] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  422.546606][ T1205] usb 1-1: config 0 has no interface number 0
[  422.562727][ T5871] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  422.629440][ T5127] Bluetooth: hci3: command tx timeout
[  422.695467][ T8521] chnl_net:caif_netlink_parms(): no params data found
[  422.746554][ T1205] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  422.759872][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.768414][ T1205] usb 1-1: Product: syz
[  422.783998][ T5871] usb 2-1: Using ep0 maxpacket: 32
[  422.795505][ T1205] usb 1-1: Manufacturer: syz
[  422.809662][ T5871] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  422.823047][ T1205] usb 1-1: SerialNumber: syz
[  422.828695][ T5871] usb 2-1: config 0 has no interface number 0
[  423.048539][ T1205] usb 1-1: config 0 descriptor??
[  423.078506][ T5871] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  423.089278][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.119845][ T5871] usb 2-1: Product: syz
[  423.140858][ T5871] usb 2-1: Manufacturer: syz
[  423.195962][ T5871] usb 2-1: SerialNumber: syz
[  423.702250][ T1205] radio-si470x 1-1:0.35: this is not a si470x device.
[  423.840910][ T1205] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  423.894414][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state
[  423.913167][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.923712][ T8521] bridge_slave_0: entered allmulticast mode
[  423.937487][ T8521] bridge_slave_0: entered promiscuous mode
[  423.979511][ T5871] usb 2-1: config 0 descriptor??
[  423.985849][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state
[  423.999590][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.007048][ T8521] bridge_slave_1: entered allmulticast mode
[  424.048836][ T8521] bridge_slave_1: entered promiscuous mode
[  424.090097][ T8559] binder: 8558:8559 ioctl c0306201 0 returned -14
[  424.126281][ T8559] binder: 8558:8559 ioctl c0306201 2000000003c0 returned -14
[  424.144811][ T8559] binder: 8558:8559 ioctl c0306201 200000000540 returned -11
[  424.238682][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  424.526329][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  424.569085][ T5871] radio-si470x 2-1:0.35: this is not a si470x device.
[  424.585945][ T1205] usb 1-1: USB disconnect, device number 13
[  424.696680][ T8565] fuse: Bad value for 'fd'
[  424.747518][ T5127] Bluetooth: hci3: command tx timeout
[  424.786539][ T5871] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  426.104722][ T8521] team0: Port device team_slave_0 added
[  426.464322][ T8573] tmpfs: Bad value for 'mpol'
[  426.789320][ T5127] Bluetooth: hci3: command tx timeout
[  427.229852][ T8521] team0: Port device team_slave_1 added
[  427.419193][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  427.512807][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.520381][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.550717][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.583453][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.591105][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.634010][ T8581] fuse: Unknown parameter 'grou00000000000000000000'
[  427.687616][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.123084][ T5873] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  428.197254][ T8521] hsr_slave_0: entered promiscuous mode
[  428.259099][   T10] usb 5-1: Using ep0 maxpacket: 32
[  428.260224][ T8521] hsr_slave_1: entered promiscuous mode
[  428.266605][   T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  428.287006][ T8521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  428.289073][   T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  428.306350][ T8521] Cannot create hsr debugfs directory
[  428.310228][ T5884] usb 2-1: USB disconnect, device number 16
[  428.347978][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  428.375144][   T10] usb 5-1: config 1 has no interface number 0
[  428.381696][   T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  428.392184][   T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  428.419397][ T5873] usb 1-1: Using ep0 maxpacket: 32
[  428.428069][   T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  428.453511][ T5873] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  428.472087][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.480882][ T5873] usb 1-1: config 0 has no interface number 0
[  428.487023][ T5873] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  428.550082][   T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  428.580515][ T5873] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  428.989957][ T5127] Bluetooth: hci3: command tx timeout
[  429.476215][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.536488][ T5873] usb 1-1: Product: syz
[  429.561486][ T5873] usb 1-1: Manufacturer: syz
[  429.594362][ T5873] usb 1-1: SerialNumber: syz
[  429.790387][ T5873] usb 1-1: config 0 descriptor??
[  430.034644][ T5873] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  430.070717][ T5873] em28xx 1-1:0.132: Video interface 132 found:
[  430.300818][   T10] snd_usb_pod 5-1:1.1: set_interface failed
[  430.307586][   T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  430.315367][   T10] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  430.327865][   T10] usb 5-1: USB disconnect, device number 13
[  430.706857][ T5873] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  431.020284][ T8598] syz.3.581 uses obsolete (PF_INET,SOCK_PACKET)
[  431.268807][ T5873] em28xx 1-1:0.132: failed to get i2c transfer status from bridge register (error=-5)
[  431.293932][ T5873] em28xx 1-1:0.132: board has no eeprom
[  431.383419][ T5873] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  431.411262][ T5873] em28xx 1-1:0.132: analog set to bulk mode.
[  431.429203][   T10] em28xx 1-1:0.132: Registering V4L2 extension
[  432.245210][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'.
[  432.254367][ T8607] netlink: 'syz.1.583': attribute type 5 has an invalid length.
[  432.262319][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.583'.
[  433.649673][ T1205] usb 1-1: USB disconnect, device number 14
[  433.657045][ T1205] em28xx 1-1:0.132: Disconnecting em28xx
[  433.721386][ T8607] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  433.730391][ T8607] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  433.739174][ T8607] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  433.748799][ T8607] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  433.758534][ T8607] geneve2: entered promiscuous mode
[  433.763812][ T8607] geneve2: entered allmulticast mode
[  434.214128][ T8620] fuse: Bad value for 'fd'
[  434.806525][   T10] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  435.043946][   T10] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  435.469064][   T10] em28xx 1-1:0.132: No AC97 audio processor
[  435.809615][   T10] usb 1-1: Decoder not found
[  435.814273][   T10] em28xx 1-1:0.132: failed to create media graph
[  435.859192][   T10] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  435.872903][   T10] em28xx 1-1:0.132: Remote control support is not available for this card.
[  436.028764][ T1205] em28xx 1-1:0.132: Closing input extension
[  436.048008][ T1205] em28xx 1-1:0.132: Freeing device
[  436.075344][ T8521] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  437.083746][ T8521] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  438.079867][ T8521] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  438.103066][ T8521] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  438.306793][ T8632] bridge0: port 3(syz_tun) entered blocking state
[  438.315201][ T8632] bridge0: port 3(syz_tun) entered disabled state
[  438.323526][ T8632] syz_tun: entered allmulticast mode
[  438.346822][ T8632] syz_tun: entered promiscuous mode
[  438.419074][ T8632] bridge0: port 3(syz_tun) entered blocking state
[  438.425857][ T8632] bridge0: port 3(syz_tun) entered forwarding state
[  438.848561][ T8638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.591'.
