last executing test programs:

42m55.430432461s ago: executing program 32 (id=88):
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
getdents64(r4, 0xfffffffffffffffe, 0x29)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = epoll_create1(0x0)
r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r6, r7, 0x11, 0x0, r6}, 0x11)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
r8 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCMSET(r8, 0x5418, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8)
fallocate(r1, 0x20, 0x0, 0x8000)
r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x8002)
ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0})

27m32.52302598s ago: executing program 33 (id=3014):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="45ec", 0x2}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x40800)
r2 = syz_io_uring_setup(0xbdf, &(0x7f0000000640)={0x0, 0xe827, 0x10000, 0x3, 0x3be}, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x2})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

24m59.520043574s ago: executing program 3 (id=3287):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffff1f, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

24m57.684360382s ago: executing program 3 (id=3293):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20)

24m57.092698957s ago: executing program 34 (id=3293):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20)

22m20.272143692s ago: executing program 35 (id=3610):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x79374f5eb7667e9f)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000007b1d0ee5d8"], 0x0}, 0x0)

20m36.204841477s ago: executing program 36 (id=3858):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@hyper})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x9})

20m33.737130841s ago: executing program 37 (id=3868):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0)
dup3(r0, r1, 0x0)
r2 = syz_open_dev$vcsa(0x0, 0x6, 0x30080)
r3 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x2a, 0x800000000004, @thr={&(0x7f0000000100)="840e1e6828f8688ff47fcf061a9a80813b9b772ccd0ba3a612", &(0x7f0000000900)}}, 0x0)
fcntl$setown(r2, 0x8, r3)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r5, 0x3)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]})
connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040009000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

20m31.614713461s ago: executing program 38 (id=3876):
r0 = syz_usb_connect$midi(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003cc000000cc03f7"]}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000300)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}}, 0x0)

20m31.609239931s ago: executing program 2 (id=3878):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

20m30.809834245s ago: executing program 2 (id=3879):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000780)={0x0, 0x17, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

20m27.686034307s ago: executing program 2 (id=3880):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

20m27.412480419s ago: executing program 2 (id=3881):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x50)

20m27.313745883s ago: executing program 2 (id=3882):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='-]-\\($+.\x00', 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000040)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

20m26.861991732s ago: executing program 2 (id=3883):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl726\x00', [0x1, 0x5, 0x29, 0x4, 0xb4, 0xcc5, 0x8, 0x68d, 0x8, 0xe, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x80, 0x7, 0x3, 0x9, 0xb13285ce, 0x8b, 0xcaa9, 0x0, 0x3ff, 0x4bd, 0x1, 0x3b, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]})

20m26.225349838s ago: executing program 39 (id=3883):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl726\x00', [0x1, 0x5, 0x29, 0x4, 0xb4, 0xcc5, 0x8, 0x68d, 0x8, 0xe, 0x7ff, 0xffffffff, 0x1, 0x1, 0x9, 0x80, 0x7, 0x3, 0x9, 0xb13285ce, 0x8b, 0xcaa9, 0x0, 0x3ff, 0x4bd, 0x1, 0x3b, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]})

20m13.891717391s ago: executing program 8 (id=3859):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

20m13.730155857s ago: executing program 8 (id=3885):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[@ANYRES64])

20m13.139031343s ago: executing program 9 (id=3870):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fsopen(&(0x7f0000000080)='nfs4\x00', 0x1)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES8=r0], 0x0)

20m11.318124139s ago: executing program 9 (id=3886):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

20m11.010532343s ago: executing program 9 (id=3887):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x50)

20m10.868345248s ago: executing program 9 (id=3888):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='-]-\\($+.\x00', 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe9"])
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c54}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000040)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

20m10.480353665s ago: executing program 9 (id=3890):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

20m9.664551739s ago: executing program 40 (id=3890):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

20m8.889096272s ago: executing program 8 (id=3894):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

20m8.648054662s ago: executing program 8 (id=3895):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x50)

20m8.373079454s ago: executing program 8 (id=3896):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000007c40)=""/4086, 0xff6}, {&(0x7f0000005700)=""/4089, 0xff9}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f0000008c40)=""/4092, 0xffc}, {&(0x7f0000002700)=""/178, 0xb2}, {&(0x7f0000004700)=""/4087, 0xff7}], 0x6}, 0x0)

20m7.864145966s ago: executing program 8 (id=3897):
r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0xc0045b0f, 0x0)

20m7.402206895s ago: executing program 41 (id=3897):
r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0xc0045b0f, 0x0)

20m7.384748166s ago: executing program 1 (id=3899):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
chdir(&(0x7f0000000180)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0)

20m7.172104395s ago: executing program 1 (id=3901):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x0, 0x3, 0x7, "69118f8633a1f1"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

20m4.664153121s ago: executing program 1 (id=3902):
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_RESET={{0xc}, 0xd}}}, 0x7)

20m4.553026905s ago: executing program 1 (id=3903):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801)
move_mount(r0, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, 0x0, 0x50)

20m4.438453111s ago: executing program 1 (id=3904):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x2c040)
creat(0x0, 0x71)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x0, 0x23, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x9}, 0x0})

20m4.165005902s ago: executing program 0 (id=3905):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc", 0xbd}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a5", 0x6b}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {0x0}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa", 0x89}, {0x0}], 0x9, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)}, {&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe24", 0xbc}], 0x2, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xe}}], 0x48}}], 0x4, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

20m3.165525445s ago: executing program 0 (id=3906):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2f, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20m2.950197583s ago: executing program 1 (id=3907):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

20m2.246263673s ago: executing program 42 (id=3907):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

20m2.180261166s ago: executing program 0 (id=3909):
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x1029577e49}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x7f, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xb3, 0x39da], 0x30000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

20m1.805131702s ago: executing program 0 (id=3910):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801)
move_mount(r0, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, 0x0, 0x50)

20m1.448865867s ago: executing program 0 (id=3911):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0x100, 0x0, 0xfffff800, 0x4, 0x6})

20m0.823875923s ago: executing program 0 (id=3912):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001080)={0x14, &(0x7f0000001000)={0x40, 0x2, 0x8, {0x8, 0x24, "1f429692681c"}}, 0x0}, 0x0)

20m0.41950819s ago: executing program 43 (id=3912):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001080)={0x14, &(0x7f0000001000)={0x40, 0x2, 0x8, {0x8, 0x24, "1f429692681c"}}, 0x0}, 0x0)

19m37.094646228s ago: executing program 3 (id=3891):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

19m36.479119644s ago: executing program 3 (id=3916):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x8b101e, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801)
move_mount(r0, &(0x7f0000000600)='.\x00', 0xffffffffffffff9c, 0x0, 0x50)

19m36.167184267s ago: executing program 3 (id=3918):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704", 0x79}], 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

19m35.076087363s ago: executing program 3 (id=3922):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x5, 0xb, 0x3, 0xfff0, 0x4, 0xe]}}]}]}]}, 0x38}}, 0x0)

19m34.309197585s ago: executing program 44 (id=3922):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x5, 0xb, 0x3, 0xfff0, 0x4, 0xe]}}]}]}]}, 0x38}}, 0x0)

18.373439983s ago: executing program 7 (id=7047):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='-]-\\($+.\x00', 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180"], 0x64}}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe9"])
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c54}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000040)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

15.486477224s ago: executing program 7 (id=7052):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30"], 0xec}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

12.386444043s ago: executing program 4 (id=7056):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r1, 0x11, 0xa, 0x0, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000280)={@local, @dev}, &(0x7f00000002c0)=0xc)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x6}, 0x8)
r3 = creat(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r4, 0x0, {0x0, 0xf0, 0x3}, 0x1}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000100), 0x1}}], 0x4000253, 0x44)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054)

9.468090776s ago: executing program 4 (id=7057):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

9.316100001s ago: executing program 7 (id=7060):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000440))
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4)
socket(0x2b, 0x80801, 0x1)
socket$packet(0x11, 0x3, 0x300)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x10, 0x8020, 0x0, 0x4, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4, 0xe6, 0x1, 0x1}, @rr={0x7, 0x17, 0xb7, [@local, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @timestamp={0x44, 0x24, 0x42, 0x0, 0x5, [0x8, 0x4, 0xcb5, 0x7fff, 0x1, 0x2, 0x1, 0x4]}, @noop]}}}}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')

9.070093961s ago: executing program 4 (id=7061):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='-]-\\($+.\x00', 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180"], 0x64}}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe9"])
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c54}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000040)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

7.657656985s ago: executing program 6 (id=7062):
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r1, 0x0, 0x0)

7.228218082s ago: executing program 6 (id=7064):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c)
ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0)

6.23559553s ago: executing program 6 (id=7065):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000900720303ad7656e9f05606000000e33e89889e0551a1feefe13c39c3e3b7a7dcd0df0121b4514585b6e8c60056024f0a35e56299f7", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
io_uring_setup(0x7e65, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0)

5.849839915s ago: executing program 7 (id=7067):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950f", 0x55}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)

5.783156357s ago: executing program 5 (id=7068):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30"], 0xec}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

5.083595154s ago: executing program 4 (id=7069):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="200d1c"], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000240)={0x20, 0x8, 0xf, "40dc77589c4d8edc697df9ca919cbc"}, 0x0, 0x0})

4.975242579s ago: executing program 6 (id=7070):
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB="00000000010000000000000000"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040)
recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

4.784028616s ago: executing program 5 (id=7071):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xbf, 0x7, 0x946, 0x4, 0x1, 0x9, 0x1ff, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000002c0)=0x100, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x8, 0x6, 0x6}, 0x76}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, 0x0}, 0x4005)

3.535792584s ago: executing program 5 (id=7072):
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r1, 0x0, 0x0)

3.057958183s ago: executing program 5 (id=7073):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
read$FUSE(r2, &(0x7f0000001b40)={0x2020}, 0x205c)
ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0)

2.980333435s ago: executing program 7 (id=7074):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
listen(r0, 0x800)
accept4(r0, 0x0, 0x0, 0x80000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

2.321780661s ago: executing program 6 (id=7075):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd8", 0x79}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd96", 0x1e}, {&(0x7f0000000800)="b56380b7487ff3b0", 0x8}], 0x3, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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"/4093, 0xffd}, {&(0x7f0000000dc0)}], 0x2, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xe}}], 0x48}}], 0x4, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.064114081s ago: executing program 6 (id=7076):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000440))
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4)
socket(0x2b, 0x80801, 0x1)
socket$packet(0x11, 0x3, 0x300)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x10, 0x8020, 0x0, 0x4, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4, 0xe6, 0x1, 0x1}, @rr={0x7, 0x17, 0xb7, [@local, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @timestamp={0x44, 0x24, 0x42, 0x0, 0x5, [0x8, 0x4, 0xcb5, 0x7fff, 0x1, 0x2, 0x1, 0x4]}, @noop]}}}}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')

1.851555039s ago: executing program 7 (id=7077):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='-]-\\($+.\x00', 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180"], 0x64}}, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYBLOB="58e1a192964f91b2b2b082e5b2d36bfb79aa692b33c0fe4f45accc6a979fe9"])
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x74, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3c54}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000040)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

1.846067079s ago: executing program 5 (id=7078):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000900720303ad7656e9f05606000000e33e89889e0551a1feefe13c39c3e3b7a7dcd0df0121b4514585b6e8c60056024f0a35e56299f7", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
io_uring_setup(0x7e65, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0)

564.495429ms ago: executing program 5 (id=7079):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getrusage(0x0, &(0x7f0000000340))
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
getpriority(0x0, r0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x20)
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

554.309329ms ago: executing program 4 (id=7080):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0xbf, 0x7, 0x946, 0x4, 0x1, 0x9, 0x1ff, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000002c0)=0x100, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x8, 0x6, 0x6}, 0x76}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, 0x0}, 0x4005)

