last executing test programs:

1m17.441555056s ago: executing program 2 (id=652):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)

1m15.92894931s ago: executing program 2 (id=662):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2239, 0x7721, 0x16, 0x0, 0x0)

1m13.062310892s ago: executing program 2 (id=681):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000cea000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000257000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
close(0x3)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)

1m12.866251491s ago: executing program 2 (id=684):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x208000, 0x0, 0x3d, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000001740)='./file0\x00')
syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
fchdir(r3)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
read$FUSE(r4, &(0x7f00000102c0)={0x2020}, 0x7)

1m12.691425655s ago: executing program 2 (id=686):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x90, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r3, 0x0, 0x0, 0x200}])
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r5, 0x2}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m12.274217797s ago: executing program 2 (id=688):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r2, r1, 0x0, 0x578410eb)
r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r4, 0x8)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x3, 0x125, &(0x7f0000000d80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x7, 0x0, 0x6c, {0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x33, 0x4}, [@selector_unit={0xb, 0x24, 0xc, 0x0, 0x6, "2e0f77b09b17"}, @feature_unit={0x9, 0x24, 0x7, 0x5, 0x3, [0xf]}, @processing_unit={0x15, 0x24, 0x9, 0x1, 0x6, [0x1, 0x4, 0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x40, 0xae, 0xfc, 0x5}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x53, 0x8, 0x7, "ad25"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xa, 0x8, 0x6}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4b, 0xfff, 0x6, "f0cb"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x44b5, 0x7, "820252e5e781cfd8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0xf9, 0xf0, {0xa, 0x25, 0x25, 0x7369, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x60, 0x4, "c26130", "83320f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xcb, 0x2, 0x59, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x2, 0x3, 0x47}, @as_header={0x17, 0x24, 0x1, 0x7, 0x3, 0x2, 0x5, 0x9, 0x1, 0x2, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x2, 0x3, "06d8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0xf9, 0x5, {0xa, 0x25, 0x25, 0x3, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x310, 0x8, 0x0, 0x5, 0x48, 0x2}, 0xb, &(0x7f0000000f40)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x24, &(0x7f0000000f80)=@string={0x24, 0x3, "65230bec959176e5fa42f2955f2b249a868f79b7b9e207b2c863364748fd7db2ba32"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x3c39}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x80a}}]})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="010006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x35314152}})

1m11.667474397s ago: executing program 32 (id=688):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r2, r1, 0x0, 0x578410eb)
r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r4, 0x8)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x3, 0x125, &(0x7f0000000d80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x3, 0x1, 0x7, 0x0, 0x6c, {0x8, 0xb, 0x1, 0x0, 0x1, 0x0, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x33, 0x4}, [@selector_unit={0xb, 0x24, 0xc, 0x0, 0x6, "2e0f77b09b17"}, @feature_unit={0x9, 0x24, 0x7, 0x5, 0x3, [0xf]}, @processing_unit={0x15, 0x24, 0x9, 0x1, 0x6, [0x1, 0x4, 0x3, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x40, 0xae, 0xfc, 0x5}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x53, 0x8, 0x7, "ad25"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xa, 0x8, 0x6}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4b, 0xfff, 0x6, "f0cb"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0x44b5, 0x7, "820252e5e781cfd8"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0xf9, 0xf0, {0xa, 0x25, 0x25, 0x7369, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x60, 0x4, "c26130", "83320f"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xcb, 0x2, 0x59, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x2, 0x3, 0x47}, @as_header={0x17, 0x24, 0x1, 0x7, 0x3, 0x2, 0x5, 0x9, 0x1, 0x2, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x2, 0x3, "06d8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0xf9, 0x5, {0xa, 0x25, 0x25, 0x3, 0x0, 0x8}}}}}}}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f00)={0xa, 0x6, 0x310, 0x8, 0x0, 0x5, 0x48, 0x2}, 0xb, &(0x7f0000000f40)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x6, [{0x24, &(0x7f0000000f80)=@string={0x24, 0x3, "65230bec959176e5fa42f2955f2b249a868f79b7b9e207b2c863364748fd7db2ba32"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x3c39}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x80a}}]})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="010006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x35314152}})

12.391835717s ago: executing program 4 (id=1007):
socket$inet6_udp(0xa, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000180)=0x5, 0x4)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
socket$inet(0x2, 0x6, 0x1)
r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000180)=ANY=[], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

11.412597098s ago: executing program 4 (id=1012):
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x6}, 0x1c)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

10.687641536s ago: executing program 4 (id=1016):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

10.665697948s ago: executing program 5 (id=1017):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
listen(r0, 0xfffffffd)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

10.413805733s ago: executing program 4 (id=1019):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delnexthop={0x20, 0x69, 0x400, 0x70bd26, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x8, 0x0, 0x80}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000040))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000acc0)=""/4087, 0xff7}, {0x0}], 0x2}, 0x0)
statx(r1, &(0x7f0000000040)='./file0\x00', 0x100, 0x100, &(0x7f0000000380))
sendmsg$nl_route(r0, 0x0, 0x0)

9.447361198s ago: executing program 5 (id=1022):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2393], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/xfrm_stat\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x80000000, 0x0)
unshare(0x22000600)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}})
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$uac3(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000140)={0x84, &(0x7f00000004c0)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0x7d, {0x7d, 0x21, "3dece0630ead5aec06e8703f33368d67b48de8a7e8f7aa96e0d18eaf61942a67ef77bb04f2d7f5d146f6dfad79a6da26ce309baefd5cb7ffa07da5d037ceaca12f7687628dd3c77b0563633f6794210d98b6dfe34fd82567ddce00cc84ba7c36a95f0e95944a319f5afd257cb71cd7c6d3783e4f8e45d0e62a7fde"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x20, 0xb, 0x9c, "9cb8f02e851745eae5499c76c46708817c1724f4e125e15eceba513320202e88747af5f14702a68d9ba3aebf411dade03266ee1f968b1a875e89cdff28cc2170d1ee5d8bbb738cadc5cef640b0422b7d2c4fbf05094d9816705c80b80dcf7360967721e217c9469bb5d7b6fda9399a007209b67389d06f431fa3bbfd60a7f8194ea3c8723b96c7217349e54702ea92d700515e43581bc1830eae2cbf"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x7f, 0xbe, 0x6, 0xc7a9, 0xd4f7, 0x5, 0x6, 0x5, 0xb, 0x6, 0x0, 0x9}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3ff}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000440)={0x20, 0x89, 0x2}})

8.883854242s ago: executing program 1 (id=1024):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffbff, 0x81, 0x4, 0x4}}]}]}}}]}, 0x6c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x20c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xa, 0x1a, 'netem\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x90}, @IPSET_ATTR_COMMENT={0x6, 0x1a, '.\x00'}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10000}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7f}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x18a}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x200}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x88}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_macvtap\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4a}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff5}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x20c}, 0x1, 0x0, 0x0, 0x14}, 0x20000001)
sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.763861669s ago: executing program 5 (id=1026):
close(0xffffffffffffffff)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x1, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.715654028s ago: executing program 0 (id=1029):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x4000000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.713417192s ago: executing program 1 (id=1030):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3b}, 0x5a)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0xdf7, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805)
r3 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7})
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.365997749s ago: executing program 0 (id=1032):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x2)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x7)
landlock_restrict_self(r1, 0x9)
landlock_restrict_self(r0, 0xa)
landlock_restrict_self(r0, 0x1)
landlock_restrict_self(r1, 0x6)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x6)
landlock_restrict_self(r1, 0x5)
landlock_restrict_self(r1, 0xa)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

4.01972859s ago: executing program 0 (id=1033):
socket$nl_xfrm(0x10, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1})
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

4.006248689s ago: executing program 5 (id=1034):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r2, &(0x7f0000001c00)='7', 0x1)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
bind$tipc(r3, 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004)
syz_usb_control_io$hid(r1, 0x0, 0x0)
sendmsg$nl_generic(r0, 0x0, 0x0)
openat2$dir(0xffffff9c, 0x0, &(0x7f0000005540)={0x1c0, 0x80, 0x36}, 0x18)
recvmmsg(r0, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/177, 0xb1}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000001e40)=""/4103, 0x1007}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000000000)=""/164, 0xa4}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001a80)=""/85, 0x55}], 0xa}, 0x81}], 0x4, 0x40012032, 0x0)

3.665666552s ago: executing program 3 (id=1035):
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x100005, 0x5, 0x0, 0x2, [<r4=>0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffc, 0xc, 0x5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
socket$inet6_sctp(0xa, 0x1, 0x84)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
fremovexattr(0xffffffffffffffff, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)

3.125712596s ago: executing program 3 (id=1036):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.906301559s ago: executing program 1 (id=1037):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r0, 0x0, 0x0, 0x20000011, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x1, 0x4)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000000c0)=0x3)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, 0x0, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x0)
sendmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010)

2.503534722s ago: executing program 4 (id=1038):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.125803017s ago: executing program 3 (id=1039):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x68ff, 0x4, 0x0, 0x3, 0x401], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000640)=@svm={0x0, 0x1, 0xffffff4d, {0x200000}, {"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"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.902367028s ago: executing program 1 (id=1040):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007000000d82a26eb48a5d60276d5b3c40ae71eab7a795db680ccc51eabcaca7f1e90ed8a8ce9731cb4fe9af94a4dc4046c8a8a7c855418e2d3"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1.712746347s ago: executing program 3 (id=1041):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8005)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
socket$inet(0x2, 0x80001, 0x84)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r2 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_restrict_self(r2, 0xf)

1.524087136s ago: executing program 1 (id=1042):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f0000000200)='m', 0x1)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100))
r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r3, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000140)=0xfff)

1.460107595s ago: executing program 0 (id=1043):
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xeb91, @remote, 0x2c5d}}, 0x24)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r2, &(0x7f0000000100)='syz', 0x10000, &(0x7f0000000180)={@align=0x5, {0xe37, 0x7, 0x7, 0x401}}, 0xb, 0x0, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x74, 0x5, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0x6, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3})
setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010101, @empty}, 0xc)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.186910374s ago: executing program 0 (id=1044):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_netdev_private(r1, 0x8912, &(0x7f0000000200)="891c591c46686b2f006e")
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000a00000000000000000000008040000200000000000008000000000000720000"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x1a, &(0x7f00000005c0)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@snap={0x1, 0x1, '\\', 'S\'w', 0x2}}}}}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x8000000000000001, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000004, 0x800000000000002}}}, 0xb8}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.010884234s ago: executing program 4 (id=1045):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
sched_getattr(0x0, 0x0, 0x0, 0x0)
fstat(r1, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x44800)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)

887.714518ms ago: executing program 0 (id=1046):
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e", 0x1f)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_emit_ethernet(0x52, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x7, 0x14, 0xf, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}]}]}}, @redirect={0x8, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @remote, @broadcast}}}}}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100))
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2)
ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)=0x5)
ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x2, @sliced={0x100, [0xf593, 0x8001, 0x4, 0x4, 0x674, 0x7, 0x1, 0xed53, 0xc401, 0xca, 0x5, 0x1, 0x28, 0x8001, 0x9, 0x3, 0x5, 0x3, 0xf0ae, 0x3, 0xfffc, 0x818b, 0xc, 0x200, 0x4f3, 0x699c, 0x1, 0x8cbc, 0x101, 0xadd, 0x4, 0xfff, 0x6, 0x1, 0x7f, 0xb, 0x99da, 0x3, 0x10, 0xc000, 0xb00, 0xa, 0xc, 0x7fff, 0x3, 0x4, 0x0, 0x9], 0xf}})
syz_emit_ethernet(0xa2, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099d5a6006c0003fe8000000000000000000000000000bbff02000000000000000000000000000189090000000000000743a963cfa4ffac475f637c538f23dae231ddc4de9e674558bc488b00568eaeb0adc6c7f85bb45c987f93024204cdddffaaaa0c191275853ca483962682ebfd8b05020b41000003"], 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)

843.581257ms ago: executing program 5 (id=1047):
r0 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

711.850234ms ago: executing program 3 (id=1048):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x0, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

522.983799ms ago: executing program 1 (id=1049):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
ppoll(&(0x7f00000000c0)=[{r1, 0x9000}], 0x1, 0x0, 0x0, 0x0)