[  439.229796][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0
[  439.670623][ T8521] 8021q: adding VLAN 0 to HW filter on device team0
[  439.754046][ T7409] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.762134][ T7409] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.140800][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  440.160746][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  440.214544][ T3119] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.221799][ T3119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  442.113651][ T1205] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  442.339861][ T1205] usb 1-1: Using ep0 maxpacket: 32
[  442.367614][ T1205] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  442.442572][ T1205] usb 1-1: config 0 has no interface number 0
[  442.511733][ T1205] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  442.634381][ T1205] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  442.724053][ T1205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.795142][ T1205] usb 1-1: Product: syz
[  442.954396][ T1205] usb 1-1: Manufacturer: syz
[  442.964135][ T1205] usb 1-1: SerialNumber: syz
[  442.990141][ T1205] usb 1-1: config 0 descriptor??
[  443.026431][ T1205] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  443.136602][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'.
[  443.145653][ T8682] netlink: 'syz.1.600': attribute type 5 has an invalid length.
[  443.153651][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.600'.
[  443.760931][ T1205] em28xx 1-1:0.132: Video interface 132 found:
[  443.844781][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0
[  446.089178][ T1205] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  446.819304][ T8693] bridge0: port 3(syz_tun) entered blocking state
[  446.825869][ T8693] bridge0: port 3(syz_tun) entered disabled state
[  446.833901][ T8693] syz_tun: entered allmulticast mode
[  446.840988][ T8693] syz_tun: entered promiscuous mode
[  446.846843][ T8693] bridge0: port 3(syz_tun) entered blocking state
[  446.853413][ T8693] bridge0: port 3(syz_tun) entered forwarding state
[  447.379099][ T1205] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  447.489507][ T1205] em28xx 1-1:0.132: board has no eeprom
[  447.579142][ T1205] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  447.610477][ T1205] em28xx 1-1:0.132: analog set to bulk mode.
[  447.616663][   T24] em28xx 1-1:0.132: Registering V4L2 extension
[  447.721769][ T1205] usb 1-1: USB disconnect, device number 15
[  447.813309][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.604'.
[  447.897643][ T1205] em28xx 1-1:0.132: Disconnecting em28xx
[  448.892084][ T8717] syzkaller0: entered promiscuous mode
[  448.897978][ T8717] syzkaller0: entered allmulticast mode
[  449.250850][ T8711] tmpfs: Bad value for 'mpol'
[  449.790516][   T24] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  449.852879][   T24] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  450.409394][ T8727] slcan: can't register candev
[  450.414476][ T8727] Falling back ldisc for ttyS3.
[  450.560869][   T24] em28xx 1-1:0.132: No AC97 audio processor
[  450.572820][   T24] usb 1-1: Decoder not found
[  450.577578][   T24] em28xx 1-1:0.132: failed to create media graph
[  450.611084][   T24] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  450.649867][   T24] em28xx 1-1:0.132: Remote control support is not available for this card.
[  450.658662][ T1205] em28xx 1-1:0.132: Closing input extension
[  450.902212][ T1205] em28xx 1-1:0.132: Freeing device
[  454.203746][ T8754] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  454.368074][ T8754] futex_wake_op: syz.0.611 tries to shift op by -1; fix this program
[  454.652685][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  454.762789][ T8521] veth0_vlan: entered promiscuous mode
[  454.784369][ T8521] veth1_vlan: entered promiscuous mode
[  454.859358][   T10] usb 2-1: Using ep0 maxpacket: 32
[  454.881184][ T8521] veth0_macvtap: entered promiscuous mode
[  455.000951][   T10] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  455.076438][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'.
[  455.654168][ T8521] veth1_macvtap: entered promiscuous mode
[  455.660778][   T10] usb 2-1: config 0 has no interface number 0
[  456.049785][   T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  456.189022][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.236809][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.256584][   T10] usb 2-1: config 0 descriptor??
[  456.336169][   T10] usb 2-1: can't set config #0, error -71
[  456.355398][   T10] usb 2-1: USB disconnect, device number 17
[  456.358155][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.390831][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.569053][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.578917][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.662459][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.736552][ T8775] tmpfs: Bad value for 'mpol'
[  457.615524][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  457.626868][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.653831][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  457.665428][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.677580][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.758036][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.877361][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.944827][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.973583][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.225577][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.243652][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.293611][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.554225][ T8785] tmpfs: Bad value for 'mpol'
[  458.992127][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'.
[  459.001200][ T8786] netlink: 'syz.4.621': attribute type 5 has an invalid length.
[  459.009038][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.621'.
[  459.271716][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  459.282254][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  459.293174][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  460.143857][ T8788] slcan: can't register candev
[  460.149258][ T8788] Falling back ldisc for ttyS3.
[  460.195677][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1
[  460.527996][ T8521] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  460.610754][ T8521] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  460.927950][ T8521] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  460.956994][ T8521] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.301294][ T8799] tmpfs: Bad value for 'mpol'
[  462.187456][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[  462.321660][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'.
[  462.330734][ T8807] netlink: 'syz.1.626': attribute type 5 has an invalid length.
[  462.338464][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.626'.
[  463.008223][ T7208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.028090][ T7208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.438152][ T5884] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  463.859090][ T5884] usb 5-1: Using ep0 maxpacket: 32
[  463.872878][ T3119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.886825][ T5884] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  463.917153][ T5884] usb 5-1: config 0 has no interface number 0
[  463.929054][ T3119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.939592][ T5884] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  463.980650][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.988793][ T5884] usb 5-1: Product: syz
[  464.027688][ T5884] usb 5-1: Manufacturer: syz
[  464.052316][ T5884] usb 5-1: SerialNumber: syz
[  464.274883][ T5884] usb 5-1: config 0 descriptor??
[  464.583124][ T8828] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  464.598906][ T8828] futex_wake_op: syz.1.631 tries to shift op by -1; fix this program
[  465.079109][ T5884] radio-si470x 5-1:0.35: this is not a si470x device.
[  465.113544][ T5884] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  465.791023][ T8836] binder: 8831:8836 ioctl c0306201 0 returned -14
[  466.500303][ T5821] usb 5-1: USB disconnect, device number 14
[  467.170859][ T8848] futex_wake_op: syz.3.633 tries to shift op by -1; fix this program
[  469.961248][ T5884] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  470.229258][ T5884] usb 5-1: Using ep0 maxpacket: 32
[  470.339033][ T5884] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  470.505120][ T5884] usb 5-1: config 0 has no interface number 0
[  470.541757][ T5884] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  470.567301][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.589480][ T5884] usb 5-1: Product: syz
[  470.601386][ T5884] usb 5-1: Manufacturer: syz
[  470.624246][ T5884] usb 5-1: SerialNumber: syz
[  470.650421][ T5884] usb 5-1: config 0 descriptor??