0s ago: executing program 4 (id=7081):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x29, 0x1f, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x10, 0x8020, 0x0, 0x4, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4, 0xe6, 0x1, 0x1}, @rr={0x7, 0x17, 0xb7, [@local, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @timestamp={0x44, 0x24, 0x42, 0x0, 0x5, [0x8, 0x4, 0xcb5, 0x7fff, 0x1, 0x2, 0x1, 0x4]}, @noop]}}}}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000f76d81180001801400000000000000000000000400000000000000b2ec9eef5c4ceb69db546f07ca04ba09b0ee04d222e0683cf871a7e069ab728cf170e526f010e030ae57d7236e99f68e1a3c67ddc9165b31cac21f01e73bf207106456c95c62ca85b665ec9e531aceef11f77d70ef88f13690d39994c627b6978285a227d33f1be952c4295d2211f9491df0"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')

kernel console output (not intermixed with test programs):

isconnect, device number 115
[ 2331.668250][T32424] nbd7: detected capacity change from 0 to 63
[ 2331.716882][T18802] block nbd7: Receive control failed (result -104)
[ 2331.905494][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6334'.
[ 2332.444483][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2332.458573][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2332.468487][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2332.499104][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2332.513681][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2332.523616][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2332.728039][T25582] usb 8-1: new high-speed USB device number 69 using dummy_hcd
[ 2332.937407][T25582] usb 8-1: Using ep0 maxpacket: 16
[ 2332.950028][T25582] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2332.974802][T25582] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2333.034517][T25582] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2333.063583][T32459] syzkaller0: entered promiscuous mode
[ 2333.070530][T32459] syzkaller0: entered allmulticast mode
[ 2333.086429][T25582] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2333.117714][T25582] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2333.157983][T25582] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2333.176281][T25582] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2333.186050][T25582] usb 8-1: Manufacturer: syz
[ 2333.212279][T25582] usb 8-1: config 0 descriptor??
[ 2333.598785][T25582] rc_core: IR keymap rc-hauppauge not found
[ 2333.614807][T25582] Registered IR keymap rc-empty
[ 2333.628389][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2333.635237][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2333.684323][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2333.731187][T25582] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 2333.774794][T25582] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input211
[ 2333.797932][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2333.810787][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2333.857900][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2333.877726][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2333.891381][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2333.912352][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2333.928739][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2333.967510][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2333.990250][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2334.048270][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2334.062471][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2334.122609][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2334.161451][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2334.187883][T25582] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2334.245618][T25582] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2334.255940][T25582] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2334.273421][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2334.281746][T25582] usb 8-1: USB disconnect, device number 69
[ 2334.583673][   T51] Bluetooth: hci2: command tx timeout
[ 2334.693124][T32478] nbd: nbd7 already in use
[ 2336.648537][   T51] Bluetooth: hci2: command tx timeout
[ 2337.533268][T32447] chnl_net:caif_netlink_parms(): no params data found
[ 2337.643448][T32488] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6346'.
[ 2337.763119][T32447] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2337.772293][T32447] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2337.781516][T32447] bridge_slave_0: entered allmulticast mode
[ 2337.789665][T32447] bridge_slave_0: entered promiscuous mode
[ 2337.809498][T32447] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2337.816738][T32447] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2337.838005][T32447] bridge_slave_1: entered allmulticast mode
[ 2337.845571][T32447] bridge_slave_1: entered promiscuous mode
[ 2337.973457][T32447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2338.043433][T32447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2338.066853][T32506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6350'.
[ 2338.196337][T32447] team0: Port device team_slave_0 added
[ 2338.272859][T32447] team0: Port device team_slave_1 added
[ 2338.387507][T32516] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2338.401162][T32447] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2338.428288][T32447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2338.477586][T32447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2338.595451][T32447] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2338.602902][T32447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2338.645081][T32447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2338.727689][   T51] Bluetooth: hci2: command tx timeout
[ 2338.809596][T32447] hsr_slave_0: entered promiscuous mode
[ 2338.825202][T32447] hsr_slave_1: entered promiscuous mode
[ 2338.832454][T32447] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2338.840489][T32447] Cannot create hsr debugfs directory
[ 2338.872911][T32523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6353'.
[ 2339.368519][T32527] syzkaller0: entered promiscuous mode
[ 2339.383784][T32527] syzkaller0: entered allmulticast mode
[ 2339.912103][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2340.817111][   T51] Bluetooth: hci2: command tx timeout
[ 2341.852978][T32559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6361'.
[ 2344.262417][T32447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2344.520396][T32447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2344.684291][T32447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2344.841177][T32447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2344.978065][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.984473][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.341354][T32447] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2345.372029][T32447] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2345.392723][T32447] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2345.440903][T32447] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2345.668389][T32583] syzkaller0: entered promiscuous mode
[ 2345.674453][T32583] syzkaller0: entered allmulticast mode
[ 2345.837496][T25582] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 2346.041894][T25582] usb 6-1: config 0 has no interfaces?
[ 2346.056578][T25582] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2346.068421][T25582] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2346.079104][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2346.082403][T25582] usb 6-1: config 0 descriptor??
[ 2346.354646][T25582] usb 6-1: USB disconnect, device number 81
[ 2346.987138][T25582] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 2347.193743][T25582] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2347.216577][T25582] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 2347.237335][T25582] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[ 2347.270497][T25582] usb 6-1: string descriptor 0 read error: -22
[ 2347.277071][T25582] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 2347.286673][T25582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2347.519275][T25582] usb 6-1: Can't get UAC3 power state for id 10
[ 2347.527884][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2347.893782][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2348.096746][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2348.167588][T25582] usb 6-1: 2:0: failed to get current value for ch 0 (-32)
[ 2348.180724][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2348.399389][T25582] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 2349.436961][ T5771] usb 6-1: USB disconnect, device number 82
[ 2350.471674][T32447] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2350.511652][T32447] 8021q: adding VLAN 0 to HW filter on device team0
[ 2350.581237][T15799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2350.588510][T15799] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2350.640390][T15799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2350.647807][T15799] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2350.660383][T32606] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6373'.
[ 2351.152648][T32447] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2351.495471][T32447] veth0_vlan: entered promiscuous mode
[ 2351.516781][T32447] veth1_vlan: entered promiscuous mode
[ 2351.537369][ T5834] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[ 2351.586666][T32447] veth0_macvtap: entered promiscuous mode
[ 2351.609187][T32447] veth1_macvtap: entered promiscuous mode
[ 2351.648690][T32447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2351.659596][T32447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2351.674621][T32447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2351.688003][T32447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2351.699361][T32447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2351.710637][T32447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2351.723002][T32447] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2351.752847][ T5834] usb 7-1: config 0 has no interfaces?
[ 2351.758914][ T5834] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2351.789485][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2351.819661][ T5834] usb 7-1: config 0 descriptor??
[ 2351.889164][T32447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2351.918172][T32447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2351.937844][T32447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2351.957303][T32447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2351.987687][T32447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2352.008621][T32447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2352.039334][T32447] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2352.084673][T32447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2352.086500][T20439] usb 7-1: USB disconnect, device number 96
[ 2352.114364][T32447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2352.132988][T32447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2352.157784][T32447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2352.284354][T32642] syzkaller0: entered promiscuous mode
[ 2352.290312][T32642] syzkaller0: entered allmulticast mode
[ 2352.680224][T20439] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[ 2352.910923][T20439] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2352.945121][T20439] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 2352.956197][T20439] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[ 2352.977912][T20439] usb 7-1: string descriptor 0 read error: -22
[ 2352.984293][T20439] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 2352.993690][T20439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2353.250196][T20439] usb 7-1: Can't get UAC3 power state for id 10
[ 2353.967899][T20439] usb 7-1: 2:0: failed to get current value for ch 0 (-32)
[ 2354.208263][T20439] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2)
[ 2355.280843][T25582] usb 7-1: USB disconnect, device number 97
[ 2356.516935][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 30 seconds
[ 2356.543561][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 30 seconds
[ 2356.556967][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 30 seconds
[ 2356.567997][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 30 seconds
[ 2356.586074][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2356.942024][T32647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6383'.
[ 2357.138258][T28828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2357.146202][T28828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2357.331907][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2357.352740][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2357.371441][T32681] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2357.680705][T32696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6333'.
[ 2357.860394][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2358.741501][T32715] syzkaller0: entered promiscuous mode
[ 2358.747059][T32715] syzkaller0: entered allmulticast mode
[ 2358.754857][T32719] syzkaller0: entered promiscuous mode
[ 2358.762605][T32719] syzkaller0: entered allmulticast mode
[ 2358.797526][T32722] syzkaller0: entered promiscuous mode
[ 2358.803138][T32722] syzkaller0: entered allmulticast mode
[ 2358.827827][    T9] usb 8-1: new high-speed USB device number 70 using dummy_hcd
[ 2359.014807][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2359.032734][    T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2359.042711][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2359.083340][    T9] usb 8-1: config 0 descriptor??
[ 2359.537204][    T9] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor
[ 2359.568075][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0030/input/input212
[ 2359.736033][    T9] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[ 2359.750193][T32713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2359.797641][T32713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2360.271383][T16370] usb 8-1: USB disconnect, device number 70
[ 2360.277373][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2362.275676][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 30 seconds
[ 2362.294322][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2363.659674][T32737] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2364.027796][ T5811] usb 8-1: new high-speed USB device number 71 using dummy_hcd
[ 2364.227466][ T5811] usb 8-1: Using ep0 maxpacket: 32
[ 2364.242650][ T5811] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[ 2364.258934][ T5811] usb 8-1: config 0 has no interface number 0
[ 2364.278114][ T5811] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2364.301624][ T5811] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2364.319612][ T5811] usb 8-1: Product: syz
[ 2364.329604][ T5811] usb 8-1: Manufacturer: syz
[ 2364.340136][ T5811] usb 8-1: SerialNumber: syz
[ 2364.359024][ T5811] usb 8-1: config 0 descriptor??
[ 2364.381397][ T5811] smsc95xx v2.0.0
[ 2364.791321][ T5811] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2364.827441][ T5811] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2365.209736][T32754] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 2365.620369][T18802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 2365.685127][T18802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 2365.708332][T18802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 2365.747123][T18802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 2365.756930][T18802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 2365.771804][T18802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 2366.071359][ T5811] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 2366.086759][ T5811] smsc95xx: probe of 8-1:0.67 failed with error -61
[ 2367.337446][T14303] usb 8-1: USB disconnect, device number 71
[ 2367.861169][T18802] Bluetooth: hci1: command tx timeout
[ 2369.929090][T18802] Bluetooth: hci1: command tx timeout
[ 2369.958989][  T307] netlink: 'syz.4.6411': attribute type 1 has an invalid length.
[ 2370.040759][T32757] chnl_net:caif_netlink_parms(): no params data found
[ 2370.280877][T32757] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2370.290669][T32757] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2370.303363][T32757] bridge_slave_0: entered allmulticast mode
[ 2370.317194][T32757] bridge_slave_0: entered promiscuous mode
[ 2370.330295][T32757] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2370.337843][T32757] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2370.345322][T32757] bridge_slave_1: entered allmulticast mode
[ 2370.353613][T32757] bridge_slave_1: entered promiscuous mode
[ 2370.396799][T32757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2370.418638][T32757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2370.489071][T25582] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 2370.522911][T32757] team0: Port device team_slave_0 added
[ 2370.552271][T32757] team0: Port device team_slave_1 added
