last executing test programs:

22m46.120040927s ago: executing program 32 (id=268):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
write$tun(r0, &(0x7f0000000400)=ANY=[], 0x2e)

18m38.361430012s ago: executing program 33 (id=1050):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x7)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)="11", 0x1}, {&(0x7f0000000600)="f0f5e4fec2fca9b539389edd465f65ef9e48944c599bc99dee114b521e0809e2ffcbd02ca41e14175f5b57eb3564e4e6bbed1301920fab9d3b02b0999f2899e4ab0354276ef4fee6e7fd2a8a07de2257572442b05df3a3f5ea03c484796d6e449b568e0039d296d837b487", 0x6b}], 0x2)
ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x5, 0xa4fb, 0x7d3, 0x8000000000000001, 0x5})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
close(0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
symlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
dup(0xffffffffffffffff)

16m17.569139229s ago: executing program 34 (id=1481):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r0)

8m31.57187948s ago: executing program 0 (id=4070):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, 0x0, 0x0)
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10)

8m31.355659605s ago: executing program 0 (id=4072):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1)
listen(0xffffffffffffffff, 0x5)
syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8m27.725451413s ago: executing program 0 (id=4085):
eventfd2(0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9d3edb0e98d330e6fe3bce73919393417ab6c4d1d0000f0c29b3c717d7f74bc429cc009000000a4584203143a0b9705fb16b600", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x3, 0x61fe]}})
setresuid(0xee01, 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0x2, 0xa, 0x9, 0x0, "201289a4834814a1bba57199f7f631890fc7e8fe3fad605cb98b8f5f48923286114234c9392d904b9bfda4eff5ebbed532c1f79f336b7bba511b7c7b2fa13bf9", "e0e89ec12c3d9b865ceb8877f37072736a11551d460a065bb533d90fb44ad9df", [0x7fff, 0x100000000]})

8m27.571502977s ago: executing program 3 (id=4086):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0xd, 0x8, 0x3, 0x9, 0x2, 0x9, 0x2, 0x3, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x5], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x1005, 0x7ff, 0x0, 0xaf, 0x9, 0x203, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0xe, 0x5, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x0, [0x2, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x8, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x4)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r10=>0x0})
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)

8m27.371680421s ago: executing program 0 (id=4089):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000300), 0x1, 0x56d, &(0x7f0000000540)="$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")
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r2)
close(r2)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20)

8m26.940342602s ago: executing program 0 (id=4090):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000001c0))

8m26.702024418s ago: executing program 3 (id=4092):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setopts(0x4200, r0, 0xf32, 0x7c8099cd3b23fb8)

8m26.488312993s ago: executing program 0 (id=4093):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRES16, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9"], 0x1, 0x1d1, &(0x7f0000000580)="$eJzslU9rE0EYxn+zO2kSzaFnrxbbi7bZgnj0Zj+AH8CQrrWY+Kcb0ISC0YsXD+KXKPgpPAh69yAieKkHBT1UPFUkMjvvjLM0EBVDKcwD4X3e5/03M2FnbhR3izrw82C3yyIlFC3eK4UGlpXVDhes/SZ2Ivikrd8W/bnYj2KL4ejNE0tHNzu9Xr5TDGcQpWBWToUclfQfD5tCXj+qKop/6zN/MkjtyR4NPa0o9Wk5Usux72Ie5HsLQuXz/x5RY967AK/8aM3+m949s3/n1JxUyptUj+XkkeSvqgrk+iquPEz4WjpvD3a7hlyTW8xom/bnPokyxzgvg5wzGsagUia+jy5vS1gGVgf9O6vFcHR+u9/ZyrfyW1m2fnHt1Wn5RCcPYLuXr6lgGYkhGo8a0Azixv/wOz4mgAqWZnAKlKt1Je5yXjkbFDYhCWrDHgYNXvj5ddFS+lzlHA3g3tiEM+xpLWG6aa6brW2gSMVp62CdcEhCowxc6N7ubV6WYFm2h/Y92vvUvJOJYwbl65f89h+LXRK7IXZP7L5Y93a5N0mXHb6ItzKGBe53BoOd8vGyzGuZ17JFPzmRqe41VG4ldSIiIiIiIiIiTgh+BQAA//9Zuk7C")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek(r0, 0x5, 0x0)
getdents64(r0, 0x0, 0x22)

8m25.936919316s ago: executing program 35 (id=4093):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYBLOB="e1cc9e585bf1ccbca5939bce6200"/23, @ANYRESOCT, @ANYRES16, @ANYBLOB="48bdb0a10f32dcd5fdbfa532c164f4179256752b2122532551cd97b3bae22e012c39572a16bd3fbeeead717134851c249aa3fa8c446270ef0d055d733070c8447b23e34fe2c7d08088411097f670540e51c5b089386bac3b708aef00ad4d9b654acd5e0b20a266dcac6bcb13a3d4922d1851f7d82d24acc2d8f4ab02ef553f0885dc464506212505cbf180b9"], 0x1, 0x1d1, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
lseek(r0, 0x5, 0x0)
getdents64(r0, 0x0, 0x22)

8m25.914919337s ago: executing program 3 (id=4096):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x22883, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4040004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="06000000040000000300000089"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38)

8m24.9275371s ago: executing program 3 (id=4097):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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")
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)

8m24.036267012s ago: executing program 3 (id=4098):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

8m23.616285763s ago: executing program 3 (id=4101):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x242d3c50, 0x2, 0x0, 0x8}})
prlimit64(0x0, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x109540, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r4 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x7fffffff, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0)
write$uinput_user_dev(r3, 0x0, 0xfffffffffffffd7b)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r3, 0x5501)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000000000)={0x7, {"a2e3ad214fc752f91b2809094bf70e0dd027c35f34c1e85c1b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b210fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb1d17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202e928f28381aab144a5d429a04a6a2b83c7076600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2e7faa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a74cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74322f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2a9702b4230f6f1ba571eba281f2a654fb39ddff3b4844f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373f79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02de5d6787463183b4b87c105000000302a808d7f5251440655f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce211cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd5c19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df11fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

8m8.203253406s ago: executing program 36 (id=4101):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x242d3c50, 0x2, 0x0, 0x8}})
prlimit64(0x0, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x109540, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r4 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x7fffffff, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0)
write$uinput_user_dev(r3, 0x0, 0xfffffffffffffd7b)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r3, 0x5501)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006)

7m55.473198304s ago: executing program 6 (id=4168):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]})
r0 = openat$kvm(0xffffff9c, 0x0, 0x129102, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m55.24032059s ago: executing program 6 (id=4169):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)

7m51.288662035s ago: executing program 6 (id=4172):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f0000000200), 0x8)
listen(r2, 0x801)
accept(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x25dfdbff, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x0, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x57, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x4000000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000400), 0x12)
ptrace(0x10, 0x0)
ptrace$setopts(0x4200, 0x0, 0xf32, 0x7c8099cd3b23fb8)

7m49.398641531s ago: executing program 6 (id=4175):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

7m48.668493819s ago: executing program 6 (id=4178):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
prctl$PR_MCE_KILL(0x23, 0x3, 0x7fffffffeffe)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)

7m44.641327167s ago: executing program 6 (id=4187):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={<r4=>r0, &(0x7f00000000c0)='.^{^},\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x927, 0x5]}, {0x9, 0x3, 0x0, 0x2}}, 0x2, &(0x7f0000000280), &(0x7f0000000580)=0x100})
sendto$inet(r4, 0x0, 0x0, 0x20008885, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x1)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004a673878015dc9a3ea00000000010000000000000000000000000000000000000015f93270a75c05a7fa676a882711a424cdb8cf0599c53bfeebdcdf03f90005b7ea235a9121764f6a8de295fbcb4ac0ffffff6a7b4cc4855a893b3e26d5ebd1e5bf23cae6043e2092a1636bd88bab1d0b23a9704908c1c813d127d3f680f40c356d320848c3457396770eeaff397492507ba8f7dec605398bfb014057c7231f64f5ac0ee1311a66c245c3ed9ff44a98adec42f6a3f16520d1d94c81af5a3750dcb73bd1a00043e2df550c808ae12aa50c82b7534c87c532927c4849"], 0x48)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$TIOCL_BLANKSCREEN(r7, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0)
syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90)

7m28.663788033s ago: executing program 37 (id=4187):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={<r4=>r0, &(0x7f00000000c0)='.^{^},\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x927, 0x5]}, {0x9, 0x3, 0x0, 0x2}}, 0x2, &(0x7f0000000280), &(0x7f0000000580)=0x100})
sendto$inet(r4, 0x0, 0x0, 0x20008885, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x1)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004a673878015dc9a3ea00000000010000000000000000000000000000000000000015f93270a75c05a7fa676a882711a424cdb8cf0599c53bfeebdcdf03f90005b7ea235a9121764f6a8de295fbcb4ac0ffffff6a7b4cc4855a893b3e26d5ebd1e5bf23cae6043e2092a1636bd88bab1d0b23a9704908c1c813d127d3f680f40c356d320848c3457396770eeaff397492507ba8f7dec605398bfb014057c7231f64f5ac0ee1311a66c245c3ed9ff44a98adec42f6a3f16520d1d94c81af5a3750dcb73bd1a00043e2df550c808ae12aa50c82b7534c87c532927c4849"], 0x48)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$TIOCL_BLANKSCREEN(r7, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0)
syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90)

7m23.644284685s ago: executing program 8 (id=4230):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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")
syz_usb_connect$uac1(0x2, 0x94, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040630780204000010203010902820003010970080904000000010100000a240106000a00020102090401000001020000090401010101020000072401080902100b24020140010001b04f4209050109000405f70d0725010c09420009040200000102000009040201"], 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x401)

7m21.592229465s ago: executing program 8 (id=4236):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT], 0x1, 0x2d4, &(0x7f0000000940)="$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")
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
truncate(&(0x7f0000000040)='./file1\x00', 0x8800000)

7m20.976112199s ago: executing program 8 (id=4238):
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

7m20.499600701s ago: executing program 8 (id=4240):
r0 = syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="20161a000000e09901"], 0x0, 0x0})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0xc)

7m17.26317345s ago: executing program 8 (id=4245):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r3, &(0x7f0000000200), 0x8)
listen(r2, 0x801)
accept(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x25dfdbff, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x0, 0x0, 0x3c}, {@in=@loopback, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x57, 0x9, 0x6, 0xffff, 0x8251c, 0x1, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x4000000)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setopts(0x4200, r5, 0xf32, 0x7c8099cd3b23fb8)

7m15.428373434s ago: executing program 8 (id=4247):
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

7m14.847257328s ago: executing program 7 (id=4249):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000016c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x1, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r1}]}, 0x24}}, 0xea5bc50b659dd7aa)

7m14.556414425s ago: executing program 7 (id=4251):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e19, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0xfffffffc}, 0x1c)

7m14.34069173s ago: executing program 7 (id=4253):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
syz_clone(0xe7009100, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12)

7m13.496036001s ago: executing program 7 (id=4256):
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000000, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m12.942768604s ago: executing program 7 (id=4258):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x4330, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/131, 0x83}, 0x7}], 0x1, 0x12041, 0x0)

7m12.642443641s ago: executing program 7 (id=4260):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={<r4=>r0, &(0x7f00000000c0)='.^{^},\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x927, 0x5]}, {0x9, 0x3, 0x0, 0x2}}, 0x2, &(0x7f0000000280), &(0x7f0000000580)=0x100})
sendto$inet(r4, 0x0, 0xfffffffffffffe74, 0x20008885, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fchown(r5, 0xee01, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x1)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004a673878015dc9a3ea00000000010000000000000000000000000000000000000015f93270a75c05a7fa676a882711a424cdb8cf0599c53bfeebdcdf03f90005b7ea235a9121764f6a8de295fbcb4ac0ffffff6a7b4cc4855a893b3e26d5ebd1e5bf23cae6043e2092a1636bd88bab1d0b23a9704908c1c813d127d3f680f40c356d320848c3457396770eeaff397492507ba8f7dec605398bfb014057c7231f64f5ac0ee1311a66c245c3ed9ff44a98adec42f6a3f16520d1d94c81af5a3750dcb73bd1a00043e2df550c808ae12aa50c82b7534c87c532927c4849"], 0x48)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
rmdir(&(0x7f0000000500)='./file1\x00')
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$TIOCL_BLANKSCREEN(r7, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0)
syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90)

7m1.261345777s ago: executing program 4 (id=4301):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
kcmp(r1, r2, 0x4, r3, r3)

7m0.084599306s ago: executing program 38 (id=4247):
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r3, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000000))

6m59.456387141s ago: executing program 4 (id=4305):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b1, 0x0, 0x8}]})

6m57.558449097s ago: executing program 39 (id=4260):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000540)={<r4=>r0, &(0x7f00000000c0)='.^{^},\x00', 0x0, &(0x7f0000000240)={@_ha_fsid={[0x927, 0x5]}, {0x9, 0x3, 0x0, 0x2}}, 0x2, &(0x7f0000000280), &(0x7f0000000580)=0x100})
sendto$inet(r4, 0x0, 0xfffffffffffffe74, 0x20008885, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fchown(r5, 0xee01, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x1)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000004a673878015dc9a3ea00000000010000000000000000000000000000000000000015f93270a75c05a7fa676a882711a424cdb8cf0599c53bfeebdcdf03f90005b7ea235a9121764f6a8de295fbcb4ac0ffffff6a7b4cc4855a893b3e26d5ebd1e5bf23cae6043e2092a1636bd88bab1d0b23a9704908c1c813d127d3f680f40c356d320848c3457396770eeaff397492507ba8f7dec605398bfb014057c7231f64f5ac0ee1311a66c245c3ed9ff44a98adec42f6a3f16520d1d94c81af5a3750dcb73bd1a00043e2df550c808ae12aa50c82b7534c87c532927c4849"], 0x48)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
rmdir(&(0x7f0000000500)='./file1\x00')
mmap$IORING_OFF_SQ_RING(0xf0, 0x13ab, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$TIOCL_BLANKSCREEN(r7, 0x560e, &(0x7f0000000000))
ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0)
syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90)

6m56.847651094s ago: executing program 4 (id=4312):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000000000002000002e0000002"], 0x110)

6m56.460215694s ago: executing program 4 (id=4313):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x48}, {0x6, 0xba, 0x12, 0xffff}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "d4d2dc", 0x14, 0x6, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @empty}, {[], {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x7, 0x0, 0x7}}}}}}}, 0x0)