[  470.707408][ T8870] geneve0: entered allmulticast mode
[  470.726666][ T8870] netlink: 'syz.0.642': attribute type 23 has an invalid length.
[  470.992121][ T8878] cifs: Unknown parameter '��IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  470.992121][ T8878] S�Ș�ȞZ�6��'
[  471.039813][ T5821] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  471.210973][ T5884] radio-si470x 5-1:0.35: this is not a si470x device.
[  471.222588][ T5821] usb 2-1: Using ep0 maxpacket: 16
[  471.254647][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.282106][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  471.302348][ T5884] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  471.347957][ T5821] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.04
[  471.373771][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.402343][ T5821] usb 2-1: config 0 descriptor??
[  472.181300][ T5884] usb 5-1: USB disconnect, device number 15
[  472.613676][ T8903] can0: slcan on ttyS3.
[  473.411502][ T5821] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0
[  473.430375][ T5821] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0
[  473.467350][ T5821] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0
[  473.695428][ T5821] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0
[  474.200355][ T8890] can0 (unregistered): slcan off ttyS3.
[  474.213452][ T5821] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device
[  474.350100][ T5821] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse
[  474.396914][ T5821] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -71
[  474.438419][ T5821] usb 2-1: USB disconnect, device number 18
[  475.117616][ T8916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'.
[  475.141937][ T8916] 9pnet_fd: Insufficient options for proto=fd
[  475.399333][ T1205] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  475.973858][ T8929] fuse: Bad value for 'user_id'
[  475.978834][ T8929] fuse: Bad value for 'user_id'
[  476.476790][ T1205] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  476.520353][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.660'.
[  476.529689][ T8930] netlink: 'syz.6.660': attribute type 5 has an invalid length.
[  476.537412][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.6.660'.
[  476.554553][ T8930] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  476.564207][ T8930] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  476.573108][ T8930] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  476.592386][ T8930] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  476.604029][ T8930] geneve2: entered promiscuous mode
[  476.610142][ T8930] geneve2: entered allmulticast mode
[  477.449245][ T1205] usb 4-1: config 1 has no interface number 1
[  477.488569][ T1205] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  477.822596][ T1205] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  478.603351][ T5874] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  478.644179][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.666905][ T1205] usb 4-1: Product: syz
[  478.671292][ T1205] usb 4-1: Manufacturer: syz
[  478.676073][ T1205] usb 4-1: SerialNumber: syz
[  478.923496][ T1205] usb 4-1: can't set config #1, error -71
[  478.951087][ T1205] usb 4-1: USB disconnect, device number 11
[  479.459845][ T5874] usb 7-1: Using ep0 maxpacket: 32
[  479.471281][ T5874] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[  480.069600][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'.
[  480.078440][ T8951] netlink: 'syz.4.665': attribute type 5 has an invalid length.
[  480.086158][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'.
[  480.440493][ T5874] usb 7-1: config 0 has no interface number 0
[  480.823520][ T5874] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  480.844563][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.074251][ T5874] usb 7-1: Product: syz
[  481.091945][ T5874] usb 7-1: Manufacturer: syz
[  481.106820][ T5874] usb 7-1: SerialNumber: syz
[  481.118097][ T5874] usb 7-1: config 0 descriptor??
[  481.223739][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.669'.
[  481.469918][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'.
[  482.219754][ T5874] radio-si470x 7-1:0.35: this is not a si470x device.
[  482.265072][ T5874] radio-raremono 7-1:0.35: this is not Thanko's Raremono.
[  482.505194][ T5874] usb 7-1: USB disconnect, device number 2
[  484.420588][ T5884] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  484.523494][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.582139][   T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  484.656244][ T5884] usb 2-1: config 0 has no interfaces?
[  484.681116][ T5884] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  484.745622][ T8980] 9pnet: Could not find request transport: fd0x0000000000000003
[  484.897627][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.996224][ T8984] fuse: Bad value for 'user_id'
[  485.001250][ T8984] fuse: Bad value for 'user_id'
[  485.080253][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.174229][   T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  485.223653][ T5884] usb 2-1: Product: syz
[  485.228341][ T5884] usb 2-1: Manufacturer: syz
[  485.233368][ T5884] usb 2-1: SerialNumber: syz
[  485.241059][ T5884] usb 2-1: config 0 descriptor??
[  485.304776][ T8985] syzkaller0: entered promiscuous mode
[  485.310409][ T8985] syzkaller0: entered allmulticast mode
[  485.393043][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.419261][   T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  485.561488][ T5884] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  485.609544][ T8992] netlink: 'syz.1.674': attribute type 1 has an invalid length.
[  485.617404][ T8992] netlink: 224 bytes leftover after parsing attributes in process `syz.1.674'.
[  485.799069][ T5884] usb 1-1: Using ep0 maxpacket: 32
[  485.808853][ T5884] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  485.829114][ T5884] usb 1-1: config 0 has no interface number 0
[  485.837458][ T5884] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  485.857158][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.899144][ T5884] usb 1-1: Product: syz
[  485.906887][ T5884] usb 1-1: Manufacturer: syz
[  485.917886][ T5884] usb 1-1: SerialNumber: syz
[  485.941073][ T5884] usb 1-1: config 0 descriptor??
[  485.995049][ T8995] netlink: 'syz.4.672': attribute type 21 has an invalid length.
[  486.532586][ T5884] radio-si470x 1-1:0.35: this is not a si470x device.
[  486.594170][ T5884] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  487.688715][ T8995] netlink: 'syz.4.672': attribute type 6 has an invalid length.
[  487.697555][ T8995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.672'.
[  487.748548][ T1205] usb 2-1: USB disconnect, device number 19
[  487.973177][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.029135][   T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  488.377742][ T5904] usb 1-1: USB disconnect, device number 16
[  489.027576][ T9019] SET target dimension over the limit!
[  489.836384][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.683'.
[  490.107473][ T9013] syzkaller0: entered promiscuous mode
[  490.113054][ T9013] syzkaller0: entered allmulticast mode
[  491.177987][ T9041] netlink: 'syz.0.686': attribute type 23 has an invalid length.
[  492.364393][ T9051] fuse: Bad value for 'user_id'
[  492.369480][ T9051] fuse: Bad value for 'user_id'
[  494.359114][ T5904] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  494.549123][ T5904] usb 7-1: Using ep0 maxpacket: 32
[  494.629548][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  494.651085][ T5904] usb 7-1: config 0 has an invalid interface number: 132 but max is 0
[  494.666187][ T5904] usb 7-1: config 0 has no interface number 0
[  494.679902][ T5904] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  494.786627][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'.
[  494.795640][ T9069] netlink: 'syz.0.693': attribute type 5 has an invalid length.
[  494.803829][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'.