[ 2370.587427][   T28] audit: type=1326 audit(1774650946.394:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=333 comm="syz.5.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f36d9c799 code=0x7ffc0000
[ 2370.624113][T32757] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2370.647957][T32757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2370.651968][   T28] audit: type=1326 audit(1774650946.394:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=333 comm="syz.5.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f36d9c799 code=0x7ffc0000
[ 2370.696681][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2370.717479][T32757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2370.737332][T25582] usb 5-1: Using ep0 maxpacket: 16
[ 2370.745583][T32757] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2370.768589][T32757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2370.796996][T25582] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2370.819572][T25582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2370.834704][   T28] audit: type=1326 audit(1774650946.424:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=333 comm="syz.5.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f36d9c799 code=0x7ffc0000
[ 2370.845391][T25582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2370.877276][T32757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2370.902077][   T28] audit: type=1326 audit(1774650946.424:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=333 comm="syz.5.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f36d9c799 code=0x7ffc0000
[ 2370.925570][T25582] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2370.955836][T25582] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2370.989134][T25582] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2370.997811][   T28] audit: type=1326 audit(1774650946.434:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=333 comm="syz.5.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1f36d9c799 code=0x7ffc0000
[ 2371.001548][T25582] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2371.082046][   T28] audit: type=1326 audit(1774650946.444:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=333 comm="syz.5.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f36d9c799 code=0x7ffc0000
[ 2371.085805][T25582] usb 5-1: Manufacturer: syz
[ 2371.126673][   T28] audit: type=1326 audit(1774650946.444:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=333 comm="syz.5.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f36d9c799 code=0x7ffc0000
[ 2371.163454][   T28] audit: type=1326 audit(1774650946.444:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=333 comm="syz.5.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1f36d9c799 code=0x7ffc0000
[ 2371.171707][T25582] usb 5-1: config 0 descriptor??
[ 2371.214720][   T28] audit: type=1326 audit(1774650946.444:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=333 comm="syz.5.6417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1f36d9c799 code=0x7ffc0000
[ 2371.324726][T32757] hsr_slave_0: entered promiscuous mode
[ 2371.331727][T32757] hsr_slave_1: entered promiscuous mode
[ 2371.339715][T32757] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2371.354914][T32757] Cannot create hsr debugfs directory
[ 2371.557875][T25582] rc_core: IR keymap rc-hauppauge not found
[ 2371.572731][T25582] Registered IR keymap rc-empty
[ 2371.579173][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2371.617740][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2371.675923][T25582] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2371.693822][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2371.697134][T25582] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input213
[ 2371.758208][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2371.775889][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2371.787450][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2371.848944][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2371.917741][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2371.951143][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2371.998440][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2372.019242][T18802] Bluetooth: hci1: command tx timeout
[ 2372.084601][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2372.117931][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2372.157425][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2372.198790][T25582] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2372.233641][T25582] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2372.242970][T25582] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2372.258462][T25582] usb 5-1: USB disconnect, device number 116
[ 2374.098117][T18802] Bluetooth: hci1: command tx timeout
[ 2375.580297][T32757] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2375.616447][  T357] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 2375.734284][T32757] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2375.872045][T32757] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2375.971887][T32757] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2376.186913][T32757] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2376.204849][T32757] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2376.296943][T32757] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2376.369971][T32757] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2377.497274][T18802] Bluetooth: hci1: command tx timeout
[ 2378.086603][T32757] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2378.291098][T32757] 8021q: adding VLAN 0 to HW filter on device team0
[ 2378.362382][T30239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2378.369660][T30239] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2378.412158][T14175] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2378.419434][T14175] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2379.484067][  T389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6435'.
[ 2382.901341][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[ 2383.223577][  T396] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[ 2383.314378][T32757] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2383.483557][  T401] syzkaller0: entered promiscuous mode
[ 2383.502093][  T401] syzkaller0: entered allmulticast mode
[ 2384.146043][T32757] veth0_vlan: entered promiscuous mode
[ 2384.254546][T32757] veth1_vlan: entered promiscuous mode
[ 2385.914935][  T418] mmap: syz.4.6441 (418) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[ 2386.435496][T32757] veth0_macvtap: entered promiscuous mode
[ 2386.519385][T32757] veth1_macvtap: entered promiscuous mode
[ 2386.568163][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 60 seconds
[ 2386.579502][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 60 seconds
[ 2386.590681][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 60 seconds
[ 2386.601865][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 60 seconds
[ 2386.699504][T32757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2386.716591][T32757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2386.735890][T32757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2386.747414][T32757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2386.762876][T32757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2386.774531][T32757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2386.790274][T32757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2386.803378][T32757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2386.813966][ T5771] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 2386.821588][T32757] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2386.843188][T32757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2386.854363][T32757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2386.864820][T32757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2386.875595][T32757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2386.885586][T32757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2386.897084][T32757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2386.919384][T32757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2386.932892][T32757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2386.947451][T32757] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2387.026030][ T5771] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2387.039176][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2387.065752][ T5771] usb 5-1: config 0 descriptor??
[ 2387.078102][ T5771] cp210x 5-1:0.0: cp210x converter detected
[ 2387.110879][T32757] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2387.120639][T32757] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2387.133016][T32757] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2387.142330][T32757] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2387.541452][ T5771] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 2387.796765][ T5771] usb 5-1: cp210x converter now attached to ttyUSB0
[ 2388.061950][ T5834] usb 5-1: USB disconnect, device number 117
[ 2388.071262][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2388.091985][ T5834] cp210x 5-1:0.0: device disconnected
[ 2392.333978][T15880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2392.343035][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 60 seconds
[ 2392.378085][T15880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2392.421482][T30237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2392.459339][T30237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2393.807146][  T487] syzkaller0: entered promiscuous mode
[ 2393.813536][  T487] syzkaller0: entered allmulticast mode
[ 2394.085798][  T491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6454'.
[ 2395.676209][  T506] syzkaller0: entered promiscuous mode
[ 2395.684954][  T506] syzkaller0: entered allmulticast mode
[ 2396.207513][T14303] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[ 2396.390047][T14303] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2396.413225][T14303] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2396.479186][T14303] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= d.40
[ 2396.506019][T14303] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2396.533131][T14303] usb 7-1: Product: syz
[ 2396.542443][T14303] usb 7-1: Manufacturer: syz
[ 2396.560450][T14303] usb 7-1: SerialNumber: syz
[ 2396.603384][T14303] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing
[ 2396.630760][T14303] cdc_ncm 7-1:1.0: bind() failure
[ 2397.670762][ T5771] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 2399.537281][ T5771] usb 6-1: Using ep0 maxpacket: 16
[ 2399.555121][ T5771] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2399.579987][ T5771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2399.608244][ T5771] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2399.679631][ T5771] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2399.731490][ T5771] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2399.769213][ T5771] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2399.782278][ T5771] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2399.797312][ T5771] usb 6-1: Manufacturer: syz
[ 2399.830339][ T5771] usb 6-1: config 0 descriptor??
[ 2400.110783][  T534] syzkaller0: entered promiscuous mode
[ 2400.116512][  T534] syzkaller0: entered allmulticast mode
[ 2400.249510][ T5771] rc_core: IR keymap rc-hauppauge not found
[ 2400.255507][ T5771] Registered IR keymap rc-empty
[ 2400.297625][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.328343][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.379315][ T5771] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2400.402212][ T5771] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input214
[ 2400.433567][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.467850][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.528734][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.570290][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.629291][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.659234][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.727502][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.774236][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.827449][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.877062][ T5771] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2400.911192][ T5771] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2400.920933][ T5771] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2400.947182][ T5771] usb 6-1: USB disconnect, device number 83
[ 2405.760973][  T561] syzkaller0: entered promiscuous mode
[ 2405.789906][ T5834] usb 7-1: USB disconnect, device number 98
[ 2405.796716][  T561] syzkaller0: entered allmulticast mode
[ 2406.474005][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.501370][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2406.760972][  T575] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 2412.626788][ T5137] udevd[5137]: worker [32291] /devices/virtual/block/nbd6 is taking a long time
[ 2412.639166][ T5137] udevd[5137]: worker [32293] /devices/virtual/block/nbd7 is taking a long time
[ 2412.650591][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2414.050219][  T624] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 2415.897559][   T23] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 2416.101739][   T23] usb 5-1: config 0 has no interfaces?
[ 2416.118125][   T23] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2416.132099][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2416.186054][   T23] usb 5-1: config 0 descriptor??
[ 2416.447092][   T23] usb 5-1: USB disconnect, device number 118
[ 2416.664177][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 90 seconds
[ 2416.675036][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 90 seconds
[ 2416.686110][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 90 seconds
[ 2416.697160][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 90 seconds
[ 2416.987634][  T686] syzkaller0: entered promiscuous mode
[ 2416.996486][  T686] syzkaller0: entered allmulticast mode
[ 2417.077617][   T23] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 2417.312942][   T23] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2417.340990][   T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[ 2417.370648][   T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[ 2417.406490][   T23] usb 5-1: string descriptor 0 read error: -22
[ 2417.429445][   T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[ 2417.465734][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2417.584715][  T690] syzkaller0: entered promiscuous mode
[ 2417.603761][  T690] syzkaller0: entered allmulticast mode
[ 2417.710717][   T23] usb 5-1: Can't get UAC3 power state for id 10
[ 2417.967748][T10722] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[ 2418.182640][T10722] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2418.427421][T10722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2418.557033][  T717] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6511'.
[ 2418.808272][T18802] Bluetooth: hci0: command 0x0406 tx timeout
[ 2419.333103][   T23] usb 5-1: 2:0: failed to get current value for ch 0 (-32)
[ 2419.374642][T10722] usb 7-1: config 0 descriptor??
[ 2419.449488][T10722] cp210x 7-1:0.0: cp210x converter detected
[ 2419.697534][ T9963] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 2419.794347][   T23] usb 5-1: 2:0: failed to get current value for ch 1 (-32)
[ 2419.852377][T10722] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 2419.941087][ T9963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2420.004699][ T9963] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2420.070150][   T23] usb 5-1: USB disconnect, device number 119
[ 2420.074629][ T9963] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[ 2420.112064][T10722] cp210x 7-1:0.0: failed to get vendor val 0x370c size 15: -71
[ 2420.139141][ T9963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2420.147309][T10722] cp210x 7-1:0.0: GPIO initialisation failed: -71
[ 2420.171549][ T9963] usb 6-1: Product: syz
[ 2420.176088][ T9963] usb 6-1: Manufacturer: syz
[ 2420.188037][T10722] usb 7-1: cp210x converter now attached to ttyUSB0
[ 2420.194086][ T9963] usb 6-1: SerialNumber: syz
[ 2420.239408][ T9963] usb 6-1: config 0 descriptor??
[ 2420.278778][T10722] usb 7-1: USB disconnect, device number 99
[ 2420.357326][T10722] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2420.365811][T10722] cp210x 7-1:0.0: device disconnected
[ 2421.912624][  T745] syzkaller0: entered promiscuous mode
[ 2421.928927][  T745] syzkaller0: entered allmulticast mode
[ 2421.978725][  T750] loop7: detected capacity change from 0 to 16384
[ 2422.290955][  T751] loop7: detected capacity change from 16384 to 0
[ 2422.417508][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 90 seconds
[ 2422.716724][ T5834] usb 6-1: USB disconnect, device number 84
[ 2422.878345][  T750] netlink: 'syz.7.6516': attribute type 4 has an invalid length.
[ 2423.079414][  T758] syzkaller0: entered promiscuous mode
[ 2423.117369][  T758] syzkaller0: entered allmulticast mode
