last executing test programs:

7.995979792s ago: executing program 0 (id=1069):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

7.803245223s ago: executing program 0 (id=1072):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r11=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0)
r13 = inotify_init1(0x0)
inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read(r13, &(0x7f0000001000)=""/4096, 0x1000)
openat(r12, &(0x7f0000001010), 0x0, 0x0)

5.873596914s ago: executing program 0 (id=1075):
r0 = syz_open_dev$evdev(0x0, 0x3214, 0x460100)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000008000000000000000080012"], 0xa0}}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000509800904e40503b956da020905080000040112fc09050b00200007039a0705d15b89f26d0928090340007a0a84"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003043fd224c1e3"], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, "7990fb09", {0x3, 0x100, 0x0, 0x41, 0x8, 0xf0, 0xff}})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000002c0)={0x8000000c})
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0)
close(r4)

5.414737378s ago: executing program 1 (id=1078):
request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x187)
lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
io_uring_enter(r4, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

5.331896938s ago: executing program 1 (id=1079):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r11=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0)
r13 = inotify_init1(0x0)
inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
read(r13, &(0x7f0000001000)=""/4096, 0x1000)
openat(r12, &(0x7f0000001010), 0x0, 0x0)

4.782445504s ago: executing program 3 (id=1083):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r11=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r12 = inotify_init1(0x0)
inotify_add_watch(r12, &(0x7f0000000080)='./debug/kvm\x00', 0x100)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
read(r12, &(0x7f0000001000)=""/4096, 0x1000)
openat(0xffffffffffffffff, &(0x7f0000001010), 0x0, 0x0)

4.777964399s ago: executing program 2 (id=1084):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r11=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./debug/kvm\x00', 0x100)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
read(0xffffffffffffffff, &(0x7f0000001000)=""/4096, 0x1000)
openat(r12, &(0x7f0000001010), 0x0, 0x0)

3.042600403s ago: executing program 3 (id=1085):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)}, 0x0)

2.985152712s ago: executing program 0 (id=1086):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setlease(r0, 0x400, 0x0)
r1 = io_uring_setup(0x1aa1, &(0x7f0000001040)={0x0, 0x4ae1, 0x0, 0x3, 0x314, 0x0, r0})
ioctl$XFS_IOC_GETVERSION(r1, 0x80047601, &(0x7f00000010c0))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f020})
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/locks\x00', 0x0, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="03fa3826"], 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
syz_open_dev$loop(&(0x7f0000000600), 0x9, 0x84200)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000007000000000000008004000000000000", @ANYRES32=r4, @ANYBLOB="000100"/20, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="0500000000000000020000000200000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/244, 0xf4}], 0x1, 0x2f, 0x1, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4})
write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl0\x00', <r8=>0x0, 0x80, 0x700, 0x1b, 0x5, {{0xc, 0x4, 0x0, 0x3c, 0x30, 0x65, 0x0, 0x0, 0x4, 0x0, @local, @broadcast, {[@rr={0x7, 0x1b, 0xd, [@multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xdc, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000180)={0x372, @time={0x7665642f, 0x4000000a}, 0x0, {}, 0x1, 0x1, 0x70})
r9 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000003c0), 0x4)
write(r9, &(0x7f0000000000)="600000001800050601000000000000000a400000fe040001000000001400010020010db800020000000000000000000108000400010000000600150003000000200016800c0001001234567890abcdef05000800200000000500070002000000", 0x60)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000001100)={0x1, 0x8, 0xffffffff})
r10 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_DISEQC_SEND_MASTER_CMD(r10, 0x40076f3f, &(0x7f0000000080)={"008000000080", 0x6})
ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6)

2.90365299s ago: executing program 2 (id=1087):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@verity_off}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]})
rmdir(&(0x7f0000000040)='./file1\x00')
chdir(&(0x7f0000000000)='./bus\x00')
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00')

2.859717492s ago: executing program 0 (id=1088):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.788044528s ago: executing program 1 (id=1089):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a30"], 0xf0}}, 0x0) (fail_nth: 17)

2.787686343s ago: executing program 2 (id=1090):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4)
write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) (async)
write$P9_RREADLINK(r2, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab)
socket(0x1e, 0x4, 0x0) (async)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c)
syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000))
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x400000)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) (async)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0xfffffeff})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r8, r7, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2226, &(0x7f00000056c0)=ANY=[], 0x0)
close(r5) (async)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = epoll_create(0x7)
epoll_create(0x7) (async)
r11 = epoll_create(0x7)
r12 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000140)={0x60000000})

2.787417052s ago: executing program 3 (id=1091):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace(0x4207, r1)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x40, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xa}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
socket$l2tp6(0xa, 0x2, 0x73)

2.604147465s ago: executing program 1 (id=1092):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x0)

2.603721401s ago: executing program 3 (id=1093):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/11], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r11=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r12 = inotify_init1(0x0)
inotify_add_watch(r12, &(0x7f0000000080)='./debug/kvm\x00', 0x100)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0)
read(r12, &(0x7f0000001000)=""/4096, 0x1000)
openat(0xffffffffffffffff, &(0x7f0000001010), 0x0, 0x0)

2.532851769s ago: executing program 0 (id=1094):
r0 = syz_open_dev$evdev(0x0, 0x3214, 0x460100)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000008000000000000000080012"], 0xa0}}, 0x0)
syz_usb_disconnect(r0)
r2 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000509800904e40503b956da020905080000040112fc09050b00200007039a0705d15b89f26d0928090340007a0a84"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003043fd224c1e3"], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, "7990fb09", {0x3, 0x100, 0x0, 0x41, 0x8, 0xf0, 0xff}})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000002c0)={0x8000000c})
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0)
close(r4)

2.274999666s ago: executing program 2 (id=1095):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2, 0x1, 0xff, 0x7, 0xc, 0x0, 0x0, 0x1000, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x4e25, 0xb10e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, @sadb_address={0x5, 0x6, 0xff, 0x20, 0x0, @in6={0xa, 0x4e23, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x16fc6}}]}, 0x60}}, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x15, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000fd3f0000000000000900000818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b0100ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006c0000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2101, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1109, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r11=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x2, r11, 0x0, 0x0, 0x1}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/kvm\x00', 0x0, 0x0)
r13 = inotify_init1(0x0)
inotify_add_watch(r13, &(0x7f0000000080)='./debug/kvm\x00', 0x100)
r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0)
read(r13, &(0x7f0000001000)=""/4096, 0x1000)
openat(r12, &(0x7f0000001010), 0x0, 0x0)

2.233644113s ago: executing program 1 (id=1103):
r0 = socket(0x8ca8bc1aeb4efde, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) (async)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"218ff100", 0x8, 0x6, 0x2, 0x0, 0x8, "f700", '\x00\x00G\x00', "20d18300", "fcffffff", ["000000008000", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", '5\x00']})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x401}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041094}, 0x40890) (async, rerun: 32)
open$dir(&(0x7f0000000040)='./file0\x00', 0x94000, 0x109) (async, rerun: 32)
capset(&(0x7f0000000580)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x50228f47}) (async, rerun: 64)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) (rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0}) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000208000b4000000000300004802c00018008000100636d7000200002800c0003800600000000253629ef0001400000000c08000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) (async, rerun: 64)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r8, 0x25, 0x18, @void}, 0x10) (rerun: 64)
syz_emit_ethernet(0xd8a, &(0x7f0000000700)=ANY=[], 0x0) (async)
syz_emit_ethernet(0xd81, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0) (async)
ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r6], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async, rerun: 32)
sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000a44000000120a01020000000000000073797a310000000008000440000000000900010073797a300000000008000340000000010800084000000001140000001100010000000000000000000000000a00"/108], 0x6c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150a0102000004000000000000000020"], 0x14}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404000a) (async, rerun: 64)
write$dsp(r4, &(0x7f00000000c0)="f6", 0x1) (rerun: 64)
ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) (async)
r11 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r11, 0x4610, &(0x7f0000000080)={0x1, 0x1})
open_tree(0xffffffffffffff9c, 0x0, 0x89901)

1.604086255s ago: executing program 1 (id=1096):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
getpid()
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='clear_refs\x00')
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, 0x0)
mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='1\x00', 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r2, &(0x7f00000001c0)='1', 0x1)

1.596800217s ago: executing program 3 (id=1097):
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4f4, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x1ed, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)

675.506877ms ago: executing program 3 (id=1098):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={r2, 0x2, 0x7, 0x1, &(0x7f00000002c0)=[{0x9, 0xff30, 0x3, 0x7}]})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1e0)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000240)={0x0, 0x2c48, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=<r6=>0x0, 0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
syz_ublk_add_dev(r5, r6, 0x0, r7, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
syz_usb_connect(0x6, 0x36, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYRES32], 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x840, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r9 = getpid()
sched_rr_get_interval(r9, &(0x7f0000000180))
sched_setaffinity(r9, 0x8, &(0x7f0000000240)=0x2)
ioprio_set$pid(0x6, r9, 0x4004)
sched_setscheduler(r9, 0x3, &(0x7f0000000000)=0x7)
r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
close(r8)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x43, 0x8}, 0xc)

131.097119ms ago: executing program 2 (id=1099):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c010000160001000000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000aa4e240000000000000000a0003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000330000007f00000100000000000000000000000009000000000000000100000000000000fdffffffffffffff0f0000000000000000000004000000000000000000000000ffffffffffffffff03000000000000000000000000abfed02d000000000000000000000000000000000000008000000000000000000000000000000000000000000000000200000000000000000000000500000005000000240009"], 0x11c}}, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f00000001c0)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x1}}, 0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x60, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7e, 0x2, 0x7, 0x5, 0x0, 0x10000}, {0xfc, 0x1, 0x1000, 0x8004, 0x5, 0x8}, 0x0, 0x4, 0x40021db}}]}}, @TCA_RATE={0x6, 0x5, {0xd5, 0x5}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r13=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3103feffffff000000000800000008000300", @ANYRES32=r13, @ANYBLOB="090006"], 0x2c}, 0x1, 0x0, 0x0, 0x22004094}, 0x4080)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r10, 0x10f, 0x83, &(0x7f0000000440), &(0x7f0000000480)=0x4)
r14 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r15, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@RTM_DELMDB={0x98, 0x55, 0x0, 0x70bd2c, 0x25dfdbfb, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x4, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0x2, {@in6_addr=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x3, 0x4, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc5b3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x0, 0x2, 0x3, {@ip4=@empty, 0x86dd}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x4c024)

0s ago: executing program 2 (id=1100):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)

0s ago: executing program 3 (id=1101):
syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180))
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
write(r3, &(0x7f0000000440)='44100,4+000,88200,96000,176400,192000,352800,3', 0x2e)
symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000640)='usbip-', 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]})
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="fffffffffffffdf9a684a51b86dd600c7a00d8c225ccd109a27f3291082000183afffe800000000000e700000000000000bbfe8000000000000000000000000000aa8800907800000000fe800000"], 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}})
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

kernel console output (not intermixed with test programs):

