last executing test programs:

27m16.272547347s ago: executing program 32 (id=13):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x27)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001200)={r6, 0x3, 0x51, 0x401}, &(0x7f0000001240)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r6, 0x6}, &(0x7f0000000200)=0xc)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5})

13m26.889503336s ago: executing program 33 (id=2653):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
socket$inet(0xa, 0x801, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}, @nested={0x4, 0x9}]}, 0x1c}}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11m47.591934073s ago: executing program 34 (id=2929):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
sendmmsg$inet(r1, 0x0, 0x0, 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
open(0x0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x11, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x3c, 0x2, @thr={&(0x7f0000000300)="b9ce2413761aaf40575c1dd0620ad6d9cd6ae40aba3da043811d2282fed3c4af3e8c134cec82f51a20ebab19b68e531a47c2b8ab2fe4dbb6663d022b4b57e1c12eb2bbd5c0ec876cbf9bc454df652c49fb4bcb0005455308e7caff33ffd4bb79e1700b08846869254554bce59260bc01b2be8b2d81ccf00d83947ae507d3eb19162715", &(0x7f0000000000)="63cb8c6a3d59fe0fd9e5ff6da7"}}, &(0x7f00000000c0))
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00')
read$char_usb(r3, &(0x7f00000003c0)=""/164, 0xa4)
mq_notify(r3, &(0x7f0000000680)={0x0, 0x29, 0xc6eec834e578fde3, @thr={&(0x7f0000000600)="bdff2b8d8c9c6b9d4bd30b0919883f673e9e0dced66ee2d093", &(0x7f0000000640)="74e42a1815b379718d4ef3748f34c102f31fd3e450833bbe99d565"}})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newsa={0x1e8, 0x10, 0x100, 0x70bd27, 0x25dfdbfe, {{@in=@remote, @in6=@loopback, 0x4e20, 0x0, 0x1000, 0x3, 0x2, 0x20, 0x80}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x614, 0x56, 0x1, 0x8, 0x13, 0x6, 0xc869, 0x2}, {0x8, 0x400, 0x80000000, 0x8}, {0xfffffffd, 0xffffffff, 0xa494}, 0x70bd2c, 0x0, 0xa, 0x4, 0x9, 0xe2}, [@sa={0xe4, 0x6, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x80, 0x1d}, {@in6=@empty, 0x4d2, 0x62}, @in=@multicast1, {0x803, 0x1, 0x2, 0x6, 0x5573, 0xd120, 0x4, 0x6}, {0x2, 0xa, 0x8, 0x2}, {0x80000000, 0x7fff, 0x6}, 0x70bd25, 0x3504, 0xa, 0x2, 0x9, 0x22}}, @tfcpad={0x8, 0x16, 0x200001}, @policy_type={0xa, 0x10, {0x1}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x800}, 0x4000080)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
rename(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00')
write$binfmt_register(r4, &(0x7f0000000240)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x9, 0x3a, '/eq\x00'/13, 0x3a, '/dev/dri/card#\x00', 0x3a, './file0'}, 0x43)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
read$FUSE(r5, &(0x7f0000001c00)={0x2020}, 0x2020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@union={0x7, 0x5, 0x0, 0x5, 0x0, 0x4, [{0xd, 0x5, 0x6}, {0x0, 0x2, 0x441}, {0x10}, {0x1, 0x5, 0x7}, {0x5, 0x4, 0x6}]}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000740)=""/19, 0x64, 0x13, 0x0, 0x19e7db1c, 0x10000, @value=r5}, 0x28)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
close(0x3)

11m38.944223598s ago: executing program 35 (id=2949):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

10m13.246359058s ago: executing program 36 (id=3119):
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
setxattr$trusted_overlay_origin(0x0, &(0x7f0000000200), 0x0, 0x0, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)
chdir(&(0x7f0000000140)='./bus\x00')
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')

10m12.958765353s ago: executing program 37 (id=3121):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETSW2(r1, 0x5453, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
iopl(0x3)
r2 = syz_pidfd_open(0x0, 0x0)
pidfd_getfd(r2, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
mbind(&(0x7f000003a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x0, 0x2)

9m24.097450729s ago: executing program 38 (id=3183):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0)
r4 = socket$l2tp(0x2, 0x2, 0x73)
recvfrom(r4, &(0x7f0000000200)=""/84, 0x54, 0x1, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0))
r5 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @loopback}, 0x1c)
pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r7 = open(0x0, 0x85481, 0x104)
ioctl$BTRFS_IOC_DEFRAG(r7, 0x40081271, 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

8m47.696619595s ago: executing program 39 (id=3234):
r0 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf251b"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000)
ftruncate(r1, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

7m36.199982162s ago: executing program 40 (id=3346):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0)
ftruncate(r1, 0x8800000)
getpid()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4)

7m30.010064806s ago: executing program 41 (id=3360):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0xc2002, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x40000f63c)

6m39.416274919s ago: executing program 6 (id=3454):
r0 = io_uring_setup(0xb44, &(0x7f0000000080)={0x0, 0x410e, 0x2, 0x2, 0x1c6})
syz_io_uring_setup(0x25bf, &(0x7f0000000100)={0x0, 0x97b3, 0x20, 0x2, 0x189, 0x0, r0}, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)

6m38.162326159s ago: executing program 6 (id=3458):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x4, 0x14, 0x4249}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xf, 0x32, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce)

6m36.349014168s ago: executing program 6 (id=3465):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
chdir(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008040)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})

6m21.066606593s ago: executing program 42 (id=3465):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
chdir(0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4008040)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})

5m47.939406198s ago: executing program 43 (id=3540):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="8200000000000000f5000040"])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x2ffb, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0xd0, 0x290, 0xd0, 0x1c0, 0x360, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'wg1\x00', {0x5}}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x12}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}, {0x0, 0x7, 0x0, [0x1, 0x8, 0x5, 0x3bdc, 0x3, 0x7ffe, 0x5, 0x6, 0xfff9, 0x7, 0x6, 0xc97, 0x3f, 0xef00, 0x6, 0x4], 0x8}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000001c0)=0x2)
ioctl$PPPIOCSACTIVE(r9, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
r10 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000100)={0x90000011})
pwrite64(r9, &(0x7f00000000c0)="7906", 0x2, 0x9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
socket(0x15, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000039fdad9827cf2f2832634ba2750400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)

4m51.973316262s ago: executing program 44 (id=3676):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0f, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0)

4m43.631890925s ago: executing program 45 (id=3697):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000800)=""/102392, 0x18ff8)
mq_unlink(0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101002)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')

4m0.138618952s ago: executing program 46 (id=3762):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)

3m43.897244649s ago: executing program 9 (id=3821):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010027bd7000000000", @ANYRES32=0x0, @ANYBLOB="0d73040000560f5dbc0057b32d7192090080cd69d96d4d1a000000014e0c4d49a3f15bf499b6240601b7187bf86b00320a280748ef393a9f62a54f38"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xc880)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

3m41.998759478s ago: executing program 9 (id=3825):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x6, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, @flat=@handle={0x73682a85, 0xa, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

3m40.953909586s ago: executing program 9 (id=3827):
r0 = io_uring_setup(0xb44, &(0x7f0000000080)={0x0, 0x410e, 0x2, 0x2, 0x1c6})
syz_io_uring_setup(0x25bf, &(0x7f0000000100)={0x0, 0x97b3, 0x20, 0x2, 0x189, 0x0, r0}, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40})
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)

3m39.34093789s ago: executing program 9 (id=3831):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20044085}, 0x4044000)

3m38.257748323s ago: executing program 9 (id=3834):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010027bd7000000000", @ANYRES32=0x0, @ANYBLOB="0d73040000560f5dbc0057b32d7192090080cd69d96d4d1a000000014e0c4d49a3f15bf499b6240601b7187bf86b00320a280748ef393a9f62a54f38b544"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xc880)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)

3m36.037385705s ago: executing program 9 (id=3837):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x4, &(0x7f0000000100)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b480)=""/102400, 0x19000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = userfaultfd(0x801)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x202400, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r3 = syz_open_pts(r2, 0x141601)
fcntl$setstatus(r3, 0x4, 0x102800)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

3m20.805045916s ago: executing program 47 (id=3837):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x4, &(0x7f0000000100)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b480)=""/102400, 0x19000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = userfaultfd(0x801)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x202400, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r3 = syz_open_pts(r2, 0x141601)
fcntl$setstatus(r3, 0x4, 0x102800)
write(r3, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})

2m41.300480464s ago: executing program 6 (id=3872):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="01002cbd7000440000000500000008000900020000000c001600fbffffffffffffff060001000500000008000b000200000005001404fe00000008000c"], 0x48}}, 0x0)

2m40.427287477s ago: executing program 6 (id=3962):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400)
syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0})

2m38.713491113s ago: executing program 6 (id=3969):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x4, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b480)=""/102400, 0x19000)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r1 = syz_open_pts(0xffffffffffffffff, 0x141601)
write(r1, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20048000)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
syz_emit_vhci(&(0x7f0000002340)=ANY=[@ANYBLOB], 0x7)

2m34.093421787s ago: executing program 0 (id=3984):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2m33.117121683s ago: executing program 0 (id=3987):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044085}, 0x4044000)

2m32.303614663s ago: executing program 0 (id=3989):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0)
creat(&(0x7f0000000240)='./file0/bus\x00', 0x0)
acct(&(0x7f0000000100)='./file0/bus\x00')
chroot(&(0x7f0000000040)='./file0\x00')
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

2m31.001461834s ago: executing program 0 (id=3993):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400)
syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'/18], 0x0, 0x0, 0x0, 0x0})

2m29.810547324s ago: executing program 0 (id=3997):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/242, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/60, 0xeeee0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2m28.974176157s ago: executing program 0 (id=4001):
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@any, 0x7f}, 0xfffffffffffffff8, 0x64, 0x1, 0x5, 0xe04000, 0x8, 0x9, 0x3})
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4895)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2$watch_queue(0x0, 0x80)
readlinkat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0)

2m22.982530542s ago: executing program 48 (id=3969):
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x4, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b480)=""/102400, 0x19000)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r1 = syz_open_pts(0xffffffffffffffff, 0x141601)
write(r1, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000040)=0x13, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20048000)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
syz_emit_vhci(&(0x7f0000002340)=ANY=[@ANYBLOB], 0x7)

2m13.68482048s ago: executing program 49 (id=4001):
socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, &(0x7f00000000c0)={{@any, 0x7f}, 0xfffffffffffffff8, 0x64, 0x1, 0x5, 0xe04000, 0x8, 0x9, 0x3})
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4895)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2$watch_queue(0x0, 0x80)
readlinkat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0)

2m5.395152342s ago: executing program 3 (id=4039):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000029c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x1, 0x101})

2m4.291417661s ago: executing program 3 (id=4042):
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)

2m3.053039418s ago: executing program 3 (id=4045):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, &(0x7f0000000680)=""/4096, 0x0, 0x0, 0x2}, 0x38)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

2m1.760453433s ago: executing program 3 (id=4047):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000be11f3ec858ac8ee00000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000008a78ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006)
r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x1ff, 0x20000038, 0x2004, 0x8, 0x0, 0x8, 0x0, 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

1m56.238770916s ago: executing program 3 (id=4050):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000029c0))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x1, 0x101})

1m55.198485188s ago: executing program 3 (id=4052):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x4, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b480)=""/102400, 0x19000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
userfaultfd(0x801)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r2 = syz_open_pts(r1, 0x141601)
fcntl$setstatus(r2, 0x4, 0x102800)

1m41.262133068s ago: executing program 1 (id=4065):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400)
syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'/31], 0x0, 0x0, 0x0, 0x0})

1m40.208818265s ago: executing program 1 (id=4067):
r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0)

1m39.919023429s ago: executing program 50 (id=4052):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x4, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b480)=""/102400, 0x19000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
userfaultfd(0x801)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"})
r2 = syz_open_pts(r1, 0x141601)
fcntl$setstatus(r2, 0x4, 0x102800)

1m38.8414062s ago: executing program 1 (id=4071):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x22, 0x0, 0x0, @rand_addr=0x64010101}}}}}, 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f08", 0xd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)

1m37.956893121s ago: executing program 1 (id=4073):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x6, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, @flat=@handle={0x73682a85, 0xa, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

1m37.162142613s ago: executing program 1 (id=4074):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0)

1m36.161911237s ago: executing program 1 (id=4077):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})

1m20.148239943s ago: executing program 51 (id=4077):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x1, 0x3, 0xfffffffe, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x6, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})

51.210635713s ago: executing program 5 (id=4149):
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

50.460514875s ago: executing program 5 (id=4151):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000400)="5aee41", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0)

49.553959867s ago: executing program 5 (id=4154):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(0xffffffffffffffff)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