6m56.109766582s ago: executing program 4 (id=4314):
socket$inet6_tcp(0xa, 0x1, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r0 = inotify_init1(0x0)
read(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448cb, 0x0)

6m54.94822019s ago: executing program 4 (id=4317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x2, 0x5, 0x7fffffff, 0xc01}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x1fc9, 0x8, 0x3, 0x1, 0x9, 0xfffffc00, 0x6, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040a1}, 0x44890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @broadcast}, 0x14)

6m39.576426902s ago: executing program 40 (id=4317):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x2, 0x5, 0x7fffffff, 0xc01}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffc, 0x1fc9, 0x8, 0x3, 0x1, 0x9, 0xfffffc00, 0x6, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040a1}, 0x44890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000240)="80", 0x1, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd9, 0x6, @broadcast}, 0x14)

9.07197421s ago: executing program 9 (id=5897):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x80)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x200004}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014)

5.933261976s ago: executing program 2 (id=5909):
r0 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, 0x0, 0x0)

5.78790195s ago: executing program 2 (id=5910):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

5.724316101s ago: executing program 2 (id=5911):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x99, 0x12, 0x26, 0x10, 0xccd, 0x10a1, 0xae0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x80, 0xf7, "", [{{0x9, 0x4, 0x2c, 0x4, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001280)={0x34, &(0x7f0000001100)={0x40, 0x15, 0x1, "ea"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_connect$midi(0x1, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a000000090581"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

3.778008128s ago: executing program 9 (id=5914):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000200)=0xffff1884, 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x2004})

3.581471593s ago: executing program 9 (id=5917):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3.30438162s ago: executing program 9 (id=5920):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"})
preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/114, 0x72}], 0x1, 0x8, 0x4)

3.213848042s ago: executing program 1 (id=5921):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x101}}]}}]}, 0x48}}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

2.522349159s ago: executing program 2 (id=5924):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)

2.44006418s ago: executing program 9 (id=5925):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000200)=0xffff1884, 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)={0x2004})

2.134404688s ago: executing program 2 (id=5926):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000010000020000000000000000850000008700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c276000085000000230000"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

2.133908818s ago: executing program 9 (id=5927):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0xb8, @a={0x4, 0x2, 0x2, 0x0, 0x9, 0x1, 0x81, {0x24, 0x0, "", 0x9, 0x7}, 0x2, 0x3, 0x76, 0x3e, 0x55, "2f0a601b29797b9a48e0300f363c842e1bcfc5a70a87bd8998e0a0eab62c3b0447e27f6de8074ef2c8f25c2d60a1e9abdbd8a9a6241ac1cc2507929271c1c57ff3b8161ab0523cafac56182d81fa8b489d75820107"}}, 0x68)

1.912457413s ago: executing program 1 (id=5929):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.912258323s ago: executing program 2 (id=5930):
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)

1.746089157s ago: executing program 1 (id=5931):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x200}}]}}]}, 0x48}}, 0x20040084)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd7f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000894}, 0x8080)
r8 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x14}], 0x1}, 0x4011)

1.307903008s ago: executing program 1 (id=5934):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)

1.084150214s ago: executing program 1 (id=5935):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x21, 0x80000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x3eb}, [], {0x14, 0x3f3, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x20008040)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0xa}, {0x10, 0x110, 0x2}], 0x20}, 0xfc40)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
bind$rds(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000)

688.777413ms ago: executing program 5 (id=5937):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af018000000017", 0x1d}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

556.061506ms ago: executing program 5 (id=5938):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005083d00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff000000000000", 0x87}], 0x1}, 0xff0f000000000000)

431.659059ms ago: executing program 5 (id=5939):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

284.363503ms ago: executing program 5 (id=5940):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

205.459045ms ago: executing program 5 (id=5941):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x74, 0x30, 0x871a15abc695fa1d, 0x0, 0x35dfdbfe, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe106, 0x5, 0x2, 0x9, 0xb3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

87.675778ms ago: executing program 1 (id=5942):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000085562f030097900dfe0000000000000000"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004800)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xb0, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x3, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010102, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x1, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)

0s ago: executing program 5 (id=5943):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)

kernel console output (not intermixed with test programs):