384 kB @ 0x80000000, mmio @ 0x81000000.
[  292.303003][ T9535] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  292.356473][ T9535] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  292.388865][ T1481] legousbtower 8-1:14.57: interrupt endpoints not found
[  292.396653][ T1481] legousbtower 8-1:14.228: interrupt endpoints not found
[  292.411457][ T1481] usb 8-1: USB disconnect, device number 16
[  292.657093][ T9543] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  292.998515][ T9543] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  293.001088][ T9543] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  293.003987][ T9543] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  293.014377][ T9543] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  293.133226][ T9543] pci 0000:00:01.0: Adding to iommu group 1
[  293.162971][ T9543] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  293.165138][ T9543] pci 0000:00:01.0: vgaarb: bridge control possible
[  293.167200][ T9543] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  293.193536][ T9543] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  293.197032][ T9543] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  293.205902][ T9543] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  293.241410][ T9543] [drm] Found bochs VGA, ID 0xb0c5.
[  293.243488][ T9543] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  293.319200][ T9543] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  293.617188][ T9543] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  294.574134][ T5755] legousbtower 6-1:14.57: interrupt endpoints not found
[  294.695078][ T5755] legousbtower 6-1:14.228: interrupt endpoints not found
[  294.705317][ T5755] usb 6-1: USB disconnect, device number 16
[  296.673209][ T9589] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  296.755553][ T9589] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  296.768148][ T9589] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  296.771080][ T9589] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  296.804459][ T9589] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  296.816274][ T9589] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 21979 usecs
[  296.864148][ T9589] pci 0000:00:01.0: Adding to iommu group 1
[  296.882686][ T9589] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  296.884976][ T9589] pci 0000:00:01.0: vgaarb: bridge control possible
[  296.887082][ T9589] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  296.978067][ T9589] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  296.985257][ T9589] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  296.993663][ T9589] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  297.015862][ T9589] [drm] Found bochs VGA, ID 0xb0c5.
[  297.024829][ T9589] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  297.033562][ T9589] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  297.695790][ T5755] kernel write not supported for file /803/clear_refs (pid: 5755 comm: kworker/2:3)
[  298.175067][ T9614] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  298.217814][ T9614] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  298.231329][ T9614] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  298.241559][ T9614] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  298.250876][ T9614] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  298.278955][ T9614] pci 0000:00:01.0: Adding to iommu group 1
[  298.293657][ T9614] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  298.296118][ T9614] pci 0000:00:01.0: vgaarb: bridge control possible
[  298.298232][ T9614] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  298.324851][ T9614] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  298.334805][ T9614] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  298.343474][ T9614] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  298.361971][ T9614] [drm] Found bochs VGA, ID 0xb0c5.
[  298.367803][ T9614] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  298.371706][ T9614] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  298.464888][ T9621] syzkaller0: entered promiscuous mode
[  298.473588][ T9621] syzkaller0: entered allmulticast mode
[  300.346969][ T9637] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  300.608342][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  300.798190][   T10] usb 6-1: Using ep0 maxpacket: 32
[  300.802394][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  300.805789][   T10] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  300.810238][   T10] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  300.814807][   T10] usb 6-1: config 14 has no interface number 0
[  300.816802][   T10] usb 6-1: config 14 has no interface number 1
[  300.819579][   T10] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  300.824965][   T10] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  300.825236][ T9645] 9p: Bad value for 'wfdno'
[  300.829019][   T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  300.835102][   T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  300.838893][   T10] usb 6-1: config 14 interface 57 has no altsetting 0
[  300.841140][   T10] usb 6-1: config 14 interface 228 has no altsetting 0
[  300.846979][   T10] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  300.853356][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.856229][   T10] usb 6-1: Product: syz
[  300.857999][   T10] usb 6-1: Manufacturer: syz
[  300.860299][   T10] usb 6-1: SerialNumber: syz
[  300.906801][ T9645] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  300.933246][ T9645] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  300.936791][ T9645] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  300.940637][ T9645] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  300.948639][ T9645] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  301.049988][ T9645] pci 0000:00:01.0: Adding to iommu group 1
[  301.072610][ T9645] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  301.075325][ T9645] pci 0000:00:01.0: vgaarb: bridge control possible
[  301.078082][ T9645] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  301.093661][ T9645] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  301.097777][ T9645] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  301.102001][ T9647] syzkaller0: entered promiscuous mode
[  301.104184][ T9645] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  301.104977][ T9647] syzkaller0: entered allmulticast mode
[  301.114962][ T9645] [drm] Found bochs VGA, ID 0xb0c5.
[  301.117303][ T9645] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  301.145254][ T9645] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  301.290877][ T9645] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  302.396628][ T9653] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  302.430937][ T9653] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  302.437507][ T9653] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  302.440925][ T9653] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  302.450108][ T9653] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  302.515510][ T9653] pci 0000:00:01.0: Adding to iommu group 1
[  302.560720][ T9653] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  302.562808][ T9653] pci 0000:00:01.0: vgaarb: bridge control possible
[  302.564753][ T9653] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  302.580818][ T9653] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  302.583754][ T9653] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  302.591966][ T9653] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  302.744336][ T9653] [drm] Found bochs VGA, ID 0xb0c5.
[  302.748755][ T9653] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  302.962485][ T9653] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  303.158059][ T9653] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  303.266329][ T9665] syzkaller0: entered promiscuous mode
[  303.268888][ T9665] syzkaller0: entered allmulticast mode
[  303.274385][ T9667] syzkaller0: entered promiscuous mode
[  303.276872][ T9667] syzkaller0: entered allmulticast mode
[  303.340078][   T10] legousbtower 6-1:14.57: interrupt endpoints not found
[  303.347568][   T10] legousbtower 6-1:14.228: interrupt endpoints not found
[  303.357260][   T10] usb 6-1: USB disconnect, device number 17
[  303.380801][ T9671] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  303.513803][ T1481] kernel write not supported for file /793/clear_refs (pid: 1481 comm: kworker/0:3)
[  303.609936][ T9673] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  303.628836][ T5900] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  303.646354][ T9673] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  303.652046][ T9673] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  303.667184][ T9673] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  303.670789][ T9673] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  303.688007][ T5755] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  303.691112][ T9673] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 19974 usecs
[  303.715917][ T9673] pci 0000:00:01.0: Adding to iommu group 1
[  303.729250][ T9673] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  303.731424][ T9673] pci 0000:00:01.0: vgaarb: bridge control possible
[  303.733509][ T9673] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  303.762777][ T9673] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  303.770261][ T9673] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  303.779814][ T9673] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  303.788695][ T9673] [drm] Found bochs VGA, ID 0xb0c5.
[  303.790481][ T9673] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  303.797937][ T5900] usb 8-1: Using ep0 maxpacket: 32
[  303.802849][ T5900] usb 8-1: unable to get BOS descriptor or descriptor too short
[  303.806247][ T5900] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[  303.809028][ T5900] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[  303.811714][ T5900] usb 8-1: config 14 has no interface number 0
[  303.813673][ T5900] usb 8-1: config 14 has no interface number 1
[  303.818522][ T5900] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  303.822270][ T9673] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  303.828236][ T5900] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  303.837027][ T5900] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  303.837817][ T5755] usb 5-1: Using ep0 maxpacket: 32
[  303.843924][ T5900] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  303.844838][ T5755] usb 5-1: unable to get BOS descriptor or descriptor too short
[  303.851685][ T5755] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  303.851733][ T5900] usb 8-1: config 14 interface 57 has no altsetting 0
[  303.854394][ T5755] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  303.859380][ T5755] usb 5-1: config 14 has no interface number 0
[  303.861024][ T5900] usb 8-1: config 14 interface 228 has no altsetting 0
[  303.861397][ T5755] usb 5-1: config 14 has no interface number 1
[  303.865612][ T5755] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  303.869446][ T5900] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  303.870089][ T5755] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  303.872353][ T5900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.876079][ T5755] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  303.882340][ T5755] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  303.886011][ T5755] usb 5-1: config 14 interface 57 has no altsetting 0
[  303.886876][ T5900] usb 8-1: Product: syz
[  303.888707][ T5755] usb 5-1: config 14 interface 228 has no altsetting 0
[  303.892936][ T5900] usb 8-1: Manufacturer: syz
[  303.893403][ T5755] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  303.896889][ T5900] usb 8-1: SerialNumber: syz
[  303.897495][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.901520][ T5755] usb 5-1: Product: syz
[  303.902898][ T5755] usb 5-1: Manufacturer: syz
[  303.907111][ T5755] usb 5-1: SerialNumber: syz
[  303.936743][ T9673] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  304.205271][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'.
[  304.257808][ T5755] legousbtower 5-1:14.57: interrupt endpoints not found
[  304.268317][ T5755] legousbtower 5-1:14.228: interrupt endpoints not found
[  304.277480][ T5755] usb 5-1: USB disconnect, device number 16
[  304.494325][ T9688] syzkaller0: entered promiscuous mode
[  304.496790][ T9688] syzkaller0: entered allmulticast mode
[  304.540482][ T9686] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  304.557530][ T9686] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  304.560563][ T9686] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  304.562838][ T9686] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  304.565935][ T9686] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  304.577664][ T9686] pci 0000:00:01.0: Adding to iommu group 1
[  304.583408][ T9686] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  304.586120][ T9686] pci 0000:00:01.0: vgaarb: bridge control possible
[  304.588599][ T9686] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  304.598132][ T9686] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  304.601406][ T9686] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  304.605561][ T9686] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  304.615713][ T9686] [drm] Found bochs VGA, ID 0xb0c5.
[  304.617951][ T9686] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  304.635890][ T9686] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  304.871139][ T9686] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  304.968502][ T9694] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  304.994577][ T9694] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  304.998135][ T9694] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  305.001110][ T9694] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  305.004224][ T9694] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  305.028787][ T9694] pci 0000:00:01.0: Adding to iommu group 1
[  305.051794][ T9694] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  305.054035][ T9694] pci 0000:00:01.0: vgaarb: bridge control possible
[  305.056184][ T9694] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  305.093676][ T9694] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  305.096830][ T9694] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  305.137871][ T9694] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  305.165877][ T9694] [drm] Found bochs VGA, ID 0xb0c5.
[  305.177861][ T9694] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  305.214126][ T9694] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  305.237979][ T9700] syzkaller0: entered promiscuous mode
[  305.239968][ T9700] syzkaller0: entered allmulticast mode
[  305.300708][ T9694] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  305.494605][ T9705] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  305.695894][ T9702] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  305.709523][ T9702] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  305.712080][ T9702] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  305.714359][ T9702] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  305.717598][ T9702] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  305.727843][ T9702] pci 0000:00:01.0: Adding to iommu group 1
[  305.734732][ T9702] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  305.736912][ T9702] pci 0000:00:01.0: vgaarb: bridge control possible
[  305.738962][ T9702] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  305.747132][ T9702] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  305.749725][ T9702] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  305.754146][ T9702] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  305.765686][ T9702] [drm] Found bochs VGA, ID 0xb0c5.
[  305.767384][ T9702] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  305.782946][ T9702] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  305.828257][ T9702] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  305.887931][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  305.927265][ T9715] syzkaller0: entered promiscuous mode
[  305.930328][ T9715] syzkaller0: entered allmulticast mode
[  306.037835][   T10] usb 5-1: Using ep0 maxpacket: 32
[  306.046109][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  306.063006][   T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  306.067867][   T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  306.073457][   T10] usb 5-1: config 14 has no interface number 0
[  306.076139][   T10] usb 5-1: config 14 has no interface number 1
[  306.080519][   T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  306.084987][   T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  306.093273][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  306.100522][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  306.120121][   T10] usb 5-1: config 14 interface 57 has no altsetting 0
[  306.127510][   T10] usb 5-1: config 14 interface 228 has no altsetting 0
[  306.166172][   T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  306.171107][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.181091][   T10] usb 5-1: Product: syz
[  306.187332][   T10] usb 5-1: Manufacturer: syz
[  306.193053][   T10] usb 5-1: SerialNumber: syz
[  306.811603][ T5900] legousbtower 8-1:14.57: interrupt endpoints not found