[ 2424.457435][ T9963] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 2424.687554][ T9963] usb 6-1: Using ep0 maxpacket: 8
[ 2424.945028][ T9963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2425.046672][ T9963] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2425.087562][ T9963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2425.106031][ T9963] usb 6-1: config 0 descriptor??
[ 2425.491088][  T801] syzkaller0: entered promiscuous mode
[ 2425.496651][  T801] syzkaller0: entered allmulticast mode
[ 2425.498912][ T9963] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 2425.694533][   T27] usb 6-1: USB disconnect, device number 85
[ 2425.849839][  T788] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6526'.
[ 2425.974585][  T807] syzkaller0: entered promiscuous mode
[ 2425.984302][  T807] syzkaller0: entered allmulticast mode
[ 2426.132172][  T814] syzkaller0: entered promiscuous mode
[ 2426.138267][  T814] syzkaller0: entered allmulticast mode
[ 2428.397760][ T5834] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[ 2429.009519][ T5834] usb 7-1: Using ep0 maxpacket: 16
[ 2429.087103][ T5834] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2429.317608][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2429.339798][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2429.359558][ T5834] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2429.547159][ T5834] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2429.568882][ T5834] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2429.578909][ T5834] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2429.587056][ T5834] usb 7-1: Manufacturer: syz
[ 2429.598889][ T5834] usb 7-1: config 0 descriptor??
[ 2430.619544][  T849] syzkaller0: entered promiscuous mode
[ 2430.625153][  T849] syzkaller0: entered allmulticast mode
[ 2430.632086][ T5834] rc_core: IR keymap rc-hauppauge not found
[ 2430.643939][ T5834] Registered IR keymap rc-empty
[ 2430.654272][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2430.680143][  T852] syzkaller0: entered promiscuous mode
[ 2430.698533][  T852] syzkaller0: entered allmulticast mode
[ 2430.707747][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2430.745657][  T854] rdma_op ffff88805ebf69f0 conn xmit_rdma 0000000000000000
[ 2430.768798][ T5834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 2430.805194][ T5834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input215
[ 2430.859845][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2430.927497][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2430.989399][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2431.798593][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2431.837522][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2431.871513][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2431.917500][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2431.953894][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2431.989900][  T861] syzkaller0: entered promiscuous mode
[ 2431.997454][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2432.061339][ T5834] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2432.101037][T22708] blk_print_req_error: 113 callbacks suppressed
[ 2432.101056][T22708] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2432.119143][ T5834] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2432.128572][T22708] buffer_io_error: 138 callbacks suppressed
[ 2432.128588][T22708] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 2432.147020][T22708] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[ 2432.156424][T22708] Buffer I/O error on dev nbd4, logical block 1, async page read
[ 2432.164364][T22708] Buffer I/O error on dev nbd4, logical block 2, async page read
[ 2432.172413][T22708] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2432.181655][T22708] Buffer I/O error on dev nbd4, logical block 3, async page read
[ 2432.189844][ T5834] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2432.200629][   T24] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2432.208106][ T5834] usb 7-1: USB disconnect, device number 100
[ 2432.210580][   T24] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 2432.231315][   T24] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2432.241153][   T24] Buffer I/O error on dev nbd4, logical block 1, async page read
[ 2432.251367][   T24] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2432.261086][   T24] Buffer I/O error on dev nbd4, logical block 2, async page read
[ 2432.292921][T22708] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2432.303675][T22708] Buffer I/O error on dev nbd4, logical block 3, async page read
[ 2432.312254][T22708] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2432.321888][T22708] Buffer I/O error on dev nbd4, logical block 0, async page read
[ 2432.330244][T22708] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2432.341378][T22708] Buffer I/O error on dev nbd4, logical block 1, async page read
[ 2432.351636][T22708] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[ 2432.369687][  T863] ldm_validate_partition_table(): Disk read failed.
[ 2432.393205][  T863] Dev nbd4: unable to read RDB block 0
[ 2432.432279][  T863]  nbd4: unable to read partition table
[ 2434.427674][ T9963] usb 7-1: new high-speed USB device number 101 using dummy_hcd
[ 2434.611898][  T888] syzkaller0: entered promiscuous mode
[ 2434.702913][  T888] syzkaller0: entered allmulticast mode
[ 2434.781310][  T887] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2435.448877][ T9963] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2435.460611][ T9963] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2435.483372][ T9963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2435.522895][ T9963] usb 7-1: config 0 descriptor??
[ 2435.828111][  T903] syzkaller0: entered promiscuous mode
[ 2435.837651][   T27] usb 8-1: new high-speed USB device number 72 using dummy_hcd
[ 2436.012973][ T9963] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor
[ 2436.026303][ T9963] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0031/input/input216
[ 2436.087881][   T27] usb 8-1: Using ep0 maxpacket: 16
[ 2436.106065][   T27] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2437.434673][  T880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2437.488044][  T880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2437.506946][ T9963] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[ 2437.510208][   T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2437.530799][   T27] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2437.707460][ T5771] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 2437.929677][ T5771] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2437.976768][ T5771] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2437.985795][ T9963] usb 7-1: USB disconnect, device number 101
[ 2438.026401][ T5771] usb 6-1: config 0 descriptor??
[ 2438.065827][ T5771] cp210x 6-1:0.0: cp210x converter detected
[ 2438.440014][   T27] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2438.449832][   T27] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2438.470250][   T27] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2438.480524][   T27] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2438.488734][   T27] usb 8-1: Manufacturer: syz
[ 2438.534058][   T27] usb 8-1: config 0 descriptor??
[ 2438.664956][   T27] usb 8-1: can't set config #0, error -71
[ 2438.704958][   T27] usb 8-1: USB disconnect, device number 72
[ 2438.892467][ T5771] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71
[ 2438.923405][ T5771] cp210x 6-1:0.0: GPIO initialisation failed: -71
[ 2438.982252][ T5771] usb 6-1: cp210x converter now attached to ttyUSB0
[ 2439.034481][ T5771] usb 6-1: USB disconnect, device number 86
[ 2439.262918][ T5771] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2439.476201][ T5771] cp210x 6-1:0.0: device disconnected
[ 2440.574346][  T942] syzkaller0: entered promiscuous mode
[ 2440.604155][  T942] syzkaller0: entered allmulticast mode
[ 2440.817729][  T945] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2441.394743][  T953] syzkaller0: entered promiscuous mode
[ 2441.482009][  T963] syzkaller0: entered promiscuous mode
[ 2441.487951][  T963] syzkaller0: entered allmulticast mode
[ 2441.717574][   T27] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 2441.772106][T10722] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 2441.900908][   T27] usb 6-1: Using ep0 maxpacket: 16
[ 2441.938588][   T27] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2441.949824][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2441.960851][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2441.971080][   T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2441.981160][   T27] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2441.996033][   T27] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2441.998465][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2442.011376][T10722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2442.023041][   T27] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2442.031453][T10722] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2442.040803][   T27] usb 6-1: Manufacturer: syz
[ 2442.047170][T10722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2442.084661][T10722] usb 5-1: config 0 descriptor??
[ 2442.098434][   T27] usb 6-1: config 0 descriptor??
[ 2442.465558][   T27] rc_core: IR keymap rc-hauppauge not found
[ 2442.480424][   T27] Registered IR keymap rc-empty
[ 2442.489084][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2442.492180][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2442.539543][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2442.568929][T10722] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor
[ 2442.588062][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2442.593510][T10722] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0032/input/input218
[ 2442.607977][   T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2442.657696][   T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input217
[ 2442.779229][  T974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2442.793345][  T974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2442.793845][T10722] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2442.876623][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2442.948382][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2443.006068][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2443.008362][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2443.057608][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2443.117660][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2443.148492][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2443.194278][T10722] usb 5-1: USB disconnect, device number 120
[ 2443.208285][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2443.236084][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2443.260980][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2443.309233][   T27] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2443.350581][   T27] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2443.360037][   T27] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2443.397051][   T27] usb 6-1: USB disconnect, device number 87
[ 2444.137540][ T5771] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 2444.329515][ T5771] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping
[ 2444.357441][ T5771] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 2444.374800][ T5771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2444.385871][ T5771] usb 5-1: config 0 descriptor??
[ 2445.227559][ T5771] ath6kl: Failed to submit usb control message: -71
[ 2445.234468][ T5771] ath6kl: unable to send the bmi data to the device: -71
[ 2445.256363][ T5771] ath6kl: Unable to send get target info: -71
[ 2445.336684][ T5771] ath6kl: Failed to init ath6kl core: -71
[ 2445.358778][ T5771] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[ 2445.393242][ T5771] usb 5-1: USB disconnect, device number 121
[ 2446.337517][ T5834] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 2446.528644][ T5834] usb 5-1: Using ep0 maxpacket: 32
[ 2446.540657][ T5834] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 2446.554188][ T5834] usb 5-1: config 0 has no interface number 0
[ 2446.572255][ T5834] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2446.600370][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2446.609282][ T5834] usb 5-1: Product: syz
[ 2446.613527][ T5834] usb 5-1: Manufacturer: syz
[ 2446.618867][ T5834] usb 5-1: SerialNumber: syz
[ 2446.636287][ T5834] usb 5-1: config 0 descriptor??
[ 2446.649115][ T5834] smsc95xx v2.0.0
[ 2446.760345][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 120 seconds
[ 2446.771193][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 120 seconds
[ 2446.782531][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 120 seconds
[ 2446.793922][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 120 seconds
[ 2447.074964][ T5834] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2447.094088][ T5834] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2448.821076][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2449.230564][ T5834] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -61
[ 2449.265517][ T5834] smsc95xx: probe of 5-1:0.67 failed with error -61
[ 2449.703681][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2450.552595][ T5834] usb 5-1: USB disconnect, device number 122
[ 2452.493893][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 120 seconds
[ 2453.415353][  T979] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 2453.471959][ T1025] netlink: 'syz.4.6576': attribute type 10 has an invalid length.
[ 2453.500770][ T1025] team0: Device vxcan1 is of different type
[ 2453.640444][ T1028] rdma_op ffff88807898e1f0 conn xmit_rdma 0000000000000000
[ 2453.836610][ T1038] syzkaller0: entered promiscuous mode
[ 2453.906898][ T1039] syzkaller0: entered promiscuous mode
[ 2453.922081][ T1039] syzkaller0: entered allmulticast mode
[ 2457.581386][ T1068] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 2457.599566][ T1067] syzkaller0: entered promiscuous mode
[ 2457.605731][ T1067] syzkaller0: entered allmulticast mode
[ 2458.198301][ T1080] syzkaller0: entered promiscuous mode
[ 2458.206055][ T1080] syzkaller0: entered allmulticast mode
[ 2459.703379][T30947] Bluetooth: hci2: command 0x0406 tx timeout
[ 2460.928516][ T1112] rdma_op ffff88807c48d9f0 conn xmit_rdma 0000000000000000
[ 2465.452897][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2465.587432][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2465.702559][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2466.046634][ T1087] syzkaller0: entered promiscuous mode
[ 2466.056209][ T1087] syzkaller0: entered allmulticast mode
[ 2466.765248][ T1131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6598'.
[ 2467.883202][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.893880][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2468.648009][ T5771] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[ 2468.917379][ T5771] usb 7-1: Using ep0 maxpacket: 16
[ 2468.939515][ T5771] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2468.957852][ T5771] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2468.971982][ T5771] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2469.141484][ T5771] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2469.270808][ T5771] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2469.480023][ T5771] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2469.504083][ T5771] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2469.536873][ T5771] usb 7-1: Manufacturer: syz
[ 2469.560438][ T5771] usb 7-1: config 0 descriptor??
[ 2469.877453][ T5771] rc_core: IR keymap rc-hauppauge not found
[ 2469.883750][ T5771] Registered IR keymap rc-empty
[ 2469.889696][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2469.927678][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2469.972009][ T5771] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 2470.010061][ T5771] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input219
[ 2470.048047][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.084516][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.127474][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.158130][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.195201][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.227623][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.268964][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.297416][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.330058][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.368197][ T5771] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2470.403620][ T5771] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2470.414118][ T5771] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2470.428803][ T5771] usb 7-1: USB disconnect, device number 102
[ 2471.336252][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2471.685436][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2472.402413][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2473.069885][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2474.749559][ T1169] syzkaller0: entered promiscuous mode
