last executing test programs:

15m35.466471908s ago: executing program 32 (id=2945):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

13m9.476458952s ago: executing program 33 (id=4282):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, &(0x7f0000000280))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

13m3.202709389s ago: executing program 34 (id=4312):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

11m52.9264955s ago: executing program 35 (id=4921):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001000)={0x34, &(0x7f0000000dc0)={0x0, 0xb32206008b463397, 0x4, "bf89f16f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d6", 0x48}], 0x1}, 0x60044084)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="df16540000004e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11m49.400219738s ago: executing program 36 (id=4943):
r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0)

10m6.340209912s ago: executing program 37 (id=5781):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x182)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
r1 = syz_io_uring_setup(0x34f, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x3, 0x316, 0x0, r0}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

10m5.341565741s ago: executing program 38 (id=5785):
epoll_create1(0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116})
close_range(r1, r1, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)

6m58.380236291s ago: executing program 2 (id=7159):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "d56d9847bfcb49e2", "16549f18408d640d012ebcc31bd9870b", "bcd58d40", "4f5b22bc20c62b22"}, 0x28)
sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0)
write$binfmt_aout(r0, 0x0, 0xfdef)
sendto$inet6(r0, &(0x7f0000000080)="c62ef5d642787b4ea89f2287cb40935313", 0x11, 0x8040, 0x0, 0x0)
write$binfmt_elf64(r0, 0x0, 0x78)

6m58.252414234s ago: executing program 2 (id=7162):
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0xd06, 0x32315659, 0x4, 0x4, 0x3, 0x3, 0xfeedcafe, 0x2, 0x2, 0x2}})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f00000023c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6m57.279866586s ago: executing program 2 (id=7170):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000a40)=0xfff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f00000002c0)=0x3)

6m57.08084396s ago: executing program 2 (id=7173):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chroot(&(0x7f0000000500)='./file0\x00')
syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x2000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3b, 0x1333c135, 0x2, 0x4, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xb2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

6m56.891226964s ago: executing program 2 (id=7178):
mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m55.062779902s ago: executing program 2 (id=7186):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m54.556909597s ago: executing program 39 (id=7186):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m45.917392137s ago: executing program 9 (id=8222):
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x3, 0x0, 0x0, {0x10000000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x2000, 0x1, r2, r3, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$tcp_congestion(r4, 0x0, 0x0)
fsync(r4)

3m45.680933327s ago: executing program 9 (id=8225):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x9})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x0, 0xc, 0x0, 0xfb, 0x3e, 0xfe, 0x38}})
io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x8000000, 0x8, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m45.205719012s ago: executing program 9 (id=8231):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10)
recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010000, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0)

3m44.497691676s ago: executing program 9 (id=8233):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(r2, &(0x7f0000000040)='./file0\x00', 0x81001)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000002240)='./file0\x00', 0x2)

3m43.469267985s ago: executing program 9 (id=8237):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x100, 0x5, 0x5}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)

3m42.667739486s ago: executing program 9 (id=8243):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = epoll_create1(0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xfffffffe, 0x20002f5})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff00", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2})
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100132337a084406218078470102030109021200010207300e090401", @ANYRESHEX=r0, @ANYRES16=r0], 0x0)

3m42.041028192s ago: executing program 40 (id=8243):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = epoll_create1(0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xfffffffe, 0x20002f5})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff00", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2})
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100132337a084406218078470102030109021200010207300e090401", @ANYRESHEX=r0, @ANYRES16=r0], 0x0)

2m58.566849431s ago: executing program 8 (id=8454):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x0, 0x30, 0x2, "a1db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m55.255489152s ago: executing program 8 (id=8467):
socket$inet6(0xa, 0x805, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x6, 0x2, 0x10000, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_REORDER={0xc, 0x3, {0xe, 0x4}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x20000000)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

2m54.029503634s ago: executing program 8 (id=8476):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x1a}, @flat=@weak_binder={0x77622a85, 0x1}, @fda={0x66646185, 0x9, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x1040}], 0x0, 0x0, 0x0})

2m53.764743704s ago: executing program 8 (id=8477):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

2m52.704566747s ago: executing program 8 (id=8480):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
unshare(0x26020480)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0xa)

2m52.251378539s ago: executing program 8 (id=8483):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x5f6, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xa}, {0x6, 0xb, 0x72, '\x00', 0x3}, {0x1, 0xfe, 0x9, '\x00', 0x40}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x7b, '\x00', 0x5c}, {0x0, 0x8, 0x6, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x9}, {0x2, 0x9, 0x0, '\x00', 0xa}, {0x7, 0x5}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0x5}, {0x0, 0x86, 0xd, '\x00', 0xfb}, {0x9, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x3}, {0xb, 0x0, 0xa, '\x00', 0x5}, {0x10, 0x5, 0x1, '\x00', 0x3}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0xb}, {0x3, 0x0, 0x6, '\x00', 0x6}, {0x93, 0x4, 0x4, '\x00', 0xe9}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}})

2m51.511396899s ago: executing program 41 (id=8483):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x5f6, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xa}, {0x6, 0xb, 0x72, '\x00', 0x3}, {0x1, 0xfe, 0x9, '\x00', 0x40}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x7b, '\x00', 0x5c}, {0x0, 0x8, 0x6, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x9}, {0x2, 0x9, 0x0, '\x00', 0xa}, {0x7, 0x5}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0x5}, {0x0, 0x86, 0xd, '\x00', 0xfb}, {0x9, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x3}, {0xb, 0x0, 0xa, '\x00', 0x5}, {0x10, 0x5, 0x1, '\x00', 0x3}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0xb}, {0x3, 0x0, 0x6, '\x00', 0x6}, {0x93, 0x4, 0x4, '\x00', 0xe9}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x21, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf609fdffffff0f392be7124f3883ab73ec229f5fab90b052c3572db8ed729eed0700001400000000de12709700"}, 0xd8)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}})

2m21.703323665s ago: executing program 7 (id=8484):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={<r4=>r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r4, 0x3c6c}, &(0x7f0000000100)=0x8)

2m21.388597529s ago: executing program 7 (id=8579):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

2m20.98527891s ago: executing program 7 (id=8581):
unshare(0x2000400)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x151}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x110, 0x11, 0x0, 0x0)

2m19.662762025s ago: executing program 7 (id=8585):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[])
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)

2m18.506270983s ago: executing program 7 (id=8589):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x9)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r0, &(0x7f0000000000)='./file0\x00', 0x4)

2m17.892237574s ago: executing program 7 (id=8591):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)={0x1})

2m16.653117914s ago: executing program 42 (id=8591):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000a80)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)={0x1})

58.322129171s ago: executing program 4 (id=8935):
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x3, 0x164}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0xf23, 0x0, 0xc, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000440)={0x90000000})
accept4(r0, 0x0, 0x0, 0x0)

55.097798624s ago: executing program 4 (id=8953):
r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00')
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
r3 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2})
io_uring_enter(r3, 0x44fd, 0x3, 0x1, 0x0, 0x0)
getdents(r0, &(0x7f0000000200)=""/185, 0xb9)

53.51397571s ago: executing program 4 (id=8957):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}})

50.303732337s ago: executing program 4 (id=8967):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

49.272897471s ago: executing program 4 (id=8975):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

48.903556833s ago: executing program 4 (id=8978):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x4048051}, 0x440c0)
recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f0000001a80)=""/4103, 0x1007}], 0x2}, 0x3}], 0x1, 0x2142, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000010)

48.456291907s ago: executing program 43 (id=8978):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x4048051}, 0x440c0)
recvmmsg(r2, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000240)=""/91, 0x5b}, {&(0x7f0000001a80)=""/4103, 0x1007}], 0x2}, 0x3}], 0x1, 0x2142, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000010)

10.502049682s ago: executing program 6 (id=9136):
syz_open_dev$tty20(0xc, 0x4, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
flistxattr(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0x2c0c, 0x400, 0x7, 0x2000284}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0)

9.058802929s ago: executing program 3 (id=9141):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private0, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffefffffffffe}, {0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)

8.539739619s ago: executing program 1 (id=9142):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r0 = socket(0x200000000000011, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/207, 0xcf}], 0x2}, 0x22120)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004)

7.559561129s ago: executing program 1 (id=9144):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000})
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1}})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.556916733s ago: executing program 6 (id=9145):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x400, 0x2, 0x374}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)

6.721556702s ago: executing program 1 (id=9148):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x402940, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001100), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x40, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0xf)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001009d2743af1ad9d86b629f4567", @ANYRES32=r5, @ANYBLOB="240404000300000034001280110001006272696467655f736c617665000000001c0005800800"], 0x54}, 0x1, 0x0, 0x0, 0x200444c1}, 0x2404c884)
sendfile(r1, r1, &(0x7f0000001280)=0x3c6, 0x2)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'})

6.128164947s ago: executing program 1 (id=9149):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x181000, 0x0)
syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380), &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000080)="116b41319ef13386d7fd40ac5cf9181c")

5.600004684s ago: executing program 3 (id=9151):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x22020600)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
prlimit64(r1, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

5.063031924s ago: executing program 3 (id=9152):
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000)
link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x1)
fchdir(r3)
close_range(r1, 0xffffffffffffffff, 0x0)

4.608735513s ago: executing program 6 (id=9153):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r1=>0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

4.292478177s ago: executing program 0 (id=9154):
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$packet(0x11, 0x3, 0x300)
socket(0x2, 0x3, 0xfd)
open(&(0x7f0000000000)='./file1\x00', 0x4787e, 0x37)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r0], 0x38}}, 0x0)

3.842858933s ago: executing program 0 (id=9155):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x7f)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0\x00', 0x10)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0xd}, 0x1c)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

3.308095826s ago: executing program 5 (id=9156):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x111)
close(r0)
r1 = inotify_init1(0x800)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r0, 0x8, r2)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

3.205557211s ago: executing program 3 (id=9157):
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0xbdf, &(0x7f0000000640)={0x0, 0x82f4, 0x800, 0x1, 0x2ac}, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

3.122344805s ago: executing program 1 (id=9158):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(0xffffffffffffffff, 0x9)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10)

2.996284518s ago: executing program 5 (id=9159):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x800)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20004000, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x7, 0x8c, 0x0, 0x6, 0xd, 0x81, 0xb6, 0xa, 0xfc, 0x8, 0x44, 0x0, 0xee5, 0x0, 0x9a, 0x2, 0x80, 0xa7, '\x00', 0x3, 0x3})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55f, 0x19fffe, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x300000000006, 0x794, 0xa, 0x40, 0xc976, 0x5], 0x8080000, 0x20200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.707467324s ago: executing program 0 (id=9160):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0xa, 0x40010, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7ff, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)

2.690681136s ago: executing program 1 (id=9161):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76})
fsopen(&(0x7f0000000000)='virtiofs\x00', 0x0)

2.305998044s ago: executing program 5 (id=9162):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x5, 0xb}, {0xfff3, 0xfffe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40000)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

2.160059273s ago: executing program 0 (id=9163):
pipe(&(0x7f0000000080))
pipe(&(0x7f0000000000))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.997019983s ago: executing program 6 (id=9164):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28)
r2 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r1}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000480)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)

1.727648562s ago: executing program 0 (id=9165):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
close(0x3)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x34, 0xffffffff}, 0x9c)

1.651380805s ago: executing program 5 (id=9166):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b00000000000000000040000000000000400000000000000000000000000000004000000000000000000000000000000ff0f0000f4000000040000000000000007000000000000008c00000000000000f9ffffffffffff14010000000000000004000080000000000800000006080000050000000070000078bcc133", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ff010000fcffffff000000000400000000000000e60000000000000002"], 0x0, 0x0, 0x0})
getdents(r3, &(0x7f0000000340)=""/229, 0xe5)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
read$FUSE(r0, &(0x7f000000a3c0)={0x2020}, 0x2020)

1.45020999s ago: executing program 0 (id=9167):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="440000250000000036556682a310f749fc0d5307f471e5cba60aa579c261c90fcb71e8b932a5244b093441778dfc94c4c4c49e4f245ee0e1b9b880042d2d39ea7b769f2306a6901705cba2bc636f113061c65713070bf612da17b1acbb0743ec8fee1cdf74eb1eba11dbe5dbd78d9ddf0725223b1c1dc84829e3f6", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x9, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0)
mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x22, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@audit}, {@smackfsdef={'smackfsdef', 0x3d, '-'}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x2c00}}, {@fsmagic={'fsmagic', 0x3d, 0xb}}]}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r3, 0xb60aebde7ebb79ef, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010)

1.230394777s ago: executing program 5 (id=9168):
capset(0x0, &(0x7f0000000140))
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, <r5=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{0x2000000, 0x4000}], 0xdeadbeef, 0x8, 0x1})
r6 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
readv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x2)

762.825699ms ago: executing program 6 (id=9169):
unshare(0x22020400)
close(0x3)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3)
r1 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x0, 0x0})
r4 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x11100, 0x3, 0x17d}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000003c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x1})
io_uring_enter(r4, 0x4d10, 0x2, 0x2, 0x0, 0x0)
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000079c0)={0x2020}, 0x2020)

742.043362ms ago: executing program 5 (id=9170):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)

525.577947ms ago: executing program 3 (id=9171):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r3, 0x0)
listen(r1, 0x0)
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

244.428825ms ago: executing program 6 (id=9172):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x97}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

0s ago: executing program 3 (id=9173):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000dc0)={0x20080522}, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0x3})
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000100)=""/208)
socket$inet(0x2, 0x3, 0x1)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)

kernel console output (not intermixed with test programs):