[  307.367699][ T9741] syzkaller0: entered promiscuous mode
[  307.370664][ T9741] syzkaller0: entered allmulticast mode
[  307.544185][ T9729] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  307.636871][ T9729] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  307.639864][ T9729] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  307.642703][ T9729] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  307.649422][ T9729] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  307.665328][ T5900] legousbtower 8-1:14.228: interrupt endpoints not found
[  307.672375][ T5900] usb 8-1: USB disconnect, device number 17
[  307.692577][ T9729] pci 0000:00:01.0: Adding to iommu group 1
[  307.700476][ T9729] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  307.702638][ T9729] pci 0000:00:01.0: vgaarb: bridge control possible
[  307.704714][ T9729] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  307.715067][ T9729] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  307.718175][ T9729] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  307.722333][ T9729] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  307.734409][ T9729] [drm] Found bochs VGA, ID 0xb0c5.
[  307.736110][ T9729] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  307.750881][ T9729] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  307.816161][ T9729] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  307.916490][ T9747] syzkaller0: entered promiscuous mode
[  307.919715][ T9747] syzkaller0: entered allmulticast mode
[  308.161451][ T9749] syzkaller0: entered promiscuous mode
[  308.164967][ T9749] syzkaller0: entered allmulticast mode
[  308.358900][ T9758] syzkaller0: entered promiscuous mode
[  308.366616][ T9758] syzkaller0: entered allmulticast mode
[  308.511262][   T10] legousbtower 5-1:14.57: interrupt endpoints not found
[  308.518163][   T10] legousbtower 5-1:14.228: interrupt endpoints not found
[  308.529900][   T10] usb 5-1: USB disconnect, device number 17
[  308.567785][ T9763] syzkaller0: entered promiscuous mode
[  308.569585][ T9763] syzkaller0: entered allmulticast mode
[  309.392771][ T9777] syzkaller0: entered promiscuous mode
[  309.395295][ T9777] syzkaller0: entered allmulticast mode
[  309.493223][ T9782] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  309.516069][ T9784] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  309.747476][ T9794] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  309.771975][ T9794] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  309.775591][    T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  309.778922][ T9794] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  309.785710][ T9794] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  309.794823][ T9794] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  309.864004][ T9794] pci 0000:00:01.0: Adding to iommu group 1
[  309.910639][ T9794] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  309.912862][ T9794] pci 0000:00:01.0: vgaarb: bridge control possible
[  309.915115][ T9794] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  309.968165][    T9] usb 8-1: Using ep0 maxpacket: 32
[  309.979030][ T9794] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  309.982151][ T9794] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  309.986327][ T9794] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  309.991326][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  309.999993][    T9] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[  310.006007][    T9] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[  310.009741][    T9] usb 8-1: config 14 has no interface number 0
[  310.011709][    T9] usb 8-1: config 14 has no interface number 1
[  310.014025][    T9] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  310.022161][    T9] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  310.027132][    T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  310.035259][    T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  310.042404][    T9] usb 8-1: config 14 interface 57 has no altsetting 0
[  310.044734][    T9] usb 8-1: config 14 interface 228 has no altsetting 0
[  310.062889][    T9] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  310.066193][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.072295][    T9] usb 8-1: Product: syz
[  310.080154][    T9] usb 8-1: Manufacturer: syz
[  310.081755][    T9] usb 8-1: SerialNumber: syz
[  310.322710][ T9794] [drm] Found bochs VGA, ID 0xb0c5.
[  310.324872][ T9794] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  310.365274][ T9794] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  310.661890][ T9794] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  310.719307][ T5839] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  310.807513][ T9813] syzkaller0: entered promiscuous mode
[  310.809506][ T9813] syzkaller0: entered allmulticast mode
[  311.117785][ T5839] usb 5-1: Using ep0 maxpacket: 32
[  311.121054][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short
[  311.124457][ T5839] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  311.127037][ T5839] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  311.129709][ T5839] usb 5-1: config 14 has no interface number 0
[  311.131642][ T5839] usb 5-1: config 14 has no interface number 1
[  311.133598][ T5839] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  311.136968][ T5839] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  311.140611][ T5839] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  311.144002][ T5839] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  311.147473][ T5839] usb 5-1: config 14 interface 57 has no altsetting 0
[  311.149700][ T5839] usb 5-1: config 14 interface 228 has no altsetting 0
[  311.155020][ T5839] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  311.157981][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.160457][ T5839] usb 5-1: Product: syz
[  311.161771][ T5839] usb 5-1: Manufacturer: syz
[  311.163233][ T5839] usb 5-1: SerialNumber: syz
[  312.516099][    T9] legousbtower 8-1:14.57: interrupt endpoints not found
[  312.521313][    T9] legousbtower 8-1:14.228: interrupt endpoints not found
[  312.526001][    T9] usb 8-1: USB disconnect, device number 18
[  312.534840][ T5839] legousbtower 5-1:14.57: interrupt endpoints not found
[  312.543451][ T5839] legousbtower 5-1:14.228: interrupt endpoints not found
[  312.564576][ T5839] usb 5-1: USB disconnect, device number 18
[  312.822581][ T9836] syzkaller0: entered promiscuous mode
[  312.824684][ T9836] syzkaller0: entered allmulticast mode
[  312.985423][ T9823] syzkaller0: entered promiscuous mode
[  312.987403][ T9823] syzkaller0: entered allmulticast mode
[  313.035218][ T9830] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  313.059764][ T9830] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  313.062896][ T9830] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  313.065449][ T9830] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  313.069739][ T9830] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  313.106277][ T9830] pci 0000:00:01.0: Adding to iommu group 1
[  313.120242][ T9830] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  313.122634][ T9830] pci 0000:00:01.0: vgaarb: bridge control possible
[  313.124762][ T9830] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  313.143273][ T9830] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  313.147693][ T9830] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  313.159810][ T9830] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  313.251048][ T9830] [drm] Found bochs VGA, ID 0xb0c5.
[  313.254956][ T9830] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  313.320063][ T9830] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  313.487350][ T9830] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  313.849073][ T9846] syzkaller0: entered promiscuous mode
[  313.851332][ T9846] syzkaller0: entered allmulticast mode
[  314.636344][ T9854] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  314.655144][ T9854] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  314.658025][ T9854] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  314.660697][ T9854] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  314.665656][ T9854] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  314.701458][ T9854] pci 0000:00:01.0: Adding to iommu group 1
[  314.746628][ T9854] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  314.748798][ T9854] pci 0000:00:01.0: vgaarb: bridge control possible
[  314.750840][ T9854] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  314.766740][ T9854] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  314.769928][ T9854] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  314.778096][ T9854] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  314.871529][ T9854] [drm] Found bochs VGA, ID 0xb0c5.
[  314.873363][ T9854] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  315.999664][ T9854] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  316.094984][ T9854] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  316.184144][ T9858] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  316.227338][ T9858] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  316.231324][ T9858] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  316.236098][ T9858] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  316.242026][ T9858] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  316.253904][ T9858] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 11730 usecs
[  316.265530][ T9858] pci 0000:00:01.0: Adding to iommu group 1
[  316.270022][ T9864] syzkaller1: entered promiscuous mode
[  316.272004][ T9864] syzkaller1: entered allmulticast mode
[  316.276376][ T9858] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  316.278544][ T9858] pci 0000:00:01.0: vgaarb: bridge control possible
[  316.280611][ T9858] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  316.301316][ T9858] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  316.304116][ T9858] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  316.309170][ T9858] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  316.318729][ T9858] [drm] Found bochs VGA, ID 0xb0c5.
[  316.321187][ T9858] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  316.332526][ T9858] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  316.396573][ T9858] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  316.616931][ T9870] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  316.627058][ T9872] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  316.671579][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[  316.673653][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[  316.887917][ T5839] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  316.888451][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  316.890461][ T9876] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  317.037801][ T5839] usb 8-1: Using ep0 maxpacket: 32
[  317.037925][    T9] usb 5-1: Using ep0 maxpacket: 32
[  317.041400][ T5839] usb 8-1: unable to get BOS descriptor or descriptor too short
[  317.044552][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  317.045653][ T5839] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[  317.050742][ T5839] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[  317.051286][    T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  317.053368][ T5839] usb 8-1: config 14 has no interface number 0
[  317.056966][    T9] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  317.058928][ T5839] usb 8-1: config 14 has no interface number 1
[  317.062793][    T9] usb 5-1: config 14 has no interface number 0
[  317.064293][ T5839] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  317.066855][    T9] usb 5-1: config 14 has no interface number 1
[  317.070224][ T5839] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  317.070241][ T5839] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  317.070254][ T5839] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  317.070269][ T5839] usb 8-1: config 14 interface 57 has no altsetting 0
[  317.070278][ T5839] usb 8-1: config 14 interface 228 has no altsetting 0
[  317.072047][ T5839] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  317.082286][    T9] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  317.086222][    T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  317.086250][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  317.086274][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  317.086297][    T9] usb 5-1: config 14 interface 57 has no altsetting 0
[  317.086315][    T9] usb 5-1: config 14 interface 228 has no altsetting 0
[  317.089034][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.101686][    T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  317.102948][ T5839] usb 8-1: Product: syz
[  317.108589][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.109900][ T5839] usb 8-1: Manufacturer: syz
[  317.112602][    T9] usb 5-1: Product: syz
[  317.115149][ T5839] usb 8-1: SerialNumber: syz
[  317.119014][    T9] usb 5-1: Manufacturer: syz
[  317.131242][    T9] usb 5-1: SerialNumber: syz
[  317.140220][ T9879] 9p: Bad value for 'wfdno'
[  317.157803][ T1356] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  317.328235][ T1356] usb 6-1: Using ep0 maxpacket: 32
[  317.364770][ T1356] usb 6-1: unable to get BOS descriptor or descriptor too short
[  317.373885][ T1356] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  317.382600][ T1356] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  317.389238][ T1356] usb 6-1: config 14 has no interface number 0
[  317.393701][ T1356] usb 6-1: config 14 has no interface number 1
[  317.397911][ T1356] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  317.403830][ T1356] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  317.407501][ T1356] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  317.415556][ T1356] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  317.421769][ T1356] usb 6-1: config 14 interface 57 has no altsetting 0
[  317.423954][ T1356] usb 6-1: config 14 interface 228 has no altsetting 0
[  317.436098][ T1356] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  317.442819][ T1356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.459489][ T1356] usb 6-1: Product: syz
[  317.461553][ T1356] usb 6-1: Manufacturer: syz
[  317.467843][ T1356] usb 6-1: SerialNumber: syz
[  319.535039][ T9896] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  319.623135][ T5839] legousbtower 8-1:14.57: interrupt endpoints not found
[  319.635106][ T5839] legousbtower 8-1:14.228: interrupt endpoints not found
[  319.647990][    T9] legousbtower 5-1:14.57: interrupt endpoints not found
[  319.657771][ T5839] usb 8-1: USB disconnect, device number 19
[  319.659004][    T9] legousbtower 5-1:14.228: interrupt endpoints not found
[  319.671068][    T9] usb 5-1: USB disconnect, device number 19
[  319.777969][   T50] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  319.818678][ T9901] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  319.836017][ T9901] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  319.840474][ T9901] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  319.844409][ T9901] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  319.848789][ T9901] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  319.861800][ T9901] pci 0000:00:01.0: Adding to iommu group 1
[  319.866950][ T9901] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  319.869110][ T9901] pci 0000:00:01.0: vgaarb: bridge control possible
[  319.871179][ T9901] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  319.884450][ T9901] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  319.887512][ T9901] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  319.893900][ T9901] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  319.909521][ T1356] legousbtower 6-1:14.57: interrupt endpoints not found
[  319.923000][ T1356] legousbtower 6-1:14.228: interrupt endpoints not found
[  319.927906][   T50] usb 7-1: Using ep0 maxpacket: 32
[  319.934674][   T50] usb 7-1: unable to get BOS descriptor or descriptor too short
[  319.942730][ T1356] usb 6-1: USB disconnect, device number 18
[  319.945944][   T50] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  319.951669][ T9901] [drm] Found bochs VGA, ID 0xb0c5.
[  319.953411][ T9901] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  319.955247][   T50] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  319.963927][   T50] usb 7-1: config 14 has no interface number 0
[  319.967406][   T50] usb 7-1: config 14 has no interface number 1
[  319.971942][   T50] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  319.976857][   T50] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  319.981180][   T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  319.981537][ T9901] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  319.984870][   T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  319.991602][   T50] usb 7-1: config 14 interface 57 has no altsetting 0
[  319.993827][   T50] usb 7-1: config 14 interface 228 has no altsetting 0
[  320.037298][   T50] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  320.063353][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.068035][   T50] usb 7-1: Product: syz
[  320.069448][   T50] usb 7-1: Manufacturer: syz
[  320.072561][   T50] usb 7-1: SerialNumber: syz
[  320.076461][ T9904] syzkaller1: entered promiscuous mode