256.820002ms ago: executing program 5 (id=1050):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=1051):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000380)={0x0, 0xa, 0x5, "087799db41"}, &(0x7f0000000e00)={0xa1, 0x1, 0x400, "9a628911c8e8c0366ce4de4a142ebb969749c2ac362a1b9eb97066c8095e9d42dff27930663fda1431d47bae237ce977e329bf7f2f02b788807f8115d12f6773f3c0b8b949c186dd20e9d22c462ad33c686f3658825cb4b9d5058da0a52b45dad07a95d2dd737170798d00968f33df4cedfdef5e85b4919accd20a848848577f98ee2b7331df84dd00ab4bbc9d69f5d3a84ffa5cfed3d7a04cab22a5efb3ed021e672544a46538fa8dc70f7c28e9580c4ab95a3933af164da41cbb894aafb6342e9467df8b66368cff45b59f79fe70f4ffaea427935b02c78e84bbaeb567be87735ed3e730dbbbc73f566e04bf1f53fc82621853fba7faac18e9722bfa641a10003dbca02ec56fd75ca951856f6edf7f6ebe3adf5b2cfb53887a2b6f4961ac98c5bf8af52d65224e860ba5b93d30843507a81126fb8f78845c54230bb64b49be3781ebe6dd5fa1aca3e54095577531dc9982e5c03c908318c881ee5948d4bd7b68a9d4320b6d259eeec791fa3beaf555036394602467ccda84e252cb2a853b349bb8fc8d75fc36f2983124927f4b5710c026895edc2050e301b72c94d06a77b2cb5be05c8d508d481e68253c8032e73d311eab72e3d3edd9409a9a9100eaf5da6cdc6b1ebf1f31f93d440deaac9fb51c5297bfa674e38a22291b6c3992a950d83a5e9cab83957725be8e0f962576280c5a8d1256e0f881a47a466dddc44929f1c08adab22e3cd1aae93b08a0a4e6656cb51f342fd69ff9fb273db657cc4ad6ebe9b6b25580741850c5f27933a632435d4b2950a3a5910aae55e52319c66a415d7297b541693af189b9f350462b93b201677d0865b83d9d1ef592ce5af4f492cc3e2393ada8fcc7f0fca7cb0287036a54c52b550a5c260bdf0f548f9a59d92dd5477d93fba0fe7bfdaf0090754714fd1e5d5b382b8f2d84b6711947f6c2e6bf4bd079dfd32062fd70cdd4e472bfa4a6df2101b462b9410a624dab09cb68c60cb7b7c6f189e655436766403029c4df37e3d75c3bf1d350bafecb48c99532041f4d0a7e0af185f9c08acd75d709a3887df92834ba9a7e5b35c4d0e133fe49127847737fd2b6bb18f30f6c89c295c71d5573ab1ac30d61448a76c7a5c452505b1a93011dfebf950d2cf940dddc30563d3ed5998dde45b1833ba6d480a12e9a64bab7bb1e10817e60594904c4e9e2381966c3c08aebb0e964e609732c1e4aaa46a3b23e231e362a2815f9c746183dc8d374018b7902efd9a4504f6a28161563349c30134f21836f7f7492eab40dcccadd0f347d59a48e8a1983d852d20b47c191d335a04841168b30d9279cb1ae9e6cf4c359cdb5391b64a37bc6f1bc2d2c477d1f0f88f634bfd0dedff829dea545b65d1b101b4c2715f0b230c849b90b5aafff13d39cd4e9b0ed0a435230f0da48e18a15df7494dce711d6dcc142f90aa8731a3a48"}, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