[ 2474.808210][ T1169] syzkaller0: entered allmulticast mode
[ 2476.767468][ T1180] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6607'.
[ 2478.238380][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 150 seconds
[ 2478.249336][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 150 seconds
[ 2478.260559][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 150 seconds
[ 2478.271711][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 150 seconds
[ 2478.602330][ T1183] syzkaller0: entered promiscuous mode
[ 2481.546828][ T1233] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6617'.
[ 2482.584560][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 150 seconds
[ 2483.151771][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2483.985275][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2487.247764][   T27] usb 8-1: new high-speed USB device number 73 using dummy_hcd
[ 2487.279991][T16370] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 2487.456856][   T27] usb 8-1: Using ep0 maxpacket: 32
[ 2487.537320][T16370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2487.559105][   T27] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[ 2487.588686][T16370] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2487.598534][   T27] usb 8-1: config 0 has no interface number 0
[ 2487.611478][T16370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2487.620725][   T27] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2487.630068][   T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2487.661298][   T27] usb 8-1: Product: syz
[ 2487.665562][   T27] usb 8-1: Manufacturer: syz
[ 2487.678189][T16370] usb 5-1: config 0 descriptor??
[ 2487.693869][   T27] usb 8-1: SerialNumber: syz
[ 2487.885373][   T27] usb 8-1: config 0 descriptor??
[ 2487.909598][   T27] smsc95xx v2.0.0
[ 2488.109159][T16370] keytouch 0003:0926:3333.0033: fixing up Keytouch IEC report descriptor
[ 2488.155143][T16370] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0033/input/input220
[ 2488.288520][T16370] keytouch 0003:0926:3333.0033: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2488.342747][   T27] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2488.368718][   T27] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2488.444586][ T1277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2488.480558][ T1277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2489.298835][ T5834] usb 5-1: USB disconnect, device number 123
[ 2489.540171][ T1299] fido_id[1299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 2489.926942][ T1308] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6629'.
[ 2490.421460][T30947] Bluetooth: hci1: command 0x0406 tx timeout
[ 2490.753407][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2490.886291][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2490.935617][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2491.179537][   T27] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 2491.199692][   T27] smsc95xx: probe of 8-1:0.67 failed with error -71
[ 2491.242646][   T27] usb 8-1: USB disconnect, device number 73
[ 2495.839055][ T1336] netlink: 'syz.6.6637': attribute type 10 has an invalid length.
[ 2495.866027][ T1336] team0: Device vxcan1 is of different type
[ 2496.633350][ T1351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6641'.
[ 2501.554718][ T1403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6659'.
[ 2501.607475][  T459] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 2502.001746][  T459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2502.013305][  T459] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2502.025052][  T459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2502.038408][  T459] usb 5-1: config 0 descriptor??
[ 2502.844695][  T459] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor
[ 2502.874909][  T459] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0034/input/input221
[ 2503.044312][ T1398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2503.058469][ T1398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2503.088951][  T459] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2503.419142][   T23] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 2503.438306][   T27] usb 5-1: USB disconnect, device number 124
[ 2503.677857][   T23] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2503.695824][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2503.712557][   T23] usb 6-1: config 0 descriptor??
[ 2503.725246][   T23] cp210x 6-1:0.0: cp210x converter detected
[ 2503.833864][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2504.146810][   T23] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 2504.378897][   T23] usb 6-1: cp210x converter now attached to ttyUSB0
[ 2504.570927][   T27] usb 6-1: USB disconnect, device number 88
[ 2504.607369][   T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2504.617947][   T27] cp210x 6-1:0.0: device disconnected
[ 2508.456669][ T1451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6669'.
[ 2510.368384][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 180 seconds
[ 2510.379266][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 180 seconds
[ 2510.390828][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 180 seconds
[ 2510.402074][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 180 seconds
[ 2511.016292][ T1478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6673'.
[ 2512.647656][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 180 seconds
[ 2513.926553][   T27] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[ 2514.417551][   T27] usb 7-1: Using ep0 maxpacket: 32
[ 2514.439438][   T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2514.462530][   T27] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2514.493318][   T27] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2514.509982][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2514.526090][   T27] usb 7-1: Product: syz
[ 2514.530461][   T27] usb 7-1: Manufacturer: syz
[ 2514.535262][   T27] usb 7-1: SerialNumber: syz
[ 2514.568644][   T27] usb 7-1: config 0 descriptor??
[ 2514.902761][ T5834] usb 7-1: USB disconnect, device number 103
[ 2516.209589][ T1529] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6688'.
[ 2516.900913][  T459] usb 8-1: new high-speed USB device number 74 using dummy_hcd
[ 2517.124616][  T459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2517.163927][  T459] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2517.208532][  T459] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2517.280501][  T459] usb 8-1: config 0 descriptor??
[ 2517.740583][  T459] keytouch 0003:0926:3333.0035: fixing up Keytouch IEC report descriptor
[ 2517.791721][  T459] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0035/input/input222
[ 2517.941647][ T1525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2517.964185][  T459] keytouch 0003:0926:3333.0035: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[ 2517.977691][ T1525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2518.820332][  T459] usb 8-1: USB disconnect, device number 74
[ 2520.967503][T30947] Bluetooth: hci1: command 0x0406 tx timeout
[ 2521.212314][ T1571] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6700'.
[ 2521.889077][ T1576] syzkaller0: entered promiscuous mode
[ 2521.903417][ T1576] syzkaller0: entered allmulticast mode
[ 2522.391523][ T1583] netlink: 'syz.5.6704': attribute type 10 has an invalid length.
[ 2522.441326][ T1583] team0: Device vxcan1 is of different type
[ 2522.957432][ T5834] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 2523.167541][ T5834] usb 6-1: Using ep0 maxpacket: 32
[ 2523.342796][ T5834] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 2523.473022][ T5834] usb 6-1: config 0 has no interface number 0
[ 2523.707768][ T5834] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2523.759872][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2523.817507][ T5834] usb 6-1: Product: syz
[ 2523.838258][ T5834] usb 6-1: Manufacturer: syz
[ 2523.887712][ T5834] usb 6-1: SerialNumber: syz
[ 2523.899002][ T5834] usb 6-1: config 0 descriptor??
[ 2523.932311][ T5834] smsc95xx v2.0.0
[ 2525.806918][ T5834] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2525.818038][ T5834] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2526.977274][ T1629] netlink: 'syz.7.6715': attribute type 10 has an invalid length.
[ 2527.055319][ T1629] team0: Device vxcan1 is of different type
[ 2527.155679][ T1631] syzkaller0: entered promiscuous mode
[ 2527.167417][ T1631] syzkaller0: entered allmulticast mode
[ 2528.401153][ T5834] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[ 2528.417840][ T5834] smsc95xx: probe of 6-1:0.67 failed with error -71
[ 2528.439628][ T5834] usb 6-1: USB disconnect, device number 89
[ 2529.891471][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.898039][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2530.402138][ T5811] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 2530.632308][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2530.644788][ T5811] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2530.657404][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2530.700162][ T5811] usb 5-1: config 0 descriptor??
[ 2531.107435][ T1677] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2531.150435][ T5811] keytouch 0003:0926:3333.0036: fixing up Keytouch IEC report descriptor
[ 2531.185660][ T5811] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0036/input/input223
[ 2531.350463][ T1665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2531.385466][ T1665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2531.408257][ T5811] keytouch 0003:0926:3333.0036: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2531.831117][T16370] usb 5-1: USB disconnect, device number 125
[ 2532.215885][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2532.242193][ T1689] syzkaller0: entered promiscuous mode
[ 2532.266962][ T1689] syzkaller0: entered allmulticast mode
[ 2532.520160][   T23] usb 8-1: new high-speed USB device number 75 using dummy_hcd
[ 2532.933537][   T23] usb 8-1: Using ep0 maxpacket: 32
[ 2532.951448][   T23] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[ 2533.002129][   T23] usb 8-1: config 0 has no interface number 0
[ 2533.089825][   T23] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2533.263193][   T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2533.459853][   T23] usb 8-1: Product: syz
[ 2533.619248][   T23] usb 8-1: Manufacturer: syz
[ 2533.643143][   T23] usb 8-1: SerialNumber: syz
[ 2533.981477][   T23] usb 8-1: config 0 descriptor??
[ 2534.011725][   T23] smsc95xx v2.0.0
[ 2535.075623][   T23] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2535.089381][   T23] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2535.440757][ T1715] syzkaller0: entered promiscuous mode
[ 2535.712972][   T27] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 2535.917644][   T27] usb 5-1: Using ep0 maxpacket: 8
[ 2536.011641][   T27] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2536.213287][   T27] usb 5-1: config 1 interface 0 has no altsetting 0
[ 2536.233729][   T27] usb 5-1: string descriptor 0 read error: -22
[ 2536.263524][   T27] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40
[ 2536.278008][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2536.776972][   T27] apple 0003:05AC:025B.0037: invalid report_size -1149171161
[ 2536.792305][   T27] apple 0003:05AC:025B.0037: item 0 4 1 7 parsing failed
[ 2536.801298][   T27] apple 0003:05AC:025B.0037: parse failed
[ 2536.807699][   T27] apple: probe of 0003:05AC:025B.0037 failed with error -22
[ 2536.822610][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2537.081977][ T5834] usb 5-1: USB disconnect, device number 126
[ 2537.231588][   T23] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -32
[ 2537.260254][   T23] smsc95xx: probe of 8-1:0.67 failed with error -32
[ 2537.264872][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2537.286427][   T23] usb 8-1: USB disconnect, device number 75
[ 2540.231292][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2540.397568][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2540.826594][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 210 seconds
[ 2540.840854][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 210 seconds
[ 2540.851990][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 210 seconds
[ 2540.863056][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 210 seconds
[ 2540.881007][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2541.295297][ T5137] udevd[5137]: worker [32291] /devices/virtual/block/nbd6 timeout; kill it
[ 2541.305063][ T5137] udevd[5137]: seq 38613 '/devices/virtual/block/nbd6' killed
[ 2541.313842][ T5137] udevd[5137]: worker [32293] /devices/virtual/block/nbd7 timeout; kill it
[ 2541.323034][ T5137] udevd[5137]: seq 38654 '/devices/virtual/block/nbd7' killed
[ 2541.337587][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2541.781198][ T1751] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2541.957358][  T459] usb 8-1: new high-speed USB device number 76 using dummy_hcd
[ 2541.984033][ T1758] syzkaller0: entered promiscuous mode
[ 2541.997334][ T1758] syzkaller0: entered allmulticast mode
[ 2542.150305][  T459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2542.177410][  T459] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2542.186594][  T459] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2542.219979][  T459] usb 8-1: config 0 descriptor??
[ 2542.658100][  T459] keytouch 0003:0926:3333.0038: fixing up Keytouch IEC report descriptor
[ 2542.705566][  T459] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0038/input/input224
[ 2542.730090][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 210 seconds
[ 2542.848835][ T1749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2542.868685][ T1749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2542.898042][  T459] keytouch 0003:0926:3333.0038: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[ 2543.107390][T10722] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[ 2543.287446][ T5811] usb 8-1: USB disconnect, device number 76
[ 2543.304241][T10722] usb 7-1: Using ep0 maxpacket: 32
[ 2543.529809][T10722] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 2543.539151][T10722] usb 7-1: config 0 has no interface number 0
[ 2543.570025][T10722] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2543.589704][T10722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2543.611402][T10722] usb 7-1: Product: syz
[ 2543.627451][T10722] usb 7-1: Manufacturer: syz
[ 2543.632138][T10722] usb 7-1: SerialNumber: syz
[ 2543.648747][T10722] usb 7-1: config 0 descriptor??
[ 2543.660760][T10722] smsc95xx v2.0.0
[ 2544.115157][T10722] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2544.159389][T10722] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2544.353949][ T1774] syzkaller0: entered promiscuous mode
[ 2545.823399][ T1790] syzkaller0: entered promiscuous mode
[ 2545.843596][ T1790] syzkaller0: entered allmulticast mode
[ 2545.957920][ T1796] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2547.111913][T10722] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -61
[ 2547.132937][T10722] smsc95xx: probe of 7-1:0.67 failed with error -61
[ 2547.339596][T10722] usb 7-1: USB disconnect, device number 104
[ 2547.380683][  T459] usb 8-1: new high-speed USB device number 77 using dummy_hcd
[ 2547.609398][  T459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2547.627582][  T459] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2547.666936][  T459] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2547.716260][  T459] usb 8-1: config 0 descriptor??
[ 2548.095652][ T1822] syzkaller0: entered promiscuous mode
[ 2548.168386][  T459] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor
[ 2548.223242][  T459] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0039/input/input225
[ 2548.349001][ T1810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2548.367945][ T1810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2548.537019][  T459] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[ 2548.841320][   T23] usb 8-1: USB disconnect, device number 77
[ 2549.759691][ T1835] fido_id[1835]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[ 2550.083089][ T1854] syzkaller0: entered promiscuous mode
[ 2550.094441][ T1854] syzkaller0: entered allmulticast mode
[ 2551.325820][ T1870] syzkaller0: entered promiscuous mode
[ 2551.337265][   T23] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[ 2552.277401][   T23] usb 7-1: device descriptor read/64, error -71
[ 2553.267332][   T23] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[ 2553.434716][ T1893] syzkaller0: entered promiscuous mode
[ 2553.447365][   T23] usb 7-1: device descriptor read/64, error -71
[ 2553.463887][ T1893] syzkaller0: entered allmulticast mode
[ 2553.567854][   T23] usb usb7-port1: attempt power cycle
[ 2553.989320][   T23] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[ 2554.324994][   T23] usb 7-1: device descriptor read/8, error -71
[ 2555.649096][ T1919] syzkaller0: entered promiscuous mode
[ 2555.667855][ T1919] syzkaller0: entered allmulticast mode