28702 ioctl c0306201 2000000001c0 returned -22
[ 1063.104679][T28707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8161'.
[ 1063.285825][T28709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1063.403467][T28716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8165'.
[ 1065.978956][    T9] usb 4-1: new full-speed USB device number 95 using dummy_hcd
[ 1066.160960][    T9] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4
[ 1066.232869][    T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4
[ 1066.302546][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1066.352526][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1066.413083][    T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1066.466656][    T9] usb 4-1: Product: syz
[ 1066.497312][    T9] usb 4-1: Manufacturer: syz
[ 1066.525053][    T9] usb 4-1: SerialNumber: syz
[ 1066.572403][    T9] usb 4-1: config 0 descriptor??
[ 1066.630784][    T9] usb 4-1: selecting invalid altsetting 0
[ 1067.210412][T28751] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow!
[ 1067.231736][T28771] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1067.265811][T27753] usb 4-1: USB disconnect, device number 95
[ 1068.138757][    T9] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1068.142881][T28801] kvm: pic: non byte write
[ 1068.174678][T28805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.186876][T28805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1068.298728][    T9] usb 9-1: Using ep0 maxpacket: 32
[ 1068.315024][    T9] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1068.338140][    T9] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1068.366275][    T9] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1068.384325][    T9] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1068.403273][    T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1068.423789][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.435926][    T9] usb 9-1: Product: syz
[ 1068.442109][    T9] usb 9-1: Manufacturer: syz
[ 1068.447051][    T9] usb 9-1: SerialNumber: syz
[ 1068.463356][    C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1068.474243][    T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input145
[ 1068.688975][    T9] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1068.713636][    T9]  (id 0x00)
[ 1068.873403][    T9] rc_core: IR keymap rc-imon-pad not found
[ 1068.891827][    T9] Registered IR keymap rc-empty
[ 1068.904522][    T9] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1068.947516][    T9] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1068.993235][    T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0
[ 1069.008915][   T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 1069.056012][    T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input146
[ 1069.125342][    T9] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:32> initialized
[ 1069.219856][   T24] usb 5-1: config 0 has no interfaces?
[ 1069.239851][   T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1069.266703][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.287897][   T24] usb 5-1: config 0 descriptor??
[ 1069.372429][T28818] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8206'.
[ 1069.546201][    T9] usb 5-1: USB disconnect, device number 82
[ 1070.058853][    T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[ 1070.218748][T28823] imon:send_packet: packet tx failed (-71)
[ 1070.235452][   T24] usb 9-1: USB disconnect, device number 32
[ 1070.237824][    T9] usb 5-1: config 0 has no interfaces?
[ 1070.259779][    T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1070.269350][T28823] imon:vfd_write: send packet #2 failed
[ 1070.304010][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.334403][    T9] usb 5-1: config 0 descriptor??
[ 1070.585745][T28809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1070.619981][T28809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1070.650740][T28809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1070.680217][T28809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1070.711026][    T9] usb 5-1: USB disconnect, device number 83
[ 1071.159488][ T5916] usb 5-1: new full-speed USB device number 84 using dummy_hcd
[ 1071.320427][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1071.350592][ T5916] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=4e.d1
[ 1071.370711][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.388969][ T5916] usb 5-1: Product: syz
[ 1071.393227][ T5916] usb 5-1: Manufacturer: syz
[ 1071.397851][ T5916] usb 5-1: SerialNumber: syz
[ 1071.415324][ T5916] usb 5-1: config 0 descriptor??
[ 1071.445004][ T5916] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[ 1072.108834][    T9] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1072.127757][T28872] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=16394 (32788 ns) > initial count (48 ns). Using initial count to start timer.
[ 1072.259318][    T9] usb 9-1: Using ep0 maxpacket: 16
[ 1072.265051][ T5916] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[ 1072.281176][    T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1072.285083][ T5916] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71
[ 1072.307380][ T5916] usb 5-1: USB disconnect, device number 84
[ 1072.315359][    T9] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1072.325344][    T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1072.342666][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.351276][    T9] usb 9-1: Product: syz
[ 1072.355481][    T9] usb 9-1: Manufacturer: syz
[ 1072.360968][    T9] usb 9-1: SerialNumber: syz
[ 1072.365411][T28875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1072.383804][    T9] usb 9-1: config 0 descriptor??
[ 1072.389430][T28875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1072.610065][    C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1072.623110][    T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input147
[ 1072.639598][    T9] imon:send_packet: packet tx failed (-71)
[ 1072.658826][    T9] imon 9-1:0.0: panel buttons/knobs setup failed
[ 1072.718754][    T9] rc_core: IR keymap rc-imon-pad not found
[ 1072.724631][    T9] Registered IR keymap rc-empty
[ 1072.729980][    T9] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1072.740276][    T9] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1072.749993][    T9] imon:send_packet: packet tx failed (-71)
[ 1072.768864][    T9] imon 9-1:0.0: remote input dev register failed
[ 1072.775361][    T9] imon 9-1:0.0: imon_init_intf0: rc device setup failed
[ 1072.787912][    T9] imon 9-1:0.0: unable to initialize intf0, err 0
[ 1072.794646][    T9] imon:imon_probe: failed to initialize context!
[ 1072.801106][    T9] imon 9-1:0.0: unable to register, err -19
[ 1072.815147][    T9] usb 9-1: USB disconnect, device number 33
[ 1073.169144][T28886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1073.177969][T28886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1073.219164][    T9] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1073.388746][    T9] usb 9-1: Using ep0 maxpacket: 16
[ 1073.405770][    T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1073.441712][    T9] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1073.463583][    T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1073.488424][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.507962][    T9] usb 9-1: Product: syz
[ 1073.516772][    T9] usb 9-1: Manufacturer: syz
[ 1073.533376][    T9] usb 9-1: SerialNumber: syz
[ 1073.554311][    T9] usb 9-1: config 0 descriptor??
[ 1073.564161][T28896] kvm: pic: single mode not supported
[ 1073.564185][T28896] kvm: pic: level sensitive irq not supported
[ 1073.591857][T28896] kvm: pic: non byte write
[ 1073.609178][T28896] kvm: pic: non byte write
[ 1073.618431][T28896] kvm: pic: non byte write
[ 1073.631357][T28896] kvm: pic: non byte write
[ 1073.640798][T28896] kvm: pic: non byte write
[ 1073.651193][T28896] kvm: pic: non byte write
[ 1073.661511][T28896] kvm: pic: non byte write
[ 1073.671029][T28896] kvm: pic: non byte write
[ 1073.681232][T28896] kvm: pic: non byte write
[ 1073.803712][    T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input149
[ 1073.933418][T28907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1073.942601][T28907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1073.987383][T28914] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8231'.
[ 1074.159214][    T9] rc_core: IR keymap rc-imon-pad not found
[ 1074.182480][    T9] Registered IR keymap rc-empty
[ 1074.203041][    T9] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1074.225059][    T9] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1074.260692][    T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1074.278326][    T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input150
[ 1074.301978][    T9] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:34> initialized
[ 1074.718208][    C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1074.732344][    T9] usb 9-1: USB disconnect, device number 34
[ 1075.873520][T28934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8239'.
[ 1076.162334][T19189] syz_tun (unregistering): left allmulticast mode
[ 1076.798833][ T5916] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1076.968781][ T5916] usb 5-1: Using ep0 maxpacket: 32
[ 1076.992747][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1077.028821][ T5916] usb 5-1: config 0 has no interface number 0
[ 1077.039590][ T5916] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1077.108765][ T5916] usb 5-1: config 0 interface 1 has no altsetting 0
[ 1077.140275][ T5916] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1077.172593][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.198710][ T5916] usb 5-1: Product: syz
[ 1077.202945][ T5916] usb 5-1: Manufacturer: syz
[ 1077.236331][ T5916] usb 5-1: SerialNumber: syz
[ 1077.259768][ T5916] usb 5-1: config 0 descriptor??
[ 1077.478351][T28957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1077.494752][T28959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1077.503824][T28959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1077.516836][T28959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1077.525442][T28959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1077.581917][ T5916] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1077.636894][ T5916] cx231xx 5-1:0.1: Failed to read PCB config
[ 1077.683884][ T5916] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71
[ 1077.744269][ T5916] usb 5-1: USB disconnect, device number 85
[ 1078.088965][ T5916] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1078.270082][ T5916] usb 5-1: Using ep0 maxpacket: 32
[ 1078.289979][T28975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8253'.
[ 1078.315360][T28975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8253'.
[ 1078.335188][T28975] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8253'.
[ 1078.356654][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1078.383433][ T5916] usb 5-1: config 0 has no interface number 0
[ 1078.411666][T28960] chnl_net:caif_netlink_parms(): no params data found
[ 1078.428930][ T5916] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1078.488801][ T5916] usb 5-1: config 0 interface 1 has no altsetting 0
[ 1078.517160][ T5916] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1078.543907][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.580999][ T5916] usb 5-1: Product: syz
[ 1078.594552][ T5916] usb 5-1: Manufacturer: syz
[ 1078.610852][ T5916] usb 5-1: SerialNumber: syz
[ 1078.643179][ T5916] usb 5-1: config 0 descriptor??
[ 1078.875772][ T5916] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1078.923598][ T5916] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[ 1078.976394][T28960] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.020345][T28960] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1079.040675][T28960] bridge_slave_0: entered allmulticast mode
[ 1079.065525][T28960] bridge_slave_0: entered promiscuous mode
[ 1079.072124][ T5916] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[ 1079.101772][T28960] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1079.118905][ T5916] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[ 1079.137861][T28960] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1079.165517][ T5916] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1079.165783][T28960] bridge_slave_1: entered allmulticast mode
[ 1079.181258][ T5916] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1079.212880][ T5916] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1079.216779][T28960] bridge_slave_1: entered promiscuous mode
[ 1079.255919][ T5916] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -71
[ 1079.309829][ T5916] i2c i2c-4: Added multiplexed i2c bus 6
[ 1079.340995][T28960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1079.373330][ T5916] i2c i2c-4: Added multiplexed i2c bus 7
[ 1079.389170][ T5916] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[ 1079.400242][T28960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1079.433794][ T5916] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[ 1079.547128][ T5916] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71
[ 1079.558889][T16014] Bluetooth: hci0: command tx timeout
[ 1079.574850][T28960] team0: Port device team_slave_0 added
[ 1079.603068][T28960] team0: Port device team_slave_1 added
[ 1079.625311][ T5916] usb 5-1: USB disconnect, device number 86
[ 1079.825117][T28960] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1079.855395][T28960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1079.937075][T28960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1079.987723][T28960] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1080.004240][T28960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1080.112982][T28960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1080.322209][T28960] hsr_slave_0: entered promiscuous mode
[ 1080.337487][T28960] hsr_slave_1: entered promiscuous mode
[ 1080.346606][T28960] debugfs: 'hsr0' already exists in 'hsr'
[ 1080.352826][T28960] Cannot create hsr debugfs directory
[ 1080.418804][T27753] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1080.570573][T27753] usb 9-1: Using ep0 maxpacket: 16
[ 1080.579331][T27753] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1080.610105][T27753] usb 9-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00
[ 1080.644542][T27753] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.683617][T27753] usb 9-1: config 0 descriptor??
[ 1080.714646][T27753] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1081.553093][ T5916] usb 9-1: USB disconnect, device number 35
[ 1081.576699][T29017] sctp: [Deprecated]: syz.3.8264 (pid 29017) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1081.576699][T29017] Use struct sctp_sack_info instead
[ 1081.653475][T16014] Bluetooth: hci0: command tx timeout
[ 1081.815859][T28960] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1081.852457][T28960] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1081.869665][T28960] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1081.903258][T28960] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1082.131359][T28960] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1082.179520][T28960] 8021q: adding VLAN 0 to HW filter on device team0
[ 1082.197292][T14608] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1082.204493][T14608] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1082.295676][  T173] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1082.302918][  T173] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1082.461813][T28960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1082.590838][T28960] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1082.698142][T28960] veth0_vlan: entered promiscuous mode
[ 1082.776231][T28960] veth1_vlan: entered promiscuous mode
[ 1082.870475][T28960] veth0_macvtap: entered promiscuous mode
[ 1082.882809][T28960] veth1_macvtap: entered promiscuous mode
[ 1083.579134][T29060] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8271'.
[ 1083.719064][T16014] Bluetooth: hci0: command tx timeout
[ 1084.758007][T28960] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1084.798888][ T5916] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1084.813205][T28960] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1084.885129][   T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.912186][   T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.928865][   T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.937653][   T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1084.995636][ T5916] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1085.031974][ T5916] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1085.063902][ T5916] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1085.091835][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1085.131000][ T5916] usb 9-1: SerialNumber: syz
[ 1085.266655][T14787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1085.277762][T29085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1085.296997][T14787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1085.305105][T29085] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1085.367764][ T5916] usb 9-1: 0:2 : does not exist
[ 1085.417034][T14787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1085.453764][T14787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1085.501174][ T5916] usb 9-1: USB disconnect, device number 36
[ 1085.557016][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1085.803490][T16014] Bluetooth: hci0: command tx timeout
[ 1087.140536][T29127] kvm: pic: non byte write
[ 1088.171947][T29167] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8293'.
[ 1088.475687][T29183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.486878][T29183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1089.559030][   T24] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1089.772480][   T24] usb 9-1: Using ep0 maxpacket: 16
[ 1089.798381][   T24] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 1089.817974][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.846933][   T24] usb 9-1: Product: syz
[ 1089.867674][   T24] usb 9-1: Manufacturer: syz
[ 1089.896973][   T24] usb 9-1: SerialNumber: syz
[ 1089.921671][   T24] usb 9-1: config 0 descriptor??
[ 1089.987139][   T24] visor 9-1:0.0: Sony Clie 3.5 converter detected
[ 1090.269337][T29224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8305'.
[ 1090.791958][   T24] usb 9-1: clie_3_5_startup: get interface number failed: -71
[ 1090.808902][   T24] visor 9-1:0.0: probe with driver visor failed with error -71
[ 1090.864427][   T24] usb 9-1: USB disconnect, device number 37
[ 1091.664764][T29258] binder: 29257:29258 ioctl c0306201 2000000003c0 returned -14
[ 1092.255526][T29283] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[ 1092.262111][T29283] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1092.342617][T29283] vhci_hcd vhci_hcd.0: Device attached
[ 1092.629147][T22789] usb 46-1: SetAddress Request (2) to port 0
