last executing test programs:

25m22.063035283s ago: executing program 32 (id=2102):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

23m4.486349038s ago: executing program 33 (id=3374):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d})
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

22m33.848551912s ago: executing program 34 (id=3573):
r0 = syz_io_uring_setup(0x412, &(0x7f0000000300)={0x0, 0xd3d2, 0x10100, 0x0, 0x100010}, &(0x7f00000003c0), &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

21m0.733172273s ago: executing program 35 (id=4435):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x800, 0x0)
r3 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em<q?\x16\x01\'$\x99p\x83%M@\x90\x9bs\xba\xdaO\x17\xd2$T\xbe\xdb\xf8\xb1\xf3\x10<\xd2\x99\xaa`aK\xad\xd5\x90y\xec\x9a\xad\x9c\xd1\xde\x00{eXS', 0x3)
write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000c40)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e23, 0xa, @loopback, 0x5}}}, 0x90)
sendfile(r2, r3, &(0x7f00000001c0)=0xc, 0x2000003)

18m20.898111064s ago: executing program 36 (id=5916):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000006300)="bdf25e6f0d10668122f289a6bf3cc1c9476de5625a0271b8d988a9f5d5e0081242133ed6d905168ffd12a79b9d0245efce333b69021258af0b7f8fcc7b0ce9b48ff73dc5ebaa2a607033a6220a60c4e1348d92f8d0e9c79504518133021220077e1e0b4e0c8d373c779e03dd36c1f9667c8ee6aa56c2b97e9cded8b1738fea65774c4c5dedf7be75405218742aa9f5348129b9893ca01e43a8f648e689adb9776f9008596ca8a749e94b7d7b906945390e6c68fefd7364e749c35484b0a7b4569e8d5bf6fdc06c3ed56c599d61a21ed03ec5b61f74d9a7400e9a0999404ac63d7849d3f1bc1e777d2c180220c4227c492bd3ee3f854e846baf93fa9759ed96fb69c9bc2fca51d1f24a68e735ba5deeb0afc2b017849a1786574a50b6818e3ee1029b2257fe2ede4b065637fcb05632587600d1090b004d4fc3dc8d3576762d06a964bcc7d31f94e09ecec7a999717dd639a3db03df310a0a4f26134d982e80f00d3f1f20693cf36115046f52734d0bafab657131682c6c415168b87cabb42a125fdd6cb8a545b717e1fc301c0798515f201f7ff7bfd35db7605f4ef97a91a6da5d5f88d1455edce0e86ea60901ea22aee508a567dfcf0f3f630d4e8be3a312a5d997bbb8fcc319f32c45fc62b09778bcf810b48a863c1a0ffeac68af383d3bfb60ad9f69f50bb11557bb2e966bd231c49fee49ec8c2174fd3cfd245c56a1c982a1f818a50713df546cf9d01b70e165d371ce0d2ba41c6758c46da7eb8078d2c7f2a2462a32e37129dded20ec3f6169a33d136765d9ae28addf3fbecb633aee9a7ded0ec160b5ce35c92b855ba8362205017afaf9e45758d5e256e35452f6d03ac89712e81445b32dfdd8cdd28a5af8c75df2a27922dbf5cceabff945327b5f4ec2e93c4b367ebc6a54f903567ff1a3f9469a466ecbfef5c39671c9ac29f14de1575de46ba2e933cdeb068259593e73da67f05858ba0cf3e0316aa1a91c21f1a1ccf157b2f4160b86dd67ea854ddd098f34c0421a7ab541b6d105f76ff19afdef08456da28244b25b61162093592e72bc251936db09134f590ca0a1b844244aa054a748b695346a5d49b979b4c69cdad7ef09f615196bfa2918c07e81c325370461cdc50aeb105b3cc51e0a098d9e49118da9c1bb04da247fc4e7876136059fe1ed10042383502b54c6e26082eddf83196d6b2c9410e4217dc8c4c2de483e328ccfbea9c54ab549a23ec98c9db241a67ffd79af97822bcc0a784e8f4e61c83cfb637f4aa1a80027fb2322bca99b65d4d64e93f3484c83ce7f46e12f7accacf74c5d0362198d60de93925e1a631ea6c786843261c49cadf482f3ff541b88d92f801a8610c195ad6e09e4a1bc15f727d09d063e23bfde60585def96e3963978f0686ca079e86032cd23b30222ff0843fa1d0e883d2d75dffc12bab0109b25ff08cf1caeeb7c39e5f438c7b2a9a2a366d32fa9fa0e2885a473ce6b97455d58d941b46faac1f2d8335f276f14232e193be1301416584c47062059e92ece4347c89aa9bf2c12b7c7b5ef7b3bf27ef23367ca3fd037fd9145f84e6852ea3eb624b7622411851134a7ef388e7799df33bfae12a35bdde94de1b10e0e0fe6b40d158409992244a4e27af355aaf7983aceb0ca6c790ecbe5234fd0ad063ae2ee1fe48aff51c35c5553fd1ab998abcb3dd7b0efb2f9c658fc4671e536c0ea75b36d59efe1901e971a750a4fdaf15bc0d1de7681a18c73bd00329d8a7a59c8dde6ee9156759386428a593d9bcbac57f2ec6387dc713703b30e44e655f663947caf4bf15624517bf3f4df16a8ade7193d0a69d998d970c07406a5892dc625a2695bc5c495079f2100ac033f912b5135551c923b61687574b1c43ca81ae9312d668415c8162aea7582b8db90f96181700ac22771b985c0c3f6081cca160efb1bdcabc2177d081ee618ed92c5af569721cc9f0453fe8e512d089a2aa0a219504ff51ba258f6b3737120e7d55e3ceed42c1aef42ac5e969642e3ffa8bc9e7319927ff971d450ac5a8a12ef68747b2574e89a64dcff67a36cbcf0f166371f98825c6eaa8516e27b81b8701d47fbbb87748a771265afff6fdf0acd2e9da1d759523feb0f33a6b27c050cbd5ea833c4859d7c84878253652dc4277a8ad6dd0b1b118e866cb90f7f29cf3a65cd9ba5c5e888c2afdfcef2b9dca883dcb7908c0a2ba0e76d5992430819f4f7d0369c53f737abc75e7f52ed95320dde44bf8b6397ef1ae719eb550a2bcad515ed99246f753d9d344f668c58c2343873b2af2dbb8d0c1c3280a5e8267a89a16eae734102bf4ed6aec57f4e29eaadb118f5407337387ec12f6629f8de94b2fefceffb735effca8865722334dd3a27c789c96c2fdc7f96d702fa5e360a460856c3559ac65dac1aae0c10712cd99e8f7c9188a43460c2e3775f27518893628cb5f2cd25985570ad101b3ba16a342885d65ea1befef80aca975a3f8428eab9999124aeafa991f68151eb7ab9bffe132c8ad1f2e0ad79e0cbc0806aa46c0c53b6f1217dcd88f197a3c6ddcb5e1ca9c278d02736ab3f81db85d3fd751c38bdd449fb3f9e52c2e067fb8761b94ccf13e0958cb1f703d327cd510089ae4d10a96328b950689efd262f43470dd47c73327c63cd882432807a65d9d21ae39b57e27c14af2b6792c6d6687526593ce97e8000eb49157553fc6fc9e4f040098b43e4308aceb1c5f87f046389b3174cf96459460927b0fff05764d398c7c5e987ec4b08259c4a41a4fd293e0106e2c522cff08f07cb4dcb7165dd6ba7358bb7d389aae1bd76957e1b69e4b65a0443fe2ca48722b3babd8df8c53b6fc1fc0537defa60e79bf6f7b2000000000000004a813087804fdb7523566c47041014d0e4eb8e0faa6db79dc05a54299e54b34be446a3d3b0c073e212e305a78a190034885174fe25443061447ea7fa094f104b10dacc382cb353c96e3cf4993aba3b7271ecf3828feaa2490fa03697ac6bcd841130a175d7275033da3e7c094141d2ce798e8cf25b4b9d3356c0d74563ee9b81f9b18d10bf25988ce3f81ed002095c94b2cf2c8799f4e2194b11a6f4a774ac4fbf5c78d8163e681271505c17f47e71cd03a20490241c1f144ae59b19cce564475575e0af7f41984ffa6f5f8b365a338687ad494a79317679c00d74242b4155fb0a06fc735793d66bd6f252a26278896b6df70a393a21b0a9b80056c505f7266f296bbc3587af24c06476539cd1bfe1f20f818c778fd712300feab31861b31c254211c42d9f27ff3f41f5bb170c15b3daad6dda056065b24107ab3976549a353bd6f2859d84fba3d21f4377b1c5a0aa4fd039c485d1bdd8017817cdea1b8ba5b52c30ea06ae1abb942abd1917626deb37297d3df42cc848cd01622f13ad081f9d2c96384f6b4c72d4df9541b2cb36ec119e326f625aba6436dfa5d986cc8a6a15e082e2111c26a6da1d1e387445a7fe5a9ccf05dc01d08fd1b16f768b5b3b8b464976d480f4f1a44346ca5f01f29eff48e2ad585cc32f6c00e2c045c7015cb46f70052e4935c246ebcdbc7c3d091c825f864eea2dfe25459b6456f7b52c168fd565d250514261d171d65c8e9ef6fde70ff716b7c45a24f9666462a0919ed7a1a614df711c7f5b24dda275c71fbf973ed4f8cbbba5ea15bd7e5aaad972711159b20751f5fdb91a223f39cde6a83751a06c1ad0536d387bf3ea4a3d7e5e90bc52f4d101c045d5ad32fb58e45fd2fa2f5c8aa0bb40957465b87bef7fe6b76c16c8d07ecd51edb49faa5bb0070aba2dad3ca7eea1955d939cadb75286904a02db81fceb6b6b9b16ad84d373d33e134007fcdc02d40472fbbf70b57a53b6e5df122c0f8b3d44dc045104690f2d78b8cd2d0905d5d66830cb9125fa041d0fc2f08e20f9fa70bd17815cbb50f8019048d05df1673e9c8cc83e17dc91fd74b024b2b56b41bbff26016c6638b6ecc16deb349ee392776962746d62751b5672755a845b443c85d7c53605f274f3d5c3edd6ecd15e28545d2aea4df5d5e4eb169af361159249daf53f1339c1819370ad4d3ceafa7dc6a9118a2f1e69c4db409093eca05ec1cad8d606db1c5d3b58609eda4f1e71ae62765d79501ce8de42e60cfdc08517559f9c65e8dfbd73a5f971aa96f2cd20f1763e59d3b15367e0b206e97d5f5462e81299743e1959376fcdfac93855ebac2b5235b0f03c58eeaffcea40be5a9fe6bd290deddbb28db6539a72936a1953cb4a558dc93271a54d1e05cc3f4025c0ecca369b0d25d47c3e66049045d0daf9dc9fbe2c69d217d2e6939bf6d1875cd23b73d2e921aea9eee4f1f9b036e8f5cbb0100710c1dc27d1fb37ea26634dc827bfe42d094ce9576611a6bce6b67467f983a327e9dd34896672f257b41b8bee33a041ce2e83a65fad93e1a2a06854a40fe3751997c5233d397e5ce5ea676379527ad0e298fa62cd91ef89e9876db8e0909b60ff16c4a0ba01307826bf18c242e77af8ac40c681b8ae2cbd58c4eb4e6a580bd3f57bf1ffa44a1d080426d3f8c733568ccc75a61980ec92b5b0f4cf03e3ece177954c21b90b7828c9113da0fc53f6f5c5ea8bea08e14a12b889fc705ee44d834f184532421a584bd7301c9bc822deb7e71050a8cf0cd7f96dd2fd93b9d7306bb9702af5b88b2090d2b67bd88a299704e8c556b9066e35e4c864cf1775a6ed94a9685e996c4c671cc807f7c09b45559ee079d56547179e1b1af630c4ba04717cb5e88c0caadaf57964f5197d9d98a7f5b5e622c3eb5844645c4c2408806bbb4be5778925df16518c06597b243019bdc690a4723548a658529717360d474cfb6fcf30060b320cac29b2e42ec4f390a6c7a15274099a64a8d71c4a84e86d206cd2c7ee8125b19752a18dd2eb0dc643aa6b4494760f62acf187080281ec7d0a526374f69051e6aa13d8321372bea8d9e9c7fed4d0a48257e5c7463bc0a0165acc4712aec8cdd014de0b98d0de9b0dc3cc2d40c3be3ea3edb04b18f72209da21f5900a4ef002aeb88a364ed0bb102c2e164ac4f0dff7f082c3757b7ee1cd0e3b1ad45dd77553a4462c8f84ae21f8246281a02160bcf90c00b7816f93524d4d6577c6432d97da328757c3dc06c06760c82946f9f44e909cefaad0734094d8a9076abfc79c79bdb9bcdfa13697bff6f1a219653ac96882d615fe4757b76a8235f2f5e5978cdb5c5bacf4217a56fc6416943552d6e1d6c3f2e8801322368855aed0c5302d1445cbbeb5ef970abd8b5316f0c7cb7f5bd023c619ecf6b1714705a48b67e7a5c2f15bf9c90f6ada82d36484776d20f464d22b88b5d99dc2ba812b9f38754ac71499705f83875eee065482e2fed4c5f3537449857f409c635dbb2c0565ce9f23bbb5bde3ee0bb94f3fca1b5a0d78825c80f50a839a4b3fe6439fbef4190f8ddf1012990268aa8c87b91fdd210530e0bee9c17e35ee59e519801f7fdc72e5d1b96793ff13654b8eb28c2f1a702b1c5ed694d567e70981c596d9997a3e9133e3b623ea071bbd807c86ee191f02400c53851e567f2ceea1a80506af359cdf36c3cd9963d5cf3d32c64f4f7706c78a90d55f6cf12373fac70e17aa1bb6688710eb3b62ee809de762e5093cb326ed56c57b164fd73023021a4be32ec50bbed23bac420880af3a17a5f3502c95781e6251f88b17f83a02511ca782118f1bb07fe73d50fb70043734df8c82f07e74bb4500179d3c1e33d4075aa4a873eec1a34fd09bb3747825e1d821ce6e4f6b8270b0d1123499ca176ad47613bcd02b4825ad70ec79ecd1dbb496737d5258024898dde00e62b0b594f0e830f0c8475a3638ed4c438e87b6919314f9f2b5f81b2c42a9a0269477a637edc4b06486d41e093c65bb26acc7968320713fcf9551e9c6a855dbf7d3961bda89df32fbfb67bc285a1c14692afb72fbc6587e255627fed4971e8058248a926fd586bfa25aa19dc46b3f51d402f74724abcbbea314d8127c7e92ce0adf8af38b7047b8d5269e145c2d58158d178f0d91ed03a451e3a324b7add7377675ab8a56c5395efdaabaafcb6b1348e984677353e6f77296fe7e75a5afe6d2bd1e26be62ecb84801c20a462c4481762d2be207dce9c49e656133c605b16a1b4ff683983e3ececed23fb6540f0dd89776d525f5c4e07a3f50968f35b0bf92cd65514b1759918e333637d383a1810e28a822fb20151878461ff61cca3c340cb23f9602d03c10d4b05d4f712521921148c3e249358925f87d00a351ef7917b4e817a7a1d2191e6bb026dfb8e2ba08e52f1e43346cbab51a45dd2d8bfdd252ec79a7e9203e97a576a7db467def3ac0b789a6d52015712e89bb0df0879d2868d85e2f2d2c90547dae52500db275842eca910e48f0c43fc33fbd179d39ac9aab6e0f397f8eaca95793d8c196e49b050fd9815994f700ad4d22c07756fce9a755768be74dad0589411935de2dbfd10d200da75b4a4f9e523e763034820afc8c7d02132bde03108293263f84d7ed165e587733d255e4c11fffd52f72725fd0238dcd5ff815fd22c26126aae530a7d01e60c14f4f8e701ab527b6483fe78125c5e4402ff51c721cee92e5dd6db40e28b21532a21facbaf396d163237c5cad61a05e9c0c39d1ce99152687a16104787d87b092e9037f147da8bbc0c6456bbe7a2006742534010f507dca79ce8b59097e0cbbe312f48fc0a3ea84e7a484b266ee766a85849b464d93f872acae4af0ff5c7ea06dfb26a66674fba6e8a9481b49a41bed7becbfa680681834b1a3d7961d69d592fdb403d1566770e0173cbf8fa14956e0539a5a4eeae62cb6a7d1ec9e9d9a36b30b511a615395b470fccab197139818a30224c4f053d35e8d9897141c8a94012f8254f325b8ddec5c0e638c09e2cef80cb4e16bd9aea09b86bb48548b012145ef88932040d7cc59cb0265ee451e243c08d672ddc06de38dc15daf50a8ec1c18b9bbd87e2158ea8fd7a7559fe94d4c6680e304e2d500ca016e68d9f8a25271421b9deca3c8067f59a8f3edf2ad1cd20f15e4c820d703b6ffb6e368e8418bd392994c931c50cb4c858a7db9658e2a468fe06b416265b5e236fbcdaa86cee8ef146fe78628ed35c6aaad5bc455ecc2197ae951940e5bb64454b488a3b12e4b67e84f5a35a1daec5d95a33184f6c30fc553f5d0955a797831aeeed051fc7619471e77f5c5c8e40af7d6b354d039c4fcccc8624360cfc8b4a4a266e581f87b2822e1096741e804ad6a70973a3343822bc4138fdb2cac87fe7a74d0f71473668b3c62f00c622f8d9a25f6970700000000000000f412d53976b5fa199c0f85fcec7a6e8ba629b053f1a26597bdea2c53bc17fb1bca3d6ba561ddc17cee05ad161c20a24b420304b805733d613f8c67c6014a873f3d5f4ec973ebaf0078114db4fc6b607f2f9aefd61f439d80dca94c297081f005b63b26012d39d88b32e36d73b6dd5cc1838aed1d594bb3991f4a073330884eb07c2157f6864bec324ebcc8ce6a49c90cd2541323d95fff147ace0e70a86c6e5d758e37b12b6a280f72bdde00411c803607c4241a1d62b595925503636590b2a4fb910b1577026a83629fc039207b6d355e6a06353daf4a8b0f2e9c412044105df627e8686cc69e223b11c961eb00561144defd02ee6f5b8c0db6a314afe11cb68a66b01974c6dc9e685b013b654d9c7a450f7429cf2a26f6e34ea79895051d71b06b1903274f30fe2fd107b7e7bd477d70bd6324824d39d0e07b0f90e5152c562daddcb258a0faf8a9941868e7463910d35da02696ccb6b16567576bd8397337f20c5a5db9ac04fb302c513845883babdd345d7eebbd107fe0d2cdbbc01d5e40c56660eee85bba1c7317ec59a572a4eb9d1fea5d76dfb3e01f416ae4a0795eadd5f32b17dad816e37d630f9a433a05bbf091de03fdb0f4a5c8d74c0846d0fdec786a2adafd535d82401923eb5279009a2a247f41db21afc647b88c82529b65bec96dc5bd799264d32fc15de8a909946a939701d5c60269d0a631d4d9263ef527a69e5875339d5d2bdd0a2cbd5ccd58127b524bbb114b7a306ea220fe082db0e0db14d828cd72900c77dbcad0bb760e85b2986fc76d98e76a327253327bfb4d23aa1d45629ef71e30e453e19acc470538b95c3b77d84f376a5b485f2f5156392e22a99716dc90e653c1eb6343e647c41a60a2604b001f44c2e65c7f0d5040a405e948d9be5cad3aff848de9e9db6268a043c91e666226bcf9a8dadeeda32db2e14bece95d4925e06bf26cf6665000f98e47c4ca4b5a7859f28cca8c7f1b3340bcf616920c3cd53c2789364b03e6a291817766888425b0ec7ccc484d5474a02a7cbb821b058cc853fe830f86f6cb1ca73812dd919f1c79a7dfa13d310654176609f8ca482c3fee11dc8d843116f5a775fdeccbb975d7e833f081e16d914e0f7154a48668c2be7ccedccf2edb407975630e4ae24a16d818fea03b141dea14cbd404ac9b01dc8d0cba227cfbd33f33d20c9101a71f33d1fa832ce68868907be9fd8f9f6a76b03eb4eda0c55d83c57cedd17e3e96d267410287caa26984f84903b8748579a6879a301e7393ed1467cb98be15c34d6d5c0c957e1a7b941ecefe07b9954e207c76065c1f668ec143c533dd3d863fec137f2a00d746d349d8cf9fc438eb9aa22284f75f73891ede03d20757df1df054957ec94d551cfa56f10b2044e257e7d75470dfe0cc6094b8a1f2c6198cc89ba6df91e57fa87340edf426702aca7d2b3ef46b78335c2442b0d775405ad2569ad7ce46dd3494dab4d98d78e7f393ed6816a5b6c9356b7409a5cdc00b4ea99b7823c744e46e4215945cb02edbdf332d7c109fc4a83ceb2d6198fcc6f3a835679cad70c7dff7dc605450d5fa7e29f9b32f5a1d53d12e2561361346c55dd3fc79e2ea2588fbb8e55c42e55c8cf22ccdac9216be9fdad10efea56c393f6f58896a0df541141f829b50e5e7208f6218bb683208af0c542ac5636e5c2eeb15044072f28a9755c63ec67baeedf0941c6d0cdf2fd702ef1011539932368dbe1664de988efbed22a43b215ae69eeb5312ac5cc966ca12f12c034ddaaae340cd6e89e42621053db7969cd9753a72a6451f78fbd8b4840329b6c6eb9bdf365444276ab81251f6894fe3d125e8eecf30f3a98116c96d2de30a1b195c1d10ffdc731b78740a53f09bcb66b6b237bc56f9426135ca651d9329540c386dc5251b537c4b8317460b0dafbc3d4f1b8d6a939e51de59b22d32e5daafb5f0d469e58567cba1f327e67ee8d0f53b041fa643a4a594d4cf28a0004aace404ca95b58a1e26d601563b188fdd2c97b8d8714913c3564d0a445d35060ed2ce20daa4174cb92653626fa9bd10513c8006d757acecd7eda9d41393dfdd683ad50ab4de8cd832b26c82edeb4af5013f43f297dbf502b62fd6c2ced9641235838853c2aeb447fa06b6ecd1c11f17d3261e87aa1ec86ec8b23fd4281f33469d7c4414b60268367d38d9235dfe3ac4c7032e298d0cbee4b705f4085f5653b4637a80ae575b44c6f1a2374b899e061d03abad5770355673020afdb8fecf5be2a8617aab331646f05d49bf5beefd650bfd240ed3b5abadb21941c4a615004284ff7927ef9a745e3d4208dfabb0b04d04002bb7e449ca884373fe4ebe35e18ffd249e992ba779284b1064b1e27e6aa0c4c88e915246e029113b4d01b53583b8282ea1d5d4a305d3e20f894af640abf9e376d6b1c6fd3bf86821b4a57c5c22d8172ea40daf2b398dc0329d4b7dd08c75c902f0368def10217234bea599509a7e61b4a11915009680613bf69f2f4b38e7595449a20aee13949c688a69cfa73af328c7df7a494d0e8d249cb3c843149b11bdddf34282db31b156261254472fbc2e12c7b7133f7d273ef472761b58e7f8e54ea2861ebccfb141e3b245b5e4a75204d12ff5d7b0a44ae039b3cf79869d24f1602060f81785a851b996a3693856c6b2e90f27dbd4be518ae3065e692e5f2842380e4f5cf91582632e6d36b260c27a1e7ae80b47d14067db8720e619c7323f358098ef054fddde357f4453c6e7ace38833ed1c9bc9bf0c054564b79885cc7c8fc5d7ebde25f0307067816067a4a96ddedfbd268ca19a67207ecfec5598a442a1c0e823e012ced27c3266c6721aa5718dc076e7f50023a49a40980bc0fcd568295c8d4c59f1874aa944b88901e38c803ef52c226a7daf055f4ec3bbecd878654a456448e552a0fafa64124688dbd7f3787af8b3fdf661680ae309939542337ab22f510ba9ab1a7229f5244938e9324b0b1ad22ad9e16b84f93cea693186a5c76ad7f74e7c82ce6cb9a9ecf3a4a1a6d06a8fdd6474ae1aeddfcef270c6c637918b7aed3d5068e17d3642e9fa66c985b2dca5b38ffdb3545a4954d0a5813bfec99721259562b80696dadd921e9f18978d21dee1129a386623cf93c804aeb4e511ee8658fcef51746dbe1f87285eae850f008f3effdb78994e6eb370600c1855f672de0b750ad56c22aa937c1eaa8a7a333fc55f814e878bf71e8d9717a8f0854635554f07393ce04cb6d58e9ac0f5808d9158fd6320fdf75b2db9cd0380418e8664b5ccdde967b8a76e8002683849fa507d78e971f7118b2eba2c025dc359684cbd7b6b2e41ed0783da3fa2ae2de5dcb2db67d06a21aa419bd465ecc378842219a55f647535c7f4002061c65338d9c098ef31b77297c9905b91555cb436b83cb88e48821fe750dfcb4305e146b7f68265a35331017dcd902071a8b904534dc26a017f2bd14bcc65963efc9a8689298e039ac717fd460703e7d08ead0ca43c3c88ee423ed92a20e0b7dd6636313d057b97fbfead33d0aea2ff50c57df057bdd6c7470fde9bf9f1fbfc7ddcea22c1ce9273705be952464b3d48aacb7a96e5ddcab0b4d7b564d12b66c07663e05dff55d40d7a2371ead0f948e6921b8d271f8c710f526844db88102e68c3ae1a35a729af6d6521dc587f83ced8263d6d5801dc8b9c11659cca84c6e4076021f2747769cbf50d3362602f6491a1c3734a62aa024e060e69b32a5ca8f5ebdf8deeeda60405610fd182cef2e4cd534ee31db32bb13f0bdd53799dc438c38ac0a49be58f0dacb53286fb7f1648b8eaaf4c997689eb703594f55fdbac9840b91696f1f2ee8599cd84d3a904b3b7515fd22866cc0c2ef1f8db911593801474bc90bc8151ad4b0da717cba6b388440dbf85cfd6fdf874960712e93bfe9cb22bd84139c0e3badc70b36dfb9edb4f4d4b45514e826c5dc0972a9596f14c0b4de118253de91aaf7c6bec8f95ea509c374f35543f678f12e467c394d21f613b446607051943ebd5a49b729e91681f54215f9d1c330e264efd1f214b7196e72eeca6796ca35b17e27c10cb6171e7eb520fbe0394f7399b65fcb0014a5c3b9c9c10b14877520d0a572b8fdf5e0bccd328540422a4ad906e2e358a6916dbae6b36aa8c3bd4514c56fc2602bc84c7c571af4f667eb7c3015f3ff85a6a309db43c6c1dcc922951fbc65c659d4b9c65608086ee33151e02596976109e3e2de848dfcca7b771c1997b9fa6ccc7e0299303ad5d11700611ed70b809ea039b00", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x5, {0xd6c1, 0x100b, 0x0, {0xfffffffffffffffd, 0x0, 0xbdd6, 0x400, 0x7d, 0x3, 0x80000000, 0x404, 0x39637fef, 0x4000, 0x6, 0x0, 0x0, 0x5ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x434601, 0x41464519a859a56c)