[ 2556.178181][   T23] usb 7-1: new high-speed USB device number 109 using dummy_hcd
[ 2556.699951][   T23] usb 7-1: Using ep0 maxpacket: 16
[ 2556.719532][   T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2556.735782][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2556.761290][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2556.782244][   T23] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2556.799601][   T23] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2556.814851][   T23] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2556.824834][   T23] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2556.833310][   T23] usb 7-1: Manufacturer: syz
[ 2556.858152][   T23] usb 7-1: config 0 descriptor??
[ 2556.916337][ T1929] syzkaller0: entered promiscuous mode
[ 2556.938026][ T1929] syzkaller0: entered allmulticast mode
[ 2557.174268][T15799] nci: nci_rx_work: unknown MT 0x7
[ 2557.637923][   T23] rc_core: IR keymap rc-hauppauge not found
[ 2557.649532][   T23] Registered IR keymap rc-empty
[ 2557.659023][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2557.711559][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2557.758328][   T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 2557.775920][   T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input226
[ 2557.827451][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2557.864258][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2557.897615][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2557.934071][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2557.977522][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2558.038964][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2558.080462][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2558.137624][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2558.177405][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2558.217504][   T23] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2558.249317][   T23] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2558.259151][   T23] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2558.277499][   T23] usb 7-1: USB disconnect, device number 109
[ 2560.033616][ T1933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2560.524688][ T1958] syzkaller0: entered promiscuous mode
[ 2560.531832][ T1958] syzkaller0: entered allmulticast mode
[ 2561.487490][ T1969] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2565.782960][ T2020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6807'.
[ 2566.527531][ T2028] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2568.650918][ T2055] syzkaller0: entered promiscuous mode
[ 2568.656616][ T2055] syzkaller0: entered allmulticast mode
[ 2568.695538][ T6588] nci: nci_rx_work: unknown MT 0x7
[ 2569.697863][ T2064] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2569.766547][ T2068] syzkaller0: entered promiscuous mode
[ 2570.387827][   T23] usb 7-1: new high-speed USB device number 110 using dummy_hcd
[ 2570.600653][   T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2570.629800][   T23] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2570.646857][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2570.676845][   T23] usb 7-1: config 0 descriptor??
[ 2570.941127][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 240 seconds
[ 2570.953094][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 240 seconds
[ 2570.964494][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 240 seconds
[ 2570.975827][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 240 seconds
[ 2571.298296][   T23] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor
[ 2571.327463][   T23] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.003A/input/input227
[ 2571.349359][ T2073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2571.603478][ T2073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2571.763991][ T2048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2572.289548][ T2088] rdma_op ffff88802c9a81f0 conn xmit_rdma 0000000000000000
[ 2572.312298][   T23] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[ 2572.413541][ T9963] usb 7-1: USB disconnect, device number 110
[ 2572.616339][ T2089] fido_id[2089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[ 2573.620326][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 240 seconds
[ 2575.072517][ T2113] syzkaller0: entered promiscuous mode
[ 2576.239397][   T11] nci: nci_rx_work: unknown MT 0x7
[ 2579.094928][ T2130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2579.847626][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2580.395113][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2580.862264][ T2161] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6839'.
[ 2581.528651][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2582.988588][ T2182] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2583.247710][   T27] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 2583.474706][   T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2583.486629][   T27] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2583.515110][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2583.566808][   T27] usb 6-1: config 0 descriptor??
[ 2583.635624][T15880] nci: nci_rx_work: unknown MT 0x7
[ 2584.082827][   T27] keytouch 0003:0926:3333.003B: fixing up Keytouch IEC report descriptor
[ 2584.135604][   T27] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.003B/input/input228
[ 2584.164983][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2584.295155][ T2180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2584.491284][ T2180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2584.776445][   T27] keytouch 0003:0926:3333.003B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[ 2585.182170][ T9963] usb 6-1: USB disconnect, device number 90
[ 2586.449047][ T2187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2587.387513][   T27] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[ 2587.593687][   T27] usb 6-1: Using ep0 maxpacket: 32
[ 2587.622446][   T27] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 2587.631307][   T27] usb 6-1: config 0 has no interface number 0
[ 2587.640637][   T27] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2587.650790][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2587.659067][   T27] usb 6-1: Product: syz
[ 2587.663367][   T27] usb 6-1: Manufacturer: syz
[ 2587.668701][   T27] usb 6-1: SerialNumber: syz
[ 2587.682882][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2587.711993][   T27] usb 6-1: config 0 descriptor??
[ 2587.766764][   T27] smsc95xx v2.0.0
[ 2588.213396][   T27] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2588.231739][   T27] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2588.248362][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2590.227719][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2590.720753][   T27] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 2590.733934][   T27] smsc95xx: probe of 6-1:0.67 failed with error -71
[ 2590.741225][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2590.866922][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2590.911927][   T27] usb 6-1: USB disconnect, device number 91
[ 2592.064951][T14167] nci: nci_rsp_packet: unknown rsp opcode 0x3f
[ 2593.407408][ T2251] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2594.883732][ T2235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2595.328100][  T459] usb 8-1: new high-speed USB device number 78 using dummy_hcd
[ 2597.377632][  T459] usb 8-1: Using ep0 maxpacket: 16
[ 2597.571930][  T459] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2597.685323][  T459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2597.764608][  T459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2597.860716][  T459] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2597.961687][  T459] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2598.010071][  T459] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2598.037492][  T459] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2598.090123][  T459] usb 8-1: Manufacturer: syz
[ 2598.131225][  T459] usb 8-1: config 0 descriptor??
[ 2598.218429][  T459] usb 8-1: can't set config #0, error -71
[ 2598.287643][  T459] usb 8-1: USB disconnect, device number 78
[ 2598.387416][ T2285] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2599.855208][ T2302] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6871'.
[ 2601.909746][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 270 seconds
[ 2601.920616][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 270 seconds
[ 2601.932202][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 270 seconds
[ 2601.943536][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 270 seconds
[ 2603.087393][ T9963] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 2603.601420][ T9963] usb 5-1: Using ep0 maxpacket: 16
[ 2603.616318][ T9963] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2603.627470][ T9963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2603.645685][ T9963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2603.655464][ T9963] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2603.665748][ T9963] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2603.704824][ T9963] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2603.716044][ T9963] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2603.744992][ T9963] usb 5-1: Manufacturer: syz
[ 2603.759844][ T9963] usb 5-1: config 0 descriptor??
[ 2603.897519][ T2336] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2604.087314][ T9963] rc_core: IR keymap rc-hauppauge not found
[ 2604.093345][ T9963] Registered IR keymap rc-empty
[ 2604.111937][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.160246][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.177535][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 270 seconds
[ 2604.208896][ T9963] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2604.241713][ T9963] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input229
[ 2604.295548][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.347576][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.398570][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.438165][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.477479][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.527313][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.567399][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.597412][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.647712][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.687411][ T9963] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2604.769278][ T9963] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2604.793908][ T9963] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2604.824748][ T9963] usb 5-1: USB disconnect, device number 127
[ 2608.070954][ T2392] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6893'.
[ 2608.277659][ T2397] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2610.437441][   T27] usb 7-1: new high-speed USB device number 111 using dummy_hcd
[ 2610.647345][   T27] usb 7-1: Using ep0 maxpacket: 16
[ 2610.654743][   T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2610.666155][   T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2610.677672][   T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2610.687957][   T27] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2610.698302][   T27] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2610.713215][   T27] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2610.729272][   T27] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2610.755293][   T27] usb 7-1: Manufacturer: syz
[ 2610.985765][   T27] usb 7-1: config 0 descriptor??
[ 2612.555227][   T27] rc_core: IR keymap rc-hauppauge not found
[ 2612.561310][   T27] Registered IR keymap rc-empty
[ 2612.566355][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2612.649129][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2612.698233][   T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 2612.784989][   T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input230
[ 2612.823964][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2612.877349][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2612.937253][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2612.976959][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2613.017680][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2613.068333][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2613.100379][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2613.148581][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2613.200452][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2613.224025][ T2459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6904'.
[ 2613.237602][   T27] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[ 2613.276100][   T27] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[ 2613.290218][   T27] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2613.344767][   T27] usb 7-1: USB disconnect, device number 111
[ 2614.083082][T10722] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 2615.047452][T20439] usb 8-1: new high-speed USB device number 79 using dummy_hcd
[ 2615.257445][T20439] usb 8-1: Using ep0 maxpacket: 16
[ 2615.352978][T20439] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2615.551143][T20439] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2615.760844][T10722] usb 5-1: Using ep0 maxpacket: 8
[ 2615.780982][T10722] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2615.811338][T10722] usb 5-1: config 1 interface 0 has no altsetting 0
[ 2615.842533][T10722] usb 5-1: string descriptor 0 read error: -22
[ 2615.868337][T10722] usb 5-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40
[ 2616.117346][T20439] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2616.127548][T20439] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2616.137430][T20439] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2616.150863][T10722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2616.153799][T20439] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2616.169915][T20439] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2616.196255][T20439] usb 8-1: Manufacturer: syz
[ 2616.205871][T20439] usb 8-1: config 0 descriptor??
[ 2616.763057][T10722] usbhid 5-1:1.0: can't add hid device: -71
[ 2616.795185][T10722] usbhid: probe of 5-1:1.0 failed with error -71
[ 2616.832984][T10722] usb 5-1: USB disconnect, device number 2
[ 2617.057244][T20439] rc_core: IR keymap rc-hauppauge not found
[ 2617.063519][T20439] Registered IR keymap rc-empty
[ 2617.068949][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.108083][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.158818][T20439] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 2617.182760][T20439] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input231
[ 2617.214582][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.267997][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.306078][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.357716][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.405948][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.467359][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.507039][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.557394][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.595366][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.637294][T20439] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2617.671753][T20439] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2617.714298][T20439] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2617.753430][T20439] usb 8-1: USB disconnect, device number 79
[ 2618.091386][ T2518] binder: 2517:2518 ioctl c0306201 0 returned -14
[ 2619.278374][ T2540] netlink: 'syz.4.6921': attribute type 10 has an invalid length.
[ 2619.315388][ T2540] team0: Device vxcan1 is of different type
[ 2619.910390][ T2551] syzkaller0: entered promiscuous mode
[ 2619.923381][ T2551] syzkaller0: entered allmulticast mode
[ 2620.117213][   T23] usb 7-1: new high-speed USB device number 112 using dummy_hcd
[ 2620.487265][   T23] usb 7-1: Using ep0 maxpacket: 8
[ 2620.502042][   T23] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2620.561156][   T23] usb 7-1: config 1 interface 0 has no altsetting 0
[ 2620.650538][   T23] usb 7-1: string descriptor 0 read error: -22
[ 2620.781844][   T23] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40
[ 2620.911691][   T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2621.774382][   T23] usbhid 7-1:1.0: can't add hid device: -71
[ 2621.794336][   T23] usbhid: probe of 7-1:1.0 failed with error -71
[ 2621.809669][   T23] usb 7-1: USB disconnect, device number 112
[ 2622.136125][ T5811] usb 8-1: new high-speed USB device number 80 using dummy_hcd
[ 2622.240553][   T27] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 2622.358371][ T5811] usb 8-1: Using ep0 maxpacket: 16