48.393911053s ago: executing program 5 (id=4156):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000be11f3ec858ac8ee00000000000008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r3, @ANYBLOB="000000008a78ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[], 0x10)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20)
close(r6)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r7, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x1ff, 0x20000038, 0x2004, 0x8, 0x0, 0x8, 0x0, 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)

43.633769937s ago: executing program 5 (id=4163):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000400)="5aee41", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0)

42.774858029s ago: executing program 5 (id=4166):
socket$netlink(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @remote, 0x46}, 0x1c)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

27.414380726s ago: executing program 52 (id=4166):
socket$netlink(0x10, 0x3, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @remote, 0x46}, 0x1c)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

16.8835057s ago: executing program 7 (id=4224):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f00000000c0)={0x20, 0x23, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

12.912181621s ago: executing program 7 (id=4232):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

11.287879065s ago: executing program 7 (id=4238):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = fcntl$getown(r2, 0x9)
sched_getscheduler(r3)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
socket$inet6(0xa, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

9.145030008s ago: executing program 2 (id=4243):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f00000000c0)={0x20, 0x23, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

7.038920052s ago: executing program 7 (id=4248):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x400, 0x1, 0x0, 0x0, @irqchip={0x2, 0x6512}}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)

6.776416234s ago: executing program 8 (id=4249):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
connect$llc(r1, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

6.124266522s ago: executing program 8 (id=4251):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r4, 0x89f3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004041}, 0x4000080)
setitimer(0x1, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r9, 0x5)
close(r9)
r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r10, 0x2)

6.059086542s ago: executing program 7 (id=4252):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013", @ANYRES8=0x0, @ANYRES32=r0], 0x60}}, 0x0)

5.448122855s ago: executing program 2 (id=4253):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xcccc8002, 0x2000, &(0x7f0000000000/0x2000)=nil})

4.987239408s ago: executing program 7 (id=4254):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f"], 0x54}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}})
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

4.634980352s ago: executing program 4 (id=4255):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[])

4.495898795s ago: executing program 8 (id=4256):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.396445355s ago: executing program 2 (id=4257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)

3.806650673s ago: executing program 2 (id=4258):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x4)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, r0, 0x0, 0x46)

3.374574707s ago: executing program 2 (id=4259):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

3.24204145s ago: executing program 4 (id=4260):
r0 = socket$netlink(0x10, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.675096067s ago: executing program 4 (id=4261):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x400, 0x1, 0x0, 0x0, @irqchip={0x2, 0x6512}}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)

2.646868828s ago: executing program 2 (id=4262):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201"], 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f00000000c0)={0x20, 0x23, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

2.230936843s ago: executing program 4 (id=4263):
r0 = socket$netlink(0x10, 0x3, 0xb)
getsockopt$netlink(r0, 0x10e, 0x2, 0x0, &(0x7f0000000380))

2.048779648s ago: executing program 8 (id=4264):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
epoll_create1(0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0)

1.860118958s ago: executing program 4 (id=4265):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, 0x0)
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r5, 0x89f3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004041}, 0x4000080)
setitimer(0x1, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r10, 0x5)
close(r10)
r11 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r11, 0x2)

546.640129ms ago: executing program 8 (id=4266):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)

233.102273ms ago: executing program 4 (id=4267):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)

0s ago: executing program 8 (id=4268):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x4)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, r0, 0x0, 0x46)

kernel console output (not intermixed with test programs):