][T21014] loop9: detected capacity change from 0 to 128
[ 1202.276208][ T9481] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1202.287950][ T9481] bond0 (unregistering): Released all slaves
[ 1202.415105][ T9481] bond3 (unregistering): Released all slaves
[ 1202.438325][ T9481] bond2 (unregistering): Released all slaves
[ 1202.484477][ T9481] bond1 (unregistering): Released all slaves
[ 1204.103960][ T9481] bond0 (unregistering): Released all slaves
[ 1205.093323][ T9481] team0 (unregistering): Port device team_slave_1 removed
[ 1205.179516][ T9481] team0 (unregistering): Port device team_slave_0 removed
[ 1205.257901][ T9481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1205.338685][ T9481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1205.923609][ T9481] bond0 (unregistering): Released all slaves
[ 1206.864960][ T9481] team0 (unregistering): Port device team_slave_1 removed
[ 1206.942044][ T9481] team0 (unregistering): Port device team_slave_0 removed
[ 1207.018484][ T9481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1207.088262][ T9481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1207.668753][ T9481] bond0 (unregistering): Released all slaves
[ 1207.948350][T20667] veth0_vlan: entered promiscuous mode
[ 1208.064783][T20667] veth1_vlan: entered promiscuous mode
[ 1208.458592][T20667] veth0_macvtap: entered promiscuous mode
[ 1208.534103][T20667] veth1_macvtap: entered promiscuous mode
[ 1208.643425][T20667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1208.699383][T20667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1208.753009][T20667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1208.805057][T20667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1208.859467][T20667] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1209.002076][T20667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1209.068953][T20667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1209.131056][T20667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1209.159568][T20667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1209.226708][T20667] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1209.278559][T20667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.330408][T17193] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[ 1209.339964][T20667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.370168][T20667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.398741][T20667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1209.570339][T17193] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1209.700918][T17193] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1209.788566][T17193] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[ 1209.856598][T17193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.883401][ T9685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1209.939975][T17193] usb 2-1: Product: syz
[ 1209.950586][ T9685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1209.970225][T17193] usb 2-1: Manufacturer: syz
[ 1210.003018][T17193] usb 2-1: SerialNumber: syz
[ 1210.064661][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1210.114603][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1210.290497][T17193] usb 2-1: Unsupported UAC3 BADD profile
[ 1210.426326][T17193] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[ 1210.528531][T21027] udevd[21027]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1210.545983][T17193] usb 2-1: USB disconnect, device number 6
[ 1211.482968][T21087] loop1: detected capacity change from 0 to 512
[ 1211.549380][T21087] EXT4-fs: Ignoring removed nobh option
[ 1211.667086][T21087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1211.777296][T21087] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1212.229288][T21100] loop5: detected capacity change from 0 to 164
[ 1212.239777][T20500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1212.564146][   T28] audit: type=1800 audit(1787595792.659:98): pid=21076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4421" name="pnp_string" dev="configfs" ino=68895 res=0 errno=0
[ 1213.096662][T21109] loop5: detected capacity change from 0 to 512
[ 1213.252757][T21109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1213.285067][T21112] syzkaller0: entered promiscuous mode
[ 1213.341502][T21112] syzkaller0: entered allmulticast mode
[ 1213.349683][T21109] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1213.385340][T21116] loop9: detected capacity change from 0 to 1024
[ 1213.672544][T21109] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #2: block 18: comm syz.5.4428: lblock 23 mapped to illegal pblock 18 (length 1)
[ 1213.809869][T21123] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.4428: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[ 1213.937414][T21125] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[ 1213.995378][T21123] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.4428: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[ 1214.358009][T20667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1215.054926][T21150] loop1: detected capacity change from 0 to 164
[ 1215.584491][T21154] loop1: detected capacity change from 0 to 512
[ 1215.667324][T21154] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1217.047311][T21160] xt_socket: unknown flags 0x4c
[ 1217.077980][T21154] EXT4-fs (loop1): 1 truncate cleaned up
[ 1217.122428][T21154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1217.379477][T21154] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #2: block 13: comm syz.1.4439: lblock 0 mapped to illegal pblock 13 (length 1)
[ 1217.533687][T21154] EXT4-fs (loop1): Remounting filesystem read-only
[ 1217.597748][T21169] syzkaller0: entered promiscuous mode
[ 1217.640414][T21169] syzkaller0: entered allmulticast mode
[ 1217.702829][T20500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1222.953119][T21209] xt_socket: unknown flags 0x4c
[ 1223.227756][T21216] loop5: detected capacity change from 0 to 128
[ 1225.267471][T21238] loop2: detected capacity change from 0 to 128
[ 1225.469357][T21241] syzkaller0: entered promiscuous mode
[ 1225.476723][T21238] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1225.514857][T21241] syzkaller0: entered allmulticast mode
[ 1225.591138][T21238] kvm: pic: non byte read
[ 1225.625672][T21238] kvm: pic: level sensitive irq not supported
[ 1225.625815][T21238] kvm: pic: non byte read
[ 1225.693727][T21238] kvm: pic: level sensitive irq not supported
[ 1225.694012][T21238] kvm: pic: non byte read
[ 1225.783288][T21238] kvm: pic: level sensitive irq not supported
[ 1225.783345][T21238] kvm: pic: non byte read
[ 1226.028708][T21249] netlink: 'syz.5.4463': attribute type 1 has an invalid length.
[ 1226.080878][T21249] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4463'.
[ 1226.141454][T21249] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4463'.
[ 1227.834521][T21265] xt_socket: unknown flags 0x4c
[ 1228.910764][T17192] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[ 1229.143153][T17192] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[ 1229.195825][T17192] usb 3-1: config 0 has no interface number 0
[ 1229.230626][T17192] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1229.247520][T21289] loop9: detected capacity change from 0 to 512
[ 1229.310758][T17192] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1229.371386][T17192] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[ 1229.381444][T21289] EXT4-fs error (device loop9): ext4_orphan_get:1404: inode #15: comm syz.9.4472: iget: bad i_size value: 38620345925642
[ 1229.434758][T17192] usb 3-1: Manufacturer: syz
[ 1229.476773][T17192] usb 3-1: SerialNumber: syz
[ 1229.490417][T21289] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.4472: couldn't read orphan inode 15 (err -117)
[ 1229.523488][T21294] syzkaller0: entered promiscuous mode
[ 1229.551092][T17192] usb 3-1: config 0 descriptor??
[ 1229.595295][T21294] syzkaller0: entered allmulticast mode
[ 1229.653306][T21289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1229.833221][T21289] EXT4-fs error (device loop9): ext4_validate_block_bitmap:430: comm syz.9.4472: bg 0: block 5: invalid block bitmap
[ 1230.022237][T20223] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1230.192798][T21307] loop5: detected capacity change from 0 to 164
[ 1230.260123][T21309] netlink: 'syz.9.4475': attribute type 1 has an invalid length.
[ 1230.270895][T17192] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input20
[ 1230.465936][T21310] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4475'.
[ 1230.578007][T17192] usb 3-1: USB disconnect, device number 9
[ 1230.596532][T21310] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1232.016204][T21312] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4475'.
[ 1233.186198][T21345] syzkaller0: entered promiscuous mode
[ 1233.220621][T21345] syzkaller0: entered allmulticast mode
[ 1233.233063][T21350] loop2: detected capacity change from 0 to 164
[ 1235.397750][T21364] netlink: 'syz.2.4489': attribute type 1 has an invalid length.
[ 1235.764039][T21358] Bluetooth: hci5: command 0x0406 tx timeout
[ 1235.771351][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4489'.
[ 1235.847382][T21373] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1235.884223][T21390] loop1: detected capacity change from 0 to 512
[ 1236.075976][T21378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4489'.
[ 1237.127704][T21390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1237.243534][T21390] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1237.380611][T21390] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4492: corrupted xattr block 33: invalid ea_ino
[ 1237.402583][T21403] loop2: detected capacity change from 0 to 164
[ 1237.495063][T21405] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.4492: corrupted xattr block 33: invalid ea_ino
[ 1237.635417][T21405] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1237.770972][T21405] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[ 1237.881238][T21405] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1237.881238][T21405] 
[ 1237.943635][T21405] EXT4-fs (loop1): Total free blocks count 0
[ 1239.302848][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.310799][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.369409][T21405] EXT4-fs (loop1): Free/Dirty block details
[ 1239.484434][T21405] EXT4-fs (loop1): free_blocks=65280
[ 1239.540363][T21405] EXT4-fs (loop1): dirty_blocks=32
[ 1239.600462][T21405] EXT4-fs (loop1): Block reservation details
[ 1239.639352][T21405] EXT4-fs (loop1): i_reserved_data_blocks=32
[ 1239.821251][ T9494] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 9 with error 28
[ 1239.845012][T21424] syzkaller0: entered promiscuous mode
[ 1239.872576][T21424] syzkaller0: entered allmulticast mode
[ 1240.253824][T21429] loop5: detected capacity change from 0 to 8192
[ 1240.667201][T21441] syz_tun: entered allmulticast mode
[ 1240.685975][T21446] loop9: detected capacity change from 0 to 164
[ 1240.711211][T21443] netlink: 'syz.1.4503': attribute type 1 has an invalid length.
[ 1241.006032][T21448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4503'.
[ 1241.082418][T21448] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1241.166639][T21452] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4503'.
[ 1241.346971][T21437] syz_tun: left allmulticast mode
[ 1243.010202][T21471] xt_socket: unknown flags 0x4c
[ 1243.361815][T21480] syzkaller0: entered promiscuous mode
[ 1243.391542][T21480] syzkaller0: entered allmulticast mode
[ 1243.530606][ T5859] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[ 1243.767305][ T5859] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[ 1243.807337][ T5859] usb 6-1: config 0 has no interface number 0
[ 1243.858052][ T5859] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1243.933729][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1244.013628][ T5859] usb 6-1: Product: syz
[ 1244.017876][ T5859] usb 6-1: Manufacturer: syz
[ 1244.098060][ T5859] usb 6-1: SerialNumber: syz
[ 1244.146950][ T5859] usb 6-1: config 0 descriptor??
[ 1244.440534][ T5859] usb 6-1: USB disconnect, device number 3
[ 1244.529984][T21505] loop1: detected capacity change from 0 to 164
[ 1244.580085][T21508] netlink: 'syz.9.4515': attribute type 1 has an invalid length.
[ 1244.767064][T21510] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4515'.
[ 1244.857785][T21510] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1244.906069][T21514] syz_tun: entered allmulticast mode
[ 1244.995041][T21508] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4515'.
[ 1246.636755][T21523] xt_socket: unknown flags 0x4c
[ 1246.642734][T21507] syz_tun: left allmulticast mode
[ 1246.821414][T21525] syzkaller0: entered promiscuous mode
[ 1246.826985][T21525] syzkaller0: entered allmulticast mode
[ 1247.799161][T21556] loop1: detected capacity change from 0 to 164
[ 1247.950172][T21560] loop9: detected capacity change from 0 to 1024
[ 1248.361763][ T2925] hfsplus: b-tree write err: -5, ino 25
[ 1248.367519][ T2925] hfsplus: b-tree write err: -5, ino 4
[ 1248.451982][ T2925] hfsplus: b-tree write err: -5, ino 2
[ 1248.584541][T21563] syzkaller0: entered promiscuous mode
[ 1248.630437][T21563] syzkaller0: entered allmulticast mode
[ 1250.171897][T21573] xt_socket: unknown flags 0x4c
[ 1255.122804][T21572] netlink: 'syz.9.4529': attribute type 1 has an invalid length.
[ 1255.180444][T21574] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4529'.
[ 1255.217607][T21574] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1255.258074][T21576] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4529'.
[ 1255.325264][T21585] syzkaller0: entered promiscuous mode
[ 1255.339949][T21585] syzkaller0: entered allmulticast mode
[ 1255.566180][T21645] loop1: detected capacity change from 0 to 164
[ 1255.858190][T21650] loop5: detected capacity change from 0 to 2048
[ 1255.928697][T21650] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[ 1256.022927][T21650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1256.126527][   T28] audit: type=1800 audit(1787595836.219:99): pid=21650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4538" name="file1" dev="loop5" ino=1346 res=0 errno=0
[ 1256.262442][   T28] audit: type=1800 audit(1787595836.259:100): pid=21650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4538" name="file1" dev="loop5" ino=1346 res=0 errno=0
[ 1256.934263][T21679] netlink: 'syz.1.4545': attribute type 1 has an invalid length.
[ 1257.161011][T21682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4545'.
[ 1257.215414][T21682] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1257.272266][T21687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4545'.
[ 1257.730149][T21701] loop1: detected capacity change from 0 to 164
[ 1259.726788][T21707] loop1: detected capacity change from 0 to 8192
[ 1259.852096][T21707] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 1259.888341][T21707] UDF-fs: Scanning with blocksize 512 failed
[ 1259.970424][T17192] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1259.992501][T21707] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 1260.054524][T21707] UDF-fs: Scanning with blocksize 1024 failed
[ 1260.106398][T21707] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[ 1260.143531][T21707] UDF-fs: Scanning with blocksize 2048 failed
[ 1260.156700][T21727] syz_tun: entered allmulticast mode
[ 1260.199603][T21707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1260.219838][T17192] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1260.272595][T17192] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1260.328191][T17192] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1260.395339][T17192] usb 10-1: New USB device found, idVendor=049d, idProduct=ffff, bcdDevice= 0.00
[ 1260.440750][T17193] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1260.462722][T17192] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.508092][T17192] usb 10-1: config 0 descriptor??
[ 1260.660556][T17193] usb 6-1: Using ep0 maxpacket: 8
[ 1260.685260][T17193] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1260.732024][T17193] usb 6-1: config 179 has no interface number 0
[ 1260.775827][T17193] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1260.797504][T21738] netlink: 'syz.1.4555': attribute type 1 has an invalid length.
[ 1260.848230][T17193] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1260.908335][T17193] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1260.931973][T21740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4555'.
[ 1260.955348][T17193] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1260.998322][T17192] hid-generic 0003:049D:FFFF.0007: hidraw0: USB HID v0.00 Device [HID 049d:ffff] on usb-dummy_hcd.9-1/input0
[ 1261.015128][T21740] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1261.040854][T17193] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1261.059942][T21724] syz_tun: left allmulticast mode
[ 1261.093866][T21738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4555'.
[ 1261.123745][T17193] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1261.179338][T17192] usb 10-1: USB disconnect, device number 7
[ 1261.200545][T17193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1261.277758][T21728] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1261.383783][T21742] fido_id[21742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1261.446423][T21358] Bluetooth: hci6: command 0x0406 tx timeout
[ 1261.577724][T21748] loop1: detected capacity change from 0 to 164
[ 1261.752387][T17193] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input21
[ 1261.903381][T17192] usb 6-1: USB disconnect, device number 4
[ 1261.909351][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1261.909389][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1262.156399][T17192] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1263.857900][T21768] syzkaller0: entered promiscuous mode
[ 1263.937512][T21768] syzkaller0: entered allmulticast mode
[ 1264.828573][T21797] netlink: 'syz.9.4565': attribute type 1 has an invalid length.
[ 1264.963603][T21798] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4565'.
[ 1264.994639][T21798] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1265.035830][T21803] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4565'.
[ 1265.375577][T21809] loop9: detected capacity change from 0 to 164
[ 1265.897685][T17192] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1267.124344][T17192] usb 3-1: Using ep0 maxpacket: 16
[ 1267.172719][T17192] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1267.300395][T17192] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1267.411609][T17192] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1267.435768][T21832] syzkaller0: entered promiscuous mode
[ 1267.491419][T21832] syzkaller0: entered allmulticast mode
[ 1267.502727][T17192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.591812][T17192] usb 3-1: config 0 descriptor??
[ 1268.067830][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.126858][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.197840][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.243604][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.298699][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.359147][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.402667][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.435677][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.483623][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.520389][T17192] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[ 1268.562031][T17192] HID 045e:07da: Invalid code 65791 type 1