17m27.37719177s ago: executing program 37 (id=6422):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
write$P9_RVERSION(r1, &(0x7f0000002200)=ANY=[], 0xfffffcd9)
close_range(r0, 0xffffffffffffffff, 0x0)

16m40.953466333s ago: executing program 38 (id=6750):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xffff, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc848}, 0x80)

16m31.739712256s ago: executing program 39 (id=6811):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'sit0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000300)="f3", 0x1, 0x100400d1, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0x8a, 0x6, @multicast}, 0x14)

15m58.361337812s ago: executing program 40 (id=6925):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x9, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x8001, 0x9888, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x8, 0x4, 0x6, 0x80000001, 0xfffffffa, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0x6, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x4, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x4, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x7, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x5, 0x3, 0xf1c7, 0x100, 0x3, 0x800004, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x200000, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a1, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

14m8.973621982s ago: executing program 41 (id=7712):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}], 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4a7)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r1, 0x0}])
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

13m10.392858595s ago: executing program 42 (id=8098):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8)

12m45.135039652s ago: executing program 43 (id=8246):
openat(0xffffffffffffff9c, 0x0, 0x0, 0x40)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvfrom$unix(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)

9m38.23550961s ago: executing program 44 (id=9273):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
file_getattr(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x18, 0x1000)
syz_fuse_handle_req(r2, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x703010a3, 0x1, 0x6, 0x4, 0xb31, 0x0, 0x0, 0x2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f000000dd80)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x2, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

9m21.419040954s ago: executing program 45 (id=9351):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
modify_ldt$write(0x1, 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$cont(0x21, r1, 0x80000001, 0x4)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="ceb9648c17fd79af1d8aac3ea3e8809a8e96", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m53.502612341s ago: executing program 46 (id=9480):
socket$inet6_sctp(0xa, 0x4, 0x84)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r2, 0x0, 0xd0, 0x0, &(0x7f0000000040))

8m35.537424883s ago: executing program 47 (id=9576):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r4, r3, &(0x7f0000002080)=0x3a, 0x23b)

7m23.985315209s ago: executing program 3 (id=9967):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8)
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8)
tkill(r0, 0x14)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)

7m23.759551171s ago: executing program 3 (id=9968):
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000940)="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", 0x115, 0x0, 0x0, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r1, 0x7ff)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)

7m23.597382482s ago: executing program 3 (id=9969):
write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b884030002ab087a0100000000481093210001c0f0030584050060100000000000039815fa2c53c2", 0x34)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020)
read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85)

7m23.263423311s ago: executing program 3 (id=9970):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
inotify_rm_watch(0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
exit(0x7ffd)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

7m22.210719875s ago: executing program 3 (id=9972):
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0xfffffffffffffffd, {0xc, 0x10, 0x0, {0x1, 0x6, 0x4030cf7d, 0x8000000000000001, 0x4100000000004, 0x4, 0x80000000, 0x9, 0xe29, 0x1000, 0x9, 0x0, 0x0, 0x2, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lseek(r2, 0x0, 0x2)
ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)

7m21.990606281s ago: executing program 3 (id=9974):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
unshare(0x62040200)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
gettid()
r1 = socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1ff, 0x4, 0x4, 0x9]}, &(0x7f0000000000)=0x54)

7m8.196505781s ago: executing program 48 (id=9979):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x4, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="3083", 0x2}], 0x1}, 0x4)

7m6.718440243s ago: executing program 49 (id=9974):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
unshare(0x62040200)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
gettid()
r1 = socket$inet(0xa, 0x801, 0x84)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1ff, 0x4, 0x4, 0x9]}, &(0x7f0000000000)=0x54)

6m36.207979335s ago: executing program 6 (id=10095):
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2000000000c45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x1, 0x8d], 0x100000, 0x80})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m35.7604014s ago: executing program 6 (id=10096):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a40)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xcc88, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0"], 0x57)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m35.200223094s ago: executing program 6 (id=10099):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121040, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0)

6m34.149134798s ago: executing program 6 (id=10106):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20)

6m33.823682569s ago: executing program 6 (id=10109):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @empty, 0xee8f}, 0x1c)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x400, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x60)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x28, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e26, 0x4e20, 0x14, 0x0, @gue={{0x1, 0x1, 0x0, 0x8, 0x0, @void}, "6a93a1fc83e4f238"}}}}, 0x36)

6m33.460341093s ago: executing program 6 (id=10110):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x2, 0x20, 0xa3, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0xe, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m32.884512523s ago: executing program 50 (id=10110):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x2, 0x20, 0xa3, 0x2, 0x5, 0x9, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000004}], 0xcc78})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0xe, 0x0, 0x1], 0x8080000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m26.271379316s ago: executing program 8 (id=10365):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0)
write$binfmt_misc(r1, &(0x7f00000003c0)="87", 0x1)

5m25.116482947s ago: executing program 8 (id=10372):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000000)="ea", 0x1)
write(r1, &(0x7f00000002c0)="04", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x44)
close(r1)

5m24.87561006s ago: executing program 8 (id=10373):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x400f00, &(0x7f0000000080)={0x0, 0x9ec5, 0x20, 0x1, 0x3cc, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

5m23.520984386s ago: executing program 8 (id=10375):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0)

5m22.923825196s ago: executing program 8 (id=10377):
syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "b337d9cc2c86df42", "7d05dacec51d55ff3c13567ddffb04317d0256f6506fca0a5f49cc3c88081372", "de2925ea", "0c2ae32fb6d80f6a"}, 0x38)
write$binfmt_script(r1, &(0x7f0000001300)={'#! ', './file0', [], 0xa, "e17c092b8e051ffd8c6ffbe7df8779ddfb1eb74f2a7b5e85c3ffa6a6882c67f587d197913fc4f84286729328f18f21afd070c7b0ebc05f919b444aa8b198ebc9661c0134c239d043d4bf260682cf7e5c750214a2bb90c9ebfb384d00eaad2ac574811f10a650f5244e89bdbc1cb2c5fb594c87ad033cc559ccebaa54751c9656ffa5a6db9528625c6f0298bf2b9f11ad424c7cc54e13060d9eb7c8eaeba947f75c108d77ad0802a61347b053b1fdd2e13ecfb7837b50602bf178096b87fc14245716a835b38989c81df77189792cce6d0b5f401eac88b1b91a0ea5641245abf2f3ff00119daacabda65c5c38d5c769ef344e790695b1a6d6dd5ada2e30754365ffe828b170740cf0b3abbfb02a9b27748a68251814fe4ac779363e73554677e434522579ed1393083a10b9619b11738a6fec132dd1fd8f6fde0d4c6a8595ca6d029845aa7d660f981b07e4176f8631ccb3389acecde22e7f7218457a0db171d0a8ade0c27b51113d4f3a2aee3843109062bbfd99ed8c51fc183ac29558e12b0f4059be49b29da3eeafef2dbb5e5724f2296303cf87bd9dfbda2e3d5d5fa5757a8f747d3c9fd801d80864023e6078c9709d2875dcc6e7b1955d1b0a4fe6b154bd7d0c6f0aa49aff1c3e8f003ddc2ba944f456a85180e3481876386056f78d083bcf1f4f8ab6f52a8678feb2e73e2f8d05153630ee5f9562831ea89ee6a08a7080fd654e5d318385a2c801f1c93232138a2a5ff894036e6f59be4de9eef53999eca34e47c8859e6a1dd15abf961ba8cb14ffacc5147ccc0966f5b811aa1105151f113acda01154f2d14ef81186e5daf991342c4f10b9127634b5d839a866343c1348bd6428d4eddfbbee6d002502878e6cee60fd0a3edad7d43cf6e1b21aa0399861fa4c3d5ee6ced86fac63b4247991fc800809aa0a112f3e33fa97df5349218a0e2a98c609580171ba0135c02cde02eb7da41638cd69c4fd115664ecec8a3e3ef2bc381b2dbb0c001f1ad72702acacad0a05ba734669f3cc07e9e3765a7382a9e99b323e7ae240b71a0ef88cf5093a4b884ce59d9dbd02c83e40e99d918527ea15a3aedef7613b75cacefc50e3726cae50b5e8caad92af771ad26d78c547566aa0d395ac1e8c378d5030d7621ac3a6a54be36df3503658842b76bfd1dcc69bbf14ffbe63be4789b0c251f1e6727af5496e8a406252b72acf2b282641fc293ff87a5dddbf85c50329e0748863438da8c67b6ed678261eb559f12ce0556b7a6bc3bf13d9ea1dd1e211e5f6577cc48e2ba98475281e3aed55ade6bc17e84aeee79394c6b2871019aa4b46171206658515d4c3a8f966a838d77389007b43719eaeaa985d67918adf"}, 0x3d1)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1)

5m19.409417472s ago: executing program 7 (id=10383):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xfffffffffffff000, 0x1, 0x800, 0x2, 0x8000000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)

5m18.253375155s ago: executing program 7 (id=10384):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x4000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