upported
[  169.043730][ T7424] kvm: pic: level sensitive irq not supported
[  169.060684][ T7424] kvm: pic: single mode not supported
[  169.066843][ T7424] kvm: pic: level sensitive irq not supported
[  169.072507][ T7424] kvm: pic: level sensitive irq not supported
[  169.079895][ T7424] kvm: pic: level sensitive irq not supported
[  169.086383][ T7424] kvm: pic: single mode not supported
[  169.092768][ T7424] kvm: pic: single mode not supported
[  169.104495][ T7424] kvm: pic: level sensitive irq not supported
[  169.112476][ T7424] kvm: pic: level sensitive irq not supported
[  169.119139][ T7424] kvm: pic: level sensitive irq not supported
[  169.125334][ T7424] kvm: pic: level sensitive irq not supported
[  169.137563][ T7424] kvm: pic: single mode not supported
[  169.143772][ T7424] kvm: pic: single mode not supported
[  169.167398][ T7424] kvm: pic: single mode not supported
[  169.191475][ T7424] kvm: pic: single mode not supported
[  169.209201][ T7424] kvm: pic: single mode not supported
[  169.217819][ T7424] kvm: pic: single mode not supported
[  170.533080][ T7468] syzkaller0: entered promiscuous mode
[  170.544816][ T7468] syzkaller0: entered allmulticast mode
[  170.894452][ T7481] syzkaller0: entered promiscuous mode
[  170.900207][ T7481] syzkaller0: entered allmulticast mode
[  171.065751][ T5725] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  171.221578][   T29] kauditd_printk_skb: 23 callbacks suppressed
[  171.221594][   T29] audit: type=1804 audit(1780862714.011:660): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.552" name="/newroot/129/file1" dev="fuse" ino=1 res=1 errno=0
[  171.269326][ T5725] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  171.284104][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.294699][ T5725] usb 2-1: Product: syz
[  171.299019][ T5725] usb 2-1: Manufacturer: syz
[  171.303706][ T5725] usb 2-1: SerialNumber: syz
[  171.336639][   T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  171.392736][ T7498] netlink: 'syz.3.556': attribute type 1 has an invalid length.
[  171.429545][ T7498] 8021q: adding VLAN 0 to HW filter on device bond3
[  171.465743][ T5720] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  171.507820][   T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  171.520450][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.536662][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  171.548327][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.564938][   T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  171.575730][   T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  171.583787][   T24] usb 5-1: Product: syz
[  171.588259][   T24] usb 5-1: Manufacturer: syz
[  171.610186][   T24] cdc_wdm 5-1:1.0: skipping garbage
[  171.618486][   T24] cdc_wdm 5-1:1.0: skipping garbage
[  171.626440][ T5720] usb 3-1: Using ep0 maxpacket: 8
[  171.655117][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short
[  171.665514][   T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  171.675033][   T24] cdc_wdm 5-1:1.0: Unknown control protocol
[  171.682652][ T5720] usb 3-1: config 127 has an invalid interface number: 1 but max is 0
[  171.693900][ T5720] usb 3-1: config 127 has no interface number 0
[  171.701796][ T5720] usb 3-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16
[  171.711216][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  171.712468][ T5720] usb 3-1: config 127 interface 1 has no altsetting 0
[  171.729207][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.558'.
[  171.741191][ T5720] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89
[  171.751140][ T5725] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  171.773456][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.781602][ T5725] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  171.793882][ T5720] usb 3-1: Product: syz
[  171.812888][ T5720] usb 3-1: Manufacturer: syz
[  171.827812][ T5720] usb 3-1: SerialNumber: syz
[  171.860411][   T24] usb 5-1: USB disconnect, device number 15
[  171.871551][ T7491] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  172.100640][ T5720] redrat3 3-1:127.1: Couldn't find all endpoints
[  172.129348][ T5720] usb 3-1: USB disconnect, device number 16
[  172.315907][    T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  172.478984][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  172.489293][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.510388][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  172.530402][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.545130][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  172.575667][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  172.592117][    T9] usb 5-1: Product: syz
[  172.602607][    T9] usb 5-1: Manufacturer: syz
[  172.622354][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  172.638111][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  172.662032][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  172.693300][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  173.017102][ T5725] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  173.236132][ T7531] syzkaller0: entered promiscuous mode
[  173.255740][ T7531] syzkaller0: entered allmulticast mode
[  173.610181][ T7536] netlink: 56 bytes leftover after parsing attributes in process `syz.2.569'.
[  173.652264][ T5725] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO
[  173.690877][ T5725] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  173.718770][ T5725] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  173.755356][ T5725] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  173.790295][ T5725] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  173.835260][ T5725] usb 2-1: USB disconnect, device number 14
[  173.933472][ T7520] syz.0.563 (7520): drop_caches: 2
[  174.002355][   T29] audit: type=1804 audit(1780862716.791:661): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.571" name="bus" dev="ramfs" ino=23219 res=1 errno=0
[  174.063306][   T29] audit: type=1804 audit(1780862716.821:662): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.571" name="bus" dev="ramfs" ino=23219 res=1 errno=0
[  174.248438][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'.
[  174.267751][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'.
[  174.286439][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'.
[  174.307340][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'.
[  174.508765][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  174.515575][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  174.522626][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  174.529242][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  174.535842][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  174.542446][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  174.548887][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  174.555517][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  174.563221][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  174.569929][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  174.577738][    T9] usb 5-1: USB disconnect, device number 16
[  174.583738][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  174.583752][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  174.583761][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  174.881055][ T7557] mmap: syz.1.576 (7557) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  174.914020][ T7557] kernel read not supported for file /eth0 (pid: 7557 comm: syz.1.576)
[  174.943840][   T29] audit: type=1800 audit(1780862717.731:663): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.576" name="eth0" dev="mqueue" ino=23249 res=0 errno=0
[  175.374941][ T7561] syzkaller0: entered promiscuous mode
[  175.404523][ T7561] syzkaller0: entered allmulticast mode
[  175.638736][   T29] audit: type=1800 audit(1780862718.431:664): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.575" name="bus" dev="ramfs" ino=23242 res=0 errno=0
[  175.776455][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'.
[  176.215651][ T5720] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  176.386048][ T5720] usb 1-1: Using ep0 maxpacket: 32
[  176.397897][ T5720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.435090][ T5720] usb 1-1: config 0 has no interfaces?
[  176.452407][ T5720] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  176.482603][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.504926][ T5720] usb 1-1: config 0 descriptor??
[  176.556791][ T7587] netlink: 68 bytes leftover after parsing attributes in process `syz.3.587'.
[  176.748799][ T7593] syzkaller0: entered promiscuous mode
[  176.765849][ T7593] syzkaller0: entered allmulticast mode
[  176.906825][ T5720] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  177.078672][ T5720] usb 5-1: Using ep0 maxpacket: 32
[  177.094083][ T5720] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  177.123493][ T5720] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  177.145781][ T5720] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  177.171657][ T5720] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  177.207800][ T5720] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  177.217245][ T5725] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  177.230900][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.240488][ T5720] usb 5-1: Product: syz
[  177.244790][ T5720] usb 5-1: Manufacturer: syz
[  177.251160][ T5720] usb 5-1: SerialNumber: syz
[  177.284224][    C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  177.368329][ T5720] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input18
[  177.397481][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  177.413656][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  177.428278][ T5638] usb 1-1: USB disconnect, device number 14
[  177.459355][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  177.490773][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.506742][ T5720] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  177.523814][ T5720]  (id 0x00)
[  177.527344][ T5725] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.547172][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.580332][ T5725] usb 3-1: config 0 descriptor??
[  177.655629][ T5720] rc_core: IR keymap rc-imon-pad not found
[  177.668894][ T5720] Registered IR keymap rc-empty
[  177.683929][ T5720] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  177.704962][ T5720] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  177.739214][ T5720] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[  177.770126][ T5720] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input19
[  177.829171][ T5720] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:17> initialized
[  178.108395][ T5725] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  178.495764][ T5725] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  178.556105][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.582781][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.610820][ T7620] syz_tun: entered allmulticast mode
[  178.621392][ T7620] syz_tun: left allmulticast mode
[  178.661949][ T5725] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  178.690427][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.724252][ T5725] usb 4-1: Product: syz
[  178.742445][ T5725] usb 4-1: Manufacturer: syz
[  178.750991][ T5725] usb 4-1: SerialNumber: syz
[  179.097234][ T7637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'.
[  179.181739][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  179.220559][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  179.220829][ T7639] syzkaller0: entered promiscuous mode
[  179.238399][ T7639] syzkaller0: entered allmulticast mode
[  179.320861][ T5698] usb 5-1: USB disconnect, device number 17
[  179.327398][ T7632] imon:send_packet: packet tx failed (-71)
[  179.366773][ T7632] imon:vfd_write: send packet #4 failed
[  179.471089][ T5720] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  179.583108][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.737278][ T5720] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  179.746394][ T5720] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.759629][ T5720] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.819449][ T5720] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  179.828816][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.837267][ T5720] usb 1-1: Product: syz
[  179.841485][ T5720] usb 1-1: Manufacturer: syz
[  179.846221][ T5720] usb 1-1: SerialNumber: syz
[  179.949613][   T24] usb 3-1: USB disconnect, device number 17
[  180.496345][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  180.656491][ T7668] kvm: pic: non byte write
[  180.700796][ T7668] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (56 ns). Using initial count to start timer.
[  180.829233][ T5720] usb 1-1: 0:2 : does not exist
[  180.906813][ T5720] usb 1-1: USB disconnect, device number 15
[  180.948257][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  181.025708][ T5698] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  181.121555][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  181.141317][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  181.166851][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  181.185731][ T5698] usb 5-1: Using ep0 maxpacket: 16
[  181.199804][ T5698] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  181.201033][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  181.212951][ T5698] usb 5-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40
[  181.238896][ T5725] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  181.245675][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.255508][ T5725] usb 4-1: USB disconnect, device number 14
[  181.262654][ T5698] usb 5-1: Product: syz
[  181.272077][ T5698] usb 5-1: Manufacturer: syz
[  181.285843][ T5698] usb 5-1: SerialNumber: syz
[  181.544318][ T7672] sctp: [Deprecated]: syz.4.613 (pid 7672) Use of int in max_burst socket option.
[  181.544318][ T7672] Use struct sctp_assoc_value instead
[  181.593473][ T7682] syzkaller0: entered promiscuous mode
[  181.599459][ T7682] syzkaller0: entered allmulticast mode
[  181.631715][ T5698] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  181.786745][ T5698] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  181.816934][ T5698] usb 5-1: USB disconnect, device number 18
[  181.890792][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.515851][ T7704] syzkaller0: entered promiscuous mode
[  182.531867][ T7704] syzkaller0: entered allmulticast mode
[  182.892913][ T7696] kvm: emulating exchange as write
[  182.904209][ T7716] syzkaller0: entered promiscuous mode
[  182.918048][ T7716] syzkaller0: entered allmulticast mode
[  183.095723][   T24] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[  183.201382][ T7721] syzkaller0: entered promiscuous mode
[  183.211349][ T7721] syzkaller0: entered allmulticast mode
[  183.277320][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  183.304661][   T24] usb 3-1: config 0 has no interface number 0
[  183.327026][   T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  183.360826][   T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  183.388778][   T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  183.414540][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.459102][   T24] usb 3-1: config 0 descriptor??
[  183.478983][ T7715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  183.512439][ T7730] syzkaller0: entered promiscuous mode
[  183.520077][   T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  183.539877][ T7730] syzkaller0: entered allmulticast mode
[  183.614752][ T7732] kvm: pic: non byte write
[  183.837296][ T5720] usb 3-1: USB disconnect, device number 18
[  183.843282][    C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  184.071866][ T7746] lo: entered allmulticast mode
[  184.102011][ T7750] syzkaller0: entered promiscuous mode
[  184.109129][ T7750] syzkaller0: entered allmulticast mode
[  184.326403][ T5720] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  184.485808][ T5720] usb 1-1: Using ep0 maxpacket: 32
[  184.504000][ T5720] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.516074][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  184.546017][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'.
[  184.561931][ T5720] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  184.582345][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.598270][ T5720] usb 1-1: Product: syz
[  184.603278][ T5720] usb 1-1: Manufacturer: syz
[  184.617230][ T5720] usb 1-1: SerialNumber: syz
[  184.642598][ T5720] usb 1-1: config 0 descriptor??
[  184.661828][ T5720] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  184.770963][ T7771] netlink: 'syz.3.647': attribute type 1 has an invalid length.
[  184.831810][ T5720] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  184.903053][ T7771] bond4: entered promiscuous mode
[  184.913484][ T7771] bond4: entered allmulticast mode
[  184.919633][ T7771] 8021q: adding VLAN 0 to HW filter on device bond4
[  184.942221][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.948253][ T7773] erspan1: entered allmulticast mode
[  184.980978][ T7773] bond4: (slave erspan1): making interface the new active one
[  184.989186][ T7773] erspan1: entered promiscuous mode
[  185.000200][ T7773] bond4: (slave erspan1): Enslaving as an active interface with an up link
[  185.024962][ T5720] usb 1-1: USB disconnect, device number 16
[  185.030453][ T7776] syzkaller0: entered promiscuous mode
[  185.058436][ T7776] syzkaller0: entered allmulticast mode
[  185.431073][ T7780] syzkaller0: entered promiscuous mode
[  185.436664][ T7780] syzkaller0: entered allmulticast mode
[  185.487640][ T7780] tipc: Started in network mode
[  185.494121][ T7780] tipc: Node identity 5af122755a16, cluster identity 4711
[  185.501809][ T7780] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.512363][ T7779] tipc: Resetting bearer <eth:syzkaller0>
[  185.535696][ T5720] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  185.554029][ T7779] tipc: Disabling bearer <eth:syzkaller0>
[  185.689136][ T5720] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  185.699971][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.708304][ T5720] usb 5-1: Product: syz
[  185.712719][ T5720] usb 5-1: Manufacturer: syz
[  185.718391][ T5720] usb 5-1: SerialNumber: syz
[  185.786420][   T24] usb 3-1: new low-speed USB device number 19 using dummy_hcd
[  185.969566][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  185.990542][   T24] usb 3-1: config 0 has no interface number 0
[  186.008180][   T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  186.038584][   T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  186.076239][   T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  186.095280][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.128100][   T24] usb 3-1: config 0 descriptor??
[  186.142797][ T7784] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  186.153500][ T5720] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  186.202276][   T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  186.215365][ T5720] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  186.430966][  T810] usb 3-1: USB disconnect, device number 19