[  320.078437][ T9904] syzkaller1: entered allmulticast mode
[  320.159398][ T9901] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  320.238437][ T9907] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  320.283837][ T9907] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  320.299305][ T9907] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  320.311175][ T9907] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  320.319702][ T9907] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  320.340611][ T9907] pci 0000:00:01.0: Adding to iommu group 1
[  320.355969][ T9907] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  320.358106][ T9907] pci 0000:00:01.0: vgaarb: bridge control possible
[  320.360146][ T9907] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  320.408666][ T9907] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  320.412500][ T9907] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  320.421029][ T9907] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  320.455651][ T9907] [drm] Found bochs VGA, ID 0xb0c5.
[  320.459668][ T9907] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  320.484673][ T9907] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  320.607318][ T9907] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  320.812455][ T9916] syzkaller1: entered promiscuous mode
[  320.816506][ T9916] syzkaller1: entered allmulticast mode
[  322.204076][ T9935] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  322.525004][ T1356] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  322.717319][   T50] legousbtower 7-1:14.57: interrupt endpoints not found
[  323.247783][ T1356] usb 6-1: Using ep0 maxpacket: 32
[  323.273745][ T9962] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  323.312250][ T1356] usb 6-1: unable to get BOS descriptor or descriptor too short
[  323.316121][   T50] legousbtower 7-1:14.228: interrupt endpoints not found
[  323.319477][ T1356] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  323.322549][ T1356] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  323.329234][   T50] usb 7-1: USB disconnect, device number 17
[  323.331364][ T1356] usb 6-1: config 14 has no interface number 0
[  323.335190][ T1356] usb 6-1: config 14 has no interface number 1
[  323.337793][ T1356] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  323.341574][ T1356] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  323.347219][ T1356] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  323.351118][ T1356] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  323.354677][ T1356] usb 6-1: config 14 interface 57 has no altsetting 0
[  323.356818][ T1356] usb 6-1: config 14 interface 228 has no altsetting 0
[  323.360679][ T1356] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  323.363579][ T1356] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.366093][ T1356] usb 6-1: Product: syz
[  323.367404][ T1356] usb 6-1: Manufacturer: syz
[  323.370187][ T1356] usb 6-1: SerialNumber: syz
[  323.650360][ T9967] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  323.657925][   T50] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  323.666737][ T9969] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  323.807801][   T50] usb 7-1: Using ep0 maxpacket: 32
[  323.811494][   T50] usb 7-1: unable to get BOS descriptor or descriptor too short
[  323.814943][   T50] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  323.817586][   T50] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  323.820436][   T50] usb 7-1: config 14 has no interface number 0
[  323.822415][   T50] usb 7-1: config 14 has no interface number 1
[  323.824496][   T50] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  323.827932][   T50] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  323.831594][   T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  323.835242][   T50] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  323.839275][   T50] usb 7-1: config 14 interface 57 has no altsetting 0
[  323.841430][   T50] usb 7-1: config 14 interface 228 has no altsetting 0
[  323.845834][   T50] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  323.848645][   T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.851133][   T50] usb 7-1: Product: syz
[  323.852454][   T50] usb 7-1: Manufacturer: syz
[  323.853876][   T50] usb 7-1: SerialNumber: syz
[  323.897859][ T5839] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  323.917802][ T5755] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  324.057826][ T5839] usb 8-1: Using ep0 maxpacket: 32
[  324.061430][ T5839] usb 8-1: unable to get BOS descriptor or descriptor too short
[  324.064842][ T5839] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[  324.067618][ T5839] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[  324.070363][ T5839] usb 8-1: config 14 has no interface number 0
[  324.072347][ T5839] usb 8-1: config 14 has no interface number 1
[  324.074401][ T5839] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  324.077809][ T5839] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  324.077978][ T5755] usb 5-1: Using ep0 maxpacket: 32
[  324.081429][ T5839] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  324.084682][ T5755] usb 5-1: unable to get BOS descriptor or descriptor too short
[  324.086691][ T5839] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  324.090103][ T5755] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  324.092622][ T5839] usb 8-1: config 14 interface 57 has no altsetting 0
[  324.095181][ T5755] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  324.095196][ T5755] usb 5-1: config 14 has no interface number 0
[  324.095204][ T5755] usb 5-1: config 14 has no interface number 1
[  324.095233][ T5755] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  324.097429][ T5839] usb 8-1: config 14 interface 228 has no altsetting 0
[  324.100247][ T5755] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  324.104291][ T5839] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  324.104400][ T5755] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  324.104417][ T5755] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  324.104431][ T5755] usb 5-1: config 14 interface 57 has no altsetting 0
[  324.107941][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.110001][ T5755] usb 5-1: config 14 interface 228 has no altsetting 0
[  324.111562][ T5755] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  324.113864][ T5839] usb 8-1: Product: syz
[  324.116695][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.120187][ T5839] usb 8-1: Manufacturer: syz
[  324.120198][ T5839] usb 8-1: SerialNumber: syz
[  324.140535][ T5755] usb 5-1: Product: syz
[  324.141883][ T5755] usb 5-1: Manufacturer: syz
[  324.143396][ T5755] usb 5-1: SerialNumber: syz
[  325.222202][ T1356] legousbtower 6-1:14.57: interrupt endpoints not found
[  325.231988][ T1356] legousbtower 6-1:14.228: interrupt endpoints not found
[  325.242741][ T1356] usb 6-1: USB disconnect, device number 19
[  325.268827][ T9975] syzkaller1: entered promiscuous mode
[  325.270758][ T9975] syzkaller1: entered allmulticast mode
[  326.299673][   T50] legousbtower 7-1:14.57: interrupt endpoints not found
[  326.312060][   T50] legousbtower 7-1:14.228: interrupt endpoints not found
[  326.335083][   T50] usb 7-1: USB disconnect, device number 18
[  326.681014][ T5755] legousbtower 5-1:14.57: interrupt endpoints not found
[  326.700803][ T5755] legousbtower 5-1:14.228: interrupt endpoints not found
[  326.721932][ T5755] usb 5-1: USB disconnect, device number 20
[  326.767023][ T9996] syzkaller0: entered promiscuous mode
[  326.771064][ T9996] syzkaller0: entered allmulticast mode
[  327.087696][ T5839] legousbtower 8-1:14.57: interrupt endpoints not found
[  327.092528][ T5839] legousbtower 8-1:14.228: interrupt endpoints not found
[  327.096976][ T5839] usb 8-1: USB disconnect, device number 20
[  327.417671][T10005] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  327.440729][T10005] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  327.443761][T10005] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  327.447232][T10005] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  327.453185][T10005] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  327.492367][T10005] pci 0000:00:01.0: Adding to iommu group 1
[  327.530429][T10005] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  327.533205][T10005] pci 0000:00:01.0: vgaarb: bridge control possible
[  327.535887][T10005] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  327.555405][T10005] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  327.558789][T10005] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  327.569581][T10005] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  327.653631][T10005] [drm] Found bochs VGA, ID 0xb0c5.
[  327.656392][T10005] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  328.029269][T10005] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  328.374507][T10005] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  329.515490][T10036] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  329.583834][T10043] 9p: Bad value for 'wfdno'
[  329.784322][ T5832] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  329.957882][ T5832] usb 8-1: Using ep0 maxpacket: 32
[  329.975000][ T5832] usb 8-1: unable to get BOS descriptor or descriptor too short
[  329.985574][ T5832] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[  329.991801][ T5832] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[  329.995024][ T5832] usb 8-1: config 14 has no interface number 0
[  329.997393][ T5832] usb 8-1: config 14 has no interface number 1
[  330.003278][   T56] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  330.006389][ T5832] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  330.023608][ T5832] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  330.034810][ T5832] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  330.049766][ T5832] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  330.053869][ T5832] usb 8-1: config 14 interface 57 has no altsetting 0
[  330.056727][ T5832] usb 8-1: config 14 interface 228 has no altsetting 0
[  330.078332][ T5832] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  330.081582][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.084800][ T5832] usb 8-1: Product: syz
[  330.086445][ T5832] usb 8-1: Manufacturer: syz
[  330.095652][ T5832] usb 8-1: SerialNumber: syz
[  330.168429][   T56] usb 5-1: Using ep0 maxpacket: 32
[  330.183333][   T56] usb 5-1: unable to get BOS descriptor or descriptor too short
[  330.195748][   T56] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  330.199446][   T56] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  330.202922][   T56] usb 5-1: config 14 has no interface number 0
[  330.205246][   T56] usb 5-1: config 14 has no interface number 1
[  330.207971][   T56] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  330.217351][   T56] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  330.223759][   T56] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  330.232474][   T56] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  330.236653][   T56] usb 5-1: config 14 interface 57 has no altsetting 0
[  330.244713][   T56] usb 5-1: config 14 interface 228 has no altsetting 0
[  330.285451][   T56] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  330.289496][   T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.292676][   T56] usb 5-1: Product: syz
[  330.295465][   T56] usb 5-1: Manufacturer: syz
[  330.297255][   T56] usb 5-1: SerialNumber: syz
[  330.592586][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'.
[  330.617428][   T56] legousbtower 5-1:14.57: interrupt endpoints not found
[  330.629902][   T56] legousbtower 5-1:14.228: interrupt endpoints not found
[  330.640595][   T56] usb 5-1: USB disconnect, device number 21
[  330.792874][T10061] syzkaller0: entered promiscuous mode
[  330.794789][T10061] syzkaller0: entered allmulticast mode
[  331.028682][T10074] 9p: Bad value for 'wfdno'
[  331.576478][T10076] syzkaller0: entered promiscuous mode
[  331.579881][T10076] syzkaller0: entered allmulticast mode
[  332.075616][T10090] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  332.090962][T10090] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  332.093360][T10090] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  332.095646][T10090] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  332.098815][T10090] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  332.111049][T10090] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12063 usecs
[  332.120592][T10090] pci 0000:00:01.0: Adding to iommu group 1
[  332.132500][T10090] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  332.134663][T10090] pci 0000:00:01.0: vgaarb: bridge control possible
[  332.136700][T10090] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  332.155389][T10090] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  332.159815][T10090] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  332.166748][T10090] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  332.183771][T10090] [drm] Found bochs VGA, ID 0xb0c5.
[  332.187689][T10090] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  332.207134][T10090] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  332.279989][T10090] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  332.542559][T10103] 9p: Bad value for 'wfdno'
[  332.791644][T10104] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  332.816668][T10104] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  332.821132][T10104] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  332.823240][T10104] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  332.830139][T10104] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  332.841738][T10104] pci 0000:00:01.0: Adding to iommu group 1
[  332.847185][T10104] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  332.849368][T10104] pci 0000:00:01.0: vgaarb: bridge control possible
[  332.851411][T10104] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  332.871818][T10104] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  332.874613][T10104] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  332.881275][T10104] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  332.889918][T10104] [drm] Found bochs VGA, ID 0xb0c5.
[  332.891622][T10104] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  332.910765][T10104] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  333.041019][T10104] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  333.347716][ T5832] legousbtower 8-1:14.57: interrupt endpoints not found
[  333.368997][ T5832] legousbtower 8-1:14.228: interrupt endpoints not found
[  333.390505][ T5832] usb 8-1: USB disconnect, device number 21
[  334.229026][T10150] syzkaller0: entered promiscuous mode
[  334.231190][T10150] syzkaller0: entered allmulticast mode
[  335.173554][T10169] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  335.188987][T10169] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  335.192017][T10169] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  335.194828][T10169] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  335.198692][T10169] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  335.206965][T10169] pci 0000:00:01.0: Adding to iommu group 1
[  335.213469][T10169] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  335.216159][T10169] pci 0000:00:01.0: vgaarb: bridge control possible
[  335.218737][T10169] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  335.227029][T10169] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  335.230676][T10169] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  335.234840][T10169] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  335.244921][T10169] [drm] Found bochs VGA, ID 0xb0c5.
[  335.246989][T10169] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  335.300209][T10169] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  335.351379][T10169] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  335.600605][T10175] syzkaller0: entered promiscuous mode
[  335.602379][T10175] syzkaller0: entered allmulticast mode
[  335.751517][T10177] syzkaller0: entered promiscuous mode
[  335.753518][T10177] syzkaller0: entered allmulticast mode
[  336.100431][T10184] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  336.117341][T10184] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  336.120686][T10184] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  336.124145][T10184] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  336.129182][T10184] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  336.269413][T10184] pci 0000:00:01.0: Adding to iommu group 1
[  336.302491][T10184] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  336.304716][T10184] pci 0000:00:01.0: vgaarb: bridge control possible
[  336.306718][T10184] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  336.320593][T10184] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  336.323705][T10184] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  336.330615][T10184] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  336.363208][T10184] [drm] Found bochs VGA, ID 0xb0c5.
[  336.365105][T10184] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  336.393520][T10184] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  336.535680][T10184] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  336.618086][T10193] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  336.630764][T10193] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  336.633598][T10193] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  336.636029][T10193] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  336.639026][T10193] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  336.979077][T10194] 9p: Bad value for 'rfdno'