[ 2622.366028][ T5811] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2622.377581][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2622.399449][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2622.414609][ T5811] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2622.425454][ T5811] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2622.441402][   T27] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2622.470861][   T27] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2622.491299][ T5811] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2622.504679][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2622.513331][ T5811] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2622.538471][   T27] usb 6-1: config 0 descriptor??
[ 2622.543867][ T5811] usb 8-1: Manufacturer: syz
[ 2622.571060][ T5811] usb 8-1: config 0 descriptor??
[ 2622.887306][ T5811] rc_core: IR keymap rc-hauppauge not found
[ 2622.894741][ T5811] Registered IR keymap rc-empty
[ 2622.905185][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2622.938128][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2622.980283][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 2622.995057][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input232
[ 2623.013194][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.057575][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.097303][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.137409][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.180342][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.217429][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.257451][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.301348][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.357326][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.836014][ T5811] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2623.896174][ T5811] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2623.907276][ T5811] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2623.920293][ T5811] usb 8-1: USB disconnect, device number 80
[ 2624.036567][ T2591] syzkaller0: entered promiscuous mode
[ 2624.042487][ T2591] syzkaller0: entered allmulticast mode
[ 2624.589352][ T2597] sp0: Synchronizing with TNC
[ 2624.871936][ T5811] usb 6-1: USB disconnect, device number 92
[ 2626.543733][ T2616] rdma_op ffff88804d12e9f0 conn xmit_rdma 0000000000000000
[ 2629.632627][ T9963] usb 8-1: new high-speed USB device number 81 using dummy_hcd
[ 2629.662641][ T2635] netlink: 'syz.4.6942': attribute type 10 has an invalid length.
[ 2629.683333][ T2635] team0: Device vxcan1 is of different type
[ 2629.754507][ T2637] syzkaller0: entered promiscuous mode
[ 2629.768024][ T2637] syzkaller0: entered allmulticast mode
[ 2629.827243][ T9963] usb 8-1: Using ep0 maxpacket: 16
[ 2629.849802][ T9963] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2630.074050][ T9963] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2630.086110][ T9963] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2630.096112][ T9963] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2630.106137][ T9963] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2630.121661][ T9963] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2630.137236][ T9963] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2630.153959][ T9963] usb 8-1: Manufacturer: syz
[ 2630.169861][ T9963] usb 8-1: config 0 descriptor??
[ 2630.507397][ T9963] rc_core: IR keymap rc-hauppauge not found
[ 2630.518907][ T9963] Registered IR keymap rc-empty
[ 2630.530573][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2630.567270][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2630.618768][ T9963] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 2630.662339][ T9963] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input233
[ 2630.824934][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2630.867708][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2630.908725][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2630.955484][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2630.997516][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2631.289964][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2632.079957][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2632.120869][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2632.177347][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2632.227914][ T9963] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2632.289869][ T9963] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2632.320968][ T9963] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2632.337951][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 300 seconds
[ 2632.349027][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 300 seconds
[ 2632.361367][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 300 seconds
[ 2632.372678][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 300 seconds
[ 2632.373515][ T9963] usb 8-1: USB disconnect, device number 81
[ 2634.430613][ T2679] rdma_op ffff88806497a1f0 conn xmit_rdma 0000000000000000
[ 2634.649830][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 300 seconds
[ 2637.017414][ T2699] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6954'.
[ 2637.485975][ T2684] kvm: kvm [2681]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc880
[ 2638.257904][T20439] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 2638.467339][T20439] usb 5-1: Using ep0 maxpacket: 16
[ 2638.479874][T20439] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2638.502094][T20439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2638.534161][T20439] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2638.567908][T20439] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2638.577821][T20439] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2638.593021][T20439] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2638.611883][T20439] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2638.626412][T20439] usb 5-1: Manufacturer: syz
[ 2638.650003][T20439] usb 5-1: config 0 descriptor??
[ 2638.997246][T20439] rc_core: IR keymap rc-hauppauge not found
[ 2639.013586][T20439] Registered IR keymap rc-empty
[ 2639.029833][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.077276][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.118387][T20439] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2639.158659][T20439] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input234
[ 2639.207732][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.247502][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.288778][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.327303][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.367462][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.408120][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.437952][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.470864][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.527633][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.577634][T20439] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2639.613534][T20439] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2639.642069][T20439] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2639.689134][T20439] usb 5-1: USB disconnect, device number 3
[ 2639.993358][ T2732] syz_tun: entered allmulticast mode
[ 2640.093479][ T2731] syz_tun: left allmulticast mode
[ 2640.307607][ T2741] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2641.378200][ T2749] syzkaller0: entered promiscuous mode
[ 2641.383779][ T2749] syzkaller0: entered allmulticast mode
[ 2641.403321][ T2718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2641.658042][ T2757] syzkaller0: entered promiscuous mode
[ 2641.663606][ T2757] syzkaller0: entered allmulticast mode
[ 2643.452013][ T2784] netlink: 'syz.4.6973': attribute type 10 has an invalid length.
[ 2643.619956][ T2784] team0: Device vxcan1 is of different type
[ 2644.279697][ T2794] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2644.407529][ T2798] syzkaller0: entered promiscuous mode
[ 2644.427598][ T2798] syzkaller0: entered allmulticast mode
[ 2644.628757][ T2812] syzkaller0: entered promiscuous mode
[ 2644.635349][ T2812] syzkaller0: entered allmulticast mode
[ 2645.976461][ T2832] syzkaller0: entered promiscuous mode
[ 2645.992177][ T2832] syzkaller0: entered allmulticast mode
[ 2648.406915][ T2849] syzkaller0: entered promiscuous mode
[ 2648.425225][ T2849] syzkaller0: entered allmulticast mode
[ 2648.609725][ T2856] netlink: 'syz.4.6988': attribute type 10 has an invalid length.
[ 2648.640776][ T2856] team0: Device vxcan1 is of different type
[ 2648.773844][ T2859] syzkaller0: entered promiscuous mode
[ 2648.783861][ T2859] syzkaller0: entered allmulticast mode
[ 2649.868755][ T2876] syzkaller0: entered promiscuous mode
[ 2649.905616][ T2876] syzkaller0: entered allmulticast mode
[ 2651.298138][ T2896] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2652.174934][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[ 2652.184887][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[ 2652.545182][ T2912] syzkaller0: entered promiscuous mode
[ 2652.571012][ T2912] syzkaller0: entered allmulticast mode
[ 2653.952728][T20439] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 2654.151284][T20439] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2654.179985][T20439] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2654.201180][T20439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2654.235815][T20439] usb 6-1: config 0 descriptor??
[ 2655.067517][ T2939] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2655.122968][T20439] keytouch 0003:0926:3333.003C: fixing up Keytouch IEC report descriptor
[ 2655.142198][T20439] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.003C/input/input235
[ 2655.176205][ T2943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2655.189045][ T2943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2655.310730][T20439] keytouch 0003:0926:3333.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[ 2655.558043][ T5811] usb 6-1: USB disconnect, device number 93
[ 2655.749371][ T2951] fido_id[2951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 2655.838015][ T2953] syzkaller0: entered promiscuous mode
[ 2655.851667][ T2953] syzkaller0: entered allmulticast mode
[ 2658.907295][ T2985] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2659.118702][ T2989] syzkaller0: entered promiscuous mode
[ 2659.130631][ T2989] syzkaller0: entered allmulticast mode
[ 2659.548113][ T2998] netlink: 'syz.5.7024': attribute type 10 has an invalid length.
[ 2659.570403][ T2998] team0: Device vxcan1 is of different type
[ 2659.984256][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 2660.169529][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2660.234271][ T5834] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2660.275984][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2660.434893][ T5834] usb 5-1: config 0 descriptor??
[ 2660.900773][ T3019] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7029'.
[ 2661.530061][ T2993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2661.639026][ T5834] keytouch 0003:0926:3333.003D: fixing up Keytouch IEC report descriptor
[ 2661.654574][ T5834] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003D/input/input236
[ 2661.689932][ T2993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2661.774384][ T5834] keytouch 0003:0926:3333.003D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 2662.027467][ T3023] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2662.223406][ T5834] usb 5-1: USB disconnect, device number 4
[ 2662.408885][   T24] block nbd6: Possible stuck request ffff888022138000: control (read@0,1024B). Runtime 330 seconds
[ 2662.421784][   T24] block nbd6: Possible stuck request ffff888022138200: control (read@1024,1024B). Runtime 330 seconds
[ 2662.433145][   T24] block nbd6: Possible stuck request ffff888022138400: control (read@2048,1024B). Runtime 330 seconds
[ 2662.444460][   T24] block nbd6: Possible stuck request ffff888022138600: control (read@3072,1024B). Runtime 330 seconds
[ 2662.701288][ T3031] syzkaller0: entered promiscuous mode
[ 2662.710394][ T3031] syzkaller0: entered allmulticast mode
[ 2664.687745][ T3057] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7038'.
[ 2665.427280][   T24] block nbd7: Possible stuck request ffff888022168000: control (read@0,4096B). Runtime 330 seconds
[ 2665.627446][ T3061] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 2666.076010][ T3068] syzkaller0: entered promiscuous mode
[ 2666.081935][ T3068] syzkaller0: entered allmulticast mode
[ 2666.595510][ T3074] blktrace: Concurrent blktraces are not allowed on loop10
[ 2667.887300][T20439] usb 7-1: new high-speed USB device number 113 using dummy_hcd
[ 2668.157596][   T23] usb 8-1: new high-speed USB device number 82 using dummy_hcd
[ 2668.377691][   T23] usb 8-1: Using ep0 maxpacket: 16
[ 2668.394972][   T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2668.432720][   T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2668.468752][   T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2668.485751][T20439] usb 7-1: Using ep0 maxpacket: 8
[ 2668.490754][   T23] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2668.503228][T20439] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2668.513086][   T23] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2668.513556][T20439] usb 7-1: config 1 interface 0 has no altsetting 0
[ 2668.554213][   T23] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2668.567379][T20439] usb 7-1: string descriptor 0 read error: -22
[ 2668.573801][T20439] usb 7-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.40
[ 2668.585429][   T23] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2668.601724][T20439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2668.602359][   T23] usb 8-1: Manufacturer: syz
[ 2668.628812][   T23] usb 8-1: config 0 descriptor??
[ 2669.229315][   T23] rc_core: IR keymap rc-hauppauge not found
[ 2669.235321][   T23] Registered IR keymap rc-empty
[ 2669.240500][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.285690][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.307514][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2669.314553][T20439] usbhid 7-1:1.0: can't add hid device: -71
[ 2669.320797][T20439] usbhid: probe of 7-1:1.0 failed with error -71
[ 2669.327705][   T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 2669.338342][T20439] usb 7-1: USB disconnect, device number 113
[ 2669.392962][   T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input237
[ 2669.452901][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.517565][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.557331][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.598395][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.624356][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2669.637522][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.672655][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2669.688792][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.747407][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.797673][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.823011][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2669.837639][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.886851][   T23] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2669.947404][   T23] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2669.978426][   T23] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2669.997427][   T23] usb 8-1: USB disconnect, device number 82
[ 2670.009320][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2676.335240][ T3141] netlink: 'syz.4.7056': attribute type 10 has an invalid length.
[ 2676.350841][ T3141] team0: Device vxcan1 is of different type
[ 2677.981661][ T3165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7058'.
[ 2678.647298][  T459] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 2678.864408][  T459] usb 5-1: Using ep0 maxpacket: 16
[ 2678.887629][  T459] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[ 2678.905692][  T459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2678.919916][  T459] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2678.930210][  T459] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2678.957669][  T459] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2678.995056][  T459] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2679.004960][  T459] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2679.017537][  T459] usb 5-1: Manufacturer: syz
[ 2679.036378][  T459] usb 5-1: config 0 descriptor??
[ 2679.377801][  T459] rc_core: IR keymap rc-hauppauge not found
[ 2679.388578][  T459] Registered IR keymap rc-empty
[ 2679.403369][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.447868][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.488887][  T459] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2679.520083][  T459] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input238
[ 2679.560830][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.637321][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.688571][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.747427][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.795008][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.845302][ T3202] netlink: 'syz.5.7066': attribute type 10 has an invalid length.