[  186.598748][ T7806] syzkaller0: entered promiscuous mode
[  186.607663][ T7806] syzkaller0: entered allmulticast mode
[  187.335677][ T5706] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  187.461767][ T5720] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  187.506248][ T5706] usb 3-1: Using ep0 maxpacket: 32
[  187.512822][ T5720] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  187.526469][ T5706] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  187.554467][ T5706] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  187.586070][ T5706] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  187.618939][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  187.647724][ T5706] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  187.659288][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  187.682820][ T5706] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  187.714162][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.756689][ T5706] usb 3-1: config 0 descriptor??
[  187.948464][ T5720] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  187.985125][ T5706] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  187.987993][ T5720] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  188.043375][ T5720] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  188.061309][ T5706] usb 3-1: USB disconnect, device number 20
[  188.102953][ T5720] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  188.114874][ T5706] usblp0: removed
[  188.199382][ T5720] usb 5-1: USB disconnect, device number 19
[  188.295158][ T7833] syzkaller0: entered promiscuous mode
[  188.312709][ T7833] syzkaller0: entered allmulticast mode
[  188.525641][ T5706] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  188.695672][ T5706] usb 3-1: Using ep0 maxpacket: 32
[  188.715133][ T5706] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  188.755194][ T7839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.671'.
[  188.764278][ T5706] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  188.796880][ T5706] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  188.808926][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  188.850206][ T5706] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  188.867520][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  188.881217][ T5706] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  188.890443][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.906974][ T5706] usb 3-1: config 0 descriptor??
[  189.182118][ T5706] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  189.342888][ T5706] usb 3-1: USB disconnect, device number 21
[  189.907632][  T810] usblp0: removed
[  190.151236][ T7873] syzkaller0: entered promiscuous mode
[  190.173843][ T7873] syzkaller0: entered allmulticast mode
[  190.189876][ T7876] netlink: 'syz.1.683': attribute type 1 has an invalid length.
[  190.305278][ T7876] 8021q: adding VLAN 0 to HW filter on device bond1
[  190.406379][ T7882] bond1: (slave geneve2): making interface the new active one
[  190.437225][ T7882] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  190.774752][   T29] audit: type=1326 audit(1780862733.561:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c19ce59 code=0x7ffc0000
[  190.853807][   T29] audit: type=1326 audit(1780862733.561:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c19ce59 code=0x7ffc0000
[  190.920299][   T29] audit: type=1326 audit(1780862733.561:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f108c19ce59 code=0x7ffc0000
[  190.985999][   T29] audit: type=1326 audit(1780862733.591:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f108c19ce59 code=0x7ffc0000
[  191.050895][   T29] audit: type=1326 audit(1780862733.621:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f108c15d68e code=0x7ffc0000
[  191.109357][   T29] audit: type=1326 audit(1780862733.621:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f108c15d68e code=0x7ffc0000
[  191.164043][   T29] audit: type=1326 audit(1780862733.621:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f108c15d68e code=0x7ffc0000
[  191.219546][   T29] audit: type=1326 audit(1780862733.641:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f108c15d68e code=0x7ffc0000
[  191.247223][   T29] audit: type=1326 audit(1780862733.641:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f108c15d68e code=0x7ffc0000
[  191.280740][   T29] audit: type=1326 audit(1780862733.641:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7884 comm="syz.0.687" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f108c15d68e code=0x7ffc0000
[  191.524639][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.539461][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.548020][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  191.558552][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  191.568456][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  192.531065][ T7916] syzkaller0: entered promiscuous mode
[  192.548215][ T7916] syzkaller0: entered allmulticast mode
[  192.909744][ T7924] netlink: 'syz.3.698': attribute type 10 has an invalid length.
[  192.919380][ T7919] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.697'.
[  192.984011][ T7924] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  193.009967][ T7924] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  193.020340][ T7919] syzkaller1: entered promiscuous mode
[  193.029850][ T7919] syzkaller1: entered allmulticast mode
[  193.041715][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.051230][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.062696][ T7899] bridge_slave_0: entered allmulticast mode
[  193.072000][ T7899] bridge_slave_0: entered promiscuous mode
[  193.144767][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.161483][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.178366][ T7899] bridge_slave_1: entered allmulticast mode
[  193.187406][ T7899] bridge_slave_1: entered promiscuous mode
[  193.283673][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.303355][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.381659][ T7899] team0: Port device team_slave_0 added
[  193.412714][ T7899] team0: Port device team_slave_1 added
[  193.453415][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.461348][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.491583][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.506384][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.513917][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.540722][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.607647][ T7899] hsr_slave_0: entered promiscuous mode
[  193.614430][ T7899] hsr_slave_1: entered promiscuous mode
[  193.621412][ T7899] debugfs: 'hsr0' already exists in 'hsr'
[  193.627525][ T7899] Cannot create hsr debugfs directory
[  193.640938][ T5643] Bluetooth: hci0: command tx timeout
[  193.899027][ T7899] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  193.909918][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  193.918048][ T7899] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  193.930188][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  193.941723][ T7899] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  193.952771][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  193.961130][ T7899] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  193.972125][ T7899] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  194.132030][ T7899] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.162271][ T7899] 8021q: adding VLAN 0 to HW filter on device team0
[  194.190329][   T97] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.197543][   T97] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.217933][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  194.224442][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  194.260186][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.267403][ T6100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.369378][ T7899] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.377171][ T7897] syz.1.691 (7897) used greatest stack depth: 18624 bytes left
[  194.410493][ T7899] veth0_vlan: entered promiscuous mode
[  194.421182][ T7899] veth1_vlan: entered promiscuous mode
[  194.450195][ T7899] veth0_macvtap: entered promiscuous mode
[  194.459378][ T7899] veth1_macvtap: entered promiscuous mode
[  194.475027][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.492832][ T7899] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.509963][ T6100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  194.519456][ T6100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  194.529212][ T6100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  194.550265][ T6100] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.648056][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.656650][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.686495][   T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.694443][   T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.926642][ T7953] kvm: pic: non byte write
[  195.505744][   T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  195.685616][   T24] usb 5-1: Using ep0 maxpacket: 8
[  195.703938][   T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  195.715760][ T5643] Bluetooth: hci0: command tx timeout
[  195.738287][   T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  195.780613][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  195.827745][   T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  195.871558][   T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.915380][   T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  195.945118][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.207763][   T24] usb 5-1: GET_CAPABILITIES returned 0
[  196.223385][   T24] usbtmc 5-1:16.0: can't read capabilities
[  196.781343][ T7975] usbtmc 5-1:16.0: usb_control_msg returned -32
[  196.820101][   T24] usb 5-1: USB disconnect, device number 20
[  197.157122][ T5706] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  197.329623][ T5706] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  197.363277][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.382278][ T5706] usb 6-1: Product: syz
[  197.390539][ T5706] usb 6-1: Manufacturer: syz
[  197.439456][ T5706] usb 6-1: SerialNumber: syz
[  197.796039][ T5643] Bluetooth: hci0: command tx timeout
[  197.892395][ T5706] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  197.919618][ T5706] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  198.147133][ T7992] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  198.250293][   T24] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  198.325123][ T7998] syzkaller0: entered promiscuous mode
[  198.332840][ T7998] syzkaller0: entered allmulticast mode
[  198.442291][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.461718][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  198.477504][   T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  198.488742][   T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  198.501570][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.533581][ T7990] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  198.574333][   T24] hub 2-1:1.0: bad descriptor, ignoring hub
[  198.603600][   T24] hub 2-1:1.0: probe with driver hub failed with error -5
[  198.645457][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  198.675237][   T24] cdc_wdm 2-1:1.0: skipping garbage
[  198.714850][   T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  198.742411][   T24] cdc_wdm 2-1:1.0: Unknown control protocol
[  198.772763][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'.
[  198.807650][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'.
[  198.926621][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  198.933274][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  198.939849][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  199.046008][ T5721] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  199.092657][ T8010] tipc: Enabled bearer <udp:syz2>, priority 10
[  199.106667][ T8010] netlink: 104 bytes leftover after parsing attributes in process `syz.3.722'.
[  199.120238][ T8010] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  199.130558][ T8010] tipc: Enabled bearer <udp:syz0>, priority 10
[  199.176029][ T5706] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  199.236562][ T5721] usb 5-1: Using ep0 maxpacket: 32
[  199.243508][ T5721] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  199.251702][ T5721] usb 5-1: config 0 has no interface number 0
[  199.258465][ T5721] usb 5-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[  199.271343][ T5721] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  199.280480][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.288591][ T5721] usb 5-1: Product: syz
[  199.292758][ T5721] usb 5-1: Manufacturer: syz
[  199.297401][ T5721] usb 5-1: SerialNumber: syz
[  199.304252][ T5721] usb 5-1: config 0 descriptor??
[  199.313059][ T5721] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  199.334247][ T5721] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22
[  199.629326][ T5721] usb 5-1: USB disconnect, device number 21
[  199.734081][   T29] kauditd_printk_skb: 90 callbacks suppressed
[  199.734104][   T29] audit: type=1804 audit(1780862742.521:765): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.723" name="bus" dev="ramfs" ino=26331 res=1 errno=0
[  199.763662][   T29] audit: type=1804 audit(1780862742.551:766): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.723" name="bus" dev="ramfs" ino=26331 res=1 errno=0
[  199.791145][ T5706] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  199.836416][ T5706] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  199.851912][ T5706] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  199.873226][ T5706] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  199.883144][ T5643] Bluetooth: hci0: command tx timeout
[  199.897205][ T5706] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  199.912609][ T5706] usb 6-1: USB disconnect, device number 2
[  200.036439][ T8020] syzkaller0: entered promiscuous mode
[  200.042119][ T8020] syzkaller0: entered allmulticast mode
[  200.208997][ T5706] tipc: Node number set to 2551903565
[  200.575662][ T5706] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  200.741112][ T5706] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  200.752456][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.761345][ T5706] usb 1-1: Product: syz
[  200.771199][ T5706] usb 1-1: Manufacturer: syz
[  200.782099][ T5706] usb 1-1: SerialNumber: syz
[  200.801082][ T5706] usb 1-1: config 0 descriptor??
[  200.935010][ T8034] syzkaller0: entered promiscuous mode
[  200.940816][ T8034] syzkaller0: entered allmulticast mode
[  201.026026][ T5706] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  201.154569][ T8039] netlink: 'syz.3.731': attribute type 21 has an invalid length.
[  201.198931][ T8039] netlink: 120 bytes leftover after parsing attributes in process `syz.3.731'.
[  201.209394][ T8039] netlink: 'syz.3.731': attribute type 1 has an invalid length.
[  201.218359][ T8039] netlink: 9 bytes leftover after parsing attributes in process `syz.3.731'.
[  201.358706][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'.
[  201.428971][ T8043] bridge1: port 1(veth3) entered blocking state
[  201.437834][ T8043] bridge1: port 1(veth3) entered disabled state
[  201.444442][ T8043] veth3: entered allmulticast mode
[  201.453836][ T8043] veth3: entered promiscuous mode
[  201.470789][ T8049] syzkaller0: entered promiscuous mode
[  201.481026][ T8049] syzkaller0: entered allmulticast mode
[  201.494253][ T8048] bridge1: port 2(veth0_to_bond) entered blocking state
[  201.502637][ T8048] bridge1: port 2(veth0_to_bond) entered disabled state
[  201.510336][ T8048] veth0_to_bond: entered allmulticast mode
[  201.519236][ T8048] veth0_to_bond: entered promiscuous mode
[  201.574543][ T8043] bridge1: port 3(veth5) entered blocking state
[  201.581622][ T8043] bridge1: port 3(veth5) entered disabled state
[  201.589349][ T8043] veth5: entered allmulticast mode
[  201.597903][ T8043] veth5: entered promiscuous mode
[  201.611619][ T8049] tipc: Started in network mode
[  201.617611][ T8049] tipc: Node identity ce94bb78a6e8, cluster identity 4711
[  201.626990][ T8049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.640695][ T8046] tipc: Resetting bearer <eth:syzkaller0>
[  201.666683][ T8046] tipc: Disabling bearer <eth:syzkaller0>
[  201.714005][ T8052] netlink: 'syz.4.738': attribute type 10 has an invalid length.
[  201.729599][   T29] audit: type=1326 audit(1780862744.521:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8044 comm="syz.3.735" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8223b9ce59 code=0x0
[  201.879274][ T8055] syzkaller0: entered promiscuous mode
[  201.885026][ T8055] syzkaller0: entered allmulticast mode
[  202.001994][ T5691] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  202.165737][ T5691] usb 5-1: Using ep0 maxpacket: 8
[  202.180398][ T5691] usb 5-1: config 0 has an invalid interface number: 92 but max is 0
[  202.190167][ T5691] usb 5-1: config 0 has no interface number 0
[  202.197470][ T5691] usb 5-1: New USB device found, idVendor=10c4, idProduct=8857, bcdDevice=6f.95
[  202.208006][ T5691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.222355][ T5720] usb 2-1: USB disconnect, device number 15
[  202.270167][ T5691] usb 5-1: config 0 descriptor??
[  202.299447][ T5691] cp210x 5-1:0.92: cp210x converter detected
[  202.443895][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  202.451704][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  202.461187][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  202.470452][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  202.478148][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  202.485811][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  202.493675][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  202.508481][ T5706] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  202.528557][ T5706] usb 1-1: USB disconnect, device number 17
[  202.534993][ T5691] cp210x 5-1:0.92: failed to get vendor val 0x370b size 1: -71
[  202.542840][ T5691] cp210x 5-1:0.92: querying part number failed
[  202.562124][ T5691] usb 5-1: cp210x converter now attached to ttyUSB0
[  202.576024][ T5691] usb 5-1: USB disconnect, device number 22
[  202.635446][ T5691] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  202.659613][ T5691] cp210x 5-1:0.92: device disconnected
[  202.744796][ T8061] netlink: 'syz.1.741': attribute type 1 has an invalid length.
[  204.312864][ T8061] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  204.353330][ T8067] veth0_virt_wifi: entered promiscuous mode
[  204.563610][ T8082] syzkaller0: entered promiscuous mode
[  204.580282][ T8082] syzkaller0: entered allmulticast mode
[  205.576653][ T8107] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  207.113516][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'.
[  207.257489][ T8132] bond5: option ad_select: invalid value (253)
[  207.264869][ T8132] bond5 (unregistering): Released all slaves
[  207.503952][ T8141] syzkaller0: entered promiscuous mode