[  337.146477][T10193] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 495688 usecs
[  337.474292][T10193] pci 0000:00:01.0: Adding to iommu group 1
[  337.662891][T10193] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  337.665210][T10193] pci 0000:00:01.0: vgaarb: bridge control possible
[  337.667294][T10193] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  337.684144][T10193] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  337.686930][T10193] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  337.690756][T10193] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  337.698845][T10193] [drm] Found bochs VGA, ID 0xb0c5.
[  337.700587][T10193] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  337.704213][T10193] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  337.857825][T10207] syzkaller0: entered promiscuous mode
[  337.859653][T10207] syzkaller0: entered allmulticast mode
[  337.895199][T10210] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  337.908118][T10210] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  337.910748][T10210] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  337.912962][T10210] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  337.915994][T10210] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  337.929748][T10210] pci 0000:00:01.0: Adding to iommu group 1
[  337.934930][T10210] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  337.937113][T10210] pci 0000:00:01.0: vgaarb: bridge control possible
[  337.939194][T10210] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  337.946318][T10210] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  337.949042][T10210] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  337.952852][T10210] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  337.961911][T10210] [drm] Found bochs VGA, ID 0xb0c5.
[  337.963500][T10210] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  337.973124][T10210] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  338.027198][T10210] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  338.317033][   T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  338.499698][   T10] usb 7-1: Using ep0 maxpacket: 32
[  338.560192][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  338.604238][   T10] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  338.606965][   T10] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  338.617997][   T10] usb 7-1: config 14 has no interface number 0
[  338.635957][   T10] usb 7-1: config 14 has no interface number 1
[  338.668821][   T10] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  338.696474][   T10] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  338.718341][   T10] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  338.724717][   T10] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  338.729965][   T10] usb 7-1: config 14 interface 57 has no altsetting 0
[  338.732660][   T10] usb 7-1: config 14 interface 228 has no altsetting 0
[  338.800854][   T10] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  338.804140][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.807077][   T10] usb 7-1: Product: syz
[  338.825146][   T10] usb 7-1: Manufacturer: syz
[  338.833354][   T10] usb 7-1: SerialNumber: syz
[  338.904353][T10247] 9p: Bad value for 'wfdno'
[  338.982504][T10245] syzkaller0: entered promiscuous mode
[  338.984511][T10245] syzkaller0: entered allmulticast mode
[  339.351267][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'.
[  339.361367][   T10] legousbtower 7-1:14.57: interrupt endpoints not found
[  339.366859][   T10] legousbtower 7-1:14.228: interrupt endpoints not found
[  339.375468][   T10] usb 7-1: USB disconnect, device number 19
[  339.563172][T10265] 9p: Bad value for 'wfdno'
[  339.611325][T10265] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  339.629695][T10265] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  339.632386][T10265] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  339.635005][T10265] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  339.642562][T10265] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  339.680364][T10265] pci 0000:00:01.0: Adding to iommu group 1
[  339.712277][T10265] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  339.714478][T10265] pci 0000:00:01.0: vgaarb: bridge control possible
[  339.716587][T10265] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  339.731294][T10265] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  339.734617][T10265] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  339.742618][T10265] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  339.778081][T10265] [drm] Found bochs VGA, ID 0xb0c5.
[  339.780142][T10265] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  339.823846][T10265] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  339.890085][T10269] syzkaller0: entered promiscuous mode
[  339.891976][T10269] syzkaller0: entered allmulticast mode
[  340.006240][T10265] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  340.402139][T10273] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  340.502321][T10276] 9p: Bad value for 'wfdno'
[  340.682315][ T5755] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  340.710104][T10277] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  340.724974][T10277] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  340.727605][T10277] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  340.730474][T10277] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  340.735184][T10277] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  340.845648][T10277] pci 0000:00:01.0: Adding to iommu group 1
[  340.857998][ T5755] usb 6-1: Using ep0 maxpacket: 32
[  340.871103][ T5755] usb 6-1: unable to get BOS descriptor or descriptor too short
[  340.877856][ T5755] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  340.882556][ T5755] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  340.885344][ T5755] usb 6-1: config 14 has no interface number 0
[  340.891748][ T5755] usb 6-1: config 14 has no interface number 1
[  340.894022][ T5755] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  340.900528][ T5755] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  340.904654][ T5755] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  340.915754][ T5755] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  340.920227][ T5755] usb 6-1: config 14 interface 57 has no altsetting 0
[  340.923448][ T5755] usb 6-1: config 14 interface 228 has no altsetting 0
[  340.927717][T10277] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  340.929862][T10277] pci 0000:00:01.0: vgaarb: bridge control possible
[  340.931936][T10277] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  340.945147][ T5755] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  340.948618][ T5755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.951260][ T5755] usb 6-1: Product: syz
[  340.952693][ T5755] usb 6-1: Manufacturer: syz
[  340.954240][ T5755] usb 6-1: SerialNumber: syz
[  340.976408][T10277] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  340.987467][T10277] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  340.992771][T10277] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  341.068847][T10277] [drm] Found bochs VGA, ID 0xb0c5.
[  341.072496][T10277] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  341.103689][T10277] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  341.362263][T10277] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  341.559275][T10290] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  341.572777][T10290] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  341.575572][T10290] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  341.578140][T10290] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  341.581263][T10290] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  341.590585][T10290] pci 0000:00:01.0: Adding to iommu group 1
[  341.597353][T10290] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  341.599495][T10290] pci 0000:00:01.0: vgaarb: bridge control possible
[  341.601544][T10290] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  341.610007][T10290] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  341.613166][T10290] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  341.617413][T10290] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  341.630157][T10290] [drm] Found bochs VGA, ID 0xb0c5.
[  341.631854][T10290] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  341.643957][T10290] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  341.689108][T10290] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  341.932258][T10298] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  341.945505][T10298] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  341.948322][T10298] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  341.950584][T10298] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  341.953574][T10298] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  341.961032][T10298] pci 0000:00:01.0: Adding to iommu group 1
[  341.966221][T10298] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  341.968402][T10298] pci 0000:00:01.0: vgaarb: bridge control possible
[  341.970446][T10298] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  341.977870][T10298] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  341.980484][T10298] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  341.983975][T10298] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  341.993286][T10298] [drm] Found bochs VGA, ID 0xb0c5.
[  341.994965][T10298] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  342.002492][T10298] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  342.035962][T10298] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  342.485188][T10338] 9p: Bad value for 'wfdno'
[  342.964456][T10348] 9p: Bad value for 'wfdno'
[  343.097402][T10342] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  343.114948][T10342] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  343.117632][T10342] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  343.121002][T10342] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  343.127338][T10342] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  343.189293][T10342] pci 0000:00:01.0: Adding to iommu group 1
[  343.232735][T10342] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  343.234913][T10342] pci 0000:00:01.0: vgaarb: bridge control possible
[  343.236969][T10342] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  343.250473][T10342] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  343.253552][T10342] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  343.259986][T10342] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  343.307664][T10342] [drm] Found bochs VGA, ID 0xb0c5.
[  343.309745][T10342] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  343.733542][ T5755] legousbtower 6-1:14.57: interrupt endpoints not found
[  343.778394][ T5755] legousbtower 6-1:14.228: interrupt endpoints not found
[  343.808885][ T5755] usb 6-1: USB disconnect, device number 20
[  344.016124][T10351] syzkaller0: entered promiscuous mode
[  344.018903][T10351] syzkaller0: entered allmulticast mode
[  344.039982][T10342] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  344.103396][T10342] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  344.345371][T10364] 9p: Bad value for 'wfdno'
[  346.464772][T10393] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  346.487336][T10393] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  346.491304][T10393] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  346.494401][T10393] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  346.502122][T10393] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  346.609509][T10393] pci 0000:00:01.0: Adding to iommu group 1
[  346.643957][T10393] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  346.646029][T10393] pci 0000:00:01.0: vgaarb: bridge control possible
[  346.647954][T10393] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  346.724819][T10393] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  346.734385][T10393] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  347.008258][T10405] 9p: Bad value for 'wfdno'
[  347.568403][T10393] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  347.579246][T10393] [drm] Found bochs VGA, ID 0xb0c5.
[  347.581625][T10393] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  347.622975][T10393] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  347.827316][T10406] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  347.890054][T10406] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  347.892661][T10406] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  347.895451][T10406] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  347.915222][T10406] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  347.935715][T10406] pci 0000:00:01.0: Adding to iommu group 1
[  347.955774][T10406] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  347.958628][T10406] pci 0000:00:01.0: vgaarb: bridge control possible
[  347.961196][T10406] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  347.996957][T10406] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  348.040249][T10406] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  348.065134][T10406] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  348.138676][T10406] [drm] Found bochs VGA, ID 0xb0c5.
[  348.145438][T10406] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  348.152570][T10406] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  348.217170][T10417] 9p: Bad value for 'wfdno'
[  348.225190][T10419] 9p: Bad value for 'wfdno'
[  348.294189][T10419] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  348.311645][T10419] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  348.314349][T10419] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  348.317178][T10419] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  348.323260][T10419] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  348.378626][T10419] pci 0000:00:01.0: Adding to iommu group 1
[  348.393050][T10419] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  348.395230][T10419] pci 0000:00:01.0: vgaarb: bridge control possible
[  348.397323][T10419] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  348.414514][T10419] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  348.417665][T10419] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  348.425421][T10419] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  348.464738][T10419] [drm] Found bochs VGA, ID 0xb0c5.
[  348.466678][T10419] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  348.505537][T10419] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  348.647638][T10419] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  349.091772][T10422] syzkaller0: entered promiscuous mode
[  349.093462][T10422] syzkaller0: entered allmulticast mode
[  349.133395][T10424] syzkaller0: entered promiscuous mode
[  349.142157][T10424] syzkaller0: entered allmulticast mode
[  349.335112][T10429] 9p: Bad value for 'wfdno'
[  349.416210][T10427] syzkaller0: entered promiscuous mode
[  349.420782][T10427] syzkaller0: entered allmulticast mode
[  350.282354][T10433] 9p: Bad value for 'rfdno'
[  350.337801][T10437] 9p: Bad value for 'wfdno'
[  350.351113][T10437] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  350.367413][T10437] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  350.370114][T10437] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  350.372773][T10437] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  350.379103][T10437] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  350.408657][T10437] pci 0000:00:01.0: Adding to iommu group 1
[  350.436065][T10437] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  350.438422][T10437] pci 0000:00:01.0: vgaarb: bridge control possible
[  350.440480][T10437] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  350.456584][T10437] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  350.459784][T10437] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  350.467509][T10437] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  350.510789][T10437] [drm] Found bochs VGA, ID 0xb0c5.
[  350.512602][T10437] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  350.596637][T10437] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  350.769328][T10437] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  351.286504][T10444] 9p: Bad value for 'wfdno'
[  351.826003][T10458] 9p: Bad value for 'rfdno'
[  351.944154][T10456] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  351.963047][T10456] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  351.965869][T10456] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  351.969868][T10456] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  351.974711][T10456] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  352.042720][T10456] pci 0000:00:01.0: Adding to iommu group 1
[  352.067101][T10456] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  352.069265][T10456] pci 0000:00:01.0: vgaarb: bridge control possible