[ 1092.658835][T22789] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1093.012477][T29301] loop2: detected capacity change from 0 to 7
[ 1093.036824][ T5892] Dev loop2: unable to read RDB block 7
[ 1093.058564][ T5892]  loop2: AHDI p2 p3
[ 1093.073421][ T5892] loop2: partition table partially beyond EOD, truncated
[ 1093.103244][ T5892] loop2: p3 start 335544320 is beyond EOD, truncated
[ 1093.137766][T29301] Dev loop2: unable to read RDB block 7
[ 1093.166046][T29301]  loop2: AHDI p2 p3
[ 1093.180485][T29301] loop2: partition table partially beyond EOD, truncated
[ 1093.220800][T29301] loop2: p3 start 335544320 is beyond EOD, truncated
[ 1093.564895][T29284] vhci_hcd: connection reset by peer
[ 1093.605593][   T60] vhci_hcd vhci_hcd.6: stop threads
[ 1093.634751][   T60] vhci_hcd vhci_hcd.6: release socket
[ 1093.649066][   T60] vhci_hcd vhci_hcd.6: disconnect device
[ 1093.817649][T29306] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8323'.
[ 1094.213253][T29311] syzkaller0: entered promiscuous mode
[ 1094.256424][T29311] syzkaller0: entered allmulticast mode
[ 1094.499244][ T5916] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1094.702819][ T5916] usb 4-1: Using ep0 maxpacket: 16
[ 1094.742175][ T5916] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1094.768755][T27753] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1094.768790][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1094.817473][ T5916] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1094.861046][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.885925][ T5916] usb 4-1: config 0 descriptor??
[ 1094.989323][T27753] usb 9-1: config 0 has an invalid interface number: 64 but max is 0
[ 1095.021806][T27753] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1095.072818][T27753] usb 9-1: config 0 has no interface number 0
[ 1095.101396][T27753] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[ 1095.138719][T27753] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.165048][T27753] usb 9-1: Product: syz
[ 1095.178152][T27753] usb 9-1: Manufacturer: syz
[ 1095.188718][T27753] usb 9-1: SerialNumber: syz
[ 1095.217522][T27753] usb 9-1: config 0 descriptor??
[ 1095.252965][T27753] uvcvideo 9-1:0.64: probe with driver uvcvideo failed with error -22
[ 1095.385418][ T5916] nzxt-smart2 0003:1E71:2009.007B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[ 1095.514495][T27753] usb 9-1: USB disconnect, device number 38
[ 1095.903966][T27753] usb 4-1: USB disconnect, device number 96
[ 1097.379463][T29350] netlink: 'syz.8.8333': attribute type 10 has an invalid length.
[ 1097.602957][T16014] Bluetooth: hci4: ACL packet for unknown connection handle 0
[ 1097.786569][T29351] delete_channel: no stack
[ 1097.801504][T22789] usb 46-1: device descriptor read/8, error -110
[ 1098.266343][T22789] usb usb46-port1: attempt power cycle
[ 1098.563708][T29368] input: syz1 as /devices/virtual/input/input151
[ 1098.892097][T22789] usb usb46-port1: unable to enumerate USB device
[ 1099.561727][   T30] kauditd_printk_skb: 76 callbacks suppressed
[ 1099.561750][   T30] audit: type=1800 audit(1772310124.845:987): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8341" name="bus" dev="tmpfs" ino=1099 res=0 errno=0
[ 1101.109976][T27753] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1101.272629][T27753] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1101.305215][T27753] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1101.343004][T27753] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1101.379979][T27753] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1101.413083][T27753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1101.464042][T27753] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1101.507717][T27753] usb 5-1: invalid MIDI out EP 0
[ 1101.656458][T29389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1101.680840][T29389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1101.820698][T27753] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1102.268590][T29350] team0: left allmulticast mode
[ 1102.283247][T29350] 8021q: adding VLAN 0 to HW filter on device team0
[ 1102.292063][T29350] team0: entered allmulticast mode
[ 1102.297602][T29350] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1102.761383][T27753] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1103.028757][T27753] usb 9-1: Using ep0 maxpacket: 16
[ 1103.040981][T27753] usb 9-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[ 1103.065136][T27753] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.084707][T27753] usb 9-1: Product: syz
[ 1103.097154][T27753] usb 9-1: Manufacturer: syz
[ 1103.111127][T27753] usb 9-1: SerialNumber: syz
[ 1103.133363][T27753] usb 9-1: config 0 descriptor??
[ 1103.150820][T27753] usb-storage 9-1:0.0: USB Mass Storage device detected
[ 1103.191703][T27753] usb-storage 9-1:0.0: Quirks match for vid 054c pid 002e: 1
[ 1103.215544][T27753] usb-storage 9-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[ 1103.215544][T27753]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 1103.692882][T29396] hfs: unable to load iocharset "io#harset"
[ 1103.928310][ T5916] usb 5-1: USB disconnect, device number 87
[ 1104.224234][T29441] netlink: 'syz.4.8357': attribute type 1 has an invalid length.
[ 1104.275603][ T5900] usb 9-1: USB disconnect, device number 39
[ 1104.379381][T29441] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1104.525032][T29445] bond1: (slave bridge2): making interface the new active one
[ 1104.553366][T29445] bond1: (slave bridge2): Enslaving as an active interface with an up link
[ 1105.249145][T27753] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1105.419463][T27753] usb 5-1: Using ep0 maxpacket: 32
[ 1105.434650][T27753] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1105.456414][T27753] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1105.479287][T27753] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1105.496311][T27753] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1105.515327][T27753] usb 5-1: Product: syz
[ 1105.524243][T27753] usb 5-1: Manufacturer: syz
[ 1105.561681][T27753] hub 5-1:4.0: USB hub found
[ 1105.768183][T27753] hub 5-1:4.0: 2 ports detected
[ 1106.387739][T29493] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8369'.
[ 1106.419962][T29493] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8369'.
[ 1107.002618][T27753] hub 5-1:4.0: activate --> -90
[ 1107.050747][T29507] binder: 29506:29507 ioctl c0306201 2000000003c0 returned -14
[ 1107.404589][ T5900] usb 5-1: USB disconnect, device number 88
[ 1108.049490][T29526] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1108.338864][T22789] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1108.477012][T29538] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8386'.
[ 1108.519224][T22789] usb 5-1: Using ep0 maxpacket: 32
[ 1108.532398][T22789] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1108.567643][T22789] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1108.600541][T22789] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1108.625953][T22789] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1108.637603][T22789] usb 5-1: Product: syz
[ 1108.642617][T22789] usb 5-1: Manufacturer: syz
[ 1108.658333][T22789] hub 5-1:4.0: USB hub found
[ 1108.857886][T22789] hub 5-1:4.0: 2 ports detected
[ 1109.087561][T29557] netlink: 'syz.3.8395': attribute type 1 has an invalid length.
[ 1109.219194][T29559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1109.270870][ T5916] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 1109.430392][ T5916] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1109.442275][ T5916] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1109.456284][ T5916] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1109.468191][ T5916] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1109.477466][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1109.491006][T29555] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1110.079004][T22789] hub 5-1:4.0: activate --> -90
[ 1110.483339][ T5907] usb 5-1: USB disconnect, device number 89
[ 1110.658882][   T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 1110.821126][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1110.833278][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1110.846832][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1110.869551][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1110.885602][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1110.903223][   T24] usb 4-1: config 0 descriptor??
[ 1111.370716][   T24] savu 0003:1E7D:2D5A.007C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[ 1111.659081][ T5900] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1111.678048][   T24] usb 4-1: USB disconnect, device number 97
[ 1111.824230][ T5900] usb 5-1: Using ep0 maxpacket: 16
[ 1111.836091][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1111.858075][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1111.909174][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1111.918313][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1111.937674][ T5900] usb 5-1: Product: syz
[ 1111.941967][ T5900] usb 5-1: Manufacturer: syz
[ 1111.946598][ T5900] usb 5-1: SerialNumber: syz
[ 1111.970986][ T5900] usb 5-1: config 0 descriptor??
[ 1112.007809][ T5900] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1112.009513][   T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1112.024721][ T5900] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 1112.181660][ T5916] aiptek 9-1:17.0: Aiptek using 400 ms programming speed
[ 1112.190861][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1112.199220][ T5916] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input152
[ 1112.213757][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1112.229499][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1112.242150][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1112.265554][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.289678][   T24] usb 4-1: config 0 descriptor??
[ 1112.308792][ T5916] usb 9-1: USB disconnect, device number 40
[ 1112.314811][    C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1112.591573][ T5900] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1112.601338][ T5900] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 1112.684506][   T24] usbhid 4-1:0.0: can't add hid device: -71
[ 1112.694435][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1112.707058][   T24] usb 4-1: USB disconnect, device number 98
[ 1113.107070][   T30] audit: type=1800 audit(1772310138.395:988): pid=29591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8407" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1113.217915][ T5900] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[ 1113.260865][   T24] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1113.429391][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 2
[ 1113.443941][   T24] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1113.464727][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 4
[ 1113.479761][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 6
[ 1113.485102][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.545378][   T24] usb 9-1: config 0 descriptor??
[ 1113.551334][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 54
[ 1113.579380][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 56
[ 1113.601098][ T5900] usb 5-1: USB disconnect, device number 90
[ 1113.630672][   T24] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1115.108910][ T5900] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1115.252955][   T24] usb 9-1: USB disconnect, device number 41
[ 1115.279544][ T5900] usb 5-1: Using ep0 maxpacket: 32
[ 1115.290733][ T5900] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[ 1115.318220][ T5900] usb 5-1: config 0 has no interface number 0
[ 1115.330225][ T5900] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1115.344381][ T5900] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1115.353708][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1115.368891][ T5900] usb 5-1: Product: syz
[ 1115.373185][ T5900] usb 5-1: Manufacturer: syz
[ 1115.388079][ T5900] usb 5-1: SerialNumber: syz
[ 1115.396980][ T5900] usb 5-1: config 0 descriptor??
[ 1115.403730][T29636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1115.494121][T29649] create_pit_timer: 36 callbacks suppressed
[ 1115.494140][T29649] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1115.634693][T29636] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1115.889235][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.898482][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.293340][   T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1116.500776][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1116.536647][   T24] usb 4-1: config 0 has no interfaces?
[ 1116.554117][   T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1116.580121][   T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1116.598070][   T24] usb 4-1: Product: syz
[ 1116.609658][   T24] usb 4-1: Manufacturer: syz
[ 1116.625716][   T24] usb 4-1: config 0 descriptor??
[ 1116.871890][  T918] usb 4-1: USB disconnect, device number 99
[ 1117.409678][  T918] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1117.482311][ T5900] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1117.528392][ T5900] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 1117.587453][ T5900] asix 5-1:0.188: probe with driver asix failed with error -71
[ 1117.617571][  T918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1117.642400][ T5900] usb 5-1: USB disconnect, device number 91
[ 1117.651528][  T918] usb 4-1: config 0 has no interfaces?
[ 1117.700861][  T918] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1117.739065][  T918] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1117.806739][  T918] usb 4-1: Product: syz
[ 1117.825654][  T918] usb 4-1: Manufacturer: syz
[ 1117.858160][  T918] usb 4-1: config 0 descriptor??
[ 1118.099712][ T5900] usb 4-1: USB disconnect, device number 100
[ 1119.118072][T29691] loop9: detected capacity change from 0 to 4096
[ 1119.842088][T29700] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8448'.
[ 1119.933997][T29703] loop2: detected capacity change from 0 to 7
[ 1119.949028][ T5892] Dev loop2: unable to read RDB block 7
[ 1119.955121][ T5892]  loop2: unable to read partition table
[ 1119.963696][ T5892] loop2: partition table beyond EOD, truncated
[ 1119.973794][T29703] Dev loop2: unable to read RDB block 7
[ 1119.981489][T29703]  loop2: unable to read partition table
[ 1119.990644][  T918] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1119.990716][T29703] loop2: partition table beyond EOD, truncated
[ 1120.017459][T29703] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1120.180974][  T918] usb 5-1: Using ep0 maxpacket: 16
[ 1120.195205][  T918] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1120.225901][  T918] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1120.258606][  T918] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1120.298926][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.333377][  T918] usb 5-1: config 0 descriptor??
[ 1120.464595][T29709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1120.769214][ T5900] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1120.789931][  T918] nzxt-smart2 0003:1E71:2009.007D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0
[ 1120.959101][ T5900] usb 9-1: Using ep0 maxpacket: 32
[ 1120.995665][ T5900] usb 9-1: config 0 has an invalid interface number: 89 but max is 0
[ 1121.028739][ T5900] usb 9-1: config 0 has no interface number 0
[ 1121.049493][ T5900] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1121.096842][ T5900] usb 9-1: config 0 interface 89 has no altsetting 0
[ 1121.129185][ T5900] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1121.154731][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1121.195880][ T5900] usb 9-1: Product: syz
[ 1121.211757][ T5900] usb 9-1: Manufacturer: syz
[ 1121.230283][ T5900] usb 9-1: SerialNumber: syz
[ 1121.260315][ T5900] usb 9-1: config 0 descriptor??
[ 1121.277470][ T5900] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1121.296181][  T918] usb 5-1: USB disconnect, device number 92
[ 1121.312129][ T5900] em28xx 9-1:0.89: Video interface 89 found:
[ 1121.440907][T16014] Bluetooth: hci1: Malformed LE Event: 0x0d
[ 1121.886242][ T5900] em28xx 9-1:0.89: unknown em28xx chip ID (0)
[ 1122.005964][T29729] netlink: 'syz.4.8458': attribute type 1 has an invalid length.
[ 1122.298731][T27753] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1122.471632][T27753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1122.490819][T27753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1122.504057][T27753] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1122.525352][T27753] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 1122.536440][T27753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.559247][T27753] usb 4-1: config 0 descriptor??
[ 1122.948842][ T5900] em28xx 9-1:0.89: AC97 command still being executed: not handled properly!
[ 1123.105655][   T30] audit: type=1326 audit(1772310148.395:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.143271][ T5900] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1123.164796][   T30] audit: type=1326 audit(1772310148.415:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.169503][ T5900] em28xx 9-1:0.89: board has no eeprom
[ 1123.193238][   T30] audit: type=1326 audit(1772310148.435:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.193323][   T30] audit: type=1326 audit(1772310148.435:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.237142][T27753] steelseries 0003:1038:1410.007E: item fetching failed at offset 5/7
[ 1123.276896][   T30] audit: type=1326 audit(1772310148.445:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.291480][T27753] steelseries 0003:1038:1410.007E: parse failed
[ 1123.306015][   T30] audit: type=1326 audit(1772310148.445:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.326392][T27753] steelseries 0003:1038:1410.007E: probe with driver steelseries failed with error -22
[ 1123.333432][   T30] audit: type=1326 audit(1772310148.445:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.373939][   T30] audit: type=1326 audit(1772310148.455:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.401456][   T30] audit: type=1326 audit(1772310148.455:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.428796][ T5900] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67)
[ 1123.430538][   T30] audit: type=1326 audit(1772310148.455:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29748 comm="syz.6.8465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6de659c799 code=0x7ffc0000
[ 1123.475177][T27753] usb 4-1: USB disconnect, device number 101
[ 1123.499820][ T5900] em28xx 9-1:0.89: analog set to bulk mode.
[ 1123.516362][  T918] em28xx 9-1:0.89: Registering V4L2 extension
[ 1123.545160][ T5900] usb 9-1: USB disconnect, device number 42
[ 1123.605037][ T5900] em28xx 9-1:0.89: Disconnecting em28xx