[  495.337747][ T9069] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  495.346806][ T9069] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  495.355504][ T9069] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  495.364141][ T9069] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  495.373105][ T9069] geneve2: entered promiscuous mode
[  495.378307][ T9069] geneve2: entered allmulticast mode
[  495.389157][ T5904] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  495.399337][   T10] usb 5-1: Using ep0 maxpacket: 32
[  495.529817][   T10] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  495.576442][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.588427][   T36] bridge_slave_1: left allmulticast mode
[  495.588579][   T10] usb 5-1: config 0 has no interface number 0
[  495.614700][ T5904] usb 7-1: Product: syz
[  495.619941][   T36] bridge_slave_1: left promiscuous mode
[  495.624881][ T5904] usb 7-1: Manufacturer: syz
[  495.625743][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  495.634612][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  495.648029][ T5904] usb 7-1: SerialNumber: syz
[  495.666241][ T5904] usb 7-1: config 0 descriptor??
[  495.674004][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.692716][   T36] bridge_slave_0: left allmulticast mode
[  495.695754][ T5904] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  495.708840][   T36] bridge_slave_0: left promiscuous mode
[  495.720851][   T10] usb 5-1: Product: syz
[  495.729470][   T10] usb 5-1: Manufacturer: syz
[  495.734379][   T10] usb 5-1: SerialNumber: syz
[  495.735767][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.739784][ T5904] em28xx 7-1:0.132: Video interface 132 found:
[  495.787628][   T10] usb 5-1: config 0 descriptor??
[  495.964992][ T9077] cifs: Unknown parameter '��IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  495.964992][ T9077] S�Ș�ȞZ�6��'
[  496.900522][   T10] radio-si470x 5-1:0.35: this is not a si470x device.
[  497.078242][ T5904] em28xx 7-1:0.132: unknown em28xx chip ID (0)
[  497.190744][   T10] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  497.282021][   T10] usb 5-1: USB disconnect, device number 16
[  497.711168][ T5904] em28xx 7-1:0.132: failed to get i2c transfer status from bridge register (error=-5)
[  497.722053][ T5904] em28xx 7-1:0.132: board has no eeprom
[  498.702474][ T9094] slcan: can't register candev
[  498.707498][ T9094] Falling back ldisc for ttyS3.
[  498.900161][ T5904] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  498.908055][ T5904] em28xx 7-1:0.132: analog set to bulk mode.
[  498.918412][ T5884] em28xx 7-1:0.132: Registering V4L2 extension
[  499.079394][ T5904] usb 7-1: USB disconnect, device number 3
[  499.093975][ T5884] em28xx 7-1:0.132: failed to trigger read from i2c address 0x4a (error=-19)
[  499.104764][ T5884] em28xx 7-1:0.132: failed to trigger read from i2c address 0x48 (error=-19)
[  499.114598][ T5884] em28xx 7-1:0.132: failed to trigger read from i2c address 0x42 (error=-19)
[  499.124876][ T5904] em28xx 7-1:0.132: Disconnecting em28xx
[  499.247030][ T5884] em28xx 7-1:0.132: Config register raw data: 0xffffffed
[  499.272651][ T5884] em28xx 7-1:0.132: AC97 chip type couldn't be determined
[  499.302343][ T5884] em28xx 7-1:0.132: No AC97 audio processor
[  499.330360][ T5884] usb 7-1: Decoder not found
[  499.335104][ T5884] em28xx 7-1:0.132: failed to create media graph
[  499.363013][ T5884] em28xx 7-1:0.132: V4L2 device video103 deregistered
[  499.390743][ T5884] em28xx 7-1:0.132: Remote control support is not available for this card.
[  499.419078][ T5904] em28xx 7-1:0.132: Closing input extension
[  499.454221][ T5904] em28xx 7-1:0.132: Freeing device
[  499.956971][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  499.983408][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  500.000534][   T36] bond0 (unregistering): Released all slaves
[  500.339503][   T36] tipc: Disabling bearer <udp:syz2>
[  500.352147][   T36] tipc: Left network mode
[  500.739377][ T5874] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  501.259851][ T5874] usb 2-1: Using ep0 maxpacket: 32
[  501.421143][ T5874] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  501.503222][ T5874] usb 2-1: config 0 has no interface number 0
[  501.517120][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  501.523595][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  501.585892][ T5874] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  501.599072][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.673324][ T5874] usb 2-1: Product: syz
[  501.749041][ T5874] usb 2-1: Manufacturer: syz
[  501.772241][ T5874] usb 2-1: SerialNumber: syz
[  501.829441][ T5874] usb 2-1: config 0 descriptor??
[  502.331839][   T36] hsr_slave_0: left promiscuous mode
[  502.369173][   T36] hsr_slave_1: left promiscuous mode
[  502.376399][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.389586][ T5874] radio-si470x 2-1:0.35: this is not a si470x device.
[  502.416149][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  502.437939][ T5874] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  502.474997][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  502.505327][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  502.756228][   T36] veth1_macvtap: left promiscuous mode
[  502.789623][   T36] veth0_macvtap: left promiscuous mode
[  502.799328][   T36] veth1_vlan: left promiscuous mode
[  502.805850][   T36] veth0_vlan: left promiscuous mode
[  502.851369][ T5884] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  502.953833][ T9151] netlink: 'syz.0.702': attribute type 21 has an invalid length.
[  503.040258][ T5884] usb 5-1: Using ep0 maxpacket: 32
[  503.074500][ T5884] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  503.129120][ T5884] usb 5-1: config 0 has no interface number 0
[  503.175372][ T5884] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  503.238061][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.290343][ T5884] usb 5-1: Product: syz
[  503.317074][ T5884] usb 5-1: Manufacturer: syz
[  503.352282][ T5884] usb 5-1: SerialNumber: syz
[  503.361482][ T9156] netlink: 'syz.6.707': attribute type 21 has an invalid length.
[  503.420227][ T5884] usb 5-1: config 0 descriptor??
[  503.428545][ T5874] usb 2-1: USB disconnect, device number 20
[  503.869058][ T5874] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  503.975665][ T5884] radio-si470x 5-1:0.35: this is not a si470x device.
[  504.022251][ T5884] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  504.059171][ T5874] usb 2-1: Using ep0 maxpacket: 16
[  504.193655][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  504.215821][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  504.248174][ T5874] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.04
[  504.269838][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.379593][ T5874] usb 2-1: config 0 descriptor??