[ 1268.616891][T17192] HID 045e:07da: Invalid code 768 type 1
[ 1268.655359][T17192] HID 045e:07da: Invalid code 769 type 1
[ 1268.683601][T17192] HID 045e:07da: Invalid code 770 type 1
[ 1268.719307][T17192] HID 045e:07da: Invalid code 771 type 1
[ 1268.748853][T17192] HID 045e:07da: Invalid code 772 type 1
[ 1268.779845][T17192] HID 045e:07da: Invalid code 773 type 1
[ 1268.831644][T17192] HID 045e:07da: Invalid code 774 type 1
[ 1268.878268][T17192] HID 045e:07da: Invalid code 775 type 1
[ 1268.937431][T17192] HID 045e:07da: Invalid code 776 type 1
[ 1269.069586][T17192] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input22
[ 1269.117441][T21869] loop2: detected capacity change from 0 to 164
[ 1270.375234][T17192] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[ 1270.636870][T17192] usb 3-1: USB disconnect, device number 10
[ 1271.193798][T21884] fido_id[21884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1271.573812][T21900] syzkaller0: entered promiscuous mode
[ 1271.579405][T21900] syzkaller0: entered allmulticast mode
[ 1271.762013][T17192] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1272.011886][T17192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1272.064640][T17192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1272.120394][ T5859] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1272.150988][T17192] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[ 1272.209990][T17192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1272.256411][T17192] usb 2-1: config 0 descriptor??
[ 1272.352610][ T5859] usb 6-1: Using ep0 maxpacket: 8
[ 1272.386610][ T5859] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1272.430752][ T5859] usb 6-1: config 0 has no interface number 0
[ 1272.458669][ T5859] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1272.526036][ T5859] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1272.576815][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1272.638760][ T5859] usb 6-1: config 0 descriptor??
[ 1272.692607][ T5859] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1272.722697][T17192] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0
[ 1272.770564][T17192] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0
[ 1272.830993][T17192] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0
[ 1272.837878][T17192] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0
[ 1272.955498][T17192] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0
[ 1272.999328][T17192] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0
[ 1273.069086][T17192] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0
[ 1273.135787][T17192] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[ 1273.159064][T21933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1273.244353][T21933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1274.724124][T17192] usb 2-1: USB disconnect, device number 7
[ 1274.747033][T21942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1274.810756][T21942] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1274.977520][T21936] fido_id[21936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1275.248961][T17193] usb 6-1: USB disconnect, device number 5
[ 1275.480605][T11422] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1275.700344][T11422] usb 2-1: Using ep0 maxpacket: 32
[ 1275.744220][T11422] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1275.832624][T11422] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1275.901637][T11422] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1275.948921][T11422] usb 2-1: Product: syz
[ 1275.988360][T11422] usb 2-1: Manufacturer: syz
[ 1276.024665][T11422] usb 2-1: SerialNumber: syz
[ 1276.084497][T11422] usb 2-1: config 0 descriptor??
[ 1276.134222][T21947] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1276.141596][T17192] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1276.191158][T11422] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1276.233329][T11422] hub: probe of 2-1:0.0 failed with error -5
[ 1276.388377][T17192] usb 6-1: config index 0 descriptor too short (expected 64998, got 72)
[ 1276.441506][T17192] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1276.466895][T17192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.518374][T17192] usb 6-1: Product: syz
[ 1276.543593][T17192] usb 6-1: Manufacturer: syz
[ 1276.565597][T17192] usb 6-1: SerialNumber: syz
[ 1276.724483][T21358] Bluetooth: hci7: command 0x0406 tx timeout
[ 1276.748598][T11422] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1276.831509][T21947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1276.890998][T21947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1277.550907][T21995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1277.587030][T21995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1278.717191][T11422] usb 6-1: Service connection timeout for: 256
[ 1278.779650][T11422] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1278.822078][T16477] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1278.901549][T11422] ath9k_htc: Failed to initialize the device
[ 1279.021634][T11422] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1279.077745][T16477] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.090754][T17193] usb 2-1: USB disconnect, device number 8
[ 1279.132803][T20675] usb 6-1: USB disconnect, device number 6
[ 1279.156146][T16477] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1279.254417][T16477] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1279.327600][T16477] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1279.413369][T16477] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1279.472508][T16477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.540360][T17193] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1279.767514][T17193] usb 2-1: Using ep0 maxpacket: 32
[ 1279.794604][T17193] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 1279.835560][T17193] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1279.910926][T17193] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1279.970485][T16477] gud: probe of 3-1:1.0 failed with error -121
[ 1279.990080][T17193] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1280.062268][T17193] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1280.093071][T17193] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1280.137638][T17193] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1280.160412][T11422] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1280.224274][T16477] usb 3-1: USB disconnect, device number 11
[ 1280.232942][T17193] usb 2-1: Product: syz
[ 1280.237183][T17193] usb 2-1: Manufacturer: syz
[ 1280.306455][T17193] usb 2-1: SerialNumber: syz
[ 1280.352949][T17193] usb 2-1: config 0 descriptor??
[ 1280.408684][T17193] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1280.429532][T11422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1280.489318][T11422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1280.512403][T17193] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1280.561700][T11422] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1280.626093][T11422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1280.689385][T11422] usb 6-1: config 0 descriptor??
[ 1281.565758][T11422] hid-led: probe of 0003:27B8:01ED.000A failed with error -71
[ 1281.673657][T11422] usb 6-1: USB disconnect, device number 7
[ 1281.922391][T16616] Bluetooth: hci0: command 0x0406 tx timeout
[ 1283.257677][T11422] usb 2-1: USB disconnect, device number 9
[ 1283.306319][T11422] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[ 1283.465564][T22066] syzkaller0: entered promiscuous mode
[ 1283.486212][T22066] syzkaller0: entered allmulticast mode
[ 1283.650413][T17193] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1283.660415][T20675] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[ 1283.854769][T17193] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1283.891667][T20675] usb 3-1: config 43 interface 0 has no altsetting 0
[ 1283.905312][T17193] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1283.937986][T20675] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82
[ 1283.965846][T17193] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1283.986332][T20675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.037746][T20675] usb 3-1: Product: syz
[ 1284.043922][T17193] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1284.102854][T20675] usb 3-1: Manufacturer: syz
[ 1284.138880][T20675] usb 3-1: SerialNumber: syz
[ 1284.168694][T17193] usb 10-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1284.252962][T17193] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1284.445190][T20675] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state
[ 1284.519039][T20675] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1284.595675][T20675] dvb_usb_anysee: probe of 3-1:43.0 failed with error -22
[ 1284.674571][T20675] usb 3-1: USB disconnect, device number 12
[ 1284.800479][T17193] gud 10-1:1.0: Unexpected status OK for failed transfer
[ 1284.877496][T17193] gud: probe of 10-1:1.0 failed with error -32
[ 1285.007513][T20675] usb 10-1: USB disconnect, device number 8
[ 1285.321907][T22099] xt_socket: unknown flags 0x4c
[ 1285.602142][T11422] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1286.902774][T11422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1286.980814][T11422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1287.052502][T11422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1287.113131][T11422] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1287.170616][T11422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.256524][T11422] usb 6-1: config 0 descriptor??
[ 1287.414431][T22117] syzkaller0: entered promiscuous mode
[ 1287.444490][T22117] syzkaller0: entered allmulticast mode
[ 1287.722234][T22094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1287.770561][T22094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1287.834980][T11422] usbhid 6-1:0.0: can't add hid device: -71
[ 1287.880870][T11422] usbhid: probe of 6-1:0.0 failed with error -71
[ 1287.934124][T11422] usb 6-1: USB disconnect, device number 8
[ 1290.050334][T11422] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1290.283841][T11422] usb 3-1: Using ep0 maxpacket: 16
[ 1290.315948][T11422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1290.360553][T16477] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1290.377451][T11422] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1290.419033][T11422] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 1290.473708][T11422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.517127][T11422] usb 3-1: config 0 descriptor??
[ 1290.605187][T16477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1290.646552][T16477] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1290.680366][T20675] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1290.726843][T16477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1290.778049][T16477] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1290.821807][T22167] syzkaller0: entered promiscuous mode
[ 1290.831658][T16477] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1290.860613][T22167] syzkaller0: entered allmulticast mode
[ 1290.872462][T16477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1290.922194][T20675] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1290.937667][T16477] usb 2-1: config 0 descriptor??
[ 1290.970005][T20675] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1290.993839][T11422] corsair 0003:1B1C:1B02.000B: unknown main item tag 0x0
[ 1291.035762][T11422] corsair 0003:1B1C:1B02.000B: unknown main item tag 0x0
[ 1291.052522][T20675] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1291.090167][T11422] corsair 0003:1B1C:1B02.000B: unknown main item tag 0x0
[ 1291.113869][T20675] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1291.133828][T11422] corsair 0003:1B1C:1B02.000B: unknown main item tag 0x0
[ 1291.162531][T11422] corsair 0003:1B1C:1B02.000B: unknown main item tag 0x0
[ 1291.192895][T16477] hdpvr 2-1:0.0: firmware version 0x1e dated þÀq|RC¾@µ2£¹ö2[Ì7ÔB½�ËDŠ^jvi0ì
[ 1291.192895][T16477] †Ã“‘êpY
[ 1291.206562][T20675] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1291.230064][T11422] corsair 0003:1B1C:1B02.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0
[ 1291.253292][T20675] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1291.320431][T20675] usb 6-1: Product: syz
[ 1291.324653][T20675] usb 6-1: Manufacturer: syz
[ 1291.415965][T20675] cdc_wdm 6-1:1.0: skipping garbage
[ 1291.430366][T16477] hdpvr 2-1:0.0: device init failed
[ 1291.452842][T20675] cdc_wdm 6-1:1.0: skipping garbage
[ 1291.458227][T16477] hdpvr: probe of 2-1:0.0 failed with error -12
[ 1291.492646][T20675] cdc_wdm 6-1:1.0: skipping garbage
[ 1291.497912][T20675] cdc_wdm: probe of 6-1:1.0 failed with error -22
[ 1291.527723][T16477] usb 2-1: USB disconnect, device number 10
[ 1291.537359][T22178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1291.596721][T22178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1291.678619][T20675] usb 6-1: USB disconnect, device number 9
[ 1291.715335][T11422] usb 3-1: USB disconnect, device number 13
[ 1292.261128][T20675] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1292.525934][T20675] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1292.565044][T20675] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1292.609011][T20675] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1292.657870][T20675] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1292.716879][T20675] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1292.726680][T11422] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1292.760153][T20675] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1292.801228][T20675] usb 6-1: Product: syz
[ 1292.829651][T20675] usb 6-1: Manufacturer: syz
[ 1292.885289][T20675] cdc_wdm 6-1:1.0: skipping garbage
[ 1292.914524][T20675] cdc_wdm 6-1:1.0: skipping garbage
[ 1292.919814][T20675] cdc_wdm 6-1:1.0: skipping garbage
[ 1293.082963][T11422] usb 3-1: Using ep0 maxpacket: 8
[ 1293.111935][T11422] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1294.286772][T20675] cdc_wdm: probe of 6-1:1.0 failed with error -22
[ 1294.326235][T11422] usb 3-1: config 0 has no interface number 0
[ 1294.380714][T11422] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1294.403401][T20675] usb 6-1: USB disconnect, device number 10
[ 1294.475368][T11422] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1294.550389][T11422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1294.615418][T11422] usb 3-1: config 0 descriptor??
[ 1294.670885][T22215] syzkaller0: entered promiscuous mode
[ 1294.687781][T11422] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1294.731725][T22215] syzkaller0: entered allmulticast mode
[ 1295.080341][T11422] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1295.181355][T22228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1295.229750][T22228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1296.924061][T22232] xt_socket: unknown flags 0x4c
[ 1296.937801][T11422] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1297.017481][T11422] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[ 1297.169200][T11422] usb 10-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[ 1297.201127][T16477] usb 3-1: USB disconnect, device number 14
[ 1297.253447][T11422] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1297.384265][T11422] usb 10-1: probing VID:PID(0424:012C)   
[ 1297.418631][T22238] syz_tun: entered allmulticast mode
[ 1297.455303][T11422] usb 10-1: vub300 testing BULK IN EndPoint(0) 81
[ 1297.492858][T11422] usb 10-1: vub300 testing BULK OUT EndPoint(1) 02
[ 1297.694797][T11422] usb 10-1: vub300 testing BULK IN EndPoint(2) 83
[ 1297.708243][T11422] usb 10-1: vub300 testing BULK OUT EndPoint(3) 04
[ 1298.740490][T11422] usb 10-1: vub300 LARGE packets using EndPoints 02 81 04 83
[ 1298.924906][T11422] vub300: probe of 10-1:1.0 failed with error -71
[ 1299.012258][T11422] usb 10-1: USB disconnect, device number 9
[ 1299.236413][T22258] syzkaller0: entered promiscuous mode
[ 1299.276326][T22258] syzkaller0: entered allmulticast mode
[ 1299.464208][T11422] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1299.641095][T17192] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1299.680317][T11422] usb 10-1: Using ep0 maxpacket: 8
[ 1299.727500][T11422] usb 10-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[ 1299.770363][T11422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.819042][T11422] usb 10-1: Product: syz
[ 1299.843547][T11422] usb 10-1: Manufacturer: syz
[ 1299.848307][T11422] usb 10-1: SerialNumber: syz
[ 1299.860995][T17192] usb 6-1: Using ep0 maxpacket: 32
[ 1299.887452][T17192] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1299.924964][T17192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.963997][T17192] usb 6-1: Product: syz
[ 1299.968258][T17192] usb 6-1: Manufacturer: syz
[ 1300.010404][T17192] usb 6-1: SerialNumber: syz
[ 1300.038686][T17192] usb 6-1: config 0 descriptor??
[ 1300.066508][T17192] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1300.131536][T16477] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[ 1300.215068][T11422] usb 10-1: USB disconnect, device number 10
[ 1300.251614][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.258070][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.317268][T22262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.343486][T21637] udevd[21637]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1300.382283][T16477] usb 3-1: not running at top speed; connect to a high speed hub
[ 1300.411101][T22262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1300.439461][T16477] usb 3-1: config 8 has an invalid interface number: 44 but max is 0
[ 1300.490396][T16477] usb 3-1: config 8 has no interface number 0
[ 1300.537548][T16477] usb 3-1: config 8 interface 44 has no altsetting 0
[ 1300.599204][T16477] usb 3-1: string descriptor 0 read error: -22
[ 1300.614232][T16477] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1300.633454][T17192] gspca_topro: reg_w err -110
[ 1300.664189][T22262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.677580][T16477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1302.055271][T22277] xt_socket: unknown flags 0x4c
[ 1302.062804][T17192] gspca_topro: Sensor soi763a
[ 1302.084943][T22262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1302.349175][T22262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1302.387730][T16477] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state.
[ 1302.425147][T22262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1302.547854][T22262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1302.570756][T16477] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1302.623694][T22262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1302.662685][T16477] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1302.717132][T22262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1302.875780][T16477] usb 3-1: media controller created
[ 1302.907075][T22262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1303.909382][T16477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1304.148994][T17193] usb 6-1: USB disconnect, device number 11
[ 1304.412550][T16477] DVB: Unable to find symbol dib7000p_attach()