[ 1123.681808][  T918] em28xx 9-1:0.89: Config register raw data: 0xffffffed
[ 1123.701696][  T918] em28xx 9-1:0.89: AC97 chip type couldn't be determined
[ 1123.740211][  T918] em28xx 9-1:0.89: No AC97 audio processor
[ 1123.759273][  T918] usb 9-1: Decoder not found
[ 1123.763980][  T918] em28xx 9-1:0.89: failed to create media graph
[ 1123.794735][  T918] em28xx 9-1:0.89: V4L2 device video103 deregistered
[ 1123.869381][  T918] em28xx 9-1:0.89: Registering snapshot button...
[ 1123.924143][  T918] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input153
[ 1124.005620][  T918] em28xx 9-1:0.89: Remote control support is not available for this card.
[ 1124.037043][ T5900] em28xx 9-1:0.89: Closing input extension
[ 1124.050943][ T5900] em28xx 9-1:0.89: Deregistering snapshot button
[ 1124.162929][ T5900] em28xx 9-1:0.89: Freeing device
[ 1124.458759][  T918] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1124.628805][  T918] usb 4-1: Using ep0 maxpacket: 32
[ 1124.635989][  T918] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[ 1124.653422][  T918] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 1
[ 1124.666124][  T918] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=55.37
[ 1124.685831][  T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1124.708936][  T918] usb 4-1: Product: syz
[ 1124.713174][  T918] usb 4-1: Manufacturer: syz
[ 1124.742591][  T918] usb 4-1: SerialNumber: syz
[ 1125.066570][T29782] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.8470'.
[ 1125.123255][T29782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8470'.
[ 1125.165879][T29784] binder: 29783:29784 ioctl c0306201 2000000003c0 returned -14
[ 1127.257425][ T5900] usb 4-1: USB disconnect, device number 102
[ 1128.156959][T28959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1128.168908][T28959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1128.178531][T28959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1128.190647][T28959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1128.201024][T28959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1128.729404][  T173] bond3 (unregistering): (slave ip6erspan0): Releasing active interface
[ 1129.649484][  T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1129.667534][  T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1129.688760][  T918] usb 5-1: new low-speed USB device number 93 using dummy_hcd
[ 1129.714228][  T173] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1129.738407][  T173] bond0 (unregistering): Released all slaves
[ 1129.784467][  T173] bond1 (unregistering): Released all slaves
[ 1129.827344][  T173] bond2 (unregistering): (slave veth9): Releasing active interface
[ 1129.851442][  T173] dummy0: entered promiscuous mode
[ 1129.869679][  T918] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1129.885078][  T173] bond2 (unregistering): (slave dummy0): Releasing active interface
[ 1129.898233][  T918] usb 5-1: config 0 has no interface number 0
[ 1129.914640][  T918] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1129.927781][  T173] bond2 (unregistering): Released all slaves
[ 1129.950604][  T918] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1129.974593][  T173] bond3 (unregistering): Released all slaves
[ 1129.983343][  T918] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1130.016828][  T918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1130.032519][  T173] bond4 (unregistering): Released all slaves
[ 1130.057592][  T918] usb 5-1: config 0 descriptor??
[ 1130.076382][T29853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1130.095625][T14608] bond0: (slave bond_slave_0): interface is now down
[ 1130.110151][T14608] bond0: (slave bond_slave_1): interface is now down
[ 1130.149213][  T918] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1130.276219][  T173] tipc: Left network mode
[ 1130.279931][T28959] Bluetooth: hci3: command tx timeout
[ 1130.930054][T29872] ima: Can not allocate md5 (reason: -2)
[ 1131.008519][   T30] kauditd_printk_skb: 132 callbacks suppressed
[ 1131.008594][   T30] audit: type=1800 audit(1772310156.295:1131): pid=29872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8509" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1131.165132][   T24] usb 5-1: USB disconnect, device number 93
[ 1131.400590][  T173] hsr_slave_0: left promiscuous mode
[ 1131.441349][  T173] hsr_slave_1: left promiscuous mode
[ 1131.469654][  T173] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1131.506273][  T173] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1132.358777][T28959] Bluetooth: hci3: command tx timeout
[ 1132.574738][  T173] team0 (unregistering): Port device team_slave_1 removed
[ 1132.624527][  T173] team0 (unregistering): Port device team_slave_0 removed
[ 1132.816664][T29901] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1132.922454][T29825] chnl_net:caif_netlink_parms(): no params data found
[ 1133.117492][T29825] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.183099][T29825] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.228437][T29825] bridge_slave_0: entered allmulticast mode
[ 1133.305183][T29825] bridge_slave_0: entered promiscuous mode
[ 1133.359082][T29825] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1133.411215][T29825] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1133.437428][T29825] bridge_slave_1: entered allmulticast mode
[ 1133.699822][T29825] bridge_slave_1: entered promiscuous mode
[ 1133.816254][T29925] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1134.225050][  T173] IPVS: stop unused estimator thread 0...
[ 1134.267312][T29825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1134.375221][T29825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1134.448778][T28959] Bluetooth: hci3: command tx timeout
[ 1134.524310][T29825] team0: Port device team_slave_0 added
[ 1134.582938][T29825] team0: Port device team_slave_1 added
[ 1134.955740][T29825] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1134.994825][T29825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1135.074720][T29825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1135.212512][T29825] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1135.236120][T29825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1135.321060][T29825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1136.100393][T29825] hsr_slave_0: entered promiscuous mode
[ 1136.168153][T29825] hsr_slave_1: entered promiscuous mode
[ 1136.219341][T29825] debugfs: 'hsr0' already exists in 'hsr'
[ 1136.225175][T29825] Cannot create hsr debugfs directory
[ 1136.521426][T28959] Bluetooth: hci3: command tx timeout
[ 1136.996459][  T173] bridge_slave_1: left promiscuous mode
[ 1137.013652][  T173] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1137.044944][  T173] bridge_slave_0: left promiscuous mode
[ 1137.058747][ T5907] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1137.059341][  T173] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1137.251404][ T5907] usb 5-1: Using ep0 maxpacket: 8
[ 1137.265705][ T5907] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1137.282013][ T5907] usb 5-1: config 179 has no interface number 0
[ 1137.298945][ T5907] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1137.338821][ T5907] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1137.377611][ T5907] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1137.389421][ T5907] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1137.414657][ T5907] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1137.455839][ T5907] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1137.480514][T29997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1137.496948][T29997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1137.504952][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1137.533935][T29988] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1137.788528][ T5900] usb 5-1: USB disconnect, device number 94
[ 1137.788812][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1137.803041][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1137.828798][  T173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1137.841749][  T173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1137.852456][  T173] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1137.863581][  T173] team0: left allmulticast mode
[ 1137.870748][  T173] bond0 (unregistering): Released all slaves
[ 1137.885999][  T173] bond1 (unregistering): Released all slaves
[ 1138.568302][T16014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1138.597088][T16014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1138.610760][T16014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1138.623094][T16014] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1138.633616][T16014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1138.832214][  T173] hsr_slave_0: left promiscuous mode
[ 1138.860721][  T173] hsr_slave_1: left promiscuous mode
[ 1138.874809][  T173] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1138.904313][  T173] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1139.397813][  T173] team0 (unregistering): Port device team_slave_1 removed
[ 1139.452371][  T173] team0 (unregistering): Port device team_slave_0 removed
[ 1140.680450][T28959] Bluetooth: hci2: command tx timeout
[ 1142.761269][T16014] Bluetooth: hci2: command tx timeout
[ 1142.992430][   T30] audit: type=1804 audit(1772310168.275:1132): pid=30052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8540" name="/newroot/245/file0" dev="fuse" ino=1 res=1 errno=0
[ 1144.854360][T16014] Bluetooth: hci2: command tx timeout
[ 1146.933822][T16014] Bluetooth: hci2: command tx timeout
[ 1147.187426][T30095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8552'.
[ 1148.024613][T30104] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 1148.031203][T30104] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1148.061921][T29825] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1148.071277][T30104] vhci_hcd vhci_hcd.0: Device attached
[ 1148.169188][T30107] vhci_hcd: connection closed
[ 1148.170055][   T36] vhci_hcd vhci_hcd.4: stop threads
[ 1148.201075][T29825] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1148.229722][   T36] vhci_hcd vhci_hcd.4: release socket
[ 1148.258040][   T36] vhci_hcd vhci_hcd.4: disconnect device
[ 1148.272336][  T918] vhci_hcd vhci_hcd.4: vhci_device speed not set
[ 1148.281823][T29825] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1148.308402][T29825] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1148.837111][T29825] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1148.942919][T30017] chnl_net:caif_netlink_parms(): no params data found
[ 1149.327149][T29825] 8021q: adding VLAN 0 to HW filter on device team0
[ 1149.534280][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1149.541517][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1149.680335][T30017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1149.722687][T30017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1149.730503][T27753] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1149.754131][T30017] bridge_slave_0: entered allmulticast mode
[ 1149.779565][T30017] bridge_slave_0: entered promiscuous mode
[ 1149.796992][T30017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1149.829216][T30017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1149.836559][T30017] bridge_slave_1: entered allmulticast mode
[ 1149.858172][T30017] bridge_slave_1: entered promiscuous mode
[ 1149.880221][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1149.887433][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1149.908934][T27753] usb 5-1: Using ep0 maxpacket: 8
[ 1149.937698][T27753] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1149.980774][T27753] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1
[ 1150.050163][T30137] binder: 30136:30137 ioctl c0306201 200000004a40 returned -22
[ 1150.066243][T27753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 1150.116354][T27753] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1150.126808][T27753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.135228][T27753] usb 5-1: Product: syz
[ 1150.141582][T27753] usb 5-1: Manufacturer: syz
[ 1150.146233][T27753] usb 5-1: SerialNumber: syz
[ 1150.154727][T30017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1150.186030][T30131] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1150.223369][T30017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1150.234785][T27753] usb 5-1: selecting invalid altsetting 1
[ 1150.422645][T30017] team0: Port device team_slave_0 added
[ 1150.459672][T27753] cdc_ncm 5-1:1.0: bind() failure
[ 1150.484619][T30017] team0: Port device team_slave_1 added
[ 1150.504913][T27753] cdc_ncm 5-1:1.1: skipping garbage
[ 1150.528746][T27753] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[ 1150.535611][T27753] cdc_ncm 5-1:1.1: bind() failure
[ 1150.579140][T27753] usb 5-1: USB disconnect, device number 95
[ 1150.688285][T29825] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1150.711811][T30017] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1150.719977][T30017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1150.748900][T30017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1150.754437][T30152] kvm: pic: non byte write
[ 1150.765043][T30017] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1150.774628][T30017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1150.800956][T30017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1150.883949][T14787] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.011232][T30017] hsr_slave_0: entered promiscuous mode
[ 1151.018251][T30017] hsr_slave_1: entered promiscuous mode
[ 1151.026525][T30017] debugfs: 'hsr0' already exists in 'hsr'
[ 1151.033050][T30017] Cannot create hsr debugfs directory
[ 1151.069837][T14787] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.165442][T14787] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.335053][T14787] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1151.579508][T29825] veth0_vlan: entered promiscuous mode
[ 1151.668310][T29825] veth1_vlan: entered promiscuous mode
[ 1151.948463][T14787] bridge_slave_1: left allmulticast mode
[ 1151.976632][T14787] bridge_slave_1: left promiscuous mode
[ 1151.995216][T14787] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1152.019944][T14787] bridge_slave_0: left allmulticast mode
[ 1152.025666][T14787] bridge_slave_0: left promiscuous mode
[ 1152.037626][T14787] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1153.124571][T14787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1153.144424][T14787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1153.171113][T14787] bond0 (unregistering): Released all slaves
[ 1153.208953][T30195] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1153.218020][T30195] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1153.408071][T29825] veth0_macvtap: entered promiscuous mode
[ 1153.520371][T29825] veth1_macvtap: entered promiscuous mode
[ 1153.687186][T29825] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1153.793068][T29825] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1153.944261][   T60] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.963342][   T60] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.107694][   T60] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.154634][   T60] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1154.244375][T14787] hsr_slave_0: left promiscuous mode
[ 1154.267043][T14787] hsr_slave_1: left promiscuous mode
[ 1154.300725][T14787] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1154.337417][T14787] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1154.372630][T14787] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1154.406364][T14787] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1154.483264][T14787] veth1_macvtap: left promiscuous mode
[ 1154.511549][T14787] veth0_macvtap: left promiscuous mode
[ 1154.544293][T14787] veth1_vlan: left promiscuous mode
[ 1154.574580][T14787] veth0_vlan: left promiscuous mode
[ 1155.604102][T14787] team0 (unregistering): Port device team_slave_1 removed
[ 1156.603178][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1156.646959][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1157.036872][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1157.102244][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1157.308305][T30017] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1157.524361][T30017] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1157.619413][T30017] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1157.753536][T30017] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1158.235573][T30245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1158.437008][T30017] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1158.553609][T30017] 8021q: adding VLAN 0 to HW filter on device team0
[ 1158.623643][T10890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1158.630861][T10890] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1158.745207][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1158.752463][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1159.040667][T30017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1159.277560][T30017] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1159.603086][T30017] veth0_vlan: entered promiscuous mode
[ 1159.842249][T30017] veth1_vlan: entered promiscuous mode
[ 1160.501312][T30017] veth0_macvtap: entered promiscuous mode
[ 1160.572458][T30017] veth1_macvtap: entered promiscuous mode
[ 1160.652307][T30282] batman_adv: batadv0: Adding interface: macsec1
[ 1160.686653][T30282] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1160.797373][T30282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1160.850674][T30282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1160.886125][T30282] batman_adv: batadv0: Interface activated: macsec1
[ 1161.232460][T30017] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1161.474205][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1161.637482][T30017] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1161.747508][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1161.906611][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1162.138873][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1162.191394][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1162.541356][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1162.637174][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1162.997836][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1163.145134][T28959] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1163.165493][T28959] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1163.174322][T28959] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1163.209254][T28959] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1163.224318][T28959] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1163.449673][T14608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1163.457645][T14608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1163.698321][T30329] Context (ID=0x4db) not attached to queue pair (handle=0x2:0x2)