5m14.787061229s ago: executing program 8 (id=10387):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x7, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x41, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0xfffffffd, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x11, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x10ee, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x15, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0x7, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0xff, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5m14.187982287s ago: executing program 51 (id=10387):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x7, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x41, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0xfffffffd, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x11, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x10ee, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x15, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0x7, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0xff, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5m14.145040602s ago: executing program 7 (id=10390):
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x300, 0x0, 0x300, 0x320, 0x0, 0x6, 0x0, 0x1, {0xa, 0xff, 0x1}, {0x8000, 0x4}, {0x200, 0x5, 0x1}, {0x9, 0xd, 0x1}, 0x1, 0x80, 0x6, 0xa8000000, 0x0, 0x8, 0xfffff87e, 0x4, 0xb63, 0x2, 0x7, 0x4, 0x36, 0x0, 0x3, 0xb})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0x4b)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000"], 0x0, 0x0, 0x0, 0x0})
getdents(r2, &(0x7f0000000700)=""/90, 0x20000)

5m13.878011428s ago: executing program 7 (id=10393):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0)

5m12.774322421s ago: executing program 7 (id=10402):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x800, 0x0, 0x7, 0x51, 0x67, 0x0, 0x5, 0x6, 0x7fffffff, 0x100, 0x200, 0x7, 0x681e, 0xbeb, 0x76e1, 0x0, 0x1, 0x401, 0x2, 0xfe, 0x8001, 0x5, 0x2, 0x4, 0x9, 0x8, 0x629, 0x6, 0x1e1, 0x1000, 0x4, 0xde, 0x7ff, 0x3, 0x7, 0x8, 0x1ff, 0x8e1b087, 0x0, 0x2, 0x1, 0xfffffffa, 0x1875, 0xffff, 0x7, 0x81, 0x3, 0x6, 0xff25, 0x4, 0x0, 0x7fff, 0x2, 0x6, 0xd7, 0x7ff, 0x2, 0xd, 0x4, 0x1, 0xef, 0x200, 0x5, 0x9, 0x0, 0x1, 0x0, 0x3, 0xb, 0x9, 0xffffff81, 0x0, 0x6, 0x101, 0xfffffffe, 0x8, 0x7, 0x2, 0x1, 0x800, 0x7, 0x85, 0x3, 0x4, 0xe0, 0x8001, 0x10, 0x8, 0x7, 0x0, 0x200, 0xffff2338, 0x8, 0x8, 0x80, 0xe, 0x4, 0x6c0, 0x80000000, 0x1, 0x200, 0xfffffffd, 0x8, 0x6, 0x3, 0x80000000, 0x2, 0x8, 0x3, 0x42, 0xe, 0x6, 0x8, 0x0, 0xa, 0xd, 0x4, 0x5, 0x8, 0x80, 0x5, 0x4, 0xdcb, 0x4, 0x9, 0x1000, 0x80000001, 0x3, 0x7, 0x100, 0x0, 0x4, 0xed00, 0x7fff, 0x401, 0x1130debc, 0x2, 0x2, 0x7, 0x2c1, 0xe, 0x0, 0x1, 0x2, 0x7, 0xc7, 0xe68, 0x1000, 0x7, 0x3, 0xc, 0x6, 0x6, 0xf, 0x7, 0x5, 0x6, 0x4a3b, 0x3, 0x0, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x3d6f, 0x8, 0x6, 0xc73, 0x429, 0x1, 0x6, 0x8001, 0x6, 0x101, 0x9, 0x3, 0x2, 0x8, 0x81, 0xb573, 0x2, 0xfffffff7, 0x7c, 0xfffffffb, 0x7, 0x9, 0x200, 0xfffffffb, 0x0, 0x8, 0x200, 0x8e, 0x566f, 0x0, 0x300000, 0x3, 0x2, 0x80000001, 0x6, 0x4, 0xfff, 0x2, 0xd7f5, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x9, 0x1, 0x9, 0x8, 0x81, 0x9, 0x5, 0x3, 0x3, 0xa, 0x7fffffff, 0x7fffffff, 0xd, 0x8, 0x9, 0x3, 0x6, 0x0, 0x59, 0x401, 0x0, 0xffff, 0x2, 0x1, 0x38, 0x2, 0x4, 0x7, 0x4, 0x9, 0x1, 0xfffffffe, 0x0, 0x1, 0x7fffffff, 0x1, 0x6, 0x8, 0x1, 0x8, 0x2e32, 0xfffffffe, 0x7, 0x9be, 0x4, 0x6, 0xa]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

5m12.176113347s ago: executing program 7 (id=10404):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101)

5m11.539007712s ago: executing program 52 (id=10404):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101)

1m52.21551296s ago: executing program 2 (id=11136):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket(0x10, 0x803, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x8)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4})

1m42.326115791s ago: executing program 2 (id=11150):
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x9)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000640)={0x2}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
landlock_restrict_self(r2, 0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)

1m42.100010629s ago: executing program 2 (id=11153):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x40, 0x18}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
landlock_create_ruleset(0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0)

1m38.849524749s ago: executing program 2 (id=11161):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
unshare(0x2c020400)

1m37.919557295s ago: executing program 2 (id=11168):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8})
syz_open_dev$sndmidi(&(0x7f0000000080), 0x3022, 0x40)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb9, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m37.643198757s ago: executing program 2 (id=11171):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0)
recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

1m37.252476781s ago: executing program 53 (id=11171):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0)
recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1)
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4)
splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0)

10.098827846s ago: executing program 9 (id=11468):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

9.978037046s ago: executing program 9 (id=11469):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="20130300000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

9.58692403s ago: executing program 5 (id=11470):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0)
landlock_restrict_self(r5, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e)

9.0278685s ago: executing program 5 (id=11472):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x4048080)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0)

8.524694144s ago: executing program 5 (id=11475):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x2082)
socket$netlink(0x10, 0x3, 0x10)
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
unshare(0x66000080)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', <r2=>0x0})
r3 = gettid()
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0)

6.837942263s ago: executing program 5 (id=11486):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0xf1, 0xf1, 0x4}]}, 0x8)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xce4}, 0x38)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)

6.781830896s ago: executing program 4 (id=11487):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$video4linux(&(0x7f00000007c0), 0x3, 0x100)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[], 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.1125183s ago: executing program 9 (id=11488):
r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0241, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x20006, 0x1})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0x15, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0x7, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x3, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x3, 0xd, 0x14574, 0x0, 0x7f, 0x7, 0x1, 0x314, 0x7, 0xe, 0x4, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xfa65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0xed6, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xff, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x401, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8011, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0xb, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1004, 0xf, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macvtap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860)

5.813320867s ago: executing program 0 (id=11490):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xc, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

5.373192538s ago: executing program 0 (id=11491):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1800}], 0x0, 0x14720000, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020)

5.09551698s ago: executing program 0 (id=11493):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.85752046s ago: executing program 9 (id=11494):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x140})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.412166052s ago: executing program 5 (id=11496):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r2 = userfaultfd(0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

4.236389829s ago: executing program 9 (id=11497):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
io_uring_setup(0x7c45, &(0x7f0000000380)={0x0, 0x5065, 0x40, 0x0, 0x99})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x134, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x40}}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x21}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2000800)

4.184766245s ago: executing program 0 (id=11498):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = dup(r1)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
write$P9_RSTATFS(r4, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x4b0, 0xa3, 0x4, 0x8000000000000001, 0xb6, 0x0, 0x1, 0x401, 0x7fff}}, 0x43)

4.063063401s ago: executing program 4 (id=11499):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r5, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x2)

3.120990673s ago: executing program 0 (id=11500):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1})
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, &(0x7f0000001840)=""/242, 0xeeef0000})

3.113378562s ago: executing program 9 (id=11510):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000140)={0x40, 0xe, 0x2, "d817"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000880)={0x20, 0xa, 0x1, "a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

2.992257453s ago: executing program 1 (id=11501):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x0, 0x8000, 0x3, 0x2000005, 0x5, 0xb762, 0x6, 0x7, 0x8, 0x7, 0x2, 0x80000001, 0x400, 0x800, 0x1, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x4, 0x5, 0x7, 0x0, 0x2, 0x10000101, 0x1, 0x9, 0x4, 0x1, 0x1, 0x9, 0xa, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffffa, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x80000008, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0xffffffff, 0x4, 0x2, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x4, 0xe, 0x8000, 0x6, 0x45c, 0x80, 0x3, 0xae, 0xff, 0x9c, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x672, 0x401, 0xf8a, 0x80000000, 0xb, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xafab, 0x6, 0x4, 0x7, 0x485e, 0xa89, 0x0, 0x3, 0x7, 0x7, 0x101, 0x2d5421e5, 0x67ccdc5e, 0x10000, 0xffffffff, 0xa, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x2, 0x401, 0x4, 0x9, 0x3, 0xffffffff, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x5, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0xffff0327, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x6, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x5, 0x6, 0x8, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xcc3f, 0x3, 0xcd34, 0x9, 0x8001, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x4, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x2, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x1, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

2.591647857s ago: executing program 4 (id=11502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'})
syz_open_dev$loop(0x0, 0x2, 0x2001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.110798793s ago: executing program 1 (id=11503):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}, @TCA_TBF_PBURST={0x8, 0x7, 0x21b1}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

1.792581352s ago: executing program 0 (id=11504):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x0, 0x30, 0x2, "4499"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

1.082084822s ago: executing program 1 (id=11505):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000640)="ae"})

516.63555ms ago: executing program 4 (id=11506):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [<r5=>0x0], [0x0, 0x3, 0x2], [0x0, 0x0, 0x3], [0x4000000, 0xc, 0x0, 0x4]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, 0x0, [<r7=>0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r7})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6})
close_range(r0, 0xffffffffffffffff, 0x0)

516.308799ms ago: executing program 1 (id=11507):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc221200004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

515.436755ms ago: executing program 5 (id=11508):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
close(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r2, 0x400, 0x1)
r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r4 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
write$binfmt_misc(r4, &(0x7f0000000180)="e502", 0x2)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

274.438391ms ago: executing program 1 (id=11509):
set_thread_area(0x0)
get_thread_area(0x0)
get_thread_area(0x0)
modify_ldt$write(0x1, 0x0, 0x0)
set_thread_area(&(0x7f00000001c0)={0xcba3, 0x100000, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1})
modify_ldt$write2(0x11, &(0x7f0000000200)={0x30c, 0x20000800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
set_thread_area(0x0)
set_thread_area(0x0)
get_thread_area(0x0)
shmget(0x3, 0x10000, 0x40, &(0x7f0000ff0000/0x10000)=nil)
modify_ldt$write(0x1, &(0x7f0000001500)={0xa, 0xffffffffffffffff, 0x400, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10)
modify_ldt$write2(0x11, &(0x7f0000001540)={0x7, 0x20101000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10)

245.24513ms ago: executing program 4 (id=11511):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x6ef, 0xfffb, 0x8632, 0x80000}, {0x6, 0x3, 0x6, 0xfeff, 0x6c, 0x200}, 0x6aba0e4b, 0x1, 0xd04}}, @TCA_TBF_RATE64={0xc, 0x4, 0x9b3bc4fd75e29128}, @TCA_TBF_PBURST={0x8, 0x7, 0x15e0}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb91e316295c500f1}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

192.241898ms ago: executing program 1 (id=11512):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x6200, 0x2, &(0x7f0000000180)="c2fb"}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 4 (id=11513):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4040000)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8)
recvmmsg(r1, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/204, 0xcc}, 0x9}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14)

kernel console output (not intermixed with test programs):