entered blocking state
[ 1621.810003][T18191] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1621.822694][T18191] bridge_slave_1: entered allmulticast mode
[ 1621.831699][T18191] bridge_slave_1: entered promiscuous mode
[ 1622.457667][T18191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1622.568332][T18191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1622.726097][T12343] Bluetooth: hci2: command tx timeout
[ 1622.812132][T18233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3719'.
[ 1623.032245][T18222] fido_id[18222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1623.146101][T18191] team0: Port device team_slave_0 added
[ 1623.240972][T18191] team0: Port device team_slave_1 added
[ 1623.803057][T18191] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1623.810965][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1623.837706][T18191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1624.142440][T18191] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1624.149701][T18191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1624.179854][T18191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1624.805488][T12343] Bluetooth: hci2: command tx timeout
[ 1625.003639][T18191] hsr_slave_0: entered promiscuous mode
[ 1625.012607][T18191] hsr_slave_1: entered promiscuous mode
[ 1625.021016][T18191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1625.029724][T18191] Cannot create hsr debugfs directory
[ 1625.045062][ T8522] usb 4-1: new low-speed USB device number 56 using dummy_hcd
[ 1625.106967][T18244] bridge_slave_0: left allmulticast mode
[ 1625.112837][T18244] bridge_slave_0: left promiscuous mode
[ 1625.119625][T18244] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1625.392922][ T8522] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1625.405170][ T8522] usb 4-1: config 0 has no interface number 0
[ 1625.411463][ T8522] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1625.424011][ T8522] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1625.435158][ T8522] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1625.444742][ T8522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1625.486794][T18244] bridge_slave_1: left allmulticast mode
[ 1625.492766][T18244] bridge_slave_1: left promiscuous mode
[ 1625.499645][T18244] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1625.696864][ T8522] usb 4-1: config 0 descriptor??
[ 1625.703820][T18242] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1625.788668][T18244] bond0: (slave bond_slave_0): Releasing backup interface
[ 1625.906947][ T8522] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1625.967457][T18244] bond0: (slave bond_slave_1): Releasing backup interface
[ 1626.024786][ T8522] usb 4-1: USB disconnect, device number 56
[ 1626.179025][T18244] team0: Port device team_slave_0 removed
[ 1626.348284][T18244] team0: Port device team_slave_1 removed
[ 1626.358422][T18244] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1626.367075][T18244] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1626.416720][T18244] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1626.430359][T18244] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1627.093134][ T5794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1627.117026][ T5794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1627.163215][ T5794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1627.264988][ T5794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1627.361180][ T5794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1628.302782][ T8522] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1628.467484][T18191] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1628.537311][T18191] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1628.560499][T18191] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1628.569064][ T8522] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1628.582533][ T8522] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1628.592454][ T8522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1628.606881][T18268] binder: 18267:18268 ioctl c0306201 80000240 returned -11
[ 1628.743360][T18191] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1628.767438][ T8522] usb 4-1: config 0 descriptor??
[ 1629.321098][ T8522] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor
[ 1629.439071][ T8522] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.003E/input/input42
[ 1629.462651][T12343] Bluetooth: hci6: command tx timeout
[ 1629.867818][ T8522] keytouch 0003:0926:3333.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[ 1630.036823][ T8522] usb 4-1: USB disconnect, device number 57
[ 1630.621543][T18261] chnl_net:caif_netlink_parms(): no params data found
[ 1630.912551][T18285] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3729'.
[ 1631.159488][T18191] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1631.506333][T18191] 8021q: adding VLAN 0 to HW filter on device team0
[ 1631.524626][T12343] Bluetooth: hci6: command tx timeout
[ 1631.595801][T15401] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1631.603289][T15401] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1631.875947][T15532] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1632.031023][T15401] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1632.038678][T15401] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1632.104929][T15532] usb 5-1: Using ep0 maxpacket: 8
[ 1632.203570][T15532] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.214595][T15532] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1632.227987][T15532] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1632.234967][T15532] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1632.244239][T15532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1632.319468][T18191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1632.335183][T18191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1632.403225][T18280] fido_id[18280]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1632.566875][T15532] usb 5-1: config 0 descriptor??
[ 1632.653770][T15532] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1633.092183][T18261] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1633.100035][T18261] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1633.107736][T18261] bridge_slave_0: entered allmulticast mode
[ 1633.116485][T18261] bridge_slave_0: entered promiscuous mode
[ 1633.220350][T18261] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1633.229376][T18261] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1633.241774][T18261] bridge_slave_1: entered allmulticast mode
[ 1633.250833][T18261] bridge_slave_1: entered promiscuous mode
[ 1633.610629][T12343] Bluetooth: hci6: command tx timeout
[ 1633.752101][T18261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1633.932833][T18261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1633.942716][T15532] usb 8-1: new low-speed USB device number 11 using dummy_hcd
[ 1634.116968][T15532] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[ 1634.125805][T15532] usb 8-1: config 0 has no interface number 0
[ 1634.132087][T15532] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1634.143464][T15532] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1634.154657][T15532] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1634.163877][T15532] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1634.286484][T15532] usb 8-1: config 0 descriptor??
[ 1634.329542][T18302] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1634.357119][T18261] team0: Port device team_slave_0 added
[ 1634.380012][T18261] team0: Port device team_slave_1 added
[ 1634.460862][T15532] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1634.627906][T15532] usb 8-1: USB disconnect, device number 11
[ 1634.910675][T18261] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1634.918664][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1634.948509][T18261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1634.988655][T15532] usb 5-1: USB disconnect, device number 46
[ 1635.294076][T18261] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1635.302068][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1635.328986][T18261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1635.689396][T12343] Bluetooth: hci6: command tx timeout
[ 1636.452154][T18313] bridge_slave_0: left allmulticast mode
[ 1636.463915][T18313] bridge_slave_0: left promiscuous mode
[ 1636.471190][T18313] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1636.730261][T18318] binder: 18317:18318 ioctl c0306201 80000240 returned -11
[ 1636.741941][T18313] bridge_slave_1: left allmulticast mode
[ 1636.747967][T18313] bridge_slave_1: left promiscuous mode
[ 1636.754520][T18313] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1636.997914][T18313] bond0: (slave bond_slave_0): Releasing backup interface
[ 1637.055522][T18313] bond0: (slave bond_slave_1): Releasing backup interface
[ 1637.197491][T18313] team0: Port device team_slave_0 removed
[ 1637.306445][T18313] team0: Port device team_slave_1 removed
[ 1637.316102][T18313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1637.323798][T18313] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1637.476841][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1637.486299][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1637.572700][T18313] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1637.580740][T18313] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1637.941541][T18261] hsr_slave_0: entered promiscuous mode
[ 1637.950611][T18261] hsr_slave_1: entered promiscuous mode
[ 1637.958743][T18261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1637.966528][T18261] Cannot create hsr debugfs directory
[ 1638.127431][T18191] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1638.425617][T18330] fuse: Bad value for 'fd'
[ 1638.944025][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3740'.
[ 1639.795576][ T8522] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1640.125077][ T8522] usb 5-1: Using ep0 maxpacket: 8
[ 1640.175520][ T8522] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1640.186459][ T8522] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1640.199621][ T8522] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1640.206485][ T8522] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1640.215757][ T8522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.515708][ T8522] usb 5-1: config 0 descriptor??
[ 1640.610952][ T8522] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1641.570430][ T4446] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1641.634109][ T8522] usb 4-1: new low-speed USB device number 58 using dummy_hcd
[ 1641.866208][ T8522] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1641.875349][ T8522] usb 4-1: config 0 has no interface number 0
[ 1641.882330][ T8522] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1641.897800][ T8522] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1641.910226][ T8522] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1641.920296][ T8522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1641.939761][ T4446] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1642.001930][T18261] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1642.014142][ T8522] usb 4-1: config 0 descriptor??
[ 1642.022537][T18350] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1642.069032][ T8522] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1642.258965][ T8522] usb 4-1: USB disconnect, device number 58
[ 1642.259111][    C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1642.398865][ T4446] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1642.558297][T18261] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1642.703618][ T4446] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1642.797561][ T8522] usb 5-1: USB disconnect, device number 47
[ 1642.940572][T18261] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1643.066054][T18261] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1643.635396][T18367] binder: 18366:18367 ioctl c0306201 80000240 returned -11
[ 1643.645351][T18191] veth0_vlan: entered promiscuous mode
[ 1643.670986][ T4446] bridge_slave_1: left allmulticast mode
[ 1643.677498][ T4446] bridge_slave_1: left promiscuous mode
[ 1643.684110][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1643.869788][ T4446] bridge_slave_0: left allmulticast mode
[ 1643.875971][ T4446] bridge_slave_0: left promiscuous mode
[ 1643.882475][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1644.795953][ T4446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1644.880068][ T4446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1644.926248][ T4446] bond0 (unregistering): Released all slaves
[ 1645.083338][T18379] bridge_slave_0: left allmulticast mode
[ 1645.089345][T18379] bridge_slave_0: left promiscuous mode
[ 1645.095769][T18379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1645.280259][T18379] bridge_slave_1: left allmulticast mode
[ 1645.287116][T18379] bridge_slave_1: left promiscuous mode
[ 1645.293486][T18379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1645.541778][T18379] bond0: (slave bond_slave_0): Releasing backup interface
[ 1645.621491][T18384] fuse: Bad value for 'fd'
[ 1645.727538][T18379] bond0: (slave bond_slave_1): Releasing backup interface
[ 1645.846582][T18379] team0: Port device team_slave_0 removed
[ 1645.943445][T18379] team0: Port device team_slave_1 removed
[ 1645.953032][T18379] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1645.963634][T18379] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1646.110104][T18379] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1646.118892][T18379] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1646.155847][T18389] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3751'.
[ 1646.444620][T18191] veth1_vlan: entered promiscuous mode
[ 1647.274622][ T4446] hsr_slave_0: left promiscuous mode
[ 1647.308376][ T4446] hsr_slave_1: left promiscuous mode
[ 1647.322657][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1647.330645][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1647.439105][ T4446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1647.447170][ T4446] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1647.569638][ T4446] veth1_macvtap: left promiscuous mode
[ 1647.575501][ T4446] veth0_macvtap: left promiscuous mode
[ 1647.581384][ T4446] veth1_vlan: left promiscuous mode
[ 1647.587116][ T4446] veth0_vlan: left promiscuous mode
[ 1647.634840][T15532] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1647.824762][T15532] usb 4-1: Using ep0 maxpacket: 8
[ 1647.859377][T15532] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1647.870118][T15532] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1647.883953][T15532] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1647.891126][T15532] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1647.900837][T15532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.915640][T16325] usb 5-1: new low-speed USB device number 48 using dummy_hcd
[ 1648.037327][T15532] usb 4-1: config 0 descriptor??
[ 1648.063704][T15532] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1648.165869][T16325] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1648.174166][T16325] usb 5-1: config 0 has no interface number 0
[ 1648.181002][T16325] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1648.192512][T16325] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1648.203704][T16325] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1648.213367][T16325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1648.376569][ T4446] team0 (unregistering): Port device team_slave_1 removed
[ 1648.398664][T16325] usb 5-1: config 0 descriptor??
[ 1648.407147][T18399] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1648.521646][T16325] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1648.555681][ T4446] team0 (unregistering): Port device team_slave_0 removed
[ 1648.657439][T16325] usb 5-1: USB disconnect, device number 48
[ 1649.441625][T18191] veth0_macvtap: entered promiscuous mode
[ 1649.544982][T18191] veth1_macvtap: entered promiscuous mode
[ 1649.689052][   T54] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1649.849580][   T54] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1649.993013][   T54] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.058887][T18410] binder: 18408:18410 ioctl 4018620d 0 returned -22
[ 1650.136685][   T54] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.215792][T18261] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1650.231193][T18191] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1650.269045][T18410] binder: 18408:18410 ioctl c0306201 80000240 returned -11
[ 1650.334666][T18191] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1650.455715][T18261] 8021q: adding VLAN 0 to HW filter on device team0
[ 1650.472877][T18191] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.483237][T18191] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.497183][T18191] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.507651][T18191] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.575986][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1650.583586][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1650.778010][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1650.785579][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1650.875403][ T5847] usb 4-1: USB disconnect, device number 59
[ 1650.901578][   T54] bridge_slave_1: left allmulticast mode
[ 1650.907567][   T54] bridge_slave_1: left promiscuous mode
[ 1650.914185][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1651.005870][   T54] bridge_slave_0: left allmulticast mode
[ 1651.011776][   T54] bridge_slave_0: left promiscuous mode
[ 1651.018674][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1651.408622][T18421] fuse: Bad value for 'fd'
[ 1651.535316][T18425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3761'.
[ 1652.002398][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1652.066215][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1652.136973][   T54] bond0 (unregistering): Released all slaves
[ 1652.718984][   T54] IPVS: stopping backup sync thread 16627 ...
[ 1653.507834][   T54] hsr_slave_0: left promiscuous mode
[ 1653.543545][   T54] hsr_slave_1: left promiscuous mode
[ 1653.552668][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1653.563665][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1653.606976][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1653.614861][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1653.661617][   T54] veth1_macvtap: left promiscuous mode
[ 1653.670591][   T54] veth0_macvtap: left promiscuous mode
[ 1653.676662][   T54] veth1_vlan: left promiscuous mode
[ 1653.682250][   T54] veth0_vlan: left promiscuous mode
[ 1654.905172][ T5794] Bluetooth: hci5: command 0x0406 tx timeout