[ 2679.850260][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.887272][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.927317][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2679.947999][ T3202] team0: Device vxcan1 is of different type
[ 2679.985325][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2680.044506][  T459] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2680.145940][  T459] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2680.911377][  T459] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2680.951014][  T459] usb 5-1: USB disconnect, device number 5
[ 2681.282910][ T3218] syzkaller0: entered promiscuous mode
[ 2681.288717][ T3218] syzkaller0: entered allmulticast mode
[ 2681.667911][ T3220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7070'.
[ 2682.517264][  T459] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 2683.619666][  T459] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2683.630239][  T459] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2683.647701][  T459] usb 5-1: config 0 descriptor??
[ 2683.661174][  T459] cp210x 5-1:0.0: cp210x converter detected
[ 2683.864958][  T459] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121
[ 2683.890267][  T459] cp210x 5-1:0.0: querying part number failed
[ 2683.916771][  T459] usb 5-1: cp210x converter now attached to ttyUSB0
[ 2684.495663][  T459] usb 8-1: new high-speed USB device number 83 using dummy_hcd
[ 2685.318858][ T5834] usb 5-1: USB disconnect, device number 6
[ 2685.351221][  T459] usb 8-1: Using ep0 maxpacket: 16
[ 2685.386369][  T459] usb 8-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[ 2685.421748][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2685.440080][  T459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2685.462454][ T5834] cp210x 5-1:0.0: device disconnected
[ 2685.495698][  T459] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2685.524925][  T459] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2685.537396][  T459] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2685.556273][  T459] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2685.566267][  T459] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2685.580091][  T459] usb 8-1: Manufacturer: syz
[ 2685.589854][  T459] usb 8-1: config 0 descriptor??
[ 2685.612940][ T3249] syzkaller0: entered promiscuous mode
[ 2685.625766][ T3249] syzkaller0: entered allmulticast mode
[ 2686.161748][  T459] rc_core: IR keymap rc-hauppauge not found
[ 2686.168932][  T459] Registered IR keymap rc-empty
[ 2686.174028][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2686.207246][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2686.266463][  T459] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 2686.428277][ T3256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7081'.
[ 2686.728177][   T29] INFO: task udevd:32291 blocked for more than 143 seconds.
[ 2686.912248][   T29]       Not tainted syzkaller #0
[ 2687.002174][  T459] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input239
[ 2687.038295][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2687.054852][   T29] task:udevd           state:D stack:25480 pid:32291 ppid:5137   flags:0x00004006
[ 2687.068944][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.081787][   T29] Call Trace:
[ 2687.094078][   T29]  <TASK>
[ 2687.103102][   T29]  __schedule+0x1553/0x45a0
[ 2687.112483][   T29]  ? asan.module_dtor+0x20/0x20
[ 2687.118209][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.135163][   T29]  ? mark_lock+0x94/0x320
[ 2687.167514][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.227450][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.287419][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.356949][   T29]  ? lock_chain_count+0x20/0x20
[ 2687.391201][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.437174][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 2687.449200][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 2687.467322][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.477501][   T29]  schedule+0xbd/0x170
[ 2687.481873][   T29]  io_schedule+0x80/0xd0
[ 2687.489715][   T29]  folio_wait_bit_common+0x714/0xfa0
[ 2687.506415][   T29]  ? folio_wait_bit+0x30/0x30
[ 2687.517544][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.521860][   T29]  ? _compound_head+0x120/0x120
[ 2687.547240][   T29]  ? filemap_add_folio+0x192/0x3c0
[ 2687.557318][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.561567][   T29]  ? __filemap_get_folio+0x704/0xbb0
[ 2687.582938][   T29]  ? blkdev_writepage+0x30/0x30
[ 2687.588329][  T459] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 2687.597303][   T29]  do_read_cache_folio+0x1c0/0x7d0
[ 2687.602508][   T29]  ? blkdev_writepage+0x30/0x30
[ 2687.615407][   T29]  read_part_sector+0xd2/0x340
[ 2687.620639][   T29]  adfspart_check_POWERTEC+0x93/0xed0
[ 2687.626115][   T29]  ? adfspart_check_ADFS+0x620/0x620
[ 2687.642720][   T29]  ? put_partition+0x370/0x370
[ 2687.653476][  T459] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2687.666093][   T29]  ? alloc_pages+0x4dc/0x740
[ 2687.673107][   T29]  bdev_disk_changed+0x740/0x1420
[ 2687.678898][  T459] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2687.695673][   T29]  ? bdev_resize_partition+0xf0/0xf0
[ 2687.705034][   T29]  ? iput+0x343/0x920
[ 2687.717268][  T459] usb 8-1: USB disconnect, device number 83
[ 2687.723475][   T29]  blkdev_get_whole+0x30d/0x390
[ 2687.736372][   T29]  blkdev_get_by_dev+0x279/0x600
[ 2687.743735][   T29]  blkdev_open+0x152/0x360
[ 2687.763805][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[ 2687.779424][   T29]  do_dentry_open+0x8c6/0x1500
[ 2687.789772][   T29]  path_openat+0x27f1/0x3230
[ 2687.803056][   T29]  ? do_sys_openat2+0xda/0x1d0
[ 2687.817391][   T29]  ? verify_lock_unused+0x140/0x140
[ 2687.822882][   T29]  ? do_filp_open+0x430/0x430
[ 2687.828161][   T29]  ? __virt_addr_valid+0x18c/0x540
[ 2687.833534][   T29]  do_filp_open+0x1f5/0x430
[ 2687.838209][   T29]  ? vfs_tmpfile+0x490/0x490
[ 2687.843069][   T29]  ? _raw_spin_unlock+0x28/0x40
[ 2687.848286][   T29]  ? alloc_fd+0x58f/0x630
[ 2687.852779][   T29]  do_sys_openat2+0x134/0x1d0
[ 2687.857651][   T29]  ? do_sys_open+0xe0/0xe0
[ 2687.862282][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 2687.871510][   T29]  ? lock_chain_count+0x20/0x20
[ 2687.876583][   T29]  __x64_sys_openat+0x139/0x160
[ 2687.881632][   T29]  do_syscall_64+0x55/0xa0
[ 2687.886207][   T29]  ? clear_bhb_loop+0x40/0x90
[ 2687.891180][   T29]  ? clear_bhb_loop+0x40/0x90
[ 2687.896002][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2687.902352][   T29] RIP: 0033:0x7fed250a7407
[ 2687.906956][   T29] RSP: 002b:00007ffd6ce7d680 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 2687.918769][   T29] RAX: ffffffffffffffda RBX: 00007fed2582e880 RCX: 00007fed250a7407
[ 2687.926834][   T29] RDX: 00000000000a0800 RSI: 000055c6d793e0b0 RDI: ffffffffffffff9c
[ 2687.935088][   T29] RBP: 000055c6d78ff910 R08: 0000000000000000 R09: 0000000000000000
[ 2687.943675][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c6d793dc50
[ 2687.951947][   T29] R13: 000055c6d7917410 R14: 0000000000000000 R15: 000055c6d793dc50
[ 2687.960155][   T29]  </TASK>
[ 2687.963347][   T29] INFO: task udevd:32293 blocked for more than 144 seconds.
[ 2687.972141][   T29]       Not tainted syzkaller #0
[ 2687.980400][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2687.989276][   T29] task:udevd           state:D stack:25832 pid:32293 ppid:5137   flags:0x00004006
[ 2687.998702][   T29] Call Trace:
[ 2688.002028][   T29]  <TASK>
[ 2688.005013][   T29]  __schedule+0x1553/0x45a0
[ 2688.010881][   T29]  ? asan.module_dtor+0x20/0x20
[ 2688.015832][   T29]  ? mark_lock+0x94/0x320
[ 2688.023184][   T29]  ? lock_chain_count+0x20/0x20
[ 2688.032336][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 2688.037598][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 2688.043383][   T29]  schedule+0xbd/0x170
[ 2688.048076][   T29]  io_schedule+0x80/0xd0
[ 2688.052394][   T29]  folio_wait_bit_common+0x714/0xfa0
[ 2688.057914][   T29]  ? folio_wait_bit+0x30/0x30
[ 2688.062769][   T29]  ? _compound_head+0x120/0x120
[ 2688.067823][   T29]  ? filemap_add_folio+0x192/0x3c0
[ 2688.073092][   T29]  ? __filemap_get_folio+0x704/0xbb0
[ 2688.078524][   T29]  ? blkdev_writepage+0x30/0x30
[ 2688.083533][   T29]  do_read_cache_folio+0x1c0/0x7d0
[ 2688.099385][   T29]  ? blkdev_writepage+0x30/0x30
[ 2688.104768][   T29]  read_part_sector+0xd2/0x340
[ 2688.109710][   T29]  adfspart_check_POWERTEC+0x93/0xed0
[ 2688.115239][   T29]  ? adfspart_check_ADFS+0x620/0x620
[ 2688.120646][   T29]  ? put_partition+0x370/0x370
[ 2688.125557][   T29]  ? alloc_pages+0x4dc/0x740
[ 2688.132304][   T29]  bdev_disk_changed+0x740/0x1420
[ 2688.138582][   T29]  ? bdev_resize_partition+0xf0/0xf0
[ 2688.143962][   T29]  ? iput+0x343/0x920
[ 2688.148139][   T29]  blkdev_get_whole+0x30d/0x390
[ 2688.153061][   T29]  blkdev_get_by_dev+0x279/0x600
[ 2688.158550][   T29]  blkdev_open+0x152/0x360
[ 2688.163045][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[ 2688.168112][   T29]  do_dentry_open+0x8c6/0x1500
[ 2688.173069][   T29]  path_openat+0x27f1/0x3230
[ 2688.178064][   T29]  ? do_sys_openat2+0xda/0x1d0
[ 2688.182906][   T29]  ? verify_lock_unused+0x140/0x140
[ 2688.188548][   T29]  ? do_filp_open+0x430/0x430
[ 2688.193299][   T29]  ? __virt_addr_valid+0x18c/0x540
[ 2688.200849][   T29]  do_filp_open+0x1f5/0x430
[ 2688.205543][   T29]  ? vfs_tmpfile+0x490/0x490
[ 2688.210838][   T29]  ? _raw_spin_unlock+0x28/0x40
[ 2688.215777][   T29]  ? alloc_fd+0x58f/0x630
[ 2688.220476][   T29]  do_sys_openat2+0x134/0x1d0
[ 2688.225383][   T29]  ? do_sys_open+0xe0/0xe0
[ 2688.230157][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 2688.236389][   T29]  ? lock_chain_count+0x20/0x20
[ 2688.242766][   T29]  __x64_sys_openat+0x139/0x160
[ 2688.248396][   T29]  do_syscall_64+0x55/0xa0
[ 2688.252895][   T29]  ? clear_bhb_loop+0x40/0x90
[ 2688.258092][   T29]  ? clear_bhb_loop+0x40/0x90
[ 2688.262854][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2688.269564][   T29] RIP: 0033:0x7fed250a7407
[ 2688.274053][   T29] RSP: 002b:00007ffd6ce7d680 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 2688.282882][   T29] RAX: ffffffffffffffda RBX: 00007fed2582e880 RCX: 00007fed250a7407
[ 2688.291228][   T29] RDX: 00000000000a0800 RSI: 000055c6d790cea0 RDI: ffffffffffffff9c
[ 2688.299600][   T29] RBP: 000055c6d78ff910 R08: 0000000000000000 R09: 0000000000000000
[ 2688.307943][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c6d791cf10
[ 2688.316099][   T29] R13: 000055c6d7917410 R14: 0000000000000000 R15: 000055c6d791cf10
[ 2688.324691][   T29]  </TASK>
[ 2688.328240][   T29] 
[ 2688.328240][   T29] Showing all locks held in the system:
[ 2688.393738][   T29] 1 lock held by khungtaskd/29:
[ 2688.406462][   T29]  #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 2688.439917][   T29] 2 locks held by getty/5533:
[ 2688.457046][   T29]  #0: ffff88814c7a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2688.482200][   T29]  #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[ 2688.492500][   T29] 2 locks held by kworker/u4:9/14167:
[ 2688.498047][   T29] 2 locks held by kworker/u4:29/15799:
[ 2688.503576][   T29] 1 lock held by udevd/32291:
[ 2688.508475][   T29]  #0: ffff88802204b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[ 2688.518710][   T29] 1 lock held by udevd/32293:
[ 2688.523510][   T29]  #0: ffff8881417b84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[ 2688.538096][   T29] 3 locks held by kworker/0:6/459:
[ 2688.545270][   T29]  #0: ffff8880182fb138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 2688.556880][   T29]  #1: ffffc900037a7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 2688.569374][   T29]  #2: ffff8881423ed190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0
[ 2688.578552][   T29] 
[ 2688.581032][   T29] =============================================
[ 2688.581032][   T29] 
[ 2688.591198][   T29] NMI backtrace for cpu 1
[ 2688.595589][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 2688.602827][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2688.612933][   T29] Call Trace:
[ 2688.616257][   T29]  <TASK>
[ 2688.619227][   T29]  dump_stack_lvl+0x18c/0x250
[ 2688.623960][   T29]  ? preempt_count_add+0x91/0x1a0
[ 2688.629038][   T29]  ? show_regs_print_info+0x20/0x20
[ 2688.634281][   T29]  ? load_image+0x400/0x400
[ 2688.638840][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 2688.643815][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 2688.650036][   T29]  ? _printk+0xde/0x130
[ 2688.654230][   T29]  ? load_image+0x400/0x400
[ 2688.658773][   T29]  ? load_image+0x400/0x400
[ 2688.663309][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 2688.669418][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 2688.675432][   T29]  watchdog+0xf3d/0xf80
[ 2688.679621][   T29]  ? watchdog+0x1e1/0xf80
[ 2688.683984][   T29]  kthread+0x2fa/0x390
[ 2688.688082][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 2688.693139][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 2688.698283][   T29]  ret_from_fork+0x48/0x80
[ 2688.702732][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 2688.707351][   T29]  ret_from_fork_asm+0x11/0x20
[ 2688.712168][   T29]  </TASK>
[ 2688.715630][   T29] Sending NMI from CPU 1 to CPUs 0:
[ 2688.720923][    C0] NMI backtrace for cpu 0
[ 2688.720935][    C0] CPU: 0 PID: 14175 Comm: kworker/u4:15 Not tainted syzkaller #0
[ 2688.720952][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2688.720963][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[ 2688.720987][    C0] RIP: 0010:unwind_get_return_address+0x0/0xc0
[ 2688.721007][    C0] Code: 3f ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 49 ff ff ff 48 89 df e8 fe 25 a4 00 e9 3c ff ff ff e8 24 ce 4a 09 0f 1f 40 00 <f3> 0f 1e fa 55 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff
[ 2688.721022][    C0] RSP: 0018:ffffc900039d7620 EFLAGS: 00000293
[ 2688.721036][    C0] RAX: ffffffff8132a342 RBX: ffffc900039d76e0 RCX: ffff88802d7b1e00
[ 2688.721050][    C0] RDX: 0000000000000000 RSI: 0000000080000001 RDI: ffffc900039d7628
[ 2688.721061][    C0] RBP: ffffc900039d76b0 R08: ffff88802d7b1e00 R09: 0000000000000003
[ 2688.721074][    C0] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff81df373c
[ 2688.721085][    C0] R13: 00000000000000f0 R14: ffffffff8175c080 R15: ffffc900039d7628
[ 2688.721097][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 2688.721112][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2688.721123][    C0] CR2: 00007effaa1e92f8 CR3: 000000000cf32000 CR4: 00000000003506f0
[ 2688.721139][    C0] Call Trace:
[ 2688.721145][    C0]  <TASK>
[ 2688.721151][    C0]  arch_stack_walk+0x11d/0x190
[ 2688.721174][    C0]  ? slab_post_alloc_hook+0x6e/0x4b0
[ 2688.721204][    C0]  stack_trace_save+0xaa/0x100
[ 2688.721226][    C0]  ? stack_trace_snprint+0xf0/0xf0
[ 2688.721252][    C0]  kasan_set_track+0x4e/0x70
[ 2688.721270][    C0]  ? kasan_set_track+0x4e/0x70
[ 2688.721288][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[ 2688.721335][    C0]  __kasan_slab_alloc+0x6c/0x80
[ 2688.721359][    C0]  slab_post_alloc_hook+0x6e/0x4b0
[ 2688.721389][    C0]  kmem_cache_alloc_node+0x14c/0x320
[ 2688.721420][    C0]  ? slab_free_freelist_hook+0x130/0x1a0
[ 2688.721437][    C0]  ? __alloc_skb+0x103/0x2c0
[ 2688.721456][    C0]  __alloc_skb+0x103/0x2c0
[ 2688.721473][    C0]  nsim_dev_trap_report_work+0x293/0xb00
[ 2688.721501][    C0]  ? process_scheduled_works+0x96f/0x15d0
[ 2688.721525][    C0]  process_scheduled_works+0xa5d/0x15d0
[ 2688.721562][    C0]  ? worker_attach_to_pool+0x380/0x380
[ 2688.721587][    C0]  ? assign_work+0x3d2/0x5d0
[ 2688.721611][    C0]  worker_thread+0xa55/0xfc0
[ 2688.721646][    C0]  kthread+0x2fa/0x390
[ 2688.721662][    C0]  ? pr_cont_work+0x560/0x560
[ 2688.721684][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 2688.721700][    C0]  ret_from_fork+0x48/0x80
[ 2688.721720][    C0]  ? kthread_blkcg+0xd0/0xd0
[ 2688.721738][    C0]  ret_from_fork_asm+0x11/0x20
[ 2688.721769][    C0]  </TASK>
[ 2688.722985][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 2688.986621][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 2688.993846][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2689.003926][   T29] Call Trace:
[ 2689.007408][   T29]  <TASK>
[ 2689.010370][   T29]  dump_stack_lvl+0x18c/0x250
[ 2689.015088][   T29]  ? show_regs_print_info+0x20/0x20
[ 2689.020329][   T29]  ? load_image+0x400/0x400
[ 2689.024876][   T29]  panic+0x2dc/0x730
[ 2689.028841][   T29]  ? schedule_preempt_disabled+0x20/0x20
[ 2689.034514][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 2689.039078][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 2689.044749][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 2689.050938][   T29]  watchdog+0xf7c/0xf80
[ 2689.055217][   T29]  ? watchdog+0x1e1/0xf80
[ 2689.059582][   T29]  kthread+0x2fa/0x390
[ 2689.063673][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 2689.068732][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 2689.073355][   T29]  ret_from_fork+0x48/0x80
[ 2689.077809][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 2689.082444][   T29]  ret_from_fork_asm+0x11/0x20
[ 2689.087289][   T29]  </TASK>
[ 2689.090913][   T29] Kernel Offset: disabled
[ 2689.095273][   T29] Rebooting in 86400 seconds..