55 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1696.137788][T27491] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1696.161019][ T6304] binder: 6302:6304 ioctl c0306201 80000440 returned -14
[ 1696.177221][T27491] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1696.206561][T27491] usb 10-1: Product: syz
[ 1696.223446][T27491] usb 10-1: Manufacturer: syz
[ 1696.246149][T27491] usb 10-1: SerialNumber: syz
[ 1696.294070][    C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1696.326072][T27491] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input166
[ 1696.529106][T27491] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1696.549827][T27491]  (id 0x00)
[ 1696.683434][T27478] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1696.739093][T27491] rc_core: IR keymap rc-imon-pad not found
[ 1696.755724][T27491] Registered IR keymap rc-empty
[ 1696.772791][T27491] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1696.787456][T27491] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1696.820712][T27491] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0
[ 1696.837387][T27491] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input167
[ 1696.847386][T27478] usb 1-1: Using ep0 maxpacket: 32
[ 1696.865023][T27478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1696.882857][T27491] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:17> initialized
[ 1696.891806][T27478] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1696.903984][T27478] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1696.914223][T27478] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1696.943943][T27478] usb 1-1: config 0 descriptor??
[ 1696.962867][T27478] hub 1-1:0.0: USB hub found
[ 1697.006755][ T6326] netlink: 'syz.2.10949': attribute type 4 has an invalid length.
[ 1697.060876][T27495] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[ 1697.175849][T27478] hub 1-1:0.0: 1 port detected
[ 1697.231768][T27495] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1697.283557][T27495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1697.328087][T27495] usb 6-1: Product: syz
[ 1697.348904][T27495] usb 6-1: Manufacturer: syz
[ 1697.366652][T27495] usb 6-1: SerialNumber: syz
[ 1697.401371][T27495] usb 6-1: config 0 descriptor??
[ 1697.595075][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1697.657389][   T10] usb 10-1: USB disconnect, device number 17
[ 1697.665193][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1697.674572][ T6333] imon:send_packet: packet tx failed (-71)
[ 1697.693161][T27495] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1697.727069][ T6333] imon:vfd_write: send packet #0 failed
[ 1698.029810][T27478] usb 1-1: USB disconnect, device number 119
[ 1698.037986][T27474] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 1699.159347][T27495] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1699.215779][    C1] sd 0:0:1:0: [sda] tag#1124 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1699.226396][    C1] sd 0:0:1:0: [sda] tag#1124 CDB: Write(6) 0a 00 0e 22 00 00 00 00 00 00 00 00
[ 1699.262115][T27495] usb 6-1: USB disconnect, device number 27
[ 1700.057772][T27491] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1700.247640][T27491] usb 5-1: Using ep0 maxpacket: 32
[ 1700.268423][T27491] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[ 1700.289103][T27491] usb 5-1: config 0 has no interface number 0
[ 1700.319809][T27491] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1700.342756][T27491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.368120][T27495] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1700.378785][T27491] usb 5-1: Product: syz
[ 1700.384697][T27491] usb 5-1: Manufacturer: syz
[ 1700.392828][T27491] usb 5-1: SerialNumber: syz
[ 1700.410667][T27491] usb 5-1: config 0 descriptor??
[ 1700.446543][ T6365] netlink: 'syz.9.10959': attribute type 12 has an invalid length.
[ 1700.576806][T27495] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1700.617000][T27495] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1700.655164][T27495] usb 1-1: Product: syz
[ 1700.687282][T27495] usb 1-1: Manufacturer: syz
[ 1700.714416][T27495] usb 1-1: SerialNumber: syz
[ 1700.772639][T27495] usb 1-1: config 0 descriptor??
[ 1700.833723][T27495] ch341 1-1:0.0: ch341-uart converter detected
[ 1700.884844][T27491] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1700.944940][T27491] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1701.845188][ T6373] syzkaller0: entered promiscuous mode
[ 1701.869497][ T6373] syzkaller0: entered allmulticast mode
[ 1701.876404][T27495] usb 1-1: ch341-uart converter now attached to ttyUSB0
[ 1702.161763][T27474] usb 1-1: USB disconnect, device number 120
[ 1702.173641][T27474] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[ 1702.228431][T27474] ch341 1-1:0.0: device disconnected
[ 1702.843950][T27491] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71
[ 1702.903902][T27474] IPVS: starting estimator thread 0...
[ 1702.918992][T27491] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[ 1703.000328][T27491] usb 5-1: USB disconnect, device number 120
[ 1703.027889][ T6387] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1704.592848][ T6406] kvm: pic: single mode not supported
[ 1704.592924][ T6406] kvm: pic: single mode not supported
[ 1704.769811][T27474] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1704.977088][T27474] usb 10-1: Using ep0 maxpacket: 32
[ 1705.012941][T27474] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1705.036191][T27474] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1705.048465][T27474] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1705.069932][T27474] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1705.133863][T27474] usb 10-1: config 0 descriptor??
[ 1705.391198][ T6406] kvm: pic: level sensitive irq not supported
[ 1705.392051][ T6406] kvm: pic: level sensitive irq not supported
[ 1705.656843][T27474] savu 0003:1E7D:2D5A.00A8: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0
[ 1707.117284][T15440] usb 10-1: reset high-speed USB device number 18 using dummy_hcd
[ 1707.308018][T27474] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[ 1707.397343][T27491] usb 1-1: new low-speed USB device number 121 using dummy_hcd
[ 1707.506544][T27474] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1707.546179][T27474] usb 3-1: not running at top speed; connect to a high speed hub
[ 1707.577545][T27474] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1707.600228][T27491] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1707.613899][T27474] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1707.636181][T27491] usb 1-1: config 179 has no interface number 0
[ 1707.649927][T27474] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[ 1707.660661][T27491] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1707.691393][T27474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1707.697316][T27491] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[ 1707.723277][T27491] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1707.724584][T27474] usb 3-1: Product: syz
[ 1707.772145][T27491] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8
[ 1707.825070][T27474] usb 3-1: Manufacturer: syz
[ 1707.827093][T27491] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1707.894432][T27474] usb 3-1: SerialNumber: syz
[ 1707.917358][T27491] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1707.952909][T27491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1708.013086][ T6430] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1708.049458][ T6430] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1708.430690][T27474] usb 3-1: 3:0: failed to get current value for ch 0 (-71)
[ 1708.542746][T27474] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3)
[ 1708.597359][T27474] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1708.687261][T27474] usb 3-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1
[ 1708.711507][T27495] usb 10-1: USB disconnect, device number 18
[ 1708.772483][T27474] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3)
[ 1708.853603][T27474] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3)
[ 1708.930682][T27474] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3)
[ 1708.986957][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[ 1708.987457][T27478] usb 1-1: USB disconnect, device number 121
[ 1708.995387][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1709.009923][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1709.045830][T27474] usb 3-1: 3:0: failed to get current value for ch 0 (-71)
[ 1709.119142][T27474] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3)
[ 1709.158939][T27474] usb 3-1: 3:0: failed to get current value for ch 0 (-71)
[ 1709.240532][T27474] usb 3-1: 3:0: cannot get min/max values for control 12 (id 3)
[ 1709.384780][T27474] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3)
[ 1709.434178][T27474] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3)
[ 1709.610283][T27474] usb 3-1: USB disconnect, device number 78
[ 1709.696629][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1714.081098][ T6494] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.10999'.
[ 1715.124232][ T6498] kvm: kvm [6497]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000
[ 1715.628507][T27474] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 1715.747105][T27478] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1715.787682][T27474] usb 1-1: Using ep0 maxpacket: 16
[ 1715.795026][T27474] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1715.807213][T27474] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1715.823077][T27474] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1715.835052][T27474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1715.844568][T27474] usb 1-1: Product: syz
[ 1715.849930][T27474] usb 1-1: Manufacturer: syz
[ 1715.854839][T27474] usb 1-1: SerialNumber: syz
[ 1715.863829][T27474] usb 1-1: config 0 descriptor??
[ 1715.886053][T27474] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1715.908458][T27478] usb 10-1: Using ep0 maxpacket: 32
[ 1715.914016][T27474] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 1715.927714][T27478] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1715.942271][T27478] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1715.956839][T27478] usb 10-1: Product: syz
[ 1715.964126][T27478] usb 10-1: Manufacturer: syz
[ 1715.970413][T27478] usb 10-1: SerialNumber: syz
[ 1715.982622][T27478] usb 10-1: config 0 descriptor??
[ 1716.002027][T27478] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1716.498079][T27474] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1716.514280][T27474] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[ 1716.757243][   T10] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1716.927132][   T10] usb 5-1: Using ep0 maxpacket: 16
[ 1716.939508][   T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1716.971040][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1716.984874][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[ 1716.997848][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1717.027923][   T10] usb 5-1: config 0 descriptor??
[ 1717.136217][T27474] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[ 1717.170161][T27474] em28xx 1-1:0.0: couldn't setup AC97 register 2
[ 1717.479661][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.516500][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.543453][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.571343][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.598188][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.615799][T27474] em28xx 1-1:0.0: couldn't setup AC97 register 4
[ 1717.629359][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.649690][T27474] em28xx 1-1:0.0: couldn't setup AC97 register 6
[ 1717.674233][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.689696][T27474] em28xx 1-1:0.0: couldn't setup AC97 register 54
[ 1717.710297][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.729146][T27474] em28xx 1-1:0.0: couldn't setup AC97 register 56
[ 1717.744969][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.765879][T27474] usb 1-1: USB disconnect, device number 122
[ 1717.781065][   T10] logitech 0003:046D:C626.00A9: unknown main item tag 0x0
[ 1717.833936][   T10] logitech 0003:046D:C626.00A9: hidraw0: USB HID v0.08 Device [HID 046d:c626] on usb-dummy_hcd.4-1/input0
[ 1717.927618][   T10] usb 5-1: USB disconnect, device number 121
[ 1718.115479][ T6556] fido_id[6556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1718.431817][T27478] gspca_stk1135: reg_w 0x300 err -71
[ 1718.462460][T27478] gspca_stk1135: serial bus timeout: status=0x00
[ 1718.497541][T27478] gspca_stk1135: Sensor write failed
[ 1718.517521][T27478] gspca_stk1135: serial bus timeout: status=0x00
[ 1718.540300][T27478] gspca_stk1135: Sensor write failed
[ 1718.556144][T27478] gspca_stk1135: serial bus timeout: status=0x00
[ 1718.563710][T27478] gspca_stk1135: Sensor read failed
[ 1718.571221][T27478] gspca_stk1135: serial bus timeout: status=0x00
[ 1718.583819][T27478] gspca_stk1135: Sensor read failed
[ 1718.595252][T27478] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1718.606734][T27478] gspca_stk1135: serial bus timeout: status=0x00
[ 1718.617753][T27478] gspca_stk1135: Sensor read failed
[ 1718.623066][T27478] gspca_stk1135: serial bus timeout: status=0x00
[ 1718.630096][T27478] gspca_stk1135: Sensor read failed
[ 1718.635431][T27478] gspca_stk1135: serial bus timeout: status=0x00
[ 1718.642628][T27478] gspca_stk1135: Sensor write failed
[ 1718.651359][T27478] gspca_stk1135: serial bus timeout: status=0x00
[ 1718.660010][T27478] gspca_stk1135: Sensor write failed
[ 1718.665706][T27478] stk1135 10-1:0.0: probe with driver stk1135 failed with error -71
[ 1718.680008][T27478] usb 10-1: USB disconnect, device number 19
[ 1718.787553][T27474] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1718.948273][T27474] usb 5-1: Using ep0 maxpacket: 32
[ 1718.963109][T27474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1718.988141][T27474] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1719.012746][T27474] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1719.032300][T27474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1719.063735][T27474] usb 5-1: config 0 descriptor??
[ 1719.078113][T15440] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1719.092720][T27474] hub 5-1:0.0: USB hub found
[ 1719.269848][T15440] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1719.301718][T15440] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1719.332885][T27474] hub 5-1:0.0: 1 port detected
[ 1719.353516][T15440] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1719.395991][T15440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1719.445842][T15440] usb 3-1: SerialNumber: syz
[ 1719.719435][T15440] usb 3-1: 0:2 : does not exist
[ 1719.810049][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1719.882831][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1720.063189][T15440] usb 3-1: USB disconnect, device number 79
[ 1720.233439][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1720.329176][T27491] usb 5-1: USB disconnect, device number 122
[ 1720.375461][T27474] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 1721.350221][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11026'.
[ 1721.486348][ T6607] syzkaller0: entered promiscuous mode
[ 1721.508839][ T6607] syzkaller0: entered allmulticast mode
[ 1721.937235][T27474] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1722.327311][T27474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1722.387107][T27474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1722.398669][T27474] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1722.412689][T27474] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1722.422123][T27474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1722.456138][T27474] usb 3-1: config 0 descriptor??
[ 1722.654685][ T6617] binder_alloc: 6616: pid 6616 spamming oneway? 1 buffers allocated for a total size of 6144
[ 1722.696428][ T6617] binder: 6616:6617 ioctl c0306201 80000680 returned -14
[ 1722.944602][ T6626] bridge0: port 1(erspan0) entered blocking state
[ 1722.973586][ T6626] bridge0: port 1(erspan0) entered disabled state
[ 1722.982647][T27474] plantronics 0003:047F:FFFF.00AA: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1723.035333][ T6626] erspan0: entered allmulticast mode
[ 1723.194749][ T6626] bridge0: port 1(erspan0) entered blocking state
[ 1723.201570][ T6626] bridge0: port 1(erspan0) entered forwarding state
[ 1723.354592][T27471] usb 3-1: USB disconnect, device number 80
[ 1723.362650][ T6610] usb 3-1: string descriptor 0 read error: -19
[ 1724.587036][T27478] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1724.767017][T27478] usb 3-1: Using ep0 maxpacket: 32
[ 1724.801845][T27478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1724.842582][T27478] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1724.888623][T27478] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1724.925363][T27478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1724.978330][T27478] usb 3-1: config 0 descriptor??
[ 1725.016655][T27478] hub 3-1:0.0: USB hub found
[ 1725.056627][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11036'.
[ 1725.222912][T27478] hub 3-1:0.0: 1 port detected
[ 1725.665835][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1725.721346][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1725.731854][T27471] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 1725.897248][T27471] usb 1-1: Using ep0 maxpacket: 32
[ 1725.927411][T27471] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1725.972797][T27471] usb 1-1: config 0 has no interface number 0
[ 1726.006036][T27471] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1726.056262][T27474] usb 3-1: USB disconnect, device number 81
[ 1726.062946][T27478] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 1726.080032][T27471] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1726.123270][T27471] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1726.167078][T27471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1726.207457][T27471] usb 1-1: Product: syz
[ 1726.215123][T27471] usb 1-1: Manufacturer: syz
[ 1726.227055][T27471] usb 1-1: SerialNumber: syz
[ 1726.264401][T27471] usb 1-1: config 0 descriptor??
[ 1726.530886][T27471] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1726.558409][T27471] cx231xx 1-1:0.1: Failed to read PCB config
[ 1726.575148][T27471] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71
[ 1726.626415][T27471] usb 1-1: USB disconnect, device number 123
[ 1727.031834][ T6660] ip6erspan0: entered allmulticast mode
[ 1727.053842][ T6661] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1727.087115][T27471] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 1727.247668][T27471] usb 1-1: Using ep0 maxpacket: 32
[ 1727.265065][T27471] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1727.316130][T27471] usb 1-1: config 0 has no interface number 0
[ 1727.509636][T27471] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1727.642603][T27471] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1727.657742][T27478] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1727.781050][T27471] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1727.791127][T27471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1727.799962][T27471] usb 1-1: Product: syz
[ 1727.825529][T27471] usb 1-1: Manufacturer: syz
[ 1727.845709][T27471] usb 1-1: SerialNumber: syz
[ 1727.887517][T27471] usb 1-1: config 0 descriptor??
[ 1727.930972][T27478] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1727.981624][T27478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1728.035600][T27478] usb 5-1: Product: syz
[ 1728.076553][T27478] usb 5-1: Manufacturer: syz
[ 1728.103882][T27474] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1728.113415][T27478] usb 5-1: SerialNumber: syz
[ 1728.229008][T27471] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1728.275406][T27471] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[ 1728.338346][T27474] usb 10-1: Using ep0 maxpacket: 32
[ 1728.357171][T27474] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1728.391269][ T6677] binder: BINDER_SET_CONTEXT_MGR already set
[ 1728.404037][T27474] usb 10-1: config 0 has no interface number 0
[ 1728.414625][T27471] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[ 1728.437252][ T6677] binder: 6676:6677 ioctl 4018620d 80000040 returned -16
[ 1728.464864][T27474] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1728.475871][T27471] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1728.514757][T27474] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1728.555595][T27474] usb 10-1: Product: syz
[ 1728.572554][T27474] usb 10-1: Manufacturer: syz
[ 1728.601328][T27474] usb 10-1: SerialNumber: syz
[ 1728.631161][T27474] usb 10-1: config 0 descriptor??
[ 1728.646024][T27478] net_ratelimit: 1992 callbacks suppressed
[ 1728.646045][T27478] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1728.668744][T27471] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[ 1728.678641][T27471] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1728.698908][T27471] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -32
[ 1728.714838][T27478] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[ 1728.774993][T27478] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1728.826968][T27471] i2c i2c-3: Added multiplexed i2c bus 5
[ 1728.827342][T27478] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1728.855794][T27471] i2c i2c-3: Added multiplexed i2c bus 6
[ 1728.880872][T27471] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[ 1728.902551][T27478] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1728.921382][T27471] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[ 1728.970776][T27478] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[ 1729.084413][T27478] usb 5-1: USB disconnect, device number 123
[ 1729.150859][T27474] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1729.166090][T27474] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1729.187781][T27471] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71
[ 1729.224076][T27471] usb 1-1: USB disconnect, device number 124
[ 1730.422295][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.433213][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.838251][T27474] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[ 1730.895805][T27474] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71
[ 1730.955127][T27474] usb 10-1: USB disconnect, device number 20
[ 1731.054157][ T6709] syzkaller0: entered promiscuous mode
[ 1731.086695][ T6709] syzkaller0: entered allmulticast mode
[ 1731.542233][ T6715] netlink: 'syz.4.11059': attribute type 1 has an invalid length.
[ 1732.267585][T27474] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1732.538058][T27474] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1732.548917][T27474] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1732.561002][T27474] usb 10-1: string descriptor 0 read error: -22
[ 1732.569248][T27474] usb 10-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40
[ 1732.591499][T27474] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1733.310029][T27474] usbhid 10-1:1.0: can't add hid device: -71
[ 1733.316465][T27474] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[ 1733.356444][T27474] usb 10-1: USB disconnect, device number 21
[ 1734.478887][ T6738] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11066'.
[ 1734.615241][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11066'.
[ 1738.957718][ T6715] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[ 1739.187320][ T6746] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1739.405008][ T6760] binder_alloc: 6758: pid 6758 spamming oneway? 1 buffers allocated for a total size of 6144
[ 1739.435810][ T6760] binder: 6758:6760 ioctl c0306201 80000680 returned -14
[ 1739.479352][T27471] IPVS: starting estimator thread 0...
[ 1739.617614][ T6761] IPVS: using max 31 ests per chain, 74400 per kthread
[ 1739.817816][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11075'.