[  352.071310][T10456] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  352.097514][T10456] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  352.100938][T10456] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  352.108678][T10456] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  352.167264][T10456] [drm] Found bochs VGA, ID 0xb0c5.
[  352.170087][T10456] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  352.378712][T10456] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  352.637000][T10456] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  352.875116][T10470] 9p: Bad value for 'wfdno'
[  352.948906][T10473] syzkaller0: entered promiscuous mode
[  352.953798][T10473] syzkaller0: entered allmulticast mode
[  353.078985][T10475] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  353.094140][T10475] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  353.096725][T10475] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  353.100086][T10475] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  353.106073][T10475] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  353.136007][T10475] pci 0000:00:01.0: Adding to iommu group 1
[  353.161166][T10475] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  353.163306][T10475] pci 0000:00:01.0: vgaarb: bridge control possible
[  353.165433][T10475] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  353.177686][T10475] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  353.180480][T10475] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  353.185101][T10475] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  353.226129][T10475] [drm] Found bochs VGA, ID 0xb0c5.
[  353.228161][T10475] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  353.571521][T10475] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  353.750990][T10475] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  353.900589][T10487] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  354.107615][T10485] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  354.121474][T10485] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  354.124262][T10485] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  354.126669][T10485] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  354.129921][T10485] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  354.142751][T10485] pci 0000:00:01.0: Adding to iommu group 1
[  354.148736][T10485] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  354.150887][T10485] pci 0000:00:01.0: vgaarb: bridge control possible
[  354.152938][T10485] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  354.161746][T10485] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  354.164655][T10485] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  354.167977][    T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  354.168359][T10485] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  354.178884][T10485] [drm] Found bochs VGA, ID 0xb0c5.
[  354.180567][T10485] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  354.191527][T10485] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  354.231056][T10485] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  354.318524][    T9] usb 8-1: Using ep0 maxpacket: 32
[  354.324416][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  354.332571][    T9] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[  354.338151][    T9] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[  354.344523][    T9] usb 8-1: config 14 has no interface number 0
[  354.352202][    T9] usb 8-1: config 14 has no interface number 1
[  354.355385][    T9] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  354.372318][    T9] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  354.386512][T10493] 9p: Bad value for 'rfdno'
[  354.388052][    T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  354.402780][    T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  354.422045][    T9] usb 8-1: config 14 interface 57 has no altsetting 0
[  354.427071][T10494] 9p: Bad value for 'wfdno'
[  354.433605][    T9] usb 8-1: config 14 interface 228 has no altsetting 0
[  354.463327][    T9] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  354.472872][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.472958][    T9] usb 8-1: Product: syz
[  354.473021][    T9] usb 8-1: Manufacturer: syz
[  354.473085][    T9] usb 8-1: SerialNumber: syz
[  354.796647][T10495] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  354.819180][T10495] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  354.821732][T10495] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  354.824885][T10495] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  354.828944][T10495] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  354.839400][T10495] pci 0000:00:01.0: Adding to iommu group 1
[  354.845254][T10495] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  354.847973][T10495] pci 0000:00:01.0: vgaarb: bridge control possible
[  354.850539][T10495] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  354.861190][T10495] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  354.863810][T10495] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  354.867299][T10495] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  354.878820][T10495] [drm] Found bochs VGA, ID 0xb0c5.
[  354.880566][T10495] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  354.899336][T10495] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  354.938890][T10495] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  356.348719][T10527] 9p: Bad value for 'wfdno'
[  357.093321][    T9] legousbtower 8-1:14.57: interrupt endpoints not found
[  357.114772][    T9] legousbtower 8-1:14.228: interrupt endpoints not found
[  357.127799][    T9] usb 8-1: USB disconnect, device number 22
[  357.216137][T10524] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  357.255983][T10524] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  357.279687][T10524] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  357.282128][T10524] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  357.285550][T10524] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  357.344211][T10524] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 57477 usecs
[  357.369736][T10524] pci 0000:00:01.0: Adding to iommu group 1
[  357.401982][T10524] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  357.404135][T10524] pci 0000:00:01.0: vgaarb: bridge control possible
[  357.406200][T10524] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  357.462367][T10524] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  357.472455][T10524] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  357.474175][T10534] syzkaller0: entered promiscuous mode
[  357.476167][T10524] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  357.476776][T10534] syzkaller0: entered allmulticast mode
[  357.505428][T10524] [drm] Found bochs VGA, ID 0xb0c5.
[  357.510943][T10524] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  357.526098][T10524] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  357.597108][T10538] 9p: Bad value for 'rfdno'
[  357.600031][T10524] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  358.400591][T10539] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  358.495436][T10539] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  358.501964][T10539] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  358.508650][T10539] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  358.515699][T10539] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  358.535502][T10539] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 19465 usecs
[  358.596956][T10539] pci 0000:00:01.0: Adding to iommu group 1
[  358.648280][T10539] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  358.650517][T10539] pci 0000:00:01.0: vgaarb: bridge control possible
[  358.652577][T10539] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  358.708641][T10539] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  358.727507][T10539] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  358.787398][T10539] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  358.827459][T10539] [drm] Found bochs VGA, ID 0xb0c5.
[  358.839878][T10539] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  358.848504][T10539] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  359.391339][T10569] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  359.407673][T10569] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  359.410394][T10569] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  359.412882][T10569] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  359.417432][T10569] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  359.450877][T10569] pci 0000:00:01.0: Adding to iommu group 1
[  359.480122][T10569] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  359.482251][T10569] pci 0000:00:01.0: vgaarb: bridge control possible
[  359.484301][T10569] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  359.505347][T10569] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  359.508654][T10569] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  359.517075][T10569] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  359.578614][T10569] [drm] Found bochs VGA, ID 0xb0c5.
[  359.580338][T10569] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  359.985426][T10569] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  360.042664][T10569] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  360.392282][T10591] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  360.409982][T10591] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  360.413983][T10591] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  360.418367][T10591] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  360.426103][T10591] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  360.466145][T10591] pci 0000:00:01.0: Adding to iommu group 1
[  360.475915][T10597] 9p: Bad value for 'wfdno'
[  360.498486][T10591] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  360.500795][T10591] pci 0000:00:01.0: vgaarb: bridge control possible
[  360.503079][T10591] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  360.518503][T10591] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  360.522144][T10591] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  360.528716][T10591] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  360.586356][T10591] [drm] Found bochs VGA, ID 0xb0c5.
[  360.588930][T10591] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  361.227198][T10591] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  361.341831][T10591] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  361.610351][T10611] comedi comedi1: comedi_parport: I/O base address not correctly aligned
[  361.917837][   T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  361.938242][T10625] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  361.962609][T10625] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  361.965748][T10625] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  361.968803][T10625] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  361.973868][T10625] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  362.009738][T10625] pci 0000:00:01.0: Adding to iommu group 1
[  362.040353][T10625] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  362.042533][T10625] pci 0000:00:01.0: vgaarb: bridge control possible
[  362.044588][T10625] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  362.061721][T10625] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  362.065448][T10625] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  362.076272][T10625] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  362.135391][T10625] [drm] Found bochs VGA, ID 0xb0c5.
[  362.137475][T10625] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  362.291754][T10625] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  362.383246][T10635] 9p: Bad value for 'wfdno'
[  362.447264][   T10] usb 6-1: Using ep0 maxpacket: 32
[  362.659946][T10625] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  362.870773][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  362.875381][   T10] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  362.878102][   T10] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  362.880727][   T10] usb 6-1: config 14 has no interface number 0
[  362.882734][   T10] usb 6-1: config 14 has no interface number 1
[  362.884803][   T10] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  362.888302][   T10] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  362.894446][   T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  362.898105][   T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  362.901698][   T10] usb 6-1: config 14 interface 57 has no altsetting 0
[  362.903921][   T10] usb 6-1: config 14 interface 228 has no altsetting 0
[  362.913185][   T10] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  362.916345][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.092674][   T10] usb 6-1: Product: syz
[  363.094058][   T10] usb 6-1: Manufacturer: syz
[  363.096810][   T10] usb 6-1: SerialNumber: syz
[  363.141867][T10650] syzkaller0: entered promiscuous mode
[  363.143586][T10650] syzkaller0: entered allmulticast mode
[  363.269822][T10654] syzkaller0: entered promiscuous mode
[  363.272205][T10654] syzkaller0: entered allmulticast mode
[  363.358857][T10657] 9p: Bad value for 'rfdno'
[  363.410527][T10657] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  363.437347][T10657] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  363.440924][T10657] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  363.445146][T10657] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  363.452403][T10657] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  363.486208][T10657] pci 0000:00:01.0: Adding to iommu group 1
[  363.525192][T10657] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  363.527260][T10657] pci 0000:00:01.0: vgaarb: bridge control possible
[  363.529308][T10657] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  363.546582][T10657] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  363.549743][T10657] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  363.558317][T10657] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  363.602060][T10657] [drm] Found bochs VGA, ID 0xb0c5.
[  363.603873][T10657] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  363.657272][T10657] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  363.856125][T10657] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  364.880803][   T10] legousbtower 6-1:14.57: interrupt endpoints not found
[  364.955900][   T10] legousbtower 6-1:14.228: interrupt endpoints not found
[  364.965007][   T10] usb 6-1: USB disconnect, device number 21
[  365.767849][   T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  365.917834][   T10] usb 6-1: Using ep0 maxpacket: 32
[  365.921250][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  365.924566][   T10] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  365.929610][   T10] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  365.935426][   T10] usb 6-1: config 14 has no interface number 0
[  365.943197][   T10] usb 6-1: config 14 has no interface number 1
[  365.947552][   T10] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  365.953340][   T10] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  365.969324][   T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  365.983305][   T10] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  366.023862][   T10] usb 6-1: config 14 interface 57 has no altsetting 0
[  366.031935][   T10] usb 6-1: config 14 interface 228 has no altsetting 0
[  366.075034][   T10] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  366.083332][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.091262][   T10] usb 6-1: Product: syz
[  366.103263][   T10] usb 6-1: Manufacturer: syz
[  366.113032][   T10] usb 6-1: SerialNumber: syz
[  366.336756][T10712] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  366.357595][T10712] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  366.362069][T10712] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  366.364931][T10712] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  366.370379][T10712] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  366.481032][T10712] pci 0000:00:01.0: Adding to iommu group 1
[  366.543080][T10712] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  366.545258][T10712] pci 0000:00:01.0: vgaarb: bridge control possible
[  366.547326][T10712] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  366.560689][T10712] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  366.563538][T10712] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  366.570124][T10712] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  366.633099][T10712] [drm] Found bochs VGA, ID 0xb0c5.
[  366.635089][T10712] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  366.664246][T10712] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  366.901734][T10712] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  366.929336][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'.
[  367.283283][T10724] syzkaller0: entered promiscuous mode
[  367.285196][T10724] syzkaller0: entered allmulticast mode
[  367.315829][   T10] legousbtower 6-1:14.57: interrupt endpoints not found
[  367.322016][   T10] legousbtower 6-1:14.228: interrupt endpoints not found
[  367.327482][   T10] usb 6-1: USB disconnect, device number 22
[  367.435139][T10729] syzkaller0: entered promiscuous mode
[  367.437951][T10729] syzkaller0: entered allmulticast mode
[  367.449604][T10730] 9p: Bad value for 'wfdno'