[  207.519670][ T8141] syzkaller0: entered allmulticast mode
[  207.561151][ T8141] TC_ACT_REPEAT abuse ?
[  208.017038][ T8165] tipc: Started in network mode
[  208.034767][ T8165] tipc: Node identity ce1d47d00b9b, cluster identity 4711
[  208.046105][ T8165] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.079645][ T8165] syzkaller0: entered promiscuous mode
[  208.087474][ T8165] syzkaller0: entered allmulticast mode
[  208.168717][ T8165] tipc: Resetting bearer <eth:syzkaller0>
[  208.201066][ T8164] tipc: Resetting bearer <eth:syzkaller0>
[  208.259547][ T8164] tipc: Disabling bearer <eth:syzkaller0>
[  208.543806][ T8172] netlink: 'syz.4.770': attribute type 1 has an invalid length.
[  208.689984][ T8178] netlink: 44 bytes leftover after parsing attributes in process `syz.4.770'.
[  208.743506][ T8172] 8021q: adding VLAN 0 to HW filter on device bond1
[  208.776197][ T8181] kvm: requested 188571 ns i8254 timer period limited to 200000 ns
[  208.808123][ T8181] kvm: requested 95542 ns i8254 timer period limited to 200000 ns
[  208.820714][ T8181] kvm: requested 36876 ns i8254 timer period limited to 200000 ns
[  208.835215][ T8181] kvm: requested 179352 ns i8254 timer period limited to 200000 ns
[  208.841576][ T8176] vlan0: entered promiscuous mode
[  208.849361][ T8181] kvm: requested 49447 ns i8254 timer period limited to 200000 ns
[  208.872005][ T8176] bond1: entered promiscuous mode
[  208.883935][ T8176] vlan0: entered allmulticast mode
[  208.884880][ T8181] kvm: requested 120685 ns i8254 timer period limited to 200000 ns
[  208.895615][ T8176] bond1: entered allmulticast mode
[  208.918065][ T8179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  208.939157][ T8182] syzkaller0: entered promiscuous mode
[  208.946176][ T8182] syzkaller0: entered allmulticast mode
[  208.953150][ T8181] kvm: requested 48609 ns i8254 timer period limited to 200000 ns
[  208.975804][ T8178] 8021q: adding VLAN 0 to HW filter on device batadv1
[  208.989335][ T8181] kvm: requested 153371 ns i8254 timer period limited to 200000 ns
[  209.021809][ T8178] bond1: (slave batadv1): making interface the new active one
[  209.021884][ T8181] kvm: requested 187733 ns i8254 timer period limited to 200000 ns
[  209.052428][ T8178] batadv1: entered promiscuous mode
[  209.058175][ T8178] batadv1: entered allmulticast mode
[  209.066885][ T8178] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  209.067311][ T8181] kvm: requested 122361 ns i8254 timer period limited to 200000 ns
[  209.106070][ T8185] tipc: Resetting bearer <eth:syzkaller0>
[  209.120361][ T8173] tipc: Resetting bearer <eth:syzkaller0>
[  209.172999][ T8173] tipc: Disabling bearer <eth:syzkaller0>
[  209.234885][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'.
[  210.065678][ T5691] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  210.247896][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.304599][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.328261][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  210.390527][ T5691] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  210.427851][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.491468][ T5691] usb 4-1: config 0 descriptor??
[  210.711059][ T8226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.817539][ T8225] tipc: Disabling bearer <eth:syzkaller0>
[  210.942932][ T5691] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  211.167197][   T29] audit: type=1804 audit(1780862753.951:768): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.791" name="bus" dev="ramfs" ino=28028 res=1 errno=0
[  211.254381][   T29] audit: type=1804 audit(1780862753.951:769): pid=8236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.791" name="bus" dev="ramfs" ino=28028 res=1 errno=0
[  211.467535][ T5721] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  211.703860][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.733655][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.772353][ T5721] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  211.806199][ T5721] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a75, bcdDevice= 0.00
[  211.819367][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.844224][ T5721] usb 1-1: config 0 descriptor??
[  212.258168][    C0] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1
[  212.387585][ T5698] usb 4-1: reset high-speed USB device number 15 using dummy_hcd
[  212.748479][ T5721] usbhid 1-1:0.0: can't add hid device: -71
[  212.748569][ T5721] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  212.792852][ T5721] usb 1-1: USB disconnect, device number 18
[  212.959214][ T5706] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  212.990489][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'.
[  213.110955][ T5706] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.135835][ T5706] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  213.170089][ T5706] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.181030][ T5691] usb 4-1: USB disconnect, device number 15
[  213.219251][ T5706] usb 5-1: config 0 descriptor??
[  213.619724][   T29] audit: type=1800 audit(1780862756.411:770): pid=8270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.802" name="/" dev="fuse" ino=1 res=0 errno=0
[  213.665660][ T5706] ath6kl: Unsupported hardware version: 0x0
[  213.678289][ T5706] ath6kl: Failed to init ath6kl core: -22
[  213.678882][ T5706] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22
[  213.729715][ T8255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.798'.
[  213.753450][ T8255] team0 (unregistering): Port device team_slave_0 removed
[  213.763188][ T8255] team0 (unregistering): Port device team_slave_1 removed
[  213.910982][ T5698] usb 5-1: USB disconnect, device number 23
[  214.265632][ T5691] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  214.438364][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.459904][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.465723][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.467605][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.486838][ T5691] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  214.506727][ T5691] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  214.514775][ T5691] usb 4-1: Manufacturer: syz
[  214.529764][ T8289] bridge0: entered allmulticast mode
[  214.539507][ T8287] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[  214.554755][ T5691] usb 4-1: config 0 descriptor??
[  214.581412][ T8287] bridge_slave_1: left allmulticast mode
[  214.585058][ T8291] binder: 8290:8291 ioctl c0286405 0 returned -22
[  214.597940][ T8287] bridge_slave_1: left promiscuous mode
[  214.620845][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.644090][ T8287] bridge_slave_0: left allmulticast mode
[  214.651275][ T8292] binder: 8290:8292 ioctl 40044591 0 returned -22
[  214.658031][ T8287] bridge_slave_0: left promiscuous mode
[  214.667682][ T8291] binder: 8290:8291 ioctl c0306201 200000000040 returned -14
[  214.686384][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.988526][ T5691] usbhid 4-1:0.0: can't add hid device: -71
[  215.009001][ T5691] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  215.044337][ T5691] usb 4-1: USB disconnect, device number 16
[  215.156652][  T810] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  215.178384][ T8299] loop6: detected capacity change from 0 to 2640
[  215.185341][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.202784][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.213594][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.228502][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.238306][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.293905][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.296036][ T8304] loop6: detected capacity change from 2640 to 524288000
[  215.323004][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.331762][  T810] usb 6-1: Using ep0 maxpacket: 16
[  215.335969][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.339927][  T810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.344834][ T8299] ldm_validate_partition_table(): Disk read failed.
[  215.362141][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.370421][ T8299] Buffer I/O error on dev loop6, logical block 0, async page read
[  215.371717][  T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  215.379226][ T8299] Dev loop6: unable to read RDB block 0
[  215.399641][  T810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  215.408794][ T8299]  loop6: unable to read partition table
[  215.410037][  T810] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  215.425418][  T810] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.425853][ T8299] loop_reread_partitions: partition scan of loop6 (ir¡c‡’úÒVUŸX¯ÃG¨½›˜ñZtM<IÆi8NL� í	á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5)
[  215.465648][ T5725] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  215.468039][  T810] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  215.500005][  T810] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  215.509346][  T810] usb 6-1: Manufacturer: syz
[  215.548003][  T810] usb 6-1: config 0 descriptor??
[  215.624314][ T5725] usb 1-1: Using ep0 maxpacket: 8
[  215.641965][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.685823][ T5725] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 7
[  215.753040][ T5725] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  215.785033][ T5725] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  215.812560][ T5725] usb 1-1: Product: syz
[  215.822370][ T5725] usb 1-1: Manufacturer: syz
[  215.847311][ T5725] usb 1-1: SerialNumber: syz
[  215.948985][  T810] rc_core: IR keymap rc-hauppauge not found
[  215.972280][  T810] Registered IR keymap rc-empty
[  215.989018][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.006033][ T5720] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  216.026004][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.068256][  T810] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  216.144346][  T810] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21
[  216.166208][ T8320] netdevsim netdevsim4 : renamed from netdevsim0 (while UP)
[  216.204017][ T8320] capability: warning: `syz.4.818' uses deprecated v2 capabilities in a way that may be insecure
[  216.215463][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.226487][ T5720] usb 4-1: Using ep0 maxpacket: 16
[  216.243999][ T5720] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  216.255858][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.272089][ T5720] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  216.289289][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.291570][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.307018][ T5720] usb 4-1: Product: syz
[  216.335076][ T5720] usb 4-1: Manufacturer: syz
[  216.359618][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.366258][ T5720] usb 4-1: SerialNumber: syz
[  216.394942][ T5720] usb 4-1: config 0 descriptor??
[  216.412947][ T5720] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  216.420055][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.433198][ T5720] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  216.458432][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.515867][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.545842][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.570359][ T5698] usb 1-1: USB disconnect, device number 19
[  216.576520][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.605885][  T810] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  216.640114][  T810] mceusb 6-1:0.0: Registered 42424242 with mce emulator interface version 1
[  216.658550][  T810] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  216.687100][  T810] usb 6-1: USB disconnect, device number 3
[  217.033377][ T5720] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  217.471048][ T5720] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  217.489255][ T5720] em28xx 4-1:0.0: board has no eeprom
[  217.755128][ T8351] netlink: 'syz.1.826': attribute type 1 has an invalid length.
[  217.815756][ T5720] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  217.830982][ T5720] em28xx 4-1:0.0: dvb set to bulk mode.
[  217.837987][   T24] em28xx 4-1:0.0: Binding DVB extension
[  217.846591][ T8351] bond2: entered promiscuous mode
[  217.890037][ T8351] bond2: entered allmulticast mode
[  217.933695][ T8351] 8021q: adding VLAN 0 to HW filter on device bond2
[  218.035011][ T8354] netlink: 'syz.4.827': attribute type 1 has an invalid length.
[  218.130441][ T5720] usb 4-1: USB disconnect, device number 17
[  218.139681][ T8360] netlink: 'syz.5.828': attribute type 1 has an invalid length.
[  218.151214][ T8355] bridge1: entered promiscuous mode
[  218.162956][ T8312] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-19)
[  218.181980][  T142] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  218.201220][ T5720] em28xx 4-1:0.0: Disconnecting em28xx
[  218.207221][ T8355] bridge1: entered allmulticast mode
[  218.222998][ T8355] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  218.293482][ T8354] 8021q: adding VLAN 0 to HW filter on device bond2
[  218.357740][   T57] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  218.369108][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.5.828'.
[  218.399682][   T24] em28xx 4-1:0.0: Registering input extension
[  218.409498][ T8358] bond2: (slave veth7): Enslaving as an active interface with a down link
[  218.410137][ T5720] em28xx 4-1:0.0: Closing input extension
[  218.474702][ T5720] em28xx 4-1:0.0: Freeing device
[  218.501551][ T8362] bond2: (slave dummy0): making interface the new active one
[  218.520939][ T8362] dummy0: entered promiscuous mode
[  218.530130][ T8362] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  218.730994][ T8357] bridge2: entered promiscuous mode
[  218.752879][ T8357] bridge2: entered allmulticast mode
[  218.782540][ T8357] bond2: (slave bridge2): Enslaving as a backup interface with a down link
[  218.817331][ T8366] bond1: (slave geneve2): making interface the new active one
[  218.829947][ T8366] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  218.843418][ T8367] 8021q: adding VLAN 0 to HW filter on device bond1
[  218.918775][   T97] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  218.952347][   T97] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  218.992187][   T97] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  219.024137][   T97] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  219.032483][ T8382] kvm: pic: non byte write
[  219.341997][ T8391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.369138][ T8391] syzkaller0: entered promiscuous mode
[  219.383510][ T8391] syzkaller0: entered allmulticast mode
[  219.466340][ T8391] tipc: Resetting bearer <eth:syzkaller0>
[  219.499592][ T8390] tipc: Resetting bearer <eth:syzkaller0>
[  219.553382][ T8390] tipc: Disabling bearer <eth:syzkaller0>
[  220.381740][ T8418] syzkaller0: entered promiscuous mode
[  220.404253][ T8418] syzkaller0: entered allmulticast mode
[  220.840901][ T8428] syzkaller0: entered promiscuous mode
[  220.863820][ T8428] syzkaller0: entered allmulticast mode
[  220.905482][ T8428] 0: reclassify loop, rule prio 0, protocol 800
[  221.096827][ T5698] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  221.130387][ T8442] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.153250][ T8442] syzkaller0: entered promiscuous mode
[  221.182447][ T8442] syzkaller0: entered allmulticast mode
[  221.287508][ T5698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.293415][ T8442] tipc: Resetting bearer <eth:syzkaller0>
[  221.316465][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0
[  221.348408][ T5698] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  221.358944][ T8438] tipc: Resetting bearer <eth:syzkaller0>
[  221.365694][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.391149][ T5698] usb 2-1: Product: syz
[  221.402649][ T5698] usb 2-1: Manufacturer: syz
[  221.426043][ T5698] usb 2-1: SerialNumber: syz
[  221.443337][ T5698] usb 2-1: config 0 descriptor??
[  221.458831][ T8438] tipc: Disabling bearer <eth:syzkaller0>
[  221.471371][ T5698] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  221.511633][ T5698] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  221.541427][ T8448] bridge_slave_0: left allmulticast mode
[  221.558512][ T5698] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  221.570833][ T8448] bridge_slave_0: left promiscuous mode
[  221.585701][ T5698] usb 2-1: media controller created
[  221.597040][ T8448] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.653110][ T8448] bridge_slave_1: left allmulticast mode
[  221.665154][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  221.680474][ T8448] bridge_slave_1: left promiscuous mode
[  221.703269][ T8448] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.756437][ T8448] bond0: (slave bond_slave_0): Releasing backup interface
[  221.784900][ T5698] DVB: Unable to find symbol tda10046_attach()
[  221.792713][ T5698] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  221.792717][ T8448] bond0: (slave bond_slave_1): Releasing backup interface
[  221.819887][ T5698] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  221.861109][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  221.870662][ T8448] team0: Port device team_slave_0 removed
[  221.910679][ T8448] team0: Port device team_slave_1 removed
[  221.929963][ T8448] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.953179][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.999757][ T8448] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.026607][ T8448] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.070660][ T8448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  222.190033][ T5698] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  222.219769][ T5698] usb 2-1: USB disconnect, device number 16
[  222.456100][ T8469] syzkaller0: entered promiscuous mode
[  222.483552][ T8469] syzkaller0: entered allmulticast mode
[  222.519683][ T8471] 0: reclassify loop, rule prio 0, protocol 800
[  223.095627][ T5698] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  223.298362][ T5698] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  223.332351][ T5698] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  223.383903][ T5698] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  223.416878][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.447635][ T5698] usb 6-1: Product: syz
[  223.468738][ T5698] usb 6-1: Manufacturer: syz
[  223.501716][ T5698] usb 6-1: SerialNumber: syz
[  223.685905][ T8490] netlink: 16 bytes leftover after parsing attributes in process `syz.3.862'.
[  223.927399][ T5698] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  223.985826][ T5698] usb 6-1: unit 6 not found!
[  224.092669][ T5698] usb 6-1: USB disconnect, device number 4
[  224.206694][ T5630] udevd[5630]: setting owner of /dev/bus/usb/006/004 to uid=0, gid=0 failed: No such file or directory
[  224.235650][   T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  224.242066][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  224.262155][ T8501] tipc: Cannot configure node identity twice