[ 1654.974765][ T9900] usb 5-1: new low-speed USB device number 49 using dummy_hcd
[ 1655.082226][   T54] team0 (unregistering): Port device team_slave_1 removed
[ 1655.112292][   T54] team0 (unregistering): Port device team_slave_0 removed
[ 1655.236316][ T9900] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1655.245006][ T9900] usb 5-1: config 0 has no interface number 0
[ 1655.251330][ T9900] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1655.263132][ T9900] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1655.274375][ T9900] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1655.283743][ T9900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1655.421784][ T9900] usb 5-1: config 0 descriptor??
[ 1655.446210][T18457] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1655.613376][ T9900] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1655.800747][    C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1655.810239][T15532] usb 5-1: USB disconnect, device number 49
[ 1656.596171][T18261] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1657.153295][T18261] veth0_vlan: entered promiscuous mode
[ 1657.312797][T18261] veth1_vlan: entered promiscuous mode
[ 1657.435282][T18474] binder: 18471:18474 ioctl 4018620d 0 returned -22
[ 1657.462269][T18474] binder: 18471:18474 ioctl c0306201 80000240 returned -11
[ 1657.690767][T18261] veth0_macvtap: entered promiscuous mode
[ 1657.785044][T18261] veth1_macvtap: entered promiscuous mode
[ 1657.797966][ T9900] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1657.985103][ T9900] usb 4-1: Using ep0 maxpacket: 8
[ 1658.053262][ T9900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1658.063862][ T9900] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1658.079518][ T9900] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1658.087211][ T9900] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1658.096602][ T9900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.138836][T18261] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1658.236260][T18261] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1658.275543][ T9900] usb 4-1: config 0 descriptor??
[ 1658.331815][ T9900] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1658.354064][T18261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1658.363423][T18261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1658.375981][T18261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1658.386055][T18261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1658.435368][T18484] fuse: Bad value for 'fd'
[ 1659.107864][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3771'.
[ 1660.815786][T16325] usb 4-1: USB disconnect, device number 60
[ 1661.464916][T15401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1661.473336][T15401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1661.843069][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1661.851407][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1664.486260][ T9900] usb 5-1: new low-speed USB device number 50 using dummy_hcd
[ 1664.700613][ T9900] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1664.709576][ T9900] usb 5-1: config 0 has no interface number 0
[ 1664.716253][ T9900] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1664.731511][ T9900] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1664.744061][ T9900] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1664.753498][ T9900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1664.867452][ T9900] usb 5-1: config 0 descriptor??
[ 1664.875762][T18542] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1664.996465][ T9900] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1665.162965][T16325] usb 5-1: USB disconnect, device number 50
[ 1665.420731][T18556] binder: 18553:18556 ioctl 4018620d 0 returned -22
[ 1665.528235][T18556] binder: 18553:18556 ioctl c0306201 80000240 returned -11
[ 1666.263637][T15329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1666.272306][T15329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1666.450659][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3780'.
[ 1666.519225][ T3742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1666.528041][ T3742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1666.988564][T18567] overlayfs: missing 'lowerdir'
[ 1667.835056][T16325] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1668.035306][T16325] usb 4-1: Using ep0 maxpacket: 8
[ 1668.070657][T16325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1668.081525][T16325] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1668.094806][T16325] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1668.105496][T16325] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1668.115697][T16325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1668.377412][T16325] usb 4-1: config 0 descriptor??
[ 1668.452565][T16325] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1668.477685][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1668.488230][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1668.502955][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1668.564946][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1668.586951][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1670.344845][T16325] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[ 1670.482512][T18610] binder: BINDER_SET_CONTEXT_MGR already set
[ 1670.490485][T18610] binder: 18609:18610 ioctl 4018620d 80000040 returned -16
[ 1670.512036][T16325] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1670.520922][T16325] usb 2-1: config 0 has no interface number 0
[ 1670.527917][T16325] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1670.539635][T16325] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1670.551128][T16325] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1670.564787][T16325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1670.592567][ T9900] usb 4-1: USB disconnect, device number 61
[ 1670.610062][T18610] binder: 18609:18610 ioctl c0306201 80000240 returned -11
[ 1670.675062][T12343] Bluetooth: hci1: command tx timeout
[ 1670.810586][T18579] chnl_net:caif_netlink_parms(): no params data found
[ 1670.911387][T16325] usb 2-1: config 0 descriptor??
[ 1670.924063][T18605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1671.048313][T16325] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1671.219385][ T5876] usb 2-1: USB disconnect, device number 45
[ 1671.648366][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3792'.
[ 1672.726881][T12343] Bluetooth: hci1: command tx timeout
[ 1672.975761][T18628] overlayfs: missing 'lowerdir'
[ 1673.071877][T18579] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1673.079586][T18579] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1673.087595][T18579] bridge_slave_0: entered allmulticast mode
[ 1673.097202][T18579] bridge_slave_0: entered promiscuous mode
[ 1673.268712][T18579] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1673.276587][T18579] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1673.290926][T18579] bridge_slave_1: entered allmulticast mode
[ 1673.302355][T18579] bridge_slave_1: entered promiscuous mode
[ 1673.705309][T18579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1673.850344][T18579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1674.469618][T18579] team0: Port device team_slave_0 added
[ 1674.593264][T18579] team0: Port device team_slave_1 added
[ 1674.805153][T12343] Bluetooth: hci1: command tx timeout
[ 1675.090873][T18579] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1675.098250][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1675.125084][T18579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1675.346920][T18579] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1675.354202][T18579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1675.385411][T18579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1675.832974][T18654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1675.842265][T18654] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1675.868795][T18654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1675.878257][T18654] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1675.890443][T18657] binder: BINDER_SET_CONTEXT_MGR already set
[ 1675.896720][T18657] binder: 18656:18657 ioctl 4018620d 80000040 returned -16
[ 1675.995705][T18657] binder: 18656:18657 ioctl c0306201 80000240 returned -11
[ 1676.045037][T16325] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1676.315954][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3802'.
[ 1676.401456][T16325] usb 10-1: Using ep0 maxpacket: 8
[ 1676.462425][T16325] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1676.542842][T18579] hsr_slave_0: entered promiscuous mode
[ 1676.550908][T16325] usb 10-1: config 7 has an invalid interface number: 67 but max is 0
[ 1676.554613][T18579] hsr_slave_1: entered promiscuous mode
[ 1676.559538][T16325] usb 10-1: config 7 has no interface number 0
[ 1676.568189][T18579] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1676.579443][T18579] Cannot create hsr debugfs directory
[ 1676.673695][T16325] usb 10-1: string descriptor 0 read error: -22
[ 1676.680963][T16325] usb 10-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[ 1676.690978][T16325] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1676.895683][T12343] Bluetooth: hci1: command tx timeout
[ 1677.358443][T18654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1677.369027][T18654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1677.472837][ T5876] usb 10-1: USB disconnect, device number 2
[ 1677.984030][T18678] overlayfs: missing 'lowerdir'
[ 1679.527274][T18579] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1679.668605][T18579] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1679.866896][T18579] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1680.013781][T18579] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1680.680185][T15329] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1680.993394][T18708] binder: BINDER_SET_CONTEXT_MGR already set
[ 1681.000079][T18708] binder: 18707:18708 ioctl 4018620d 80000040 returned -16
[ 1681.122320][T18708] binder: 18707:18708 ioctl c0306201 80000240 returned -11
[ 1681.270492][T18712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'.
[ 1681.428008][T18714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3815'.
[ 1681.861055][T18579] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1682.148990][T18579] 8021q: adding VLAN 0 to HW filter on device team0
[ 1682.385552][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1682.393078][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1682.472796][T18724] overlayfs: missing 'lowerdir'
[ 1682.546714][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1682.554247][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1682.730670][ T5794] Bluetooth: hci4: command 0x1003 tx timeout
[ 1682.740565][T12343] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1685.015837][ T3606] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1685.289512][ T3606] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1685.495261][ T3606] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1685.711691][ T3606] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1685.741460][T18754] binder: 18752:18754 ioctl c0306201 0 returned -14
[ 1685.885396][T18754] binder: 18752:18754 ioctl c0306201 80000240 returned -11
[ 1686.231301][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3826'.
[ 1686.248309][T18579] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1686.684005][T18762] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3827'.
[ 1687.174821][ T3606] bond0 (unregistering): Released all slaves
[ 1687.226180][T18769] overlayfs: missing 'lowerdir'
[ 1688.067259][T18579] veth0_vlan: entered promiscuous mode
[ 1688.202836][ T3606] hsr_slave_0: left promiscuous mode
[ 1688.251571][ T3606] hsr_slave_1: left promiscuous mode
[ 1688.330510][ T3606] veth1_macvtap: left promiscuous mode
[ 1688.337302][ T3606] veth0_macvtap: left promiscuous mode
[ 1688.343349][ T3606] veth1_vlan: left promiscuous mode
[ 1688.349155][ T3606] veth0_vlan: left promiscuous mode
[ 1689.591994][ T9900] usb 4-1: new low-speed USB device number 62 using dummy_hcd
[ 1689.824809][ T9900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1689.833265][ T9900] usb 4-1: config 0 has no interface number 0
[ 1689.839722][ T9900] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1689.851224][ T9900] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1689.862329][ T9900] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1689.871861][ T9900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1690.020237][T18579] veth1_vlan: entered promiscuous mode
[ 1690.093868][ T9900] usb 4-1: config 0 descriptor??
[ 1690.187159][T18787] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1690.277455][ T9900] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1690.493429][    C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1690.503067][ T9900] usb 4-1: USB disconnect, device number 62
[ 1690.689401][T18579] veth0_macvtap: entered promiscuous mode
[ 1690.790682][T18579] veth1_macvtap: entered promiscuous mode
[ 1690.995396][T18579] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1691.070489][T18579] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1691.176628][T18579] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.188942][T18579] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.198291][T18579] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.207508][T18579] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1691.628934][T18807] binder: 18806:18807 ioctl c0306201 0 returned -14
[ 1691.692924][T18807] binder: 18806:18807 ioctl c0306201 80000240 returned -11
[ 1691.786998][T18811] PKCS7: Unknown OID: [5] (bad)
[ 1691.792006][T18811] PKCS7: Only support pkcs7_signedData type
[ 1692.594010][T18819] overlayfs: missing 'lowerdir'
[ 1693.379939][T18823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3840'.
[ 1696.234783][T12621] usb 4-1: new low-speed USB device number 63 using dummy_hcd
[ 1696.551412][T12621] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1696.559795][T12621] usb 4-1: config 0 has no interface number 0
[ 1696.566389][T12621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1696.580571][T12621] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1696.592644][T12621] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1696.602168][T12621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1696.698625][T18863] binder: 18861:18863 ioctl c0306201 0 returned -14
[ 1696.736985][T18863] binder: 18861:18863 ioctl c0306201 80000240 returned -11
[ 1696.759324][T12621] usb 4-1: config 0 descriptor??
[ 1696.768911][T18856] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1696.873959][T12621] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1697.010736][T12621] usb 4-1: USB disconnect, device number 63
[ 1697.735749][T18874] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1697.746701][T18874] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1698.542583][T18880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3852'.
[ 1698.934938][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1698.941538][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1699.104031][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1699.112931][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1699.561727][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1699.570818][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1700.403255][T18903] bridge_slave_0: left allmulticast mode
[ 1700.409205][T18903] bridge_slave_0: left promiscuous mode
[ 1700.415790][T18903] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1700.456360][T18903] bridge_slave_1: left allmulticast mode
[ 1700.467393][T18903] bridge_slave_1: left promiscuous mode
[ 1700.473767][T18903] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1700.750284][T18903] bond0: (slave bond_slave_0): Releasing backup interface
[ 1700.880900][T18903] bond0: (slave bond_slave_1): Releasing backup interface
[ 1701.000690][T18910] binder: 18909:18910 ioctl c0306201 80000240 returned -11
[ 1701.055916][T18903] team0: Port device team_slave_0 removed
[ 1701.167106][T18903] team0: Port device team_slave_1 removed
[ 1701.187814][T18903] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1701.195750][T18903] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1701.459281][T18903] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1701.468333][T18903] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1701.847037][T18919] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1701.856332][T18919] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1702.045200][T15532] usb 4-1: new low-speed USB device number 64 using dummy_hcd
[ 1702.250178][T15532] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1702.258750][T15532] usb 4-1: config 0 has no interface number 0
[ 1702.265347][T15532] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1702.276572][T15532] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1702.287612][T15532] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1702.297018][T15532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1702.526574][T15532] usb 4-1: config 0 descriptor??
[ 1702.533840][T18917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1702.655962][T15532] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1702.944533][T12621] usb 4-1: USB disconnect, device number 64
[ 1702.944826][    C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1704.355771][T15532] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1704.548436][T15532] usb 5-1: Using ep0 maxpacket: 16
[ 1704.612307][T15532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10
[ 1704.623967][T15532] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1704.637264][T15532] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[ 1704.647698][T15532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1704.779561][T15532] usb 5-1: config 0 descriptor??
[ 1705.352837][T15532] aquacomputer_d5next 0003:0C70:F010.003F: unknown main item tag 0x0
[ 1705.361653][T15532] aquacomputer_d5next 0003:0C70:F010.003F: unknown main item tag 0x0
[ 1705.370843][T15532] aquacomputer_d5next 0003:0C70:F010.003F: unknown main item tag 0x0
[ 1705.577919][T15532] aquacomputer_d5next 0003:0C70:F010.003F: hidraw0: USB HID v0.00 Device [HID 0c70:f010] on usb-dummy_hcd.4-1/input0
[ 1705.789509][T15532] usb 5-1: USB disconnect, device number 51
[ 1706.048164][T18945] binder: 18944:18945 ioctl c0306201 80000240 returned -11
[ 1706.573737][T18947] fido_id[18947]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1707.543803][T15532] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1707.762013][T15532] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1707.773668][T15532] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1707.783256][T15532] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1707.895921][T15532] usb 1-1: config 0 descriptor??