[ 1739.984623][ T6781] binder_alloc: 6778: pid 6778 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1740.310051][ T6788] syzkaller0: entered promiscuous mode
[ 1740.327114][ T6788] syzkaller0: entered allmulticast mode
[ 1740.370297][ T6788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1740.399385][ T6787] tipc: Resetting bearer <eth:syzkaller0>
[ 1740.526618][ T6787] tipc: Disabling bearer <eth:syzkaller0>
[ 1740.673782][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11080'.
[ 1740.691614][ T6793] input: syz1 as /devices/virtual/input/input169
[ 1740.727316][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11080'.
[ 1740.877113][T27495] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1741.044819][T27495] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1741.066266][T27495] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1741.080535][T27495] usb 10-1: Product: syz
[ 1741.085207][T27495] usb 10-1: Manufacturer: syz
[ 1741.091029][T27495] usb 10-1: SerialNumber: syz
[ 1741.376529][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11090'.
[ 1741.529051][T27495] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1741.598227][T27495] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1742.247178][T27471] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1742.487000][T27471] usb 6-1: Using ep0 maxpacket: 32
[ 1742.504405][T27471] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1742.533953][T27471] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1742.566352][T27471] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1742.610699][T27471] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1742.688951][T27471] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1742.728475][T27471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1742.786759][T27471] usb 6-1: Product: syz
[ 1742.815172][T27471] usb 6-1: Manufacturer: syz
[ 1742.845098][T27471] usb 6-1: SerialNumber: syz
[ 1742.853268][T27495] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1742.909761][    C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1742.978209][T27471] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input170
[ 1743.157402][T27471] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1743.192301][T27471]  (id 0x00)
[ 1743.310556][T27495] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[ 1743.356640][T27495] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1743.393104][T27495] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1743.439825][T27495] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1743.459750][T27471] rc_core: IR keymap rc-imon-pad not found
[ 1743.470141][T27495] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[ 1743.497104][T27471] Registered IR keymap rc-empty
[ 1743.514872][T27471] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1743.529301][T27495] usb 10-1: USB disconnect, device number 22
[ 1743.557298][T27471] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1743.619768][T27471] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[ 1743.667955][T27471] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input171
[ 1743.729308][T27471] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:28> initialized
[ 1744.223652][ T6841] binder: 6840:6841 ioctl c0306201 80004a40 returned -22
[ 1744.388566][   T29] audit: type=1804 audit(1777345233.694:834): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.11105" name="/newroot/103/file1" dev="fuse" ino=1 res=1 errno=0
[ 1744.527841][T27491] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1744.689451][T27491] usb 5-1: Using ep0 maxpacket: 32
[ 1744.708611][T27491] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[ 1744.733748][T27491] usb 5-1: config 0 has no interface number 0
[ 1744.766680][T27491] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1744.798978][T27491] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1744.814347][T27491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1744.829446][T15440] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 1744.838925][T27491] usb 5-1: Product: syz
[ 1744.844229][T27491] usb 5-1: Manufacturer: syz
[ 1744.850058][T27491] usb 5-1: SerialNumber: syz
[ 1744.865344][T27491] usb 5-1: config 0 descriptor??
[ 1744.881054][ T6849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1744.989532][T15440] usb 1-1: config 0 has no interfaces?
[ 1744.995962][T15440] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1745.008435][T15440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1745.041931][ T6872] syzkaller0: entered promiscuous mode
[ 1745.049179][T15440] usb 1-1: config 0 descriptor??
[ 1745.060948][ T6872] syzkaller0: entered allmulticast mode
[ 1745.142071][ T6849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1745.196699][ T6870] imon:send_packet: packet tx failed (-71)
[ 1745.205216][T27478] usb 6-1: USB disconnect, device number 28
[ 1745.230590][ T6870] imon:vfd_write: send packet #4 failed
[ 1745.290611][T15440] usb 1-1: USB disconnect, device number 125
[ 1745.687569][T27472] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1745.867207][T27472] usb 10-1: Using ep0 maxpacket: 16
[ 1745.896031][T27472] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1745.955043][T27472] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1746.038808][T27472] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1746.085549][T27472] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1746.143053][T27472] usb 10-1: Product: syz
[ 1746.167796][T27472] usb 10-1: Manufacturer: syz
[ 1746.199834][T27472] usb 10-1: SerialNumber: syz
[ 1746.254795][T27472] usb 10-1: config 0 descriptor??
[ 1746.314345][T27472] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1746.355782][T27472] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[ 1746.527103][T27478] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1746.679912][ T6886] binder: BINDER_SET_CONTEXT_MGR already set
[ 1746.709980][ T6886] binder: 6885:6886 ioctl 4018620d 80000040 returned -16
[ 1746.717601][T27478] usb 6-1: Using ep0 maxpacket: 8
[ 1746.744513][T27478] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1746.776812][T27478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1746.815189][T27478] usb 6-1: Product: syz
[ 1746.835553][T27478] usb 6-1: Manufacturer: syz
[ 1746.849189][T27478] usb 6-1: SerialNumber: syz
[ 1746.873167][T27478] usb 6-1: config 0 descriptor??
[ 1746.929816][T27472] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[ 1746.945363][T27472] em28xx 10-1:0.0: Config register raw data: 0xfffffffb
[ 1747.109717][T27478] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1747.412643][T27491] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1747.423283][T27491] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1747.446321][T27491] asix 5-1:0.188: probe with driver asix failed with error -71
[ 1747.469907][ T6892] netlink: 'syz.2.11117': attribute type 27 has an invalid length.
[ 1747.496561][T27491] usb 5-1: USB disconnect, device number 124
[ 1747.622071][T27472] em28xx 10-1:0.0: Unknown AC97 audio processor detected!
[ 1747.651820][T27472] em28xx 10-1:0.0: couldn't setup AC97 register 2
[ 1747.895608][ T6892] ip6erspan0: left allmulticast mode
[ 1747.903199][T27472] em28xx 10-1:0.0: AC97 command still being executed: not handled properly!
[ 1747.932480][T27472] em28xx 10-1:0.0: couldn't setup AC97 register 4
[ 1748.085315][T27472] em28xx 10-1:0.0: couldn't setup AC97 register 6
[ 1748.103169][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11118'.
[ 1748.113791][T27472] em28xx 10-1:0.0: couldn't setup AC97 register 54
[ 1748.131481][T27472] em28xx 10-1:0.0: couldn't setup AC97 register 56
[ 1748.160034][ T6895] ip6gre1: entered promiscuous mode
[ 1748.176280][T27472] usb 10-1: USB disconnect, device number 23
[ 1748.188913][ T6895] ip6gre1: entered allmulticast mode
[ 1748.226031][ T6895] netlink: 'syz.2.11118': attribute type 6 has an invalid length.
[ 1748.246313][ T6895] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11118'.
[ 1748.639792][ T6907] netlink: 'syz.4.11122': attribute type 1 has an invalid length.
[ 1749.228859][T27478] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1749.246538][T27478] usb 6-1: USB disconnect, device number 29
[ 1749.447213][T27474] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 1749.626972][T27474] usb 1-1: Using ep0 maxpacket: 32
[ 1749.639956][T27474] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[ 1749.655243][T27474] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1749.680065][T27474] usb 1-1: config 0 has no interface number 0
[ 1749.711321][T27474] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[ 1749.743646][T27474] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[ 1749.773555][T27474] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[ 1749.804488][T27474] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[ 1749.955136][T27474] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[ 1750.032282][T27474] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[ 1750.085725][T27474] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1750.141097][T27474] usb 1-1: config 0 interface 239 has no altsetting 0
[ 1750.207631][T27474] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[ 1750.251604][T27474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1750.294205][T27474] usb 1-1: Product: syz
[ 1750.305909][ T6927] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1750.338241][T27474] usb 1-1: Manufacturer: syz
[ 1750.372382][T27474] usb 1-1: SerialNumber: syz
[ 1750.411405][T27474] usb 1-1: config 0 descriptor??
[ 1750.446059][ T6915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1750.575238][ T6915] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1750.954000][T15440] usb 1-1: USB disconnect, device number 126
[ 1750.997068][T27472] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1751.053154][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11132'.
[ 1751.190027][T27472] usb 10-1: Using ep0 maxpacket: 16
[ 1751.205284][T27472] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1751.232910][T27472] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1751.260847][T27472] usb 10-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1751.291614][T27472] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1751.319329][T27472] usb 10-1: Product: syz
[ 1751.346510][T27472] usb 10-1: Manufacturer: syz
[ 1751.360844][T27472] usb 10-1: SerialNumber: syz
[ 1751.397259][T27472] usb 10-1: config 0 descriptor??
[ 1751.699314][ T6941] syzkaller0: entered promiscuous mode
[ 1751.723651][T27472] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input172
[ 1751.724963][ T6941] syzkaller0: entered allmulticast mode
[ 1752.355779][    C0] imon 10-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1752.364080][T27472] imon:send_packet: packet tx failed (-71)
[ 1752.409697][T27472] imon 10-1:0.0: panel buttons/knobs setup failed
[ 1752.606947][T27472] rc_core: IR keymap rc-imon-pad not found
[ 1752.647098][T27472] Registered IR keymap rc-empty
[ 1752.652889][T27472] imon 10-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1752.665479][T27472] imon 10-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1752.675548][T27472] imon:send_packet: packet tx failed (-71)
[ 1752.697094][T27472] imon 10-1:0.0: remote input dev register failed
[ 1752.707720][T27472] imon 10-1:0.0: imon_init_intf0: rc device setup failed
[ 1752.734570][T27472] imon 10-1:0.0: unable to initialize intf0, err 0
[ 1752.741447][T27472] imon:imon_probe: failed to initialize context!
[ 1752.748730][T27472] imon 10-1:0.0: unable to register, err -19
[ 1752.771501][T27472] usb 10-1: USB disconnect, device number 24
[ 1756.017538][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1762.190760][ T7005] kvm: requested 181028 ns i8254 timer period limited to 200000 ns
[ 1762.220518][ T7005] kvm: requested 147504 ns i8254 timer period limited to 200000 ns
[ 1762.245307][ T7005] kvm: requested 187733 ns i8254 timer period limited to 200000 ns
[ 1762.264176][ T7005] kvm: requested 94704 ns i8254 timer period limited to 200000 ns
[ 1762.286233][ T7005] kvm: requested 16761 ns i8254 timer period limited to 200000 ns
[ 1762.298786][ T7005] kvm: requested 36038 ns i8254 timer period limited to 200000 ns
[ 1762.322755][ T7005] kvm: requested 170971 ns i8254 timer period limited to 200000 ns
[ 1762.468754][T27472] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1762.667929][T27472] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1762.677920][T27472] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1762.692296][T27472] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1762.707372][T27472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1762.716200][T27472] usb 3-1: Product: syz
[ 1762.735542][T27472] usb 3-1: Manufacturer: syz
[ 1762.755868][T27472] usb 3-1: SerialNumber: syz
[ 1762.766318][T27472] usb 3-1: config 0 descriptor??
[ 1762.789098][T27472] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1762.807974][T15440] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1762.857308][T27478] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1762.967232][T15440] usb 6-1: Using ep0 maxpacket: 16
[ 1762.988703][T15440] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1763.012457][T15440] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1763.037380][T27478] usb 10-1: Using ep0 maxpacket: 32
[ 1763.047805][T15440] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1763.060374][T27478] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1763.078668][T27478] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.086646][T15440] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1763.097632][T27478] usb 10-1: Product: syz
[ 1763.103908][T27478] usb 10-1: Manufacturer: syz
[ 1763.109810][T27478] usb 10-1: SerialNumber: syz
[ 1763.115368][T15440] usb 6-1: Product: syz
[ 1763.125376][T15440] usb 6-1: Manufacturer: syz
[ 1763.147194][T27478] usb 10-1: config 0 descriptor??
[ 1763.164171][T15440] usb 6-1: SerialNumber: syz
[ 1763.191233][T27478] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1763.234099][T15440] usb 6-1: 0:2 : does not exist
[ 1763.419133][T15440] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1763.774662][T15440] usb 6-1: USB disconnect, device number 30
[ 1763.998702][ T7034] udevd[7034]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1764.684477][T27472] gspca_sunplus: reg_r err -71
[ 1764.700794][T27472] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 1764.761315][T27472] usb 3-1: USB disconnect, device number 82
[ 1765.276064][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11160'.
[ 1765.526539][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11164'.
[ 1765.609488][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11164'.
[ 1765.677154][T27478] gspca_ov534_9: reg_w failed -71
[ 1765.828339][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11166'.
[ 1765.967031][T27478] gspca_ov534_9: Unknown sensor 0000
[ 1765.967131][T27478] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22
[ 1765.986002][T27478] usb 10-1: USB disconnect, device number 25
[ 1766.542481][ T7064] kvm: pic: non byte read
[ 1766.556252][ T7064] kvm: pic: non byte read
[ 1766.810688][ T9613] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1767.319204][ T9613] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1767.401669][ T7080] netlink: 'syz.4.11175': attribute type 1 has an invalid length.
[ 1767.623353][ T7084] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11175'.
[ 1767.785361][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1767.804697][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1767.823015][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1767.835083][ T7080] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1767.850964][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1767.867582][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1767.996728][ T7081] bond3: (slave veth5): Enslaving as an active interface with a down link
[ 1768.009196][ T7082] batman_adv: batadv0: Interface deactivated: dummy0
[ 1768.041035][ T7082] batman_adv: batadv0: Removing interface: dummy0
[ 1768.075427][ T7082] bond3: (slave dummy0): making interface the new active one
[ 1768.090869][ T7082] dummy0: entered promiscuous mode
[ 1768.100941][ T7082] bond3: (slave dummy0): Enslaving as an active interface with an up link
[ 1768.162004][ T7084] bond3: (slave dummy0): Releasing active interface
[ 1768.170857][ T7084] dummy0 (unregistering): left promiscuous mode
[ 1768.352414][ T9613] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1768.593696][ T9613] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1769.022092][ T9613] bridge_slave_1: left allmulticast mode
[ 1769.030011][ T9613] bridge_slave_1: left promiscuous mode
[ 1769.042818][ T9613] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1769.060673][ T9613] bridge_slave_0: left allmulticast mode
[ 1769.067034][ T9613] bridge_slave_0: left promiscuous mode
[ 1769.073048][ T9613] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1769.590601][ T9613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1769.602292][ T9613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1769.614854][ T9613] bond0 (unregistering): Released all slaves
[ 1769.634154][ T5286] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1769.780051][ T9613] tipc: Left network mode
[ 1769.781160][ T7087] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1769.792871][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1769.829352][ T7087] bridge_slave_0: entered allmulticast mode
[ 1769.837922][ T7087] bridge_slave_0: entered promiscuous mode
[ 1769.892145][ T7087] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1769.902153][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1769.910066][ T7087] bridge_slave_1: entered allmulticast mode
[ 1769.918117][ T7087] bridge_slave_1: entered promiscuous mode
[ 1769.975902][ T2231] Bluetooth: hci2: command tx timeout
[ 1769.995424][ T7087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1770.031222][ T7087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1770.080642][ T7087] team0: Port device team_slave_0 added
[ 1770.135132][ T9613] hsr_slave_0: left promiscuous mode
[ 1770.150654][ T9613] hsr_slave_1: left promiscuous mode
[ 1770.158740][ T9613] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1770.166253][ T9613] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1770.174835][ T9613] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1770.182948][ T9613] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1770.215733][ T9613] veth1_macvtap: left promiscuous mode
[ 1770.223464][ T9613] veth0_macvtap: left promiscuous mode
[ 1770.232694][ T9613] veth1_vlan: left promiscuous mode
[ 1770.238454][ T9613] veth0_vlan: left promiscuous mode
[ 1770.746053][ T9613] team0 (unregistering): Port device team_slave_1 removed
[ 1770.765402][ T9613] team0 (unregistering): Port device team_slave_0 removed
[ 1770.898748][ T7087] team0: Port device team_slave_1 added
[ 1770.910843][ T5286] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1770.972367][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1770.997078][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1771.023998][ T7087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1771.078238][ T7087] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1771.085579][ T7087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1771.113328][ T7087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1771.201767][ T7087] hsr_slave_0: entered promiscuous mode
[ 1771.209035][ T7087] hsr_slave_1: entered promiscuous mode
[ 1771.215716][ T7087] debugfs: 'hsr0' already exists in 'hsr'
[ 1771.222661][ T7087] Cannot create hsr debugfs directory
[ 1771.641215][ T7087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1771.795807][ T7087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1771.967684][ T7087] team0: Port device netdevsim1 removed
[ 1771.975662][ T7087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1771.999317][ T5286] 8021q: adding VLAN 0 to HW filter on device eth15
[ 1772.017650][ T5620] Bluetooth: hci2: command tx timeout
[ 1772.066285][ T7087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1772.367238][ T7087] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1772.378859][ T7087] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1772.387753][ T7087] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1772.404443][ T7087] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1772.413241][ T7087] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1772.424317][ T7087] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1772.434580][ T7087] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1772.447440][ T7087] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1772.614013][ T7087] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1772.663416][ T7087] 8021q: adding VLAN 0 to HW filter on device team0
[ 1772.681971][ T9617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1772.689429][ T9617] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1772.712000][ T9617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1772.719298][ T9617] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1772.767363][ T5286] 8021q: adding VLAN 0 to HW filter on device eth16
[ 1772.852202][ T7087] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1772.913155][ T7087] veth0_vlan: entered promiscuous mode
[ 1772.930418][ T7087] veth1_vlan: entered promiscuous mode
[ 1772.972983][ T7087] veth0_macvtap: entered promiscuous mode
[ 1772.994155][ T7087] veth1_macvtap: entered promiscuous mode
[ 1773.019524][ T7087] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1773.036643][ T7087] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1773.055300][ T3642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.075523][ T3642] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.091705][ T3642] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.101089][ T3642] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1773.364403][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1773.376802][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1773.419358][ T3642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1773.427592][ T3642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1773.557397][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11186'.
[ 1773.852856][T15441] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1774.059662][T15441] usb 6-1: Using ep0 maxpacket: 8
[ 1774.068765][T15441] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1774.097853][ T5620] Bluetooth: hci2: command tx timeout
[ 1774.111490][T15441] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40
[ 1774.121291][T15441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1774.129979][T15441] usb 6-1: Product: syz
[ 1774.148309][T15441] usb 6-1: Manufacturer: syz
[ 1774.158786][T15441] usb 6-1: SerialNumber: syz
[ 1776.177409][ T5620] Bluetooth: hci2: command tx timeout
[ 1779.685111][T15441] usb 6-1: invalid MIDI EP
[ 1779.692783][T15441] usb 6-1: snd-bcd2000: error during probing
[ 1779.754358][T15441] snd-bcd2000 6-1:1.1: probe with driver snd-bcd2000 failed with error -22
[ 1779.792116][T15441] usb 6-1: invalid MIDI EP
[ 1779.796677][T15441] usb 6-1: snd-bcd2000: error during probing
[ 1779.803630][T15441] snd-bcd2000 6-1:1.2: probe with driver snd-bcd2000 failed with error -22
[ 1783.138818][T15439] usb 6-1: USB disconnect, device number 31
[ 1784.623001][ T7226] syzkaller0: entered promiscuous mode
[ 1784.673524][ T7226] syzkaller0: entered allmulticast mode
[ 1786.112593][   T29] audit: type=1804 audit(1777345275.424:835): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.11192" name="/newroot/248/file1" dev="fuse" ino=1 res=1 errno=0
[ 1786.201270][   T29] audit: type=1804 audit(1777345275.424:836): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.11192" name="/newroot/248/file1" dev="fuse" ino=1 res=1 errno=0
[ 1786.640315][   T29] audit: type=1326 audit(1777345275.954:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7246 comm="syz.5.11195" exe="/root/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf708f01c code=0x0