[  504.817455][ T5874] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0
[  504.828790][ T5874] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0
[  504.855104][ T5874] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0
[  504.932776][ T5874] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0
[  504.998570][   T36] team0 (unregistering): Port device team_slave_1 removed
[  505.044576][ T5874] kovaplus 0003:1E7D:2D50.0008: couldn't init struct kovaplus_device
[  505.057096][ T5874] kovaplus 0003:1E7D:2D50.0008: couldn't install mouse
[  505.068587][   T36] team0 (unregistering): Port device team_slave_0 removed
[  505.085577][ T5874] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -71
[  505.131404][ T5874] usb 2-1: USB disconnect, device number 21
[  505.759691][ T5904] usb 5-1: USB disconnect, device number 17
[  506.019667][ T5884] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  506.267695][ T5884] usb 4-1: Using ep0 maxpacket: 32
[  506.275691][ T5884] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  506.330379][ T5884] usb 4-1: config 0 has no interface number 0
[  506.471766][ T5884] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  506.487575][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.404036][ T5884] usb 4-1: Product: syz
[  507.408280][ T5884] usb 4-1: Manufacturer: syz
[  507.413033][ T5884] usb 4-1: SerialNumber: syz
[  507.707285][ T5874] libceph: connect (1)[c::]:6789 error -101
[  507.719566][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  507.813735][ T5884] usb 4-1: config 0 descriptor??
[  507.814368][ T5874] libceph: connect (1)[c::]:6789 error -101
[  507.857880][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[  508.093516][ T9174] ceph: No mds server is up or the cluster is laggy
[  508.105361][ T9151] netlink: 'syz.0.702': attribute type 6 has an invalid length.
[  508.117769][ T9151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.702'.
[  508.342896][   T24] libceph: connect (1)[c::]:6789 error -101
[  508.350312][ T5884] radio-si470x 4-1:0.35: this is not a si470x device.
[  508.495699][ T5884] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  508.575540][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  508.939877][ T9156] netlink: 'syz.6.707': attribute type 6 has an invalid length.
[  508.970742][ T9156] netlink: 132 bytes leftover after parsing attributes in process `syz.6.707'.
[  509.078791][ T5884] usb 4-1: USB disconnect, device number 12
[  509.849367][ T5874] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  510.655046][ T5874] usb 5-1: Using ep0 maxpacket: 32
[  510.681069][ T5874] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  510.708726][ T5874] usb 5-1: config 0 has no interface number 0
[  510.788591][ T9205] fuse: Unknown parameter 'fd0x0000000000000007'
[  511.434756][ T5874] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  511.446516][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.454939][ T5874] usb 5-1: Product: syz
[  511.459217][ T5874] usb 5-1: Manufacturer: syz
[  511.463932][ T5874] usb 5-1: SerialNumber: syz
[  511.482225][ T5874] usb 5-1: config 0 descriptor??
[  512.142066][ T5874] radio-si470x 5-1:0.35: this is not a si470x device.
[  512.430194][ T9211] syzkaller0: entered promiscuous mode
[  512.435805][ T9211] syzkaller0: entered allmulticast mode
[  512.716825][ T9221] 9pnet_fd: Insufficient options for proto=fd
[  512.872728][ T5874] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  513.216990][ T9224] ceph: No mds server is up or the cluster is laggy
[  513.229221][ T5904] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  513.310911][ T5871] libceph: connect (1)[c::]:6789 error -101
[  513.402022][ T5871] libceph: mon0 (1)[c::]:6789 connect error
[  513.411950][ T5874] usb 5-1: USB disconnect, device number 18
[  513.531967][ T5904] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  514.265409][ T5904] usb 7-1: config 1 has no interface number 1
[  514.280452][ T5904] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  514.310031][ T5904] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  514.361021][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.375666][ T5904] usb 7-1: Product: syz
[  514.381126][ T5904] usb 7-1: Manufacturer: syz
[  514.385764][ T5904] usb 7-1: SerialNumber: syz
[  515.296875][ T5904] usb 7-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  515.410934][ T5874] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  515.510721][ T5904] usb 7-1: found format II with max.bitrate = 26774, frame size=1
[  515.653574][ T5874] usb 5-1: Using ep0 maxpacket: 32
[  515.665792][ T5904] usb 7-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  515.726185][ T5874] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  515.763156][ T5904] usb 7-1: found format II with max.bitrate = 26774, frame size=1
[  515.866867][ T5904] usb 7-1: failed to enable PITCH for EP 0x82
[  516.101857][ T5874] usb 5-1: config 0 has no interface number 0
[  516.128217][ T5874] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  516.159292][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.882889][ T5904] usb 7-1: USB disconnect, device number 4
[  516.904675][ T5874] usb 5-1: Product: syz
[  516.925419][ T5874] usb 5-1: Manufacturer: syz
[  516.938258][ T5874] usb 5-1: SerialNumber: syz
[  516.968033][ T5874] usb 5-1: config 0 descriptor??
[  517.075159][ T6412] udevd[6412]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  517.356162][   T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  517.810579][ T5874] radio-si470x 5-1:0.35: this is not a si470x device.
[  518.029594][ T5874] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  518.049417][   T24] usb 2-1: Using ep0 maxpacket: 32
[  518.063836][   T24] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  518.087812][   T24] usb 2-1: config 0 has no interface number 0
[  518.124989][   T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  518.146343][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.164800][   T24] usb 2-1: Product: syz
[  518.179051][   T24] usb 2-1: Manufacturer: syz
[  518.189039][   T24] usb 2-1: SerialNumber: syz
[  518.213267][   T24] usb 2-1: config 0 descriptor??
[  518.245961][ T5884] usb 5-1: USB disconnect, device number 19
[  519.053225][   T24] radio-si470x 2-1:0.35: this is not a si470x device.
[  519.369373][   T24] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  519.590691][ T5871] usb 2-1: USB disconnect, device number 22
[  521.048587][ T9270] SET target dimension over the limit!
[  522.916071][ T9282] netlink: 184 bytes leftover after parsing attributes in process `syz.3.735'.
[  523.479284][ T5871] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  524.682550][ T5884] libceph: connect (1)[c::]:6789 error -101
[  524.688735][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[  524.695213][ T9307] netlink: 68 bytes leftover after parsing attributes in process `syz.3.739'.
[  524.759102][ T5871] usb 5-1: Using ep0 maxpacket: 32
[  524.777356][ T9299] ceph: No mds server is up or the cluster is laggy
[  524.777539][ T5871] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  524.802631][ T5870] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  524.820634][ T5871] usb 5-1: config 0 has no interface number 0
[  524.832976][ T5871] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  524.896386][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.939906][ T5871] usb 5-1: Product: syz
[  524.945552][ T5871] usb 5-1: Manufacturer: syz
[  524.950485][ T5871] usb 5-1: SerialNumber: syz
[  524.965986][ T5871] usb 5-1: config 0 descriptor??
[  524.992075][ T5870] usb 2-1: Using ep0 maxpacket: 32
[  525.000421][ T5870] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  525.036152][ T5870] usb 2-1: config 0 has no interface number 0
[  525.050570][ T5870] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  525.066036][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.076111][ T5870] usb 2-1: Product: syz
[  525.080903][ T5870] usb 2-1: Manufacturer: syz
[  525.087173][ T5870] usb 2-1: SerialNumber: syz
[  525.100259][ T5870] usb 2-1: config 0 descriptor??