[ 1163.803400][T14608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1163.834843][T14608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1164.167088][   T13] bridge_slave_1: left allmulticast mode
[ 1164.210821][   T13] bridge_slave_1: left promiscuous mode
[ 1164.264452][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1164.344815][   T13] bridge_slave_0: left allmulticast mode
[ 1164.379638][   T13] bridge_slave_0: left promiscuous mode
[ 1164.427233][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1165.318921][T16014] Bluetooth: hci3: command tx timeout
[ 1165.533607][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1165.561692][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1165.614545][   T13] bond0 (unregistering): Released all slaves
[ 1166.018735][  T918] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1166.249052][  T918] usb 4-1: Using ep0 maxpacket: 16
[ 1166.274615][  T918] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1166.306597][  T918] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[ 1166.337500][  T918] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[ 1166.399385][  T918] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=89.94
[ 1166.410802][  T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.446979][T30323] chnl_net:caif_netlink_parms(): no params data found
[ 1166.465425][  T918] usb 4-1: Product: syz
[ 1166.510645][  T918] usb 4-1: Manufacturer: syz
[ 1166.533740][  T918] usb 4-1: SerialNumber: syz
[ 1166.726808][   T13] hsr_slave_0: left promiscuous mode
[ 1166.791569][   T13] hsr_slave_1: left promiscuous mode
[ 1166.827257][   T30] audit: type=1326 audit(1772310192.115:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30340 comm="syz.3.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1166.929453][  T918] usb 4-1: USB disconnect, device number 103
[ 1166.936533][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1166.985278][   T30] audit: type=1326 audit(1772310192.115:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30340 comm="syz.3.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1166.998756][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1167.115668][   T30] audit: type=1326 audit(1772310192.115:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30340 comm="syz.3.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1167.149608][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1167.169449][   T30] audit: type=1326 audit(1772310192.115:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30340 comm="syz.3.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1167.194024][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1167.267942][   T13] veth1_macvtap: left promiscuous mode
[ 1167.287401][   T30] audit: type=1326 audit(1772310192.115:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30340 comm="syz.3.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1167.375615][   T13] veth0_macvtap: left promiscuous mode
[ 1167.385561][   T30] audit: type=1326 audit(1772310192.115:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30340 comm="syz.3.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1167.408755][T16014] Bluetooth: hci3: command tx timeout
[ 1167.446607][   T30] audit: type=1326 audit(1772310192.115:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30340 comm="syz.3.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1167.524586][   T13] veth1_vlan: left promiscuous mode
[ 1167.547105][   T13] veth0_vlan: left promiscuous mode
[ 1167.560290][   T30] audit: type=1326 audit(1772310192.155:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30340 comm="syz.3.8529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1168.898739][  T918] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1168.983975][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1169.028025][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1169.068708][  T918] usb 4-1: Using ep0 maxpacket: 8
[ 1169.082669][  T918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1169.126076][  T918] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1169.167182][  T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.226566][  T918] usb 4-1: Product: syz
[ 1169.253896][  T918] usb 4-1: Manufacturer: syz
[ 1169.270428][  T918] usb 4-1: SerialNumber: syz
[ 1169.319191][  T918] usb 4-1: config 0 descriptor??
[ 1169.354210][  T918] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1169.478860][T16014] Bluetooth: hci3: command tx timeout
[ 1170.202443][T30323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1170.248839][T30323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1170.308483][T30323] bridge_slave_0: entered allmulticast mode
[ 1170.401074][T30323] bridge_slave_0: entered promiscuous mode
[ 1170.481408][T30323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1170.519673][T30323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1170.546973][T30323] bridge_slave_1: entered allmulticast mode
[ 1170.606864][T30323] bridge_slave_1: entered promiscuous mode
[ 1170.840612][T30323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1170.868862][ T5916] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1170.942929][T30323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1171.100230][ T5916] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1171.139145][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1171.218927][ T5916] usb 5-1: config 0 descriptor??
[ 1171.252768][ T5916] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1171.288082][T30323] team0: Port device team_slave_0 added
[ 1171.314727][T30323] team0: Port device team_slave_1 added
[ 1171.478737][  T918] gspca_zc3xx: reg_r err -71
[ 1171.538962][T30323] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1171.566375][T30323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1171.569250][T16014] Bluetooth: hci3: command tx timeout
[ 1171.675436][T30323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1171.731420][T30323] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1171.738470][T30323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1171.848792][T30323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1172.057052][T30323] hsr_slave_0: entered promiscuous mode
[ 1172.068706][  T918] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1172.090450][T30323] hsr_slave_1: entered promiscuous mode
[ 1172.096325][  T918] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1172.117508][T30323] debugfs: 'hsr0' already exists in 'hsr'
[ 1172.168779][  T918] usb 4-1: USB disconnect, device number 104
[ 1172.175067][T30323] Cannot create hsr debugfs directory
[ 1172.522660][T30451] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1172.529249][T30451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1172.557577][T30451] vhci_hcd vhci_hcd.0: Device attached
[ 1172.578294][T30454] vhci_hcd: connection closed
[ 1172.579047][   T60] vhci_hcd vhci_hcd.3: stop threads
[ 1172.618781][   T60] vhci_hcd vhci_hcd.3: release socket
[ 1172.630750][   T60] vhci_hcd vhci_hcd.3: disconnect device
[ 1172.894835][ T5916] gspca_stv06xx: I2C: Read error writing address: -71
[ 1172.932773][ T5916] usb 5-1: USB disconnect, device number 96
[ 1174.091818][T30323] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1174.170110][T30323] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1174.259962][T30323] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1174.342917][T30323] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1174.811469][T30501] netlink: 'syz.3.8629': attribute type 4 has an invalid length.
[ 1174.956003][T30323] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1175.083629][T30323] 8021q: adding VLAN 0 to HW filter on device team0
[ 1175.204165][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1175.211348][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1175.267026][T30505] loop5: detected capacity change from 0 to 3
[ 1175.305058][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1175.312241][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1175.333035][T30505] Dev loop5: unable to read RDB block 3
[ 1175.357331][T30505]  loop5: AHDI p1 p2
[ 1175.375932][T30505] loop5: partition table partially beyond EOD, truncated
[ 1175.388155][T30509] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8631'.
[ 1175.511269][T30512] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8631'.
[ 1176.051069][T30323] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1176.247927][T30323] veth0_vlan: entered promiscuous mode
[ 1176.347419][T30323] veth1_vlan: entered promiscuous mode
[ 1176.645088][T30323] veth0_macvtap: entered promiscuous mode
[ 1176.749060][T30323] veth1_macvtap: entered promiscuous mode
[ 1176.921280][T30323] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1177.071572][T30323] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1177.177053][   T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.238233][   T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.299496][   T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.330112][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.340230][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.359940][T10890] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1177.705414][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1177.744212][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1177.847914][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1177.873832][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1178.810579][T30571] batadv_slave_0: entered promiscuous mode
[ 1178.829896][T30571] batman_adv: batadv0: Adding interface: macsec1
[ 1178.845586][T30571] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1178.915394][T30571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1178.939852][T30571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1178.976791][T30571] batman_adv: batadv0: Interface activated: macsec1
[ 1180.742095][T30621] syzkaller0: entered promiscuous mode
[ 1180.756936][T30621] syzkaller0: entered allmulticast mode
[ 1181.503518][T30648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8662'.
[ 1182.318770][ T5900] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1182.501787][ T5900] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1182.547444][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1182.604430][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1182.660836][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1182.712251][ T5900] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1182.753752][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1182.796013][ T5900] usb 5-1: Product: syz
[ 1182.822035][ T5900] usb 5-1: Manufacturer: syz
[ 1182.861411][ T5900] cdc_wdm 5-1:1.0: skipping garbage
[ 1182.886743][ T5900] cdc_wdm 5-1:1.0: skipping garbage
[ 1182.932682][ T5900] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1182.962232][ T5900] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1183.178470][ T5900] usb 5-1: USB disconnect, device number 97
[ 1184.102297][T30684] syzkaller0: entered promiscuous mode
[ 1184.131757][T30684] syzkaller0: entered allmulticast mode
[ 1184.755835][T30696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1187.787390][T30721] syzkaller0: entered promiscuous mode
[ 1187.815585][T30721] syzkaller0: entered allmulticast mode
[ 1190.026467][ T5900] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1190.208793][ T5900] usb 2-1: Using ep0 maxpacket: 16
[ 1190.217491][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1190.230852][ T5900] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1190.246911][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1190.260283][ T5900] usb 2-1: Product: syz
[ 1190.284578][ T5900] usb 2-1: Manufacturer: syz
[ 1190.308675][ T5900] usb 2-1: SerialNumber: syz
[ 1190.329167][ T5900] usb 2-1: config 0 descriptor??
[ 1190.372455][ T5900] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1190.407894][ T5900] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 1190.991455][ T5900] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1191.455879][ T5900] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1191.477671][ T5900] em28xx 2-1:0.0: board has no eeprom
[ 1191.764638][ T5900] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1191.772796][ T5900] em28xx 2-1:0.0: dvb set to bulk mode.
[ 1191.778697][T12760] em28xx 2-1:0.0: Binding DVB extension
[ 1191.819407][ T5900] usb 2-1: USB disconnect, device number 93
[ 1191.833769][ T5900] em28xx 2-1:0.0: Disconnecting em28xx
[ 1191.948462][T12760] em28xx 2-1:0.0: Registering input extension
[ 1191.955010][ T5900] em28xx 2-1:0.0: Closing input extension
[ 1191.987069][ T5900] em28xx 2-1:0.0: Freeing device
[ 1193.199229][ T1152] bridge_slave_1: left allmulticast mode
[ 1193.204939][ T1152] bridge_slave_1: left promiscuous mode
[ 1193.211967][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1193.222244][ T1152] bridge_slave_0: left allmulticast mode
[ 1193.227909][ T1152] bridge_slave_0: left promiscuous mode
[ 1193.235074][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1193.396261][T30774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1193.515806][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1193.530043][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1193.543350][ T1152] bond0 (unregistering): Released all slaves
[ 1193.678288][T30735] syzkaller0: entered promiscuous mode
[ 1193.685153][T30735] syzkaller0: entered allmulticast mode
[ 1194.035938][T30793] kvm: pic: non byte write
[ 1194.639793][T30803] kvm: kvm [30801]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000
[ 1195.994218][T30440] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1196.162688][T30440] usb 4-1: Using ep0 maxpacket: 16
[ 1196.170725][T30440] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1196.180982][T30440] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1196.193317][T30440] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1196.206073][T30440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.214777][T30440] usb 4-1: Product: syz
[ 1196.222007][T30440] usb 4-1: Manufacturer: syz
[ 1196.226652][T30440] usb 4-1: SerialNumber: syz
[ 1196.457256][T30440] usb 4-1: 0:2 : does not exist
[ 1196.515005][T30440] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[ 1196.614441][T30440] usb 4-1: USB disconnect, device number 105
[ 1196.664619][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1197.836348][T30819] batman_adv: batadv0: Adding interface: dummy0
[ 1197.849783][T30819] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1197.918670][T30819] batman_adv: batadv0: Interface activated: dummy0
[ 1197.950932][T30821] batadv0: mtu less than device minimum
[ 1197.958056][T30821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1197.972732][T30821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1197.974205][T30821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1197.975643][T30821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1197.978509][T30821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1198.019187][T30821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1198.030979][T30821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1198.032574][T30821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1198.034009][T30821] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1198.108346][T30837] binder: 30835:30837 ioctl c0306201 2000000003c0 returned -14
[ 1198.357468][T30846] syz_tun: entered allmulticast mode
[ 1198.480204][ T1152] hsr_slave_0: left promiscuous mode
[ 1198.546825][ T1152] hsr_slave_1: left promiscuous mode
[ 1198.586596][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1198.657529][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1198.863481][T30871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1198.898194][T30871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1199.883409][T28959] Bluetooth: hci0: command 0x0406 tx timeout
[ 1200.120533][ T1152] team0 (unregistering): Port device team_slave_1 removed
[ 1200.246076][ T1152] team0 (unregistering): Port device team_slave_0 removed
[ 1201.828877][ T5900] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1202.020934][ T5900] usb 5-1: Using ep0 maxpacket: 8
[ 1202.070298][ T5900] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1202.118713][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.142550][ T5900] usb 5-1: Product: syz
[ 1202.173161][ T5900] usb 5-1: Manufacturer: syz
[ 1202.195242][ T5900] usb 5-1: SerialNumber: syz
[ 1202.240123][ T5900] usb 5-1: config 0 descriptor??
[ 1202.480919][ T5900] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1203.263028][T30968] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1203.848635][   T30] audit: type=1800 audit(1772310229.135:1141): pid=30978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8738" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1204.534131][ T5900] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1204.563292][T30990] netlink: 'syz.1.8741': attribute type 27 has an invalid length.
[ 1204.592729][ T5900] usb 5-1: USB disconnect, device number 98
[ 1204.812044][T30990] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1204.819789][T30990] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1205.197126][T30990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1205.264392][T30990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1205.794924][T30990] batman_adv: batadv0: Interface deactivated: macsec1
[ 1206.034638][T30992] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1206.066268][T30992] 8021q: adding VLAN 0 to HW filter on device team0
[ 1206.112890][T30992] net_ratelimit: 10 callbacks suppressed
[ 1206.112904][T30992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1206.164163][T10890] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1206.190865][T10890] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1206.257998][T10890] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1206.341129][T10890] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1212.395900][T12760] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1212.591903][T12760] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1212.622619][T12760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.689181][T12760] usb 5-1: Product: syz
[ 1212.704165][T12760] usb 5-1: Manufacturer: syz
[ 1212.724336][T12760] usb 5-1: SerialNumber: syz
[ 1212.827879][T31141] syzkaller0: entered promiscuous mode
[ 1212.858883][T31141] syzkaller0: entered allmulticast mode
[ 1213.147593][T31151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1213.179049][T12760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1213.211138][T31151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1213.217562][T12760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1213.923133][   T29] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1214.081065][   T29] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1214.118323][   T29] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1214.149901][   T29] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1214.174611][   T29] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1214.203319][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1214.242317][   T29] usb 4-1: Product: syz