[ 1707.959330][T18954] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1707.968601][T18954] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1708.370713][T15532] keytouch 0003:0926:3333.0040: fixing up Keytouch IEC report descriptor
[ 1708.463073][T15532] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0040/input/input43
[ 1708.631746][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1708.642535][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1708.657495][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1708.686441][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1708.700836][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1708.977658][T15532] keytouch 0003:0926:3333.0040: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[ 1709.145558][T15532] usb 1-1: USB disconnect, device number 6
[ 1710.368696][T18965] fido_id[18965]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1710.797171][T18957] chnl_net:caif_netlink_parms(): no params data found
[ 1710.815786][T12343] Bluetooth: hci4: command tx timeout
[ 1710.927458][T12621] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[ 1711.153551][T12621] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1711.162302][T12621] usb 1-1: config 0 has no interface number 0
[ 1711.168959][T12621] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1711.180392][T12621] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1711.191527][T12621] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1711.200962][T12621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1711.247177][T12621] usb 1-1: config 0 descriptor??
[ 1711.255034][T18970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1711.332079][T12621] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1711.535126][T15532] usb 1-1: USB disconnect, device number 7
[ 1711.535162][    C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1712.812127][T18957] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1712.819924][T18957] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1712.828213][T18957] bridge_slave_0: entered allmulticast mode
[ 1712.837228][T18957] bridge_slave_0: entered promiscuous mode
[ 1712.915355][T12343] Bluetooth: hci4: command tx timeout
[ 1712.948424][T18957] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1712.961379][T18957] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1712.973498][T18957] bridge_slave_1: entered allmulticast mode
[ 1712.982238][T18957] bridge_slave_1: entered promiscuous mode
[ 1713.120759][T18957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1713.281419][T18957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1713.642220][T18986] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3884'.
[ 1713.680596][T18957] team0: Port device team_slave_0 added
[ 1713.899486][T18957] team0: Port device team_slave_1 added
[ 1714.349981][T18957] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1714.357857][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1714.384708][T18957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1714.769104][T18957] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1714.776367][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1714.807620][T18957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1714.990382][T12343] Bluetooth: hci4: command tx timeout
[ 1715.075411][T16325] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1715.251496][T16325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1715.263120][T16325] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1715.272479][T16325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1715.440082][T16325] usb 4-1: config 0 descriptor??
[ 1715.874959][T18957] hsr_slave_0: entered promiscuous mode
[ 1715.885129][T16325] keytouch 0003:0926:3333.0041: fixing up Keytouch IEC report descriptor
[ 1715.885717][T18957] hsr_slave_1: entered promiscuous mode
[ 1715.903288][T18957] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1715.911302][T18957] Cannot create hsr debugfs directory
[ 1715.981762][T16325] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0041/input/input44
[ 1716.156268][T12621] Process accounting resumed
[ 1716.374019][T16325] keytouch 0003:0926:3333.0041: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[ 1716.496445][T16325] usb 4-1: USB disconnect, device number 65
[ 1717.055776][T12343] Bluetooth: hci4: command tx timeout
[ 1717.507941][T19003] fido_id[19003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1717.705020][T12621] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1717.927712][T12621] usb 2-1: Using ep0 maxpacket: 8
[ 1717.983011][T12621] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1717.993205][T12621] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1718.000276][T12621] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1718.009684][T12621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1718.094783][ T9900] usb 4-1: new low-speed USB device number 66 using dummy_hcd
[ 1718.121388][T12621] usb 2-1: config 0 descriptor??
[ 1718.139725][T12621] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1718.272311][ T9900] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1718.285544][ T9900] usb 4-1: config 0 has no interface number 0
[ 1718.291891][ T9900] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1718.304985][ T9900] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1718.316248][ T9900] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1718.326274][ T9900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1718.534502][T19016] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3895'.
[ 1718.602958][ T9900] usb 4-1: config 0 descriptor??
[ 1718.610511][T19014] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1718.692746][ T9900] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1718.861122][ T9900] usb 4-1: USB disconnect, device number 66
[ 1719.892324][T18957] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1720.061598][T18957] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1720.150415][T18957] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1720.293489][T18957] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1720.800676][ T9900] usb 2-1: USB disconnect, device number 46
[ 1721.710200][ T5852] Process accounting resumed
[ 1722.645596][T12621] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1722.922074][T12621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1722.934658][T12621] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1722.945015][T12621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1723.003570][T18957] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1723.117509][T12621] usb 1-1: config 0 descriptor??
[ 1723.307102][T18957] 8021q: adding VLAN 0 to HW filter on device team0
[ 1723.531456][T14492] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1723.538904][T14492] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1723.740015][T14492] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1723.747596][T14492] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1723.799093][T12621] keytouch 0003:0926:3333.0042: fixing up Keytouch IEC report descriptor
[ 1724.039526][T12621] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0042/input/input45
[ 1724.236865][T19069] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3907'.
[ 1724.549827][T12621] keytouch 0003:0926:3333.0042: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[ 1724.716853][T12621] usb 1-1: USB disconnect, device number 8
[ 1725.902187][T19073] fido_id[19073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1726.045483][T16325] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1726.148885][ T4605] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1726.276978][T16325] usb 5-1: Using ep0 maxpacket: 8
[ 1726.326946][T16325] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1726.338388][T16325] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1726.345945][T16325] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1726.355869][T16325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1726.409277][ T4605] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1726.542732][T16325] usb 5-1: config 0 descriptor??
[ 1726.633882][T16325] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1726.659627][ T4605] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1726.865651][T19090] bridge_slave_0: left allmulticast mode
[ 1726.872483][T19090] bridge_slave_0: left promiscuous mode
[ 1726.886572][T19090] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1727.071317][T19090] bridge_slave_1: left allmulticast mode
[ 1727.079215][T19090] bridge_slave_1: left promiscuous mode
[ 1727.092336][T19090] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1727.171173][T19090] bond0: (slave bond_slave_0): Releasing backup interface
[ 1727.227816][T19090] bond0: (slave bond_slave_1): Releasing backup interface
[ 1727.303004][T19090] team0: Port device team_slave_0 removed
[ 1727.335874][T19090] team0: Port device team_slave_1 removed
[ 1727.347622][T19090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1727.355549][T19090] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1727.375452][T19090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1727.383281][T19090] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1727.532786][ T4605] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1727.894775][T18957] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1728.355461][ T4605] bridge_slave_1: left allmulticast mode
[ 1728.361471][ T4605] bridge_slave_1: left promiscuous mode
[ 1728.368237][ T4605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1728.529463][ T4605] bridge_slave_0: left allmulticast mode
[ 1728.536181][ T4605] bridge_slave_0: left promiscuous mode
[ 1728.542847][ T4605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1729.255908][T16325] usb 5-1: USB disconnect, device number 52
[ 1729.270311][ T4605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1729.358773][ T4605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1729.418079][ T4605] bond0 (unregistering): Released all slaves
[ 1729.838613][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3918'.
[ 1730.536583][ T4605] hsr_slave_0: left promiscuous mode
[ 1730.559463][T16325] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1730.570221][ T4605] hsr_slave_1: left promiscuous mode
[ 1730.631146][ T4605] veth1_macvtap: left promiscuous mode
[ 1730.637244][ T4605] veth0_macvtap: left promiscuous mode
[ 1730.643260][ T4605] veth1_vlan: left promiscuous mode
[ 1730.649012][ T4605] veth0_vlan: left promiscuous mode
[ 1730.895130][T16325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1730.906643][T16325] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1730.916078][T16325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1730.943187][T16325] usb 4-1: config 0 descriptor??
[ 1731.418932][T16325] keytouch 0003:0926:3333.0043: fixing up Keytouch IEC report descriptor
[ 1731.449116][T16325] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0043/input/input46
[ 1731.753742][ T4605] team0 (unregistering): Port device team_slave_1 removed
[ 1731.816975][T16325] keytouch 0003:0926:3333.0043: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[ 1731.874799][ T4605] team0 (unregistering): Port device team_slave_0 removed
[ 1731.920894][T16325] usb 4-1: USB disconnect, device number 67
[ 1732.332329][T19136] hub 1-0:1.0: USB hub found
[ 1732.342262][T19136] hub 1-0:1.0: 1 port detected
[ 1733.299011][T19138] fido_id[19138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1734.090368][ T9900] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1734.359604][ T9900] usb 2-1: Using ep0 maxpacket: 8
[ 1734.401514][ T9900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1734.413355][ T9900] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1734.424414][ T9900] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1734.431343][ T9900] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1734.440998][ T9900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1734.480778][T18957] veth0_vlan: entered promiscuous mode
[ 1734.585478][T18957] veth1_vlan: entered promiscuous mode
[ 1734.642624][ T9900] usb 2-1: config 0 descriptor??
[ 1734.944963][T19160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3930'.
[ 1734.997388][T18957] veth0_macvtap: entered promiscuous mode
[ 1735.185417][ T9900] usbhid 2-1:0.0: can't add hid device: -71
[ 1735.191997][ T9900] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1735.223476][T18957] veth1_macvtap: entered promiscuous mode
[ 1735.266634][ T9900] usb 2-1: USB disconnect, device number 47
[ 1735.410224][T18957] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1735.497715][T18957] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1735.525530][T18957] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1735.534604][T18957] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1735.543530][T18957] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1735.552720][T18957] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1736.924928][ T9900] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1737.166675][ T9900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1737.179137][ T9900] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1737.188776][ T9900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1737.264800][T12621] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1737.302147][ T9900] usb 1-1: config 0 descriptor??
[ 1737.455990][T12621] usb 4-1: Using ep0 maxpacket: 16
[ 1737.504443][T12621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10
[ 1737.517134][T12621] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1737.532750][T12621] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[ 1737.543336][T12621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1737.731302][T12621] usb 4-1: config 0 descriptor??
[ 1737.823367][ T9900] keytouch 0003:0926:3333.0044: fixing up Keytouch IEC report descriptor
[ 1738.037840][ T9900] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0044/input/input47
[ 1738.287796][ T9900] keytouch 0003:0926:3333.0044: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[ 1738.548405][ T9900] usb 1-1: USB disconnect, device number 9
[ 1738.687042][T12621] usbhid 4-1:0.0: can't add hid device: -71
[ 1738.693665][T12621] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1738.876174][T12621] usb 4-1: USB disconnect, device number 68
[ 1739.688959][T19203] fido_id[19203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1740.325647][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3942'.
[ 1740.454620][T16325] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1740.665710][T16325] usb 2-1: Using ep0 maxpacket: 8
[ 1740.697039][T16325] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1740.712921][T16325] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1740.724660][T16325] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1740.731635][T16325] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1740.741163][T16325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1740.873625][T16325] usb 2-1: config 0 descriptor??
[ 1741.490857][T16325] usbhid 2-1:0.0: can't add hid device: -71
[ 1741.498555][T16325] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1741.578818][T16325] usb 2-1: USB disconnect, device number 48
[ 1742.886831][T16325] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1743.134874][T12621] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1743.166008][T16325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1743.177761][T16325] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1743.187271][T16325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1743.292263][T16325] usb 2-1: config 0 descriptor??
[ 1743.354802][T12621] usb 4-1: Using ep0 maxpacket: 16
[ 1743.376718][T12621] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10
[ 1743.388792][T12621] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1743.402053][T12621] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[ 1743.411504][T12621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1743.600398][T12621] usb 4-1: config 0 descriptor??
[ 1743.704032][T19258] Process accounting resumed
[ 1743.761077][T16325] keytouch 0003:0926:3333.0045: fixing up Keytouch IEC report descriptor
[ 1743.961245][T16325] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0045/input/input48
[ 1744.091986][T12621] usbhid 4-1:0.0: can't add hid device: -71
[ 1744.098974][T12621] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1744.204032][T12621] usb 4-1: USB disconnect, device number 69
[ 1744.347487][T16325] keytouch 0003:0926:3333.0045: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[ 1744.614666][T16325] usb 2-1: USB disconnect, device number 49
[ 1744.623247][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1744.631359][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1745.188858][ T4605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1745.197158][ T4605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1745.773141][T19272] fido_id[19272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1746.414935][T12621] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1746.605094][T12621] usb 5-1: Using ep0 maxpacket: 8
[ 1746.617704][T12621] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1746.629354][T12621] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1746.639612][T12621] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1746.649290][T12621] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1746.660100][T12621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1746.875938][T12621] usb 5-1: config 0 descriptor??
[ 1747.343983][T12621] usbhid 5-1:0.0: can't add hid device: -71
[ 1747.350928][T12621] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1747.455941][T12621] usb 5-1: USB disconnect, device number 53
[ 1747.620684][T19295] Process accounting resumed
[ 1748.010272][T19305] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1748.035197][T12621] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1748.224756][T12621] usb 1-1: Using ep0 maxpacket: 16
[ 1748.273592][T12621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10
[ 1748.287753][T12621] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1748.301751][T12621] usb 1-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[ 1748.311209][T12621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1748.437478][T12621] usb 1-1: config 0 descriptor??
[ 1748.585917][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3967'.
[ 1748.984645][T12621] usbhid 1-1:0.0: can't add hid device: -71
[ 1748.991306][T12621] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1749.154828][T12621] usb 1-1: USB disconnect, device number 10
[ 1751.721046][T19345] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1751.842572][T19341] Process accounting resumed