[  525.362014][ T5884] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  525.500628][ T5871] radio-si470x 5-1:0.35: this is not a si470x device.
[  525.529934][ T5884] usb 1-1: Using ep0 maxpacket: 32
[  525.566003][ T5884] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  525.566633][ T5871] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  525.597704][ T5884] usb 1-1: config 0 has no interface number 0
[  525.634440][ T5884] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  525.651128][ T5870] radio-si470x 2-1:0.35: this is not a si470x device.
[  525.685083][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.707330][ T5870] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  525.717338][ T5884] usb 1-1: Product: syz
[  525.729158][ T5884] usb 1-1: Manufacturer: syz
[  525.733941][ T5884] usb 1-1: SerialNumber: syz
[  525.778482][ T5884] usb 1-1: config 0 descriptor??
[  526.789116][ T5884] radio-si470x 1-1:0.35: this is not a si470x device.
[  526.795129][   T24] usb 5-1: USB disconnect, device number 20
[  526.804270][ T5870] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  526.828555][ T5884] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  527.110789][ T5870] usb 7-1: Using ep0 maxpacket: 32
[  527.131593][ T5870] usb 7-1: config 0 has an invalid interface number: 35 but max is 0
[  527.154956][ T1205] usb 2-1: USB disconnect, device number 23
[  527.175786][ T5870] usb 7-1: config 0 has no interface number 0
[  527.904508][   T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  527.947422][ T5870] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  527.984187][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.006843][ T5870] usb 7-1: Product: syz
[  528.017371][ T5870] usb 7-1: Manufacturer: syz
[  528.029162][ T5870] usb 7-1: SerialNumber: syz
[  528.128731][ T5884] usb 1-1: USB disconnect, device number 17
[  528.190559][ T5870] usb 7-1: config 0 descriptor??
[  528.750015][ T5870] radio-si470x 7-1:0.35: this is not a si470x device.
[  529.026344][   T24] usb 5-1: Using ep0 maxpacket: 16
[  529.096206][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  529.124987][ T5870] radio-raremono 7-1:0.35: this is not Thanko's Raremono.
[  529.133505][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  529.172648][   T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.04
[  529.200377][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.237040][   T24] usb 5-1: config 0 descriptor??
[  529.665587][ T5821] usb 7-1: USB disconnect, device number 5
[  530.271580][ T5870] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  530.299507][ T5884] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  530.351069][   T24] usbhid 5-1:0.0: can't add hid device: -71
[  530.378127][   T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  530.499102][ T5884] usb 2-1: Using ep0 maxpacket: 32
[  530.579075][ T5870] usb 1-1: Using ep0 maxpacket: 32
[  530.586036][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  530.618637][ T5884] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  530.627550][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  530.639918][   T24] usb 5-1: USB disconnect, device number 21
[  530.648307][ T5884] usb 2-1: config 0 has no interface number 0
[  531.350750][ T5870] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  531.415771][ T5884] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  531.427842][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.454507][ T5884] usb 2-1: Product: syz
[  531.464392][ T5884] usb 2-1: Manufacturer: syz
[  531.474532][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.492853][ T5884] usb 2-1: SerialNumber: syz
[  531.508262][ T5870] usb 1-1: Product: syz
[  532.001038][ T5870] usb 1-1: Manufacturer: syz
[  532.057481][ T5870] usb 1-1: SerialNumber: syz
[  532.061753][ T5884] usb 2-1: config 0 descriptor??
[  532.080956][ T5870] usb 1-1: config 0 descriptor??
[  532.162842][ T5870] usb 1-1: can't set config #0, error -71
[  532.222965][ T5870] usb 1-1: USB disconnect, device number 18
[  532.256577][ T9379] cifs: Unknown parameter '��IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  532.256577][ T9379] S�Ș�ȞZ�6��'
[  532.315191][ T5884] radio-si470x 2-1:0.35: this is not a si470x device.
[  532.594133][ T5884] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  532.654250][ T5884] usb 2-1: USB disconnect, device number 24
[  532.661334][ T9389] netlink: 68 bytes leftover after parsing attributes in process `syz.4.753'.
[  532.699064][ T5870] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  532.869742][ T5870] usb 1-1: Using ep0 maxpacket: 32
[  532.883246][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88
[  532.956729][ T9398] 9pnet_fd: Insufficient options for proto=fd
[  532.974224][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  533.015802][ T5870] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  533.019303][ T5884] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  533.054628][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.082489][ T5870] usb 1-1: Product: syz
[  533.093159][ T5870] usb 1-1: Manufacturer: syz
[  533.104570][ T5870] usb 1-1: SerialNumber: syz
[  533.127703][ T5870] usb 1-1: config 0 descriptor??
[  533.143504][ T5870] usb 1-1: no audio or video endpoints found
[  533.316224][ T5873] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  533.323997][ T5884] usb 2-1: Using ep0 maxpacket: 32
[  533.344702][ T5884] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  533.375534][ T5884] usb 2-1: config 0 has no interface number 0
[  533.398745][ T5884] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  533.446176][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.464247][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'.
[  533.643317][ T9405] ceph: No mds server is up or the cluster is laggy
[  533.651977][ T5904] libceph: connect (1)[c::]:6789 error -101
[  533.657997][ T5904] libceph: mon0 (1)[c::]:6789 connect error
[  533.672831][ T5884] usb 2-1: Product: syz
[  533.677805][ T5884] usb 2-1: Manufacturer: syz
[  533.686267][ T5873] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  533.794448][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'.
[  533.803438][ T9413] netlink: 'syz.4.758': attribute type 5 has an invalid length.
[  533.811217][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.758'.
[  534.457991][ T5884] usb 2-1: SerialNumber: syz
[  534.464655][ T5873] usb 7-1: config 1 has no interface number 1
[  534.482284][ T5884] usb 2-1: config 0 descriptor??
[  534.489160][ T5873] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  534.530367][ T5873] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  534.544041][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.553162][ T5873] usb 7-1: Product: syz
[  534.569128][ T5873] usb 7-1: Manufacturer: syz
[  534.584356][ T5873] usb 7-1: SerialNumber: syz
[  535.764725][ T5884] radio-si470x 2-1:0.35: this is not a si470x device.