[ 1214.246556][   T29] usb 4-1: Manufacturer: syz
[ 1214.260317][   T29] usb 4-1: SerialNumber: syz
[ 1214.791905][   T29] usb 4-1: USB disconnect, device number 106
[ 1214.861111][T12760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO
[ 1214.896962][T12760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1214.915922][T12760] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1214.946745][T12760] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[ 1214.988104][T12760] usb 5-1: USB disconnect, device number 99
[ 1215.523801][T31215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1215.545885][T31215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1215.577442][T31216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8795'.
[ 1217.246035][T31246] netlink: 'syz.6.8799': attribute type 12 has an invalid length.
[ 1217.502762][T31283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8807'.
[ 1217.957361][T31294] netlink: 'syz.1.8811': attribute type 21 has an invalid length.
[ 1217.987052][T31294] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8811'.
[ 1217.999362][T31294] netlink: 'syz.1.8811': attribute type 1 has an invalid length.
[ 1220.272800][T31360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1220.327225][T31360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1220.374231][T31370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8831'.
[ 1220.569906][T31370] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1220.622725][T31372] 8021q: adding VLAN 0 to HW filter on device macvlan3
[ 1220.695491][T31372] team0: Port device macvlan3 added
[ 1220.955583][T31379] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8832'.
[ 1224.129012][T27753] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1224.307206][T31426] binder: 31425:31426 ioctl c0306201 200000000380 returned -14
[ 1224.329039][T27753] usb 5-1: Using ep0 maxpacket: 32
[ 1224.340098][T27753] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[ 1224.374203][T27753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1224.437811][T27753] usb 5-1: config 0 descriptor??
[ 1224.504039][T27753] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[ 1226.059106][ T5916] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1226.218683][ T5916] usb 4-1: Using ep0 maxpacket: 16
[ 1226.239216][ T5916] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[ 1226.248432][ T5916] usb 4-1: config 1 has no interface number 0
[ 1226.255808][ T5916] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1226.276413][ T5916] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1226.302749][ T5916] usb 4-1: config 1 interface 105 has no altsetting 0
[ 1226.330261][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.339351][ T5916] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1226.348547][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1226.363266][ T5916] usb 4-1: Product: syz
[ 1226.373413][ T5916] usb 4-1: Manufacturer: syz
[ 1226.379691][ T5916] usb 4-1: SerialNumber: syz
[ 1226.404326][T31452] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1226.426247][T31452] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1226.537062][T27753] gspca_vc032x: reg_w err -71
[ 1226.551045][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.579729][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.585089][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.602567][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.608360][T31469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8850'.
[ 1226.617740][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.639220][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.644577][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.679493][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.684865][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.701242][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.706594][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.725416][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.739834][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.752590][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.764797][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.776104][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.783305][T27753] gspca_vc032x: I2c Bus Busy Wait 00
[ 1226.789545][T27753] gspca_vc032x: Unknown sensor...
[ 1226.796771][T27753] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[ 1226.824457][T27753] usb 5-1: USB disconnect, device number 100
[ 1226.875059][T31452] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1226.891784][T31452] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1227.469576][T30440] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1227.522695][ T5916] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1227.591660][ T5916] aqc111 4-1:1.105 eth21: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b6:1f:90:06:2c:05
[ 1227.664724][T30440] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1227.710881][T30440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1227.748632][T30440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1227.769687][T30440] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1227.784903][T30440] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1227.794376][T30440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.797535][T27753] usb 4-1: USB disconnect, device number 107
[ 1227.812851][T30440] usb 5-1: config 0 descriptor??
[ 1227.841125][T27753] aqc111 4-1:1.105 eth21: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 1227.981297][T27753] aqc111 4-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1228.023408][T27753] aqc111 4-1:1.105 eth21 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1228.081262][T27753] aqc111 4-1:1.105 eth21 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 1228.304520][T30440] plantronics 0003:047F:FFFF.007F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1228.382530][T31516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8861'.
[ 1228.450332][T31521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8861'.
[ 1229.364787][T27753] usb 5-1: USB disconnect, device number 101
[ 1230.620400][T31567] kvm: pic: single mode not supported
[ 1230.620424][T31567] kvm: pic: level sensitive irq not supported
[ 1230.638425][T31567] kvm: pic: level sensitive irq not supported
[ 1230.660752][T31567] kvm: pic: single mode not supported
[ 1230.777781][T31572] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1232.787250][T31622] syzkaller0: entered allmulticast mode
[ 1233.707253][T31648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8890'.
[ 1235.008818][ T5900] usb 4-1: new full-speed USB device number 108 using dummy_hcd
[ 1235.177922][ T5900] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1235.199043][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.237514][ T5900] usb 4-1: Product: syz
[ 1235.261317][ T5900] usb 4-1: Manufacturer: syz
[ 1235.272545][ T5900] usb 4-1: SerialNumber: syz
[ 1235.307473][ T5900] usb 4-1: config 0 descriptor??
[ 1235.541316][ T5900] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1236.106631][T31708] netlink: 'syz.4.8901': attribute type 1 has an invalid length.
[ 1236.995768][ T5900] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1237.031460][ T5900] usb 4-1: USB disconnect, device number 108
[ 1237.504441][T31740] binder: 31739:31740 ioctl c0306201 200000000380 returned -14
[ 1237.538875][ T5900] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1237.752936][ T5900] usb 5-1: Using ep0 maxpacket: 16
[ 1237.791561][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1237.838714][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1237.893233][ T5900] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1237.917756][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.938675][ T5900] usb 5-1: Product: syz
[ 1237.942919][ T5900] usb 5-1: Manufacturer: syz
[ 1237.978015][ T5900] usb 5-1: SerialNumber: syz
[ 1238.009228][ T5900] usb 5-1: config 0 descriptor??
[ 1238.039711][ T5900] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1238.068198][ T5900] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 1238.688716][ T5900] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1238.718834][ T5900] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 1238.766155][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.772612][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.335250][T31793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8923'.
[ 1239.362656][ T5900] em28xx 5-1:0.0: Unknown AC97 audio processor detected!
[ 1239.411838][T31796] binder: 31795:31796 ioctl c0306201 200000000180 returned -14
[ 1239.796479][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 2
[ 1239.816191][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 4
[ 1239.836815][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 6
[ 1239.891091][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 54
[ 1239.910229][ T5900] em28xx 5-1:0.0: couldn't setup AC97 register 56
[ 1239.958327][ T5900] usb 5-1: USB disconnect, device number 102
[ 1240.163997][T31808] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1240.961547][T31839] kvm: pic: non byte write
[ 1241.119001][T30440] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1241.304009][T30440] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1241.346525][T30440] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1241.393558][T30440] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 1241.440112][T30440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.508641][T30440] usb 5-1: config 0 descriptor??
[ 1241.833122][T31858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1241.891844][T31858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1242.768872][T30440] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1242.938837][T30440] usb 2-1: Using ep0 maxpacket: 32
[ 1242.962442][T30440] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1242.989688][T30440] usb 2-1: config 0 has no interface number 0
[ 1243.019112][T30440] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1243.052887][T30440] usb 2-1: config 0 interface 1 has no altsetting 0
[ 1243.093740][T30440] usb 2-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a
[ 1243.133255][T30440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.159071][T30440] usb 2-1: Product: syz
[ 1243.163466][T30440] usb 2-1: Manufacturer: syz
[ 1243.168104][T30440] usb 2-1: SerialNumber: syz
[ 1243.216189][T30440] usb 2-1: config 0 descriptor??
[ 1243.467233][T30440] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces
[ 1243.496284][T30440] cx231xx 2-1:0.1: Failed to read PCB config
[ 1243.511833][T31893] syzkaller0: entered promiscuous mode
[ 1243.513707][T30440] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71
[ 1243.527512][T31893] syzkaller0: entered allmulticast mode
[ 1243.550532][T31893] tipc: Started in network mode
[ 1243.556761][T30440] usb 2-1: USB disconnect, device number 94
[ 1243.557222][T31893] tipc: Node identity da3de5671dd6, cluster identity 4711
[ 1243.571879][T31893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1243.585133][T31892] tipc: Resetting bearer <eth:syzkaller0>
[ 1243.635010][T31892] tipc: Disabling bearer <eth:syzkaller0>
[ 1243.873859][T31906] loop5: detected capacity change from 0 to 7
[ 1243.909879][ T5892] Dev loop5: unable to read RDB block 7
[ 1243.915744][ T5892]  loop5: unable to read partition table
[ 1243.921029][T22789] usb 5-1: USB disconnect, device number 103
[ 1243.951801][ T5892] loop5: partition table beyond EOD, truncated
[ 1243.985251][T31906] Dev loop5: unable to read RDB block 7
[ 1244.004750][T31906]  loop5: unable to read partition table
[ 1244.018693][T30440] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1244.032927][T31906] loop5: partition table beyond EOD, truncated
[ 1244.061374][T31906] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1244.239523][T30440] usb 2-1: Using ep0 maxpacket: 32
[ 1244.318195][T30440] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1244.368134][T30440] usb 2-1: config 0 has no interface number 0
[ 1244.414805][T30440] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1244.498142][T30440] usb 2-1: config 0 interface 1 has no altsetting 0
[ 1244.547713][T30440] usb 2-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a
[ 1244.616200][T30440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1244.675051][T30440] usb 2-1: Product: syz
[ 1244.712021][T30440] usb 2-1: Manufacturer: syz
[ 1244.744399][T30440] usb 2-1: SerialNumber: syz
[ 1244.831970][T30440] usb 2-1: config 0 descriptor??
[ 1245.101631][T30440] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces
[ 1245.190026][T30440] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - CARRAERA (card=1)
[ 1245.359760][T30440] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[ 1245.419713][T30440] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1245.448477][T30440] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1245.477935][T30440] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1245.558739][T30440] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --71
[ 1245.598779][T30440] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -71
[ 1245.701890][T30440] i2c i2c-4: Added multiplexed i2c bus 6
[ 1245.756204][T30440] i2c i2c-4: Added multiplexed i2c bus 7
[ 1245.816120][T30440] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[ 1245.865616][T30440] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[ 1246.023351][T30440] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71
[ 1246.164066][T30440] usb 2-1: USB disconnect, device number 95
[ 1248.240259][T31972] binder: 31970:31972 ioctl c0306201 200000000480 returned -14
[ 1248.418822][T30440] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1248.612346][T30440] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1248.656709][T30440] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1248.702335][T30440] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1248.738724][T30440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1248.775148][T30440] usb 4-1: SerialNumber: syz
[ 1249.057589][T30440] usb 4-1: 0:2 : does not exist
[ 1249.230418][T31985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1249.252423][T30440] usb 4-1: USB disconnect, device number 109
[ 1249.370581][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1251.060254][T28959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1251.079674][T28959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1251.092934][T28959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1251.112802][T28959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1251.120845][T28959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1252.497341][T32030] chnl_net:caif_netlink_parms(): no params data found
[ 1252.842865][T32053] binder: 32052:32053 ioctl c0306201 200000000180 returned -14
[ 1253.169894][T32030] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1253.198768][T32030] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1253.229215][T32030] bridge_slave_0: entered allmulticast mode
[ 1253.249015][T16014] Bluetooth: hci4: command tx timeout
[ 1253.279363][T32030] bridge_slave_0: entered promiscuous mode
[ 1253.327007][T32030] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1253.347281][T32030] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1253.391846][T32030] bridge_slave_1: entered allmulticast mode
[ 1253.499138][T32030] bridge_slave_1: entered promiscuous mode
[ 1253.688973][T32030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1253.744376][T32030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1253.896480][T32030] team0: Port device team_slave_0 added
[ 1254.005827][T32030] team0: Port device team_slave_1 added
[ 1254.070692][T32072] io-wq is not configured for unbound workers
[ 1254.720815][T32030] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1254.791986][T32030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1254.924708][T32030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1255.012326][T32030] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1255.035952][T32030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1255.150293][T32030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1255.329238][T16014] Bluetooth: hci4: command tx timeout
[ 1255.693479][T32030] hsr_slave_0: entered promiscuous mode
[ 1255.764677][T32030] hsr_slave_1: entered promiscuous mode
[ 1255.842326][T32030] debugfs: 'hsr0' already exists in 'hsr'
[ 1255.917850][T32030] Cannot create hsr debugfs directory
[ 1257.404316][T16014] Bluetooth: hci4: command tx timeout
[ 1257.991433][T32130] pimreg: entered allmulticast mode
[ 1257.999922][T32131] pimreg: left allmulticast mode
[ 1258.037168][T32130] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.9000'.
[ 1259.481118][T16014] Bluetooth: hci4: command tx timeout
[ 1259.594907][T32030] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1259.665476][T32030] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1259.713856][T32030] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1259.769854][T32030] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1260.057091][T32169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1260.112508][T32169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1260.252613][T32030] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1260.342346][T32030] 8021q: adding VLAN 0 to HW filter on device team0
[ 1260.384437][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1260.391686][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1260.423140][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1260.430335][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1260.623812][T32030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1260.737053][T32030] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1260.862043][T32191] binder: 32188:32191 ioctl c0306201 0 returned -14
[ 1260.883840][T32030] veth0_vlan: entered promiscuous mode
[ 1260.940415][T32030] veth1_vlan: entered promiscuous mode
[ 1260.965102][T32195] binder: 32188:32195 ioctl c0306201 0 returned -14
[ 1261.031818][T32197] binder: 32188:32197 ioctl c0306201 0 returned -14
[ 1261.080359][T32030] veth0_macvtap: entered promiscuous mode
[ 1261.100755][T32030] veth1_macvtap: entered promiscuous mode
[ 1261.166953][T32030] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1261.221123][T32030] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1261.318839][T16014] Bluetooth: hci2: command 0x0406 tx timeout
[ 1261.381835][ T1152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.393324][ T1152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.407994][ T1152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.420861][ T1152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1261.713982][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1261.773202][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1261.921264][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1261.989421][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1262.633891][T32232] netlink: zone id is out of range