[  367.655583][T10734] syzkaller0: entered promiscuous mode
[  367.657345][T10734] syzkaller0: entered allmulticast mode
[  367.687889][   T41] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  367.695895][T10735] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  367.714040][T10735] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  367.716883][T10735] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  367.719454][T10735] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  367.723493][T10735] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  367.735416][T10735] pci 0000:00:01.0: Adding to iommu group 1
[  367.757792][T10735] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  367.759992][T10735] pci 0000:00:01.0: vgaarb: bridge control possible
[  367.761877][T10735] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  367.776591][T10735] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  367.779702][T10735] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  367.782814][T10738] syzkaller0: entered promiscuous mode
[  367.784786][T10738] syzkaller0: entered allmulticast mode
[  367.786777][T10735] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  367.838472][   T41] usb 7-1: Using ep0 maxpacket: 32
[  367.841760][   T41] usb 7-1: unable to get BOS descriptor or descriptor too short
[  367.845813][   T41] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  367.855933][   T41] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  367.859293][   T41] usb 7-1: config 14 has no interface number 0
[  367.861283][   T41] usb 7-1: config 14 has no interface number 1
[  367.863273][   T41] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  367.866660][   T41] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  367.873933][   T41] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  367.877581][   T41] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  367.881793][   T41] usb 7-1: config 14 interface 57 has no altsetting 0
[  367.884008][   T41] usb 7-1: config 14 interface 228 has no altsetting 0
[  367.889224][T10735] [drm] Found bochs VGA, ID 0xb0c5.
[  367.889399][   T41] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  367.891149][T10735] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  367.894230][   T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.903813][   T41] usb 7-1: Product: syz
[  367.982357][T10735] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  368.132333][T10735] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  368.426130][   T41] usb 7-1: Manufacturer: syz
[  368.427677][   T41] usb 7-1: SerialNumber: syz
[  369.743778][T10768] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  369.780236][T10768] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  369.782879][T10768] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  369.785653][T10768] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  369.795996][T10768] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  369.817863][T10768] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 21496 usecs
[  369.825504][T10771] syzkaller0: entered promiscuous mode
[  369.830099][T10771] syzkaller0: entered allmulticast mode
[  369.896981][T10768] pci 0000:00:01.0: Adding to iommu group 1
[  369.931202][T10768] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  369.933364][T10768] pci 0000:00:01.0: vgaarb: bridge control possible
[  369.935352][T10768] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  369.952276][T10768] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  369.954953][T10768] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  369.961973][T10768] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  370.001372][T10768] [drm] Found bochs VGA, ID 0xb0c5.
[  370.003152][T10768] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  370.034491][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1036'.
[  370.120815][T10768] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  370.221669][T10778] syzkaller0: entered promiscuous mode
[  370.223512][T10778] syzkaller0: entered allmulticast mode
[  370.298829][T10768] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  370.331294][   T41] legousbtower 7-1:14.57: interrupt endpoints not found
[  370.456089][   T41] legousbtower 7-1:14.228: interrupt endpoints not found
[  370.482281][   T41] usb 7-1: USB disconnect, device number 20
[  370.586204][T10783] 9p: Bad value for 'wfdno'
[  370.693227][T10785] syzkaller0: entered promiscuous mode
[  370.695747][T10785] syzkaller0: entered allmulticast mode
[  370.953263][T10788] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  370.970629][T10788] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  370.973242][T10788] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  370.975996][T10788] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  370.982289][T10788] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  371.028700][T10788] pci 0000:00:01.0: Adding to iommu group 1
[  371.060691][T10788] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  371.062857][T10788] pci 0000:00:01.0: vgaarb: bridge control possible
[  371.064912][T10788] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  371.080042][T10788] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  371.083030][T10788] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  371.093165][T10788] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  371.158007][T10788] [drm] Found bochs VGA, ID 0xb0c5.
[  371.161238][T10788] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  371.217434][T10788] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  371.388601][T10788] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  371.402173][ T5120] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  371.575668][ T5120] usb 7-1: Using ep0 maxpacket: 32
[  371.590916][ T5120] usb 7-1: unable to get BOS descriptor or descriptor too short
[  371.606111][ T5120] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  371.609409][ T5120] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  371.619113][ T5120] usb 7-1: config 14 has no interface number 0
[  371.625262][ T5120] usb 7-1: config 14 has no interface number 1
[  371.631954][ T5120] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  371.643503][ T5120] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  371.655861][ T5120] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  371.665119][ T5120] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  371.678904][ T5120] usb 7-1: config 14 interface 57 has no altsetting 0
[  371.685702][ T5120] usb 7-1: config 14 interface 228 has no altsetting 0
[  371.713809][ T5120] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  371.716807][ T5120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.737612][ T5120] usb 7-1: Product: syz
[  371.743712][ T5120] usb 7-1: Manufacturer: syz
[  371.750241][ T5120] usb 7-1: SerialNumber: syz
[  372.312526][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'.
[  372.796988][ T5120] legousbtower 7-1:14.57: interrupt endpoints not found
[  372.801955][ T5120] legousbtower 7-1:14.228: interrupt endpoints not found
[  372.812356][ T5120] usb 7-1: USB disconnect, device number 21
[  373.046223][T10822] syzkaller0: entered promiscuous mode
[  373.048123][T10822] syzkaller0: entered allmulticast mode
[  373.095994][T10824] syzkaller0: entered promiscuous mode
[  373.097946][T10824] syzkaller0: entered allmulticast mode
[  373.173432][T10827] syzkaller0: entered promiscuous mode
[  373.175291][T10827] syzkaller0: entered allmulticast mode
[  373.543983][T10835] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  373.568215][T10835] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  373.571223][T10835] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  373.574289][T10835] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  373.578894][T10835] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  373.739512][T10835] pci 0000:00:01.0: Adding to iommu group 1
[  373.747652][T10835] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  373.749820][T10835] pci 0000:00:01.0: vgaarb: bridge control possible
[  373.751871][T10835] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  373.779106][T10835] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  373.784932][T10835] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  373.795433][T10835] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  373.829657][T10835] [drm] Found bochs VGA, ID 0xb0c5.
[  373.833909][T10835] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  373.868131][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  373.874974][T10835] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  374.042144][T10835] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  374.466315][T10847] capability: warning: `syz.3.1064' uses deprecated v2 capabilities in a way that may be insecure
[  374.498855][T10845] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  374.513338][T10845] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  374.516107][T10845] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  374.519142][T10845] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  374.524947][T10845] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  374.577792][   T10] usb 5-1: Using ep0 maxpacket: 32
[  374.581886][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  374.586034][   T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  374.589251][   T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  374.589370][T10845] pci 0000:00:01.0: Adding to iommu group 1
[  374.592023][   T10] usb 5-1: config 14 has no interface number 0
[  374.592036][   T10] usb 5-1: config 14 has no interface number 1
[  374.592073][   T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  374.592086][   T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  374.592100][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  374.592113][   T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  374.592127][   T10] usb 5-1: config 14 interface 57 has no altsetting 0
[  374.592137][   T10] usb 5-1: config 14 interface 228 has no altsetting 0
[  374.594188][   T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  374.620339][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.622881][   T10] usb 5-1: Product: syz
[  374.624215][   T10] usb 5-1: Manufacturer: syz
[  374.625690][   T10] usb 5-1: SerialNumber: syz
[  374.650322][T10845] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  374.652489][T10845] pci 0000:00:01.0: vgaarb: bridge control possible
[  374.654542][T10845] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  374.690751][T10845] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  374.695528][T10845] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  374.701820][T10845] pci 0000:00:04.0: PCI bridge to [bus 01]
[  374.706003][T10845] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  374.715705][T10845] pci 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[  374.724189][T10845] pci 0000:00:04.0:   bridge window [mem 0xfe000000-0xfe1fffff 64bit pref]
[  374.744720][T10845] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  374.773031][T10845] [drm] Found bochs VGA, ID 0xb0c5.
[  374.774750][T10845] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  374.793584][T10845] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  374.817895][   T29] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  374.891394][T10845] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  374.967844][   T29] usb 7-1: Using ep0 maxpacket: 32
[  374.972802][   T29] usb 7-1: unable to get BOS descriptor or descriptor too short
[  374.976268][   T29] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  374.980354][   T29] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  374.983321][   T29] usb 7-1: config 14 has no interface number 0
[  374.985476][   T29] usb 7-1: config 14 has no interface number 1
[  374.987524][   T29] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  374.992710][   T29] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  374.996923][   T29] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  375.001509][   T29] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  375.005254][   T29] usb 7-1: config 14 interface 57 has no altsetting 0
[  375.007824][   T29] usb 7-1: config 14 interface 228 has no altsetting 0
[  375.014825][   T29] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  375.018010][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.020583][   T29] usb 7-1: Product: syz
[  375.022006][   T29] usb 7-1: Manufacturer: syz
[  375.023577][   T29] usb 7-1: SerialNumber: syz
[  375.093066][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'.
[  375.690403][T10868] syzkaller0: entered promiscuous mode
[  375.692298][T10868] syzkaller0: entered allmulticast mode
[  375.694272][   T10] legousbtower 5-1:14.57: interrupt endpoints not found
[  375.787626][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'.
[  375.836011][T10873] syzkaller0: entered promiscuous mode
[  375.837919][T10873] syzkaller0: entered allmulticast mode
[  375.913609][   T29] legousbtower 7-1:14.57: interrupt endpoints not found
[  375.979621][   T29] legousbtower 7-1:14.228: interrupt endpoints not found
[  375.988618][T10877] syzkaller0: entered promiscuous mode
[  375.992761][T10877] syzkaller0: entered allmulticast mode
[  376.051150][   T29] usb 7-1: USB disconnect, device number 22
[  376.057847][   T10] legousbtower 5-1:14.228: interrupt endpoints not found
[  376.064618][   T10] usb 5-1: USB disconnect, device number 22
[  376.158036][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  377.874998][   T64] Bluetooth: hci3: unexpected event 0x18 length: 247 > 23
[  378.121160][ T1441] ieee802154 phy0 wpan0: encryption failed: -22
[  378.131995][ T1441] ieee802154 phy1 wpan1: encryption failed: -22
[  378.385578][T10928] syzkaller0: entered promiscuous mode
[  378.387380][T10928] syzkaller0: entered allmulticast mode
[  378.523089][T10930] syzkaller0: entered promiscuous mode
[  378.525433][T10930] syzkaller0: entered allmulticast mode
[  378.528989][  T846] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  378.697817][  T846] usb 5-1: Using ep0 maxpacket: 32
[  378.700930][T10938] syzkaller0: entered promiscuous mode
[  378.702760][  T846] usb 5-1: unable to get BOS descriptor or descriptor too short
[  378.707033][T10938] syzkaller0: entered allmulticast mode
[  378.707397][  T846] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  378.711219][  T846] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  378.716333][  T846] usb 5-1: config 14 has no interface number 0
[  378.719692][  T846] usb 5-1: config 14 has no interface number 1
[  378.722236][  T846] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  378.726334][  T846] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  378.731455][  T846] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  378.735419][  T846] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  378.739892][  T846] usb 5-1: config 14 interface 57 has no altsetting 0
[  378.742325][  T846] usb 5-1: config 14 interface 228 has no altsetting 0
[  378.746404][  T846] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  378.749651][  T846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.752336][  T846] usb 5-1: Product: syz
[  378.753845][  T846] usb 5-1: Manufacturer: syz
[  378.755399][  T846] usb 5-1: SerialNumber: syz
[  379.065120][T10950] syzkaller0: entered promiscuous mode
[  379.066902][T10950] syzkaller0: entered allmulticast mode
[  379.298281][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'.
[  380.801807][  T846] legousbtower 5-1:14.57: interrupt endpoints not found
[  380.806469][  T846] legousbtower 5-1:14.228: interrupt endpoints not found
[  380.812994][  T846] usb 5-1: USB disconnect, device number 23
[  380.994390][T10984] syzkaller0: entered promiscuous mode
[  380.996229][T10984] syzkaller0: entered allmulticast mode
[  381.075691][T10988] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  381.081407][T10988] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  381.086694][T10988] overlayfs: missing 'lowerdir'
[  381.133555][T10990] syzkaller0: entered promiscuous mode
[  381.135840][T10990] syzkaller0: entered allmulticast mode
[  381.147307][T10992] FAULT_INJECTION: forcing a failure.
[  381.147307][T10992] name failslab, interval 1, probability 0, space 0, times 1
[  381.165793][T10992] CPU: 2 UID: 0 PID: 10992 Comm: syz.1.1089 Not tainted syzkaller #0 PREEMPT(full) 
[  381.165821][T10992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  381.165832][T10992] Call Trace:
[  381.165848][T10992]  <TASK>
[  381.165855][T10992]  dump_stack_lvl+0x100/0x190
[  381.165960][T10992]  should_fail_ex.cold+0x5/0xa
[  381.165990][T10992]  should_failslab+0xc2/0x120
[  381.166023][T10992]  __kvmalloc_node_noprof+0x116/0x970
[  381.166060][T10992]  ? __pfx___mutex_lock+0x10/0x10
[  381.166115][T10992]  ? nf_hook_entries_grow+0x255/0x870
[  381.166147][T10992]  nf_hook_entries_grow+0x255/0x870
[  381.166169][T10992]  ? __call_rcu_common.constprop.0+0x3f0/0x9b0
[  381.166205][T10992]  __nf_register_net_hook+0x112/0x780
[  381.166229][T10992]  nf_register_net_hook+0x129/0x170
[  381.166250][T10992]  nf_tables_register_hook.part.0+0x10f/0x1c0
[  381.166289][T10992]  nf_tables_addchain.constprop.0+0xee8/0x1ca0
[  381.166316][T10992]  ? nft_chain_lookup+0x59c/0xa60
[  381.166343][T10992]  ? __pfx_nf_tables_addchain.constprop.0+0x10/0x10
[  381.166386][T10992]  ? nla_strcmp+0xff/0x130
[  381.166434][T10992]  ? nft_table_lookup.part.0+0x1e3/0x230