[  535.773519][ T5873] usb 7-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  535.789409][ T5873] usb 7-1: found format II with max.bitrate = 26774, frame size=1
[  535.802531][ T5884] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  535.863359][ T5873] usb 7-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  535.873201][ T5873] usb 7-1: found format II with max.bitrate = 26774, frame size=1
[  535.885105][ T5884] usb 2-1: USB disconnect, device number 25
[  535.960922][ T5873] usb 7-1: failed to enable PITCH for EP 0x82
[  536.176377][ T5904] usb 1-1: USB disconnect, device number 19
[  536.951717][ T5873] usb 7-1: USB disconnect, device number 6
[  537.148899][ T6319] udevd[6319]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  537.377722][ T9445] netfs: Couldn't get user pages (rc=-14)
[  537.495715][ T9448] cifs: Unknown parameter '��IT�&��:���"����1:���ӭ'�4,�Zz-#F�<��]%gC��
[  537.495715][ T9448] S�Ș�ȞZ�6��'
[  538.102208][ T9463] netlink: 68 bytes leftover after parsing attributes in process `syz.6.768'.
[  538.551040][   T36] ==================================================================
[  538.559167][   T36] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x1da/0x5f0
[  538.566936][   T36] Read of size 4 at addr ffff88807a3bd9f8 by task kworker/u8:2/36
[  538.574771][   T36] 
[  538.577130][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) 
[  538.577158][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  538.577172][   T36] Workqueue: events_unbound netfs_write_collection_worker
[  538.577222][   T36] Call Trace:
[  538.577230][   T36]  <TASK>
[  538.577243][   T36]  dump_stack_lvl+0x189/0x250
[  538.577273][   T36]  ? __kasan_check_byte+0x12/0x40
[  538.577304][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  538.577332][   T36]  ? lock_release+0x4b/0x3e0
[  538.577357][   T36]  ? lock_release+0x4b/0x3e0
[  538.577386][   T36]  ? __virt_addr_valid+0x469/0x540
[  538.577412][   T36]  print_report+0xb4/0x290
[  538.577436][   T36]  ? iov_iter_revert+0x1da/0x5f0
[  538.577459][   T36]  kasan_report+0x118/0x150
[  538.577490][   T36]  ? iov_iter_revert+0x1da/0x5f0
[  538.577518][   T36]  iov_iter_revert+0x1da/0x5f0
[  538.577546][   T36]  netfs_retry_writes+0x1645/0x1840
[  538.577567][   T36]  ? ret_from_fork_asm+0x1a/0x30
[  538.577600][   T36]  ? __pfx_stack_trace_save+0x10/0x10
[  538.577623][   T36]  ? check_path+0x21/0x40
[  538.577652][   T36]  ? __pfx_netfs_retry_writes+0x10/0x10
[  538.577677][   T36]  ? __lock_acquire+0xaac/0xd20
[  538.577708][   T36]  netfs_write_collection_worker+0x2007/0x2bd0
[  538.577758][   T36]  ? process_scheduled_works+0x9ec/0x17a0
[  538.577788][   T36]  process_scheduled_works+0xadb/0x17a0
[  538.577832][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  538.577870][   T36]  worker_thread+0x8a0/0xda0
[  538.577912][   T36]  kthread+0x70e/0x8a0
[  538.577935][   T36]  ? __pfx_worker_thread+0x10/0x10
[  538.577972][   T36]  ? __pfx_kthread+0x10/0x10
[  538.577994][   T36]  ? __pfx_kthread+0x10/0x10
[  538.578014][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  538.578045][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  538.578066][   T36]  ? __pfx_kthread+0x10/0x10
[  538.578085][   T36]  ret_from_fork+0x4b/0x80
[  538.578103][   T36]  ? __pfx_kthread+0x10/0x10
[  538.578122][   T36]  ret_from_fork_asm+0x1a/0x30
[  538.578159][   T36]  </TASK>
[  538.578167][   T36] 
[  538.777295][   T36] Allocated by task 9445:
[  538.781623][   T36]  kasan_save_track+0x3e/0x80
[  538.786309][   T36]  __kasan_kmalloc+0x93/0xb0
[  538.790903][   T36]  __kmalloc_cache_noprof+0x230/0x3d0
[  538.796327][   T36]  kmem_cache_free+0x169/0x3f0
[  538.801101][   T36]  p9_req_put+0x19b/0x1f0
[  538.805439][   T36]  p9_client_open+0x2a4/0x3c0
[  538.810126][   T36]  v9fs_file_open+0x36d/0x990
[  538.814801][   T36]  do_dentry_open+0xdf0/0x1970
[  538.819565][   T36]  vfs_open+0x3b/0x340
[  538.823631][   T36]  path_openat+0x2ee5/0x3830
[  538.828221][   T36]  do_filp_open+0x1fa/0x410
[  538.832742][   T36]  do_sys_openat2+0x121/0x1c0
[  538.837435][   T36]  __x64_sys_creat+0x8f/0xc0
[  538.842028][   T36]  do_syscall_64+0xf6/0x210
[  538.846532][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.852426][   T36] 
[  538.854747][   T36] Freed by task 5873:
[  538.858745][   T36]  kasan_save_track+0x3e/0x80
[  538.863428][   T36]  kasan_save_free_info+0x46/0x50
[  538.868455][   T36]  __kasan_slab_free+0x62/0x70
[  538.873239][   T36]  kfree+0x193/0x440
[  538.877138][   T36]  slab_free_after_rcu_debug+0x62/0x290
[  538.882696][   T36]  rcu_core+0xca5/0x1710
[  538.886948][   T36]  handle_softirqs+0x283/0x870
[  538.891725][   T36]  __irq_exit_rcu+0xca/0x1f0
[  538.896343][   T36]  irq_exit_rcu+0x9/0x30
[  538.900684][   T36]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  538.906331][   T36]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  538.912402][   T36] 
[  538.914729][   T36] Last potentially related work creation:
[  538.920445][   T36]  kasan_save_stack+0x3e/0x60
[  538.925146][   T36]  kasan_record_aux_stack+0xbc/0xd0
[  538.930356][   T36]  call_rcu+0x142/0x990
[  538.934531][   T36]  kmem_cache_free+0x301/0x3f0
[  538.939305][   T36]  p9_req_put+0x19b/0x1f0
[  538.943646][   T36]  p9_client_open+0x2a4/0x3c0
[  538.948334][   T36]  v9fs_file_open+0x36d/0x990
[  538.953023][   T36]  do_dentry_open+0xdf0/0x1970
[  538.957794][   T36]  vfs_open+0x3b/0x340
[  538.961868][   T36]  path_openat+0x2ee5/0x3830
[  538.966466][   T36]  do_filp_open+0x1fa/0x410
[  538.970982][   T36]  do_sys_openat2+0x121/0x1c0
[  538.975666][   T36]  __x64_sys_creat+0x8f/0xc0
[  538.980256][   T36]  do_syscall_64+0xf6/0x210
[  538.984765][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.990659][   T36] 
[  538.992985][   T36] The buggy address belongs to the object at ffff88807a3bd9c0
[  538.992985][   T36]  which belongs to the cache kmalloc-32 of size 32