[ 1262.639389][T32232] netlink: zone id is out of range
[ 1262.683143][T32232] netlink: zone id is out of range
[ 1262.724177][T32232] netlink: zone id is out of range
[ 1262.748918][T32232] netlink: zone id is out of range
[ 1262.787901][T32232] netlink: zone id is out of range
[ 1262.818017][T32232] netlink: zone id is out of range
[ 1262.831919][T32232] netlink: zone id is out of range
[ 1262.930116][T32232] netlink: zone id is out of range
[ 1262.935362][T32232] netlink: zone id is out of range
[ 1265.290651][T32257] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0
[ 1266.781429][T32288] loop2: detected capacity change from 0 to 7
[ 1266.820267][T32288]  loop2:
[ 1266.833609][T32288] loop2: partition table partially beyond EOD, truncated
[ 1267.379218][T30439] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1267.539597][T30439] usb 6-1: Using ep0 maxpacket: 16
[ 1267.584263][T30439] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1267.638625][T30439] usb 6-1: config 0 has no interface number 0
[ 1267.728955][T30439] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1267.738077][T30439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.831932][T30439] usb 6-1: Product: syz
[ 1267.836133][T30439] usb 6-1: Manufacturer: syz
[ 1267.902830][T30439] usb 6-1: SerialNumber: syz
[ 1267.928167][T30439] usb 6-1: config 0 descriptor??
[ 1267.949609][T30439] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1268.134969][T32312] kvm: pic: single mode not supported
[ 1268.136280][T32312] kvm: pic: single mode not supported
[ 1268.180832][T32312] kvm: pic: single mode not supported
[ 1268.226564][T32312] kvm: pic: single mode not supported
[ 1268.710304][T32312] kvm: pic: single mode not supported
[ 1268.716556][T32312] kvm: pic: level sensitive irq not supported
[ 1269.339091][T32326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1269.893065][T32336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1269.902657][T32336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1270.075082][T32340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9049'.
[ 1270.227590][T30439] gspca_spca1528: reg_r err -71
[ 1270.239856][T30439] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[ 1270.280224][T30439] usb 6-1: USB disconnect, device number 29
[ 1270.316456][T32344] syzkaller0: entered promiscuous mode
[ 1270.359152][T32344] syzkaller0: entered allmulticast mode
[ 1270.765706][T32355] kvm: pic: non byte write
[ 1271.179531][T32367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1271.222645][T32367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1271.935718][T32387] syzkaller0: entered promiscuous mode
[ 1271.941553][T32387] syzkaller0: entered allmulticast mode
[ 1273.309060][T30440] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1273.470018][T30440] usb 2-1: device descriptor read/64, error -71
[ 1273.718740][T30440] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1273.897555][   T30] audit: type=1326 audit(1772310299.185:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32433 comm="syz.3.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1273.932146][T30440] usb 2-1: device descriptor read/64, error -71
[ 1274.024262][   T30] audit: type=1326 audit(1772310299.185:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32433 comm="syz.3.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1274.087368][T30440] usb usb2-port1: attempt power cycle
[ 1274.229557][   T30] audit: type=1326 audit(1772310299.215:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32433 comm="syz.3.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1274.396695][   T30] audit: type=1326 audit(1772310299.215:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32433 comm="syz.3.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1274.463239][   T30] audit: type=1326 audit(1772310299.215:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32433 comm="syz.3.9071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80bd19c799 code=0x7ffc0000
[ 1274.490267][T30440] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1274.529031][T30440] usb 2-1: device descriptor read/8, error -71
[ 1274.810436][T30440] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1274.892865][T30440] usb 2-1: device descriptor read/8, error -71
[ 1275.044526][T30440] usb usb2-port1: unable to enumerate USB device
[ 1275.113010][T32455] netlink: 'syz.5.9073': attribute type 1 has an invalid length.
[ 1275.210460][T32455] macvlan2: entered promiscuous mode
[ 1275.247179][T32455] macvlan2: entered allmulticast mode
[ 1276.479839][  T918] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1276.709973][  T918] usb 4-1: Using ep0 maxpacket: 32
[ 1276.745692][   T30] audit: type=1326 audit(1772310302.025:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32485 comm="syz.6.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de659c799 code=0x7fc00000
[ 1276.845990][  T918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1276.902375][  T918] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1277.006541][  T918] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64
[ 1277.041020][  T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.121397][  T918] usb 4-1: config 0 descriptor??
[ 1277.304349][   T30] audit: type=1326 audit(1772310302.595:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32485 comm="syz.6.9080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6de6596517 code=0x7fc00000
[ 1277.422288][  T918] usb 4-1: USB disconnect, device number 110
[ 1277.653814][T32501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1277.684343][T32501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1278.737237][T32527] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1280.077847][T32556] netlink: 'syz.0.9095': attribute type 10 has an invalid length.
[ 1280.138041][T32556] netlink: 'syz.0.9095': attribute type 10 has an invalid length.
[ 1281.429085][T32573] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1282.824367][T32604] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9104'.
[ 1282.848040][T32599] vlan2: entered allmulticast mode
[ 1282.874934][T32599] bond0: entered allmulticast mode
[ 1282.895485][T32599] bond_slave_0: entered allmulticast mode
[ 1282.895515][T32599] bond_slave_1: entered allmulticast mode
[ 1283.114519][T32604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1283.127239][T32604] bond_slave_0: left allmulticast mode
[ 1283.149446][T32604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1283.162630][T32604] bond_slave_1: left allmulticast mode
[ 1283.165195][T32604] bond0 (unregistering): Released all slaves
[ 1283.739049][T32622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1283.784187][T32622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1285.518241][T32671] netlink: 'syz.3.9118': attribute type 29 has an invalid length.
[ 1285.537737][T32671] netlink: 'syz.3.9118': attribute type 29 has an invalid length.
[ 1285.598664][T30439] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1285.794099][T30439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1285.810599][T30439] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1285.840188][T30439] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1285.865020][T30439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1285.889788][T30439] usb 2-1: SerialNumber: syz
[ 1286.159270][T30439] usb 2-1: 0:2 : does not exist
[ 1286.326601][T30439] usb 2-1: USB disconnect, device number 100
[ 1286.433619][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1286.926489][T16014] Bluetooth: hci3: command 0x0406 tx timeout
[ 1287.798827][  T918] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1287.988875][  T918] usb 6-1: Using ep0 maxpacket: 16
[ 1288.019872][  T918] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1288.078971][  T918] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1288.125695][  T918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1288.164693][  T918] usb 6-1: Product: syz
[ 1288.188658][  T918] usb 6-1: Manufacturer: syz
[ 1288.204405][  T918] usb 6-1: SerialNumber: syz
[ 1288.244754][  T918] usb 6-1: config 0 descriptor??
[ 1288.296442][  T918] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[ 1288.338987][  T918] usb 6-1: Detected FT232R
[ 1288.498988][  T918] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1288.783392][  T918] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1289.109224][T30439] usb 6-1: USB disconnect, device number 30
[ 1289.158076][T30439] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1289.231993][T30439] ftdi_sio 6-1:0.0: device disconnected
[ 1289.611555][T32760] kvm: pic: non byte write
[ 1290.268766][T30134] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1290.458656][T30134] usb 6-1: Using ep0 maxpacket: 8
[ 1290.501328][T30134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1290.594747][T30134] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1290.681178][  T310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9142'.
[ 1290.702455][T30134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.757746][  T310] netlink: 'syz.1.9142': attribute type 3 has an invalid length.
[ 1290.796333][T30134] usb 6-1: config 0 descriptor??
[ 1290.819645][  T310] netlink: 'syz.1.9142': attribute type 4 has an invalid length.
[ 1290.876463][  T310] netlink: 'syz.1.9142': attribute type 5 has an invalid length.
[ 1290.990924][  T310] netlink: 'syz.1.9142': attribute type 6 has an invalid length.
[ 1291.149027][T30134] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1291.163979][  T314] kvm: requested 79619 ns i8254 timer period limited to 200000 ns
[ 1291.315533][  T314] kvm: requested 81295 ns i8254 timer period limited to 200000 ns
[ 1291.488381][  T314] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[ 1291.597218][T30134] usb 6-1: USB disconnect, device number 31
[ 1292.462529][  T356] tipc: Failed to remove unknown binding: 66,0,0/0:2562437105/2562437107
[ 1292.493133][T28959] Bluetooth: hci3: ISO packet for unknown connection handle 0
[ 1292.532481][  T356] tipc: Failed to remove unknown binding: 66,0,0/0:2562437105/2562437106
[ 1292.597687][  T356] tipc: Failed to remove unknown binding: 66,0,0/0:2562437105/2562437107
[ 1292.658195][  T356] tipc: Failed to remove unknown binding: 66,0,0/0:2562437105/2562437106
[ 1292.749832][  T358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9148'.
[ 1293.342869][T30134] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1293.569372][T30134] usb 2-1: Using ep0 maxpacket: 32
[ 1293.607560][T30134] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1293.658797][T30134] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1293.665492][T30134] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1293.727980][T30134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.812954][T30134] usb 2-1: config 0 descriptor??
[ 1294.746329][T30134] corsair-cpro 0003:1B1C:0C10.0080: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[ 1295.246592][T30134] corsair-cpro 0003:1B1C:0C10.0080: probe with driver corsair-cpro failed with error -71
[ 1295.317571][T30134] usb 2-1: USB disconnect, device number 101
[ 1296.067089][  T414] geneve2: entered promiscuous mode
[ 1296.107477][  T173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 54743 - 0
[ 1296.147965][  T173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 54743 - 0
[ 1296.219319][  T173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 54743 - 0
[ 1296.295180][  T173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 54743 - 0
[ 1296.383350][  T419] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1296.910133][  T435] syzkaller0: entered promiscuous mode
[ 1296.932143][  T435] syzkaller0: entered allmulticast mode
[ 1296.970323][  T437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9163'.
[ 1297.064131][  T437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9163'.
[ 1298.099566][  T463] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1299.349936][  T478] 
[ 1299.352343][  T478] =====================================================
[ 1299.352358][  T478] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1299.352384][  T478] syzkaller #0 Tainted: G             L     
[ 1299.352398][  T478] -----------------------------------------------------
[ 1299.352408][  T478] syz.3.9173/478 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1299.352432][  T478] ffff888059b2f468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150
[ 1299.352493][  T478] 
[ 1299.352493][  T478] and this task is already holding:
[ 1299.352502][  T478] ffffffff8effcb78 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0
[ 1299.352556][  T478] which would create a new lock dependency:
[ 1299.352565][  T478]  (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3}
[ 1299.352613][  T478] 
[ 1299.352613][  T478] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1299.352624][  T478]  (kbd_event_lock){..-.}-{3:3}
[ 1299.352644][  T478] 
[ 1299.352644][  T478] ... which became SOFTIRQ-irq-safe at:
[ 1299.352656][  T478]   lock_acquire+0xf0/0x2e0
[ 1299.352682][  T478]   _raw_spin_lock+0x2e/0x40
[ 1299.352709][  T478]   kbd_event+0xd6/0x40d0
[ 1299.352733][  T478]   input_handle_events_default+0xd4/0x1a0
[ 1299.352759][  T478]   input_pass_values+0x288/0x890
[ 1299.352781][  T478]   input_event_dispose+0x330/0x6b0
[ 1299.352810][  T478]   input_event+0x89/0xe0
[ 1299.352839][  T478]   hidinput_report_event+0xa1/0x100
[ 1299.352862][  T478]   hid_report_raw_event+0x1489/0x1720
[ 1299.352883][  T478]   hid_input_report+0x44b/0x580
[ 1299.352903][  T478]   hid_irq_in+0x47e/0x6d0
[ 1299.352931][  T478]   __usb_hcd_giveback_urb+0x376/0x540
[ 1299.352953][  T478]   dummy_timer+0xbbd/0x45d0
[ 1299.352974][  T478]   __hrtimer_run_queues+0x53a/0xcc0
[ 1299.353003][  T478]   hrtimer_run_softirq+0x182/0x5a0
[ 1299.353032][  T478]   handle_softirqs+0x22a/0x870
[ 1299.353057][  T478]   __irq_exit_rcu+0x5f/0x150
[ 1299.353081][  T478]   irq_exit_rcu+0x9/0x30
[ 1299.353106][  T478]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1299.353135][  T478]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1299.353152][  T478]   bus_notify+0xc1/0x180
[ 1299.353173][  T478]   driver_bound+0x210/0x2e0
[ 1299.353193][  T478]   really_probe+0x789/0xaf0
[ 1299.353208][  T478]   __driver_probe_device+0x18c/0x320
[ 1299.353223][  T478]   driver_probe_device+0x4f/0x240
[ 1299.353238][  T478]   __device_attach_driver+0x2d4/0x4c0
[ 1299.353253][  T478]   bus_for_each_drv+0x258/0x2f0
[ 1299.353273][  T478]   __device_attach+0x2c5/0x450
[ 1299.353286][  T478]   device_initial_probe+0xa1/0xd0
[ 1299.353300][  T478]   bus_probe_device+0x12a/0x220
[ 1299.353319][  T478]   device_add+0x7b6/0xb70
[ 1299.353341][  T478]   hid_add_device+0x272/0x3e0
[ 1299.353357][  T478]   usbhid_probe+0xe3a/0x12f0
[ 1299.353379][  T478]   usb_probe_interface+0x668/0xc90
[ 1299.353394][  T478]   really_probe+0x267/0xaf0
[ 1299.353408][  T478]   __driver_probe_device+0x18c/0x320
[ 1299.353423][  T478]   driver_probe_device+0x4f/0x240
[ 1299.353438][  T478]   __device_attach_driver+0x2d4/0x4c0
[ 1299.353453][  T478]   bus_for_each_drv+0x258/0x2f0
[ 1299.353472][  T478]   __device_attach+0x2c5/0x450
[ 1299.353485][  T478]   device_initial_probe+0xa1/0xd0
[ 1299.353499][  T478]   bus_probe_device+0x12a/0x220
[ 1299.353517][  T478]   device_add+0x7b6/0xb70
[ 1299.353539][  T478]   usb_set_configuration+0x1a87/0x2110
[ 1299.353561][  T478]   usb_generic_driver_probe+0x8d/0x150
[ 1299.353583][  T478]   usb_probe_device+0x1c4/0x3b0
[ 1299.353596][  T478]   really_probe+0x267/0xaf0
[ 1299.353611][  T478]   __driver_probe_device+0x18c/0x320
[ 1299.353625][  T478]   driver_probe_device+0x4f/0x240
[ 1299.353641][  T478]   __device_attach_driver+0x2d4/0x4c0
[ 1299.353656][  T478]   bus_for_each_drv+0x258/0x2f0
[ 1299.353674][  T478]   __device_attach+0x2c5/0x450
[ 1299.353687][  T478]   device_initial_probe+0xa1/0xd0
[ 1299.353701][  T478]   bus_probe_device+0x12a/0x220
[ 1299.353720][  T478]   device_add+0x7b6/0xb70
[ 1299.353741][  T478]   usb_new_device+0xa08/0x16f0
[ 1299.353760][  T478]   hub_event+0x2a1c/0x4f30
[ 1299.353781][  T478]   process_scheduled_works+0xb02/0x1830
[ 1299.353813][  T478]   worker_thread+0xa50/0xfc0
[ 1299.353831][  T478]   kthread+0x388/0x470
[ 1299.353844][  T478]   ret_from_fork+0x51e/0xb90
[ 1299.353862][  T478]   ret_from_fork_asm+0x1a/0x30
[ 1299.353885][  T478] 
[ 1299.353885][  T478] to a SOFTIRQ-irq-unsafe lock:
[ 1299.353892][  T478]  (tasklist_lock){.+.+}-{3:3}
[ 1299.353908][  T478] 
[ 1299.353908][  T478] ... which became SOFTIRQ-irq-unsafe at:
[ 1299.353916][  T478] ...
[ 1299.353920][  T478]   lock_acquire+0xf0/0x2e0
[ 1299.353939][  T478]   _raw_read_lock+0x36/0x50
[ 1299.353960][  T478]   __do_wait+0xde/0x740
[ 1299.353975][  T478]   do_wait+0x1e7/0x540
[ 1299.353989][  T478]   kernel_wait+0xd6/0x1c0
[ 1299.354004][  T478]   call_usermodehelper_exec_work+0xbe/0x230
[ 1299.354023][  T478]   process_scheduled_works+0xb02/0x1830
[ 1299.354042][  T478]   worker_thread+0xa50/0xfc0
[ 1299.354061][  T478]   kthread+0x388/0x470
[ 1299.354073][  T478]   ret_from_fork+0x51e/0xb90
[ 1299.354091][  T478]   ret_from_fork_asm+0x1a/0x30
[ 1299.354113][  T478] 
[ 1299.354113][  T478] other info that might help us debug this:
[ 1299.354113][  T478] 
[ 1299.354119][  T478] Chain exists of:
[ 1299.354119][  T478]   kbd_event_lock --> &tty->flow.lock --> tasklist_lock
[ 1299.354119][  T478] 
[ 1299.354147][  T478]  Possible interrupt unsafe locking scenario:
[ 1299.354147][  T478] 
[ 1299.354153][  T478]        CPU0                    CPU1
[ 1299.354158][  T478]        ----                    ----
[ 1299.354164][  T478]   lock(tasklist_lock);
[ 1299.354176][  T478]                                local_irq_disable();
[ 1299.354181][  T478]                                lock(kbd_event_lock);
[ 1299.354199][  T478]                                lock(&tty->flow.lock);
[ 1299.354212][  T478]   <Interrupt>
[ 1299.354217][  T478]     lock(kbd_event_lock);
[ 1299.354228][  T478] 
[ 1299.354228][  T478]  *** DEADLOCK ***
[ 1299.354228][  T478] 
[ 1299.354233][  T478] 5 locks held by syz.3.9173/478:
[ 1299.354243][  T478]  #0: ffff88802bd18118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[ 1299.354286][  T478]  #1: ffff88802bca8230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 1299.354336][  T478]  #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 1299.354382][  T478]  #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1299.354421][  T478]  #4: ffffffff8effcb78 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0
[ 1299.354465][  T478] 
[ 1299.354465][  T478] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1299.354473][  T478] -> (kbd_event_lock){..-.}-{3:3} {
[ 1299.354495][  T478]    IN-SOFTIRQ-W at:
[ 1299.354505][  T478]                     lock_acquire+0xf0/0x2e0
[ 1299.354523][  T478]                     _raw_spin_lock+0x2e/0x40
[ 1299.354542][  T478]                     kbd_event+0xd6/0x40d0
[ 1299.354562][  T478]                     input_handle_events_default+0xd4/0x1a0