[ 1304.418815][T16477] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1304.526626][T16477] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1304.602650][T16477] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1304.635077][T22308] syzkaller0: entered promiscuous mode
[ 1304.660050][T16477] usb 3-1: media controller created
[ 1304.676817][T22308] syzkaller0: entered allmulticast mode
[ 1304.698559][T16477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1305.072381][T16477] DVB: Unable to find symbol dib7000p_attach()
[ 1305.078726][T16477] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1305.431532][T16477] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1305.437693][T16477] Registered IR keymap rc-empty
[ 1305.496692][T16477] dvb-usb: could not initialize remote control.
[ 1305.552880][T16477] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected.
[ 1305.714316][T16477] usb 3-1: USB disconnect, device number 15
[ 1306.027463][T16477] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected.
[ 1308.358129][T22356] syzkaller0: entered promiscuous mode
[ 1308.413288][T22356] syzkaller0: entered allmulticast mode
[ 1312.806191][T22367] syzkaller0: entered promiscuous mode
[ 1312.849980][T22367] syzkaller0: entered allmulticast mode
[ 1316.196253][T22427] syzkaller0: entered promiscuous mode
[ 1316.255165][T22427] syzkaller0: entered allmulticast mode
[ 1316.385361][T22439] syzkaller0: entered promiscuous mode
[ 1316.446619][T22439] syzkaller0: entered allmulticast mode
[ 1329.586001][T22573] syzkaller0: entered promiscuous mode
[ 1329.619398][T22573] syzkaller0: entered allmulticast mode
[ 1329.806255][T22574] syzkaller0: entered promiscuous mode
[ 1329.842119][T22574] syzkaller0: entered allmulticast mode
[ 1331.110316][   T28] audit: type=1800 audit(1787595911.199:101): pid=22601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4719" name="pnp_string" dev="configfs" ino=72248 res=0 errno=0
[ 1335.694735][T22648] syzkaller0: entered promiscuous mode
[ 1335.728954][T22648] syzkaller0: entered allmulticast mode
[ 1336.734220][   T28] audit: type=1800 audit(1787595916.829:102): pid=22663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4728" name="pnp_string" dev="configfs" ino=72462 res=0 errno=0
[ 1341.975872][T22725] syzkaller0: entered promiscuous mode
[ 1342.006472][T22725] syzkaller0: entered allmulticast mode
[ 1342.933923][T22762] syzkaller0: entered promiscuous mode
[ 1342.939489][T22762] syzkaller0: entered allmulticast mode
[ 1343.267264][T22767] netlink: 'syz.5.4740': attribute type 7 has an invalid length.
[ 1343.394563][T22767] netlink: 'syz.5.4740': attribute type 7 has an invalid length.
[ 1343.432370][   T28] audit: type=1800 audit(1787595923.529:103): pid=22757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4737" name="pnp_string" dev="configfs" ino=72602 res=0 errno=0
[ 1344.453329][T22795] syzkaller0: entered promiscuous mode
[ 1344.475348][T22795] syzkaller0: entered allmulticast mode
[ 1344.941520][   T59] bond1 (unregistering): Released all slaves
[ 1345.275599][T22810] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1345.390175][T22810] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1345.410671][ T5859] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1345.474585][T22815] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1345.541263][T22816] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1345.641023][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1345.665142][T22818] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1345.684581][ T5859] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1345.732646][ T5859] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1345.773426][ T5859] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1345.801103][T22815] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1345.851356][ T5859] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1345.877194][T22815] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1345.905936][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.941100][T22816] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1345.953755][ T5859] usb 6-1: config 0 descriptor??
[ 1346.010509][T22818] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1346.088207][T22815] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[ 1346.185995][ T5859] hdpvr 6-1:0.0: firmware version 0x1e dated þÀq|RC¾@µ2£¹ö2[Ì7ÔB½�ËDŠ^jvi0ì
[ 1346.185995][ T5859] †Ã“‘êpY
[ 1346.304450][   T59] bond0 (unregistering): Released all slaves
[ 1346.394437][ T5859] hdpvr 6-1:0.0: device init failed
[ 1346.424495][ T5859] hdpvr: probe of 6-1:0.0 failed with error -12
[ 1346.458602][ T5859] usb 6-1: USB disconnect, device number 12
[ 1347.525234][   T28] audit: type=1800 audit(1787595927.619:104): pid=22830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4755" name="pnp_string" dev="configfs" ino=72795 res=0 errno=0
[ 1348.980475][T22834] syzkaller0: entered promiscuous mode
[ 1348.986056][T22834] syzkaller0: entered allmulticast mode
[ 1350.890003][T22865] xt_socket: unknown flags 0x4c
[ 1351.368037][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4764'.
[ 1352.504084][   T28] audit: type=1800 audit(1787595932.599:105): pid=22881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4765" name="pnp_string" dev="configfs" ino=72927 res=0 errno=0
[ 1353.207416][T22907] syzkaller0: entered promiscuous mode
[ 1353.232950][T22907] syzkaller0: entered allmulticast mode
[ 1354.666439][T22913] xt_socket: unknown flags 0x4c
[ 1360.301081][T11422] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1360.540597][T11422] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1360.589592][T11422] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1360.641177][T11422] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1360.692799][T11422] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.751804][T11422] usb 10-1: config 0 descriptor??
[ 1360.808864][   T28] audit: type=1800 audit(1787595940.899:106): pid=22937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4780" name="pnp_string" dev="configfs" ino=73102 res=0 errno=0
[ 1361.217234][T11422] usbhid 10-1:0.0: can't add hid device: -71
[ 1361.240771][T11422] usbhid: probe of 10-1:0.0 failed with error -71
[ 1361.324622][T11422] usb 10-1: USB disconnect, device number 11
[ 1361.423439][T22965] syzkaller0: entered promiscuous mode
[ 1361.448812][T22965] syzkaller0: entered allmulticast mode
[ 1361.464695][T22955] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.687290][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.696056][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.843329][T22996] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1362.905336][T22996] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1363.083922][T17192] IPVS: starting estimator thread 0...
[ 1363.103424][T11422] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1363.200449][T23004] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1363.216983][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4795'.
[ 1363.300867][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4795'.
[ 1363.330520][T11422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1363.355945][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4795'.
[ 1363.383479][T11422] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1363.446848][T11422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1363.462630][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4795'.
[ 1363.524228][T23007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4795'.
[ 1363.549366][T11422] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1363.597166][T11422] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1363.647009][T11422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.700046][T11422] usb 6-1: config 0 descriptor??
[ 1363.792760][T23015] syzkaller0: entered promiscuous mode
[ 1363.808252][T23015] syzkaller0: entered allmulticast mode
[ 1363.957333][T11422] hdpvr 6-1:0.0: unexpected answer of status request, len -71
[ 1363.995978][T11422] hdpvr 6-1:0.0: device init failed
[ 1364.023368][T11422] hdpvr: probe of 6-1:0.0 failed with error -12
[ 1364.077371][T11422] usb 6-1: USB disconnect, device number 13
[ 1364.291949][T23029] netlink: 'syz.2.4799': attribute type 13 has an invalid length.
[ 1364.329290][T23029] veth0_macvtap: left promiscuous mode
[ 1364.354994][T23029] macvtap0: entered allmulticast mode
[ 1364.396321][T23029] macvtap0: refused to change device tx_queue_len
[ 1364.565594][T23032] netlink: 'syz.1.4800': attribute type 1 has an invalid length.
[ 1364.773080][T23040] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1364.942343][T11422] IPVS: starting estimator thread 0...
[ 1365.041043][T23048] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1365.754470][T23060] syzkaller0: entered promiscuous mode
[ 1365.787877][T23060] syzkaller0: entered allmulticast mode
[ 1365.904754][T23072] syzkaller0: entered promiscuous mode
[ 1365.948456][T23072] syzkaller0: entered allmulticast mode
[ 1366.526487][T23081] syzkaller0: entered promiscuous mode
[ 1366.580377][T23081] syzkaller0: entered allmulticast mode
[ 1371.637637][T23160] tipc: Started in network mode
[ 1371.646682][T23160] tipc: Node identity 7f000001, cluster identity 4711
[ 1371.657026][T23160] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1372.800901][T11422] tipc: Node number set to 2130706433
[ 1373.038118][T23201] syzkaller0: entered promiscuous mode
[ 1373.063571][T23201] syzkaller0: entered allmulticast mode
[ 1378.195556][T23275] syzkaller0: entered promiscuous mode
[ 1378.240336][T23275] syzkaller0: entered allmulticast mode
[ 1378.881318][T16616] Bluetooth: hci0: command 0x0406 tx timeout
[ 1380.162418][T17193] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[ 1380.357393][T17193] usb 10-1: not running at top speed; connect to a high speed hub
[ 1380.379567][T17193] usb 10-1: config 8 has an invalid interface number: 44 but max is 0
[ 1380.405620][T17193] usb 10-1: config 8 has no interface number 0
[ 1380.413185][T17193] usb 10-1: config 8 interface 44 has no altsetting 0
[ 1380.447524][T17193] usb 10-1: string descriptor 0 read error: -22
[ 1380.455259][T17193] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1380.474741][T17193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.718852][T17193] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state.
[ 1380.753081][T17193] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1380.786401][T17193] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1380.812509][T17193] usb 10-1: media controller created
[ 1380.831643][T17193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1380.929150][T17193] DVB: Unable to find symbol dib7000p_attach()
[ 1380.947139][T17193] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1380.976866][T17193] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1380.997014][T17193] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1381.017128][T17193] usb 10-1: media controller created
[ 1381.035167][T17193] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1381.152863][T17193] DVB: Unable to find symbol dib7000p_attach()
[ 1381.159573][T17193] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1381.283154][T17193] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1381.289334][T17193] Registered IR keymap rc-empty
[ 1381.306961][T17193] dvb-usb: could not initialize remote control.
[ 1381.315385][T17193] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected.
[ 1382.928448][T11422] usb 10-1: USB disconnect, device number 12
[ 1383.030883][T11422] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected.
[ 1384.120331][T11422] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1384.342403][T11422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1384.396091][T11422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1384.472970][T11422] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1384.506746][T11422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1384.567762][T11422] usb 2-1: config 0 descriptor??
[ 1385.227846][T11422] hid-led: probe of 0003:27B8:01ED.000C failed with error -71
[ 1385.320606][T11422] usb 2-1: USB disconnect, device number 11
[ 1385.419921][T23377] batman_adv: batadv0: Adding interface: veth0
[ 1385.449820][T23377] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1385.539047][T23377] batman_adv: batadv0: Interface activated: veth0
[ 1385.582602][T23381] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4869'.
[ 1385.665852][T23377] batman_adv: batadv0: Interface deactivated: veth0
[ 1385.693777][T23377] batman_adv: batadv0: Removing interface: veth0
[ 1385.732348][T23377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1385.740006][T23377] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1385.808401][T23377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1385.845596][T23377] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1386.796197][T23413] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4880'.
[ 1387.155277][T23421] syzkaller0: entered promiscuous mode
[ 1387.185303][T23421] syzkaller0: entered allmulticast mode
[ 1388.740912][T23468] syzkaller0: entered promiscuous mode
[ 1388.760961][T23468] syzkaller0: entered allmulticast mode
[ 1389.220428][T16477] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[ 1389.340396][T11422] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1389.411865][T16477] usb 2-1: config 43 interface 0 has no altsetting 0
[ 1389.425021][T16477] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82
[ 1389.446224][T16477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1389.468411][T16477] usb 2-1: Product: syz
[ 1389.478644][T16477] usb 2-1: Manufacturer: syz
[ 1389.490021][T16477] usb 2-1: SerialNumber: syz
[ 1389.495135][T11422] usb 10-1: device descriptor read/64, error -71
[ 1389.726015][T16477] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state
[ 1389.746162][T16477] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1389.773255][T11422] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1389.781537][T16477] dvb_usb_anysee: probe of 2-1:43.0 failed with error -22
[ 1389.822165][T16477] usb 2-1: USB disconnect, device number 12
[ 1389.960917][T11422] usb 10-1: device descriptor read/64, error -71
[ 1390.111518][T11422] usb usb10-port1: attempt power cycle
[ 1390.530282][T11422] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1390.619918][T11422] usb 10-1: device descriptor read/8, error -71
[ 1390.693739][T23522] syzkaller0: entered promiscuous mode
[ 1390.740342][T23522] syzkaller0: entered allmulticast mode
[ 1390.933962][T11422] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1391.001426][T11422] usb 10-1: device descriptor read/8, error -71
[ 1391.152015][T11422] usb usb10-port1: unable to enumerate USB device
[ 1391.691004][T11422] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[ 1391.883114][T11422] usb 2-1: config 43 interface 0 has no altsetting 0
[ 1391.896792][T11422] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82
[ 1391.914755][T11422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1391.933777][T11422] usb 2-1: Product: syz
[ 1391.944359][T11422] usb 2-1: Manufacturer: syz
[ 1391.956143][T11422] usb 2-1: SerialNumber: syz
[ 1392.188837][T11422] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state
[ 1392.216992][T11422] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1392.240080][T11422] dvb_usb_anysee: probe of 2-1:43.0 failed with error -22
[ 1392.277096][T11422] usb 2-1: USB disconnect, device number 13
[ 1394.102297][T23537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1396.411361][T16477] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[ 1396.630400][T16477] usb 3-1: not running at top speed; connect to a high speed hub
[ 1396.651259][T23695] vlan0: entered promiscuous mode
[ 1396.656504][T23695] vlan0: entered allmulticast mode
[ 1396.688616][T16477] usb 3-1: config 8 has an invalid interface number: 44 but max is 0
[ 1396.721049][T23695] veth0_vlan: entered allmulticast mode
[ 1396.734765][T16477] usb 3-1: config 8 has no interface number 0
[ 1396.771210][T16477] usb 3-1: config 8 interface 44 has no altsetting 0
[ 1396.818857][T16477] usb 3-1: string descriptor 0 read error: -22
[ 1396.843220][T16477] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1396.903146][T16477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.164199][T16477] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state.
[ 1397.231797][T16477] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1397.285667][T16477] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1397.369567][T16477] usb 3-1: media controller created
[ 1397.424828][T16477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1397.656960][T16477] DVB: Unable to find symbol dib7000p_attach()
[ 1397.697888][T16477] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1397.753382][T16477] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1397.803279][T16477] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1397.855744][T16477] usb 3-1: media controller created
[ 1397.894217][T16477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1398.066072][T23733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1398.136015][T23733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1398.174353][T16477] DVB: Unable to find symbol dib7000p_attach()
[ 1398.213868][T16477] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1398.540949][T16477] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1398.586518][T16477] Registered IR keymap rc-empty
[ 1398.617311][T16477] dvb-usb: could not initialize remote control.
[ 1398.659989][T16477] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected.
[ 1399.795373][ T5859] usb 3-1: USB disconnect, device number 16
[ 1399.927269][ T5859] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected.
[ 1400.410387][ T5859] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1400.591478][ T5859] usb 3-1: device descriptor read/64, error -71
[ 1400.619394][T23807] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4973'.
[ 1400.661478][T23807] smc: net device nr0 applied user defined pnetid SYZ2
[ 1400.892054][ T5859] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1401.080413][ T5859] usb 3-1: device descriptor read/64, error -71
[ 1401.140999][T23823] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4979'.
[ 1401.179490][T23823] block nbd0: not configured, cannot reconfigure
[ 1401.239453][ T5859] usb usb3-port1: attempt power cycle
[ 1401.660890][ T5859] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1401.753950][ T5859] usb 3-1: device descriptor read/8, error -71
[ 1401.779043][T23842] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4984'.
[ 1402.042199][T23851] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4987'.
[ 1402.061777][ T5859] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1402.131670][ T5859] usb 3-1: device descriptor read/8, error -71
[ 1402.286642][ T5859] usb usb3-port1: unable to enumerate USB device
[ 1402.734159][T23869] netlink: 'syz.9.4993': attribute type 1 has an invalid length.
[ 1402.790364][T16477] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1402.970792][T23878] syzkaller0: entered promiscuous mode
[ 1402.982187][T16477] usb 6-1: Using ep0 maxpacket: 32
[ 1402.996558][T23878] syzkaller0: entered allmulticast mode