[ 1751.846792][T16325] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1752.064896][T16325] usb 4-1: Using ep0 maxpacket: 8
[ 1752.137555][T16325] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1752.149256][T16325] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1752.160200][T16325] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1752.167497][T16325] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1752.182023][T16325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1752.185892][ T5794] Bluetooth: hci6: command 0x0406 tx timeout
[ 1752.447060][T16325] usb 4-1: config 0 descriptor??
[ 1752.592513][T19354] overlayfs: missing 'workdir'
[ 1752.912203][T16325] usbhid 4-1:0.0: can't add hid device: -71
[ 1752.919673][T16325] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1753.034884][T16325] usb 4-1: USB disconnect, device number 70
[ 1753.272844][T19357] hub 1-0:1.0: USB hub found
[ 1753.352066][T19357] hub 1-0:1.0: 1 port detected
[ 1756.102306][T19385] Process accounting resumed
[ 1757.007817][T19400] overlayfs: missing 'workdir'
[ 1757.540477][T16325] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1757.735191][T16325] usb 4-1: Using ep0 maxpacket: 8
[ 1757.772602][T16325] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1757.784748][T16325] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1757.795857][T16325] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1757.808995][T16325] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1757.821663][T16325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1758.017892][T16325] usb 4-1: config 0 descriptor??
[ 1758.483350][T16325] usbhid 4-1:0.0: can't add hid device: -71
[ 1758.490623][T16325] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1758.575274][T16325] usb 4-1: USB disconnect, device number 71
[ 1760.346763][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1760.353383][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1760.678953][T19429] Process accounting resumed
[ 1760.841638][T19436] hub 1-0:1.0: USB hub found
[ 1760.887027][T19436] hub 1-0:1.0: 1 port detected
[ 1761.906504][T16325] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1762.124056][T16325] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1762.134836][T16325] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1762.144168][T16325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1762.236887][T16325] usb 4-1: config 0 descriptor??
[ 1762.283546][T16325] pwc: Askey VC010 type 2 USB webcam detected.
[ 1762.870717][T16325] pwc: recv_control_msg error -32 req 02 val 2700
[ 1762.887730][T16325] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1762.915603][T16325] pwc: recv_control_msg error -32 req 04 val 1000
[ 1762.955141][T16325] pwc: recv_control_msg error -32 req 04 val 1300
[ 1762.976514][T16325] pwc: recv_control_msg error -32 req 04 val 1400
[ 1763.009281][T16325] pwc: recv_control_msg error -32 req 02 val 2000
[ 1763.020595][T15532] hid (null): bogus close delimiter
[ 1763.055281][T15532] hid-generic 01FF:0002:007F.0046: bogus close delimiter
[ 1763.062607][T15532] hid-generic 01FF:0002:007F.0046: item 0 0 2 10 parsing failed
[ 1763.090912][T16325] pwc: recv_control_msg error -32 req 02 val 2100
[ 1763.143186][T15532] hid-generic 01FF:0002:007F.0046: probe with driver hid-generic failed with error -22
[ 1764.570658][T19463] overlayfs: missing 'workdir'
[ 1765.010978][T16325] pwc: recv_control_msg error -71 req 04 val 1500
[ 1765.082572][T16325] pwc: recv_control_msg error -71 req 02 val 2500
[ 1765.103948][T16325] pwc: recv_control_msg error -71 req 02 val 2400
[ 1765.133479][T16325] pwc: recv_control_msg error -71 req 02 val 2600
[ 1765.215467][T16325] pwc: recv_control_msg error -71 req 02 val 2900
[ 1765.262122][T16325] pwc: recv_control_msg error -71 req 02 val 2800
[ 1765.313421][T16325] pwc: recv_control_msg error -71 req 04 val 1100
[ 1765.355722][T16325] pwc: recv_control_msg error -71 req 04 val 1200
[ 1765.419804][T16325] pwc: Registered as video103.
[ 1765.427044][T16325] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input49
[ 1765.635947][T16325] usb 4-1: USB disconnect, device number 72
[ 1766.036942][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1766.078233][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1766.091864][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1766.136938][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1766.174095][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1766.655572][T16325] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1766.935163][T16325] usb 2-1: Using ep0 maxpacket: 8
[ 1766.951004][T16325] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1766.962313][T16325] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1766.972749][T16325] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1766.979637][T16325] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1766.988964][T16325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1767.297897][T16325] usb 2-1: config 0 descriptor??
[ 1767.878261][T16325] usbhid 2-1:0.0: can't add hid device: -71
[ 1767.885402][T16325] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1767.963725][T16325] usb 2-1: USB disconnect, device number 50
[ 1768.300187][T19473] chnl_net:caif_netlink_parms(): no params data found
[ 1768.355521][ T5794] Bluetooth: hci2: command tx timeout
[ 1769.028685][T19496] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4016' sets config #0
[ 1769.280481][T19499] fuse: Bad value for 'fd'
[ 1770.107516][T19473] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1770.115128][T19473] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1770.122780][T19473] bridge_slave_0: entered allmulticast mode
[ 1770.131282][T19473] bridge_slave_0: entered promiscuous mode
[ 1770.239908][T19473] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1770.247581][T19473] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1770.255386][T19473] bridge_slave_1: entered allmulticast mode
[ 1770.263942][T19473] bridge_slave_1: entered promiscuous mode
[ 1770.434170][ T5794] Bluetooth: hci2: command tx timeout
[ 1770.759244][T19473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1770.885166][T19473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1771.256200][T19509] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1771.282223][T19473] team0: Port device team_slave_0 added
[ 1771.451863][T19473] team0: Port device team_slave_1 added
[ 1771.921761][T19473] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1771.929679][T19473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1771.961371][T19473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1772.159357][T19473] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1772.167436][T19473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1772.195012][T19473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1772.495212][ T5794] Bluetooth: hci2: command tx timeout
[ 1772.910897][T19473] hsr_slave_0: entered promiscuous mode
[ 1772.919952][T19473] hsr_slave_1: entered promiscuous mode
[ 1772.927953][T19473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1772.935942][T19473] Cannot create hsr debugfs directory
[ 1774.027922][T19536] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4029' sets config #0
[ 1774.224050][T19537] fuse: Bad value for 'fd'
[ 1774.564504][ T5794] Bluetooth: hci2: command tx timeout
[ 1775.441427][T12343] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1775.569625][T12343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1775.582921][T12343] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1775.649120][T12343] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1775.660988][T12343] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1777.291820][T19558] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1777.806471][T12343] Bluetooth: hci5: command tx timeout
[ 1778.551304][T19473] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1778.760977][T19473] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1778.956065][T19473] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1779.097815][T19473] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1779.343857][T19548] chnl_net:caif_netlink_parms(): no params data found
[ 1779.494676][T16325] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1779.694802][T16325] usb 2-1: Using ep0 maxpacket: 16
[ 1779.723960][T16325] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10
[ 1779.735700][T16325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1779.748992][T16325] usb 2-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[ 1779.758299][T16325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1779.845427][T12343] Bluetooth: hci5: command tx timeout
[ 1779.933423][T16325] usb 2-1: config 0 descriptor??
[ 1780.407227][T16325] usbhid 2-1:0.0: can't add hid device: -71
[ 1780.413673][T16325] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1780.543868][T16325] usb 2-1: USB disconnect, device number 51
[ 1781.936359][T12343] Bluetooth: hci5: command tx timeout
[ 1782.296287][T19588] fuse: Bad value for 'fd'
[ 1782.341502][T19548] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1782.349690][T19548] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1782.357394][T19548] bridge_slave_0: entered allmulticast mode
[ 1782.365976][T19548] bridge_slave_0: entered promiscuous mode
[ 1782.434956][T19548] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1782.442416][T19548] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1782.450221][T19548] bridge_slave_1: entered allmulticast mode
[ 1782.458865][T19548] bridge_slave_1: entered promiscuous mode
[ 1782.693193][T19473] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1783.289628][T19548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1783.440404][T19473] 8021q: adding VLAN 0 to HW filter on device team0
[ 1783.478435][T19548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1783.545835][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1783.553430][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1783.972304][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1783.979732][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1784.006046][T12343] Bluetooth: hci5: command tx timeout
[ 1784.011468][T19548] team0: Port device team_slave_0 added
[ 1784.134431][T19548] team0: Port device team_slave_1 added
[ 1784.543193][T19605] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1784.672759][T19548] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1784.680105][T19548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1784.706745][T19548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1785.105056][T19548] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1785.112493][T19548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1785.139108][T19548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1786.074718][T19548] hsr_slave_0: entered promiscuous mode
[ 1786.083478][T19548] hsr_slave_1: entered promiscuous mode
[ 1786.091411][T19548] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1786.099218][T19548] Cannot create hsr debugfs directory
[ 1788.411480][T16702] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1788.711527][T16702] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1788.971533][T16702] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1789.166224][T16702] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1789.822814][T19473] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1790.070059][T16702] bridge_slave_1: left allmulticast mode
[ 1790.076247][T16702] bridge_slave_1: left promiscuous mode
[ 1790.082807][T16702] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1790.195875][T16702] bridge_slave_0: left allmulticast mode
[ 1790.201855][T16702] bridge_slave_0: left promiscuous mode
[ 1790.208646][T16702] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1790.736682][T16702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1790.799211][T16702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1790.851770][T16702] bond0 (unregistering): Released all slaves
[ 1790.979359][T19548] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1791.115856][T19548] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1791.410419][T19548] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1791.528670][T19548] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1792.116395][T16702] hsr_slave_0: left promiscuous mode
[ 1792.154721][T16702] hsr_slave_1: left promiscuous mode
[ 1792.162892][T16702] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1792.171378][T16702] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1792.329252][T16702] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1792.337461][T16702] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1792.501738][T16702] veth1_macvtap: left promiscuous mode
[ 1792.509049][T16702] veth0_macvtap: left promiscuous mode
[ 1792.515325][T16702] veth1_vlan: left promiscuous mode
[ 1792.524614][T16702] veth0_vlan: left promiscuous mode
[ 1793.165508][ T5794] Bluetooth: hci1: command 0x0406 tx timeout
[ 1793.726296][T19655] fuse: Bad value for 'fd'
[ 1793.996048][T16702] team0 (unregistering): Port device team_slave_1 removed
[ 1794.088657][T16702] team0 (unregistering): Port device team_slave_0 removed
[ 1795.092752][T19473] veth0_vlan: entered promiscuous mode
[ 1795.261400][T19473] veth1_vlan: entered promiscuous mode
[ 1795.528089][T19659] binder: 19658:19659 ioctl c0306201 80000240 returned -11
[ 1795.911207][T19473] veth0_macvtap: entered promiscuous mode
[ 1796.156726][T19548] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1796.182645][T19473] veth1_macvtap: entered promiscuous mode
[ 1796.497517][T19473] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1796.645591][T19548] 8021q: adding VLAN 0 to HW filter on device team0
[ 1796.918093][T19473] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1797.034750][T14492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1797.119858][ T3742] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1797.127426][ T3742] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1797.156633][T19473] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1797.166040][T19473] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1797.175223][T19473] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1797.184373][T19473] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1797.285344][T14492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1797.328166][ T3742] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1797.335748][ T3742] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1797.430680][T14492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1797.681641][T14492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1799.127529][T14492] bond0 (unregistering): Released all slaves
[ 1800.099363][T14492] hsr_slave_0: left promiscuous mode
[ 1800.145035][T14492] hsr_slave_1: left promiscuous mode
[ 1800.235805][T14492] veth1_macvtap: left promiscuous mode
[ 1800.241571][T14492] veth0_macvtap: left promiscuous mode
[ 1800.249742][T14492] veth1_vlan: left promiscuous mode
[ 1800.255499][T14492] veth0_vlan: left promiscuous mode
[ 1802.136132][T19548] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1805.014182][T19548] veth0_vlan: entered promiscuous mode
[ 1805.133034][T19548] veth1_vlan: entered promiscuous mode
[ 1805.401242][T19732] binder: 19730:19732 ioctl c0306201 80000240 returned -11
[ 1805.526088][T19548] veth0_macvtap: entered promiscuous mode
[ 1805.621254][T19548] veth1_macvtap: entered promiscuous mode
[ 1805.858217][T19548] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1805.974120][T19548] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1806.036654][T19548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1806.045852][T19548] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1806.055047][T19548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1806.064065][T19548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1807.796908][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1807.805284][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1807.925414][   T30] audit: type=1804 audit(1751270642.096:477): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4069" name="/newroot/183/file0" dev="tmpfs" ino=1005 res=1 errno=0
[ 1808.438850][T15401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1808.447196][T15401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1809.276686][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1809.296373][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1809.317350][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1809.363498][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1809.386604][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1809.745034][T19782] binder: 19780:19782 ioctl c0306201 80000240 returned -11
[ 1811.187493][T19772] chnl_net:caif_netlink_parms(): no params data found
[ 1811.536952][T12343] Bluetooth: hci1: command tx timeout
[ 1813.605739][T12343] Bluetooth: hci1: command tx timeout
[ 1813.648231][    C1] Unknown status report in ack skb
[ 1813.906939][T19772] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1813.915328][T19772] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1813.927739][T19772] bridge_slave_0: entered allmulticast mode
[ 1813.936560][T19772] bridge_slave_0: entered promiscuous mode
[ 1814.168836][T19772] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1814.177103][T19772] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1814.185103][T19772] bridge_slave_1: entered allmulticast mode
[ 1814.193991][T19772] bridge_slave_1: entered promiscuous mode
[ 1815.123330][T19772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1815.288900][T19772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1815.616804][T19772] team0: Port device team_slave_0 added
[ 1815.685652][T12343] Bluetooth: hci1: command tx timeout
[ 1815.760088][T19772] team0: Port device team_slave_1 added
[ 1815.862336][T19840] binder: 19839:19840 ioctl c0306201 0 returned -14
[ 1816.521921][T19772] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1816.529179][T19772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1816.555803][T19772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1816.593058][T14492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1816.601404][T14492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1816.826427][T19772] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1816.833507][T19772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1816.860054][T19772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1817.267351][T15401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1817.275459][T15401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1817.747096][T19772] hsr_slave_0: entered promiscuous mode
[ 1817.756199][T19772] hsr_slave_1: entered promiscuous mode
[ 1817.764077][T19772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1817.771987][T12343] Bluetooth: hci1: command tx timeout