[ 1299.354582][  T478]                     input_pass_values+0x288/0x890
[ 1299.354599][  T478]                     input_event_dispose+0x330/0x6b0
[ 1299.354623][  T478]                     input_event+0x89/0xe0
[ 1299.354645][  T478]                     hidinput_report_event+0xa1/0x100
[ 1299.354664][  T478]                     hid_report_raw_event+0x1489/0x1720
[ 1299.354680][  T478]                     hid_input_report+0x44b/0x580
[ 1299.354696][  T478]                     hid_irq_in+0x47e/0x6d0
[ 1299.354718][  T478]                     __usb_hcd_giveback_urb+0x376/0x540
[ 1299.354734][  T478]                     dummy_timer+0xbbd/0x45d0
[ 1299.354750][  T478]                     __hrtimer_run_queues+0x53a/0xcc0
[ 1299.354771][  T478]                     hrtimer_run_softirq+0x182/0x5a0
[ 1299.354793][  T478]                     handle_softirqs+0x22a/0x870
[ 1299.354812][  T478]                     __irq_exit_rcu+0x5f/0x150
[ 1299.354831][  T478]                     irq_exit_rcu+0x9/0x30
[ 1299.354849][  T478]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1299.354872][  T478]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1299.354888][  T478]                     bus_notify+0xc1/0x180
[ 1299.354908][  T478]                     driver_bound+0x210/0x2e0
[ 1299.354922][  T478]                     really_probe+0x789/0xaf0
[ 1299.354937][  T478]                     __driver_probe_device+0x18c/0x320
[ 1299.354952][  T478]                     driver_probe_device+0x4f/0x240
[ 1299.354968][  T478]                     __device_attach_driver+0x2d4/0x4c0
[ 1299.354984][  T478]                     bus_for_each_drv+0x258/0x2f0
[ 1299.355003][  T478]                     __device_attach+0x2c5/0x450
[ 1299.355017][  T478]                     device_initial_probe+0xa1/0xd0
[ 1299.355031][  T478]                     bus_probe_device+0x12a/0x220
[ 1299.355051][  T478]                     device_add+0x7b6/0xb70
[ 1299.355072][  T478]                     hid_add_device+0x272/0x3e0
[ 1299.355089][  T478]                     usbhid_probe+0xe3a/0x12f0
[ 1299.355111][  T478]                     usb_probe_interface+0x668/0xc90
[ 1299.355126][  T478]                     really_probe+0x267/0xaf0
[ 1299.355141][  T478]                     __driver_probe_device+0x18c/0x320
[ 1299.355156][  T478]                     driver_probe_device+0x4f/0x240
[ 1299.355171][  T478]                     __device_attach_driver+0x2d4/0x4c0
[ 1299.355191][  T478]                     bus_for_each_drv+0x258/0x2f0
[ 1299.355210][  T478]                     __device_attach+0x2c5/0x450
[ 1299.355223][  T478]                     device_initial_probe+0xa1/0xd0
[ 1299.355237][  T478]                     bus_probe_device+0x12a/0x220
[ 1299.355257][  T478]                     device_add+0x7b6/0xb70
[ 1299.355278][  T478]                     usb_set_configuration+0x1a87/0x2110
[ 1299.355302][  T478]                     usb_generic_driver_probe+0x8d/0x150
[ 1299.355324][  T478]                     usb_probe_device+0x1c4/0x3b0
[ 1299.355338][  T478]                     really_probe+0x267/0xaf0
[ 1299.355353][  T478]                     __driver_probe_device+0x18c/0x320
[ 1299.355368][  T478]                     driver_probe_device+0x4f/0x240
[ 1299.355384][  T478]                     __device_attach_driver+0x2d4/0x4c0
[ 1299.355399][  T478]                     bus_for_each_drv+0x258/0x2f0
[ 1299.355419][  T478]                     __device_attach+0x2c5/0x450
[ 1299.355432][  T478]                     device_initial_probe+0xa1/0xd0
[ 1299.355446][  T478]                     bus_probe_device+0x12a/0x220
[ 1299.355466][  T478]                     device_add+0x7b6/0xb70
[ 1299.355488][  T478]                     usb_new_device+0xa08/0x16f0
[ 1299.355507][  T478]                     hub_event+0x2a1c/0x4f30
[ 1299.355529][  T478]                     process_scheduled_works+0xb02/0x1830
[ 1299.355548][  T478]                     worker_thread+0xa50/0xfc0
[ 1299.355567][  T478]                     kthread+0x388/0x470
[ 1299.355580][  T478]                     ret_from_fork+0x51e/0xb90
[ 1299.355599][  T478]                     ret_from_fork_asm+0x1a/0x30
[ 1299.355621][  T478]    INITIAL USE at:
[ 1299.355631][  T478]                    lock_acquire+0xf0/0x2e0
[ 1299.355648][  T478]                    _raw_spin_lock_irqsave+0x40/0x60
[ 1299.355669][  T478]                    vt_reset_unicode+0x2b/0x1a0
[ 1299.355688][  T478]                    reset_vc+0x68/0x1b0
[ 1299.355703][  T478]                    vc_init+0x70/0x4a0
[ 1299.355717][  T478]                    con_init+0x377/0x6a0
[ 1299.355735][  T478]                    console_init+0x10b/0x4d0
[ 1299.355754][  T478]                    start_kernel+0x22b/0x3d0
[ 1299.355777][  T478]                    x86_64_start_reservations+0x24/0x30
[ 1299.355796][  T478]                    x86_64_start_kernel+0x143/0x1c0
[ 1299.355813][  T478]                    common_startup_64+0x13e/0x147
[ 1299.355828][  T478]  }
[ 1299.355833][  T478]  ... key      at: [<ffffffff8effcb78>] kbd_event_lock+0x18/0xa0
[ 1299.355857][  T478] 
[ 1299.355857][  T478] the dependencies between the lock to be acquired
[ 1299.355862][  T478]  and SOFTIRQ-irq-unsafe lock:
[ 1299.355880][  T478]    -> (tasklist_lock){.+.+}-{3:3} {
[ 1299.355902][  T478]       HARDIRQ-ON-R at:
[ 1299.355912][  T478]                           lock_acquire+0xf0/0x2e0
[ 1299.355931][  T478]                           _raw_read_lock+0x36/0x50
[ 1299.355951][  T478]                           __do_wait+0xde/0x740
[ 1299.355966][  T478]                           do_wait+0x1e7/0x540
[ 1299.355982][  T478]                           kernel_wait+0xd6/0x1c0
[ 1299.355997][  T478]                           call_usermodehelper_exec_work+0xbe/0x230
[ 1299.356017][  T478]                           process_scheduled_works+0xb02/0x1830
[ 1299.356037][  T478]                           worker_thread+0xa50/0xfc0
[ 1299.356056][  T478]                           kthread+0x388/0x470
[ 1299.356069][  T478]                           ret_from_fork+0x51e/0xb90
[ 1299.356088][  T478]                           ret_from_fork_asm+0x1a/0x30
[ 1299.356110][  T478]       SOFTIRQ-ON-R at:
[ 1299.356120][  T478]                           lock_acquire+0xf0/0x2e0
[ 1299.356138][  T478]                           _raw_read_lock+0x36/0x50
[ 1299.356158][  T478]                           __do_wait+0xde/0x740
[ 1299.356173][  T478]                           do_wait+0x1e7/0x540
[ 1299.356194][  T478]                           kernel_wait+0xd6/0x1c0
[ 1299.356209][  T478]                           call_usermodehelper_exec_work+0xbe/0x230
[ 1299.356228][  T478]                           process_scheduled_works+0xb02/0x1830
[ 1299.356247][  T478]                           worker_thread+0xa50/0xfc0
[ 1299.356267][  T478]                           kthread+0x388/0x470
[ 1299.356280][  T478]                           ret_from_fork+0x51e/0xb90
[ 1299.356299][  T478]                           ret_from_fork_asm+0x1a/0x30
[ 1299.356321][  T478]       INITIAL USE at:
[ 1299.356331][  T478]                          lock_acquire+0xf0/0x2e0
[ 1299.356349][  T478]                          _raw_write_lock_irq+0x3d/0x50
[ 1299.356371][  T478]                          copy_process+0x247a/0x3cf0
[ 1299.356391][  T478]                          kernel_clone+0x248/0x8e0
[ 1299.356412][  T478]                          user_mode_thread+0x110/0x180
[ 1299.356433][  T478]                          rest_init+0x23/0x300
[ 1299.356450][  T478]                          start_kernel+0x385/0x3d0
[ 1299.356473][  T478]                          x86_64_start_reservations+0x24/0x30
[ 1299.356492][  T478]                          x86_64_start_kernel+0x143/0x1c0
[ 1299.356509][  T478]                          common_startup_64+0x13e/0x147
[ 1299.356524][  T478]       INITIAL READ USE at:
[ 1299.356533][  T478]                               lock_acquire+0xf0/0x2e0
[ 1299.356551][  T478]                               _raw_read_lock+0x36/0x50
[ 1299.356572][  T478]                               __do_wait+0xde/0x740
[ 1299.356586][  T478]                               do_wait+0x1e7/0x540
[ 1299.356601][  T478]                               kernel_wait+0xd6/0x1c0
[ 1299.356616][  T478]                               call_usermodehelper_exec_work+0xbe/0x230
[ 1299.356635][  T478]                               process_scheduled_works+0xb02/0x1830
[ 1299.356655][  T478]                               worker_thread+0xa50/0xfc0
[ 1299.356674][  T478]                               kthread+0x388/0x470
[ 1299.356687][  T478]                               ret_from_fork+0x51e/0xb90
[ 1299.356706][  T478]                               ret_from_fork_asm+0x1a/0x30
[ 1299.356728][  T478]     }
[ 1299.356733][  T478]     ... key      at: [<ffffffff8e40c058>] tasklist_lock+0x18/0x40
[ 1299.356750][  T478]     ... acquired at:
[ 1299.356756][  T478]    _raw_read_lock+0x36/0x50
[ 1299.356775][  T478]    send_sigurg+0x12b/0x420
[ 1299.356789][  T478]    sk_send_sigurg+0x6c/0x2e0
[ 1299.356804][  T478]    queue_oob+0x42c/0x4f0
[ 1299.356822][  T478]    unix_stream_sendmsg+0xcb1/0xe80
[ 1299.356838][  T478]    ____sys_sendmsg+0xa68/0xad0
[ 1299.356859][  T478]    ___sys_sendmsg+0x2a5/0x360
[ 1299.356880][  T478]    __sys_sendmmsg+0x27c/0x4e0
[ 1299.356902][  T478]    __x64_sys_sendmmsg+0xa0/0xc0
[ 1299.356924][  T478]    do_syscall_64+0x14d/0xf80
[ 1299.356936][  T478]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.356951][  T478] 
[ 1299.356955][  T478]   -> (&f_owner->lock){....}-{3:3} {
[ 1299.356978][  T478]      INITIAL USE at:
[ 1299.356987][  T478]                        lock_acquire+0xf0/0x2e0
[ 1299.357005][  T478]                        _raw_write_lock_irq+0x3d/0x50
[ 1299.357027][  T478]                        __f_setown+0x67/0x370
[ 1299.357039][  T478]                        generic_setlease+0xacf/0xff0
[ 1299.357061][  T478]                        do_fcntl_add_lease+0x35e/0x470
[ 1299.357083][  T478]                        fcntl_setlease+0x123/0x180
[ 1299.357105][  T478]                        do_fcntl+0x8b3/0x1a20
[ 1299.357119][  T478]                        __se_sys_fcntl+0xc8/0x150
[ 1299.357133][  T478]                        do_syscall_64+0x14d/0xf80
[ 1299.357147][  T478]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.357162][  T478]      INITIAL READ USE at:
[ 1299.357171][  T478]                             lock_acquire+0xf0/0x2e0
[ 1299.357195][  T478]                             _raw_read_lock_irqsave+0x48/0x60
[ 1299.357216][  T478]                             send_sigio+0x38/0x370
[ 1299.357230][  T478]                             kill_fasync+0x24d/0x4d0
[ 1299.357244][  T478]                             lease_break_callback+0x26/0x30
[ 1299.357259][  T478]                             __break_lease+0x81c/0x1e80
[ 1299.357279][  T478]                             __vfs_removexattr_locked+0x1dc/0x280
[ 1299.357301][  T478]                             vfs_removexattr+0x7f/0x230
[ 1299.357322][  T478]                             path_removexattrat+0x4a6/0x750
[ 1299.357338][  T478]                             __x64_sys_fremovexattr+0x62/0x70
[ 1299.357353][  T478]                             do_syscall_64+0x14d/0xf80
[ 1299.357366][  T478]                             entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.357382][  T478]    }
[ 1299.357387][  T478]    ... key      at: [<ffffffff9a2e8160>] file_f_owner_allocate.__key+0x0/0x20
[ 1299.357445][  T478]    ... acquired at:
[ 1299.357451][  T478]    _raw_read_lock_irqsave+0x48/0x60
[ 1299.357472][  T478]    send_sigio+0x38/0x370
[ 1299.357484][  T478]    kill_fasync+0x24d/0x4d0
[ 1299.357498][  T478]    lease_break_callback+0x26/0x30
[ 1299.357512][  T478]    __break_lease+0x81c/0x1e80
[ 1299.357532][  T478]    __vfs_removexattr_locked+0x1dc/0x280
[ 1299.357553][  T478]    vfs_removexattr+0x7f/0x230
[ 1299.357573][  T478]    path_removexattrat+0x4a6/0x750
[ 1299.357587][  T478]    __x64_sys_fremovexattr+0x62/0x70
[ 1299.357601][  T478]    do_syscall_64+0x14d/0xf80
[ 1299.357614][  T478]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.357629][  T478] 
[ 1299.357633][  T478]  -> (&new->fa_lock){....}-{3:3} {
[ 1299.357655][  T478]     INITIAL USE at:
[ 1299.357664][  T478]                      lock_acquire+0xf0/0x2e0
[ 1299.357682][  T478]                      _raw_write_lock_irq+0x3d/0x50
[ 1299.357703][  T478]                      fasync_remove_entry+0xf1/0x1c0
[ 1299.357718][  T478]                      pipe_fasync+0xff/0x1e0
[ 1299.357734][  T478]                      __fput+0x8a5/0xa70
[ 1299.357754][  T478]                      task_work_run+0x1d9/0x270
[ 1299.357769][  T478]                      exit_to_user_mode_loop+0xed/0x480
[ 1299.357786][  T478]                      do_syscall_64+0x32d/0xf80
[ 1299.357799][  T478]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.357814][  T478]     INITIAL READ USE at:
[ 1299.357824][  T478]                           lock_acquire+0xf0/0x2e0
[ 1299.357842][  T478]                           _raw_read_lock_irqsave+0x48/0x60
[ 1299.357863][  T478]                           kill_fasync+0x199/0x4d0
[ 1299.357878][  T478]                           do_splice+0x109a/0x1910
[ 1299.357899][  T478]                           __se_sys_splice+0x353/0x490
[ 1299.357920][  T478]                           do_syscall_64+0x14d/0xf80
[ 1299.357934][  T478]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.357949][  T478]   }
[ 1299.357954][  T478]   ... key      at: [<ffffffff9a2e8180>] fasync_insert_entry.__key+0x0/0x20
[ 1299.357979][  T478]   ... acquired at:
[ 1299.357985][  T478]    _raw_read_lock_irqsave+0x48/0x60
[ 1299.358005][  T478]    kill_fasync+0x199/0x4d0
[ 1299.358018][  T478]    __start_tty+0x18c/0x220
[ 1299.358035][  T478]    n_tty_ioctl_helper+0x128/0x4d0
[ 1299.358052][  T478]    tty_ioctl+0x9c5/0xde0
[ 1299.358104][  T478]    __se_sys_ioctl+0xfc/0x170
[ 1299.358123][  T478]    do_syscall_64+0x14d/0xf80
[ 1299.358140][  T478]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.358160][  T478] 
[ 1299.358166][  T478] -> (&tty->flow.lock){....}-{3:3} {
[ 1299.358204][  T478]    INITIAL USE at:
[ 1299.358217][  T478]                    lock_acquire+0xf0/0x2e0
[ 1299.358242][  T478]                    _raw_spin_lock_irqsave+0x40/0x60
[ 1299.358269][  T478]                    start_tty+0x20/0x70
[ 1299.358291][  T478]                    n_tty_set_termios+0xa7c/0x10c0
[ 1299.358312][  T478]                    tty_set_termios+0xdb3/0x1800
[ 1299.358334][  T478]                    set_termios+0x566/0x710
[ 1299.358350][  T478]                    tty_mode_ioctl+0x4a6/0x7d0
[ 1299.358367][  T478]                    tty_ioctl+0x9c5/0xde0
[ 1299.358385][  T478]                    __se_sys_ioctl+0xfc/0x170
[ 1299.358400][  T478]                    do_syscall_64+0x14d/0xf80
[ 1299.358413][  T478]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.358429][  T478]  }
[ 1299.358434][  T478]  ... key      at: [<ffffffff9a5c7600>] alloc_tty_struct.__key.35+0x0/0x20
[ 1299.358452][  T478]  ... acquired at:
[ 1299.358458][  T478]    _raw_spin_lock_irqsave+0x40/0x60
[ 1299.358478][  T478]    stop_tty+0x2f/0x150
[ 1299.358494][  T478]    kbd_event+0x2ec1/0x40d0
[ 1299.358513][  T478]    input_handle_events_default+0xd4/0x1a0
[ 1299.358554][  T478]    input_pass_values+0x288/0x890
[ 1299.358576][  T478]    input_event_dispose+0x330/0x6b0
[ 1299.358608][  T478]    input_inject_event+0x1dd/0x340
[ 1299.358631][  T478]    evdev_write+0x325/0x4c0
[ 1299.358648][  T478]    vfs_write+0x29a/0xb90
[ 1299.358661][  T478]    ksys_write+0x150/0x270
[ 1299.358674][  T478]    do_syscall_64+0x14d/0xf80
[ 1299.358686][  T478]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.358701][  T478] 
[ 1299.358705][  T478] 
[ 1299.358705][  T478] stack backtrace:
[ 1299.358718][  T478] CPU: 0 UID: 0 PID: 478 Comm: syz.3.9173 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1299.358738][  T478] Tainted: [L]=SOFTLOCKUP
[ 1299.358744][  T478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1299.358755][  T478] Call Trace:
[ 1299.358762][  T478]  <TASK>
[ 1299.358769][  T478]  dump_stack_lvl+0xe8/0x150
[ 1299.358790][  T478]  __lock_acquire+0x2a94/0x2cf0
[ 1299.358818][  T478]  lock_acquire+0xf0/0x2e0
[ 1299.358836][  T478]  ? stop_tty+0x2f/0x150
[ 1299.358857][  T478]  _raw_spin_lock_irqsave+0x40/0x60
[ 1299.358877][  T478]  ? stop_tty+0x2f/0x150
[ 1299.358894][  T478]  stop_tty+0x2f/0x150
[ 1299.358912][  T478]  kbd_event+0x2ec1/0x40d0
[ 1299.358935][  T478]  ? __pfx_kbd_event+0x10/0x10
[ 1299.358954][  T478]  ? finish_task_switch+0x240/0x920
[ 1299.358972][  T478]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1299.358997][  T478]  ? __lock_acquire+0x6b5/0x2cf0
[ 1299.359018][  T478]  ? __lock_acquire+0x6b5/0x2cf0
[ 1299.359040][  T478]  ? __lock_acquire+0x6b5/0x2cf0
[ 1299.359060][  T478]  ? __lock_acquire+0x6b5/0x2cf0
[ 1299.359083][  T478]  ? __lock_acquire+0x6b5/0x2cf0
[ 1299.359103][  T478]  ? lock_acquire+0xf0/0x2e0
[ 1299.359122][  T478]  input_handle_events_default+0xd4/0x1a0
[ 1299.359145][  T478]  ? input_pass_values+0x8d/0x890
[ 1299.359162][  T478]  input_pass_values+0x288/0x890
[ 1299.359181][  T478]  ? input_handle_event+0x70c/0xf30
[ 1299.359211][  T478]  input_event_dispose+0x330/0x6b0
[ 1299.359236][  T478]  input_inject_event+0x1dd/0x340
[ 1299.359260][  T478]  ? input_inject_event+0xb6/0x340
[ 1299.359284][  T478]  evdev_write+0x325/0x4c0
[ 1299.359304][  T478]  ? __pfx_evdev_write+0x10/0x10
[ 1299.359324][  T478]  ? bpf_lsm_file_permission+0x9/0x20
[ 1299.359342][  T478]  ? security_file_permission+0x75/0x260
[ 1299.359367][  T478]  ? rw_verify_area+0x255/0x4d0
[ 1299.359381][  T478]  ? __pfx_evdev_write+0x10/0x10
[ 1299.359399][  T478]  vfs_write+0x29a/0xb90
[ 1299.359416][  T478]  ? __pfx_vfs_write+0x10/0x10
[ 1299.359431][  T478]  ? __fget_files+0x2a/0x420
[ 1299.359452][  T478]  ? __fget_files+0x2a/0x420
[ 1299.359473][  T478]  ? __fget_files+0x3a0/0x420
[ 1299.359493][  T478]  ? __fget_files+0x2a/0x420
[ 1299.359516][  T478]  ksys_write+0x150/0x270
[ 1299.359531][  T478]  ? __pfx_ksys_write+0x10/0x10
[ 1299.359545][  T478]  ? __pfx_rcu_exp_handler+0x10/0x10
[ 1299.359568][  T478]  do_syscall_64+0x14d/0xf80
[ 1299.359581][  T478]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.359596][  T478]  ? clear_bhb_loop+0x40/0x90
[ 1299.359613][  T478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1299.359628][  T478] RIP: 0033:0x7f80bd19c799
[ 1299.359643][  T478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1299.359657][  T478] RSP: 002b:00007f80be0d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1299.359672][  T478] RAX: ffffffffffffffda RBX: 00007f80bd415fa0 RCX: 00007f80bd19c799
[ 1299.359684][  T478] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005
[ 1299.359694][  T478] RBP: 00007f80bd232bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1299.359704][  T478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1299.359713][  T478] R13: 00007f80bd416038 R14: 00007f80bd415fa0 R15: 00007f80bd53fa48
[ 1299.359730][  T478]  </TASK>
[ 1300.202542][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.202591][ T1301] ieee802154 phy1 wpan1: encryption failed: -22