[ 1403.009647][T16477] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 1403.058092][T16477] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1403.118259][T16477] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1403.182804][T16477] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1403.237696][T16477] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1403.305627][T16477] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1403.344377][T16477] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1403.397717][T16477] usb 6-1: Product: syz
[ 1403.422959][T16477] usb 6-1: Manufacturer: syz
[ 1403.443374][T16477] usb 6-1: SerialNumber: syz
[ 1403.475635][T16477] usb 6-1: config 0 descriptor??
[ 1403.522369][T16477] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1403.609971][T16477] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1404.037421][T23904] netlink: 'syz.2.5003': attribute type 1 has an invalid length.
[ 1404.450375][T11422] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1404.571769][T23916] syzkaller0: entered promiscuous mode
[ 1404.586039][T23916] syzkaller0: entered allmulticast mode
[ 1404.669606][T11422] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1404.696262][T11422] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1404.731934][T11422] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1404.772351][T11422] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1404.834156][T11422] usb 10-1: config 0 descriptor??
[ 1405.538058][T11422] usb 6-1: USB disconnect, device number 14
[ 1405.566668][T11422] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[ 1407.040780][T17193] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1407.213873][T11422] usb 10-1: USB disconnect, device number 17
[ 1407.253608][T17193] usb 3-1: Using ep0 maxpacket: 32
[ 1407.283937][T17193] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[ 1407.342509][T17193] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1407.395232][T17193] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1407.419685][T17193] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1407.453302][T17193] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1407.476746][T17193] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1407.493003][T17193] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1407.511912][T17193] usb 3-1: Product: syz
[ 1407.519577][T17193] usb 3-1: Manufacturer: syz
[ 1407.531476][T17193] usb 3-1: SerialNumber: syz
[ 1407.548852][T17193] usb 3-1: config 0 descriptor??
[ 1407.568307][T17193] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1407.593358][T17193] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1409.785671][T20675] usb 3-1: USB disconnect, device number 21
[ 1409.815792][T20675] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 1409.873468][T23979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1410.482977][T24054] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5029'.
[ 1410.760525][ T5859] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1410.780321][T20675] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1410.971956][ T5859] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1411.010319][T20675] usb 2-1: Using ep0 maxpacket: 32
[ 1411.021424][ T5859] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1411.060372][T20675] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 1411.087203][ T5859] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1411.107189][T20675] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1411.147606][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1411.174693][T20675] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1411.217141][ T5859] usb 6-1: config 0 descriptor??
[ 1411.248486][T20675] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1411.330143][T20675] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1411.366198][T20675] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1411.419061][T20675] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1411.462446][T20675] usb 2-1: Product: syz
[ 1411.466683][T20675] usb 2-1: Manufacturer: syz
[ 1411.511827][T20675] usb 2-1: SerialNumber: syz
[ 1411.544806][T20675] usb 2-1: config 0 descriptor??
[ 1411.575315][T20675] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1411.633169][T20675] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1411.946664][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5043'.
[ 1411.976598][T24096] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5043'.
[ 1412.014853][T24096] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1412.024390][T24096] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1412.033506][T24096] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1412.042559][T24096] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1412.173864][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5043'.
[ 1412.183958][T24096] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5043'.
[ 1413.544705][    T8] usb 6-1: USB disconnect, device number 15
[ 1414.111118][T24143] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1416.315777][T24202] tipc: Started in network mode
[ 1416.347092][T24202] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1416.388151][T24202] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1416.448617][T24202] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1416.804131][T24058] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110
[ 1416.978962][T17192] usb 2-1: USB disconnect, device number 14
[ 1417.028788][T17192] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[ 1417.343400][T24229] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5090'.
[ 1417.507711][T24237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5093'.
[ 1417.677041][T24240] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5094'.
[ 1417.908245][T24255] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5095'.
[ 1417.995917][ T7359] tipc: Node number set to 1
[ 1418.230701][T17192] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1418.440364][T17192] usb 10-1: Using ep0 maxpacket: 32
[ 1418.462965][T17192] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[ 1418.501602][T17192] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1418.576138][T17192] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1418.647281][T17192] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1418.749146][T17192] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1418.773700][T17192] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1418.837663][T17192] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1418.887117][T17192] usb 10-1: Product: syz
[ 1418.910907][T17192] usb 10-1: Manufacturer: syz
[ 1418.915659][T17192] usb 10-1: SerialNumber: syz
[ 1418.951203][T24284] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5104'.
[ 1418.989574][T17192] usb 10-1: config 0 descriptor??
[ 1419.026885][T17192] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1419.083156][T17192] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1420.177531][T24316] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5116'.
[ 1420.498523][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5120'.
[ 1420.536545][T24326] netlink: 'syz.5.5120': attribute type 7 has an invalid length.
[ 1420.571413][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5120'.
[ 1420.615896][T24326] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1420.624959][T24326] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1420.633825][T24326] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1420.643069][T24326] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1420.749899][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5120'.
[ 1420.826279][T24326] netlink: 'syz.5.5120': attribute type 7 has an invalid length.
[ 1420.887507][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5120'.
[ 1422.129994][T24366] syz_tun: entered allmulticast mode
[ 1422.270261][ T7359] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1422.440301][ T7359] usb 6-1: device descriptor read/64, error -71
[ 1422.750268][ T7359] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1422.931046][ T7359] usb 6-1: device descriptor read/64, error -71
[ 1423.090696][ T7359] usb usb6-port1: attempt power cycle
[ 1423.127396][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.134900][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.530324][ T7359] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1423.601841][ T7359] usb 6-1: device descriptor read/8, error -71
[ 1423.883158][ T7359] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1423.938134][ T7359] usb 6-1: device descriptor read/8, error -71
[ 1424.068375][ T7359] usb usb6-port1: unable to enumerate USB device
[ 1424.326744][T24259] ldusb 10-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110
[ 1424.399242][ T7359] usb 10-1: USB disconnect, device number 18
[ 1424.427694][ T7359] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[ 1427.250488][T24435] syzkaller0: entered promiscuous mode
[ 1427.256048][T24435] syzkaller0: entered allmulticast mode
[ 1428.171186][T24466] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5155'.
[ 1428.220336][ T5859] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1428.430948][T20675] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[ 1428.440904][ T5859] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1428.478811][ T5859] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1428.526574][ T5859] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1428.575726][ T5859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1428.621875][ T5859] usb 10-1: config 0 descriptor??
[ 1428.655862][T20675] usb 6-1: config 43 interface 0 has no altsetting 0
[ 1428.693437][T20675] usb 6-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82
[ 1428.723043][T20675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1428.773918][T20675] usb 6-1: Product: syz
[ 1428.778174][T20675] usb 6-1: Manufacturer: syz
[ 1428.785224][T24481] syzkaller0: entered promiscuous mode
[ 1428.801553][T24481] syzkaller0: entered allmulticast mode
[ 1428.812049][T20675] usb 6-1: SerialNumber: syz
[ 1429.051450][T20675] usb 6-1: dvb_usb_v2: found a 'Anysee' in warm state
[ 1429.098526][T20675] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1429.139157][T20675] dvb_usb_anysee: probe of 6-1:43.0 failed with error -22
[ 1429.208395][T20675] usb 6-1: USB disconnect, device number 20
[ 1429.534184][T24504] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1430.064959][ T5859] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1430.272273][ T5859] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1430.298485][ T5859] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1430.337420][ T5859] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1430.364441][ T5859] usb 3-1: config 1 has no interface number 0
[ 1430.381690][ T5859] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[ 1430.429003][ T5859] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1430.513150][ T5859] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1430.553125][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1430.597162][ T5859] usb 3-1: Product: syz
[ 1430.626138][ T5859] usb 3-1: Manufacturer: syz
[ 1430.655389][ T5859] usb 3-1: SerialNumber: syz
[ 1430.878041][T24532] syzkaller0: entered promiscuous mode
[ 1430.894445][T24532] syzkaller0: entered allmulticast mode
[ 1430.931308][T16477] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1431.016688][T20675] usb 10-1: USB disconnect, device number 19
[ 1431.108222][ T5859] usb 3-1: USB disconnect, device number 22
[ 1431.173803][T16477] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1431.227785][T16477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1431.283915][T16477] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1431.341599][T16477] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1431.418094][T16477] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1431.482685][T16477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1431.558141][T16477] usb 2-1: config 0 descriptor??
[ 1431.596249][T16477] hdpvr 2-1:0.0: Could not find bulk-in endpoint
[ 1431.656248][T16477] hdpvr: probe of 2-1:0.0 failed with error -12
[ 1433.124008][T24589] syzkaller0: entered promiscuous mode
[ 1433.151502][T24589] syzkaller0: entered allmulticast mode
[ 1433.738984][T17192] usb 2-1: USB disconnect, device number 15
[ 1433.937750][T24612] batadv_slave_0: entered promiscuous mode
[ 1433.983585][T24612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5188'.
[ 1434.057148][T24612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1434.403264][T24612] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1435.222544][T24651] syzkaller0: entered promiscuous mode
[ 1435.228177][T24651] syzkaller0: entered allmulticast mode
[ 1436.754981][T24698] syzkaller0: entered promiscuous mode
[ 1436.781366][T24698] syzkaller0: entered allmulticast mode
[ 1436.824195][T24700] tipc: Started in network mode
[ 1436.840515][T24700] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1436.877710][T24700] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1436.912514][T24700] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1438.020555][T20675] tipc: Node number set to 1
[ 1438.720475][T21358] Bluetooth: hci0: command tx timeout
[ 1438.972447][T24744] syzkaller0: entered promiscuous mode
[ 1438.985707][T24744] syzkaller0: entered allmulticast mode
[ 1440.495845][T24723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1440.802770][T21358] Bluetooth: hci0: command tx timeout
[ 1441.874406][T24782] syzkaller0: entered promiscuous mode
[ 1441.897084][T24782] syzkaller0: entered allmulticast mode
[ 1442.070359][    T8] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1442.284722][    T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.338376][    T8] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1442.401452][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1442.882368][T21358] Bluetooth: hci0: command tx timeout
[ 1444.778251][T24538] usb 6-1: USB disconnect, device number 21
[ 1444.960680][T21358] Bluetooth: hci0: command tx timeout
[ 1445.946339][T24815] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1446.890269][T17194] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1446.950292][T20675] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[ 1447.107708][T17194] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1447.149306][T17194] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1447.176100][T20675] usb 10-1: not running at top speed; connect to a high speed hub
[ 1447.220407][T20675] usb 10-1: config 8 has an invalid interface number: 44 but max is 0
[ 1447.232355][T17194] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1447.263190][T20675] usb 10-1: config 8 has no interface number 0
[ 1447.282559][T17194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1447.304806][T20675] usb 10-1: config 8 interface 44 has no altsetting 0
[ 1447.346792][T20675] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1447.357004][T17194] usb 3-1: config 0 descriptor??
[ 1447.395824][T17194] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1447.414563][T20675] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1447.460285][T20675] usb 10-1: Product: syz
[ 1447.483022][T20675] usb 10-1: Manufacturer: syz
[ 1447.511738][T20675] usb 10-1: SerialNumber: syz
[ 1447.758067][T24857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1447.801671][T24857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1447.870328][T20675] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware
[ 1448.016518][T20675] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1448.057412][T20675] dib0700: firmware download failed at 7 with -22
[ 1448.114729][T20675] usb 10-1: USB disconnect, device number 20
[ 1448.191285][T24871] tipc: Started in network mode
[ 1448.217020][T24871] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[ 1448.246749][T24871] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1448.281925][T24871] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1448.517902][T24877] syzkaller0: entered promiscuous mode
[ 1448.551388][T24877] syzkaller0: entered allmulticast mode
[ 1448.700962][T24883] syzkaller0: entered promiscuous mode
[ 1448.709910][T24883] syzkaller0: entered allmulticast mode
[ 1449.390714][T17193] tipc: Node number set to 1
[ 1449.573145][T24909] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1449.595721][T17193] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1449.648865][T17193] usb 3-1: USB disconnect, device number 23
[ 1450.061432][T17193] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1450.125810][T24917] syzkaller0: entered promiscuous mode
[ 1450.156522][T24917] syzkaller0: entered allmulticast mode
[ 1450.300645][T24921] syzkaller0: entered promiscuous mode
[ 1450.312740][T24921] syzkaller0: entered allmulticast mode
[ 1451.860089][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5275'.
[ 1452.139929][T24968] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5277'.
[ 1453.503515][T25006] syzkaller0: entered promiscuous mode
[ 1453.540859][T25006] syzkaller0: entered allmulticast mode
[ 1453.680432][T21358] Bluetooth: hci0: command tx timeout
[ 1455.122162][T25046] syzkaller0: entered promiscuous mode
[ 1455.151174][T25046] syzkaller0: entered allmulticast mode
[ 1456.080944][T16616] Bluetooth: hci0: command tx timeout
[ 1456.574205][T25087] syzkaller0: entered promiscuous mode
[ 1456.619500][T25087] syzkaller0: entered allmulticast mode
[ 1457.430523][T17194] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1457.474058][T25116] syzkaller0: entered promiscuous mode
[ 1457.493707][T25116] syzkaller0: entered allmulticast mode
[ 1457.642046][T17194] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1457.674606][T17194] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1457.707066][T17194] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1457.770597][T17194] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1457.841269][T17194] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1457.919928][T17194] usb 10-1: config 0 descriptor??
[ 1457.965183][T17194] hdpvr 10-1:0.0: Could not find bulk-in endpoint
[ 1458.014681][T17194] hdpvr: probe of 10-1:0.0 failed with error -12
[ 1458.256662][T25132] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1458.688247][T25143] syzkaller0: entered promiscuous mode
[ 1458.706671][T25143] syzkaller0: entered allmulticast mode
[ 1459.946289][T25172] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1460.235941][T20675] usb 10-1: USB disconnect, device number 21
[ 1462.767957][T25225] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5353'.
[ 1465.134254][T25237] kvm: requested 134933 ns i8254 timer period limited to 200000 ns
[ 1465.175730][T25237] kvm: requested 54476 ns i8254 timer period limited to 200000 ns
[ 1465.199668][T25237] kvm: requested 111466 ns i8254 timer period limited to 200000 ns
[ 1465.247060][T25237] kvm: requested 24304 ns i8254 timer period limited to 200000 ns
[ 1465.302491][T25237] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[ 1465.375256][T25237] kvm: requested 130742 ns i8254 timer period limited to 200000 ns
[ 1465.437310][T25237] kvm: requested 135771 ns i8254 timer period limited to 200000 ns
[ 1465.477822][T25258] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5362'.
[ 1465.500827][T25237] kvm: requested 74590 ns i8254 timer period limited to 200000 ns
[ 1465.556034][T25237] kvm: requested 72914 ns i8254 timer period limited to 200000 ns
[ 1465.599081][T25237] kvm: requested 24304 ns i8254 timer period limited to 200000 ns
[ 1466.131468][T25270] netlink: 'syz.1.5366': attribute type 1 has an invalid length.
[ 1466.176068][T25272] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5367'.