[ 1786.707141][ T5627] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1786.799773][ T7251] netlink: 52 bytes leftover after parsing attributes in process `syz.5.11195'.
[ 1786.933455][ T5627] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1786.973046][ T5627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1786.987859][T27474] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1787.016538][ T5627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1787.060544][ T5627] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1787.100947][ T5627] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1787.122333][ T5627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1787.157128][T27474] usb 1-1: Using ep0 maxpacket: 16
[ 1787.165793][ T5627] usb 5-1: config 0 descriptor??
[ 1787.183533][T27474] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1787.197246][T27471] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1787.237088][T27474] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1787.259354][T27474] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1787.280494][T27474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1787.330998][T27474] usb 1-1: config 0 descriptor??
[ 1787.398055][T27471] usb 2-1: Using ep0 maxpacket: 32
[ 1787.418015][T27471] usb 2-1: config 0 has no interfaces?
[ 1787.433215][T27471] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1787.454028][T27471] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1787.489968][T27471] usb 2-1: config 0 descriptor??
[ 1787.633213][ T5627] plantronics 0003:047F:FFFF.00AB: ignoring exceeding usage max
[ 1787.675909][ T5627] plantronics 0003:047F:FFFF.00AB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1787.767711][ T5627] usb 2-1: USB disconnect, device number 119
[ 1787.832060][T27474] nzxt-smart2 0003:1E71:2009.00AC: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[ 1787.957027][T27491] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1788.117596][ T5627] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1788.133331][ T7271] kvm: pic: non byte read
[ 1788.141564][ T7271] kvm: pic: non byte read
[ 1788.146610][ T7271] kvm: pic: non byte read
[ 1788.156561][T27491] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1788.170185][ T7271] kvm: pic: non byte read
[ 1788.175049][ T7271] kvm: pic: non byte read
[ 1788.179577][ T7271] kvm: pic: non byte read
[ 1788.185145][T27491] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1788.198722][ T7271] kvm: pic: non byte read
[ 1788.203275][T27491] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1788.214402][ T7271] kvm: pic: non byte read
[ 1788.220722][ T7271] kvm: pic: non byte read
[ 1788.227404][T15439] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1788.237903][T27491] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.246325][ T7271] kvm: pic: non byte read
[ 1788.264166][ T7263] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1788.288956][T27491] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1788.298663][ T5627] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1788.326986][ T5627] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1788.368460][ T5627] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.396993][T15439] usb 2-1: Using ep0 maxpacket: 32
[ 1788.411105][T15439] usb 2-1: config 0 has no interfaces?
[ 1788.426143][T15439] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1788.512684][ T5627] usb 10-1: config 0 descriptor??
[ 1788.519617][T15439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.547134][T15439] usb 2-1: config 0 descriptor??
[ 1788.576246][ T5627] pwc: Askey VC010 type 2 USB webcam detected.
[ 1788.901840][T27495] usb 2-1: USB disconnect, device number 120
[ 1789.074422][ T5627] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1789.125732][T27472] usb 6-1: USB disconnect, device number 32
[ 1789.133874][T27474] usb 5-1: reset high-speed USB device number 125 using dummy_hcd
[ 1789.134655][ T5627] pwc: recv_control_msg error -32 req 02 val 2700
[ 1789.194392][ T5627] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1789.236525][ T5627] pwc: recv_control_msg error -32 req 04 val 1000
[ 1789.248813][ T5627] pwc: recv_control_msg error -32 req 04 val 1300
[ 1789.261936][ T5627] pwc: recv_control_msg error -32 req 04 val 1400
[ 1789.277734][ T5627] pwc: recv_control_msg error -32 req 02 val 2000
[ 1789.289295][ T5627] pwc: recv_control_msg error -32 req 02 val 2100
[ 1789.304723][ T5627] pwc: recv_control_msg error -32 req 04 val 1500
[ 1789.315347][ T5627] pwc: recv_control_msg error -32 req 02 val 2500
[ 1789.389059][T27474] usb 5-1: device descriptor read/64, error -32
[ 1789.533875][ T5627] pwc: recv_control_msg error -71 req 02 val 2600
[ 1789.565989][ T5627] pwc: recv_control_msg error -71 req 02 val 2900
[ 1789.580290][ T5627] pwc: recv_control_msg error -71 req 02 val 2800
[ 1789.592205][ T5627] pwc: recv_control_msg error -71 req 04 val 1100
[ 1789.615118][ T5627] pwc: recv_control_msg error -71 req 04 val 1200
[ 1789.636526][ T5627] pwc: Registered as video103.
[ 1789.666702][ T5627] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input174
[ 1789.669511][   T10] usb 1-1: USB disconnect, device number 127
[ 1789.729750][ T5627] usb 10-1: USB disconnect, device number 26
[ 1790.290519][T27471] usb 5-1: USB disconnect, device number 125
[ 1790.667179][ T5627] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1790.857006][ T5627] usb 6-1: Using ep0 maxpacket: 16
[ 1790.894604][ T5627] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1790.946789][ T5627] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1790.990735][ T5627] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1791.017998][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1791.037546][ T5627] usb 6-1: Product: syz
[ 1791.054605][ T5627] usb 6-1: Manufacturer: syz
[ 1791.077129][ T5627] usb 6-1: SerialNumber: syz
[ 1791.120014][ T5627] usb 6-1: config 0 descriptor??
[ 1791.456529][ T5627] usb 6-1: USB disconnect, device number 33
[ 1791.740068][ T7321] netlink: 52 bytes leftover after parsing attributes in process `syz.9.11208'.
[ 1791.800327][ T7322] netlink: 76 bytes leftover after parsing attributes in process `syz.9.11208'.
[ 1791.816573][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1791.830126][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1791.868038][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.874587][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.895137][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1791.902521][ T7322] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1791.911462][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1791.919504][ T7322] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1792.207236][T27472] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1792.369910][T27472] usb 5-1: config index 0 descriptor too short (expected 98, got 45)
[ 1792.383248][T27472] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1792.406196][T27472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1792.423569][T27472] usb 5-1: Product: syz
[ 1792.441100][T27472] usb 5-1: Manufacturer: syz
[ 1792.450471][T27472] usb 5-1: SerialNumber: syz
[ 1792.487220][   T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1792.503208][T27495] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1792.672881][T27495] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1792.690550][   T10] usb 6-1: Using ep0 maxpacket: 8
[ 1792.701619][T27495] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1792.714471][   T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1792.726523][T27495] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1792.747780][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1792.756081][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1792.761587][   T10] usb 6-1: Product: syz
[ 1792.770722][ T7340] syzkaller0: entered promiscuous mode
[ 1792.779532][ T7340] syzkaller0: entered allmulticast mode
[ 1792.783462][T27495] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1792.785831][   T10] usb 6-1: Manufacturer: syz
[ 1792.811202][   T10] usb 6-1: SerialNumber: syz
[ 1792.812313][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1792.839926][   T10] usb 6-1: config 0 descriptor??
[ 1792.858264][ T7334] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[ 1792.917792][T27495] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[ 1793.092086][   T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1793.258386][ T7343] kvm: requested 18438 ns i8254 timer period limited to 200000 ns
[ 1793.328454][ T7343] kvm: requested 72914 ns i8254 timer period limited to 200000 ns
[ 1793.337564][ T7343] kvm: requested 111466 ns i8254 timer period limited to 200000 ns
[ 1793.349150][ T7343] kvm: requested 198628 ns i8254 timer period limited to 200000 ns
[ 1793.354262][ T7349] netlink: 'syz.1.11214': attribute type 1 has an invalid length.
[ 1793.363499][ T7343] kvm: requested 59504 ns i8254 timer period limited to 200000 ns
[ 1793.383058][ T7343] kvm: requested 80457 ns i8254 timer period limited to 200000 ns
[ 1793.391804][T27491] usb 10-1: USB disconnect, device number 27
[ 1793.405517][ T7343] kvm: requested 79619 ns i8254 timer period limited to 200000 ns
[ 1793.421365][ T7343] kvm: requested 16761 ns i8254 timer period limited to 200000 ns
[ 1793.538600][ T7352] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11214'.
[ 1793.553180][ T7350] team0: Port device veth3 added
[ 1793.620857][ T7349] team0: Port device dummy0 added
[ 1793.657594][ T7352] team0: Port device dummy0 removed
[ 1793.908196][T27472] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[ 1793.928021][T27472] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1794.069059][T27472] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1794.119855][T27472] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[ 1794.229412][T27472] usb 5-1: USB disconnect, device number 126
[ 1794.573828][   T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1794.686589][   T10] usb 6-1: USB disconnect, device number 34
[ 1794.727574][T27474] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1794.951299][T27474] usb 10-1: Using ep0 maxpacket: 32
[ 1795.004328][T27474] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1795.037213][T27474] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1795.059160][T27474] usb 10-1: config 0 descriptor??
[ 1795.099168][T27474] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1795.475801][   T29] audit: type=1804 audit(1777345284.784:838): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.11220" name="/newroot/371/file1" dev="fuse" ino=1 res=1 errno=0
[ 1795.553247][   T29] audit: type=1804 audit(1777345284.784:839): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11220" name="/newroot/371/file1" dev="fuse" ino=1 res=1 errno=0
[ 1795.838202][   T29] audit: type=1804 audit(1777345285.134:840): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.11221" name="/newroot/1752/file0" dev="fuse" ino=1 res=1 errno=0
[ 1796.400247][T27491] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1796.577775][T27491] usb 6-1: Using ep0 maxpacket: 32
[ 1796.585890][T27491] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[ 1796.594656][T15440] usb 5-1: new full-speed USB device number 127 using dummy_hcd
[ 1796.605246][T27491] usb 6-1: config 0 has no interface number 0
[ 1796.615561][T27491] usb 6-1: config 0 interface 184 has no altsetting 0
[ 1796.645069][T27491] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1796.665016][T27491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1796.674965][T27491] usb 6-1: Product: syz
[ 1796.685981][T27491] usb 6-1: Manufacturer: syz
[ 1796.693208][T27491] usb 6-1: SerialNumber: syz
[ 1796.704211][T27491] usb 6-1: config 0 descriptor??
[ 1796.764003][T15440] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1796.790120][T15440] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1796.804563][T15440] usb 5-1: Product: syz
[ 1796.811140][T15440] usb 5-1: Manufacturer: syz
[ 1796.821243][T15440] usb 5-1: SerialNumber: syz
[ 1796.833149][T15440] usb 5-1: config 0 descriptor??
[ 1797.103510][T15440] usb 5-1: USB disconnect, device number 127
[ 1797.343144][T27491] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1797.357867][T27491] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1797.771742][T27474] gspca_vc032x: reg_r err -71
[ 1797.782235][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.793890][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.799918][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.806078][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.812110][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.819222][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.825332][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.831488][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.837481][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.843096][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.853333][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.869094][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.884882][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.908885][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.915475][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.921641][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.927963][T27474] gspca_vc032x: I2c Bus Busy Wait 00
[ 1797.934040][T27474] gspca_vc032x: Unknown sensor...
[ 1797.942787][T27474] vc032x 10-1:0.0: probe with driver vc032x failed with error -22
[ 1797.958572][T27474] usb 10-1: USB disconnect, device number 28
[ 1798.618812][   T29] audit: type=1804 audit(1777345287.934:841): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.11233" name="/newroot/154/file1" dev="fuse" ino=1 res=1 errno=0
[ 1798.735504][   T29] audit: type=1804 audit(1777345287.964:842): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.11233" name="/newroot/154/file1" dev="fuse" ino=1 res=1 errno=0
[ 1798.849334][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11235'.
[ 1798.899238][ T7411] netlink: 'syz.1.11232': attribute type 4 has an invalid length.
[ 1798.997418][ T7415] netlink: 'syz.9.11236': attribute type 1 has an invalid length.
[ 1799.203062][ T7415] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1799.227385][T27491] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71
[ 1799.256775][T27491] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71
[ 1799.270257][T27491] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[ 1799.285313][T27491] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1799.325107][T27491] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[ 1799.386457][T27491] usb 6-1: USB disconnect, device number 35
[ 1799.402642][ T7416] bond1: (slave veth3): Enslaving as an active interface with a down link
[ 1799.484872][ T7418] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1799.543273][ T7418] bond1: (slave batadv1): making interface the new active one
[ 1799.582321][ T7418] batadv1: entered promiscuous mode
[ 1799.607620][ T7418] bond1: (slave batadv1): Enslaving as an active interface with an up link
[ 1799.717780][ T7419] bond1 (unregistering): (slave veth3): Releasing active interface
[ 1799.754861][ T7419] bond1 (unregistering): (slave batadv1): Releasing active interface
[ 1799.786696][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11238'.
[ 1799.815371][ T7419] bond1 (unregistering): Released all slaves
[ 1800.084718][ T7426] team0: Port device team_slave_0 removed
[ 1801.166994][T27474] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1801.337282][T27474] usb 2-1: Using ep0 maxpacket: 32
[ 1801.376820][T27474] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1801.412464][T27474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1801.451006][T27474] usb 2-1: Product: syz
[ 1801.474738][T27474] usb 2-1: Manufacturer: syz
[ 1801.511266][T27474] usb 2-1: SerialNumber: syz
[ 1801.573952][T27474] usb 2-1: config 0 descriptor??
[ 1801.615201][T27474] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1801.725805][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11247'.
[ 1802.164270][   T29] audit: type=1804 audit(1777345291.474:843): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.11248" name="/newroot/1758/file1" dev="fuse" ino=1 res=1 errno=0
[ 1802.262937][   T29] audit: type=1804 audit(1777345291.534:844): pid=7459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.11248" name="/newroot/1758/file1" dev="fuse" ino=1 res=1 errno=0
[ 1802.806979][T27491] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1802.969980][T27491] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1803.003751][T27491] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1803.023863][T27491] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1803.048769][T27491] usb 6-1: config 0 descriptor??
[ 1803.418632][T27476] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1803.427393][ T7467] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1803.487756][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1803.683595][ T7467] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1803.760565][ T7467] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1803.813973][ T7467] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1803.970426][ T3642] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1804.054238][T27474] gspca_ov534_9: reg_r err -71
[ 1804.071998][ T1324] bond8: (slave veth7): link status definitely up, 10000 Mbps full duplex
[ 1804.227653][   T10] usb 6-1: USB disconnect, device number 36
[ 1804.240173][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1804.297052][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1804.357869][T27474] gspca_ov534_9: Unknown sensor 0000
[ 1804.358117][T27474] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[ 1804.434012][T27474] usb 2-1: USB disconnect, device number 121
[ 1804.448870][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1804.566275][T27763] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1804.701692][ T3642] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1804.721055][ T3642] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1804.837260][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1804.898639][ T3642] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1804.938677][ T3642] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1804.970050][ T7488] syzkaller0: entered promiscuous mode
[ 1804.991021][ T7488] syzkaller0: entered allmulticast mode
[ 1805.219908][ T7491] syzkaller0: entered promiscuous mode
[ 1805.226279][ T7491] syzkaller0: entered allmulticast mode
[ 1805.264954][ T7493] syzkaller0: entered promiscuous mode
[ 1805.276364][ T7493] syzkaller0: entered allmulticast mode
[ 1805.805154][ T7510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1805.860710][ T7510] syzkaller0: entered promiscuous mode
[ 1805.898821][ T7510] syzkaller0: entered allmulticast mode
[ 1806.094729][ T7513] gtp0: entered promiscuous mode
[ 1806.126266][ T7513] gtp0: entered allmulticast mode
[ 1806.169575][ T7510] tipc: Resetting bearer <eth:syzkaller0>
[ 1806.220265][ T7509] tipc: Resetting bearer <eth:syzkaller0>
[ 1806.397859][ T7509] tipc: Disabling bearer <eth:syzkaller0>
[ 1807.004229][   T29] audit: type=1326 audit(1777345296.314:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.11272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7fc00000
[ 1807.100184][   T29] audit: type=1326 audit(1777345296.344:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.11272" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf701f01c code=0x7fc00000
[ 1808.631519][ T7554] syzkaller0: entered promiscuous mode
[ 1808.651487][ T7554] syzkaller0: entered allmulticast mode
[ 1809.007575][ T3642] net_ratelimit: 101 callbacks suppressed
[ 1809.007598][ T3642] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1809.077209][ T3642] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1809.100269][ T7561] syzkaller0: entered promiscuous mode
[ 1809.119704][ T7561] syzkaller0: entered allmulticast mode
[ 1809.150789][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1809.207541][ T1043] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1809.247048][ T1043] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1809.320116][ T9605] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1809.358512][ T9605] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1809.387184][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1809.437864][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1809.466353][T27763] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1810.452653][   T29] audit: type=1804 audit(1777345299.764:847): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.11293" name="/newroot/275/file1" dev="fuse" ino=1 res=1 errno=0
[ 1811.009742][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11294'.
[ 1811.621309][ T7604] syzkaller0: entered promiscuous mode
[ 1811.642355][ T7604] syzkaller0: entered allmulticast mode
[ 1812.892305][ T7633] netlink: 'syz.1.11306': attribute type 1 has an invalid length.
[ 1813.018165][ T7633] bond1 (unregistering): Released all slaves
[ 1814.041205][ T9611] net_ratelimit: 89 callbacks suppressed
[ 1814.041230][ T9611] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1814.337224][ T9611] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1814.631795][ T3642] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1814.725015][ T3642] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1814.892614][ T7653] syzkaller0: entered promiscuous mode
[ 1814.918086][ T3642] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1814.918975][ T7653] syzkaller0: entered allmulticast mode
[ 1815.007464][T27474] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1815.025275][ T3642] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1815.197270][ T1043] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1815.197759][T27474] usb 1-1: Using ep0 maxpacket: 8
[ 1815.243692][T27474] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1815.259754][T27474] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1815.275165][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1815.308978][T27474] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1815.329967][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1815.363725][T27474] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1815.381849][ T9611] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1815.420334][T27474] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1815.456110][T27474] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1815.501164][T27474] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1815.547418][T27474] usb 1-1: config 168 interface 0 has no altsetting 0
[ 1815.593915][T27474] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1815.624261][T27474] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1815.695788][T27474] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1815.784653][T27474] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1815.844623][T27474] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1815.887441][T27474] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1815.932854][T27474] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1816.062676][T27474] usb 1-1: config 168 interface 0 has no altsetting 0
[ 1816.105392][T27474] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1816.126019][T27474] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1816.148224][T27472] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1816.175777][T27474] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1816.208650][T27474] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1816.239901][T27474] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1816.270569][T27474] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1816.320551][ T7666] netlink: 'syz.5.11318': attribute type 1 has an invalid length.
[ 1816.320853][T27474] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1816.343142][T27472] usb 5-1: Using ep0 maxpacket: 32
[ 1816.373718][T27472] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1816.401349][T27472] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1816.414390][T27474] usb 1-1: config 168 interface 0 has no altsetting 0