[ 1817.778168][T19772] Cannot create hsr debugfs directory
[ 1818.534894][T16325] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1818.764908][T16325] usb 6-1: Using ep0 maxpacket: 8
[ 1818.820131][T16325] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1818.831633][T16325] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1818.845397][T16325] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1818.852236][T16325] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1818.862618][T16325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1819.089079][T16325] usb 6-1: config 0 descriptor??
[ 1819.112050][T19854] Process accounting resumed
[ 1819.785334][T16325] usbhid 6-1:0.0: can't add hid device: -71
[ 1819.791824][T16325] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1819.951640][T16325] usb 6-1: USB disconnect, device number 33
[ 1820.113363][T19772] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1820.179691][T19772] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1820.256877][T19772] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1820.379231][T19772] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1821.096581][T16325] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1821.318869][T19869] binder: 19867:19869 ioctl c0306201 0 returned -14
[ 1821.326866][T19869] binder: 19867:19869 ioctl c0306201 80000240 returned -11
[ 1821.343268][T16325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1821.354893][T16325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1821.365557][T16325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1821.376839][T16325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1821.535788][T19872] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4093' sets config #0
[ 1821.555341][T16325] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1821.565019][T16325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1821.573169][T16325] usb 3-1: Product: syz
[ 1821.577629][T16325] usb 3-1: Manufacturer: syz
[ 1821.582358][T16325] usb 3-1: SerialNumber: syz
[ 1821.761426][T16325] usb 3-1: config 0 descriptor??
[ 1821.827697][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1821.834770][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1822.039583][T16325] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[ 1822.322217][T16325] usb 3-1: USB disconnect, device number 46
[ 1823.399467][T19772] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1824.170154][T19772] 8021q: adding VLAN 0 to HW filter on device team0
[ 1824.387701][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1824.395138][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1824.821017][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1824.828626][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1827.489660][T19772] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1828.303443][T19891] tipc: Started in network mode
[ 1828.308649][T19891] tipc: Node identity 4, cluster identity 4711
[ 1828.315107][T19891] tipc: Node number set to 4
[ 1828.498319][T16325] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1828.750828][T16325] usb 3-1: Using ep0 maxpacket: 16
[ 1828.779822][T16325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10
[ 1828.791294][T16325] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1828.810434][T16325] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[ 1828.819785][T16325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1828.885984][T12621] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1829.041218][T16325] usb 3-1: config 0 descriptor??
[ 1829.167523][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1829.184626][T12621] usb 6-1: Using ep0 maxpacket: 8
[ 1829.187769][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1829.206335][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1829.261871][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1829.270913][T12621] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1829.285640][T12621] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1829.296842][T12621] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1829.303789][T12621] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1829.313285][T12621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1829.471044][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1829.579445][T16325] usbhid 3-1:0.0: can't add hid device: -71
[ 1829.593627][T16325] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1829.623210][T16325] usb 3-1: USB disconnect, device number 47
[ 1830.263833][T12621] usb 6-1: config 0 descriptor??
[ 1830.355857][T19897] chnl_net:caif_netlink_parms(): no params data found
[ 1831.145596][T12621] usbhid 6-1:0.0: can't add hid device: -71
[ 1831.152203][T12621] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1831.297433][T12621] usb 6-1: USB disconnect, device number 34
[ 1831.388828][T19910] binder: 19909:19910 ioctl c0306201 0 returned -14
[ 1831.586190][T19913] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.4104' sets config #0
[ 1831.605723][ T5794] Bluetooth: hci4: command tx timeout
[ 1832.091239][T16702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1832.339911][T16702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1832.555291][T16702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1832.961135][T19897] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1832.976204][T19897] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1832.983866][T19897] bridge_slave_0: entered allmulticast mode
[ 1832.992658][T19897] bridge_slave_0: entered promiscuous mode
[ 1833.134796][T16702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1833.183493][T19897] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1833.191591][T19897] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1833.200923][T19897] bridge_slave_1: entered allmulticast mode
[ 1833.211929][T19897] bridge_slave_1: entered promiscuous mode
[ 1833.685480][ T5794] Bluetooth: hci4: command tx timeout
[ 1834.232697][T16702] bond0 (unregistering): Released all slaves
[ 1834.319065][T19897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1834.470584][T19772] veth0_vlan: entered promiscuous mode
[ 1834.526097][T19897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1834.560187][T16702] IPVS: stopping backup sync thread 16472 ...
[ 1834.903741][T19772] veth1_vlan: entered promiscuous mode
[ 1835.060281][T19897] team0: Port device team_slave_0 added
[ 1835.176198][T19897] team0: Port device team_slave_1 added
[ 1835.386556][T16702] hsr_slave_0: left promiscuous mode
[ 1835.414143][T16702] hsr_slave_1: left promiscuous mode
[ 1835.505778][T16702] veth1_macvtap: left promiscuous mode
[ 1835.511463][T16702] veth0_macvtap: left promiscuous mode
[ 1835.517555][T16702] veth1_vlan: left promiscuous mode
[ 1835.523013][T16702] veth0_vlan: left promiscuous mode
[ 1835.764671][ T5794] Bluetooth: hci4: command tx timeout
[ 1836.136540][T15532] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1836.614155][T15532] usb 5-1: Using ep0 maxpacket: 16
[ 1836.690475][T15532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10
[ 1836.701993][T15532] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1836.715199][T15532] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[ 1836.724633][T15532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1836.917153][T15532] usb 5-1: config 0 descriptor??
[ 1837.183540][T19897] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1837.191073][T19897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1837.217885][T19897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1837.374471][T15532] usbhid 5-1:0.0: can't add hid device: -71
[ 1837.381122][T15532] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1837.439913][T19772] veth0_macvtap: entered promiscuous mode
[ 1837.483411][T15532] usb 5-1: USB disconnect, device number 54
[ 1837.608027][T19772] veth1_macvtap: entered promiscuous mode
[ 1837.621188][T19897] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1837.629418][T19897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1837.656748][T19897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1837.853454][ T5794] Bluetooth: hci4: command tx timeout
[ 1837.930908][T19772] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1838.062540][T19772] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1838.429971][T19772] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1838.439411][T19772] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1838.449658][T19772] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1838.458916][T19772] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1838.508540][T19897] hsr_slave_0: entered promiscuous mode
[ 1838.517884][T19897] hsr_slave_1: entered promiscuous mode
[ 1838.526542][T19897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1838.534828][T19897] Cannot create hsr debugfs directory
[ 1838.926668][T16325] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1839.104791][T16325] usb 5-1: Using ep0 maxpacket: 8
[ 1839.134004][T16325] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1839.147078][T16325] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1839.157114][T16325] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1839.163906][T16325] usb 5-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[ 1839.173224][T16325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1839.353551][T16325] usb 5-1: config 0 descriptor??
[ 1839.715107][T19951] binder: 19950:19951 ioctl c0306201 80000240 returned -11
[ 1839.983678][T16325] usbhid 5-1:0.0: can't add hid device: -71
[ 1839.990556][T16325] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1840.071567][T16325] usb 5-1: USB disconnect, device number 55
[ 1841.601128][T19897] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1841.778095][T19897] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1842.426498][T19897] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1842.564389][T19897] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1843.193378][T19974] binder: 19972:19974 ioctl c0306201 80000240 returned -11
[ 1844.008931][T19980] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4123'.
[ 1844.319422][T19897] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1844.606624][T19897] 8021q: adding VLAN 0 to HW filter on device team0
[ 1844.709122][T15677] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1844.716729][T15677] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1844.869467][T15677] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1844.877059][T15677] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1845.583980][T19988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4125'.
[ 1845.593688][T19988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4125'.
[ 1847.800581][T19897] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1848.128702][ T4605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1848.359375][ T4605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1848.653866][ T4605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1848.912560][ T4605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1849.039343][T15329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1849.051809][T15329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1849.568369][T16702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1849.576550][T16702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1849.803053][T20019] binder: 20018:20019 ioctl c0306201 80000240 returned -11
[ 1850.352678][ T4605] bond0 (unregistering): Released all slaves
[ 1851.515720][ T4605] hsr_slave_0: left promiscuous mode
[ 1851.558434][ T4605] hsr_slave_1: left promiscuous mode
[ 1851.658386][ T4605] veth1_macvtap: left promiscuous mode
[ 1851.664163][ T4605] veth0_macvtap: left promiscuous mode
[ 1851.670568][ T4605] veth1_vlan: left promiscuous mode
[ 1851.676271][ T4605] veth0_vlan: left promiscuous mode
[ 1853.057912][T20049] binder: 20047:20049 ioctl c0306201 80000240 returned -11
[ 1853.663294][T19897] veth0_vlan: entered promiscuous mode
[ 1853.785627][T19897] veth1_vlan: entered promiscuous mode
[ 1853.933629][T20051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4141'.
[ 1854.269905][T19897] veth0_macvtap: entered promiscuous mode
[ 1854.331035][T19897] veth1_macvtap: entered promiscuous mode
[ 1854.467299][T19897] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1854.528368][T19897] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1854.564007][T19897] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1854.579864][T19897] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1854.590860][T19897] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1854.599983][T19897] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1856.832628][T20084] binder: 20082:20084 ioctl c0306201 80000240 returned -11
[ 1857.834901][T20096] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1862.136280][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1862.144767][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1862.318663][T20120] syz.4.4159 (20120) used greatest stack depth: 2376 bytes left
[ 1862.465277][T14492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1862.473391][T14492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1863.703920][T20128] binder: 20127:20128 ioctl c0306201 80000240 returned -11
[ 1864.719701][ T5847] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1864.924465][ T5847] usb 9-1: Using ep0 maxpacket: 16
[ 1864.951908][ T5847] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1864.962545][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1864.973895][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1864.983942][ T5847] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1864.993952][ T5847] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1865.335123][ T5847] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1865.345009][ T5847] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1865.353268][ T5847] usb 9-1: Manufacturer: syz
[ 1865.362964][ T5847] usb 9-1: config 0 descriptor??
[ 1866.014839][ T5847] rc_core: IR keymap rc-hauppauge not found
[ 1866.021209][ T5847] Registered IR keymap rc-empty
[ 1866.028309][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.088387][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.150436][ T5847] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1866.167163][ T5847] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input50
[ 1866.285108][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.308210][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.464718][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.505498][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.535359][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.715465][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.751422][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.784898][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.805375][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.824788][ T5847] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1866.849191][ T5847] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1866.867025][ T5847] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1866.995551][ T5847] usb 9-1: USB disconnect, device number 25
[ 1868.651378][T20172] binder: 20171:20172 ioctl c0306201 0 returned -14
[ 1868.708517][T20170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4173'.
[ 1869.815120][ T5852] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1870.010516][ T5852] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1870.019917][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1870.106282][ T5852] usb 8-1: config 0 descriptor??
[ 1870.129114][ T5852] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1870.588402][ T5852] cpia1 8-1:0.0: unexpected state after lo power cmd: 00
[ 1871.005029][ T5852] gspca_cpia1: usb_control_msg 02, error -71
[ 1871.011206][ T5852] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0)
[ 1871.112640][ T5852] usb 8-1: USB disconnect, device number 12
[ 1873.593451][T20202] binder: 20201:20202 ioctl c0306201 0 returned -14
[ 1875.442342][ T5847] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1875.685004][ T5876] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1875.725851][ T5847] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1875.734861][ T5847] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1875.745440][ T5847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1875.754792][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1875.766062][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1875.887863][ T5847] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1875.897467][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1875.905944][ T5847] usb 5-1: Product: syz
[ 1875.910247][ T5847] usb 5-1: Manufacturer: syz
[ 1875.952045][ T5847] cdc_wdm 5-1:1.0: skipping garbage
[ 1875.957498][ T5847] cdc_wdm 5-1:1.0: skipping garbage
[ 1875.979575][ T5876] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1875.989881][ T5876] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1876.003019][ T5876] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1876.012406][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1876.037291][ T5847] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1876.043426][ T5847] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1876.060714][ T5876] usb 8-1: config 0 descriptor??
[ 1876.122962][ T5876] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1877.835026][ T5852] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1878.041685][ T5852] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1878.051587][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1878.133447][ T5852] usb 3-1: config 0 descriptor??
[ 1878.169388][ T5852] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1878.390155][T16325] usb 5-1: USB disconnect, device number 56
[ 1878.559962][ T5852] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[ 1878.863211][ T5847] usb 8-1: USB disconnect, device number 13
[ 1878.971327][ T5852] gspca_cpia1: usb_control_msg 02, error -71
[ 1878.977854][ T5852] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[ 1879.023232][ T5852] usb 3-1: USB disconnect, device number 48
[ 1880.035737][T20232] binder: 20231:20232 ioctl c0306201 0 returned -14
[ 1880.415380][ T5852] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1880.604539][ T5852] usb 3-1: Using ep0 maxpacket: 16
[ 1880.637432][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10
[ 1880.650178][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1880.664851][ T5852] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[ 1880.674169][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1880.800350][ T5852] usb 3-1: config 0 descriptor??
[ 1881.033965][T20240] Device name cannot be null; rc = [-22]