[  224.387497][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.408553][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  224.427173][   T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  224.449209][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  224.474040][   T24] usb 4-1: SerialNumber: syz
[  224.535290][ T8506] warning: `syz.4.868' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  224.735004][   T24] usb 4-1: 0:2 : does not exist
[  224.791120][   T24] usb 4-1: USB disconnect, device number 18
[  224.858592][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  225.034877][ T8516] syzkaller0: entered promiscuous mode
[  225.042924][ T8516] syzkaller0: entered allmulticast mode
[  225.515628][ T5698] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  225.685917][ T5698] usb 2-1: Using ep0 maxpacket: 32
[  225.704537][ T5698] usb 2-1: config 0 has an invalid interface number: 119 but max is 0
[  225.731656][ T5698] usb 2-1: config 0 has no interface number 0
[  225.752221][ T5698] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  225.762249][ T8535] syzkaller0: entered promiscuous mode
[  225.780421][ T8535] syzkaller0: entered allmulticast mode
[  225.799732][ T5698] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  225.825865][ T5698] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[  225.830955][ T8535] TC_ACT_REPEAT abuse ?
[  225.881855][ T5698] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  225.948865][ T5698] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  225.973083][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.992359][ T5698] usb 2-1: Product: syz
[  226.009329][ T5698] usb 2-1: Manufacturer: syz
[  226.029390][ T5698] usb 2-1: SerialNumber: syz
[  226.056593][ T5698] usb 2-1: config 0 descriptor??
[  226.064356][ T8540] syzkaller0: entered promiscuous mode
[  226.086944][ T8521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  226.109526][ T8540] syzkaller0: entered allmulticast mode
[  226.117994][ T5721] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  226.133568][ T5698] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input23
[  226.175883][ T4983] usb 2-1: BOGUS urb xfer, pipe 1 != type 3
[  226.215850][    C0] bcm5974 2-1:0.119: trackpad urb failed: -1
[  226.276516][ T5721] usb 1-1: Using ep0 maxpacket: 16
[  226.314415][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.331766][ T5721] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  226.350634][ T5698] usb 2-1: USB disconnect, device number 17
[  226.351958][ T5721] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  226.356731][    C0] bcm5974 2-1:0.119: trackpad urb failed: -19
[  226.404552][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.445694][ T5721] usb 1-1: Product: syz
[  226.455794][ T5721] usb 1-1: Manufacturer: syz
[  226.465231][ T5721] usb 1-1: SerialNumber: syz
[  226.531746][ T5721] usb 1-1: 0:2 : does not exist
[  226.713232][ T5721] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  226.771043][ T5721] usb 1-1: USB disconnect, device number 20
[  226.805353][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  227.061494][ T8564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.070639][ T8564] syzkaller0: entered promiscuous mode
[  227.093120][ T8564] syzkaller0: entered allmulticast mode
[  227.171675][ T8564] tipc: Resetting bearer <eth:syzkaller0>
[  227.209980][ T8563] tipc: Resetting bearer <eth:syzkaller0>
[  227.310515][ T8563] tipc: Disabling bearer <eth:syzkaller0>
[  227.815862][ T5721] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  227.859786][ T8593] bond0: (slave bond_slave_1): Releasing backup interface
[  227.989655][ T5721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.011160][ T5721] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  228.026048][ T5721] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  228.042932][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.046912][ T5698] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  228.071907][ T5721] usb 2-1: Product: syz
[  228.087524][ T5721] usb 2-1: Manufacturer: syz
[  228.093243][ T5721] usb 2-1: SerialNumber: syz
[  228.102885][ T5721] usb 2-1: config 0 descriptor??
[  228.226806][ T5698] usb 5-1: Using ep0 maxpacket: 8
[  228.240700][ T5698] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  228.250419][ T5698] usb 5-1: config 0 has no interface number 0
[  228.261056][ T5698] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  228.281205][ T5698] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  228.309079][ T5698] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  228.341641][ T5698] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  228.375244][ T5698] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  228.404755][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.431196][ T5698] usb 5-1: config 0 descriptor??
[  228.447694][ T5698] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  228.655684][ T5721] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  228.697273][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'.
[  228.877624][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.901065][ T5721] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  228.953076][ T5721] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  228.967760][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  228.992001][ T5721] usb 1-1: SerialNumber: syz
[  229.028717][ T5721] cdc_ether 1-1:1.0: missing cdc header ether descriptor
[  229.068816][ T5721] usb-storage 1-1:1.0: USB Mass Storage device detected
[  229.143830][ T5721] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  229.206974][ T5691] usb 5-1: USB disconnect, device number 24
[  229.212953][    C0] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  229.327559][ T8596] ldusb: No device or device unplugged -19
[  229.334742][ T5691] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  229.587473][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.609289][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.706464][ T7078] dummy0: left promiscuous mode
[  229.837782][ T8610] syzkaller0: entered promiscuous mode
[  229.848473][ T8610] syzkaller0: entered allmulticast mode
[  229.881447][   T29] audit: type=1326 audit(1780862772.661:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.3.902" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f8223b96bd7 code=0x0
[  230.050887][ T8614] netlink: 'syz.4.904': attribute type 1 has an invalid length.
[  230.212560][ T8614] veth9: entered promiscuous mode
[  230.238169][ T8614] bond3: (slave veth9): Enslaving as an active interface with a down link
[  230.349395][ T8616] bond3: (slave veth11): Enslaving as an active interface with a down link
[  230.372030][ T8614] bond3: entered promiscuous mode
[  230.400291][ T8614] bond3: entered allmulticast mode
[  230.426899][ T8614] 8021q: adding VLAN 0 to HW filter on device bond3
[  230.582770][ T5721] usb 2-1: USB disconnect, device number 18
[  231.489928][  T810] usb 1-1: USB disconnect, device number 21
[  231.604145][ T8628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.908'.
[  231.703917][ T8628] ip6gre1: entered promiscuous mode
[  231.712864][ T8628] ip6gre1: entered allmulticast mode
[  231.806108][ T8628] netlink: 'syz.0.908': attribute type 6 has an invalid length.
[  231.828647][ T8628] netlink: 72 bytes leftover after parsing attributes in process `syz.0.908'.
[  232.266855][ T5720] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  232.446771][ T5720] usb 5-1: Using ep0 maxpacket: 32
[  232.469895][ T5720] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  232.525185][ T5720] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  232.570872][ T5720] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  232.588781][ T5720] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  232.611319][ T5720] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  232.625931][ T5720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.635476][ T5720] usb 5-1: Product: syz
[  232.642196][ T5720] usb 5-1: Manufacturer: syz
[  232.650184][ T5720] usb 5-1: SerialNumber: syz
[  232.659694][ T8650] syzkaller0: entered promiscuous mode
[  232.682432][ T8650] syzkaller0: entered allmulticast mode
[  232.683990][    C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  232.757162][ T5720] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input24
[  232.936452][ T5720] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  232.957764][ T5720]  (id 0x00)
[  233.149994][ T5720] rc_core: IR keymap rc-imon-pad not found
[  233.189665][ T5720] Registered IR keymap rc-empty
[  233.226423][ T5720] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  233.267128][ T5720] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  233.361383][ T5720] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[  233.422370][ T5720] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input25
[  233.435628][ T5691] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  233.524341][ T5720] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:25> initialized
[  233.663550][ T5691] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.704210][ T5691] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  233.739823][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.768467][ T5691] usb 1-1: config 0 descriptor??
[  233.778135][ T5691] pwc: Askey VC010 type 2 USB webcam detected.
[  233.994560][ T5691] pwc: send_video_command error -71
[  234.014073][ T5691] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  234.043134][ T5691] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  234.073045][ T5691] usb 1-1: USB disconnect, device number 22
[  234.103756][ T8674] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.112154][ T8674] syzkaller0: entered promiscuous mode
[  234.121173][ T8674] syzkaller0: entered allmulticast mode
[  234.162068][ T8674] tipc: Resetting bearer <eth:syzkaller0>
[  234.188416][ T8673] tipc: Resetting bearer <eth:syzkaller0>
[  234.212132][ T8673] tipc: Disabling bearer <eth:syzkaller0>
[  234.546127][ T5691] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  234.709598][ T5691] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  234.720086][ T5691] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  234.732421][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.750245][ T5691] usb 1-1: config 0 descriptor??
[  234.767392][ T5691] pwc: Askey VC010 type 2 USB webcam detected.
[  235.017306][ T8675] imon:send_packet: task interrupted
[  235.023051][ T8675] imon:send_packet: packet tx failed (-512)
[  235.031820][ T8675] imon:vfd_write: send packet #5 failed
[  235.050876][ T8675] imon:send_packet: task interrupted
[  235.065657][ T8675] imon:send_packet: packet tx failed (-512)
[  235.080463][ T8675] imon:vfd_write: send packet #0 failed
[  235.104811][ T8675] imon:send_packet: packet tx failed (-32)
[  235.121310][ T8675] imon:vfd_write: send packet #0 failed
[  235.144342][ T5721] usb 5-1: USB disconnect, device number 25
[  235.151958][ T8702] syz.3.930: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1
[  235.201032][ T5691] pwc: recv_control_msg error -32 req 02 val 2b00
[  235.225476][ T8702] CPU: 0 UID: 0 PID: 8702 Comm: syz.3.930 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  235.225508][ T8702] Tainted: [L]=SOFTLOCKUP
[  235.225517][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  235.225527][ T8702] Call Trace:
[  235.225534][ T8702]  <TASK>
[  235.225543][ T8702]  dump_stack_lvl+0xe8/0x150
[  235.225569][ T8702]  warn_alloc+0x249/0x340
[  235.225601][ T8702]  ? __pfx_warn_alloc+0x10/0x10
[  235.225641][ T8702]  __vmalloc_node_range_noprof+0x132/0x1750
[  235.225665][ T8702]  ? __mutex_trylock_common+0x158/0x260
[  235.225691][ T8702]  ? __pfx___mutex_trylock_common+0x10/0x10
[  235.225718][ T8702]  ? trace_contention_end+0x3d/0x140
[  235.225742][ T8702]  ? __mutex_lock+0x319/0x1550
[  235.225769][ T8702]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  235.225791][ T8702]  ? tomoyo_path_number_perm+0x219/0x630
[  235.225814][ T8702]  ? dvb_demux_do_ioctl+0x320/0x540
[  235.225840][ T8702]  ? __pfx___mutex_lock+0x10/0x10
[  235.225859][ T8702]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  235.225883][ T8702]  vmalloc_noprof+0xb2/0xe0
[  235.225904][ T8702]  ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  235.225929][ T8702]  dvb_dmxdev_set_buffer_size+0xbe/0x1f0
[  235.225957][ T8702]  dvb_demux_do_ioctl+0x45d/0x540
[  235.225985][ T8702]  dvb_usercopy+0x199/0x2e0
[  235.226007][ T8702]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[  235.226029][ T8702]  ? __pfx_dvb_usercopy+0x10/0x10
[  235.226070][ T8702]  ? __fget_files+0x3a0/0x420
[  235.226089][ T8702]  ? __fget_files+0x2a/0x420
[  235.226112][ T8702]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[  235.226136][ T8702]  dvb_demux_ioctl+0x29/0x40
[  235.226159][ T8702]  __se_sys_ioctl+0xfc/0x170
[  235.226183][ T8702]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.226201][ T8702]  do_syscall_64+0x174/0x580
[  235.226217][ T8702]  ? trace_irq_disable+0x3b/0x140
[  235.226240][ T8702]  ? clear_bhb_loop+0x40/0x90
[  235.226260][ T8702]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.226277][ T8702] RIP: 0033:0x7f8223b9ce59
[  235.226293][ T8702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.226308][ T8702] RSP: 002b:00007f8224abb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  235.226325][ T8702] RAX: ffffffffffffffda RBX: 00007f8223e15fa0 RCX: 00007f8223b9ce59
[  235.226337][ T8702] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003
[  235.226348][ T8702] RBP: 00007f8223c32d6f R08: 0000000000000000 R09: 0000000000000000
[  235.226358][ T8702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.226367][ T8702] R13: 00007f8223e16038 R14: 00007f8223e15fa0 R15: 00007f8223f3fa48
[  235.226396][ T8702]  </TASK>
[  235.285038][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.930'.
[  235.375865][ T5691] pwc: recv_control_msg error -32 req 02 val 2700
[  235.589105][ T8702] Mem-Info:
[  235.593091][ T8702] active_anon:6459 inactive_anon:0 isolated_anon:0
[  235.593091][ T8702]  active_file:15998 inactive_file:40059 isolated_file:0
[  235.593091][ T8702]  unevictable:768 dirty:1702 writeback:0
[  235.593091][ T8702]  slab_reclaimable:9450 slab_unreclaimable:99735
[  235.593091][ T8702]  mapped:31452 shmem:1296 pagetables:1416
[  235.593091][ T8702]  sec_pagetables:0 bounce:0
[  235.593091][ T8702]  kernel_misc_reclaimable:0
[  235.593091][ T8702]  free:1312085 free_pcp:8767 free_cma:0
[  235.676441][ T5691] pwc: recv_control_msg error -32 req 02 val 2c00
[  235.683779][ T5691] pwc: recv_control_msg error -32 req 04 val 1000
[  235.695729][ T5691] pwc: recv_control_msg error -32 req 04 val 1300
[  235.705738][ T5643] Bluetooth: hci1: unexpected event for opcode 0x2031
[  235.721528][ T8702] Node 0 active_anon:25936kB inactive_anon:0kB active_file:63872kB inactive_file:160040kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125724kB dirty:6804kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14148kB pagetables:5512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  235.772989][ T8702] Node 1 active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  235.781948][ T5691] pwc: recv_control_msg error -32 req 04 val 1400
[  235.808352][ T8702] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  235.845102][ T8702] lowmem_reserve[]: 0 2492 2493 2493 2493
[  235.890315][ T8702] Node 0 DMA32 free:1287676kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25840kB inactive_anon:0kB active_file:63872kB inactive_file:160040kB unevictable:1536kB writepending:6872kB zspages:0kB present:3129332kB managed:2552780kB mlocked:0kB bounce:0kB free_pcp:29676kB local_pcp:13692kB free_cma:0kB
[  235.900824][ T5691] pwc: recv_control_msg error -32 req 02 val 2000
[  235.934531][ T8712] ip_tunnel: non-ECT from 0.0.224.0 with TOS=0x3
[  235.960746][ T8710] syzkaller0: entered promiscuous mode
[  235.962906][ T8702] lowmem_reserve[]: 0 0 0 0 0
[  235.975805][ T8710] syzkaller0: entered allmulticast mode
[  236.002829][ T5691] pwc: recv_control_msg error -32 req 02 val 2100
[  236.012828][ T8702] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB
[  236.014913][ T5691] pwc: recv_control_msg error -32 req 04 val 1500
[  236.113443][ T8702] lowmem_reserve[]: 0 0 0 0 0
[  236.128700][ T8702] Node 1 Normal free:3945432kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4560kB local_pcp:0kB free_cma:0kB
[  236.197528][ T8702] lowmem_reserve[]: 0 0 0 0 0
[  236.212568][ T8702] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  236.239615][ T8702] Node 0 DMA32: 162*4kB (U) 1103*8kB (UM) 1225*16kB (UM) 335*32kB (UME) 227*64kB (UME) 176*128kB (UME) 121*256kB (UME) 40*512kB (UME) 21*1024kB (UME) 2*2048kB (UM) 275*4096kB (M) = 1280304kB
[  236.279048][ T8702] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB
[  236.305719][ T8702] Node 1 Normal: 5*4kB (UM) 11*8kB (UM) 8*16kB (UM) 12*32kB (UM) 12*64kB (UM) 4*128kB (UM) 7*256kB (UM) 5*512kB (M) 3*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3945580kB
[  236.335370][ T5691] pwc: recv_control_msg error -71 req 02 val 2400
[  236.345378][ T8702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  236.346027][ T5691] pwc: recv_control_msg error -71 req 02 val 2600
[  236.364070][ T8702] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  236.407270][ T8702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  236.418940][ T5691] pwc: recv_control_msg error -71 req 02 val 2900
[  236.443027][ T5691] pwc: recv_control_msg error -71 req 02 val 2800
[  236.446227][ T8702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  236.459828][ T5691] pwc: recv_control_msg error -71 req 04 val 1100
[  236.476428][ T8702] 60196 total pagecache pages
[  236.487581][ T5691] pwc: recv_control_msg error -71 req 04 val 1200
[  236.491526][ T8702] 0 pages in swap cache
[  236.506689][ T8702] Free swap  = 124996kB
[  236.552239][ T5691] pwc: Registered as video103.
[  236.562074][ T8702] Total swap = 124996kB
[  236.578169][ T8702] 2097051 pages RAM
[  236.603955][ T5691] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26
[  236.610211][ T8702] 0 pages HighMem/MovableOnly
[  236.648642][ T8702] 427071 pages reserved
[  236.670238][ T8702] 0 pages cma reserved
[  236.677210][ T5691] usb 1-1: USB disconnect, device number 23
[  237.145758][ T5720] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  237.169202][ T8725] futex_wake_op: syz.0.937 tries to shift op by -1; fix this program
[  237.311904][ T5720] usb 4-1: Using ep0 maxpacket: 32
[  237.323448][ T5720] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  237.345000][ T5720] usb 4-1: config 0 has no interface number 0
[  237.368025][ T5720] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[  237.429342][ T5720] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  237.434097][ T8735] binder: 8734:8735 ioctl c0306201 200000000180 returned -14
[  237.453002][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.485645][ T5720] usb 4-1: Product: syz
[  237.491153][ T5720] usb 4-1: Manufacturer: syz
[  237.496527][ T5720] usb 4-1: SerialNumber: syz
[  237.514830][ T5720] usb 4-1: config 0 descriptor??
[  237.532308][ T5720] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  237.583544][ T5720] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22
[  237.791789][ T8743] sctp: [Deprecated]: syz.1.941 (pid 8743) Use of struct sctp_assoc_value in delayed_ack socket option.