[ 1816.450654][ T7666] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1816.480595][T27472] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1816.502148][T27474] usb 1-1: string descriptor 0 read error: -22
[ 1816.532894][T27474] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1816.562517][T27472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1816.594890][T27474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1816.630397][ T7669] bond14: (slave veth15): Enslaving as an active interface with a down link
[ 1816.641032][T27472] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1816.665800][ T7666] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11318'.
[ 1816.686572][T27472] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1816.742891][T27474] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1816.771829][T27472] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1816.806460][T27472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1816.849191][T27472] usb 5-1: config 0 descriptor??
[ 1817.069945][T27472] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1817.182242][ T7682] syzkaller0: entered promiscuous mode
[ 1817.197813][ T7682] syzkaller0: entered allmulticast mode
[ 1817.230536][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1817.271450][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1817.305661][T27472] usb 5-1: USB disconnect, device number 2
[ 1817.363925][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1817.384543][T27472] usblp1: removed
[ 1817.419906][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1817.811481][ T7687] syzkaller0: entered promiscuous mode
[ 1817.842599][ T7687] syzkaller0: entered allmulticast mode
[ 1817.979457][T27472] usb 1-1: USB disconnect, device number 2
[ 1818.001871][ T7695] netlink: 'syz.4.11326': attribute type 1 has an invalid length.
[ 1818.014627][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11325'.
[ 1818.095188][ T7695] bond4: entered promiscuous mode
[ 1818.102532][ T7695] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1818.230255][ T7701] syzkaller0: entered promiscuous mode
[ 1818.253282][ T7701] syzkaller0: entered allmulticast mode
[ 1818.304028][ T7695] bond4: (slave bridge2): making interface the new active one
[ 1818.336484][ T7695] bridge2: entered promiscuous mode
[ 1818.362416][ T7695] bond4: (slave bridge2): Enslaving as an active interface with an up link
[ 1819.100797][ T3642] net_ratelimit: 121 callbacks suppressed
[ 1819.100928][ T3642] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1819.123513][ T3642] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1819.257635][ T3642] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1819.275288][ T3642] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1819.314755][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11331'.
[ 1819.327202][ T7715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1819.411980][ T7715] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1819.417632][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1819.428258][T27491] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1819.478613][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1819.518563][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1819.530674][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1819.607025][T27491] usb 10-1: Using ep0 maxpacket: 16
[ 1819.637352][T27491] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1819.672498][T27491] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1819.677595][ T3642] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1819.719852][ T3642] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1819.768574][T27491] usb 10-1: config 0 descriptor??
[ 1819.820302][T27491] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1819.873360][ T7718] syzkaller0: entered promiscuous mode
[ 1819.880621][ T7718] syzkaller0: entered allmulticast mode
[ 1820.712065][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11336'.
[ 1821.004660][ T7732] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11338'.
[ 1821.107109][T15440] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1821.270469][T15440] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1821.292874][T15440] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1821.318792][T15440] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1821.347433][T15440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1821.375632][ T7730] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1821.396500][T15440] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1822.123893][T15440] usb 1-1: USB disconnect, device number 3
[ 1822.491461][T27491] gspca_sonixj: reg_w1 err -71
[ 1822.505501][T27491] sonixj 10-1:0.0: probe with driver sonixj failed with error -71
[ 1822.554855][T27491] usb 10-1: USB disconnect, device number 29
[ 1823.121095][T27472] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1823.293571][T27472] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1823.321038][T27472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1823.334520][T27472] usb 6-1: Product: syz
[ 1823.341918][T27472] usb 6-1: Manufacturer: syz
[ 1823.349310][T27472] usb 6-1: SerialNumber: syz
[ 1823.786978][T27472] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1824.137005][ T1324] net_ratelimit: 93 callbacks suppressed
[ 1824.137031][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1824.175019][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1824.297401][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1824.315307][T27763] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1824.437480][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1824.465204][ T9613] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1824.577265][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1824.586000][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1824.707357][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1824.719987][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1824.737623][T27491] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1824.907899][T27491] usb 5-1: Using ep0 maxpacket: 16
[ 1824.920426][T27491] usb 5-1: config 251 has an invalid interface number: 202 but max is 0
[ 1824.939783][T27491] usb 5-1: config 251 has no interface number 0
[ 1824.948100][T27491] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1824.960430][T27491] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[ 1824.973437][T27491] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[ 1824.990048][T27491] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 1825.002593][T27491] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[ 1825.015384][T27491] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1825.033335][T27491] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1825.045427][T27491] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1825.069399][T27491] usb 5-1: config 251 interface 202 has no altsetting 0
[ 1825.082775][T27491] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[ 1825.095074][T27491] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1825.109441][T27491] usb 5-1: Product: syz
[ 1825.114961][T27491] usb 5-1: SerialNumber: syz
[ 1825.324800][ T7778] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1825.386532][T27491] cxacru 5-1:251.202: cxacru_bind: interface has incorrect endpoints
[ 1825.401778][T27491] cxacru 5-1:251.202: usbatm_usb_probe: bind failed: -19!
[ 1825.423105][T27491] usb 5-1: USB disconnect, device number 3
[ 1825.684328][T27472] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1825.714039][T27472] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1825.726633][T27472] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[ 1825.744902][T27472] usb 6-1: USB disconnect, device number 37
[ 1826.909796][ T7801] syzkaller0: entered promiscuous mode
[ 1826.934319][ T7799] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1826.962653][ T7801] syzkaller0: entered allmulticast mode
[ 1827.456270][ T7807] syzkaller0: entered promiscuous mode
[ 1827.462567][ T7807] syzkaller0: entered allmulticast mode
[ 1827.585209][   T29] audit: type=1800 audit(1777345316.894:848): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.11366" name="nullb0" dev="devtmpfs" ino=3222 res=0 errno=0
[ 1828.457498][ T7830] syzkaller0: entered promiscuous mode
[ 1828.511297][ T7830] syzkaller0: entered allmulticast mode
[ 1829.230521][ T9613] net_ratelimit: 100 callbacks suppressed
[ 1829.230539][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1829.331592][ T9613] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1829.507369][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1829.568529][T27763] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1829.737736][ T1043] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1829.794765][ T1043] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1829.958414][ T1043] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1829.996228][ T1043] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1830.166710][ T9601] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1830.232512][ T9601] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1831.290554][ T7867] netlink: 'syz.0.11378': attribute type 1 has an invalid length.
[ 1831.361735][ T7870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11378'.
[ 1831.522732][ T7867] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1831.676289][ T7873] bond4: (slave dummy0): making interface the new active one
[ 1831.733253][ T7873] bond4: (slave dummy0): Enslaving as an active interface with an up link
[ 1831.904085][ T7870] bond4: entered promiscuous mode
[ 1831.966561][ T7870] dummy0: entered promiscuous mode
[ 1832.036084][ T7870] bond4: entered allmulticast mode
[ 1832.115644][ T7870] dummy0: entered allmulticast mode
[ 1832.479210][ T7883] syzkaller0: entered promiscuous mode
[ 1832.512882][ T7883] syzkaller0: entered allmulticast mode
[ 1832.837426][ T7891] syzkaller0: entered promiscuous mode
[ 1832.849686][T27471] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1832.882552][ T7891] syzkaller0: entered allmulticast mode
[ 1833.009022][T27472] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[ 1833.057127][T27471] usb 1-1: Using ep0 maxpacket: 16
[ 1833.072850][T27471] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[ 1833.088073][T27471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1833.101559][T27471] usb 1-1: Product: syz
[ 1833.111030][T27471] usb 1-1: Manufacturer: syz
[ 1833.118464][T27471] usb 1-1: SerialNumber: syz
[ 1833.135051][T27471] usb 1-1: config 0 descriptor??
[ 1833.153206][T27471] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[ 1833.180081][T27471] usb 1-1: Detected FT-X
[ 1833.350965][T27471] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1833.442280][T27472] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1833.487905][T27472] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1833.508798][ T7898] syzkaller0: entered promiscuous mode
[ 1833.515165][T27472] usb 5-1: can't read configurations, error -71
[ 1833.523379][ T7898] syzkaller0: entered allmulticast mode
[ 1833.796240][T27471] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1834.004203][T27491] usb 1-1: USB disconnect, device number 4
[ 1834.033921][T27491] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1834.078192][T27491] ftdi_sio 1-1:0.0: device disconnected
[ 1834.165221][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11390'.
[ 1834.320054][ T9613] net_ratelimit: 107 callbacks suppressed
[ 1834.320083][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1834.364019][ T9613] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1834.498183][ T9611] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1834.509950][ T9611] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1834.637369][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1834.679046][T27763] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1834.859612][ T9611] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1834.931943][ T9611] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1835.128873][ T3643] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1835.155308][ T7924] bridge0: port 3(macvlan2) entered blocking state
[ 1835.201741][ T7924] bridge0: port 3(macvlan2) entered disabled state
[ 1835.227818][ T3643] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1835.246693][ T7924] macvlan2: entered allmulticast mode
[ 1835.276442][ T7924] ip6gretap0: entered allmulticast mode
[ 1835.328179][T27474] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1835.337828][ T7924] macvlan2: entered promiscuous mode
[ 1835.376825][ T7924] bridge0: port 3(macvlan2) entered blocking state
[ 1835.384098][ T7924] bridge0: port 3(macvlan2) entered forwarding state
[ 1835.586991][T27474] usb 2-1: Using ep0 maxpacket: 32
[ 1835.613883][ T7932] syzkaller0: entered promiscuous mode
[ 1835.639098][T27474] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1835.656182][ T7932] syzkaller0: entered allmulticast mode
[ 1835.731675][T27474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1835.792517][T27474] usb 2-1: config 0 descriptor??
[ 1835.928920][ T7934] binder: BINDER_SET_CONTEXT_MGR already set
[ 1835.960854][ T7934] binder: 7933:7934 ioctl 4018620d 80004a80 returned -16
[ 1836.687456][T27474] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[ 1837.568880][T27474] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1837.616211][T27474] dib0700: firmware download failed at 7 with -22
[ 1837.664718][T27474] usb 2-1: USB disconnect, device number 122
[ 1838.107260][T27474] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1838.332611][T27474] usb 2-1: Using ep0 maxpacket: 8
[ 1838.383293][T27474] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1838.432465][T27474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1838.469328][T27474] usb 2-1: Product: syz
[ 1838.482856][T27474] usb 2-1: Manufacturer: syz
[ 1838.512756][T27474] usb 2-1: SerialNumber: syz
[ 1838.547868][T27474] usb 2-1: config 0 descriptor??
[ 1838.589875][T27474] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1839.040206][ T7966] netlink: 'syz.0.11403': attribute type 10 has an invalid length.
[ 1839.248607][ T7971] netlink: 'syz.9.11406': attribute type 2 has an invalid length.
[ 1839.281003][ T7971] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11406'.
[ 1839.414991][ T7973] IPVS: length: 199 != 272630600
[ 1839.429278][ T9611] net_ratelimit: 88 callbacks suppressed
[ 1839.429303][ T9611] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1839.485625][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1839.512244][ T9611] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1839.570446][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1839.655995][ T7948] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1839.670893][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1839.741648][T27474] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110)
[ 1839.768137][ T3643] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1839.776017][T27474] sq905 2-1:0.0: probe with driver sq905 failed with error -110
[ 1839.841718][T27474] usb 2-1: USB disconnect, device number 123
[ 1839.933202][ T3643] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1840.103641][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1840.186756][ T9613] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1840.401434][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1840.472766][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1840.507503][T27474] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1840.629215][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1840.707584][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1840.729472][T27474] usb 6-1: config 0 has no interfaces?
[ 1840.766679][T27474] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1840.828585][T27474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1840.897382][T27474] usb 6-1: Product: syz
[ 1840.925685][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1840.947452][T27474] usb 6-1: Manufacturer: syz
[ 1840.968758][T27474] usb 6-1: SerialNumber: syz
[ 1840.985608][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1841.006085][T27474] usb 6-1: config 0 descriptor??
[ 1841.032895][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1841.101299][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1841.140139][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1841.188148][   T10] usb 1-1: config 0 descriptor??
[ 1841.319907][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1841.365431][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1841.467097][ T7980] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[ 1841.669223][   T10] plantronics 0003:047F:FFFF.00AD: reserved main item tag 0xd
[ 1841.699148][ T7989] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11413'.
[ 1841.776005][   T10] plantronics 0003:047F:FFFF.00AD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1841.880780][ T5627] usb 6-1: USB disconnect, device number 38
[ 1841.993040][   T10] usb 1-1: USB disconnect, device number 5
[ 1842.066464][ T7990] fido_id[7990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1842.158093][ T7992] kvm: kvm [7991]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x600000000ca
[ 1842.233088][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11415'.
[ 1842.242373][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11415'.
[ 1842.413898][ T8000] syzkaller0: entered promiscuous mode
[ 1842.420891][ T8000] syzkaller0: entered allmulticast mode
[ 1842.777292][ T5627] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1842.797249][T27491] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1842.942151][ T5627] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1842.953215][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1842.962020][ T5627] usb 6-1: Product: syz
[ 1842.968190][ T5627] usb 6-1: Manufacturer: syz
[ 1842.973565][T27491] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1842.987624][ T5627] usb 6-1: SerialNumber: syz
[ 1842.999448][T27491] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1843.012317][T27491] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1843.023056][ T5627] usb 6-1: config 0 descriptor??
[ 1843.044123][T27491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1843.064037][ T8004] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1843.091034][T27491] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1843.669784][ T5627] usb 6-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2)
[ 1843.901174][ T5627] usb 6-1: failed to fetch extended address, random address set
[ 1843.960801][T15439] usb 2-1: USB disconnect, device number 124
[ 1844.028941][ T5627] usb 6-1: USB disconnect, device number 39
[ 1844.165272][ T8022] syzkaller0: entered promiscuous mode
[ 1844.197147][ T8022] syzkaller0: entered allmulticast mode
[ 1844.448620][ T9601] net_ratelimit: 84 callbacks suppressed
[ 1844.448646][ T9601] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1844.497981][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1844.527048][ T3643] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1844.588391][ T9601] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1844.639048][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1844.709562][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1844.748294][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1844.777504][ T9605] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1844.792204][ T9605] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1844.912651][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1845.097752][ T8041] picdev_read: 1374 callbacks suppressed
[ 1845.097776][ T8041] kvm: pic: non byte read
[ 1845.133215][ T8041] kvm: pic: non byte read
[ 1845.144924][ T8041] kvm: pic: non byte read
[ 1845.164200][ T8041] kvm: pic: non byte read
[ 1845.178166][ T8041] kvm: pic: non byte read
[ 1845.182917][ T8041] kvm: pic: non byte read
[ 1845.193880][ T8041] kvm: pic: non byte read
[ 1845.200935][ T8041] kvm: pic: non byte read
[ 1845.205723][ T8041] kvm: pic: non byte read
[ 1845.224866][ T8041] kvm: pic: non byte read
[ 1845.388863][T15439] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1845.551580][T15439] usb 6-1: Using ep0 maxpacket: 8
[ 1845.570980][T15439] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1845.602217][T15439] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1845.627224][T15439] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1845.661692][T15439] usb 6-1: config 0 descriptor??
[ 1845.686006][T15439] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1846.521033][T15439] gspca_vc032x: reg_w err -71
[ 1846.531303][T15439] vc032x 6-1:0.0: probe with driver vc032x failed with error -71
[ 1846.586012][T15439] usb 6-1: USB disconnect, device number 40
[ 1847.347414][T15439] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1847.490742][ T8076] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1847.538048][T15439] usb 2-1: Using ep0 maxpacket: 16
[ 1847.567881][T15439] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1847.602921][T15439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1847.660567][T15439] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1847.703262][T15439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1847.735294][T15439] usb 2-1: Product: syz
[ 1847.760994][T15439] usb 2-1: Manufacturer: syz
[ 1847.783243][T15439] usb 2-1: SerialNumber: syz
[ 1847.797103][T15440] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1847.826030][T15439] usb 2-1: config 0 descriptor??
[ 1847.853902][T15439] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1847.896566][T15439] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 1847.914517][ T8078] syzkaller0: entered promiscuous mode
[ 1847.944659][ T8078] syzkaller0: entered allmulticast mode
[ 1847.980634][T15440] usb 6-1: Using ep0 maxpacket: 32
[ 1847.999894][ T8078] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1848.025144][T15440] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1848.065835][ T8077] tipc: Resetting bearer <eth:syzkaller0>
[ 1848.078765][T15440] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1848.123129][T15440] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1848.235674][T15440] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1848.283317][T15440] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1848.308791][ T8077] tipc: Disabling bearer <eth:syzkaller0>
[ 1848.328868][T15440] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1848.439679][T15440] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1848.469875][T15440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1848.508698][T15439] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1848.516417][T15439] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[ 1848.532265][T15440] usb 6-1: config 0 descriptor??
[ 1848.772991][T15440] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1849.079480][    C1] usblp0: nonzero read bulk status received: -71
[ 1849.080957][   T10] usb 6-1: USB disconnect, device number 41
[ 1849.117662][ T8086] syzkaller0: entered promiscuous mode
[ 1849.142609][ T8086] syzkaller0: entered allmulticast mode
[ 1849.152354][T15439] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[ 1849.163128][ T8076] usblp0: error -71 reading from printer
[ 1849.224105][   T10] usblp0: removed
[ 1849.389731][ T8090] syzkaller0: entered promiscuous mode
[ 1849.396070][ T8090] syzkaller0: entered allmulticast mode
[ 1849.500001][ T9611] net_ratelimit: 94 callbacks suppressed
[ 1849.500023][ T9611] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1849.526666][ T9611] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1849.637507][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1849.647913][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1849.773128][ T3643] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1849.817049][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1849.840287][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1849.889528][ T8093] syzkaller0: entered promiscuous mode
[ 1849.904691][ T8093] syzkaller0: entered allmulticast mode
[ 1849.977105][ T9605] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1849.985255][T15439] em28xx 2-1:0.0: couldn't setup AC97 register 4