[ 1466.558459][T25272] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5367'.
[ 1466.849538][T25286] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1466.967802][T25294] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5372'.
[ 1467.591937][T25313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5379'.
[ 1467.627398][T25313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5379'.
[ 1467.679054][T25311] syzkaller0: entered promiscuous mode
[ 1467.721848][T25311] syzkaller0: entered allmulticast mode
[ 1468.210489][T16477] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1468.457401][T16477] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1468.527391][T16477] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1468.619513][T16477] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1468.717457][T16477] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1468.806082][T16477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1469.201432][    C0] ip6_tunnel: ip6gretap0: Local routing loop detected!
[ 1469.296964][T25361] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1469.690717][T25372] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5389'.
[ 1469.741226][T25372] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5389'.
[ 1469.774560][T25374] syzkaller0: entered promiscuous mode
[ 1469.800459][T25374] syzkaller0: entered allmulticast mode
[ 1470.819194][T25412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5400'.
[ 1470.889002][T25412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5400'.
[ 1471.003554][T17194] usb 3-1: USB disconnect, device number 24
[ 1471.086863][T25418] syzkaller0: entered promiscuous mode
[ 1471.152729][T25418] syzkaller0: entered allmulticast mode
[ 1472.340332][T24538] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1472.586501][T25471] syzkaller0: entered promiscuous mode
[ 1472.604520][T24538] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1472.624540][T25471] syzkaller0: entered allmulticast mode
[ 1472.634673][T24538] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1472.686090][T24538] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1472.700301][T17194] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1472.740888][T24538] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1472.767766][T24538] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1472.823315][T24538] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1472.871191][T24538] usb 10-1: config 0 descriptor??
[ 1472.928615][T17194] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1472.972904][T17194] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1473.034644][T17194] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1473.092007][T17194] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1473.132928][T24538] hdpvr 10-1:0.0: unexpected answer of status request, len -32
[ 1473.151878][T17194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1473.171859][T24538] hdpvr 10-1:0.0: device init failed
[ 1473.199750][T24538] hdpvr: probe of 10-1:0.0 failed with error -12
[ 1473.253325][T24538] usb 10-1: USB disconnect, device number 22
[ 1474.278458][T25513] syzkaller0: entered promiscuous mode
[ 1474.291925][T25513] syzkaller0: entered allmulticast mode
[ 1475.447794][T16477] usb 6-1: USB disconnect, device number 22
[ 1477.264929][T25515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1477.618996][T25554] syzkaller0: entered promiscuous mode
[ 1477.661101][T25554] syzkaller0: entered allmulticast mode
[ 1479.060985][T25610] syzkaller0: entered promiscuous mode
[ 1479.097385][T25610] syzkaller0: entered allmulticast mode
[ 1480.375728][T25661] syzkaller0: entered promiscuous mode
[ 1480.413259][T25661] syzkaller0: entered allmulticast mode
[ 1480.531556][T25669] syzkaller0: entered promiscuous mode
[ 1480.537122][T25669] syzkaller0: entered allmulticast mode
[ 1481.146520][T25689] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1481.310890][    T8] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[ 1481.420339][T17193] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1481.524511][    T8] usb 6-1: not running at top speed; connect to a high speed hub
[ 1481.558384][    T8] usb 6-1: config 8 has an invalid interface number: 44 but max is 0
[ 1481.595365][    T8] usb 6-1: config 8 has no interface number 0
[ 1481.642207][    T8] usb 6-1: config 8 interface 44 has no altsetting 0
[ 1481.650411][T17193] usb 2-1: Using ep0 maxpacket: 32
[ 1481.686082][T17193] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 1481.716478][    T8] usb 6-1: string descriptor 0 read error: -22
[ 1481.726306][T17193] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1481.747158][    T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1481.787549][T17193] usb 2-1: config 0 has no interfaces?
[ 1481.795666][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1481.852560][T17193] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1481.899558][T17193] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1481.929344][T17193] usb 2-1: Product: syz
[ 1481.945810][T17193] usb 2-1: Manufacturer: syz
[ 1481.961666][T17193] usb 2-1: SerialNumber: syz
[ 1481.998801][T17193] usb 2-1: config 0 descriptor??
[ 1482.085825][    T8] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in cold state, will try to load a firmware
[ 1482.139722][    T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 1482.158263][T25721] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5473'.
[ 1482.190003][    T8] dib0700: firmware download failed at 7 with -22
[ 1482.209721][T25721] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5473'.
[ 1482.430926][T25731] syzkaller0: entered promiscuous mode
[ 1482.447692][T25731] syzkaller0: entered allmulticast mode
[ 1482.989011][T25750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.047845][T25750] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1483.349203][T25755] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1484.201569][T16477] usb 6-1: USB disconnect, device number 23
[ 1484.308405][T20675] usb 2-1: USB disconnect, device number 16
[ 1484.592291][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.598695][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.635109][T25784] syzkaller0: entered promiscuous mode
[ 1484.692235][T25784] syzkaller0: entered allmulticast mode
[ 1485.063729][T25794] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1486.412935][T25841] syzkaller0: entered promiscuous mode
[ 1486.418486][T25841] syzkaller0: entered allmulticast mode
[ 1486.560483][T16477] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1486.626745][T25852] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1486.773732][T16477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1486.835716][T16477] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1486.896784][T16477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1486.994567][T16477] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1487.075477][T16477] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1487.152648][T16477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.228223][T16477] usb 2-1: config 0 descriptor??
[ 1487.305282][T25866] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5507'.
[ 1487.490528][T16477] hdpvr 2-1:0.0: unexpected answer of status request, len 0
[ 1487.548231][T16477] hdpvr 2-1:0.0: device init failed
[ 1487.575234][T16477] hdpvr: probe of 2-1:0.0 failed with error -12
[ 1487.694201][T16477] usb 2-1: USB disconnect, device number 17
[ 1488.640465][T16477] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1488.854577][T16477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1488.902793][T16477] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1488.945330][T16477] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1488.979195][T16477] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1489.032800][T16477] usb 3-1: config 0 descriptor??
[ 1489.459796][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[ 1489.469106][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[ 1489.477303][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[ 1489.486779][T16477] usbhid 3-1:0.0: can't add hid device: -32
[ 1489.495103][T16477] usbhid: probe of 3-1:0.0 failed with error -32
[ 1489.524820][T16477] usb 3-1: USB disconnect, device number 25
[ 1490.249151][T25915] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5517'.
[ 1492.493714][T25932] syzkaller0: entered promiscuous mode
[ 1492.528917][T25932] syzkaller0: entered allmulticast mode
[ 1492.951889][T25957] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5526'.
[ 1493.091016][T17194] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1493.305308][T17194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1493.351434][T17194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1493.388975][T17194] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1493.441082][T17194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1493.492787][T17194] usb 3-1: config 0 descriptor??
[ 1493.919873][T17194] usbhid 3-1:0.0: can't add hid device: -71
[ 1493.948847][T17194] usbhid: probe of 3-1:0.0 failed with error -71
[ 1493.993571][T17194] usb 3-1: USB disconnect, device number 26
[ 1496.646209][T25945] syzkaller0: entered promiscuous mode
[ 1496.654848][T25945] syzkaller0: entered allmulticast mode
[ 1497.130331][T26004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5535'.
[ 1497.310291][T16477] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[ 1497.532009][T16477] usb 2-1: not running at top speed; connect to a high speed hub
[ 1497.570510][T16477] usb 2-1: config 8 has an invalid interface number: 44 but max is 0
[ 1497.617690][T16477] usb 2-1: config 8 has no interface number 0
[ 1497.680371][T16477] usb 2-1: config 8 interface 44 has no altsetting 0
[ 1497.747143][T16477] usb 2-1: string descriptor 0 read error: -22
[ 1497.762041][T16477] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1497.819633][T16477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.858485][T26017] syzkaller0: entered promiscuous mode
[ 1497.884505][T26017] syzkaller0: entered allmulticast mode
[ 1498.086388][T16477] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state.
[ 1498.141153][T16477] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1498.191422][T16477] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1498.222318][T16477] usb 2-1: media controller created
[ 1498.253648][T16477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1498.517100][T16477] DVB: Unable to find symbol dib7000p_attach()
[ 1498.553012][T16477] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1498.598991][T16477] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1498.661849][T16477] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1498.713791][T16477] usb 2-1: media controller created
[ 1498.758559][T16477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1498.929170][T16477] DVB: Unable to find symbol dib7000p_attach()
[ 1498.955235][T16477] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1499.122373][T16477] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1499.129399][T16477] Registered IR keymap rc-empty
[ 1499.147363][T16477] dvb-usb: could not initialize remote control.
[ 1499.163573][T16477] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected.
[ 1500.312398][T17194] usb 2-1: USB disconnect, device number 18
[ 1500.378653][T17194] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected.
[ 1502.666781][T26066] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5546'.
[ 1503.283500][T26087] syzkaller0: entered promiscuous mode
[ 1503.289073][T26087] syzkaller0: entered allmulticast mode
[ 1503.468327][T26093] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5557'.
[ 1504.269574][T26123] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5567'.
[ 1504.484348][T26130] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5570'.
[ 1504.935734][T26140] syzkaller0: entered promiscuous mode
[ 1504.974797][T26140] syzkaller0: entered allmulticast mode
[ 1505.344918][T26156] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5579'.
[ 1505.641730][T26169] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5583'.
[ 1505.671140][T26171] netlink: 'syz.2.5582': attribute type 10 has an invalid length.
[ 1505.705146][T26171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5582'.
[ 1505.809312][T26171] netlink: 'syz.2.5582': attribute type 10 has an invalid length.
[ 1505.826430][T26171] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5582'.
[ 1505.862569][T26167] netlink: 'syz.2.5582': attribute type 10 has an invalid length.
[ 1505.936138][T26167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5582'.
[ 1506.245795][T26186] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5588'.
[ 1507.892029][T26241] __nla_validate_parse: 3 callbacks suppressed
[ 1507.892070][T26241] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5612'.
[ 1507.967341][T26242] netlink: 'syz.5.5611': attribute type 22 has an invalid length.
[ 1507.994272][T26242] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5611'.
[ 1508.031519][T26241] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5612'.
[ 1508.991133][T26277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5624'.
[ 1509.050414][ T7359] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1509.271900][ T7359] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1509.332206][ T7359] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1509.397987][ T7359] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1509.462952][ T7359] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1509.530467][ T7359] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1509.570169][ T7359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.710657][T11422] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1509.930251][T11422] usb 2-1: Using ep0 maxpacket: 32
[ 1509.947107][T11422] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 1509.973793][T11422] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1510.009669][T11422] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1510.051496][T11422] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[ 1510.084457][T26313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5637'.
[ 1510.101813][T11422] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1510.127190][T11422] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1510.152487][T11422] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1510.193144][T11422] usb 2-1: Product: syz
[ 1510.211133][T11422] usb 2-1: Manufacturer: syz
[ 1510.227888][T11422] usb 2-1: SerialNumber: syz
[ 1510.247957][T11422] usb 2-1: config 0 descriptor??
[ 1510.277400][T11422] ldusb 2-1:0.0: Interrupt in endpoint not found
[ 1511.178763][T26343] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5646'.
[ 1511.828852][T17194] usb 6-1: USB disconnect, device number 24
[ 1512.250661][T26378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5656'.
[ 1512.521141][T17194] usb 2-1: USB disconnect, device number 19
[ 1513.030435][T17194] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1513.214782][T26404] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5666'.
[ 1513.240940][T17194] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1513.277475][T17194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1513.325797][T17194] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1513.390953][T17194] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1513.473102][T17194] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1513.517483][T17194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.020318][T24538] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1514.240280][T24538] usb 3-1: Using ep0 maxpacket: 32
[ 1514.261009][T24538] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[ 1514.284344][T24538] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1514.343511][T24538] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1514.391985][T24538] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1514.463338][T24538] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1514.505049][T24538] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1514.532221][T24538] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1514.575488][T24538] usb 3-1: Product: syz
[ 1514.592402][T24538] usb 3-1: Manufacturer: syz
[ 1514.610241][T24538] usb 3-1: SerialNumber: syz
[ 1514.632711][T24538] usb 3-1: config 0 descriptor??
[ 1514.664996][T24538] ldusb 3-1:0.0: Interrupt in endpoint not found
[ 1515.403517][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5675'.
[ 1515.716543][T17194] usb 2-1: USB disconnect, device number 20
[ 1516.293792][T17194] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[ 1516.482267][T17194] usb 2-1: not running at top speed; connect to a high speed hub
[ 1516.516936][T17194] usb 2-1: config 8 has an invalid interface number: 44 but max is 0
[ 1516.556929][T17194] usb 2-1: config 8 has no interface number 0
[ 1516.590322][T17194] usb 2-1: config 8 interface 44 has no altsetting 0
[ 1516.627076][T17194] usb 2-1: string descriptor 0 read error: -22
[ 1516.661179][T17194] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1516.709163][T17194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.853541][ T5859] usb 3-1: USB disconnect, device number 27
[ 1517.016903][T17194] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state.
[ 1517.077692][T17194] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1517.158688][T17194] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1517.230939][T17194] usb 2-1: media controller created
[ 1517.265467][T17194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1517.567191][T17194] DVB: Unable to find symbol dib7000p_attach()
[ 1517.599709][T17194] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1517.665506][T17194] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1517.720448][T17194] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1517.759085][T17194] usb 2-1: media controller created
[ 1517.793699][T17194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1517.850259][T11422] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1517.922079][T26494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1517.979206][T26494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1518.086324][T11422] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1518.107727][T17194] DVB: Unable to find symbol dib7000p_attach()
[ 1518.138544][T17194] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1518.154868][T11422] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1518.215676][T11422] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1518.292332][T11422] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1518.353096][T11422] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1518.406651][T11422] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1518.440665][T17194] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1518.476233][T11422] usb 10-1: config 0 descriptor??
[ 1518.484342][T17194] Registered IR keymap rc-empty
[ 1518.532796][T17194] dvb-usb: could not initialize remote control.
[ 1518.609444][T17194] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected.
[ 1518.705534][T26513] netlink: 'syz.5.5701': attribute type 10 has an invalid length.
[ 1518.756880][T11422] hdpvr 10-1:0.0: unexpected answer of status request, len 44
[ 1518.804275][T26513] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1518.811741][T26513] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1518.829657][T11422] hdpvr 10-1:0.0: device init failed