[  237.791789][ T8743] Use struct sctp_sack_info instead
[  238.085668][ T5698] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  238.154059][ T8750] create_pit_timer: 4 callbacks suppressed
[  238.154075][ T8750] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  238.278197][ T5720] usb 4-1: USB disconnect, device number 19
[  238.292526][ T5698] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  238.311519][ T8750] picdev_read: 22 callbacks suppressed
[  238.311536][ T8750] kvm: pic: non byte read
[  238.334688][ T8750] pic_ioport_write: 184 callbacks suppressed
[  238.334705][ T8750] kvm: pic: level sensitive irq not supported
[  238.347552][ T5698] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  238.370271][ T8750] kvm: pic: non byte read
[  238.375495][ T8750] kvm: pic: level sensitive irq not supported
[  238.375855][ T8750] kvm: pic: non byte read
[  238.387396][ T8750] kvm: pic: level sensitive irq not supported
[  238.387459][ T8750] kvm: pic: non byte read
[  238.402682][ T5698] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  238.416518][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.424797][ T5698] usb 1-1: Product: syz
[  238.429191][ T5698] usb 1-1: Manufacturer: syz
[  238.437246][ T5698] usb 1-1: SerialNumber: syz
[  239.151419][ T5698] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  239.189425][ T5698] usb 1-1: unit 6 not found!
[  239.390967][ T5698] usb 1-1: USB disconnect, device number 24
[  239.450188][ T5721] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  239.493419][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  239.660027][ T5721] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  239.674163][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.686821][ T5721] usb 2-1: Product: syz
[  239.691824][ T5721] usb 2-1: Manufacturer: syz
[  239.698432][ T5721] usb 2-1: SerialNumber: syz
[  239.715747][ T5691] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  239.735379][ T5721] usb 2-1: config 0 descriptor??
[  239.875610][ T5691] usb 6-1: Using ep0 maxpacket: 16
[  239.898313][ T5691] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  239.915838][ T5691] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  239.937870][ T5691] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  239.956591][ T5691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  239.965125][ T5721] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  239.969005][ T5691] usb 6-1: SerialNumber: syz
[  240.014366][ T5691] usb 6-1: 0:2 : does not exist
[  241.332689][ T5691] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  241.383800][ T5691] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5)
[  241.420726][ T5721] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  241.423322][ T5691] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  241.449940][ T5691] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  241.480820][ T5721] usb 2-1: USB disconnect, device number 19
[  241.507452][ T5691] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  241.551098][ T5691] usb 6-1: USB disconnect, device number 5
[  241.706163][ T5725] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  241.765844][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  241.875662][ T5725] usb 1-1: Using ep0 maxpacket: 16
[  241.884216][ T5725] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  241.894799][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  241.906324][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  241.939809][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  241.952328][ T5725] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  241.965313][ T8792] netlink: 'syz.5.957': attribute type 21 has an invalid length.
[  241.993417][   T24] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  242.002749][ T5725] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  242.035191][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.055416][ T5725] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  242.073525][   T24] usb 5-1: config 0 descriptor??
[  242.081944][ T5725] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  242.090689][ T5725] usb 1-1: Manufacturer: syz
[  242.098855][ T8790] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  242.108707][ T5725] usb 1-1: config 0 descriptor??
[  242.178912][ T8794] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  242.209334][ T8794] kvm: pic: non byte read
[  242.214116][ T8794] kvm: pic: level sensitive irq not supported
[  242.214182][ T8794] kvm: pic: non byte read
[  242.226429][ T5698] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  242.240829][ T8794] kvm: pic: level sensitive irq not supported
[  242.240963][ T8794] kvm: pic: non byte read
[  242.252600][ T8794] kvm: pic: level sensitive irq not supported
[  242.252710][ T8794] kvm: pic: non byte read
[  242.387767][ T5698] usb 6-1: unable to get BOS descriptor or descriptor too short
[  242.423672][ T5698] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  242.454817][ T5698] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  242.475634][ T5725] rc_core: IR keymap rc-hauppauge not found
[  242.481908][ T5725] Registered IR keymap rc-empty
[  242.487616][ T5698] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  242.506264][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.516623][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  242.526060][ T5698] usb 6-1: Product: syz
[  242.561575][ T5698] usb 6-1: Manufacturer: syz
[  242.566921][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  242.568637][ T5698] usb 6-1: SerialNumber: syz
[  242.579321][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.598745][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.612707][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.627765][ T5725] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  242.662393][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.694716][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.712676][ T5725] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27
[  242.742329][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.765981][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.781797][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.789021][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  242.796321][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.803438][   T24] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  242.812483][   T24] asus 0003:0B05:1ABE.000A: unexpected long global item
[  242.820616][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  242.829341][   T24] asus 0003:0B05:1ABE.000A: Asus hid parse failed: -22
[  242.873262][   T24] asus 0003:0B05:1ABE.000A: probe with driver asus failed with error -22
[  242.891088][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  242.924458][   T24] usb 5-1: USB disconnect, device number 26
[  242.932299][ T5691] usb 6-1: USB disconnect, device number 6
[  242.935258][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  242.995809][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  243.056247][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  243.115670][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  243.156270][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  243.185774][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  243.226000][ T5725] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  243.276196][ T5725] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  243.299223][ T8814] syzkaller0: entered promiscuous mode
[  243.305375][ T8814] syzkaller0: entered allmulticast mode
[  243.308602][ T5725] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  243.330995][ T5725] usb 1-1: USB disconnect, device number 25
[  243.359955][ T8814] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  243.374670][ T8814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.396417][ T8813] tipc: Resetting bearer <eth:syzkaller0>
[  243.458238][ T8813] tipc: Disabling bearer <eth:syzkaller0>
[  243.825774][ T5691] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  243.994905][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'.
[  243.996264][ T5691] usb 2-1: Using ep0 maxpacket: 16
[  244.038733][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  244.051145][ T5691] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11
[  244.107550][ T5691] usb 2-1: config 0 interface 0 has no altsetting 0
[  244.127974][ T5691] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  244.140203][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.156487][ T5691] usb 2-1: config 0 descriptor??
[  244.325657][  T810] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  244.396810][ T5691] usbhid 2-1:0.0: can't add hid device: -71
[  244.471830][ T5691] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  244.506289][ T5691] usb 2-1: USB disconnect, device number 20
[  244.545728][  T810] usb 5-1: Using ep0 maxpacket: 16
[  244.552869][  T810] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  244.564768][  T810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  244.580151][  T810] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  244.589730][  T810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.598383][  T810] usb 5-1: Product: syz
[  244.602778][  T810] usb 5-1: Manufacturer: syz
[  244.607522][  T810] usb 5-1: SerialNumber: syz
[  244.615232][  T810] usb 5-1: config 0 descriptor??
[  244.618134][ T8845] loop9: detected capacity change from 0 to 4096
[  244.628821][  T810] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  244.640848][  T810] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  244.786884][   T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  244.967451][   T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  245.001080][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.043193][   T24] usb 1-1: config 0 descriptor??
[  245.087888][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.260070][  T810] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  245.270213][  T810] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  245.878239][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.899113][  T810] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[  246.075640][ T5638] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  246.091194][   T24] usb 1-1: Cannot read MAC address
[  246.102192][   T24] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  246.119129][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.154565][   T24] usb 1-1: USB disconnect, device number 26
[  246.234782][ T8866] syzkaller0: entered promiscuous mode
[  246.244191][ T8866] syzkaller0: entered allmulticast mode
[  246.260991][ T5638] usb 4-1: Using ep0 maxpacket: 8
[  246.289362][ T5638] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  246.309648][ T5638] usb 4-1: config 0 has no interface number 0
[  246.330755][ T5638] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  246.383391][ T5638] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  246.384652][ T8866] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.425599][ T5638] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  246.451300][ T5638] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  246.491632][ T8865] tipc: Resetting bearer <eth:syzkaller0>
[  246.497587][ T5638] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  246.528444][ T5638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.549123][ T8865] tipc: Disabling bearer <eth:syzkaller0>
[  246.567677][ T5638] usb 4-1: config 0 descriptor??
[  246.633528][ T5638] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  246.733175][  T810] em28xx 5-1:0.0: couldn't setup AC97 register 4
[  246.758158][  T810] em28xx 5-1:0.0: couldn't setup AC97 register 6
[  246.767142][ T5698] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  246.788184][  T810] em28xx 5-1:0.0: couldn't setup AC97 register 54
[  246.802751][  T810] em28xx 5-1:0.0: couldn't setup AC97 register 56
[  246.833860][  T810] usb 5-1: USB disconnect, device number 27
[  246.877400][ T5638] usb 4-1: USB disconnect, device number 20
[  246.925124][ T5638] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  246.935599][ T5698] usb 6-1: Using ep0 maxpacket: 8
[  246.953463][ T5698] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  246.980403][ T5698] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  247.005212][ T5698] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  247.031378][ T5698] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  247.046457][ T5698] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  247.062931][ T5698] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  247.073614][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.168337][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.265648][   T24] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  247.300264][ T5698] usb 6-1: usb_control_msg returned -32
[  247.306307][ T5698] usbtmc 6-1:16.0: can't read capabilities
[  247.422276][   T24] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  247.434479][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.440003][ T8887] syzkaller0: entered promiscuous mode
[  247.443121][   T24] usb 1-1: Product: syz
[  247.448952][ T8887] syzkaller0: entered allmulticast mode
[  247.455043][   T24] usb 1-1: Manufacturer: syz
[  247.468486][   T24] usb 1-1: SerialNumber: syz
[  247.479990][   T24] usb 1-1: config 0 descriptor??
[  247.494247][   T24] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  247.605794][ T5698] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  247.757361][ T5698] usb 5-1: config index 0 descriptor too short (expected 1426, got 146)
[  247.766125][ T5698] usb 5-1: config 113 has an invalid descriptor of length 0, skipping remainder of the config
[  247.776757][ T5698] usb 5-1: config 113 has 0 interfaces, different from the descriptor's value: 4
[  247.787557][ T5698] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  247.797144][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  247.805157][ T5698] usb 5-1: SerialNumber: syz
[  248.193446][ T8893] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  248.200709][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.416865][ T8894] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned 57
[  248.472896][ T5698] usb 5-1: USB disconnect, device number 28
[  248.589331][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.596552][ T7078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.620554][ T6094] bond2: (slave bridge1): link status up again after 0 ms
[  248.655652][ T6094] bond2: (slave bridge1): link status up again after 0 ms
[  248.686118][ T6094] bond2: (slave bridge1): link status up again after 0 ms
[  248.693316][ T6094] bond2: (slave bridge1): failed to get link speed/duplex
[  249.067005][  T142] net_ratelimit: 3 callbacks suppressed
[  249.067020][  T142] bond2: (slave bridge1): failed to get link speed/duplex
[  249.135635][ T5721] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  249.196789][  T142] bond2: (slave bridge1): failed to get link speed/duplex
[  249.238055][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.310251][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.327948][ T6094] bond2: (slave bridge1): failed to get link speed/duplex
[  249.351588][ T5721] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.376994][ T5721] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  249.392514][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  249.403763][ T5721] usb 2-1: SerialNumber: syz
[  249.465854][  T142] bond2: (slave bridge1): failed to get link speed/duplex
[  249.575699][ T6094] bond2: (slave bridge1): failed to get link speed/duplex
[  249.657355][ T5721] usb 2-1: 0:2 : does not exist
[  249.660359][ T5691] usb 6-1: USB disconnect, device number 7
[  249.697530][ T6094] bond2: (slave bridge1): failed to get link speed/duplex
[  249.827548][ T5721] usb 2-1: USB disconnect, device number 21
[  249.845682][  T142] bond2: (slave bridge1): failed to get link speed/duplex
[  249.980808][ T7078] bond2: (slave bridge1): failed to get link speed/duplex
[  250.126779][ T7078] bond2: (slave bridge1): failed to get link speed/duplex
[  250.354943][   T24] gspca_stk1135: reg_w 0x351 err -71
[  250.378531][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  250.398623][   T24] gspca_stk1135: Sensor write failed
[  250.430259][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  250.438814][   T24] gspca_stk1135: Sensor write failed
[  250.444158][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  250.459839][   T24] gspca_stk1135: Sensor read failed
[  250.480241][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  250.488572][   T24] gspca_stk1135: Sensor read failed
[  250.495203][   T24] gspca_stk1135: Detected sensor type unknown (0x0)
[  250.509711][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  250.544925][   T24] gspca_stk1135: Sensor read failed
[  250.554868][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  250.570152][   T24] gspca_stk1135: Sensor read failed
[  250.583065][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  250.615209][   T24] gspca_stk1135: Sensor write failed
[  250.644636][   T24] gspca_stk1135: serial bus timeout: status=0x00
[  250.673180][   T24] gspca_stk1135: Sensor write failed
[  250.700250][   T24] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  250.752223][   T24] usb 1-1: USB disconnect, device number 27
[  252.341549][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1016'.
[  252.645676][ T5721] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  252.656343][ T8974] netlink: 'syz.5.1017': attribute type 1 has an invalid length.
[  252.846089][ T5721] usb 1-1: Using ep0 maxpacket: 32
[  252.879769][ T5721] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  252.917260][ T8974] 8021q: adding VLAN 0 to HW filter on device bond2
[  252.967170][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  253.024779][ T8977] bond2: (slave gretap1): making interface the new active one
[  253.036796][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  253.109103][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  253.144136][ T8977] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  253.171548][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  253.237429][ T5721] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  253.286642][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.320233][ T8980] bond2: (slave veth3): Enslaving as an active interface with a down link
[  253.335253][ T5721] usb 1-1: Product: syz
[  253.344386][ T5721] usb 1-1: Manufacturer: syz
[  253.393359][ T5721] usb 1-1: SerialNumber: syz
[  253.464833][ T5721] usb 1-1: config 0 descriptor??
[  253.937032][ T5698] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  254.095833][ T6100] net_ratelimit: 35 callbacks suppressed
[  254.095852][ T6100] bond2: (slave bridge1): failed to get link speed/duplex
[  254.120840][ T5698] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  254.157458][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.239996][ T5698] usb 6-1: config 0 descriptor??
[  254.405672][  T810] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  254.503595][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.508930][ T8988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.526285][   T57] bond2: (slave bridge1): failed to get link speed/duplex