[ 1850.001117][T15439] em28xx 2-1:0.0: couldn't setup AC97 register 6
[ 1850.027885][T15439] em28xx 2-1:0.0: couldn't setup AC97 register 54
[ 1850.030987][ T9601] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1850.064487][T15439] em28xx 2-1:0.0: couldn't setup AC97 register 56
[ 1850.109999][T15439] usb 2-1: USB disconnect, device number 125
[ 1850.138960][ T9601] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1850.337118][   T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1850.501941][   T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1850.524288][   T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1850.560133][   T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1850.585346][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1850.614911][ T8099] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1850.641421][   T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1851.017003][ T8108] IPVS: length: 199 != 272630600
[ 1851.159482][   T10] usb 6-1: USB disconnect, device number 42
[ 1851.820707][ T8120] netlink: 'syz.1.11453': attribute type 2 has an invalid length.
[ 1851.855966][ T8120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11453'.
[ 1852.772275][ T8135] syzkaller0: entered promiscuous mode
[ 1852.793115][ T8135] syzkaller0: entered allmulticast mode
[ 1852.997012][T27472] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1853.157055][T27472] usb 6-1: Using ep0 maxpacket: 32
[ 1853.176417][T27472] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1853.227611][T27472] usb 6-1: config 0 has no interfaces?
[ 1853.264802][T27472] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1853.305102][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.311897][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.363129][T27472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1853.446261][T27472] usb 6-1: config 0 descriptor??
[ 1853.936537][T27472] usb 6-1: USB disconnect, device number 43
[ 1854.207480][T27491] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1854.380458][T27491] usb 5-1: Using ep0 maxpacket: 8
[ 1854.392540][T27491] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1854.408337][T27491] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1854.433086][T27491] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1854.445747][T27491] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1854.460034][T27491] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1854.481952][T27491] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1854.500162][T27491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1854.518779][ T9605] net_ratelimit: 87 callbacks suppressed
[ 1854.518801][ T9605] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1854.556953][T15440] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1854.572340][ T9605] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1854.718711][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1854.743907][T15440] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1854.769923][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1854.779512][T27491] usb 5-1: usb_control_msg returned -32
[ 1854.787458][T15440] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1854.799419][T27491] usbtmc 5-1:16.0: can't read capabilities
[ 1854.805444][T15440] usb 10-1: Product: syz
[ 1854.826076][T15440] usb 10-1: Manufacturer: syz
[ 1854.833510][T15440] usb 10-1: SerialNumber: syz
[ 1854.908068][T27763] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1854.920046][T27763] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1855.038463][ T1324] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1855.047666][T27491] usb 5-1: USB disconnect, device number 6
[ 1855.093743][ T1324] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1855.221753][ T9605] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1855.241392][ T9605] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1855.292757][ T8164] syzkaller0: entered promiscuous mode
[ 1855.313438][T15440] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1855.320894][ T8164] syzkaller0: entered allmulticast mode
[ 1855.571533][ T8173] syzkaller0: entered promiscuous mode
[ 1855.578256][ T8173] syzkaller0: entered allmulticast mode
[ 1855.852479][ T8178] syzkaller0: entered promiscuous mode
[ 1855.858819][ T8178] syzkaller0: entered allmulticast mode
[ 1855.976984][   T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1856.025025][ T8180] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1856.180213][   T10] usb 6-1: config 0 has no interfaces?
[ 1856.189169][   T10] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1856.220033][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1856.240188][   T10] usb 6-1: Product: syz
[ 1856.249679][   T10] usb 6-1: Manufacturer: syz
[ 1856.270070][   T10] usb 6-1: SerialNumber: syz
[ 1856.284982][   T10] usb 6-1: config 0 descriptor??
[ 1856.340749][ T8189] binder: 8188:8189 ioctl c0306201 80000680 returned -14
[ 1856.666645][ T8175] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1856.679438][ T8175] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1856.693841][ T8175] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1856.712971][ T8175] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1856.740747][T27491] usb 6-1: USB disconnect, device number 44
[ 1856.747009][T27472] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1856.937235][T27472] usb 1-1: Using ep0 maxpacket: 32
[ 1856.950796][T27472] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1856.967014][T27472] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1856.997286][T27472] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1857.015362][T27472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1857.037087][T27472] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1857.059035][T27472] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1857.076218][T27472] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1857.086677][T27472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1857.102536][T27472] usb 1-1: config 0 descriptor??
[ 1857.352610][T27472] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1857.400366][T15440] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[ 1857.436745][T15440] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1857.479973][T15440] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1857.518725][T15440] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[ 1857.585086][T15440] usb 10-1: USB disconnect, device number 30
[ 1857.651770][    C0] usblp0: nonzero read bulk status received: -71
[ 1857.659708][   T10] usb 1-1: USB disconnect, device number 6
[ 1857.666058][ T8197] usblp0: error -71 reading from printer
[ 1857.695819][   T10] usblp0: removed
[ 1857.917805][T27472] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1858.139706][T27472] usb 5-1: config 0 has no interfaces?
[ 1858.156685][T27472] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1858.168540][T27472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1858.186679][T27472] usb 5-1: Product: syz
[ 1858.191897][T27472] usb 5-1: Manufacturer: syz
[ 1858.201728][T27472] usb 5-1: SerialNumber: syz
[ 1858.216321][T27472] usb 5-1: config 0 descriptor??
[ 1858.521624][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11488'.
[ 1858.584116][ T8210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1858.648467][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11490'.
[ 1858.668890][ T8210] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1858.707602][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11490'.
[ 1858.731046][ T8219] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1859.134408][ T8217] veth0_macvtap: left promiscuous mode
[ 1859.416499][ T8229] syzkaller0: entered promiscuous mode
[ 1859.452943][ T8229] syzkaller0: entered allmulticast mode
[ 1859.466562][T27472] usb 5-1: USB disconnect, device number 7
[ 1859.655689][ T9609] net_ratelimit: 144 callbacks suppressed
[ 1859.664366][ T9609] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1859.710048][ T3643] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1859.757939][ T3643] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1859.817013][ T3643] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1859.859583][ T3643] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1859.877108][ T3643] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1859.997629][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1860.042956][ T9613] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1860.192137][ T9613] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1860.262338][ T9613] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1861.434142][ T8271] syzkaller0: entered promiscuous mode
[ 1861.441196][T27491] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1861.483524][ T8271] syzkaller0: entered allmulticast mode
[ 1861.556408][ T8273] tipc: Started in network mode
[ 1861.585498][ T8273] tipc: Node identity d2332b0982c9, cluster identity 4711
[ 1861.599163][T27491] usb 10-1: Using ep0 maxpacket: 32
[ 1861.626684][ T8273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1861.636189][T27491] usb 10-1: config 0 has an invalid interface number: 188 but max is 0
[ 1861.678314][T27491] usb 10-1: config 0 has no interface number 0
[ 1861.689809][ T8270] tipc: Resetting bearer <eth:syzkaller0>
[ 1861.715145][T27491] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1861.756687][T27491] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1861.778472][T27491] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1861.829046][T27491] usb 10-1: Product: syz
[ 1861.841021][T27491] usb 10-1: Manufacturer: syz
[ 1861.855418][T27491] usb 10-1: SerialNumber: syz
[ 1861.871002][T27491] usb 10-1: config 0 descriptor??
[ 1861.885292][ T8264] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1861.901838][ T8270] tipc: Disabling bearer <eth:syzkaller0>
[ 1862.158434][ T8264] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1862.491127][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1862.690498][ T8283] syzkaller0: entered promiscuous mode
[ 1862.705933][ T8283] syzkaller0: entered allmulticast mode
[ 1862.717196][T15439] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1862.907024][T15439] usb 1-1: Using ep0 maxpacket: 32
[ 1862.928279][T15439] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[ 1862.942344][T15439] usb 1-1: config 0 has no interface number 0
[ 1862.977838][T15439] usb 1-1: config 0 interface 12 has no altsetting 0
[ 1863.019072][T15439] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1863.052469][T15439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1863.102075][T15439] usb 1-1: Product: syz
[ 1863.140090][T15439] usb 1-1: Manufacturer: syz
[ 1863.172789][T15439] usb 1-1: SerialNumber: syz
[ 1863.226235][T15439] usb 1-1: config 0 descriptor??
[ 1863.347551][ T8286] binder: 8285:8286 ioctl c0306201 80000700 returned -14
[ 1863.386891][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1863.760532][ T8288] syzkaller0: entered promiscuous mode
[ 1863.766286][ T8288] syzkaller0: entered allmulticast mode
[ 1864.052539][ T8297] syzkaller0: entered promiscuous mode
[ 1864.059184][ T8297] syzkaller0: entered allmulticast mode
[ 1864.317161][T15440] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1864.479285][T15440] usb 2-1: Using ep0 maxpacket: 16
[ 1864.488647][T15440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1864.504309][T15440] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1864.515718][T15440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1864.525265][T15440] usb 2-1: Product: syz
[ 1864.530214][T15440] usb 2-1: Manufacturer: syz
[ 1864.535139][T15440] usb 2-1: SerialNumber: syz
[ 1864.543510][T15440] usb 2-1: config 0 descriptor??
[ 1864.556297][T15440] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1864.579846][T15440] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 1864.679466][T27491] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71
[ 1864.696241][ T9609] net_ratelimit: 108 callbacks suppressed
[ 1864.696263][ T9609] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1864.710821][T27491] asix 10-1:0.188: probe with driver asix failed with error -71
[ 1864.721893][ T9609] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1864.732228][T27491] usb 10-1: USB disconnect, device number 31
[ 1864.858603][ T1043] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1864.867091][ T1043] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1864.977240][ T9601] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1864.991025][ T9601] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1865.107059][ T9609] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1865.115238][ T9609] bond13: (slave ip6gretap1): failed to get link speed/duplex
[ 1865.191888][T15440] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1865.227668][ T9609] bond13: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1969.646824][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1969.654049][    C1] rcu: 	0-...!: (1 GPs behind) idle=40d4/1/0x4000000000000000 softirq=286266/286266 fqs=30
[ 1969.665990][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=392585, q=530 ncpus=2)
[ 1969.673864][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 1969.673898][    C0] NMI backtrace for cpu 0
[ 1969.673918][    C0] CPU: 0 UID: 0 PID: 8290 Comm: syz.5.11508 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1969.673943][    C0] Tainted: [L]=SOFTLOCKUP
[ 1969.673951][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1969.673963][    C0] RIP: 0010:sched_mm_cid_fork+0x657/0x10e0
[ 1969.674000][    C0] Code: c7 03 00 00 00 40 e9 19 01 00 00 49 c7 c4 b8 2e 26 8e 49 c1 ec 03 41 bd 00 00 00 80 eb 0a 89 e8 f7 d8 0f 81 09 fe ff ff f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 40 44 8b 35
[ 1969.674017][    C0] RSP: 0000:ffffc90003d8fc48 EFLAGS: 00000887
[ 1969.674035][    C0] RAX: 0000000080000000 RBX: ffff88813fe72410 RCX: 0000000080000001
[ 1969.674048][    C0] RDX: dffffc0000000000 RSI: 0000000000000002 RDI: ffff88813fe72410
[ 1969.674062][    C0] RBP: 0000000080000000 R08: 1ffff11027fce331 R09: 0000000000000000
[ 1969.674074][    C0] R10: ffff88813fe71acc R11: fffff520007b1f78 R12: 1ffffffff1c4c5d7
[ 1969.674089][    C0] R13: 0000000080000000 R14: 0000000000000002 R15: ffff88813fe71880
[ 1969.674102][    C0] FS:  0000000000000000(0000) GS:ffff888125293000(0063) knlGS:00000000f547db40
[ 1969.674117][    C0] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1969.674130][    C0] CR2: 000000002dd14ff8 CR3: 0000000022f4e000 CR4: 00000000003526f0
[ 1969.674146][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1969.674157][    C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1969.674169][    C0] Call Trace:
[ 1969.674179][    C0]  <TASK>
[ 1969.674194][    C0]  bprm_execve+0xdb7/0x1440
[ 1969.674230][    C0]  ? __pfx_bprm_execve+0x10/0x10
[ 1969.674252][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[ 1969.674282][    C0]  ? alloc_bprm+0x508/0x5c0
[ 1969.674306][    C0]  ? count+0x1cb/0x230
[ 1969.674331][    C0]  do_execveat_common+0x50d/0x690
[ 1969.674363][    C0]  __ia32_compat_sys_execveat+0xcd/0xf0
[ 1969.674392][    C0]  do_int80_emulation+0x181/0x530
[ 1969.674415][    C0]  ? asm_int80_emulation+0x1a/0x20
[ 1969.674433][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1969.674451][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1969.674472][    C0]  asm_int80_emulation+0x1a/0x20
[ 1969.674489][    C0] RIP: 0023:0xf708f01c
[ 1969.674506][    C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1969.674522][    C0] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000166
[ 1969.674540][    C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[ 1969.674558][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000
[ 1969.674569][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1969.674580][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1969.674591][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1969.674612][    C0]  </TASK>
[ 1969.674889][    C1] rcu: rcu_preempt kthread starved for 10442 jiffies! g392585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[ 1969.976779][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1969.986927][    C1] rcu: RCU grace-period kthread stack dump:
[ 1969.993026][    C1] task:rcu_preempt     state:R  running task     stack:27536 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1970.006708][    C1] Call Trace:
[ 1970.010023][    C1]  <TASK>
[ 1970.013166][    C1]  __schedule+0x17b4/0x5680
[ 1970.017794][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 1970.022872][    C1]  ? __pfx___schedule+0x10/0x10
[ 1970.027846][    C1]  ? schedule+0x90/0x360
[ 1970.032113][    C1]  schedule+0x164/0x360
[ 1970.036380][    C1]  schedule_timeout+0x158/0x2c0
[ 1970.041437][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1970.046933][    C1]  ? __pfx_process_timeout+0x10/0x10
[ 1970.052498][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1970.058417][    C1]  ? prepare_to_swait_event+0x340/0x370
[ 1970.064138][    C1]  rcu_gp_fqs_loop+0x312/0x11d0
[ 1970.069387][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[ 1970.075764][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1970.081095][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1970.086337][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1970.092178][    C1]  rcu_gp_kthread+0x9e/0x2b0
[ 1970.096798][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1970.102020][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1970.108094][    C1]  ? __kthread_parkme+0x7a/0x1f0
[ 1970.113319][    C1]  ? __kthread_parkme+0x19c/0x1f0
[ 1970.118728][    C1]  kthread+0x388/0x470
[ 1970.122834][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1970.128171][    C1]  ? __pfx_kthread+0x10/0x10
[ 1970.132879][    C1]  ret_from_fork+0x514/0xb70
[ 1970.137584][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1970.142719][    C1]  ? __switch_to+0xc79/0x1410
[ 1970.147694][    C1]  ? __pfx_kthread+0x10/0x10
[ 1970.153183][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1970.158422][    C1]  </TASK>
[ 1970.161563][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 1970.167914][    C1] CPU: 1 UID: 0 PID: 8264 Comm: syz.9.11510 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1970.179665][    C1] Tainted: [L]=SOFTLOCKUP
[ 1970.184008][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1970.194178][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[ 1970.200634][    C1] Code: f7 e8 1d c5 f7 f5 f7 c3 00 02 00 00 74 05 e8 70 58 23 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 64 47 e9 f5 65 8b 05 ed 50 8e 07 85 c0 74 18 5b 41 5e e9 51 48
[ 1970.220727][    C1] RSP: 0000:ffffc90000a08b28 EFLAGS: 00000206
[ 1970.226883][    C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 0000000000000103
[ 1970.235150][    C1] RDX: 0000000000000003 RSI: ffffffff8dfa3d4e RDI: 0000000000000001
[ 1970.243250][    C1] RBP: ffffc90000a08e08 R08: ffffffff903098f7 R09: 1ffffffff206131e
[ 1970.251268][    C1] R10: dffffc0000000000 R11: fffffbfff206131f R12: dffffc0000000000
[ 1970.259798][    C1] R13: 000000000000d000 R14: ffff888026238000 R15: ffff88802a339478
[ 1970.268424][    C1] FS:  0000000000000000(0000) GS:ffff888125393000(0000) knlGS:0000000000000000
[ 1970.277408][    C1] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1970.284027][    C1] CR2: 000000002ef1effc CR3: 000000000e74a000 CR4: 00000000003526f0
[ 1970.292060][    C1] DR0: 00000000000006ab DR1: 0000000000000000 DR2: 0000000000000000
[ 1970.300169][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1970.308206][    C1] Call Trace:
[ 1970.311526][    C1]  <IRQ>
[ 1970.314397][    C1]  dummy_timer+0x451f/0x4650
[ 1970.319042][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 1970.324013][    C1]  ? __lock_acquire+0x6b5/0x2cf0
[ 1970.329072][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1970.334757][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1970.339725][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1970.345644][    C1]  ? __pfx_dummy_timer+0x10/0x10
[ 1970.350712][    C1]  __hrtimer_run_queues+0x3c0/0xa20
[ 1970.355965][    C1]  hrtimer_run_softirq+0x17a/0x240
[ 1970.361166][    C1]  handle_softirqs+0x22a/0x840
[ 1970.365957][    C1]  ? __irq_exit_rcu+0xca/0x220
[ 1970.370755][    C1]  __irq_exit_rcu+0xca/0x220
[ 1970.375373][    C1]  irq_exit_rcu+0x9/0x30
[ 1970.379665][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1970.385436][    C1]  </IRQ>
[ 1970.388501][    C1]  <TASK>
[ 1970.391491][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1970.397521][    C1] RIP: 0010:smp_call_function_many_cond+0xfcf/0x13d0
[ 1970.404342][    C1] Code: 79 45 8b 2e 44 89 ee 83 e6 01 31 ff e8 7a 05 0c 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 25 01 0c 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 0a 01 0c
[ 1970.424167][    C1] RSP: 0000:ffffc90000127400 EFLAGS: 00000293
[ 1970.430355][    C1] RAX: ffffffff81b9ab26 RBX: ffff8880b873c148 RCX: ffff888031698000
[ 1970.438442][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1970.447157][    C1] RBP: ffffc90000127540 R08: ffffffff903098f7 R09: 1ffffffff206131e
[ 1970.455255][    C1] R10: dffffc0000000000 R11: fffffbfff206131f R12: 1ffff110170c8589
[ 1970.463259][    C1] R13: dffffc0000000000 R14: ffff8880b8642c48 R15: 0000000000000000
[ 1970.471391][    C1]  ? smp_call_function_many_cond+0xfe6/0x13d0
[ 1970.477598][    C1]  ? smp_call_function_many_cond+0x7c1/0x13d0
[ 1970.483694][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1970.489054][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1970.495612][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1970.500603][    C1]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1970.505858][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[ 1970.511331][    C1]  flush_tlb_mm_range+0x5c3/0x10b0
[ 1970.516612][    C1]  tlb_flush_mmu+0x1af/0xa30
[ 1970.521272][    C1]  tlb_finish_mmu+0xf9/0x230
[ 1970.525898][    C1]  free_ldt_pgtables+0x19d/0x350
[ 1970.530926][    C1]  ? __pfx_free_ldt_pgtables+0x10/0x10
[ 1970.536430][    C1]  ? down_read+0x270/0x2e0
[ 1970.540876][    C1]  ? exit_mmap+0x183/0x9e0
[ 1970.545330][    C1]  exit_mmap+0x1af/0x9e0
[ 1970.549693][    C1]  ? __pfx_exit_mmap+0x10/0x10
[ 1970.554678][    C1]  ? uprobe_clear_state+0x53/0x3f0
[ 1970.559848][    C1]  ? __pfx_exit_aio+0x10/0x10
[ 1970.564587][    C1]  ? uprobe_clear_state+0x2bc/0x3f0
[ 1970.569825][    C1]  __mmput+0x118/0x430
[ 1970.573929][    C1]  exit_mm+0x18e/0x250
[ 1970.578053][    C1]  do_exit+0x6a2/0x22c0
[ 1970.582251][    C1]  ? try_to_wake_up+0x7f2/0x1380
[ 1970.587658][    C1]  ? __pfx_do_exit+0x10/0x10
[ 1970.592282][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1970.597344][    C1]  do_group_exit+0x21b/0x2d0
[ 1970.601963][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1970.607310][    C1]  get_signal+0x1284/0x1330
[ 1970.611953][    C1]  arch_do_signal_or_restart+0xbc/0x830
[ 1970.617619][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1970.623821][    C1]  exit_to_user_mode_loop+0x86/0x480
[ 1970.629152][    C1]  ? rcu_is_watching+0x15/0xb0
[ 1970.633954][    C1]  ? do_fast_syscall_32+0x33/0x70
[ 1970.639094][    C1]  __do_fast_syscall_32+0x446/0x6e0
[ 1970.644357][    C1]  ? do_fast_syscall_32+0x33/0x70
[ 1970.649420][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1970.654665][    C1]  ? asm_int80_emulation+0x1a/0x20
[ 1970.659898][    C1]  ? do_int80_emulation+0x286/0x530
[ 1970.665222][    C1]  do_fast_syscall_32+0x33/0x70
[ 1970.670303][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1970.676861][    C1] RIP: 0023:0xf70cf01c
[ 1970.681131][    C1] Code: Unable to access opcode bytes at 0xf70ceff2.
[ 1970.688601][    C1] RSP: 002b:00000000f54bd5bc EFLAGS: 00000206 ORIG_RAX: 00000000000000f0
[ 1970.697223][    C1] RAX: fffffffffffffe00 RBX: 00000000f74c4f88 RCX: 0000000000000080
[ 1970.705413][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74c4f8c
[ 1970.713504][    C1] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000
[ 1970.721495][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1970.729495][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1970.737509][    C1]  </TASK>