[  381.166457][T10992]  nf_tables_newchain+0x17c3/0x2d30
[  381.166483][T10992]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  381.166519][T10992]  ? __nla_validate_parse+0x1e7/0x28b0
[  381.166541][T10992]  ? __pfx_nf_tables_newchain+0x10/0x10
[  381.166558][T10992]  ? __pfx___nla_validate_parse+0x10/0x10
[  381.166587][T10992]  ? __nla_parse+0x40/0x60
[  381.166610][T10992]  nfnetlink_rcv_batch+0x1410/0x2880
[  381.166649][T10992]  ? __pfx_nfnetlink_rcv_batch+0x10/0x10
[  381.166673][T10992]  ? find_held_lock+0x2b/0x80
[  381.166706][T10992]  ? __local_bh_enable_ip+0x9e/0x120
[  381.166732][T10992]  ? lockdep_hardirqs_on+0x78/0x100
[  381.166755][T10992]  ? __dev_queue_xmit+0xa12/0x4970
[  381.166830][T10992]  ? __nla_parse+0x40/0x60
[  381.166853][T10992]  nfnetlink_rcv+0x3bd/0x440
[  381.166874][T10992]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  381.166894][T10992]  netlink_unicast+0x585/0x850
[  381.166910][T10992]  ? __pfx_netlink_unicast+0x10/0x10
[  381.166927][T10992]  netlink_sendmsg+0x8b0/0xda0
[  381.166942][T10992]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.166956][T10992]  ? apparmor_socket_sendmsg+0x15b/0x270
[  381.166971][T10992]  ____sys_sendmsg+0xa4d/0xbe0
[  381.166992][T10992]  ? __pfx_netlink_sendmsg+0x10/0x10
[  381.167006][T10992]  ? __pfx_____sys_sendmsg+0x10/0x10
[  381.167024][T10992]  ___sys_sendmsg+0x190/0x1e0
[  381.167041][T10992]  ? __pfx____sys_sendmsg+0x10/0x10
[  381.167061][T10992]  ? find_held_lock+0x2b/0x80
[  381.167083][T10992]  __sys_sendmsg+0x160/0x210
[  381.167100][T10992]  ? __pfx___sys_sendmsg+0x10/0x10
[  381.167120][T10992]  ? __pfx_ksys_write+0x10/0x10
[  381.167139][T10992]  __do_fast_syscall_32+0xe7/0x970
[  381.167161][T10992]  ? lockdep_hardirqs_on+0x78/0x100
[  381.167176][T10992]  do_fast_syscall_32+0x32/0x70
[  381.167192][T10992]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  381.167208][T10992] RIP: 0023:0xf6fdefec
[  381.167234][T10992] Code: Unable to access opcode bytes at 0xf6fdefc2.
[  381.167247][T10992] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[  381.167259][T10992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  381.167266][T10992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  381.167273][T10992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  381.167279][T10992] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[  381.167285][T10992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  381.167300][T10992]  </TASK>
[  381.334525][T11002] syzkaller0: entered promiscuous mode
[  381.336352][T11002] syzkaller0: entered allmulticast mode
[  382.117826][  T846] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  382.278909][  T846] usb 5-1: Using ep0 maxpacket: 32
[  382.308700][  T846] usb 5-1: unable to get BOS descriptor or descriptor too short
[  382.316014][  T846] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  382.321183][  T846] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  382.324973][  T846] usb 5-1: config 14 has no interface number 0
[  382.332015][  T846] usb 5-1: config 14 has no interface number 1
[  382.355175][  T846] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  382.391088][  T846] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  382.419353][  T846] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  382.432306][  T846] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  382.459497][  T846] usb 5-1: config 14 interface 57 has no altsetting 0
[  382.471754][  T846] usb 5-1: config 14 interface 228 has no altsetting 0
[  382.553031][  T846] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  382.556024][  T846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.561023][  T846] usb 5-1: Product: syz
[  382.562359][  T846] usb 5-1: Manufacturer: syz
[  382.566163][  T846] usb 5-1: SerialNumber: syz
[  383.144458][T11055] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  383.175073][T11055] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]
[  383.179112][T11055] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]
[  383.187313][T11055] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref]
[  383.227416][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  383.282454][T11055] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  383.325555][  T846] legousbtower 5-1:14.57: interrupt endpoints not found
[  383.408664][  T846] legousbtower 5-1:14.228: interrupt endpoints not found
[  383.446706][  T846] usb 5-1: USB disconnect, device number 24
[  383.667185][T11055] pci 0000:00:01.0: Adding to iommu group 1
[  383.677500][T11055] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  383.679660][T11055] pci 0000:00:01.0: vgaarb: bridge control possible
[  383.681727][T11055] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  383.700424][T11055] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  383.703141][T11055] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  383.705899][T11055] pci 0000:00:04.0: PCI bridge to [bus 01]
[  383.708819][T11055] pci 0000:00:04.0:   bridge window [io  0x1000-0x1fff]
[  383.712563][T11055] pci 0000:00:04.0:   bridge window [mem 0xfe800000-0xfe9fffff]
[  383.716055][T11055] pci 0000:00:04.0:   bridge window [mem 0xfe000000-0xfe1fffff 64bit pref]
[  383.722217][T11055] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  383.730583][T11055] [drm] Found bochs VGA, ID 0xb0c5.
[  383.732320][T11055] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  383.745154][T11055] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  383.784190][T11055] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  383.855054][T11068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1099'.
[  383.868021][T11068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'.
[  383.875489][T11068] bond0: entered promiscuous mode
[  383.877247][T11068] bond_slave_0: entered promiscuous mode
[  383.880581][T11068] bond_slave_1: entered promiscuous mode
[  383.885085][T11068] gretap0: entered promiscuous mode
[  383.889541][T11068] hsr1: entered promiscuous mode
[  383.973831][T11072] syzkaller0: entered promiscuous mode
[  383.975694][T11072] syzkaller0: entered allmulticast mode
[  384.095877][T11074] ==================================================================
[  384.097279][T11076] syzkaller0: entered promiscuous mode
[  384.098467][T11074] BUG: KASAN: invalid-free in f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.098569][T11074] Free of addr ffff8880131c4e8c by task syz.3.1101/11074
[  384.098577][T11074] 
[  384.100485][T11076] syzkaller0: entered allmulticast mode
[  384.102848][T11074] CPU: 0 UID: 0 PID: 11074 Comm: syz.3.1101 Not tainted syzkaller #0 PREEMPT(full) 
[  384.102866][T11074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  384.102873][T11074] Call Trace:
[  384.102885][T11074]  <TASK>
[  384.102889][T11074]  dump_stack_lvl+0x100/0x190
[  384.102913][T11074]  print_report+0x13d/0x4b0
[  384.102932][T11074]  ? __virt_addr_valid+0x239/0x430
[  384.102952][T11074]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.102972][T11074]  kasan_report_invalid_free+0xb8/0x190
[  384.102995][T11074]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.103013][T11074]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.103030][T11074]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.103047][T11074]  check_slab_allocation+0xe1/0xf0
[  384.103060][T11074]  ? f_uac2_opts_p_srate_store+0x100/0x260
[  384.103077][T11074]  kfree+0x1b6/0x6c0
[  384.103092][T11074]  ? __asan_memcpy+0x3c/0x60
[  384.103104][T11074]  f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.103122][T11074]  ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[  384.103140][T11074]  ? configfs_write_iter+0x388/0x4e0
[  384.103181][T11074]  configfs_write_iter+0x302/0x4e0
[  384.103193][T11074]  vfs_write+0x6ac/0x1050
[  384.103209][T11074]  ? __pfx_configfs_write_iter+0x10/0x10
[  384.103221][T11074]  ? __pfx_vfs_write+0x10/0x10
[  384.103231][T11074]  ? find_held_lock+0x2b/0x80
[  384.103254][T11074]  ksys_write+0x12a/0x250
[  384.103265][T11074]  ? __pfx_ksys_write+0x10/0x10
[  384.103276][T11074]  __do_fast_syscall_32+0xe7/0x970
[  384.103305][T11074]  do_fast_syscall_32+0x32/0x70
[  384.103321][T11074]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  384.103337][T11074] RIP: 0023:0xf7fa5fec
[  384.103353][T11074] Code: Unable to access opcode bytes at 0xf7fa5fc2.
[  384.103364][T11074] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  384.103377][T11074] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440
[  384.103384][T11074] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000
[  384.103391][T11074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  384.103399][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  384.103406][T11074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  384.103417][T11074]  </TASK>
[  384.103421][T11074] 
[  384.175932][T11074] Allocated by task 11074:
[  384.177228][T11074]  kasan_save_stack+0x30/0x50
[  384.178603][T11074]  kasan_save_track+0x14/0x30
[  384.179979][T11074]  __kasan_kmalloc+0xaa/0xb0
[  384.181319][T11074]  __kmalloc_node_track_caller_noprof+0x331/0x830
[  384.183197][T11074]  kstrdup+0x51/0xe0
[  384.184424][T11074]  f_uac2_opts_p_srate_store+0x113/0x260
[  384.186240][T11074]  configfs_write_iter+0x302/0x4e0
[  384.187847][T11074]  vfs_write+0x6ac/0x1050
[  384.189320][T11074]  ksys_write+0x12a/0x250
[  384.190684][T11074]  __do_fast_syscall_32+0xe7/0x970
[  384.192292][T11074]  do_fast_syscall_32+0x32/0x70
[  384.193832][T11074]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  384.196243][T11074] 
[  384.197081][T11074] The buggy address belongs to the object at ffff8880131c4e80
[  384.197081][T11074]  which belongs to the cache kmalloc-64 of size 64
[  384.201309][T11074] The buggy address is located 12 bytes inside of
[  384.201309][T11074]  47-byte region [ffff8880131c4e80, ffff8880131c4eaf)
[  384.205348][T11074] 
[  384.206113][T11074] The buggy address belongs to the physical page:
[  384.208092][T11074] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x131c4
[  384.210774][T11074] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  384.212933][T11074] page_type: f5(slab)
[  384.214198][T11074] raw: 00fff00000000000 ffff88801bc428c0 dead000000000100 dead000000000122
[  384.216894][T11074] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
[  384.219522][T11074] page dumped because: kasan: bad access detected
[  384.221543][T11074] page_owner tracks the page as allocated
[  384.223306][T11074] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 2, tgid 2 (kthreadd), ts 83030476343, free_ts 83030469085
[  384.229147][T11074]  post_alloc_hook+0xfd/0x120
[  384.230639][T11074]  get_page_from_freelist+0xf48/0x3530
[  384.232345][T11074]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  384.234202][T11074]  new_slab+0xa2/0x640
[  384.235689][T11074]  ___slab_alloc+0x5d1/0x800
[  384.237157][T11074]  __kmalloc_node_noprof+0x430/0x830
[  384.238818][T11074]  __vmalloc_node_range_noprof+0x409/0x1630
[  384.240680][T11074]  __vmalloc_node_noprof+0xad/0xf0
[  384.242292][T11074]  copy_process+0x7fb/0x8030
[  384.243753][T11074]  kernel_clone+0x176/0x9d0
[  384.245249][T11074]  kernel_thread+0xdb/0x120
[  384.246721][T11074]  kthreadd+0x498/0x7a0
[  384.248170][T11074]  ret_from_fork+0x72b/0xd50
[  384.249645][T11074]  ret_from_fork_asm+0x1a/0x30
[  384.251152][T11074] page last free pid 2 tgid 2 stack trace:
[  384.252985][T11074]  __free_frozen_pages+0x79f/0x1090
[  384.254686][T11074]  __kasan_populate_vmalloc+0x1ea/0x210
[  384.256457][T11074]  alloc_vmap_area+0x95d/0x2bb0
[  384.257994][T11074]  __get_vm_area_node+0x1ca/0x330
[  384.259579][T11074]  __vmalloc_node_range_noprof+0x228/0x1630
[  384.261440][T11074]  __vmalloc_node_noprof+0xad/0xf0
[  384.263055][T11074]  copy_process+0x7fb/0x8030
[  384.264548][T11074]  kernel_clone+0x176/0x9d0
[  384.266027][T11074]  kernel_thread+0xdb/0x120
[  384.267458][T11074]  kthreadd+0x498/0x7a0
[  384.268784][T11074]  ret_from_fork+0x72b/0xd50
[  384.270241][T11074]  ret_from_fork_asm+0x1a/0x30
[  384.271753][T11074] 
[  384.272524][T11074] Memory state around the buggy address:
[  384.274282][T11074]  ffff8880131c4d80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  384.277208][T11074]  ffff8880131c4e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  384.279692][T11074] >ffff8880131c4e80: 00 00 00 00 00 07 fc fc fc fc fc fc fc fc fc fc
[  384.282165][T11074]                       ^
[  384.283509][T11074]  ffff8880131c4f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  384.286021][T11074]  ffff8880131c4f80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  384.288491][T11074] ==================================================================
[  384.298440][T11074] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  384.300726][T11074] CPU: 0 UID: 0 PID: 11074 Comm: syz.3.1101 Not tainted syzkaller #0 PREEMPT(full) 
[  384.303596][T11074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  384.306692][T11074] Call Trace:
[  384.307763][T11074]  <TASK>
[  384.308726][T11074]  dump_stack_lvl+0x100/0x190
[  384.310210][T11074]  vpanic+0x552/0x970
[  384.311464][T11074]  ? __pfx_vpanic+0x10/0x10
[  384.312900][T11074]  panic+0xd1/0xe0
[  384.314100][T11074]  ? __pfx_panic+0x10/0x10
[  384.315579][T11074]  ? preempt_schedule_common+0x42/0xc0
[  384.317287][T11074]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.319105][T11074]  check_panic_on_warn.cold+0x19/0x34
[  384.320781][T11074]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.322599][T11074]  end_report.part.0+0x3a/0x90
[  384.324117][T11074]  kasan_report_invalid_free.cold+0xd/0x12
[  384.326256][T11074]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.328093][T11074]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.329901][T11074]  ? f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.331725][T11074]  check_slab_allocation+0xe1/0xf0
[  384.333337][T11074]  ? f_uac2_opts_p_srate_store+0x100/0x260
[  384.335342][T11074]  kfree+0x1b6/0x6c0
[  384.336603][T11074]  ? __asan_memcpy+0x3c/0x60
[  384.338054][T11074]  f_uac2_opts_p_srate_store+0x1d4/0x260
[  384.339796][T11074]  ? __pfx_f_uac2_opts_p_srate_store+0x10/0x10
[  384.341731][T11074]  ? configfs_write_iter+0x388/0x4e0
[  384.343380][T11074]  configfs_write_iter+0x302/0x4e0
[  384.345177][T11074]  vfs_write+0x6ac/0x1050
[  384.346635][T11074]  ? __pfx_configfs_write_iter+0x10/0x10
[  384.348400][T11074]  ? __pfx_vfs_write+0x10/0x10
[  384.349903][T11074]  ? find_held_lock+0x2b/0x80
[  384.351498][T11074]  ksys_write+0x12a/0x250
[  384.352872][T11074]  ? __pfx_ksys_write+0x10/0x10
[  384.354413][T11074]  __do_fast_syscall_32+0xe7/0x970
[  384.356269][T11074]  do_fast_syscall_32+0x32/0x70
[  384.357814][T11074]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  384.359778][T11074] RIP: 0023:0xf7fa5fec
[  384.361077][T11074] Code: Unable to access opcode bytes at 0xf7fa5fc2.
[  384.363134][T11074] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[  384.365878][T11074] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000440
[  384.368355][T11074] RDX: 000000000000002e RSI: 0000000000000000 RDI: 0000000000000000
[  384.370815][T11074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  384.373230][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  384.375677][T11074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  384.378138][T11074]  </TASK>
[  384.379764][T11074] Kernel Offset: disabled
[  384.381134][T11074] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:27:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85a131f5 RDI=ffffffff9b9f71a0 RBP=ffffffff9b9f7160 RSP=ffffc9000441f598
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000000000001e
R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b6f71e5 R15=ffffffff85a13190
RIP=ffffffff85a1321f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888096bdf000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7fa6000 CR3=000000006db85000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
EAX=00000000 EBX=ffffffff ECX=bfffffff EDX=00000000
ESI=00000000 EDI=0c230000 EBP=f7fa5610 ESP=ffc67ca0
EIP=f70bf2bc EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA]
SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 00000000 ffffffff 00c00000
GS =0063 56b5b480 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 00000000 ffffffff 00c00000
TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000080002280 CR3=0000000066648000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
EAX=f64de7f0 EBX=f64e00f8 ECX=8279c0c2 EDX=f64e00f8
ESI=8279c0c2 EDI=ffffffff EBP=ffffffff ESP=ff9603b0
EIP=f701b31e EFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA]
SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 00000000 ffffffff 00c00000
GS =0063 5716c480 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 00000000 ffffffff 00c00000
TR =0040 00091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000344c8ff8 CR3=000000006cee3000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000004000008fd RBX=ffff88801c2d8488 RCX=0000000000000830 RDX=0000000000000004
RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000002 RSP=ffffc900005df8a0
R8 =0000000000000000 R9 =fffffbfff224561a R10=ffffffff9122b0d7 R11=0000000000000000
R12=0000000000000004 R13=1ffff920000bbf18 R14=ffffc900005df8e0 R15=0000000000000010
RIP=ffffffff81b69c1a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888096edf000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=000000008000b000 CR3=000000006cee3000 CR4=00352ef0
DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000002 DR3=ffffffffefffff15 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000