[ 1881.117037][T12343] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1881.192190][T12343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1881.205644][T12343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1881.246870][T12343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1881.259292][T12343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1881.487894][ T5852] usbhid 3-1:0.0: can't add hid device: -71
[ 1881.494517][ T5852] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1881.510716][ T5852] usb 3-1: USB disconnect, device number 49
[ 1881.950100][T20242] chnl_net:caif_netlink_parms(): no params data found
[ 1882.727827][ T5847] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1883.005235][ T5847] usb 8-1: Using ep0 maxpacket: 32
[ 1883.048172][ T5847] usb 8-1: config 0 has no interfaces?
[ 1883.115021][ T5847] usb 8-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[ 1883.124617][ T5847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1883.132943][ T5847] usb 8-1: Product: syz
[ 1883.137459][ T5847] usb 8-1: Manufacturer: syz
[ 1883.147684][ T5847] usb 8-1: SerialNumber: syz
[ 1883.225431][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1883.231949][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1883.355724][ T5847] usb 8-1: config 0 descriptor??
[ 1883.381375][T12343] Bluetooth: hci0: command tx timeout
[ 1883.465159][T20242] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1883.472571][T20242] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1883.480348][T20242] bridge_slave_0: entered allmulticast mode
[ 1883.488995][T20242] bridge_slave_0: entered promiscuous mode
[ 1883.532130][T20242] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1883.539714][T20242] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1883.547551][T20242] bridge_slave_1: entered allmulticast mode
[ 1883.559532][T20242] bridge_slave_1: entered promiscuous mode
[ 1883.672369][T20249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1883.682473][T20249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1883.984136][ T5847] usb 8-1: USB disconnect, device number 14
[ 1884.065419][ T5852] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1884.149384][T20242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1884.225277][T20242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1884.281799][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1884.292402][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1884.305858][ T5852] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1884.315334][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1884.400181][ T5852] usb 3-1: config 0 descriptor??
[ 1884.527627][ T5852] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1884.558999][T20242] team0: Port device team_slave_0 added
[ 1884.606836][T20242] team0: Port device team_slave_1 added
[ 1884.925015][T20242] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1884.932101][T20242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1884.959426][T20242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1885.173996][T20242] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1885.181414][T20242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1885.210456][T20242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1885.451151][T12343] Bluetooth: hci0: command tx timeout
[ 1885.526059][ T5852] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1885.698998][ T5852] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1885.710195][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1885.772355][ T5852] usb 5-1: config 0 descriptor??
[ 1885.811122][ T5852] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1886.143131][T20242] hsr_slave_0: entered promiscuous mode
[ 1886.153343][T20242] hsr_slave_1: entered promiscuous mode
[ 1886.161985][T20242] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1886.170278][T20242] Cannot create hsr debugfs directory
[ 1886.247016][ T5852] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[ 1886.647661][ T5852] gspca_cpia1: usb_control_msg 02, error -71
[ 1886.653864][ T5852] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[ 1886.739493][ T5852] usb 5-1: USB disconnect, device number 57
[ 1887.021126][ T5847] usb 3-1: USB disconnect, device number 50
[ 1887.524924][T12343] Bluetooth: hci0: command tx timeout
[ 1888.126413][ T5852] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1888.373382][ T5852] usb 3-1: Using ep0 maxpacket: 16
[ 1888.468315][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10
[ 1888.479886][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1888.493674][ T5852] usb 3-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[ 1888.503342][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1888.676709][ T5852] usb 3-1: config 0 descriptor??
[ 1889.151690][ T5852] usbhid 3-1:0.0: can't add hid device: -71
[ 1889.158583][ T5852] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1889.220009][ T5852] usb 3-1: USB disconnect, device number 51
[ 1889.473209][T20242] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1889.618185][ T5794] Bluetooth: hci0: command tx timeout
[ 1889.631682][T15401] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1889.665930][T20242] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1889.773933][T15401] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1889.843570][T20242] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1889.933698][T15401] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1890.030023][T20242] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1890.156713][T15401] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1890.454984][ T5794] Bluetooth: hci2: command 0x0406 tx timeout
[ 1890.491993][T15401] bridge_slave_1: left allmulticast mode
[ 1890.498151][T15401] bridge_slave_1: left promiscuous mode
[ 1890.505309][T15401] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1890.569346][T15401] bridge_slave_0: left allmulticast mode
[ 1890.575405][T15401] bridge_slave_0: left promiscuous mode
[ 1890.582059][T15401] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1890.984681][ T5876] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1891.178648][ T5876] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1891.189430][ T5876] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1891.202838][ T5876] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1891.212531][ T5876] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1891.243153][T16325] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1891.286254][ T5876] usb 8-1: config 0 descriptor??
[ 1891.558398][ T5876] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1891.605023][T16325] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1891.615523][T16325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1891.679568][T16325] usb 5-1: config 0 descriptor??
[ 1891.746339][T16325] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1891.951520][T15401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1892.037616][T15401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1892.085727][T15401] bond0 (unregistering): Released all slaves
[ 1892.177751][T16325] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[ 1892.593083][T16325] gspca_cpia1: usb_control_msg 02, error -71
[ 1892.599771][T16325] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[ 1892.772982][T16325] usb 5-1: USB disconnect, device number 58
[ 1893.192133][T15401] hsr_slave_0: left promiscuous mode
[ 1893.265273][T15401] hsr_slave_1: left promiscuous mode
[ 1893.273578][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1893.283666][T15401] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1893.336572][T15401] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1893.344745][T15401] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1893.404044][T15401] veth1_macvtap: left promiscuous mode
[ 1893.410379][T15401] veth0_macvtap: left promiscuous mode
[ 1893.416511][T15401] veth1_vlan: left promiscuous mode
[ 1893.422087][T15401] veth0_vlan: left promiscuous mode
[ 1893.972133][T20334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4229'.
[ 1894.136100][ T5852] usb 8-1: USB disconnect, device number 15
[ 1894.206959][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059c9d200: rx timeout, send abort
[ 1894.708163][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880489cde00: rx timeout, send abort
[ 1894.721672][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059c9d200: abort rx timeout. Force session deactivation
[ 1894.852454][T15401] team0 (unregistering): Port device team_slave_1 removed
[ 1894.905977][T15401] team0 (unregistering): Port device team_slave_0 removed
[ 1895.216703][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880489cde00: abort rx timeout. Force session deactivation
[ 1895.995875][T20242] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1896.186169][T20242] 8021q: adding VLAN 0 to HW filter on device team0
[ 1896.224841][ T3742] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1896.232367][ T3742] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1896.330830][ T3742] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1896.338612][ T3742] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1897.846561][ T5876] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1898.049559][ T5876] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1898.060036][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1898.113878][T20242] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1898.117319][ T5876] usb 5-1: config 0 descriptor??
[ 1898.168340][ T5876] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1898.562889][ T5876] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[ 1898.571182][T12621] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1898.739847][T20382] binder: BINDER_SET_CONTEXT_MGR already set
[ 1898.746398][T20382] binder: 20381:20382 ioctl 4018620d 80000040 returned -16
[ 1898.805517][T12621] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1898.820827][T12621] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1898.835981][T12621] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1898.845537][T12621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1898.968597][ T5876] gspca_cpia1: usb_control_msg 02, error -71
[ 1898.976351][ T5876] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[ 1899.007094][T12621] usb 3-1: config 0 descriptor??
[ 1899.036948][ T5876] usb 5-1: USB disconnect, device number 59
[ 1899.058701][T12621] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1900.311637][T20242] veth0_vlan: entered promiscuous mode
[ 1900.393568][T20242] veth1_vlan: entered promiscuous mode
[ 1900.691161][T20242] veth0_macvtap: entered promiscuous mode
[ 1900.738041][T20242] veth1_macvtap: entered promiscuous mode
[ 1900.890867][T20242] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1900.991100][T20242] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1901.108905][T20242] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1901.118767][T20242] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1901.128171][T20242] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1901.137770][T20242] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1901.671513][ T5852] usb 3-1: USB disconnect, device number 52
[ 1903.254647][T16325] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1903.459042][T16325] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1903.468800][T16325] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1903.510626][T16325] usb 9-1: config 0 descriptor??
[ 1903.566198][T16325] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1904.002326][T16325] cpia1 9-1:0.0: unexpected state after lo power cmd: 00
[ 1904.413755][T16325] gspca_cpia1: usb_control_msg 02, error -71
[ 1904.420517][T16325] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0)
[ 1904.438204][T16325] usb 9-1: USB disconnect, device number 26
[ 1904.957956][ T5876] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1905.176067][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1905.186916][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1905.200215][ T5876] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1905.209709][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1905.410499][T20455] netlink: 'syz.7.4254': attribute type 10 has an invalid length.
[ 1905.440540][T20455] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1905.474617][T20455] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1905.504839][ T5876] usb 3-1: config 0 descriptor??
[ 1905.546912][ T5876] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1906.316450][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1906.325932][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1907.272523][T16702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1907.280687][T16702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1907.505213][T16702] =====================================================
[ 1907.522663][T16702] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xafd/0x98a0
[ 1907.534846][T16702]  n_tty_receive_buf_standard+0xafd/0x98a0
[ 1907.540998][T16702]  n_tty_receive_buf_common+0x1a68/0x2540
[ 1907.547243][T16702]  n_tty_receive_buf2+0x4c/0x60
[ 1907.552314][T16702]  tty_ldisc_receive_buf+0xc6/0x2c0
[ 1907.557848][T16702]  tty_port_default_receive_buf+0xd7/0x1a0
[ 1907.563873][T16702]  flush_to_ldisc+0x49d/0xf00
[ 1907.569016][T16702]  process_scheduled_works+0xb8e/0x1d80
[ 1907.574982][T16702]  worker_thread+0xedf/0x1590
[ 1907.579938][T16702]  kthread+0xd5c/0xf00
[ 1907.584292][T16702]  ret_from_fork+0x1e0/0x310
[ 1907.589137][T16702]  ret_from_fork_asm+0x1a/0x30
[ 1907.594544][T16702] 
[ 1907.597019][T16702] Uninit was stored to memory at:
[ 1907.602307][T16702]  n_tty_receive_buf_standard+0xaf6/0x98a0
[ 1907.608948][T16702]  n_tty_receive_buf_common+0x1a68/0x2540
[ 1907.623005][T16702]  n_tty_receive_buf2+0x4c/0x60
[ 1907.630425][T16702]  tty_ldisc_receive_buf+0xc6/0x2c0
[ 1907.636229][T16702]  tty_port_default_receive_buf+0xd7/0x1a0
[ 1907.642247][T16702]  flush_to_ldisc+0x49d/0xf00
[ 1907.647260][T16702]  process_scheduled_works+0xb8e/0x1d80
[ 1907.653051][T16702]  worker_thread+0xedf/0x1590
[ 1907.658054][T16702]  kthread+0xd5c/0xf00
[ 1907.662310][T16702]  ret_from_fork+0x1e0/0x310
[ 1907.667527][T16702]  ret_from_fork_asm+0x1a/0x30
[ 1907.672518][T16702] 
[ 1907.675080][T16702] Uninit was created at:
[ 1907.679571][T16702]  __kmalloc_noprof+0x95f/0x1310
[ 1907.684881][T16702]  __tty_buffer_request_room+0x3d4/0x7a0
[ 1907.690810][T16702]  __tty_insert_flip_string_flags+0x157/0x6f0
[ 1907.697418][T16702]  uart_insert_char+0x368/0x930
[ 1907.702503][T16702]  serial8250_read_char+0x1ba/0x670
[ 1907.708020][T16702]  serial8250_handle_irq+0x930/0x1110
[ 1907.713677][T16702]  serial8250_default_handle_irq+0x116/0x2b0
[ 1907.727810][T16702]  serial8250_interrupt+0xcb/0x400
[ 1907.733171][T16702]  __handle_irq_event_percpu+0x11c/0xbf0
[ 1907.741296][T16702]  handle_irq_event+0xe0/0x2a0
[ 1907.746422][T16702]  handle_edge_irq+0x31c/0xc80
[ 1907.751395][T16702]  __common_interrupt+0xa2/0x220
[ 1907.756810][T16702]  common_interrupt+0x94/0xb0
[ 1907.761894][T16702]  asm_common_interrupt+0x2b/0x40
[ 1907.767266][T16702] 
[ 1907.769728][T16702] CPU: 1 UID: 0 PID: 16702 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(undef) 
[ 1907.780878][T16702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1907.791230][T16702] Workqueue: events_unbound flush_to_ldisc
[ 1907.797410][T16702] =====================================================
[ 1907.804576][T16702] Disabling lock debugging due to kernel taint
[ 1907.810901][T16702] Kernel panic - not syncing: kmsan.panic set ...
[ 1907.817495][T16702] CPU: 1 UID: 0 PID: 16702 Comm: kworker/u8:6 Tainted: G    B               6.16.0-rc4-syzkaller #0 PREEMPT(undef) 
[ 1907.829878][T16702] Tainted: [B]=BAD_PAGE
[ 1907.834155][T16702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1907.844412][T16702] Workqueue: events_unbound flush_to_ldisc
[ 1907.850483][T16702] Call Trace:
[ 1907.853879][T16702]  <TASK>
[ 1907.856931][T16702]  __dump_stack+0x26/0x30
[ 1907.861439][T16702]  dump_stack_lvl+0x53/0x270
[ 1907.866209][T16702]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1907.872231][T16702]  dump_stack+0x1e/0x25
[ 1907.876556][T16702]  panic+0x4bd/0xd50
[ 1907.880669][T16702]  kmsan_report+0x31c/0x320
[ 1907.885367][T16702]  ? __msan_warning+0x1b/0x30
[ 1907.890240][T16702]  ? n_tty_receive_buf_standard+0xafd/0x98a0
[ 1907.896401][T16702]  ? n_tty_receive_buf_common+0x1a68/0x2540
[ 1907.902481][T16702]  ? n_tty_receive_buf2+0x4c/0x60
[ 1907.907671][T16702]  ? tty_ldisc_receive_buf+0xc6/0x2c0
[ 1907.913241][T16702]  ? tty_port_default_receive_buf+0xd7/0x1a0
[ 1907.919377][T16702]  ? flush_to_ldisc+0x49d/0xf00
[ 1907.924445][T16702]  ? process_scheduled_works+0xb8e/0x1d80
[ 1907.930419][T16702]  ? worker_thread+0xedf/0x1590
[ 1907.935465][T16702]  ? kthread+0xd5c/0xf00
[ 1907.939855][T16702]  ? ret_from_fork+0x1e0/0x310
[ 1907.944793][T16702]  ? ret_from_fork_asm+0x1a/0x30
[ 1907.949938][T16702]  ? ret_from_fork_asm+0x1a/0x30
[ 1907.955090][T16702]  ? stack_depot_save_flags+0x35/0x7b0
[ 1907.960759][T16702]  ? kmsan_get_metadata+0xfb/0x160
[ 1907.966076][T16702]  ? kmsan_get_metadata+0x150/0x160
[ 1907.971470][T16702]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[ 1907.977998][T16702]  ? kmsan_get_metadata+0x150/0x160
[ 1907.983423][T16702]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1907.989462][T16702]  ? n_tty_receive_char+0xfae/0x1440
[ 1907.994937][T16702]  ? kmsan_get_metadata+0xfb/0x160
[ 1908.000250][T16702]  __msan_warning+0x1b/0x30
[ 1908.004948][T16702]  n_tty_receive_buf_standard+0xafd/0x98a0
[ 1908.010973][T16702]  ? kmsan_get_metadata+0xfb/0x160
[ 1908.016279][T16702]  ? kmsan_get_metadata+0xfb/0x160
[ 1908.021597][T16702]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1908.027858][T16702]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[ 1908.034408][T16702]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1908.040734][T16702]  n_tty_receive_buf_common+0x1a68/0x2540
[ 1908.046986][T16702]  n_tty_receive_buf2+0x4c/0x60
[ 1908.052094][T16702]  ? __pfx_n_tty_receive_buf2+0x10/0x10
[ 1908.057809][T16702]  tty_ldisc_receive_buf+0xc6/0x2c0
[ 1908.063247][T16702]  tty_port_default_receive_buf+0xd7/0x1a0
[ 1908.069243][T16702]  flush_to_ldisc+0x49d/0xf00
[ 1908.074136][T16702]  ? __pfx_tty_port_default_receive_buf+0x10/0x10
[ 1908.080870][T16702]  ? __pfx_flush_to_ldisc+0x10/0x10
[ 1908.086278][T16702]  process_scheduled_works+0xb8e/0x1d80
[ 1908.092076][T16702]  worker_thread+0xedf/0x1590
[ 1908.096988][T16702]  kthread+0xd5c/0xf00
[ 1908.101218][T16702]  ? __pfx_worker_thread+0x10/0x10
[ 1908.106548][T16702]  ? __pfx_kthread+0x10/0x10
[ 1908.111301][T16702]  ret_from_fork+0x1e0/0x310
[ 1908.116055][T16702]  ? __pfx_kthread+0x10/0x10
[ 1908.120814][T16702]  ret_from_fork_asm+0x1a/0x30
[ 1908.125802][T16702]  </TASK>
[ 1908.129350][T16702] Kernel Offset: disabled
[ 1908.133772][T16702] Rebooting in 86400 seconds..