[ 1518.865837][T11422] hdpvr: probe of 10-1:0.0 failed with error -12
[ 1518.942064][T26513] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1518.949773][T26513] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1518.959412][T26513] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1518.967247][T26513] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1519.031617][T17194] usb 10-1: USB disconnect, device number 23
[ 1519.065505][T26513] team0: Port device bridge0 added
[ 1519.817066][T17192] usb 2-1: USB disconnect, device number 21
[ 1519.943976][T17192] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected.
[ 1520.890280][T17192] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1521.029837][T26571] netlink: 'syz.9.5720': attribute type 10 has an invalid length.
[ 1521.075472][T26574] netlink: 'syz.2.5721': attribute type 29 has an invalid length.
[ 1521.101888][T26571] team0: Port device wlan1 added
[ 1521.115392][T17192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1521.142239][T26574] netlink: 'syz.2.5721': attribute type 29 has an invalid length.
[ 1521.173455][T17192] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1521.193382][T26576] netlink: 'syz.2.5721': attribute type 29 has an invalid length.
[ 1521.218304][T17192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1521.241261][T26574] netlink: 'syz.2.5721': attribute type 29 has an invalid length.
[ 1521.266059][T17192] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1521.301462][T26574] netlink: 'syz.2.5721': attribute type 29 has an invalid length.
[ 1521.331875][T17192] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1521.394313][T17192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1521.456525][T17192] usb 6-1: config 0 descriptor??
[ 1521.717815][T17192] hdpvr 6-1:0.0: unexpected answer of status request, len 44
[ 1521.761360][T17192] hdpvr 6-1:0.0: device init failed
[ 1521.790101][T17192] hdpvr: probe of 6-1:0.0 failed with error -12
[ 1521.917886][T17192] usb 6-1: USB disconnect, device number 25
[ 1522.142439][T26603] netlink: 128 bytes leftover after parsing attributes in process `syz.9.5733'.
[ 1522.208497][T26603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1522.583411][T26615] netlink: 'syz.9.5738': attribute type 2 has an invalid length.
[ 1522.619259][T26615] netlink: 'syz.9.5738': attribute type 8 has an invalid length.
[ 1522.658068][T26615] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5738'.
[ 1525.480475][T16477] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1525.587279][T26709] syzkaller0: entered promiscuous mode
[ 1525.599793][T26709] syzkaller0: entered allmulticast mode
[ 1525.680616][T16477] usb 3-1: Using ep0 maxpacket: 32
[ 1525.707553][T16477] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[ 1525.769909][T16477] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1525.827502][T16477] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1525.871114][T26721] netlink: 207684 bytes leftover after parsing attributes in process `syz.9.5763'.
[ 1525.902840][T16477] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1525.920047][T26721] netlink: 'syz.9.5763': attribute type 1 has an invalid length.
[ 1525.949975][T16477] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1525.974275][T26721] netlink: 'syz.9.5763': attribute type 2 has an invalid length.
[ 1526.047047][T16477] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1526.096916][T16477] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1526.128535][T26726] netlink: 'syz.5.5765': attribute type 7 has an invalid length.
[ 1526.146299][T16477] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1526.187240][T16477] usb 3-1: Product: syz
[ 1526.192067][T26726] netlink: 'syz.5.5765': attribute type 27 has an invalid length.
[ 1526.215231][T16477] usb 3-1: Manufacturer: syz
[ 1526.219912][T16477] usb 3-1: SerialNumber: syz
[ 1526.274720][T16477] usb 3-1: config 0 descriptor??
[ 1526.306871][T16477] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1526.404399][T16477] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1526.535219][T26739] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5769'.
[ 1527.387938][T26756] syzkaller0: entered promiscuous mode
[ 1527.407942][T26756] syzkaller0: entered allmulticast mode
[ 1528.274497][T17192] usb 3-1: USB disconnect, device number 28
[ 1528.316962][T17192] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 1532.647713][T26838] syzkaller0: entered promiscuous mode
[ 1532.681605][T26838] syzkaller0: entered allmulticast mode
[ 1533.538295][T26869] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5801'.
[ 1533.885395][T26881] syzkaller0: entered promiscuous mode
[ 1533.923215][T26881] syzkaller0: entered allmulticast mode
[ 1534.706830][T26913] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5814'.
[ 1535.215673][T26932] syzkaller0: entered promiscuous mode
[ 1535.259958][T26932] syzkaller0: entered allmulticast mode
[ 1535.510526][T26945] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5825'.
[ 1538.150276][T11422] usb 10-1: new full-speed USB device number 24 using dummy_hcd
[ 1538.372446][T11422] usb 10-1: not running at top speed; connect to a high speed hub
[ 1538.422159][T11422] usb 10-1: config 8 has an invalid interface number: 44 but max is 0
[ 1538.468158][T11422] usb 10-1: config 8 has no interface number 0
[ 1538.522837][T11422] usb 10-1: config 8 interface 44 has no altsetting 0
[ 1538.621686][T11422] usb 10-1: string descriptor 0 read error: -22
[ 1538.628139][T11422] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1538.711248][T11422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1538.812428][T27061] netlink: 'syz.1.5857': attribute type 6 has an invalid length.
[ 1539.022510][T11422] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state.
[ 1539.094410][T11422] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1539.173473][T11422] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1539.239330][T11422] usb 10-1: media controller created
[ 1539.284103][T11422] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1539.700807][T11422] DVB: Unable to find symbol dib7000p_attach()
[ 1539.737140][T11422] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1539.818238][T11422] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1539.909006][T27094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1539.925805][T11422] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1539.959226][T27094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1539.992486][T11422] usb 10-1: media controller created
[ 1540.042468][T11422] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1540.334226][T11422] DVB: Unable to find symbol dib7000p_attach()
[ 1540.369183][T11422] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1540.650233][T11422] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1540.702065][T11422] Registered IR keymap rc-empty
[ 1540.744893][T11422] dvb-usb: could not initialize remote control.
[ 1540.788486][T11422] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected.
[ 1541.973736][T11422] usb 10-1: USB disconnect, device number 24
[ 1542.065216][T11422] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected.
[ 1546.008720][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.017001][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.420764][T24538] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[ 1546.651554][T24538] usb 3-1: not running at top speed; connect to a high speed hub
[ 1546.745358][T24538] usb 3-1: config 8 has an invalid interface number: 44 but max is 0
[ 1546.827808][T24538] usb 3-1: config 8 has no interface number 0
[ 1546.900735][T24538] usb 3-1: config 8 interface 44 has no altsetting 0
[ 1546.995247][T24538] usb 3-1: string descriptor 0 read error: -22
[ 1547.044890][T24538] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1547.129423][T24538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1547.429702][T24538] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state.
[ 1547.505886][T24538] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1547.578696][T24538] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1547.625829][T24538] usb 3-1: media controller created
[ 1547.662154][T24538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1548.048775][T24538] DVB: Unable to find symbol dib7000p_attach()
[ 1548.135781][T24538] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1548.209313][T24538] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1548.277709][T24538] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1548.328885][T27276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1548.349312][T24538] usb 3-1: media controller created
[ 1548.379820][T27276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1548.405593][T24538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1548.625436][T24538] DVB: Unable to find symbol dib7000p_attach()
[ 1548.661425][T24538] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1548.831423][T24538] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1548.852349][T24538] Registered IR keymap rc-empty
[ 1548.858096][T24538] dvb-usb: could not initialize remote control.
[ 1548.876471][T24538] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected.
[ 1549.968071][T24538] usb 3-1: USB disconnect, device number 29
[ 1550.038000][T24538] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected.
[ 1551.160329][T24538] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[ 1551.377514][T24538] usb 3-1: not running at top speed; connect to a high speed hub
[ 1551.408180][T24538] usb 3-1: config 8 has an invalid interface number: 44 but max is 0
[ 1551.418310][T24538] usb 3-1: config 8 has no interface number 0
[ 1551.438941][T24538] usb 3-1: config 8 interface 44 has no altsetting 0
[ 1551.474331][T24538] usb 3-1: string descriptor 0 read error: -22
[ 1551.491253][T24538] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1551.512360][T24538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1551.748008][T24538] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state.
[ 1551.784750][T24538] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1551.815419][T24538] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1551.837001][T24538] usb 3-1: media controller created
[ 1551.856598][T24538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1551.968199][T24538] DVB: Unable to find symbol dib7000p_attach()
[ 1551.985831][T24538] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1552.008496][T24538] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1552.029843][T24538] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1552.053197][T24538] usb 3-1: media controller created
[ 1552.069214][T24538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1552.189068][T24538] DVB: Unable to find symbol dib7000p_attach()
[ 1552.206716][T24538] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1552.338044][T24538] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1552.357169][T24538] Registered IR keymap rc-empty
[ 1552.364676][T24538] dvb-usb: could not initialize remote control.
[ 1552.383170][T24538] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected.
[ 1552.719099][T27311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1552.771735][T27311] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1554.036749][T17192] usb 3-1: USB disconnect, device number 30
[ 1554.198604][T17192] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected.
[ 1555.005319][T27393] syzkaller0: entered promiscuous mode
[ 1555.035049][T27393] syzkaller0: entered allmulticast mode
[ 1556.602519][T27439] syzkaller0: entered promiscuous mode
[ 1556.630279][T27439] syzkaller0: entered allmulticast mode
[ 1556.659164][T27439] 
[ 1556.661549][T27439] ============================================
[ 1556.667693][T27439] WARNING: possible recursive locking detected
[ 1556.673833][T27439] syzkaller #0 Not tainted
[ 1556.678257][T27439] --------------------------------------------
[ 1556.684419][T27439] syz.1.5942/27439 is trying to acquire lock:
[ 1556.690491][T27439] ffff88802f028108 (&sch->root_lock_key#1166){+...}-{2:2}, at: __dev_queue_xmit+0xb01/0x3640
[ 1556.700686][T27439] 
[ 1556.700686][T27439] but task is already holding lock:
[ 1556.708043][T27439] ffff88802f028108 (&sch->root_lock_key#1166){+...}-{2:2}, at: __dev_queue_xmit+0xb01/0x3640
[ 1556.718231][T27439] 
[ 1556.718231][T27439] other info that might help us debug this:
[ 1556.726281][T27439]  Possible unsafe locking scenario:
[ 1556.726281][T27439] 
[ 1556.733724][T27439]        CPU0
[ 1556.737001][T27439]        ----
[ 1556.740273][T27439]   lock(&sch->root_lock_key#1166);
[ 1556.745476][T27439]   lock(&sch->root_lock_key#1166);
[ 1556.750768][T27439] 
[ 1556.750768][T27439]  *** DEADLOCK ***
[ 1556.750768][T27439] 
[ 1556.758918][T27439]  May be due to missing lock nesting notation
[ 1556.758918][T27439] 
[ 1556.767232][T27439] 3 locks held by syz.1.5942/27439:
[ 1556.772437][T27439]  #0: ffffffff8d131e00 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x275/0x3640
[ 1556.782381][T27439]  #1: ffff88802f028108 (&sch->root_lock_key#1166){+...}-{2:2}, at: __dev_queue_xmit+0xb01/0x3640
[ 1556.792999][T27439]  #2: ffffffff8d131e00 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x275/0x3640
[ 1556.802918][T27439] 
[ 1556.802918][T27439] stack backtrace:
[ 1556.808798][T27439] CPU: 0 PID: 27439 Comm: syz.1.5942 Not tainted syzkaller #0
[ 1556.816252][T27439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1556.826322][T27439] Call Trace:
[ 1556.829606][T27439]  <TASK>
[ 1556.832543][T27439]  dump_stack_lvl+0x18c/0x250
[ 1556.837228][T27439]  ? show_regs_print_info+0x20/0x20
[ 1556.842429][T27439]  ? print_deadlock_bug+0x435/0x5d0
[ 1556.847628][T27439]  __lock_acquire+0x6809/0x7d80
[ 1556.852486][T27439]  ? lockdep_lock+0x230/0x230
[ 1556.857175][T27439]  ? verify_lock_unused+0x140/0x140
[ 1556.862373][T27439]  ? add_lock_to_list+0x191/0x280
[ 1556.867396][T27439]  ? verify_lock_unused+0x140/0x140
[ 1556.872596][T27439]  ? __lock_acquire+0x357f/0x7d80
[ 1556.877628][T27439]  lock_acquire+0x19e/0x420
[ 1556.882128][T27439]  ? __dev_queue_xmit+0xb01/0x3640
[ 1556.887248][T27439]  ? read_lock_is_recursive+0x20/0x20
[ 1556.892622][T27439]  ? rcu_lockdep_current_cpu_online+0x37/0x120
[ 1556.898785][T27439]  ? rcu_read_lock_bh_held+0x7a/0x100
[ 1556.904159][T27439]  ? rcu_read_lock_held+0x40/0x40
[ 1556.909184][T27439]  _raw_spin_lock+0x2e/0x40
[ 1556.913691][T27439]  ? __dev_queue_xmit+0xb01/0x3640
[ 1556.918808][T27439]  __dev_queue_xmit+0xb01/0x3640
[ 1556.923771][T27439]  ? __dev_queue_xmit+0x275/0x3640
[ 1556.928891][T27439]  ? __lock_acquire+0x7d80/0x7d80
[ 1556.933916][T27439]  ? lock_chain_count+0x20/0x20
[ 1556.938764][T27439]  ? __kernel_text_address+0xd/0x30
[ 1556.943968][T27439]  ? netdev_core_pick_tx+0x370/0x370
[ 1556.949258][T27439]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1556.955149][T27439]  ? lockdep_hardirqs_on+0x98/0x150
[ 1556.960350][T27439]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1556.966241][T27439]  ? _raw_spin_unlock+0x40/0x40
[ 1556.971092][T27439]  ? stack_trace_save+0xaa/0x100
[ 1556.976029][T27439]  ? stack_trace_snprint+0xf0/0xf0
[ 1556.981143][T27439]  ? tcf_action_inc_overlimit_qstats+0x120/0x120
[ 1556.987549][T27439]  sch_frag_xmit_hook+0x2a8/0x11d0
[ 1556.992681][T27439]  ? kasan_set_track+0x4e/0x70
[ 1556.997447][T27439]  ? __kasan_slab_alloc+0x6c/0x80
[ 1557.002469][T27439]  ? slab_post_alloc_hook+0x6a/0x4d0
[ 1557.007759][T27439]  ? skb_clone+0x1eb/0x370
[ 1557.012174][T27439]  ? tcf_mirred_act+0x589/0x1350
[ 1557.017112][T27439]  ? tcf_action_exec+0x1a9/0x5d0
[ 1557.022047][T27439]  ? basic_classify+0x1b2/0x2d0
[ 1557.026895][T27439]  ? tcf_classify+0x421/0xfc0
[ 1557.031567][T27439]  ? qfq_enqueue+0x320/0x12e0
[ 1557.036236][T27439]  ? dev_qdisc_enqueue+0x48/0x220
[ 1557.041259][T27439]  ? __dev_queue_xmit+0xcd4/0x3640
[ 1557.046393][T27439]  ? packet_sendmsg+0x38d9/0x4a30
[ 1557.051474][T27439]  ? ____sys_sendmsg+0x61b/0x980
[ 1557.056413][T27439]  ? ___sys_sendmsg+0x2a6/0x360
[ 1557.061269][T27439]  ? __se_sys_sendmsg+0x1d0/0x2c0
[ 1557.066292][T27439]  ? mq_dump_class_stats+0x450/0x450
[ 1557.071594][T27439]  ? __copy_skb_header+0xa3/0x4a0
[ 1557.076618][T27439]  ? __asan_memcpy+0x40/0x70
[ 1557.081212][T27439]  ? __skb_clone+0x5c/0x6c0
[ 1557.085732][T27439]  ? __skb_clone+0x446/0x6c0
[ 1557.090332][T27439]  ? skb_clone+0x21f/0x370
[ 1557.094748][T27439]  ? tcf_mirred_act+0x570/0x1350
[ 1557.099690][T27439]  tcf_mirred_act+0xbd6/0x1350
[ 1557.104462][T27439]  tcf_action_exec+0x1a9/0x5d0
[ 1557.109235][T27439]  basic_classify+0x1b2/0x2d0
[ 1557.113912][T27439]  tcf_classify+0x421/0xfc0
[ 1557.118594][T27439]  qfq_enqueue+0x320/0x12e0
[ 1557.123140][T27439]  ? sch_tree_lock+0x1b0/0x1b0
[ 1557.127900][T27439]  ? do_raw_spin_lock+0x11f/0x2b0
[ 1557.132927][T27439]  ? __rwlock_init+0x150/0x150
[ 1557.137692][T27439]  dev_qdisc_enqueue+0x48/0x220
[ 1557.142560][T27439]  ? __dev_queue_xmit+0xb88/0x3640
[ 1557.147676][T27439]  __dev_queue_xmit+0xcd4/0x3640
[ 1557.152618][T27439]  ? __dev_queue_xmit+0x275/0x3640
[ 1557.157735][T27439]  ? skb_partial_csum_set+0xf2/0x350
[ 1557.163025][T27439]  ? netdev_core_pick_tx+0x370/0x370
[ 1557.168312][T27439]  ? virtio_net_hdr_to_skb+0xcd8/0x1470
[ 1557.173867][T27439]  ? packet_extra_vlan_len_allowed+0x200/0x200
[ 1557.180022][T27439]  ? packet_xmit+0x66/0x340
[ 1557.184518][T27439]  packet_sendmsg+0x38d9/0x4a30
[ 1557.189368][T27439]  ? aa_sk_perm+0x970/0x970
[ 1557.193885][T27439]  ? __might_sleep+0xe0/0xe0
[ 1557.198476][T27439]  ? verify_lock_unused+0x140/0x140
[ 1557.203673][T27439]  ? lockdep_hardirqs_on+0x98/0x150
[ 1557.208879][T27439]  ? aa_sk_perm+0x83c/0x970
[ 1557.213740][T27439]  ? packet_getsockopt+0xad0/0xad0
[ 1557.218852][T27439]  ? tomoyo_warn_oom+0xbe/0xf0
[ 1557.223637][T27439]  ? aa_sock_msg_perm+0x94/0x150
[ 1557.228579][T27439]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1557.234147][T27439]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1557.239435][T27439]  ? security_socket_sendmsg+0x80/0xa0
[ 1557.244905][T27439]  ? packet_getsockopt+0xad0/0xad0
[ 1557.250013][T27439]  ____sys_sendmsg+0x61b/0x980
[ 1557.254777][T27439]  ? __asan_memset+0x22/0x40
[ 1557.259371][T27439]  ? __sys_sendmsg_sock+0x30/0x30
[ 1557.264394][T27439]  ? __import_iovec+0x5f2/0x850
[ 1557.269285][T27439]  ? import_iovec+0x73/0xa0
[ 1557.273799][T27439]  ___sys_sendmsg+0x2a6/0x360
[ 1557.278491][T27439]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1557.283292][T27439]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1557.288160][T27439]  ? __x64_sys_sendmsg+0x80/0x80
[ 1557.293108][T27439]  ? lockdep_hardirqs_on+0x98/0x150
[ 1557.298322][T27439]  do_syscall_64+0x55/0xb0
[ 1557.302771][T27439]  ? clear_bhb_loop+0x40/0x90
[ 1557.307473][T27439]  ? clear_bhb_loop+0x40/0x90
[ 1557.312153][T27439]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1557.318051][T27439] RIP: 0033:0x7f93e759e0d9
[ 1557.322468][T27439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1557.342073][T27439] RSP: 002b:00007f93e855c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1557.350485][T27439] RAX: ffffffffffffffda RBX: 00007f93e7825fa0 RCX: 00007f93e759e0d9
[ 1557.358466][T27439] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 000000000000000b
[ 1557.366430][T27439] RBP: 00007f93e7635024 R08: 0000000000000000 R09: 0000000000000000
[ 1557.374393][T27439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1557.382355][T27439] R13: 00007f93e7826038 R14: 00007f93e7825fa0 R15: 00007ffd7056bff8
[ 1557.390333][T27439]  </TASK>