[  539.006864][   T36] The buggy address is located 24 bytes to the right of
[  539.006864][   T36]  allocated 32-byte region [ffff88807a3bd9c0, ffff88807a3bd9e0)
[  539.021358][   T36] 
[  539.023689][   T36] The buggy address belongs to the physical page:
[  539.030105][   T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a3bd
[  539.038863][   T36] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  539.046327][   T36] page_type: f5(slab)
[  539.050314][   T36] raw: 00fff00000000000 ffff88801a041780 ffffea0000976340 dead000000000003
[  539.058897][   T36] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000
[  539.067508][   T36] page dumped because: kasan: bad access detected
[  539.073928][   T36] page_owner tracks the page as allocated
[  539.079645][   T36] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5814, tgid 5814 (syz-executor), ts 87394065168, free_ts 87161276245
[  539.098923][   T36]  post_alloc_hook+0x1d8/0x230
[  539.103735][   T36]  get_page_from_freelist+0x21c7/0x22a0
[  539.109370][   T36]  __alloc_frozen_pages_noprof+0x181/0x370
[  539.115183][   T36]  alloc_pages_mpol+0x232/0x4a0
[  539.120053][   T36]  allocate_slab+0x8a/0x3b0
[  539.124560][   T36]  ___slab_alloc+0xbfc/0x1480
[  539.129236][   T36]  __kmalloc_cache_noprof+0x296/0x3d0
[  539.134615][   T36]  batadv_hash_new+0x57/0x290
[  539.139292][   T36]  batadv_bla_init+0x511/0x7b0
[  539.144077][   T36]  batadv_mesh_init+0x3dc/0x700
[  539.148934][   T36]  batadv_meshif_init_late+0xa3a/0xee0
[  539.154409][   T36]  register_netdevice+0x6bc/0x1af0
[  539.159525][   T36]  rtnl_newlink_create+0x305/0xaf0
[  539.164638][   T36]  rtnl_newlink+0x16d6/0x1c70
[  539.169317][   T36]  rtnetlink_rcv_msg+0x7cc/0xb70
[  539.174252][   T36]  netlink_rcv_skb+0x219/0x490
[  539.179019][   T36] page last free pid 5851 tgid 5851 stack trace:
[  539.185344][   T36]  __free_frozen_pages+0xb05/0xcd0
[  539.190459][   T36]  __put_partials+0x161/0x1c0
[  539.195137][   T36]  put_cpu_partial+0x17c/0x250
[  539.199904][   T36]  __slab_free+0x2f7/0x400
[  539.204335][   T36]  qlist_free_all+0x9a/0x140
[  539.208942][   T36]  kasan_quarantine_reduce+0x148/0x160
[  539.214415][   T36]  __kasan_slab_alloc+0x22/0x80
[  539.219278][   T36]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  539.224759][   T36]  __anon_vma_prepare+0xcb/0x4a0
[  539.229693][   T36]  __handle_mm_fault+0x4b7d/0x5380
[  539.234810][   T36]  handle_mm_fault+0x2d5/0x7f0
[  539.239598][   T36]  do_user_addr_fault+0xa81/0x1390
[  539.244720][   T36]  exc_page_fault+0x68/0x110
[  539.249315][   T36]  asm_exc_page_fault+0x26/0x30
[  539.254165][   T36] 
[  539.256487][   T36] Memory state around the buggy address:
[  539.262111][   T36]  ffff88807a3bd880: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  539.270172][   T36]  ffff88807a3bd900: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc
[  539.278234][   T36] >ffff88807a3bd980: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[  539.286289][   T36]                                                                 ^
[  539.294260][   T36]  ffff88807a3bda00: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  539.302325][   T36]  ffff88807a3bda80: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[  539.310383][   T36] ==================================================================
[  539.318593][    C1] vkms_vblank_simulate: vblank timer overrun
[  539.337446][   T36] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  539.344699][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) 
[  539.356696][   T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[  539.366757][   T36] Workqueue: events_unbound netfs_write_collection_worker
[  539.373896][   T36] Call Trace:
[  539.377186][   T36]  <TASK>
[  539.380120][   T36]  dump_stack_lvl+0x99/0x250
[  539.384735][   T36]  ? __asan_memcpy+0x40/0x70
[  539.389344][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  539.394547][   T36]  ? __pfx__printk+0x10/0x10
[  539.399155][   T36]  panic+0x2db/0x790
[  539.403064][   T36]  ? __pfx_preempt_schedule+0x10/0x10
[  539.408440][   T36]  ? __pfx_panic+0x10/0x10
[  539.412865][   T36]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  539.418766][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  539.425198][   T36]  ? iov_iter_revert+0x1da/0x5f0
[  539.430148][   T36]  check_panic_on_warn+0x89/0xb0
[  539.435192][   T36]  ? iov_iter_revert+0x1da/0x5f0
[  539.440224][   T36]  end_report+0x78/0x160
[  539.444485][   T36]  kasan_report+0x129/0x150
[  539.449006][   T36]  ? iov_iter_revert+0x1da/0x5f0
[  539.454063][   T36]  iov_iter_revert+0x1da/0x5f0
[  539.458847][   T36]  netfs_retry_writes+0x1645/0x1840
[  539.464049][   T36]  ? ret_from_fork_asm+0x1a/0x30
[  539.469003][   T36]  ? __pfx_stack_trace_save+0x10/0x10
[  539.474380][   T36]  ? check_path+0x21/0x40
[  539.478723][   T36]  ? __pfx_netfs_retry_writes+0x10/0x10
[  539.484277][   T36]  ? __lock_acquire+0xaac/0xd20
[  539.489140][   T36]  netfs_write_collection_worker+0x2007/0x2bd0
[  539.495326][   T36]  ? process_scheduled_works+0x9ec/0x17a0
[  539.501061][   T36]  process_scheduled_works+0xadb/0x17a0
[  539.506630][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  539.512647][   T36]  worker_thread+0x8a0/0xda0
[  539.517260][   T36]  kthread+0x70e/0x8a0
[  539.521334][   T36]  ? __pfx_worker_thread+0x10/0x10
[  539.526468][   T36]  ? __pfx_kthread+0x10/0x10
[  539.531074][   T36]  ? __pfx_kthread+0x10/0x10
[  539.535668][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  539.540878][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  539.546081][   T36]  ? __pfx_kthread+0x10/0x10
[  539.550676][   T36]  ret_from_fork+0x4b/0x80
[  539.555098][   T36]  ? __pfx_kthread+0x10/0x10
[  539.559694][   T36]  ret_from_fork_asm+0x1a/0x30
[  539.564478][   T36]  </TASK>
[  539.567652][   T36] Kernel Offset: disabled
[  539.571972][   T36] Rebooting in 86400 seconds..