[  254.578682][ T8988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.608108][  T810] usb 2-1: Using ep0 maxpacket: 32
[  254.621206][  T810] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  254.622174][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -110
[  254.638095][  T810] usb 2-1: config 0 has no interface number 0
[  254.667041][ T6094] bond2: (slave bridge1): failed to get link speed/duplex
[  254.676841][  T810] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  254.694752][  T810] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  254.704583][  T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.741793][  T810] usb 2-1: Product: syz
[  254.765078][  T810] usb 2-1: Manufacturer: syz
[  254.778610][  T810] usb 2-1: SerialNumber: syz
[  254.797427][   T57] bond2: (slave bridge1): failed to get link speed/duplex
[  254.831436][  T810] usb 2-1: config 0 descriptor??
[  254.847843][ T8995] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  254.863843][ T8998] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  254.932747][ T8998] kvm: pic: non byte read
[  254.940866][  T142] bond2: (slave bridge1): failed to get link speed/duplex
[  254.965328][ T8998] kvm: pic: level sensitive irq not supported
[  254.975359][ T8998] kvm: pic: non byte read
[  254.998425][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.000964][ T8998] kvm: pic: level sensitive irq not supported
[  255.025157][ T8998] kvm: pic: non byte read
[  255.073905][ T8998] kvm: pic: level sensitive irq not supported
[  255.074541][ T8998] kvm: pic: non byte read
[  255.076210][ T8995] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  255.084394][ T6094] bond2: (slave bridge1): failed to get link speed/duplex
[  255.138360][ T5698] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  255.147564][ T8998] kvm: pic: level sensitive irq not supported
[  255.151186][ T8998] kvm: pic: non byte read
[  255.152977][ T5698] [drm:udl_init] *ERROR* Selecting channel failed
[  255.207593][ T8998] kvm: pic: level sensitive irq not supported
[  255.225333][ T8998] kvm: pic: non byte read
[  255.297574][ T8998] kvm: pic: level sensitive irq not supported
[  255.297687][ T8998] kvm: pic: non byte read
[  255.307521][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'.
[  255.318497][ T6094] bond2: (slave bridge1): failed to get link speed/duplex
[  255.409694][ T5698] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  255.438059][   T57] bond2: (slave bridge1): failed to get link speed/duplex
[  255.459330][ T5698] [drm] Initialized udl on minor 2
[  255.516342][ T5698] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  255.525303][ T5698] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  255.542559][    T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  255.560607][ T5698] usb 6-1: USB disconnect, device number 8
[  255.580745][    T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  255.648834][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  255.655314][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  255.665149][  T810] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  255.694229][  T810] asix 2-1:0.188: probe with driver asix failed with error -61
[  255.796152][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -110
[  255.816180][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -32
[  255.849578][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -32
[  255.874516][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -32
[  255.896441][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -32
[  255.924199][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  255.951096][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  255.970302][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  255.995297][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.005673][ T5698] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  256.028217][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.055775][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.077242][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.095931][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.121354][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.140952][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.171694][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.204252][ T5698] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  256.204383][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.264132][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.311548][ T5698] usb 6-1: config 0 descriptor??
[  256.342607][ T5698] gspca_main: cpia1-2.14.0 probing 0813:0001
[  256.380523][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.409293][ T5721] iforce 1-1:0.0: usb_submit_urb failed: -71
[  256.443962][ T5721] input input28: Timeout waiting for response from device.
[  256.509325][ T5721] usb 1-1: USB disconnect, device number 28
[  257.150498][  T810] usb 2-1: USB disconnect, device number 22
[  257.279948][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1028'.
[  257.560502][ T5698] gspca_cpia1: usb_control_msg 03, error -110
[  257.606408][ T5698] gspca_cpia1: usb_control_msg 01, error -32
[  257.643462][ T5698] gspca_cpia1: usb_control_msg 01, error -32
[  257.692744][ T5698] gspca_cpia1: usb_control_msg 01, error -32
[  257.745743][ T5698] gspca_cpia1: usb_control_msg 01, error -32
[  257.783807][ T5698] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  258.251353][ T5720] usb 6-1: USB disconnect, device number 9
[  258.511456][ T9021] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.611316][ T9021] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  259.033476][ T9021] bond1: left promiscuous mode
[  259.083854][ T9021] macvlan2: left promiscuous mode
[  259.103854][ T9021] macvlan2: left allmulticast mode
[  259.161149][ T9021] bond4: left promiscuous mode
[  259.166703][ T9021] erspan1: left promiscuous mode
[  259.173457][ T9021] bond4: left allmulticast mode
[  259.197179][ T9021] erspan1: left allmulticast mode
[  259.215185][ T6100] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.254579][ T6100] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.286084][ T5691] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  259.310832][  T809] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  259.328816][ T6100] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.372240][ T6100] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  259.415730][ T6100] net_ratelimit: 25 callbacks suppressed
[  259.415749][ T6100] bond2: (slave bridge1): failed to get link speed/duplex
[  259.470543][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.516659][  T809] usb 6-1: Using ep0 maxpacket: 32
[  259.531502][ T5691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.541378][  T809] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  259.541416][  T809] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  259.541450][  T809] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  259.541473][  T809] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  259.541515][  T809] usb 6-1: config 0 interface 0 has no altsetting 0
[  259.543773][  T809] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  259.601759][ T7078] bond2: (slave bridge1): failed to get link speed/duplex
[  259.648404][  T809] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  259.658609][  T809] usb 6-1: Product: syz
[  259.672005][  T809] usb 6-1: Manufacturer: syz
[  259.721006][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.730370][   T57] bond2: (slave bridge1): failed to get link speed/duplex
[  259.775562][ T5691] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  259.848793][ T6100] bond2: (slave bridge1): failed to get link speed/duplex
[  259.872980][ T5691] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  259.901722][  T809] usb 6-1: SerialNumber: syz
[  259.921338][ T5691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.978780][  T809] usb 6-1: config 0 descriptor??
[  260.010311][  T809] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  260.010564][ T5691] usb 1-1: config 0 descriptor??
[  260.020126][ T6100] bond2: (slave bridge1): failed to get link speed/duplex
[  260.097187][  T809] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  260.147281][ T9036] syzkaller0: entered promiscuous mode
[  260.174965][ T9036] syzkaller0: entered allmulticast mode
[  260.192798][ T8972] Set syz1 is full, maxelem 65536 reached
[  260.235746][   T97] bond2: (slave bridge1): failed to get link speed/duplex
[  260.415712][   T57] bond2: (slave bridge1): failed to get link speed/duplex
[  260.536643][ T7078] bond2: (slave bridge1): failed to get link speed/duplex
[  260.582815][ T5691] plantronics 0003:047F:FFFF.000B: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  260.698781][ T8946] syz.3.1005 (8946) used greatest stack depth: 18496 bytes left
[  260.876317][  T810] usb 1-1: USB disconnect, device number 29
[  261.169725][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1040'.
[  262.082841][   T24] usb 6-1: USB disconnect, device number 10
[  262.121979][   T24] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  262.219525][ T9071] bond3: entered allmulticast mode
[  262.236621][ T5721] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  262.299788][ T9071] veth5: entered allmulticast mode
[  262.316659][ T9071] bond3: (slave veth5): Enslaving as an active interface with an up link
[  262.336038][ T5698] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  262.367525][ T9075] bond3 (unregistering): (slave veth5): Releasing backup interface
[  262.402707][ T9075] bond3 (unregistering): Released all slaves
[  262.418707][ T5721] usb 5-1: Using ep0 maxpacket: 32
[  262.434451][ T5721] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  262.462327][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.522054][ T5698] usb 1-1: Using ep0 maxpacket: 8
[  262.525234][ T5721] usb 5-1: config 0 descriptor??
[  262.529361][ T9074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.558385][ T5721] gspca_main: sq930x-2.14.0 probing 041e:403c
[  262.574940][ T5698] usb 1-1: config 0 interface 0 has no altsetting 0
[  262.588117][ T9077] syzkaller0: entered promiscuous mode
[  262.601501][ T5698] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  262.615634][ T9077] syzkaller0: entered allmulticast mode
[  262.635614][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.654252][ T5698] usb 1-1: Product: syz
[  262.685188][ T5698] usb 1-1: Manufacturer: syz
[  262.699509][ T5698] usb 1-1: SerialNumber: syz
[  262.710604][ T9077] tipc: Resetting bearer <eth:syzkaller0>
[  262.729503][ T5698] usb 1-1: config 0 descriptor??
[  262.741746][ T9073] tipc: Resetting bearer <eth:syzkaller0>
[  262.744754][ T5698] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  262.830421][ T9073] tipc: Disabling bearer <eth:syzkaller0>
[  262.935967][ T9084] 
[  262.938333][ T9084] ============================================
[  262.944487][ T9084] WARNING: possible recursive locking detected
[  262.950649][ T9084] syzkaller #0 Tainted: G             L     
[  262.956623][ T9084] --------------------------------------------
[  262.962762][ T9084] syz.5.1050/9084 is trying to acquire lock:
[  262.968725][ T9084] ffffffff8f3d6550 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20
[  262.978900][ T9084] 
[  262.978900][ T9084] but task is already holding lock:
[  262.986250][ T9084] ffffffff8f3d6550 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20
[  262.996423][ T9084] 
[  262.996423][ T9084] other info that might help us debug this:
[  263.004466][ T9084]  Possible unsafe locking scenario:
[  263.004466][ T9084] 
[  263.012068][ T9084]        CPU0
[  263.015332][ T9084]        ----
[  263.018597][ T9084]   lock(qp_broker_list.mutex);
[  263.023437][ T9084]   lock(qp_broker_list.mutex);
[  263.028271][ T9084] 
[  263.028271][ T9084]  *** DEADLOCK ***
[  263.028271][ T9084] 
[  263.036394][ T9084]  May be due to missing lock nesting notation
[  263.036394][ T9084] 
[  263.044694][ T9084] 1 lock held by syz.5.1050/9084:
[  263.049703][ T9084]  #0: ffffffff8f3d6550 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x117/0xf20
[  263.060314][ T9084] 
[  263.060314][ T9084] stack backtrace:
[  263.066189][ T9084] CPU: 1 UID: 0 PID: 9084 Comm: syz.5.1050 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.066212][ T9084] Tainted: [L]=SOFTLOCKUP
[  263.066217][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  263.066236][ T9084] Call Trace:
[  263.066242][ T9084]  <TASK>
[  263.066248][ T9084]  dump_stack_lvl+0xe8/0x150
[  263.066266][ T9084]  print_deadlock_bug+0x279/0x290
[  263.066284][ T9084]  __lock_acquire+0x253f/0x2cf0
[  263.066300][ T9084]  ? is_bpf_text_address+0x292/0x2b0
[  263.066312][ T9084]  ? is_bpf_text_address+0x26/0x2b0
[  263.066326][ T9084]  ? kernel_text_address+0xa5/0xe0
[  263.066347][ T9084]  ? __kernel_text_address+0xd/0x30
[  263.066363][ T9084]  ? vmci_qp_broker_detach+0x117/0xf20
[  263.066379][ T9084]  lock_acquire+0x106/0x350
[  263.066390][ T9084]  ? vmci_qp_broker_detach+0x117/0xf20
[  263.066409][ T9084]  __mutex_lock+0x1a3/0x1550
[  263.066423][ T9084]  ? vmci_qp_broker_detach+0x117/0xf20
[  263.066439][ T9084]  ? kasan_save_track+0x4f/0x80
[  263.066455][ T9084]  ? kasan_save_track+0x3e/0x80
[  263.066473][ T9084]  ? kasan_save_free_info+0x46/0x50
[  263.066488][ T9084]  ? __kasan_slab_free+0x5c/0x80
[  263.066503][ T9084]  ? kfree+0x1c5/0x640
[  263.066515][ T9084]  ? vmci_ctx_put+0x5ef/0xc40
[  263.066526][ T9084]  ? vmci_ctx_enqueue_datagram+0x3ab/0x420
[  263.066537][ T9084]  ? vmci_datagram_dispatch+0x450/0xc60
[  263.066549][ T9084]  ? vmci_qp_broker_detach+0x8dd/0xf20
[  263.066564][ T9084]  ? vmci_host_close+0x98/0x160
[  263.066577][ T9084]  ? vmci_qp_broker_detach+0x117/0xf20
[  263.066593][ T9084]  ? exit_to_user_mode_loop+0x193/0x680
[  263.066608][ T9084]  ? __pfx___mutex_lock+0x10/0x10
[  263.066626][ T9084]  vmci_qp_broker_detach+0x117/0xf20
[  263.066645][ T9084]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[  263.066659][ T9084]  ? kasan_quarantine_put+0xbb/0x1f0
[  263.066674][ T9084]  ? lockdep_hardirqs_on+0x7a/0x110
[  263.066687][ T9084]  ? kfree+0x1c5/0x640
[  263.066699][ T9084]  ? vmci_ctx_put+0x5ef/0xc40
[  263.066709][ T9084]  ? vmci_ctx_put+0x141/0xc40
[  263.066721][ T9084]  vmci_ctx_put+0x64e/0xc40
[  263.066734][ T9084]  ? vmci_ctx_put+0x141/0xc40
[  263.066749][ T9084]  ? __pfx_vmci_ctx_put+0x10/0x10
[  263.066764][ T9084]  ? do_raw_spin_unlock+0xf5/0x210
[  263.066781][ T9084]  vmci_ctx_enqueue_datagram+0x3ab/0x420
[  263.066795][ T9084]  vmci_datagram_dispatch+0x450/0xc60
[  263.066809][ T9084]  ? __pfx_vmci_datagram_dispatch+0x10/0x10
[  263.066825][ T9084]  vmci_qp_broker_detach+0x8dd/0xf20
[  263.066843][ T9084]  ? __pfx_vmci_qp_broker_detach+0x10/0x10
[  263.066858][ T9084]  ? kasan_quarantine_put+0xbb/0x1f0
[  263.066877][ T9084]  ? kfree+0x1c5/0x640
[  263.066891][ T9084]  ? vmci_ctx_put+0x5ef/0xc40
[  263.066903][ T9084]  vmci_ctx_put+0x64e/0xc40
[  263.066914][ T9084]  ? vmci_ctx_put+0x141/0xc40
[  263.066926][ T9084]  ? __pfx_vmci_ctx_put+0x10/0x10
[  263.066942][ T9084]  vmci_host_close+0x98/0x160
[  263.066956][ T9084]  ? __pfx_vmci_host_close+0x10/0x10
[  263.066971][ T9084]  __fput+0x44f/0xa60
[  263.066987][ T9084]  task_work_run+0x1d9/0x270
[  263.067005][ T9084]  ? __pfx_task_work_run+0x10/0x10
[  263.067025][ T9084]  exit_to_user_mode_loop+0x193/0x680
[  263.067036][ T9084]  ? rcu_is_watching+0x15/0xb0
[  263.067050][ T9084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.067062][ T9084]  do_syscall_64+0x353/0x580
[  263.067074][ T9084]  ? trace_irq_disable+0x3b/0x140
[  263.067096][ T9084]  ? clear_bhb_loop+0x40/0x90
[  263.067111][ T9084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.067124][ T9084] RIP: 0033:0x7fca4219ce59
[  263.067138][ T9084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.067152][ T9084] RSP: 002b:00007fca403cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  263.067166][ T9084] RAX: 0000000000000000 RBX: 00007fca42416090 RCX: 00007fca4219ce59
[  263.067185][ T9084] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000007
[  263.067194][ T9084] RBP: 00007fca42232d6f R08: 0000000000000000 R09: 0000000000000000
[  263.067203][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.067211][ T9084] R13: 00007fca42416128 R14: 00007fca42416090 R15: 00007fca4253fa48
[  263.067225][ T9084]  </TASK>
[  263.480801][ T5721] gspca_sq930x: ucbus_write failed -110
[  263.486513][ T5721] sq930x 5-1:0.0: probe with driver sq930x failed with error -110
[  263.495211][ T5698] gspca_sonixj: reg_w1 err -110
[  263.500156][ T5698] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  263.551818][   T24] usb 1-1: USB disconnect, device number 30
[  263.765894][ T5721] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  263.919043][ T5721] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  263.928301][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.937166][ T5721] usb 4-1: Product: syz
[  263.941373][ T5721] usb 4-1: Manufacturer: syz
[  263.946044][ T5721] usb 4-1: SerialNumber: syz
[  264.357714][ T5721] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  264.465781][ T7078] net_ratelimit: 34 callbacks suppressed
[  264.465801][ T7078] bond2: (slave bridge1): failed to get link speed/duplex
[  264.585626][ T7078] bond2: (slave bridge1): failed to get link speed/duplex
[  264.695622][  T142] bond2: (slave bridge1): failed to get link speed/duplex
[  264.805672][   T47] bond2: (slave bridge1): failed to get link speed/duplex
[  264.916985][  T142] bond2: (slave bridge1): failed to get link speed/duplex
[  264.924255][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.026287][  T142] bond2: (slave bridge1): failed to get link speed/duplex
[  265.135738][   T47] bond2: (slave bridge1): failed to get link speed/duplex
[  265.203016][  T810] usb 5-1: USB disconnect, device number 29
[  265.247732][ T6094] bond2: (slave bridge1): failed to get link speed/duplex
[  265.355762][   T47] bond2: (slave bridge1): failed to get link speed/duplex
[  266.578281][ T5721] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  266.589082][ T5721] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  266.599919][ T5721] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  266.609384][ T5721] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  266.619600][ T5721] usb 4-1: USB disconnect, device number 21
[  269.575744][ T6094] net_ratelimit: 45 callbacks suppressed
[  269.575764][ T6094] bond2: (slave bridge1): failed to get link speed/duplex
[  269.695649][   T47] bond2: (slave bridge1): failed to get link speed/duplex
[  269.805653][   T47] bond2: (slave bridge1): failed to get link speed/duplex
[  269.915615][   T47] bond2: (slave bridge1): failed to get link speed/duplex
[  270.025616][ T6100] bond2: (slave bridge1): failed to get link speed/duplex
[  270.117620][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.135676][   T47] bond2: (slave bridge1): failed to get link speed/duplex
[  270.195780][ T5691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.245623][   T47] bond2: (slave bridge1): failed to get link speed/duplex
[  270.356345][ T6100] bond2: (slave bridge1): failed to get link speed/duplex